[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

            Bug ID: 232687
           Summary: www/apache24: Update to 2.4.37 (Security and Bugfix
                    Release)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: security
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: [hidden email]
          Reporter: [hidden email]
             Flags: maintainer-feedback?([hidden email])
          Assignee: [hidden email]

See Changelog:
https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

maintainer-feedback requested: [Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
Bugzilla Automation <[hidden email]> has asked freebsd-apache mailing
list <[hidden email]> for maintainer-feedback:
Bug 232687: www/apache24: Update to 2.4.37 (Security and Bugfix Release)
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687



--- Description ---
See Changelog:
https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

Markus Kohlmeyer <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|Affects Only Me             |Affects Many People

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

Pascal Christen <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]
                   |                            |h

--- Comment #1 from Pascal Christen <[hidden email]> ---
Created attachment 198645
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=198645&action=edit
Apache 2.4.37 patch

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

Bernard Spil <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]
             Status|New                         |In Progress

--- Comment #2 from Bernard Spil <[hidden email]> ---
Not seeing any security fixes, am I missing something?

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

--- Comment #3 from [hidden email] ---
A commit references this bug:

Author: brnrd
Date: Sat Oct 27 14:36:42 UTC 2018
New revision: 483139
URL: https://svnweb.freebsd.org/changeset/ports/483139

Log:
  www/apache24: Update to 2.4.37

   - Adds TLSv1.3 support with security/openssl111

  PR:           232687
  Submitted by: Pascal Christen <pascal christen hostpoint.ch>
  Reported by:  Markus Kohlmeyer <rootservice gmail com>
  Reviewed by:  ohauer
  Approved by:  joneum
  Differential Revision:        https://reviews.freebsd.org/D17668

Changes:
  head/www/apache24/Makefile
  head/www/apache24/distinfo
  head/www/apache24/files/patch-modules_ssl_mod__ssl.c
  head/www/apache24/files/patch-modules_ssl_ssl__engine__init.c

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

Bernard Spil <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |https://reviews.freebsd.org
                   |                            |/D17668

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

Bernard Spil <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|In Progress                 |Closed

--- Comment #4 from Bernard Spil <[hidden email]> ---
Thanks Markus, Pascal.

Patched including fix-ups for LibreSSL.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

Kurt Jaeger <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]

--- Comment #5 from Kurt Jaeger <[hidden email]> ---
On a 11.2p4 amd64, if I try to use mod_ssl.so, this happens:                    

httpd: Syntax error on line 138 of /usr/local/etc/apache24/httpd.conf:          
Cannot load /usr/local/libexec/apache24/mod_ssl.so into server:                
/usr/local/libexec/apache24/mod_ssl.so: Undefined symbol "RAND_egd"

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 232687] www/apache24: Update to 2.4.37 (Security and Bugfix Release)

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232687

--- Comment #6 from Bernard Spil <[hidden email]> ---
(In reply to Kurt Jaeger from comment #5)
Best make that a separate PR.
Please specify the DEFAULT_VERSIONS configuration too, OpenSSL version used.
Share poudriere logs if possible.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "[hidden email]"