a03322e020
including:
*) SECURITY: CAN-2004-0174 (cve.mitre.org)
Fix starvation issue on listening sockets where a short-lived
connection on a rarely-accessed listening socket will cause a
child to hold the accept mutex and block out new connections until
another connection arrives on that rarely-accessed listening socket.
With Apache 2.x there is no performance concern about enabling the
logic for platforms which don't need it, so it is enabled everywhere
except for Win32. [Jeff Trawick]
*) SECURITY: CAN-2004-0113 (cve.mitre.org)
mod_ssl: Fix a memory leak in plain-HTTP-on-SSL-port handling.
PR 27106. [Joe Orton]
*) SECURITY: CAN-2003-0020 (cve.mitre.org)
Escape arbitrary data before writing into the errorlog. Unescaped
errorlogs are still possible using the compile time switch
"-DAP_UNSAFE_ERROR_LOG_UNESCAPED". [Geoffrey Young, Andr<E9> Malo]
Complete changelog is at http://www.apache.org/dist/httpd/CHANGES_2.0
Package changes include:
buildlink depends increased for apache2 (but not for apr).
apr package version changes, but APR_VERSION stays same.
more files installed and added to PLIST.
share/httpd/manual/search/manual-index.cgi removed from PLIST.
Also removing share/httpd/htdocs and share/httpd directories
removed from PLIST because already handled by MAKE_DIRS.
(I think this should use OWN_DIRS.)
(jlam@ said he would like this update done during freeze.)
10 lines
523 B
Text
10 lines
523 B
Text
$NetBSD: distinfo,v 1.7 2004/03/22 19:50:16 reed Exp $
|
|
|
|
SHA1 (httpd-2.0.49.tar.gz) = 7fe1f9bc835b91d5e55aa39a792b0050a634485b
|
|
Size (httpd-2.0.49.tar.gz) = 5919279 bytes
|
|
SHA1 (patch-aa) = 17e79d6c54c855c4210f68e5facca1002d2512fa
|
|
SHA1 (patch-ab) = bb9a9f0fbf5d48748f2a0826509a19b915d2bc72
|
|
SHA1 (patch-an) = 64006f0f1b5c3f20df6f47624e56aac0d99ae056
|
|
SHA1 (patch-ao) = 25d44b0028772535da908895444d2bfe56f44120
|
|
SHA1 (patch-ap) = 357776c7208407936e09891ae87d23b112a12756
|
|
SHA1 (patch-aq) = 6cc1fb879fb5d9280f543ebe068a441e2e6560f3
|