From 607499afbc6f1f5c7c2baf4c08d172481106366e Mon Sep 17 00:00:00 2001 From: itojun Date: Wed, 9 Jul 2003 08:09:04 +0000 Subject: upgrade to apache-2.0.47/apr-0.9.4.2.0.47. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Changes with Apache 2.0.47 *) SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one could result in the weak ciphersuite being used in place of the strong one. [Ben Laurie] *) SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing temporary denial of service when accept() on a rarely accessed port returns certain errors. Reported by Saheed Akhtar . [Jeff Trawick] *) SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial of service when target host is IPv6 but proxy server can't create IPv6 socket. Fixed by the reporter. [Yoshioka Tsuneo ] *) SECURITY [VU#379828] Prevent the server from crashing when entering infinite loops. The new LimitInternalRecursion directive configures limits of subsequent internal redirects and nested subrequests, after which the request will be aborted. PR 19753 (and probably others). [William Rowe, Jeff Trawick, André Malo] *) core_output_filter: don't split the brigade after a FLUSH bucket if it's the last bucket. This prevents creating unneccessary empty brigades which may not be destroyed until the end of a keepalive connection. [Juan Rivera ] *) Add support for "streamy" PROPFIND responses. [Ben Collins-Sussman ] *) mod_cgid: Eliminate a double-close of a socket. This resolves various operational problems in a threaded MPM, since on the second attempt to close the socket, the same descriptor was often already in use by another thread for another purpose. [Jeff Trawick] *) mod_negotiation: Introduce "prefer-language" environment variable, which allows to influence the negotiation process on request basis to prefer a certain language. [André Malo] *) Make mod_expires' ExpiresByType work properly, including for dynamically-generated documents. [Ken Coar, Bill Stoddard] --- devel/apr/distinfo | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'devel/apr/distinfo') diff --git a/devel/apr/distinfo b/devel/apr/distinfo index bd3321b417c..3f1ab5a95e8 100644 --- a/devel/apr/distinfo +++ b/devel/apr/distinfo @@ -1,7 +1,7 @@ -$NetBSD: distinfo,v 1.4 2003/06/06 10:49:59 jmmv Exp $ +$NetBSD: distinfo,v 1.5 2003/07/09 08:09:04 itojun Exp $ -SHA1 (httpd-2.0.46.tar.gz) = c739c4c296054697e264f7d1ac19f9f1e2d47553 -Size (httpd-2.0.46.tar.gz) = 6031023 bytes +SHA1 (httpd-2.0.47.tar.gz) = dbbb06472ddc65cbc59028e42d4476b186275632 +Size (httpd-2.0.47.tar.gz) = 6217401 bytes SHA1 (patch-aa) = 17e79d6c54c855c4210f68e5facca1002d2512fa SHA1 (patch-ab) = bb9a9f0fbf5d48748f2a0826509a19b915d2bc72 SHA1 (patch-an) = 64006f0f1b5c3f20df6f47624e56aac0d99ae056 -- cgit v1.2.3