Skip site navigation (1)Skip section navigation (2)

CVS log for ports/www/apache22/files/patch-Makefile.in

[BACK] Up to [FreeBSD] / ports / www / apache22 / files

Request diff between arbitrary revisions


Keyword substitution: kv
Default branch: MAIN


Revision 1.26: download - view: text, markup, annotated - select for diffs
Wed Feb 1 18:56:08 2012 UTC (10 days, 1 hour ago) by jgh
Branches: MAIN
CVS tags: HEAD
Diff to: previous 1.25: preferred, colored
Changes since revision 1.25: +2 -2 lines
- Update to 2.2.22

Addresses:
* SECURITY: CVE-2011-3607 (cve.mitre.org)
Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP
Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif
module is enabled, allows local users to gain privileges via a .htaccess file
with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request
header, leading to a heap-based buffer overflow.

* SECURITY: CVE-2012-0021 (cve.mitre.org)
The log_cookie function in mod_log_config.c in the mod_log_config module in the
Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not
properly handle a %{}C format string, which allows remote attackers to cause a
denial of service (daemon crash) via a cookie that lacks both a name and a
value.

* SECURITY: CVE-2012-0031 (cve.mitre.org)
scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local
users to cause a denial of service (daemon crash during shutdown) or possibly
have unspecified other impact by modifying a certain type field within a
scoreboard shared memory segment, leading to an invalid call to the free
function.

* SECURITY: CVE-2011-4317 (cve.mitre.org)
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x
through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in
place, does not properly interact with use of (1) RewriteRule and (2)
ProxyPassMatch pattern matches for configuration of a reverse proxy, which
allows remote attackers to send requests to intranet servers via a malformed URI
containing an @ (at sign) character and a : (colon) character in invalid
positions. NOTE: this vulnerability exists because of an incomplete fix for
CVE-2011-3368.

* SECURITY: CVE-2012-0053 (cve.mitre.org)
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly
restrict header information during construction of Bad Request (aka 400) error
documents, which allows remote attackers to obtain the values of HTTPOnly
cookies via vectors involving a (1) long or (2) malformed header in conjunction
with crafted web script.

* SECURITY: CVE-2011-3368 (cve.mitre.org)
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x
through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of
(1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a
reverse proxy, which allows remote attackers to send requests to intranet
servers via a malformed URI containing an initial @ (at sign) character.

PR: ports/164675
Reviewed by: pgollucci
Approved by: pgollucci, crees, rene (mentors, implicit)
With Hat: apache@

Revision 1.25: download - view: text, markup, annotated - select for diffs
Fri May 7 03:15:44 2010 UTC (21 months ago) by pgollucci
Branches: MAIN
CVS tags: RELEASE_9_0_0, RELEASE_8_2_0, RELEASE_8_1_0, RELEASE_7_4_0, RELEASE_6_EOL
Diff to: previous 1.24: preferred, colored
Changes since revision 1.24: +11 -3 lines
- Fix the owner to be root:wheel on files* when running sudo make ...
  This doesn't affect the package b/c pointyhat/tb run as root

PR:             ports/134456
With Hat:       apache@

Revision 1.24: download - view: text, markup, annotated - select for diffs
Fri May 7 00:02:15 2010 UTC (21 months, 1 week ago) by pgollucci
Branches: MAIN
Diff to: previous 1.23: preferred, colored
Changes since revision 1.23: +6 -6 lines
- Regenerate patch files with make makepatch for they have
  piled up and additional patches conflict.
  This also will help when we try to syncronize www/apache20&www/apache22
- Unconditionally apply the mod_proxy_connect patch, you just may or may
  not actually compile the file to save some logic in Makefile

With Hat:   apache@

Revision 1.23: download - view: text, markup, annotated - select for diffs
Tue Dec 11 20:22:16 2007 UTC (4 years, 2 months ago) by clement
Branches: MAIN
CVS tags: RELEASE_8_0_0, RELEASE_7_3_0, RELEASE_7_2_0, RELEASE_7_1_0, RELEASE_6_4_0, RELEASE_5_EOL
Diff to: previous 1.22: preferred, colored
Changes since revision 1.22: +6 -5 lines
- Fix slave ports [1]
- Fix plist [2]
- Fix CONFLICTS with devel/apr-svn [3]
- Fix install when index.html is modified
- Bump PORT_REVISION

PR:             ports/118348 [1], ports/118338 [2],ports/117097 [2]
                ports/90088 [3], ports/118349 [3]
Submitted by:   Andrey Beresovsky <and at sfedu dot ru> [1],
                Dimitry Andric <dimitry at andric dot com> [2],
                YAMAMOTO Takao <yamamoto at computec dot co dot jp>
                Melvyn Sopacua <melvyn atmelvyn dot homeunix dot org> [3],
                Dominic Fandrey <lon_kamikaze at gmx dot de> [3]

Revision 1.22: download - view: text, markup, annotated - select for diffs
Thu Sep 20 07:57:36 2007 UTC (4 years, 4 months ago) by clement
Branches: MAIN
CVS tags: RELEASE_7_0_0, RELEASE_6_3_0
Diff to: previous 1.21: preferred, colored
Changes since revision 1.21: +11 -10 lines
- Fix PCRE_FROM_PORTS. it wasn't processed by OPTIONS stff [1]
- Preserve index.html
- We no longer install images in default DocumentRoot (there're still in icons/)
- Various plist cleanup
- bump PORTREVISION since we are now safe with index.html

Reminded by:	bland@

Revision 1.21: download - view: text, markup, annotated - select for diffs
Wed Sep 19 21:05:23 2007 UTC (4 years, 4 months ago) by clement
Branches: MAIN
Diff to: previous 1.20: preferred, colored
Changes since revision 1.20: +59 -2 lines
- remove duplicate entry of mod_charset_lite [1]
- add PCRE_FROM_PORTS to OPTIONS
- use @dirrmtry for include/apache22
- workaround plist issues when upgrading, but it's not as safe as I
  would expect, it requires more work.

Spotted by:     bland@ [1]

Revision 1.20: download - view: text, markup, annotated - select for diffs
Sun Sep 9 14:55:17 2007 UTC (4 years, 5 months ago) by clement
Branches: MAIN
Diff to: previous 1.19: preferred, colored
Changes since revision 1.19: +3 -3 lines
- Update to 2.2.6
- Fix restart when profiles are used [1]

Submitted by:   Jarrod Sayers <jarrod at netleader dot com dot au>

Revision 1.19: download - view: text, markup, annotated - select for diffs
Sat Dec 3 22:02:58 2005 UTC (6 years, 2 months ago) by clement
Branches: MAIN
CVS tags: RELEASE_6_2_0, RELEASE_6_1_0, RELEASE_5_5_0, RELEASE_4_EOL, PRE_XORG_7
Diff to: previous 1.18: preferred, colored
Changes since revision 1.18: +10 -82 lines
- Add apache 2.2.0
  It's a temporary layout, I need more time to find the best.
  note that ${PREFIX}/www/(data|errors|cgi)(-dist) disappeared in favor of
  ${PREFIX}/www/apache22

Revision 1.18: download - view: text, markup, annotated - select for diffs
Sun Oct 30 20:39:05 2005 UTC (6 years, 3 months ago) by clement
Branches: MAIN
Diff to: previous 1.17: preferred, colored
Changes since revision 1.17: +22 -54 lines
- Update to 2.1.8
  Not all new cool stuff is supported but it will be when  2.2.0
  comes out.

Revision 1.17: download - view: text, markup, annotated - select for diffs
Sat Dec 18 11:09:00 2004 UTC (7 years, 1 month ago) by clement
Branches: MAIN
CVS tags: old_RELEASE_6_0_0, old_RELEASE_5_4_0, old_RELEASE_4_11_0
Diff to: previous 1.16: preferred, colored
Changes since revision 1.16: +15 -5 lines
- Sync with www/apache2:
  - mod_ssl fix
  - make envvars modular
- Try to make pointyhat happy [1]

Obtained from:  devel/apr [1]

Revision 1.16: download - view: text, markup, annotated - select for diffs
Mon Dec 13 18:48:03 2004 UTC (7 years, 2 months ago) by clement
Branches: MAIN
Diff to: previous 1.15: preferred, colored
Changes since revision 1.15: +35 -6 lines
- Move standard configuration files to ${EXAMPLESDIR} to not get
  dist config files installed in ${PREFIX}/etc/apache21
- Add support for Event MPM and add backport from apr to support
  APR_POLLSET_THREADSAFE (needed by Event MPM and forgotten @ release
  time) [1]
- misc cleanups
- Bump PORTREVISION to reflect all cool changes which occured today ;)

