FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Tue, 26 Jul 2005
[ 10:10:35 clement ] Original commit 
apache2 www  Deleted files touched by this commit  This port version is marked as vulnerable. Version 2 of Apache web server with prefork MPM.
apache20 www  Deleted Deprecated Expired files touched by this commit  This port version is marked as vulnerable. Version 2.0.x of Apache web server with prefork MPM.
- Add fix for CAN-2005-2088
From Changelog:
  *) SECURITY: CAN-2005-2088
     core: If a request contains both Transfer-Encoding and Content-Length
     headers, remove the Content-Length, mitigating some HTTP Request
     Splitting/Spoofing attacks.  [Paul Querna, Joe Orton]

- Rename previous patch to CVE ID
- bump PORTREVISION

Security:       CAN-2005-2088
Obtained From: Apache repository

Number of ports [& non-ports] in this commit: 2

Showing files for just one port: www/apache2

show all files

hide all files


8 files found
ActionRevisionLinksFile
modify 1.223 View diff View revision /ports/head/www/apache2/Makefile
import 1.1 View revision /ports/head/www/apache2/files/patch-secfix-CAN-2005-1268
import 1.1 View revision /ports/head/www/apache2/files/patch-secfix-CAN-2005-2088
remove 1.2 View revision /ports/head/www/apache2/files/patch-secfix-ssl_engine_kernel.c
modify 1.221 View diff View revision /ports/head/www/apache20/Makefile
import 1.1 View revision /ports/head/www/apache20/files/patch-secfix-CAN-2005-1268
import 1.1 View revision /ports/head/www/apache20/files/patch-secfix-CAN-2005-2088
remove 1.2 View revision /ports/head/www/apache20/files/patch-secfix-ssl_engine_kernel.c
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
asterisk11Sep 18
squidSep 18
squid33Sep 18
dbusSep 17
nginxSep 16
nginx-develSep 16
phpmyadminSep 13
ossec-hids-clientSep 11
ossec-hids-localSep 11
ossec-hids-serverSep 11
chromiumSep 09
trafficserverSep 05
apache22*Sep 03
apache22-event-mpm*Sep 03
apache22-itk-mpm*Sep 03

8 vulnerabilities affecting 19 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24063
Broken 118
Deprecated 54
Ignore 370
Forbidden 4
Restricted 203
No CDROM 94
Vulnerable 21
Expired 6
Set to expire 49
Interactive 0
new 24 hours 6
new 48 hours8
new 7 days37
new fortnight69
new month233


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.