Subject: CVS commit: pkgsrc
To: None <source-changes@netbsd.org>
From: Johnny C. Lam <jlam@netbsd.org>
List: source-changes
Date: 10/14/2000 00:46:47
Module Name: pkgsrc
Committed By: jlam
Date: Fri Oct 13 21:46:46 UTC 2000
Modified Files:
pkgsrc/www/apache: Makefile
pkgsrc/www/apache/files: md5 patch-sum
pkgsrc/www/apache/patches: patch-ab patch-ac patch-ae
pkgsrc/www/apache/pkg: DEINSTALL INSTALL PLIST
Log Message:
Update apache to 1.3.14. Changes from version 1.3.12 are listed below.
The security fixes are:
* A problem with the Rewrite module, mod_rewrite, allowed access to
any file on the web server under certain circumstances
* The handling of Host: headers in mass virtual hosting
configurations, mod_vhost_alias, could allow access to any file on
the server
* If a cgi-bin directory is under the document root, the source to
the scripts inside it could be sent if using mass virtual hosting
The main new features include:
* Support for a directory-based configuration system. If any of the
configuration directives point to directories instead of files,
all files in that directory (and in subdirectories) will be also
parsed as configuration files
* Support name-based virtual hosting without needing to specify an
IP address in the Apache configuration file. This enables sites
that use dynamic IP addresses to support name-based virtual
hosting as well as allowing identical machines to share a
configuration file, say in a load-balanced cluster
* The SetEnvIf and BrowserMatch range of directives are now able to
be used in .htaccess files.
* Administrators who are nervous about their full server version
details being public can use the new keyword 'ProductOnly' in the
ServerTokens directive. This keyword forces the server to only
return the string "Apache" as the server version.
* The new digest authentication module, mod_auth_digest has had a
number of fixes and upgrades applied
To generate a diff of this commit:
cvs rdiff -r1.51 -r1.52 pkgsrc/www/apache/Makefile
cvs rdiff -r1.15 -r1.16 pkgsrc/www/apache/files/md5
cvs rdiff -r1.9 -r1.10 pkgsrc/www/apache/files/patch-sum
cvs rdiff -r1.7 -r1.8 pkgsrc/www/apache/patches/patch-ab
cvs rdiff -r1.3 -r1.4 pkgsrc/www/apache/patches/patch-ac
cvs rdiff -r1.2 -r1.3 pkgsrc/www/apache/patches/patch-ae
cvs rdiff -r1.2 -r1.3 pkgsrc/www/apache/pkg/DEINSTALL
cvs rdiff -r1.1 -r1.2 pkgsrc/www/apache/pkg/INSTALL
cvs rdiff -r1.16 -r1.17 pkgsrc/www/apache/pkg/PLIST
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.