Module Name:	pkgsrc
Committed By:	grant
Date:		Sun Nov  2 05:36:56 UTC 2003

Modified Files:
	pkgsrc/www/apache: Makefile PLIST distinfo
Removed Files:
	pkgsrc/www/apache/patches: patch-ap patch-aq patch-ar patch-as

Log Message:
Updated apache to 1.3.29.

Major changes since 1.3.28:

  Security vulnerabilities

     * CAN-2003-0542 (cve.mitre.org)
       Fix buffer overflows in mod_alias and mod_rewrite which occurred if
       one configured a regular expression with more than 9 captures.

  Bugs fixed

   The following noteworthy bugs were found in Apache 1.3.28 (or earlier)
   and have been fixed in Apache 1.3.29:

     * Within ap_bclose(), ap_pclosesocket() is now called
     * consistently
       for sockets and ap_pclosef() for files.  Also, closesocket()
       is used consistenly to close socket fd's.  The previous
       confusion between socket and file fd's would cause problems
       with some applications now that we proactively close fd's to
       prevent leakage.

     * Fixed mod_usertrack to not get false positive matches on the
       user-tracking cookie's name.

     * Prevent creation of subprocess Zombies when using CGI wrappers
       such as suEXEC and cgiwrap.


To generate a diff of this commit:
cvs rdiff -r1.135 -r1.136 pkgsrc/www/apache/Makefile
cvs rdiff -r1.8 -r1.9 pkgsrc/www/apache/PLIST
cvs rdiff -r1.28 -r1.29 pkgsrc/www/apache/distinfo
cvs rdiff -r1.1 -r0 pkgsrc/www/apache/patches/patch-ap \
    pkgsrc/www/apache/patches/patch-aq pkgsrc/www/apache/patches/patch-ar \
    pkgsrc/www/apache/patches/patch-as

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.