Return-Path: Delivered-To: apmail-httpd-cvs-archive@www.apache.org Received: (qmail 68149 invoked from network); 29 Aug 2007 13:09:53 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 29 Aug 2007 13:09:53 -0000 Received: (qmail 17899 invoked by uid 500); 29 Aug 2007 13:09:48 -0000 Delivered-To: apmail-httpd-cvs-archive@httpd.apache.org Received: (qmail 17841 invoked by uid 500); 29 Aug 2007 13:09:47 -0000 Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list cvs@httpd.apache.org Received: (qmail 17673 invoked by uid 99); 29 Aug 2007 13:09:47 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 29 Aug 2007 06:09:47 -0700 X-ASF-Spam-Status: No, hits=-100.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.3] (HELO eris.apache.org) (140.211.11.3) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 29 Aug 2007 13:10:38 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 2966A1A9832; Wed, 29 Aug 2007 06:09:19 -0700 (PDT) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r570800 - in /httpd/site/trunk/dist: Announcement1.3.html Announcement1.3.txt Announcement2.0.html Announcement2.0.txt Announcement2.2.html Announcement2.2.txt README.html Date: Wed, 29 Aug 2007 13:09:18 -0000 To: cvs@httpd.apache.org From: jim@apache.org X-Mailer: svnmailer-1.0.8 Message-Id: <20070829130919.2966A1A9832@eris.apache.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: jim Date: Wed Aug 29 06:09:17 2007 New Revision: 570800 URL: http://svn.apache.org/viewvc?rev=570800&view=rev Log: Update for next round of T&R with an attempt at releasing them this time :) Modified: httpd/site/trunk/dist/Announcement1.3.html httpd/site/trunk/dist/Announcement1.3.txt httpd/site/trunk/dist/Announcement2.0.html httpd/site/trunk/dist/Announcement2.0.txt httpd/site/trunk/dist/Announcement2.2.html httpd/site/trunk/dist/Announcement2.2.txt httpd/site/trunk/dist/README.html Modified: httpd/site/trunk/dist/Announcement1.3.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/dist/Announcement1.3.html?rev=570800&r1=570799&r2=570800&view=diff ============================================================================== --- httpd/site/trunk/dist/Announcement1.3.html (original) +++ httpd/site/trunk/dist/Announcement1.3.html Wed Aug 29 06:09:17 2007 @@ -15,12 +15,12 @@ -

Apache HTTP Server 1.3.38 Released

+

Apache HTTP Server 1.3.39 Released

The Apache Software Foundation and the Apache HTTP Server Project are - pleased to announce the release of version 1.3.38 of the Apache HTTP + pleased to announce the release of version 1.3.39 of the Apache HTTP Server ("Apache"). This Announcement notes the significant change - in 1.3.38 as compared to 1.3.37.

+ in 1.3.39 as compared to 1.3.37 (1.3.38 was not released).

This version of Apache is a security fix release only.

@@ -44,17 +44,17 @@

Please note that ability to exploit this issue is dependent on running untrusted 3rd party modules or untrusted server-side code.

-

Apache 1.3.38 is the current stable release of the Apache 1.3 family. +

Apache 1.3.39 is the current stable release of the Apache 1.3 family. We strongly recommend that users of all earlier versions, including 1.3 family release, upgrade to to the current 2.2 version as soon as possible.

-

We recommend Apache 1.3.38 version for users who require a third party +

We recommend Apache 1.3.39 version for users who require a third party module that is not yet available as an Apache 2.x module. Modules compiled for Apache 2.x are not compatible with Apache 1.3, and modules compiled for Apache 1.3 are not compatible with Apache 2.x.

-

Apache 1.3.38 is available for download from

+

Apache 1.3.39 is available for download from

http://httpd.apache.org/download.cgi
@@ -62,7 +62,7 @@

Please see the CHANGES_1.3 file, linked from the above page, for - a full list of changes. A condensed list, CHANGES_1.3.38 provides + a full list of changes. A condensed list, CHANGES_1.3.39 provides the complete list of changes since 1.3.37.

This service utilizes the network of mirrors listed at:

@@ -98,12 +98,12 @@ of the servers on the Internet run Apache HTTP Server, or one of its variants.

