Removal of www/apache22
spil.oss at gmail.com
Sun Apr 8 10:52:41 UTC 2018
There's been no-one wanting to keep Apache 2.2 that has come forward.
Expect www/apache22 to be removed later in the week. Cleanup of
Mk/Uses/apache.mk after that.
2018-03-30 17:37 GMT+02:00 Spil Oss <spil.oss at gmail.com>:
> Thanks Vincent! I was looking for these but could not find them any
> more. Should've looked in archive naturally.
> Hanging in here for a bit to find out if there's anyone else wanting
> to comment. Deletion 14 days after original message.
> Cheers, Bernard.
> 2018-03-27 16:07 GMT+02:00 Vincent Hoffman-Kazlauskas <vince at unsane.co.uk>:
>> On 27/03/2018 13:52, Bernard Spil wrote:
>>> Hi all,
>>> Just noticed that the Apache project has removed the patches they had
>>> for 2.2.34.
>>> Combined with the security update of 2.4 branch to 2.4.33 leads me to
>>> believe that Apache 2.2 is now vulnerable and no patches will be provided.
>>> If someone wishes to step up and get patches for 2.2 from e.g. RedHat,
>>> we may be able to keep the port alive for a bit longer. If no one steps
>>> up, I see no other way forward than to delete the port as indicated by
>>> the DEPRECATED variable and expiration date 2017-07-01 since July 2016.
>> While I agree that apache 2.2 is now firmly dead, they moved the patches
>> for 2.2.34 to
>> https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ , however
>> no new patches for the recent CVEs were added.
>>> freebsd-ports at freebsd.org mailing list
>>> To unsubscribe, send any mail to "freebsd-ports-unsubscribe at freebsd.org"
>> freebsd-ports at freebsd.org mailing list
>> To unsubscribe, send any mail to "freebsd-ports-unsubscribe at freebsd.org"
More information about the freebsd-apache