From owner-freebsd-apache@FreeBSD.ORG Mon Mar 15 11:06:17 2010 Return-Path: Delivered-To: apache@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 845AE106564A for ; Mon, 15 Mar 2010 11:06:17 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 72B188FC22 for ; Mon, 15 Mar 2010 11:06:17 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id o2FB6HaK026243 for ; Mon, 15 Mar 2010 11:06:17 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id o2FB6GKN026241 for apache@FreeBSD.org; Mon, 15 Mar 2010 11:06:16 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 15 Mar 2010 11:06:16 GMT Message-Id: <201003151106.o2FB6GKN026241@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: apache@FreeBSD.org Cc: Subject: Current problem reports assigned to apache@FreeBSD.org X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Mar 2010 11:06:17 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o ports/144422 apache www/apache22 fails to install o ports/136598 apache [PATCH] www/mod_fastcgi: Fix non-threadsafe function o ports/136432 apache www/mod_auth_kerb does not build with MIT Kerberos (se a ports/134577 apache www/apache22: build faild with mod_auth_digest o ports/130479 apache www/apache20 and www/apache22 configure_args busted o ports/128078 apache www/apache20 -- LDAP support is broken o ports/125183 apache www/apache22 wrong SUEXEC_DOCROOT f ports/121134 apache www/mod_log_sql2-dtc scoreboard problem o ports/120229 apache www/apache20 does not pick up usernames from NIS [regr o ports/118003 apache www/apache22: with PgSQL option require only libpq.so. p ports/116984 apache [patch] www/apache13-modssl missing perl5.8 as RUN_DEP o ports/108169 apache www/apache20 wrong AP_SAFE_PATH for suEXEC a ports/101566 apache www/apache20 All .svn subdirectories in $(htdocsdir) g a ports/96953 apache www/apache22 port uses its own directories a ports/83644 apache www/apache20 add support for ndbm 15 problems total. From owner-freebsd-apache@FreeBSD.ORG Mon Mar 15 11:07:07 2010 Return-Path: Delivered-To: freebsd-apache@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 381F2106564A for ; Mon, 15 Mar 2010 11:07:07 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 0BF498FC1D for ; Mon, 15 Mar 2010 11:07:07 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id o2FB76SX026789 for ; Mon, 15 Mar 2010 11:07:06 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id o2FB76bU026787 for freebsd-apache@FreeBSD.org; Mon, 15 Mar 2010 11:07:06 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 15 Mar 2010 11:07:06 GMT Message-Id: <201003151107.o2FB76bU026787@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-apache@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-apache@FreeBSD.org X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Mar 2010 11:07:07 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o ports/144292 apache check_forensic script should be installed when install 1 problem total. From owner-freebsd-apache@FreeBSD.ORG Mon Mar 15 20:40:22 2010 Return-Path: Delivered-To: apache@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DFE81106564A for ; Mon, 15 Mar 2010 20:40:22 +0000 (UTC) (envelope-from akoga@hawaii.edu) Received: from mta10.its.hawaii.edu (mta10.its.hawaii.edu [128.171.224.146]) by mx1.freebsd.org (Postfix) with ESMTP id BB4ED8FC20 for ; Mon, 15 Mar 2010 20:40:22 +0000 (UTC) MIME-version: 1.0 Received: from pmxchannel-daemon.mta10.its.hawaii.edu by mta10.its.hawaii.edu (Sun Java(tm) System Messaging Server 6.3-7.02 (built Jun 27 2008; 32bit)) id <0KZC00C049B91K00@mta10.its.hawaii.edu>; Mon, 15 Mar 2010 09:40:21 -1000 (HST) Received: from sec.null (icspc001.ics.hawaii.edu [128.171.20.101]) by mta10.its.hawaii.edu (Sun Java(tm) System Messaging Server 6.3-7.02 (built Jun 27 2008; 32bit)) with ESMTPSA id <0KZC00DR99B8N550@mta10.its.hawaii.edu>; Mon, 15 Mar 2010 09:40:20 -1000 (HST) Date: Mon, 15 Mar 2010 09:39:33 -1000 