summaryrefslogtreecommitdiff
path: root/www/apache13-ssl
diff options
context:
space:
mode:
authorKris Kennaway <kris@FreeBSD.org>2002-10-05 09:18:45 +0000
committerKris Kennaway <kris@FreeBSD.org>2002-10-05 09:18:45 +0000
commit5c8de5fcae56b0cadf0d4dcc956b09ff4192626f (patch)
tree4271c6dc404cd3a260d7bdaf32bfa1c9d187d1e5 /www/apache13-ssl
parentFix a security bug that allows extracted filenames to contain ".." and (diff)
Update to apache 1.3.27 and 2.0.43. This fixes a security vulnerability.
Mark apache13-ssl FORBIDDEN because the new version does not yet exist. Partially based on patches submitted by below authors. Submitted by: "Sergey A. Osokin" <osa@freebsd.org.ru>, Udo Schweigert <udo.schweigert@siemens.com>, Lev A. Serebryakov <lev@serebryakov.spb.ru> PR: ports/43682, ports/43688, ports/43666, ports/43681
Notes
Notes: svn path=/head/; revision=67299
Diffstat (limited to 'www/apache13-ssl')
-rw-r--r--www/apache13-ssl/Makefile4
-rw-r--r--www/apache13-ssl/distinfo4
2 files changed, 5 insertions, 3 deletions
diff --git a/www/apache13-ssl/Makefile b/www/apache13-ssl/Makefile
index 252226565db0..f3f9bb456230 100644
--- a/www/apache13-ssl/Makefile
+++ b/www/apache13-ssl/Makefile
@@ -40,7 +40,9 @@ EXTRACT_ONLY= ${DISTNAME}${EXTRACT_SUFX}
MAINTAINER= ports@freebsd.org
-APACHE_VERSION= 1.3.26
+FORBIDDEN= "Security vulnerability; new version does not yet exist"
+
+APACHE_VERSION= 1.3.27
APACHE_SSL_VERSION= 1.48
USE_OPENSSL= YES
diff --git a/www/apache13-ssl/distinfo b/www/apache13-ssl/distinfo
index 2e32eeec93c0..f43587039276 100644
--- a/www/apache13-ssl/distinfo
+++ b/www/apache13-ssl/distinfo
@@ -1,2 +1,2 @@
-MD5 (apache_1.3.26.tar.gz) = 52e9b875597a208fca9d393e710087b6
-MD5 (apache_1.3.26+ssl_1.48.tar.gz) = c0b9574b15dd4668cfc4f27b009ae1dd
+MD5 (apache_1.3.27.tar.gz) = 65b89365a65dcad71d4402b4862beeaa
+MD5 (apache_1.3.27+ssl_1.48.tar.gz) = c0b9574b15dd4668cfc4f27b009ae1dd