CVS commit: [pkgsrc-2026Q3] pkgsrc/www/apache24

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Wed Nov 11 13:21:46 UTC 2026

Modified Files:
        pkgsrc/www/apache24 [pkgsrc-2026Q3]: Makefile distinfo

Log Message:
Pullup ticket #7378 - requested by taca
www/apache24: Security fix

Revisions pulled up:
- www/apache24/Makefile                                         1.150
- www/apache24/distinfo                                         1.74

---
   Module Name: pkgsrc
   Committed By:        adam
   Date:                Tue Nov 10 10:30:23 UTC 2026

   Modified Files:
        pkgsrc/www/apache24: Makefile distinfo

   Log Message:
   apache24: updated to 2.4.70

   Apache 2.4.70

   *) mod_authnz_ldap: Fix crashes in 2.4.69 reported on Windows.

   *) mod_cgid: Increase limits for number and length of
      environment variables, URI and arguments.
      [Emmanuel Dreyfus <manu netbsd.org>, Joe Orton]

   *) mod_substitute: Fix an integer overflow that can happen in very special
      setups.

   *) mod_cache: Do not store a response whose "Vary: *" was set via
      "Header always".

   *) mod_dav_lock: Fix a heap buffer overflow in dav_size_indirect(), which
      under-reserved space for the stored key length field, written as
      apr_size_t but sized as int.


To generate a diff of this commit:
cvs rdiff -u -r1.146.2.1 -r1.146.2.2 pkgsrc/www/apache24/Makefile
cvs rdiff -u -r1.72.4.1 -r1.72.4.2 pkgsrc/www/apache24/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/apache24/Makefile
diff -u pkgsrc/www/apache24/Makefile:1.146.2.1 pkgsrc/www/apache24/Makefile:1.146.2.2
--- pkgsrc/www/apache24/Makefile:1.146.2.1      Sat Oct  3 19:45:40 2026
+++ pkgsrc/www/apache24/Makefile        Wed Nov 11 13:21:45 2026
@@ -1,11 +1,11 @@
-# $NetBSD: Makefile,v 1.146.2.1 2026/10/03 19:45:40 bsiegert Exp $
+# $NetBSD: Makefile,v 1.146.2.2 2026/11/11 13:21:45 maya Exp $
 #
 # When updating this package, make sure that no strings like
 # "PR 12345" are in the commit message. Upstream likes
 # to reference their own PRs this way, but this ends up
 # in NetBSD GNATS.
 
-DISTNAME=      httpd-2.4.69
+DISTNAME=      httpd-2.4.70
 PKGNAME=       ${DISTNAME:S/httpd/apache/}
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_APACHE:=httpd/}

Index: pkgsrc/www/apache24/distinfo
diff -u pkgsrc/www/apache24/distinfo:1.72.4.1 pkgsrc/www/apache24/distinfo:1.72.4.2
--- pkgsrc/www/apache24/distinfo:1.72.4.1       Sat Oct  3 19:45:40 2026
+++ pkgsrc/www/apache24/distinfo        Wed Nov 11 13:21:45 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.72.4.1 2026/10/03 19:45:40 bsiegert Exp $
+$NetBSD: distinfo,v 1.72.4.2 2026/11/11 13:21:45 maya Exp $
 
-BLAKE2s (httpd-2.4.69.tar.bz2) = d892053228aeb772f1eb4fabf6c6850684f1bf6e97f5835c74dd4a546154f532
-SHA512 (httpd-2.4.69.tar.bz2) = ca9c5808eef7a0d8d88148b0d2d6045b5a0151823f09afc786b283cef9990036a9c7bc53d043e2f67b6ec06db05f655aa961cb875fa7ad0911fa04fdd295bd93
-Size (httpd-2.4.69.tar.bz2) = 8513053 bytes
+BLAKE2s (httpd-2.4.70.tar.bz2) = c184cef628363ff01b3c5597abad9442d655f9b0b1fd9c7ea50481615a287bfe
+SHA512 (httpd-2.4.70.tar.bz2) = bcbbda8fba5a3e59d6a8b88551d401ff62f2df6bfbb5f6cfac9479ac1aa14a433d490a09e21ad164502a30bd747b43e67c7e43df4412f5dc40e1723a35e3398d
+Size (httpd-2.4.70.tar.bz2) = 8612617 bytes
 SHA1 (patch-aa) = 9a66685f1d2e4710ab464beda98cbaad632aebf9
 SHA1 (patch-ad) = dd4dbffaa8d784bbbf37b85e17977ff0c73e9074
 SHA1 (patch-ae) = 0a54d96ca77394b1ca725df76819caa95c381f39