The following reply was made to PR pkg/31817; it has been noted by GNATS.

From: Stoned Elipot <seb@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: PR/31817 CVS commit: [pkgsrc-2005Q3] pkgsrc
Date: Tue, 18 Oct 2005 21:21:27 +0000 (UTC)

 Module Name:	pkgsrc
 Committed By:	seb
 Date:		Tue Oct 18 21:21:27 UTC 2005
 
 Modified Files:
 	pkgsrc/devel/apr [pkgsrc-2005Q3]: Makefile distinfo
 	pkgsrc/devel/apr/patches [pkgsrc-2005Q3]: patch-ao
 	pkgsrc/www/apache2 [pkgsrc-2005Q3]: Makefile Makefile.common PLIST
 	    distinfo
 	pkgsrc/www/apache2/patches [pkgsrc-2005Q3]: patch-ac
 Added Files:
 	pkgsrc/www/apache2/patches [pkgsrc-2005Q3]: patch-ao
 Removed Files:
 	pkgsrc/www/apache2/patches [pkgsrc-2005Q3]: patch-ae patch-af patch-ah
 	    patch-aj
 
 Log Message:
 Pullup ticket 838 - requested by Matthias Scheler
 sync devel/apr and www/apache2 with HEAD as precautionary/preventive step
 
 Revisions pulled up:
 - devel/apr/Makefile			1.37
 - devel/apr/distinfo			1.16
 - devel/apr/patches/patch-ao		1.3
 - www/apache2/Makefile			1.84
 - www/apache2/Makefile.common		1.19
 - www/apache2/PLIST			1.31
 - www/apache2/distinfo			1.43,1.44
 - www/apache2/patches/patch-ac		1.6
 - www/apache2/patches/patch-ae		removed
 - www/apache2/patches/patch-af		removed
 - www/apache2/patches/patch-ah		removed
 - www/apache2/patches/patch-aj		removed
 - www/apache2/patches/patch-ao		1.7
 
    Module Name:    pkgsrc
    Committed By:   joerg
    Date:           Tue Oct 11 20:10:35 UTC 2005
 
    Modified Files:
            pkgsrc/www/apache2: distinfo
    Added Files:
            pkgsrc/www/apache2/patches: patch-ao
 
    Log Message:
    Allow mod_ssl to build with OpenSSL 0.9.8. The patch is from
    Georg v. Zezschwitz on dev@httpd.apache.org.
 ---
    Module Name:    pkgsrc
    Committed By:   tron
    Date:           Mon Oct 17 10:28:46 UTC 2005
 
    Modified Files:
            pkgsrc/devel/apr: Makefile distinfo
            pkgsrc/devel/apr/patches: patch-ao
            pkgsrc/www/apache2: Makefile
 
    Log Message:
    Update "apr" package to version 0.9.7. Changes since version 0.9.6:
    - Fix crash in apr_dir_make_recursive() for relative path
      when the working directory has been deleted.  [Joe Orton]
    - Win32: fix apr_proc_mutex_trylock() to handle WAIT_TIMEOUT,
      returning APR_EBUSY.  [Ronen Mizrahi <ronen@tversity.com>]
    - Fix apr_file_read() to catch write failures when flushing pending
      writes for a buffered file.  [Joe Orton]
    - Fix apr_file_write() infinite loop on write failure for buffered
      files.  [Erik Huelsmann <ehuels gmail.com>]
    - Fix error handling where apr_uid_* and apr_gid_* could segfault
      or return APR_SUCCESS in failure cases.  Bug 34053.  [Joe Orton,
      Paul Querna]
    - Refactor Win32 condition variables code to address bugs 27654, 34336.
      [Henry Jen <henryjen ztune.net>, E Holyat <eholyat yahoo.com>]
    - Support APR_SO_SNDBUF and APR_SO_RCVBUF on Windows.  Bug 32177.
      [Sim <sgobbi datamanagement.it>, Jeff Trawick]
    - Fix detection of rwlocks on Mac OS X. [Aaron Bannert]
    - Fix issue with poll() followed by net I/O yielding EAGAIN on
      Mac OS 10.4 (Darwin 8). [Wilfredo Sanchez]
 
    Update based on patches supplied by Ben Collver. Addresses first part
    of PR pkg/31817 by Zafer Aydogan.
 ---
    Module Name:    pkgsrc
    Committed By:   tron
    Date:           Mon Oct 17 10:37:11 UTC 2005
 
    Modified Files:
            pkgsrc/www/apache2: Makefile.common PLIST distinfo
            pkgsrc/www/apache2/patches: patch-ac
    Removed Files:
            pkgsrc/www/apache2/patches: patch-ae patch-af patch-ah patch-aj
 
