Date: Thu, 03 Apr 2003 21:20:09 +0800 From: "öÎ Àî" <delphij@hotmail.com> To: FreeBSD-gnats-submit@FreeBSD.org Cc: perky@FreeBSD.org Subject: ports/50564: [PATCH] update Apache2 to 2.0.45 Message-ID: <F95pSOAaaO9OJCSOV9J00050d79@hotmail.com> Resent-Message-ID: <200304031320.h33DKHGq034851@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 50564 >Category: ports >Synopsis: Update Apache2 port to 2.0.45 as response of security update >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Thu Apr 03 05:20:17 PST 2003 >Closed-Date: >Last-Modified: >Originator: Xin LI <delphij@frontfree.net> >Release: FreeBSD 5.0-CURRENT i386 >Organization: Frontfree Technology Network >Environment: System: FreeBSD chunk.frontfree.net 5.0-CURRENT FreeBSD 5.0-CURRENT #2: Thu Apr 3 18:21:01 CST 2003 delphij@chunk.frontfree.net:/usr/obj/usr/src/sys/CHUNK i386 >Description: Apache is the most popular web server around the world. Apache foundation released a new version of Apache2 port yesterday in response of security vulnerabilities discovered recently. Accroading to the change log, SECURITY [CAN-2003-0132], and Apache PR 17206 are the most serious problems. To keep the FreeBSD ported version of Apache2 safe, it's important to update it as soon as possible. >How-To-Repeat: The detailed information are to be disclosed on 8th, April. >Fix: Apply the following patch: diff -ruN apache2.orig/Makefile apache2/Makefile --- apache2.orig/Makefile Tue Feb 25 14:25:35 2003 +++ apache2/Makefile Thu Apr 3 20:41:46 2003 @@ -6,7 +6,7 @@ # PORTNAME= apache -PORTVERSION= 2.0.44 +PORTVERSION= 2.0.45 CATEGORIES= www ipv6 MASTER_SITES= http://www.apache.org/dist/httpd/ \ http://apache.mirrorcentral.com/dist/httpd/ \ @@ -138,6 +138,8 @@ @${RM} -f ${WRKSRC}/docs/docroot/*.bak @${SED} ${RC_SUB} ${FILESDIR}/apache.sh >${WRKDIR}/apache2.sh @${SED} ${RC_SUB} ${FILESDIR}/config.layout >>${WRKSRC}/config.layout + @${SED} ${RC_SUB} ${FILESDIR}/config.layout >>${WRKSRC}/srclib/apr/config.layout + @${SED} ${RC_SUB} ${FILESDIR}/config.layout >>${WRKSRC}/srclib/apr-util/config.layout @${RM} -f ${WRKSRC}/docs/manual/index.html.ko.euc-kr pre-install: diff -ruN apache2.orig/distinfo apache2/distinfo --- apache2.orig/distinfo Wed Jan 22 01:54:18 2003 +++ apache2/distinfo Thu Apr 3 20:14:52 2003 @@ -1,2 +1,2 @@ -MD5 (httpd-2.0.44.tar.gz) = 786c8d62bf18c6c88d2d82a9443cd1e1 +MD5 (httpd-2.0.45.tar.gz) = 1f33e9a2e2de06da190230fa72738d75 MD5 (powerlogo.gif) = 0f106073b3c7844cf22d4df126b27c62 diff -ruN apache2.orig/files/patch-configure apache2/files/patch-configure --- apache2.orig/files/patch-configure Wed Jan 8 19:29:55 2003 +++ apache2/files/patch-configure Thu Apr 3 20:21:52 2003 @@ -1,6 +1,6 @@ ---- configure.orig Thu Oct 3 14:43:28 2002 -+++ configure Wed Jan 8 19:58:11 2003 -@@ -1520,7 +1520,7 @@ +--- configure.orig Thu Apr 3 20:16:24 2003 ++++ configure Thu Apr 3 20:21:29 2003 +@@ -1513,7 +1513,7 @@ $srcdir/config.layout > $pldconf layout_name=$LAYOUT . $pldconf @@ -9,25 +9,25 @@ for var in prefix exec_prefix bindir sbindir libexecdir mandir \ sysconfdir datadir errordir iconsdir htdocsdir cgidir \ includedir localstatedir runtimedir logfiledir libdir \ -@@ -2627,7 +2627,7 @@ +@@ -2613,7 +2613,7 @@ + ac_sub_cache_file="$ac_popdir/$cache_file" ;; esac - # The eval makes quoting arguments work. -- if eval $ac_abs_srcdir/configure $ac_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir "$apache_apr_flags --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$bindir --datadir=$datadir --with-installbuilddir=$installbuilddir" -+ if eval $ac_abs_srcdir/configure $ac_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir "$apache_apr_flags --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$libdir --datadir=$datadir --with-installbuilddir=$installbuilddir" +- if eval $SHELL $ac_abs_srcdir/configure $ac_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir $apache_apr_flags --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$bindir --datadir=$datadir --with-installbuilddir=$installbuilddir ++ if eval $SHELL $ac_abs_srcdir/configure $ac_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir $apache_apr_flags --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$libdir --datadir=$datadir --with-installbuilddir=$installbuilddir then : echo "srclib/apr configured properly" else -@@ -2908,7 +2908,7 @@ +@@ -2888,7 +2888,7 @@ + ac_sub_cache_file="$ac_popdir/$cache_file" ;; esac - # The eval makes quoting arguments work. -- if eval $ac_abs_srcdir/configure $ac_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir "--with-apr=../apr --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$bindir" -+ if eval $ac_abs_srcdir/configure $ac_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir "--with-apr=../apr --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$libdir" +- if eval $SHELL $ac_abs_srcdir/configure $ac_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir --with-apr=../apr --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$bindir ++ if eval $SHELL $ac_abs_srcdir/configure $ac_configure_args --cache-file=$ac_sub_cache_file --srcdir=$ac_abs_srcdir --with-apr=../apr --prefix=$prefix --exec-prefix=$exec_prefix --libdir=$libdir --includedir=$includedir --bindir=$libdir then : echo "srclib/apr-util configured properly" else -@@ -15652,6 +15652,9 @@ +@@ -15634,6 +15634,9 @@ cat >>confdefs.h <<_ACEOF #define SERVER_CONFIG_FILE "${rel_sysconfdir}/${progname}.conf" diff -ruN apache2.orig/files/patch-srclib:apr:include:apr.h apache2/files/patch-srclib:apr:include:apr.h --- apache2.orig/files/patch-srclib:apr:include:apr.h Fri Nov 15 21:35:56 2002 +++ apache2/files/patch-srclib:apr:include:apr.h Thu Jan 1 08:00:00 1970 @@ -1,17 +0,0 @@ ---- srclib/apr/include/apr.h.in.orig Fri Nov 15 17:33:00 2002 -+++ srclib/apr/include/apr.h.in Fri Nov 15 17:33:10 2002 -@@ -299,11 +299,11 @@ - #endif - - /* header files for PATH_MAX, _POSIX_PATH_MAX */ --#if APR_HAVE_SYS_SYSLIMITS_H --#include <sys/syslimits.h> --#endif - #if APR_HAVE_LIMITS_H - #include <limits.h> -+#endif -+#if APR_HAVE_SYS_SYSLIMITS_H -+#include <sys/syslimits.h> - #endif - - #if defined(PATH_MAX) _________________________________________________________________ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F95pSOAaaO9OJCSOV9J00050d79>