kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/www/apache22/distinfo

25 lines
1.4 KiB
Text
Raw Normal View History

Add patch for security vulnerabilities reported in CVE-2012-0021 and CVE-2012-0053 taken from Apache SVN repository.
2012-01-29 13:29:07 +01:00
$NetBSD: distinfo,v 1.49 2012/01/29 12:29:07 tron Exp $
Apache 2.2.3 - latest stable version. Please see http://httpd.apache.org/docs/2.2/new_features_2_2.html for the list of changes.
2006-12-09 00:31:52 +01:00
Update apahce22 package to 2.2.21. Quote from release announce: The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.2.21 of the Apache HTTP Server ("Apache"). This version of Apache is principally a security and bug fix release: * SECURITY: CVE-2011-3348 (cve.mitre.org) mod_proxy_ajp when combined with mod_proxy_balancer: Prevents unrecognized HTTP methods from marking ajp: balancer members in an error state, avoiding denial of service. * SECURITY: CVE-2011-3192 (cve.mitre.org) core: Further fixes to the handling of byte-range requests to use less memory, to avoid denial of service. This patch includes fixes to the patch introduced in release 2.2.20 for protocol compliance, as well as the MaxRanges directive. Note the further advisories on the state of CVE-2011-3192 will no longer be broadcast, but will be kept up to date at; http://httpd.apache.org/security/CVE-2011-3192.txt We consider this release to be the best version of Apache available, and encourage users of all prior versions to upgrade.
2011-09-14 09:10:21 +02:00
SHA1 (httpd-2.2.21.tar.bz2) = c02f9b05da9a7e316ff37d9053dc76a57ba51cb4
RMD160 (httpd-2.2.21.tar.bz2) = 6464a03d78ab858b1288ea9eef4cd5f73b60a9f1
Size (httpd-2.2.21.tar.bz2) = 5324905 bytes
Add patch for security vulnerabilities reported in CVE-2012-0021 and CVE-2012-0053 taken from Apache SVN repository.
2012-01-29 13:29:07 +01:00
SHA1 (patch-CVE-2012-0021) = 8c44c591ffa3a4ca32de47c71d1aa8470de81f1e
Fixes omiting of pre-creating directory for pax in patch-aa. It break installation on SUA 6.0 with native pax.
2010-04-28 09:43:56 +02:00
SHA1 (patch-aa) = e0bfdf6bc9cb034bea46a390a12a5508e363c9a7
Re-add patch-ab, fixes runtime error on Interix. It initially existed originally came from PR#27567 for www/apache2. CVE-2007-3304 parts was added in rev 1.2, then whole patch file was removed in rev 1.3 as update to apache-2.2.6, because the update contains fix for CVE-2007-3304 and comments of patch-ab only mentioned about the CVE. To prevent a recurrence of such a accident, added PR#27567 as comments for patch-ab.
2009-12-26 05:51:01 +01:00
SHA1 (patch-ab) = 365cc3b0ac2d9d68ccb94f5699fe168a1c9b0150
Apache 2.2.3 - latest stable version. Please see http://httpd.apache.org/docs/2.2/new_features_2_2.html for the list of changes.
2006-12-09 00:31:52 +01:00
SHA1 (patch-ac) = 515043b5c215d49fe8f6d3191b502c978e2a2dad
SHA1 (patch-ad) = 088d6ff0e7a8acfe70b4f85a6ce58d42c935fd13
SHA1 (patch-ae) = 86b307d6eefef232b6223afc3f69e64be40bd913
Patch a minor markup glitch in the apxs(8) man page: .PP needs to be at the beginning of a line. (Properly this should bump the PKGREVISION, but I'm not going to bother.)
2011-03-20 04:18:21 +01:00
SHA1 (patch-af) = 312d3bce5e1bf6e747b5f0f313d89bf5b4636392
Apache 2.2.3 - latest stable version. Please see http://httpd.apache.org/docs/2.2/new_features_2_2.html for the list of changes.
2006-12-09 00:31:52 +01:00
SHA1 (patch-ag) = 78dcb023f524ef65928b529320932c9664ec0d01
apr-config is called apr-1-config now.
2007-02-25 01:02:35 +01:00
SHA1 (patch-ai) = 4ebc3bd580a298973928eb6d13d2ce745eac0312
Apache 2.2.3 - latest stable version. Please see http://httpd.apache.org/docs/2.2/new_features_2_2.html for the list of changes.
2006-12-09 00:31:52 +01:00
SHA1 (patch-al) = 56b9f5c2f6fd01fe5067f9210e328cbf674c68f1
SHA1 (patch-am) = ab4a2f7e5a1a3064e908b61157e7fd349c0b0c08
QNX needs a little compatibility patch.
2009-02-16 00:14:40 +01:00
SHA1 (patch-aw) = ca53d67beeb2c2c4d9adb04d3d79e24a8c427fd4
Atomically create files when using DAV to stop files being deleted on error From: https://issues.apache.org/bugzilla/show_bug.cgi?id=39815 Bump PKGREVISION. OK tron@
2011-09-12 19:18:46 +02:00
SHA1 (patch-lock.c) = 770ca03f1cb4421879bd5baa5a7c30cc91acb6e1
add revision 1209432 from http://svn.apache.org/ as patches: fix for CVE-2011-4317
2011-12-13 16:37:56 +01:00
SHA1 (patch-modules_mappers_mod_rewrite.c) = de7bbdf02dda38e2542e4967ee6f22745ec0f118
SHA1 (patch-modules_proxy_mod_proxy.c) = bab58b70eee22d7c08be9a4a9ada3fad886fa796
Atomically create files when using DAV to stop files being deleted on error From: https://issues.apache.org/bugzilla/show_bug.cgi?id=39815 Bump PKGREVISION. OK tron@
2011-09-12 19:18:46 +02:00
SHA1 (patch-repos.c) = 0e0361b91d4b0fe6c7c55a12fdfd2e6aacc710e1
Add patch for security vulnerabilities reported in CVE-2012-0021 and CVE-2012-0053 taken from Apache SVN repository.
2012-01-29 13:29:07 +01:00
SHA1 (patch-server_protocol.c) = dc99717704f53837dfd7b9c1018487a787dcbfd9
add patch for CVE-2012-0031 taken from Revision 1231058 of http://svn.apache.org/ update patch for http://secunia.com/advisories/45793/
2012-01-17 21:48:28 +01:00
SHA1 (patch-server_scoreboard.c) = 8d1e007f8d1d6a6db827a41d82369749e603a2b3
SHA1 (patch-server_util.c) = 37e9c357618a9645222cd981f0ccb04c7987fe15
Reference in a new issue Copy permalink