From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Jul 28 09:20:19 2005 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1F60C16A41F for ; Thu, 28 Jul 2005 09:20:19 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 915A343D49 for ; Thu, 28 Jul 2005 09:20:18 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j6S9KItY085421 for ; Thu, 28 Jul 2005 09:20:18 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j6S9KIAo085420; Thu, 28 Jul 2005 09:20:18 GMT (envelope-from gnats) Resent-Date: Thu, 28 Jul 2005 09:20:18 GMT Resent-Message-Id: <200507280920.j6S9KIAo085420@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, KOMATSU Shinichiro Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5128D16A41F for ; Thu, 28 Jul 2005 09:16:28 +0000 (GMT) (envelope-from koma2@ksta.ms.u-tokyo.ac.jp) Received: from ksta.ms.u-tokyo.ac.jp (ksta.ms.u-tokyo.ac.jp [157.82.17.219]) by mx1.FreeBSD.org (Postfix) with ESMTP id D50D743D45 for ; Thu, 28 Jul 2005 09:16:27 +0000 (GMT) (envelope-from koma2@ksta.ms.u-tokyo.ac.jp) Received: by ksta.ms.u-tokyo.ac.jp (Postfix, from userid 1003) id 03A6756508; Thu, 28 Jul 2005 18:16:26 +0900 (JST) Message-Id: <20050728091626.03A6756508@ksta.ms.u-tokyo.ac.jp> Date: Thu, 28 Jul 2005 18:16:26 +0900 (JST) From: KOMATSU Shinichiro To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/84214: security/vuxml: entry for apache http request smuggling is incorrect X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KOMATSU Shinichiro List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jul 2005 09:20:19 -0000 >Number: 84214 >Category: ports >Synopsis: security/vuxml: entry for apache http request smuggling is incorrect >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Jul 28 09:20:18 GMT 2005 >Closed-Date: >Last-Modified: >Originator: KOMATSU Shinichiro >Release: FreeBSD 5.4-RELEASE-p5 i386 >Organization: >Environment: FreeBSD 5.4-RELEASE-p5 i386 >Description: Cannot build www/apache2 with the following error, even if www/apache2 was updated to the latest (apache-2.0.54_2): % cd /usr/ports/www/apache2 % make install ...(snip)... ===> apache-2.0.54_2 has known vulnerabilities: => apache -- http request smuggling. Reference: => Please update your ports tree and try again. *** Error code 1 Stop in /usr/local/ports/www/apache2. >How-To-Repeat: >Fix: Index: vuln.xml =================================================================== RCS file: /home/ncvs/ports/security/vuxml/vuln.xml,v retrieving revision 1.751 diff -u -r1.751 vuln.xml --- vuln.xml 28 Jul 2005 04:22:14 -0000 1.751 +++ vuln.xml 28 Jul 2005 07:57:28 -0000 @@ -38,7 +38,7 @@ apache 2.0.54_1 - 2.1.6_1 + 2.1.*2.1.6_1 apache+ipv6 >Release-Note: >Audit-Trail: >Unformatted: