Subject: CVS commit: pkgsrc
To: None <source-changes@netbsd.org>
From: Johnny C. Lam <jlam@netbsd.org>
List: source-changes
Date: 10/14/2000 00:46:47
Module Name:	pkgsrc
Committed By:	jlam
Date:		Fri Oct 13 21:46:46 UTC 2000

Modified Files:
	pkgsrc/www/apache: Makefile
	pkgsrc/www/apache/files: md5 patch-sum
	pkgsrc/www/apache/patches: patch-ab patch-ac patch-ae
	pkgsrc/www/apache/pkg: DEINSTALL INSTALL PLIST

Log Message:
Update apache to 1.3.14.  Changes from version 1.3.12 are listed below.

   The security fixes are:
     * A problem with the Rewrite module, mod_rewrite, allowed access to
       any file on the web server under certain circumstances
     * The handling of Host: headers in mass virtual hosting
       configurations, mod_vhost_alias, could allow access to any file on
       the server
     * If a cgi-bin directory is under the document root, the source to
       the scripts inside it could be sent if using mass virtual hosting

   The main new features include:
     * Support for a directory-based configuration system. If any of the
       configuration directives point to directories instead of files,
       all files in that directory (and in subdirectories) will be also
       parsed as configuration files
     * Support name-based virtual hosting without needing to specify an
       IP address in the Apache configuration file. This enables sites
       that use dynamic IP addresses to support name-based virtual
       hosting as well as allowing identical machines to share a
       configuration file, say in a load-balanced cluster
     * The SetEnvIf and BrowserMatch range of directives are now able to
       be used in .htaccess files.
     * Administrators who are nervous about their full server version
       details being public can use the new keyword 'ProductOnly' in the
       ServerTokens directive. This keyword forces the server to only
       return the string "Apache" as the server version.
     * The new digest authentication module, mod_auth_digest has had a
       number of fixes and upgrades applied


To generate a diff of this commit:
cvs rdiff -r1.51 -r1.52 pkgsrc/www/apache/Makefile
cvs rdiff -r1.15 -r1.16 pkgsrc/www/apache/files/md5
cvs rdiff -r1.9 -r1.10 pkgsrc/www/apache/files/patch-sum
cvs rdiff -r1.7 -r1.8 pkgsrc/www/apache/patches/patch-ab
cvs rdiff -r1.3 -r1.4 pkgsrc/www/apache/patches/patch-ac
cvs rdiff -r1.2 -r1.3 pkgsrc/www/apache/patches/patch-ae
cvs rdiff -r1.2 -r1.3 pkgsrc/www/apache/pkg/DEINSTALL
cvs rdiff -r1.1 -r1.2 pkgsrc/www/apache/pkg/INSTALL
cvs rdiff -r1.16 -r1.17 pkgsrc/www/apache/pkg/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.