d84ad3cbde
Important changes:
*) SECURITY: CAN-2004-0493 (cve.mitre.org)
Close a denial of service vulnerability identified by Georgi
Guninski which could lead to memory exhaustion with certain
input data. [Jeff Trawick]
*) SECURITY: CAN-2004-0488 (cve.mitre.org)
mod_ssl: Fix a buffer overflow in the FakeBasicAuth code for a
(trusted) client certificate subject DN which exceeds 6K in length.
[Joe Orton]
Details can be found here:
http://www.apache.org/dist/httpd/CHANGES_2.0
- Use autoconf 2.59
- Add add SUEXEC_LOGFILE tunable to set suexec logfile [1]
- Silently ignore removal of libexec/apache2 directory
- Import latest version of apr_reslit.c from apr CVS which
adds timeout feature to apr_reslist_acquire().
This is required for future mod_logio-st.
- Add explicit dependency on libiconv (so nowwe support libiconv)
- Move Windows Update fix from MASTER_SITE_LOCAL to ports tree
- add WITH_EXPERIMENTAL_PATCHES knobs:
These patches are backports from apache CVS HEAD or apr CVS HEAD.
They have positive impacts on apache responsiveness but can be
instable
and are NOT currently supported by apache/apr teams.
* exp-http-ready.patch: add "httpready" support for ACCEPT_FILTER
(currently apache 2 only support "dataready")
* exp-apr-kqueue.patch: add support for kqueue in apr_poll().
This patch greatly improves apache network performance (up to
18% according to the author, on my test box, between 13% and 21%)
Test and feedback on -STABLE are welcome ;)
For more details, please see:
http://marc.theaimsgroup.com/?t=108650227500001&r=1&w=2
Submitted by: knu [1]
NOTE:
Please set MASTER_SITE_APACHE_HTTPD to closest mirrors.
you can easily find them from:
http://www.apache.org/dyn/closer.cgi/httpd/
Thanks :
18 lines
1 KiB
Text
18 lines
1 KiB
Text
***********************************
|
|
* !!!!!!!!!!! WARNING !!!!!!!!!!! *
|
|
***********************************
|
|
Since 2.0.49_2, to run apache www server from startup, add apache2_enable="YES"
|
|
in your /etc/rc.conf.
|
|
Available variables you add/set to /etc/rc.conf.
|
|
- apache2_enable (bool): Set to "NO" by default.
|
|
Set it to "YES" to enable apache2.
|
|
- apache2ssl_enable (bool): Set to "NO" by default.
|
|
Set it to "YES" to start apache with SSL
|
|
(if <IfDefined SSL> exists in httpd.conf).
|
|
- apache2limits_enable (bool):Set to "NO" by default.
|
|
Set it to yes to run `limits $limits_args`
|
|
just before apache starts.
|
|
- apache2_flags (str): Set to "" by default.
|
|
Extra flags passed to start command.
|
|
- apache2limits_args (str): Default to "-e -C daemon"
|
|
Arguments of pre-start limits run.
|