-

Apache 1.3.38 Major changes

+

Apache 1.3.39 Major changes

Security vulnerabilities

- The main security vulnerabilities addressed in 1.3.38 are: + The main security vulnerabilities addressed in 1.3.39 are:

CVE-2006-5752 (cve.mitre.org)
Modified: httpd/site/trunk/dist/Announcement1.3.txt URL: http://svn.apache.org/viewvc/httpd/site/trunk/dist/Announcement1.3.txt?rev=570800&r1=570799&r2=570800&view=diff ============================================================================== --- httpd/site/trunk/dist/Announcement1.3.txt (original) +++ httpd/site/trunk/dist/Announcement1.3.txt Wed Aug 29 06:09:17 2007 @@ -1,9 +1,9 @@ - Apache HTTP Server 1.3.38 Released + Apache HTTP Server 1.3.39 Released The Apache Software Foundation and the Apache HTTP Server Project are - pleased to announce the release of version 1.3.38 of the Apache HTTP + pleased to announce the release of version 1.3.39 of the Apache HTTP Server ("Apache"). This Announcement notes the significant change in - 1.3.38 as compared to 1.3.37. + 1.3.39 as compared to 1.3.37 (1.3.38 was not released). This version of Apache is a security fix release only: @@ -18,19 +18,19 @@ to exploit this issue is dependent on running untrusted 3rd party modules or untrusted server-side code. - Please see the CHANGES_1.3.38 file in this directory for a full list + Please see the CHANGES_1.3.39 file in this directory for a full list of changes for this version. - Apache 1.3.38 is the current stable release of the Apache 1.3 family. We + Apache 1.3.39 is the current stable release of the Apache 1.3 family. We strongly recommend that users of all earlier versions, including 1.3 family release, upgrade to to the current 2.2 version as soon as possible. - We recommend Apache 1.3.38 version for users who require a third party + We recommend Apache 1.3.39 version for users who require a third party module that is not yet available as an Apache 2.x module. Modules compiled for Apache 2.x are not compatible with Apache 1.3, and modules compiled for Apache 1.3 are not compatible with Apache 2.x. - Apache 1.3.38 is available for download from + Apache 1.3.39 is available for download from http://httpd.apache.org/download.cgi @@ -62,11 +62,11 @@ the servers on the Internet run Apache HTTP Server, or one of its variants. -Apache 1.3.38 Major changes +Apache 1.3.39 Major changes Security vulnerabilities - The main security vulnerabilities addressed in 1.3.38 are: + The main security vulnerabilities addressed in 1.3.39 are: CVE-2006-5752 (cve.mitre.org) Modified: httpd/site/trunk/dist/Announcement2.0.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/dist/Announcement2.0.html?rev=570800&r1=570799&r2=570800&view=diff ============================================================================== --- httpd/site/trunk/dist/Announcement2.0.html (original) +++ httpd/site/trunk/dist/Announcement2.0.html Wed Aug 29 06:09:17 2007 @@ -14,12 +14,13 @@ > -

Apache HTTP Server 2.0.60 Released

+

Apache HTTP Server 2.0.61 Released

The Apache Software Foundation and the Apache HTTP Server Project are - pleased to announce the legacy release of version 2.0.60 of the Apache HTTP + pleased to announce the legacy release of version 2.0.61 of the Apache HTTP Server ("Apache"). This Announcement notes the significant changes in - 2.0.60 as compared to 2.0.59. This Announcement2.0 document may also be + 2.0.61 as compared to 2.0.59 (2.0.60 was not released). + This Announcement2.0 document may also be available in multiple languages at:

@@ -64,19 +65,19 @@ upgrade.

This release includes the Apache Portable Runtime library suite - release version 0.9.14, bundled with the tar and zip distributions. + release version 0.9.15, bundled with the tar and zip distributions. These libraries; libapr, libaprutil, and on Win32, libapriconv must all be updated to ensure binary compatibility and address many known platform bugs.

-

Apache HTTP Server 2.0.60 is available for download from

+

Apache HTTP Server 2.0.61 is available for download from

http://httpd.apache.org/download.cgi

Please see the CHANGES_2.0 file, linked from the above page, for - a full list of changes. A condensed list, CHANGES_2.0.60 provides + a full list of changes. A condensed list, CHANGES_2.0.61 provides the complete list of changes since 2.0.59.

Apache 2.0 offers numerous enhancements, improvements, and performance @@ -103,7 +104,7 @@

We consider Apache 2.2 to be the best available version at the time of - this release. We offer Apache 2.0.60 as the best legacy version of Apache + this release. We offer Apache 2.0.61 as the best legacy version of Apache 2.0 available. Users should first consider upgrading to the current release of Apache 2.2 instead.

