pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc Update apache to apache-2.0.52.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/4f63d1d10113
branches:  trunk
changeset: 481365:4f63d1d10113
user:      reed <reed%pkgsrc.org@localhost>
date:      Sat Oct 02 15:47:02 2004 +0000

description:
Update apache to apache-2.0.52.

Also added comment to www/apache2/Makefile.common to remind to
update checksum in devel/apr also.

No actual devel/apr changes seen.

Also removed www/apache2/patches/patch-ab because it is identical to
fix for security in new version.

Changes with Apache 2.0.52
  *) Use HTML 2.0 <hr> for error pages. PR 30732 [André Malo]
  *) Fix the global mutex crash when the global mutex is never allocated
     due to disabled/empty caches. [Jess Holle <jessh ptc.com>]
  *) Fix a segfault in the LDAP cache when it is configured switched
     off. [Jess Holle <jessh ptc.com>]
  *) SECURITY: CAN-2004-0811 (cve.mitre.org)
     Fix merging of the Satisfy directive, which was applied to
     the surrounding context and could allow access despite configured
     authentication.  PR 31315.  [Rici Lake <rici ricilake.net>]
  *) Fix the handling of URIs containing %2F when AllowEncodedSlashes
     is enabled.  Previously, such urls would still be rejected.
     [Jeff Trawick, Bill Stoddard]
  *) mod_mem_cache: Fixed race condition causing segfault because of memory being
     freed twice, or reused after being freed.
     [J. Clar, W. Stoddard, G. Ames]
  *) Add -l option to rotatelogs to let it use local time rather than
     UTC.  PR 24417.  [Ken Coar, Uli Zappe <uli ritual.org>]
  *) mod_log_config: Fix a bug which prevented request completion time
     from being logged for I_INSIST_ON_EXTRA_CYCLES_FOR_CLF_COMPLIANCE
     processing.  PR 29696.  [Alois Treindl <alois astro.ch>]

diffstat:

 devel/apr/distinfo           |   6 +++---
 www/apache2/Makefile         |   3 +--
 www/apache2/Makefile.common  |   3 ++-
 www/apache2/distinfo         |   7 +++----
 www/apache2/patches/patch-ab |  29 -----------------------------
 5 files changed, 9 insertions(+), 39 deletions(-)

diffs (86 lines):

diff -r c333fa6698dc -r 4f63d1d10113 devel/apr/distinfo
--- a/devel/apr/distinfo        Sat Oct 02 15:46:11 2004 +0000
+++ b/devel/apr/distinfo        Sat Oct 02 15:47:02 2004 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.9 2004/09/20 17:13:06 adrianp Exp $
+$NetBSD: distinfo,v 1.10 2004/10/02 15:47:02 reed Exp $
 
-SHA1 (httpd-2.0.51.tar.gz) = 68ce1da942226c0a6276c9c313d21fe794a95222
-Size (httpd-2.0.51.tar.gz) = 6735558 bytes
+SHA1 (httpd-2.0.52.tar.gz) = 2a22fde052adc7d7258f999cd7dd8a7592ff36e7
+Size (httpd-2.0.52.tar.gz) = 6918995 bytes
 SHA1 (patch-an) = 64006f0f1b5c3f20df6f47624e56aac0d99ae056
 SHA1 (patch-ao) = 25d44b0028772535da908895444d2bfe56f44120
 SHA1 (patch-ap) = 357776c7208407936e09891ae87d23b112a12756
diff -r c333fa6698dc -r 4f63d1d10113 www/apache2/Makefile
--- a/www/apache2/Makefile      Sat Oct 02 15:46:11 2004 +0000
+++ b/www/apache2/Makefile      Sat Oct 02 15:47:02 2004 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.46 2004/09/28 17:59:55 erh Exp $
+# $NetBSD: Makefile,v 1.47 2004/10/02 15:47:02 reed Exp $
 
