[Lunar-commits] apache2: version bumped to 2.2.8.
Florin Braescu
florin at lunar-linux.org
Sat Jan 19 11:25:31 CET 2008
commit b975b5da2a63f5685f9b99d847273db1574e7381
Author: Florin Braescu <florin at lunar-linux.org>
Date: Sat Jan 19 12:25:31 2008 +0200
apache2: version bumped to 2.2.8.
This version of Apache is principally a bug and security fix release. The following potential security flaws are addressed:
CVE-2007-6421: mod_proxy_balancer: Correctly escape the worker
route and the worker redirect string in the HTML output of the
balancer manager.
CVE-2007-6422: Prevent crash in balancer manager if invalid balancer
name is passed as parameter.
CVE-2007-6388: mod_status: Ensure refresh parameter is numeric to
prevent a possible XSS attack caused by redirecting to other URLs.
CVE-2007-5000 : mod_imagemap: Fix a cross-site scripting issue.
---
web/apache2/DEPENDS | 12 ++++++------
web/apache2/DETAILS | 6 +++---
2 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/web/apache2/DEPENDS b/web/apache2/DEPENDS
index 5c0d325..1ddde3e 100644
--- a/web/apache2/DEPENDS
+++ b/web/apache2/DEPENDS
@@ -1,10 +1,10 @@
-depends expat &&
-depends apr-util &&
+depends expat
+depends apr-util
-optional_depends "db" \
- "--with-berkeley-db" \
- "--without-berkeley-db" \
- "for berkely db support" &&
+optional_depends "db" \
+ "--with-berkeley-db" \
+ "--without-berkeley-db" \
+ "for berkely db support"
optional_depends "gdbm" \
"--with-gdbm" \
diff --git a/web/apache2/DETAILS b/web/apache2/DETAILS
index fbf61b9..3b462cf 100644
--- a/web/apache2/DETAILS
+++ b/web/apache2/DETAILS
@@ -1,13 +1,13 @@
MODULE=apache2
- VERSION=2.2.6
+ VERSION=2.2.8
BASENAME=httpd
SOURCE=$BASENAME-$VERSION.tar.bz2
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$BASENAME-$VERSION
SOURCE_URL=http://www.apache.org/dist/$BASENAME/
- SOURCE_VFY=sha1:e6ef926ecd1f9a412af8c266239f0a6f58c63854
+ SOURCE_VFY=sha1:5074904435d3d942ce2dc96c44b07294b8eaca77
WEB_SITE=http://www.apache.org
ENTERED=20020710
- UPDATED=20070907
+ UPDATED=20080119
SHORT="A popular HTTP server"
cat << EOF
More information about the Lunar-commits
mailing list