From: akoga@hawaii.edu To: apache@FreeBSD.org, ports-security@FreeBSD.org Message-id: <4B9E8CF5.9040504@hawaii.edu> X-PMX-Version: 5.5.9.388399, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2010.3.15.192723 User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.9.1.8) Gecko/20100218 SeaMonkey/2.0.3 X-Mailman-Approved-At: Mon, 15 Mar 2010 20:46:14 +0000 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7BIT X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: ports: www/apache22 security issues X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Mar 2010 20:40:23 -0000 Vulnerability: http://httpd.apache.org/security/vulnerabilities_22.html Fix: Update to 2.2.15 Thanks! Andreas From owner-freebsd-apache@FreeBSD.ORG Tue Mar 16 22:11:37 2010 Return-Path: Delivered-To: apache@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 96F9F106564A for ; Tue, 16 Mar 2010 22:11:37 +0000 (UTC) (envelope-from chris@chrysalisnet.org) Received: from web5.hostingfreak.net (web5.hostingfreak.net [85.10.221.5]) by mx1.freebsd.org (Postfix) with ESMTP id 56ADC8FC08 for ; Tue, 16 Mar 2010 22:11:36 +0000 (UTC) Received: from localhost ([127.0.0.1]:55753 helo=CORE2DUO) by with esmtpa (Exim) }; Tue, 16 Mar 2010 22:11:50 +0000 From: "Chris" To: Date: Tue, 16 Mar 2010 22:11:26 -0000 Message-ID: <020701cac555$9f1c3b40$dd54b1c0$@org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcrFVZv2B47ksV8iRy+wiSg4C13gDw== Content-Language: en-gb x-cr-hashedpuzzle: Ae8L BY7I Brmg CY8J DSKA Dh/n EF3R EGn0 EKDg Ey13 FEGL F4hP HrT+ IxRQ JbYK JuO2; 1; YQBwAGEAYwBoAGUAQABmAHIAZQBlAGIAcwBkAC4AbwByAGcA; Sosha1_v1; 7; {D3C974EB-47E8-4105-B58B-B87F6D8FFA5E}; YwBoAHIAaQBzAEAAYwBoAHIAeQBzAGEAbABpAHMAbgBlAHQALgBvAHIAZwA=; Tue, 16 Mar 2010 22:11:21 GMT; RgByAGUAZQBCAFMARAAgAFAAbwByAHQAOgAgAHcAdwB3AC8AYQBwAGEAYwBoAGUAMgAyAA== x-cr-puzzleid: {D3C974EB-47E8-4105-B58B-B87F6D8FFA5E} X-Antivirus-Scanner: Scanned with Exiscan. Clean mail though you should still use an Antivirus X-bounce-key: hostingfreak.net-1;chris@chrysalisnet.org;1268777512;c7a843a1; Cc: Subject: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Mar 2010 22:11:37 -0000 please upgrade the freebsd port, it is again very late after the source package. Regards Chris From owner-freebsd-apache@FreeBSD.ORG Tue Mar 16 23:20:25 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 52D6110656EE for ; Tue, 16 Mar 2010 23:20:25 +0000 (UTC) (envelope-from pgollucci@p6m7g8.com) Received: from EXHUB015-4.exch015.msoutlookonline.net (exhub015-4.exch015.msoutlookonline.net [207.5.72.96]) by mx1.freebsd.org (Postfix) with ESMTP id 3FA398FC14 for ; Tue, 16 Mar 2010 23:20:25 +0000 (UTC) Received: from philip.hq.rws (174.79.184.239) by smtpx15.msoutlookonline.net (207.5.72.103) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 16 Mar 2010 16:20:25 -0700 Message-ID: <4BA01237.30500@p6m7g8.com> Date: Tue, 16 Mar 2010 23:20:23 +0000 From: "Philip M. Gollucci" Organization: P6M7G8 Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.1.7) Gecko/20100220 Thunderbird/3.0.1 MIME-Version: 1.0 To: Chris References: <020701cac555$9f1c3b40$dd54b1c0$@org> In-Reply-To: <020701cac555$9f1c3b40$dd54b1c0$@org> Content-Type: text/plain; charset="ISO-8859-1"; format=flowed Content-Transfer-Encoding: 7bit Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Mar 2010 23:20:25 -0000 On 03/16/10 22:11, Chris wrote: > please upgrade the freebsd port, it is again very late after the source > package. 1) if you mean by late "10 days" 2) ports freeze / slush 3) Its rather irrelevant without 0.9.8m openssl. I guarantee I know about the releases at least weeks before you do am and well of aware of the release and any security issues it will fix. Even if this was not the case, I do not update www/apache* without run-time tests on high volume servers 1st for a least a few days. -- ------------------------------------------------------------------------ 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 VP Apache Infrastructure; Member, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Sr. System Admin, Ridecharge Inc. Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching. From owner-freebsd-apache@FreeBSD.ORG Tue Mar 16 23:21:46 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6ABC7106566C for ; Tue, 16 Mar 2010 23:21:46 +0000 (UTC) (envelope-from pgollucci@p6m7g8.com) Received: from EXHUB015-3.exch015.msoutlookonline.net (exhub015-3.exch015.msoutlookonline.net [207.5.72.95]) by mx1.freebsd.org (Postfix) with ESMTP id 56DD58FC12 for ; Tue, 16 Mar 2010 23:21:46 +0000 (UTC) Received: from philip.hq.rws (174.79.184.239) by smtpx15.msoutlookonline.net (207.5.72.103) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 16 Mar 2010 16:21:46 -0700 Message-ID: <4BA01288.8090206@p6m7g8.com> Date: Tue, 16 Mar 2010 23:21:44 +0000 From: "Philip M. Gollucci" Organization: P6M7G8 Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.1.7) Gecko/20100220 Thunderbird/3.0.1 MIME-Version: 1.0 To: Chris References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> In-Reply-To: <4BA01237.30500@p6m7g8.com> Content-Type: text/plain; charset="ISO-8859-1"; format=flowed Content-Transfer-Encoding: 7bit Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Mar 2010 23:21:46 -0000 On 03/16/10 23:20, Philip M. Gollucci wrote: > On 03/16/10 22:11, Chris wrote: >> please upgrade the freebsd port, it is again very late after the source >> package. > > 1) if you mean by late "10 days" > 2) ports freeze / slush > 3) Its rather irrelevant without 0.9.8m openssl. > > I guarantee I know about the releases at least weeks before you do > am and well of aware of the release and any security issues it will fix. > > Even if this was not the case, I do not update www/apache* without > run-time tests on high volume servers 1st for a least a few days. I should also note, that this port bundles apr 1.4.x and apr-util 1.3.x Updating devel/apr will require a pointyhat run and and shlib bumps associated with it yada yada. -- ------------------------------------------------------------------------ 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 VP Apache Infrastructure; Member, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Sr. System Admin, Ridecharge Inc. Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching. From owner-freebsd-apache@FreeBSD.ORG Tue Mar 16 23:25:27 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DFAE7106566C for ; Tue, 16 Mar 2010 23:25:27 +0000 (UTC) (envelope-from chris@chrysalisnet.org) Received: from web5.hostingfreak.net (web5.hostingfreak.net [85.10.221.5]) by mx1.freebsd.org (Postfix) with ESMTP id A18078FC29 for ; Tue, 16 Mar 2010 23:25:27 +0000 (UTC) Received: from localhost ([127.0.0.1]:51538 helo=CORE2DUO) by with esmtpa (Exim) }; Tue, 16 Mar 2010 23:25:40 +0000 From: "Chris" To: "'Philip M. Gollucci'" References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> In-Reply-To: <4BA01288.8090206@p6m7g8.com> Date: Tue, 16 Mar 2010 23:25:15 -0000 Message-ID: <020c01cac55f$ef4a0110$cdde0330$@org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcrFX4znkrMfGAUHRVCYCEbbBseLrgAADy8g Content-Language: en-gb X-Antivirus-Scanner: Scanned with Exiscan. Clean mail though you should still use an Antivirus X-bounce-key: hostingfreak.net-1;chris@chrysalisnet.org;1268781943;6ce2a357; Cc: apache@freebsd.org Subject: RE: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Mar 2010 23:25:28 -0000 ok thanks for replying, is it a long wait for the estimated port update? -----Original Message----- From: Philip M. Gollucci [mailto:pgollucci@p6m7g8.com] Sent: 16 March 2010 23:22 To: Chris Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 On 03/16/10 23:20, Philip M. Gollucci wrote: > On 03/16/10 22:11, Chris wrote: >> please upgrade the freebsd port, it is again very late after the source >> package. > > 