From owner-cvs-ports@FreeBSD.ORG  Thu Sep 15 05:00:29 2011
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 671581065676;
	Thu, 15 Sep 2011 05:00:29 +0000 (UTC)
	(envelope-from ohauer@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 01E928FC0A;
	Thu, 15 Sep 2011 05:00:29 +0000 (UTC)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.4/8.14.4) with ESMTP id p8F50ScA002185;
	Thu, 15 Sep 2011 05:00:28 GMT
	(envelope-from ohauer@repoman.freebsd.org)
Received: (from ohauer@localhost)
	by repoman.freebsd.org (8.14.4/8.14.4/Submit) id p8F50S9M002184;
	Thu, 15 Sep 2011 05:00:28 GMT (envelope-from ohauer)
Message-Id: <201109150500.p8F50S9M002184@repoman.freebsd.org>
From: Olli Hauer <ohauer@FreeBSD.org>
Date: Thu, 15 Sep 2011 05:00:28 +0000 (UTC)
To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: ports/www/apache22 Makefile distinfo
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Sep 2011 05:00:29 -0000

ohauer      2011-09-15 05:00:28 UTC

  FreeBSD ports repository

  Modified files:
    www/apache22         Makefile distinfo 
  Log:
  - update to version 2.2.21
  
  Addresses:
  * SECURITY: CVE-2011-3348 (cve.mitre.org)
   mod_proxy_ajp when combined with mod_proxy_balancer: Prevents
   unrecognized HTTP methods from marking ajp: balancer members
   in an error state, avoiding denial of service.
  
  * SECURITY: CVE-2011-3192 (cve.mitre.org)
   core: Further fixes to the handling of byte-range requests to use
   less memory, to avoid denial of service. This patch includes fixes
   to the patch introduced in release 2.2.20 for protocol compliance,
   as well as the MaxRanges directive.
  
  PR:             ports/160743
  Submitted by:   Jason Helfman <jhelfman@experts-exchange.com>
  
  Revision  Changes    Path
  1.293     +2 -2      ports/www/apache22/Makefile
  1.86      +2 -2      ports/www/apache22/distinfo