diff options
| author | tron <tron> | 2002-10-06 12:49:59 +0000 |
|---|---|---|
| committer | tron <tron> | 2002-10-06 12:49:59 +0000 |
| commit | b08b7b8445194f546da758939f0e55669e430d7b (patch) | |
| tree | 638074527cd09e766f4edcf3630c5096dc42731b /www/apache6/distinfo | |
| parent | fae4f81a33611d70fd0d1cf94101320bf6f0f0ca (diff) | |
| download | pkgsrc-b08b7b8445194f546da758939f0e55669e430d7b.tar.gz | |
Update "apache6" package to version 1.3.27. This version fixes many bugs
discovered in version 1.3.26 including these security fixes:
- SECURITY: CAN-2002-0840 (cve.mitre.org)
Prevent a cross-site scripting vulnerability in the default
error page. The issue could only be exploited if the directive
UseCanonicalName is set to Off and a server is being run at
a domain that allows wildcard DNS. [Matthew Murphy]
- SECURITY CAN-2002-0843 (cve.mitre.org)
Fix some possible overflows in ab.c that could be exploited by
a malicious server. Reported by David Wagner. [Jim Jagielski]
- SECURITY CAN-2002-0839 (cve.mitre.org)
Add the new directive 'ShmemUIDisUser'. By default, Apache
will no longer set the uid/gid of SysV shared memory scoreboard
to User/Group, and it will therefore stay the uid/gid of
the parent Apache process. This is actually the way it should
be, however, some implementations may still require this, which
can be enabled by 'ShmemUIDisUser On'. Reported by iDefense.
[Jim Jagielski]
Diffstat (limited to 'www/apache6/distinfo')
| -rw-r--r-- | www/apache6/distinfo | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/www/apache6/distinfo b/www/apache6/distinfo index 13a09c62da5..fa1424e9ed3 100644 --- a/www/apache6/distinfo +++ b/www/apache6/distinfo @@ -1,7 +1,7 @@ -$NetBSD: distinfo,v 1.13 2002/08/25 21:51:59 jlam Exp $ +$NetBSD: distinfo,v 1.14 2002/10/06 12:50:00 tron Exp $ -SHA1 (apache_1.3.26.tar.gz) = c8ab59541267c3e570592115b280e6cb2fb2b30f -Size (apache_1.3.26.tar.gz) = 2303147 bytes +SHA1 (apache_1.3.27.tar.gz) = 2e3a2c8acd546d84f0c4a42de2b1f69dca6828f8 +Size (apache_1.3.27.tar.gz) = 2306052 bytes SHA1 (sitedrivenby.gif) = 7671e9a8ec2cad3961b268befd33c0920e07c658 Size (sitedrivenby.gif) = 8519 bytes SHA1 (apache-1.3.26-ipv6.diff.gz) = 610bba0fd90b43834abab1f574ac4c6ebbce6989 |