1) if you mean by late "10 days" > 2) ports freeze / slush > 3) Its rather irrelevant without 0.9.8m openssl. > > I guarantee I know about the releases at least weeks before you do > am and well of aware of the release and any security issues it will fix. > > Even if this was not the case, I do not update www/apache* without > run-time tests on high volume servers 1st for a least a few days. I should also note, that this port bundles apr 1.4.x and apr-util 1.3.x Updating devel/apr will require a pointyhat run and and shlib bumps associated with it yada yada. -- ------------------------------------------------------------------------ 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 VP Apache Infrastructure; Member, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Sr. System Admin, Ridecharge Inc. Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching. __________ Information from ESET NOD32 Antivirus, version of virus signature database 4950 (20100316) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com From owner-freebsd-apache@FreeBSD.ORG Tue Mar 16 23:32:56 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BC928106564A for ; Tue, 16 Mar 2010 23:32:56 +0000 (UTC) (envelope-from pgollucci@p6m7g8.com) Received: from exhub015-2.exch015.msoutlookonline.net (exhub015-2.exch015.msoutlookonline.net [207.5.72.94]) by mx1.freebsd.org (Postfix) with ESMTP id A6AD08FC17 for ; Tue, 16 Mar 2010 23:32:56 +0000 (UTC) Received: from philip.hq.rws (174.79.184.239) by smtpx15.msoutlookonline.net (207.5.72.103) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 16 Mar 2010 16:32:56 -0700 Message-ID: <4BA01526.30809@p6m7g8.com> Date: Tue, 16 Mar 2010 23:32:54 +0000 From: "Philip M. Gollucci" Organization: P6M7G8 Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.1.7) Gecko/20100220 Thunderbird/3.0.1 MIME-Version: 1.0 To: Chris References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> <020c01cac55f$ef4a0110$cdde0330$@org> In-Reply-To: <020c01cac55f$ef4a0110$cdde0330$@org> Content-Type: text/plain; charset="ISO-8859-1"; format=flowed Content-Transfer-Encoding: 7bit Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Mar 2010 23:32:56 -0000 On 03/16/10 23:25, Chris wrote: > ok thanks for replying, is it a long wait for the estimated port update? I'd say until at least 7.3 is released + the pointyhat queue time for devel/apr. Also I'm on vacation Tonight through Monday. Unless someone beats me to it (miwi expressed interest) I'd say the 29 March - 6 of April is reasonable. -- ------------------------------------------------------------------------ 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 VP Apache Infrastructure; Member, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Sr. System Admin, Ridecharge Inc. Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching. From owner-freebsd-apache@FreeBSD.ORG Tue Mar 16 23:43:17 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B13A8106564A for ; Tue, 16 Mar 2010 23:43:17 +0000 (UTC) (envelope-from chris@chrysalisnet.org) Received: from web5.hostingfreak.net (web5.hostingfreak.net [85.10.221.5]) by mx1.freebsd.org (Postfix) with ESMTP id 71E9C8FC25 for ; Tue, 16 Mar 2010 23:43:17 +0000 (UTC) Received: from localhost ([127.0.0.1]:58907 helo=CORE2DUO) by with esmtpa (Exim) }; Tue, 16 Mar 2010 23:43:31 +0000 From: "Chris" To: "'Philip M. Gollucci'" References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> <020c01cac55f$ef4a0110$cdde0330$@org> <4BA01526.30809@p6m7g8.com> In-Reply-To: <4BA01526.30809@p6m7g8.com> Date: Tue, 16 Mar 2010 23:43:06 -0000 Message-ID: <020e01cac562$6d84b140$488e13c0$@org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcrFYR4KxETJCE5jSCOVAmYI7KZpkQAATAIw Content-Language: en-gb X-Antivirus-Scanner: Scanned with Exiscan. Clean mail though you should still use an Antivirus X-bounce-key: hostingfreak.net-1;chris@chrysalisnet.org;1268783013;4d3e2f02; Cc: apache@freebsd.org Subject: RE: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Mar 2010 23:43:17 -0000 ok thanks for the info, am I right then that the security announcements are not a concern if I have openssl up to date? -----Original Message----- From: Philip M. Gollucci [mailto:pgollucci@p6m7g8.com] Sent: 16 March 2010 23:33 To: Chris Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 On 03/16/10 23:25, Chris wrote: > ok thanks for replying, is it a long wait for the estimated port update? I'd say until at least 7.3 is released + the pointyhat queue time for devel/apr. Also I'm on vacation Tonight through Monday. Unless someone beats me to it (miwi expressed interest) I'd say the 29 March - 6 of April is reasonable. -- ------------------------------------------------------------------------ 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 VP Apache Infrastructure; Member, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Sr. System Admin, Ridecharge Inc. Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching. __________ Information from ESET NOD32 Antivirus, version of virus signature database 4950 (20100316) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com From owner-freebsd-apache@FreeBSD.ORG Tue Mar 16 23:54:10 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D59FD1065670 for ; Tue, 16 Mar 2010 23:54:10 +0000 (UTC) (envelope-from pgollucci@p6m7g8.com) Received: from EXHUB015-4.exch015.msoutlookonline.net (exhub015-4.exch015.msoutlookonline.net [207.5.72.96]) by mx1.freebsd.org (Postfix) with ESMTP id BFE208FC19 for ; Tue, 16 Mar 2010 23:54:10 +0000 (UTC) Received: from philip.hq.rws (174.79.184.239) by smtpx15.msoutlookonline.net (207.5.72.103) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 16 Mar 2010 16:54:11 -0700 Message-ID: <4BA01A20.4070804@p6m7g8.com> Date: Tue, 16 Mar 2010 23:54:08 +0000 From: "Philip M. Gollucci" Organization: P6M7G8 Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.1.7) Gecko/20100220 Thunderbird/3.0.1 MIME-Version: 1.0 To: Chris References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> <020c01cac55f$ef4a0110$cdde0330$@org> <4BA01526.30809@p6m7g8.com> <020e01cac562$6d84b140$488e13c0$@org> In-Reply-To: <020e01cac562$6d84b140$488e13c0$@org> Content-Type: text/plain; charset="ISO-8859-1"; format=flowed Content-Transfer-Encoding: 7bit Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Mar 2010 23:54:10 -0000 On 03/16/10 23:43, Chris wrote: > ok thanks for the info, am I right then that the security announcements are > not a concern if I have openssl up to date? All of the ssl stuff is moot unless you actually do client side renegotiation. And then you need to have openssl at 0.9.8m and www/apache22 compiled against it not the one in base unless you're on stable/8, head. I don't recall if releng/7 or stable/7 have it in base. http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2 is 'sufficient' until 2.2.15 is in the tree. -- ------------------------------------------------------------------------ 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 VP Apache Infrastructure; Member, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Sr. System Admin, Ridecharge Inc. Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching. From owner-freebsd-apache@FreeBSD.ORG Thu Mar 18 14:46:30 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CE77F1065672 for ; Thu, 18 Mar 2010 14:46:30 +0000 (UTC) (envelope-from chris@chrysalisnet.org) Received: from web5.hostingfreak.net (web5.hostingfreak.net [85.10.221.5]) by mx1.freebsd.org (Postfix) with ESMTP id 8F6AD8FC12 for ; Thu, 18 Mar 2010 14:46:30 +0000 (UTC) Received: from localhost ([127.0.0.1]:64725 helo=CORE2DUO) by with esmtpa (Exim) }; Thu, 18 Mar 2010 14:46:50 +0000 From: "Chris" To: "'Philip M. Gollucci'" References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> <020c01cac55f$ef4a0110$cdde0330$@org> <4BA01526.30809@p6m7g8.com> <020e01cac562$6d84b140$488e13c0$@org> <4BA01A20.4070804@p6m7g8.com> In-Reply-To: <4BA01A20.4070804@p6m7g8.com> Date: Thu, 18 Mar 2010 14:46:13 -0000 Message-ID: <028701cac6a9$c22cd090$468671b0$@org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcrFZBTP4HTkh1/qTWOTHIpopQVYvgBRUVZQ Content-Language: en-gb X-Antivirus-Scanner: Scanned with Exiscan. Clean mail though you should still use an Antivirus X-bounce-key: hostingfreak.net-1;chris@chrysalisnet.org;1268923612;1f44e264; Cc: apache@freebsd.org Subject: RE: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Mar 2010 14:46:30 -0000 hi again. is it not possible to bump apache without updating apr? using the same apr as in 2.2.14? I see 4 security notices against 2.2.14 which makes me worried. I thought freebsd ports allowed commits for security reasons during a freeze/slush. -----Original Message----- From: Philip M. Gollucci [mailto:pgollucci@p6m7g8.com] Sent: 16 March 2010 23:54 To: Chris Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 On 03/16/10 23:43, Chris wrote: > ok thanks for the info, am I right then that the security announcements are > not a concern if I have openssl up to date? All of the ssl stuff is moot unless you actually do client side renegotiation. And then you need to have openssl at 0.9.8m and www/apache22 compiled against it not the one in base unless you're on stable/8, head. I don't recall if releng/7 or stable/7 have it in base. http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2 is 'sufficient' until 2.2.15 is in the tree. -- ------------------------------------------------------------------------ 1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 VP Apache Infrastructure; Member, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Sr. System Admin, Ridecharge Inc. Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching. __________ Information from ESET NOD32 Antivirus, version of virus signature database 4950 (20100316) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com From owner-freebsd-apache@FreeBSD.ORG Thu Mar 18 15:44:08 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E096F1065673 for ; Thu, 18 Mar 2010 15:44:08 +0000 (UTC) (envelope-from rnodal@gmail.com) Received: from mail-qy0-f178.google.com (mail-qy0-f178.google.com [209.85.221.178]) by mx1.freebsd.org (Postfix) with ESMTP id 9333D8FC0C for ; Thu, 18 Mar 2010 15:44:08 +0000 (UTC) Received: by qyk8 with SMTP id 8so1042687qyk.4 for ; Thu, 18 Mar 2010 08:44:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:message-id:subject:to:content-type; bh=1ndUvbVQknq4+tSljcuzcPSewcG7mOU5HdBUoFPCQ/k=; b=PZlkIGH1Zb9SrH6kO7PVyH+/VCwvpX2iQHgQzkPSDB9B+DUmay4OlWSkc+UfmoImmP ecLzw80c/fcsSIvz8OXZ6Bqt1MEszrskAibRQIddPUXNLccAib3yqk/JbVhm/xbIJ2RM IYP177hK/gexjMwjT+BkaR08A7EqFixnLYxlQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; b=TaH3JMrrocefyYAo0b0egkD9cF/J0S+R95IsCcqKSomob90OR5Bez+gVQjUvL9Kmne PsFFxR08iabeDy189fj0d98QesOHLpLJzYfdqkhptQJ7VErROA6eg2V7e+x37Kj+IjoQ rhDxdbURC4wofgpsLrRCphp33Evc66EGJvWZU= MIME-Version: 1.0 Received: by 10.229.38.147 with SMTP id b19mr2413021qce.102.1268925338565; Thu, 18 Mar 2010 08:15:38 -0700 (PDT) In-Reply-To: <028701cac6a9$c22cd090$468671b0$@org> References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> <020c01cac55f$ef4a0110$cdde0330$@org> <4BA01526.30809@p6m7g8.com> <020e01cac562$6d84b140$488e13c0$@org> <4BA01A20.4070804@p6m7g8.com> <028701cac6a9$c22cd090$468671b0$@org> From: Roger Date: Thu, 18 Mar 2010 11:15:18 -0400 Message-ID: <9d972bed1003180815s7fd5dac7y57fbaf41668d49f9@mail.gmail.com> To: apache@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Cc: Subject: Re: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Mar 2010 15:44:09 -0000 Are you sure that the security notices apply to you? If I remember correctly some of these notices only applied to windows. -r From owner-freebsd-apache@FreeBSD.ORG Thu Mar 18 