diff options
author | adrianp <adrianp@pkgsrc.org> | 2004-09-20 17:19:33 +0000 |
---|---|---|
committer | adrianp <adrianp@pkgsrc.org> | 2004-09-20 17:19:33 +0000 |
commit | b58cda6746612aeb89cc185d8b161d13622c76b8 (patch) | |
tree | 21898c3c6e1f335cbc40d42d87f2897b0e46a701 /www/apache2/patches/patch-ah | |
parent | 577d336e5d4fd9cad256ea97be46873380f4a20e (diff) | |
download | pkgsrc-b58cda6746612aeb89cc185d8b161d13622c76b8.tar.gz |
- Update apache to 2.0.51
- Remove patch-as and patch-ah as they are now outdated and included in the src
- ok'ed snj@, wiz@
- Thanks to epg@ for final check
This version of Apache is principally a bug fix release. Of particular note
is that 2.0.51 addresses five security vulnerabilities:
An input validation issue in IPv6 literal address parsing which can result
in a negative length parameter being passed to memcpy.
[CAN-2004-0786]
A buffer overflow in configuration file parsing could allow a local user to
gain the privileges of a httpd child if the server can be forced to parse a
carefully crafted .htaccess file.
[CAN-2004-0747]
A segfault in mod_ssl which can be triggered by a malicious remote server,
if proxying to SSL servers has been configured.
[CAN-2004-0751]
A potential infinite loop in mod_ssl which could be triggered given
particular timing of a connection abort.
[CAN-2004-0748]
A segfault in mod_dav_fs which can be remotely triggered by an indirect lock
refresh request.
[CAN-2004-0809]
For further details, see http://www.apache.org/dist/httpd/Announcement2.html
and http://apache.rmplc.co.uk/httpd/CHANGES_2.0.
Diffstat (limited to 'www/apache2/patches/patch-ah')
-rw-r--r-- | www/apache2/patches/patch-ah | 15 |
1 files changed, 0 insertions, 15 deletions
diff --git a/www/apache2/patches/patch-ah b/www/apache2/patches/patch-ah deleted file mode 100644 index 7bd670cd6e4..00000000000 --- a/www/apache2/patches/patch-ah +++ /dev/null @@ -1,15 +0,0 @@ -$NetBSD: patch-ah,v 1.6 2002/08/25 21:51:57 jlam Exp $ - ---- support/apachectl.in.orig Mon May 27 20:46:01 2002 -+++ support/apachectl.in Wed Jun 19 07:40:07 2002 -@@ -31,8 +31,8 @@ - HTTPD='@exp_sbindir@/@progname@' - # - # pick up any necessary environment variables --if test -f @exp_bindir@/envvars; then -- . @exp_bindir@/envvars -+if test -f @exp_sbindir@/envvars; then -+ . @exp_sbindir@/envvars - fi - # - # a command that outputs a formatted text version of the HTML at the |