    Log Message:
    Update "apache2" package to version 2.0.55. Changes since version 2.0.54:
    - worker MPM: Fix a memory leak which can occur after an aborted
      connection in some limited circumstances.  [Greg Ames]
    - mod_ldap: Fix Bug 36563. Keep track of the number of attributes
      retrieved from LDAP so that all of the values can be properly
      cached even if the value is NULL.
      [Brad Nicholes, Ondrej Sury <ondrej sury.org>]
    - Added TraceEnable [on|off|extended] per-server directive to alter
      the behavior of the TRACE method.  This addresses a flaw in proxy
      conformance to RFC 2616 - previously the proxy server would accept
      a TRACE request body although the RFC prohibited it.  The default
      remains 'TraceEnable on'.  [William Rowe]
    - Add ap_log_cerror() for logging messages associated with particular
      client connections.  [Jeff Trawick]
    - Correct mod_cgid's argv[0] so that the full path can be delved by the
      invoked cgi application, to conform to the behavior of mod_cgi.
      [Pradeep Kumar S <pradeep.smani gmail.com>]
    - mod_include: Fix possible environment variable corruption when
      using nested includes.  Bug 12655.  [Joe Orton]
    - Support the suppress-error-charset setting, as with Apache 1.3.x.
      Bug 31274.  [Jeff Trawick]
    - EBCDIC: Handle chunked input from client or, with proxy, origin
      server.  [Jeff Trawick]
    - Fix bad globbing comparison which could result in getting
      a directory listing when a file was requested. Bug 34512.
      [sean <infamous41md hotmail.com>]
    - Fix core dump if mod_auth_ldap's mod_auth_ldap_auth_checker()
      was called even if mod_auth_ldap_check_user_id() was not
      (or if it didn't succeed) for non-authoritative cases.
      [Jim Jagielski]
    - mod_proxy: Fix over-eager handling of '%' for reverse proxies.
      Bug 15207.  [Jim Jagielski]
    - mod_ldap: Fix various shared memory cache handling bugs.
      Bug 34209.  [Joe Orton]
    - Fix a file descriptor leak when starting piped loggers.  Bug 33748.
      [Joe Orton]
    - mod_ldap: Avoid segfaults when opening connections if using a version
      of OpenLDAP older than 2.2.21.  Bug 34618.  [Brad Nicholes]
    - mod_ssl: Fix build with OpenSSL 0.9.8.  Bug 35757.  [William Rowe]
    - proxy HTTP: If a response contains both Transfer-Encoding and a
      Content-Length, remove the Content-Length and don't reuse the
      connection, mitigating some HTTP Response Splitting attacks.
      [Jeff Trawick]
    - Prevent hangs of child processes when writing to piped loggers at
      the time of graceful restart.  Bug 26467.  [Jeff Trawick]
    - SECURITY: CAN-2005-1268 (cve.mitre.org)
      mod_ssl: Fix off-by-one overflow whilst printing CRL information
      at "LogLevel debug" which could be triggered if configured
      to use a "malicious" CRL.  Bug 35081.  [Marc Stern <mstern csc.com>]
    - mod_userdir: Fix possible memory corruption issue.  Bug 34588.
      [David Leonard <dleonard vintela.com>]
    - worker mpm: don't take down the whole server for a transient
      thread creation failure. Bug 34514 [Greg Ames]
    - mod_rewrite: use buffered I/O to improve performance with large
      RewriteMap txt: files.  [Greg Ames]
    - proxy HTTP: Rework the handling of request bodies to handle
      chunked input and input filters which modify content length, and
      avoid spooling arbitrary-sized request bodies in memory.
      Bug 15859.  [Jeff Trawick]
 
    Patches supplied by Ben Collver. Addresses PR pkg/31817 by Zafer Aydogan.
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.36 -r1.36.2.1 pkgsrc/devel/apr/Makefile
 cvs rdiff -r1.15 -r1.15.2.1 pkgsrc/devel/apr/distinfo
 cvs rdiff -r1.2 -r1.2.4.1 pkgsrc/devel/apr/patches/patch-ao
 cvs rdiff -r1.82 -r1.82.2.1 pkgsrc/www/apache2/Makefile
 cvs rdiff -r1.18 -r1.18.4.1 pkgsrc/www/apache2/Makefile.common
 cvs rdiff -r1.30 -r1.30.4.1 pkgsrc/www/apache2/PLIST
 cvs rdiff -r1.42 -r1.42.2.1 pkgsrc/www/apache2/distinfo
 cvs rdiff -r1.5 -r1.5.4.1 pkgsrc/www/apache2/patches/patch-ac
 cvs rdiff -r1.5 -r0 pkgsrc/www/apache2/patches/patch-ae
 cvs rdiff -r1.4 -r0 pkgsrc/www/apache2/patches/patch-af
 cvs rdiff -r1.8 -r0 pkgsrc/www/apache2/patches/patch-ah
 cvs rdiff -r1.3 -r0 pkgsrc/www/apache2/patches/patch-aj
 cvs rdiff -r0 -r1.6.16.1 pkgsrc/www/apache2/patches/patch-ao
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.