17:37:13 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8590B106566C for ; Thu, 18 Mar 2010 17:37:13 +0000 (UTC) (envelope-from pgollucci@p6m7g8.com) Received: from EXHUB015-4.exch015.msoutlookonline.net (exhub015-4.exch015.msoutlookonline.net [207.5.72.96]) by mx1.freebsd.org (Postfix) with ESMTP id 6EB458FC17 for ; Thu, 18 Mar 2010 17:37:13 +0000 (UTC) Received: from [192.168.5.30] (64.134.66.219) by smtpx15.msoutlookonline.net (207.5.72.103) with Microsoft SMTP Server (TLS) id 8.2.176.0; Thu, 18 Mar 2010 10:37:12 -0700 Message-ID: <4BA264C6.80903@p6m7g8.com> Date: Thu, 18 Mar 2010 13:37:10 -0400 From: "Philip M. Gollucci" Organization: P6 Web Applications User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.8) Gecko/20100227 Lightning/1.0b1 Thunderbird/3.0.3 MIME-Version: 1.0 To: Chris References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> <020c01cac55f$ef4a0110$cdde0330$@org> <4BA01526.30809@p6m7g8.com> <020e01cac562$6d84b140$488e13c0$@org> <4BA01A20.4070804@p6m7g8.com> <028701cac6a9$c22cd090$468671b0$@org> In-Reply-To: <028701cac6a9$c22cd090$468671b0$@org> Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Mar 2010 17:37:13 -0000 On 3/18/2010 10:46 AM, Chris wrote: > hi again. > > is it not possible to bump apache without updating apr? using the same apr Yes, but it is untested. > as in 2.2.14? I see 4 security notices against 2.2.14 which makes me > worried. I thought freebsd ports allowed commits for security reasons > during a freeze/slush. Yes, they do. I'd wagger you're not using any of the modules that are vulnerable. If you are really in a rush, you are welcome to submit patches. As for me, back to vacation! From owner-freebsd-apache@FreeBSD.ORG Thu Mar 18 17:41:39 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 95854106566B for ; Thu, 18 Mar 2010 17:41:39 +0000 (UTC) (envelope-from chris@chrysalisnet.org) Received: from web5.hostingfreak.net (web5.hostingfreak.net [85.10.221.5]) by mx1.freebsd.org (Postfix) with ESMTP id 54AD68FC0A for ; Thu, 18 Mar 2010 17:41:39 +0000 (UTC) Received: from localhost ([127.0.0.1]:50611 helo=CORE2DUO) by with esmtpa (Exim) }; Thu, 18 Mar 2010 17:41:59 +0000 From: "Chris" To: "'Philip M. Gollucci'" References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> <020c01cac55f$ef4a0110$cdde0330$@org> <4BA01526.30809@p6m7g8.com> <020e01cac562$6d84b140$488e13c0$@org> <4BA01A20.4070804@p6m7g8.com> <028701cac6a9$c22cd090$468671b0$@org> <4BA264C6.80903@p6m7g8.com> In-Reply-To: <4BA264C6.80903@p6m7g8.com> Date: Thu, 18 Mar 2010 17:41:22 -0000 Message-ID: <029401cac6c2$39f05fd0$add11f70$@org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcrGwcKkN0oKXEvuS2CrcAUFf2leUgAAFjRw Content-Language: en-gb X-Antivirus-Scanner: Scanned with Exiscan. Clean mail though you should still use an Antivirus X-bounce-key: hostingfreak.net-1;chris@chrysalisnet.org;1268934121;5bba0fbe; Cc: apache@freebsd.org Subject: RE: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Mar 2010 17:41:39 -0000 enjoy your vacation :) yes I will double check if I am using those modules and I think I am not. -----Original Message----- From: Philip M. Gollucci [mailto:pgollucci@p6m7g8.com] Sent: 18 March 2010 17:37 To: Chris Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 On 3/18/2010 10:46 AM, Chris wrote: > hi again. > > is it not possible to bump apache without updating apr? using the same apr Yes, but it is untested. > as in 2.2.14? I see 4 security notices against 2.2.14 which makes me > worried. I thought freebsd ports allowed commits for security reasons > during a freeze/slush. Yes, they do. I'd wagger you're not using any of the modules that are vulnerable. If you are really in a rush, you are welcome to submit patches. As for me, back to vacation! __________ Information from ESET NOD32 Antivirus, version of virus signature database 4955 (20100318) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com