 PKGNAME=               apache-${APACHE_VERSION}
-PKGREVISION=           1
 CATEGORIES=            www
 
 HOMEPAGE=              http://httpd.apache.org/
diff -r c333fa6698dc -r 4f63d1d10113 www/apache2/Makefile.common
--- a/www/apache2/Makefile.common       Sat Oct 02 15:46:11 2004 +0000
+++ b/www/apache2/Makefile.common       Sat Oct 02 15:47:02 2004 +0000
@@ -1,5 +1,6 @@
 DISTNAME=              httpd-${APACHE_VERSION}
-APACHE_VERSION=                2.0.51
+# when updating this version be sure to update the checksum in devel/apr also
+APACHE_VERSION=                2.0.52
 APR_VERSION=            0.9.5
 MASTER_SITES=          ${MASTER_SITE_APACHE:=httpd/} \
                        ${MASTER_SITE_APACHE:=httpd/old/} \
diff -r c333fa6698dc -r 4f63d1d10113 www/apache2/distinfo
--- a/www/apache2/distinfo      Sat Oct 02 15:46:11 2004 +0000
+++ b/www/apache2/distinfo      Sat Oct 02 15:47:02 2004 +0000
@@ -1,9 +1,8 @@
-$NetBSD: distinfo,v 1.29 2004/09/23 22:51:52 grant Exp $
+$NetBSD: distinfo,v 1.30 2004/10/02 15:47:02 reed Exp $
 
-SHA1 (httpd-2.0.51.tar.gz) = 68ce1da942226c0a6276c9c313d21fe794a95222
-Size (httpd-2.0.51.tar.gz) = 6735558 bytes
+SHA1 (httpd-2.0.52.tar.gz) = 2a22fde052adc7d7258f999cd7dd8a7592ff36e7
+Size (httpd-2.0.52.tar.gz) = 6918995 bytes
 SHA1 (patch-aa) = 341d546fa758ae65023ff13422a3a002a7f1686b
-SHA1 (patch-ab) = aee81f0adc8c23bfd7fd3cacbcf9a4aed67d6ec2
 SHA1 (patch-ad) = 27fa3655d6ba4840296e79fa6fd96cd9de79a33a
 SHA1 (patch-ag) = 78dcb023f524ef65928b529320932c9664ec0d01
 SHA1 (patch-ak) = f11a86b1235d5c595fa381bbb474db4fe8448215
diff -r c333fa6698dc -r 4f63d1d10113 www/apache2/patches/patch-ab
--- a/www/apache2/patches/patch-ab      Sat Oct 02 15:46:11 2004 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,29 +0,0 @@
-$NetBSD: patch-ab,v 1.3 2004/09/23 21:07:25 reed Exp $
-
-http://www.apache.org/dist/httpd/patches/apply_to_2.0.51/CAN-2004-0811.patch
-
-SECURITY: CAN-2004-0811 (cve.mitre.org)
-
-Fix merging of the Satisfy directive, which was applied to
-the surrounding context and could allow access despite configured
-authentication.  (a regression in 2.0.51)
-
-Apache PR: 31315
-Submitted by:  Rici Lake <rici ricilake.net>
-
---- server/core.c      2004/08/31 08:16:56     1.225.2.27
-+++ server/core.c      2004/09/21 13:21:16     1.225.2.28
-@@ -351,9 +351,13 @@
-     /* Otherwise we simply use the base->sec_file array
-      */
- 
-+    /* use a separate ->satisfy[] array either way */
-+    conf->satisfy = apr_palloc(a, sizeof(*conf->satisfy) * METHODS);
-     for (i = 0; i < METHODS; ++i) {
-         if (new->satisfy[i] != SATISFY_NOSPEC) {
-             conf->satisfy[i] = new->satisfy[i];
-+        } else {
-+            conf->satisfy[i] = base->satisfy[i];
-         }
-     }
- 



Home | Main Index | Thread Index | Old Index