pkgsrc/www/apache2/Makefile.common

DISTNAME=		httpd-${APACHE_VERSION}
APACHE_VERSION=		2.0.47
APR_VERSION=            0.9.4
MASTER_SITES=		${MASTER_SITE_APACHE:=httpd/} \
			${MASTER_SITE_APACHE:=httpd/old/} \
			http://www.NetBSD.org/images/logos/
MAINTAINER=		jlam@NetBSD.org
Split some stuff out into a new Makefile.common so that the new deve/apr package can use it. Depend on the new apr package. Approved by jlam@netbsd.org. 2003-05-25 10:58:10 +02:00			`DISTNAME= httpd-${APACHE_VERSION}`
upgrade to apache-2.0.47/apr-0.9.4.2.0.47. Changes with Apache 2.0.47 ) SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one could result in the weak ciphersuite being used in place of the strong one. [Ben Laurie] ) SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing temporary denial of service when accept() on a rarely accessed port returns certain errors. Reported by Saheed Akhtar <S.Akhtar@talis.com>. [Jeff Trawick] ) SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial of service when target host is IPv6 but proxy server can't create IPv6 socket. Fixed by the reporter. [Yoshioka Tsuneo <tsuneo.yoshioka@f-secure.com>] ) SECURITY [VU#379828] Prevent the server from crashing when entering infinite loops. The new LimitInternalRecursion directive configures limits of subsequent internal redirects and nested subrequests, after which the request will be aborted. PR 19753 (and probably others). [William Rowe, Jeff Trawick, André Malo] ) core_output_filter: don't split the brigade after a FLUSH bucket if it's the last bucket. This prevents creating unneccessary empty brigades which may not be destroyed until the end of a keepalive connection. [Juan Rivera <Juan.Rivera@citrix.com>] ) Add support for "streamy" PROPFIND responses. [Ben Collins-Sussman <sussman@collab.net>] ) mod_cgid: Eliminate a double-close of a socket. This resolves various operational problems in a threaded MPM, since on the second attempt to close the socket, the same descriptor was often already in use by another thread for another purpose. [Jeff Trawick] ) mod_negotiation: Introduce "prefer-language" environment variable, which allows to influence the negotiation process on request basis to prefer a certain language. [André Malo] *) Make mod_expires' ExpiresByType work properly, including for dynamically-generated documents. [Ken Coar, Bill Stoddard] 2003-07-09 10:09:04 +02:00			`APACHE_VERSION= 2.0.47`
upgrade to apache 2.0.46. fixes two vulnerabilities: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0245 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0189 2003-05-29 03:02:27 +02:00			`APR_VERSION= 0.9.4`
Split some stuff out into a new Makefile.common so that the new deve/apr package can use it. Depend on the new apr package. Approved by jlam@netbsd.org. 2003-05-25 10:58:10 +02:00			`MASTER_SITES= ${MASTER_SITE_APACHE:=httpd/} \`
			`${MASTER_SITE_APACHE:=httpd/old/} \`
s/netbsd.org/NetBSD.org/ 2003-07-18 00:50:55 +02:00			`http://www.NetBSD.org/images/logos/`
			`MAINTAINER= jlam@NetBSD.org`