Obtained from:  apr svn repository

Revision 1.15: download - view: text, markup, annotated - select for diffs
Sat Dec 11 18:06:04 2004 UTC (7 years, 2 months ago) by clement
Branches: MAIN
Diff to: previous 1.14: preferred, colored
Changes since revision 1.14: +15 -18 lines
- Add apache 2.1.2
  This is a development version, awaiting for 2.2

Revision 1.14
Wed Mar 17 08:41:58 2004 UTC (7 years, 10 months ago) by clement
Branches: MAIN
FILE REMOVED
Changes since revision 1.13: +0 -0 lines
- Move apache21 to Attic.
  Will be back soon ;-)

Suggested by:		kris

Revision 1.13: download - view: text, markup, annotated - select for diffs
Wed Oct 29 22:46:45 2003 UTC (8 years, 3 months ago) by trevor
Branches: MAIN
CVS tags: old_RELEASE_5_2_1, old_RELEASE_5_2_0
Diff to: previous 1.12: preferred, colored
Changes since revision 1.12: +15 -8 lines
Update to 2.0.48, which has corrections for two security bugs:
- CAN-2003-0789:  information leak in mod_cgid
<URL:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0789>
- CAN-2003-0542:  buffer overflow in mod_alias and mod_rewrite
<URL:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0542>

Use a DIST_SUBDIR.  Use the DOCSDIR macro.

Add options: HTTP_PORT, IPV6_V6ONLY, NO_CGI, NO_ERROR, NO_ICONS,
NO_WWW, NO_WWWDATA, WITHOUT_AUTH, WITHOUT_DAV, WITHOUT_MODULES,
WITHOUT_MODULES, WITHOUT_PROXY, WITH_ALL_STATIC_APACHE, WITH_BERKELEYDB,
WITH_CUSTOM_AUTH, WITH_CUSTOM_PROXY, WITH_DBM, WITH_EXTRA_MODULES,
WITH_MODULES, WITH_MPM, WITH_STATIC_APACHE, WITH_STATIC_MODULES and
WITH_STATIC_SUPPORT

PR:		58654
Submitted by:	Clement Laforet (maintainer)

Revision 1.12: download - view: text, markup, annotated - select for diffs
Sat Oct 5 09:18:45 2002 UTC (9 years, 4 months ago) by kris
Branches: MAIN
CVS tags: old_old_RELEASE_5_1_0, old_old_RELEASE_5_0_0, old_old_RELEASE_4_9_0, old_old_RELEASE_4_8_0, old_old_RELEASE_4_7_0
Diff to: previous 1.11: preferred, colored
Changes since revision 1.11: +13 -10 lines
Update to apache 1.3.27 and 2.0.43.  This fixes a security vulnerability.
Mark apache13-ssl FORBIDDEN because the new version does not yet exist.

Partially based on patches submitted by below authors.

Submitted by:	"Sergey A. Osokin" <osa@freebsd.org.ru>,
		Udo Schweigert <udo.schweigert@siemens.com>,
		Lev A. Serebryakov <lev@serebryakov.spb.ru>
PR:		ports/43682, ports/43688, ports/43666, ports/43681

Revision 1.11: download - view: text, markup, annotated - select for diffs
Sat Aug 10 00:56:52 2002 UTC (9 years, 6 months ago) by perky
Branches: MAIN
Diff to: previous 1.10: preferred, colored
Changes since revision 1.10: +85 -40 lines
Update to 2.0.40

Revision 1.10: download - view: text, markup, annotated - select for diffs
Sun Jul 21 02:23:33 2002 UTC (9 years, 6 months ago) by perky
Branches: MAIN
Diff to: previous 1.9: preferred, colored
Changes since revision 1.9: +13 -3 lines
- Add a small hack for worker MPM [1]
  (worker MPM with this hack seems to work without visible problems.
   and still requires -DFORCE_THREADING_MPM to build for worker MPM.)
- Fix plist for worker MPM
- Comment out fancy modules from default httpd.conf

Tested on:      ref5.freebsd.org, several 4-stable machines [1]

Revision 1.9: download - view: text, markup, annotated - select for diffs
Fri Jun 21 23:47:25 2002 UTC (9 years, 7 months ago) by pat
Branches: MAIN
CVS tags: old_old_RELEASE_4_6_2, old_old_RELEASE_4_6_1
Diff to: previous 1.8: preferred, colored
Changes since revision 1.8: +10 -10 lines
- Sync www/apache13's change (.default -> -dist)
- Change default to WITH_BULDLED_EXPAT
- Reorder .if .endif blocks (.if WITH_MPM must appear earlier than .if
WITHOUT_CACHE)
- Some minor style fixes
- Bump PORTREVISION

PR:		ports/39635
Submitted by:	maintainer

Revision 1.8: download - view: text, markup, annotated - select for diffs
Tue Jun 18 23:02:05 2002 UTC (9 years, 7 months ago) by pat
Branches: MAIN
Diff to: previous 1.7: preferred, colored
Changes since revision 1.7: +27 -50 lines
- Update to 2.0.39, the emergency security update.
- Unmark FORBIDDEN

PR:		ports/39477
Submitted by:	maintainer

Revision 1.7: download - view: text, markup, annotated - select for diffs
Thu May 9 03:55:18 2002 UTC (9 years, 9 months ago) by cy
Branches: MAIN
CVS tags: old_old_RELEASE_4_6_0
Diff to: previous 1.6: preferred, colored
Changes since revision 1.6: +10 -9 lines
1.  Upgrade 2.0.35 --> 2.0.36

2.  Port printed message to "pw userdel www" if port removed permanently.
    However master.passwd 1.25.2.5 has user www by default, so this is no
    longer correct advice.  Removed pkg-deinstall to correct this.

PR:		37849 and 36907
Approved by:	MAINTAINER:  Hye-Shik Chang <perky@fallin.lv>

Revision 1.6: download - view: text, markup, annotated - select for diffs
Thu Apr 18 20:29:41 2002 UTC (9 years, 9 months ago) by ijliao
Branches: MAIN
Diff to: previous 1.5: preferred, colored
Changes since revision 1.5: +18 -5 lines
Respect $DESTDIR for all paths

PR:		37211
Submitted by:	maintainer

Revision 1.5: download - view: text, markup, annotated - select for diffs
Mon Apr 8 06:45:33 2002 UTC (9 years, 10 months ago) by pat
Branches: MAIN
Diff to: previous 1.4: preferred, colored
Changes since revision 1.4: +17 -11 lines
Update to 2.0.35 (first GA release!)

PR:		36834
Submitted by:	maintainer

Revision 1.4: download - view: text, markup, annotated - select for diffs
Sat Mar 23 08:31:55 2002 UTC (9 years, 10 months ago) by pat
Branches: MAIN
CVS tags: old_old_RELEASE_5_0_DP1
Diff to: previous 1.3: preferred, colored
Changes since revision 1.3: +15 -15 lines
Update to 2.0.32

PR:		36040
Submitted by:	maintainer

Revision 1.3: download - view: text, markup, annotated - select for diffs
Tue Jan 22 16:01:35 2002 UTC (10 years ago) by dwcjr
Branches: MAIN
CVS tags: old_old_RELEASE_4_5_0
Diff to: previous 1.2: preferred, colored
Changes since revision 1.2: +10 -1 lines
Fix problem where installation would overwrite existing config files
Bump PORTREVISION

Submitted by:	maintainer

Revision 1.2: download - view: text, markup, annotated - select for diffs
Mon Nov 19 22:47:47 2001 UTC (10 years, 2 months ago) by dwcjr
Branches: MAIN
Diff to: previous 1.1: preferred, colored
Changes since revision 1.1: +31 -109 lines
Update to 2.0.28

PR:		32043
Submitted by:	maintainer

Revision 1.1: download - view: text, markup, annotated - select for diffs
Fri Apr 13 04:43:48 2001 UTC (10 years, 10 months ago) by will
Branches: MAIN
CVS tags: old_old_RELEASE_4_4_0, old_old_RELEASE_4_3_0
Bring in Apache 2.0.16-beta.  Just in time for the release...

PR:		26410
Submitted by:	Chang, Hye-Shik <perky@python.or.kr>
Repocopied by:	asami

Diff request

This form allows you to request diffs between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

Log view options