Modified: httpd/site/trunk/dist/Announcement2.0.txt URL: http://svn.apache.org/viewvc/httpd/site/trunk/dist/Announcement2.0.txt?rev=570800&r1=570799&r2=570800&view=diff ============================================================================== --- httpd/site/trunk/dist/Announcement2.0.txt (original) +++ httpd/site/trunk/dist/Announcement2.0.txt Wed Aug 29 06:09:17 2007 @@ -1,10 +1,10 @@ - Apache HTTP Server 2.0.60 Released + Apache HTTP Server 2.0.61 Released The Apache Software Foundation and the Apache HTTP Server Project are - pleased to announce the legacy release of version 2.0.60 of the Apache + pleased to announce the legacy release of version 2.0.61 of the Apache HTTP Server ("Apache"). This Announcement notes the significant changes in - 2.0.60 as compared to 2.0.59. This Announcement2.0 document may also be - available in multiple languages at: + 2.0.61 as compared to 2.0.59 (2.0.60 was not released). This Announcement2.0 + document may also be available in multiple languages at: http://www.apache.org/dist/httpd/ @@ -28,7 +28,7 @@ prefork, worker MPMs: Ensure that the parent process cannot be forced to kill processes outside its process group. - Please see the CHANGES_2.0.60 file in this directory for a full list + Please see the CHANGES_2.0.61 file in this directory for a full list of changes for this version. This release is compatible with modules compiled for 2.0.42 and later @@ -36,17 +36,17 @@ available and encourage users of all prior versions to upgrade. This release includes the Apache Portable Runtime library suite release - version 0.9.14, bundled with the tar and zip distributions. These + version 0.9.15, bundled with the tar and zip distributions. These libraries; libapr, libaprutil, and on Win32, libapriconv must all be updated to ensure binary compatibility and address many known platform bugs. - Apache HTTP Server 2.0.60 is available for download from + Apache HTTP Server 2.0.61 is available for download from http://httpd.apache.org/download.cgi Please see the CHANGES_2.0 file, linked from the above page, for a full - list of changes. A condensed list, CHANGES_2.0.60 provides the complete + list of changes. A condensed list, CHANGES_2.0.61 provides the complete list of changes since 2.0.59. Apache 2.0 offers numerous enhancements, improvements, and performance @@ -68,7 +68,7 @@ http://httpd.apache.org/docs/2.2/new_features_2_2.html We consider Apache 2.2 to be the best available version at the time of - this release. We offer Apache 2.0.60 as the best legacy version of Apache + this release. We offer Apache 2.0.61 as the best legacy version of Apache 2.0 available. Users should first consider upgrading to the current release of Apache 2.2 instead. Modified: httpd/site/trunk/dist/Announcement2.2.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/dist/Announcement2.2.html?rev=570800&r1=570799&r2=570800&view=diff ============================================================================== --- httpd/site/trunk/dist/Announcement2.2.html (original) +++ httpd/site/trunk/dist/Announcement2.2.html Wed Aug 29 06:09:17 2007 @@ -14,10 +14,10 @@ > -

Apache HTTP Server 2.2.5 Released

+

Apache HTTP Server 2.2.6 Released

The Apache Software Foundation and the Apache HTTP Server Project are -pleased to announce the release of version 2.2.5 of the Apache HTTP Server +pleased to announce the release of version 2.2.6 of the Apache HTTP Server ("Apache").

This version of Apache is principally a bug and security fix release. @@ -61,7 +61,7 @@ encourage users of all prior versions to upgrade.

-

Apache HTTP Server 2.2.5 is available for download from:

+

Apache HTTP Server 2.2.6 is available for download from:

http://httpd.apache.org/download.cgi
@@ -80,8 +80,9 @@

Please see the CHANGES_2.2 file, linked from the download page, for a -full list of changes. A condensed list, CHANGES_2.2.5 provides the -complete list of changes since 2.2.4. A summary of security vulnerabilities +full list of changes. A condensed list, CHANGES_2.2.6 provides the +complete list of changes since 2.2.4 (2.2.5 was not released). +A summary of security vulnerabilities which were addressed in the previous 2.2.4 and earlier releases is available:

-Apache HTTP Server 1.3.38 and 2.0.60 legacy releases are also currently +Apache HTTP Server 1.3.39 and 2.0.61 legacy releases are also currently available. See the corresponding CHANGES files linked from the download page. The Apache HTTP Project developers strongly encourage all users to migrate to Apache 2.2, as only limited maintenance is performed for these legacy @@ -99,7 +100,7 @@

This release includes the Apache Portable Runtime (APR) version 1.2.9 +>Apache Portable Runtime (APR) version 1.2.10 bundled with the tar and zip distributions. The APR libraries libapr and libaprutil (and on Win32, libapriconv) must all be updated to ensure binary compatibility and address many known platform bugs. Modified: httpd/site/trunk/dist/Announcement2.2.txt URL: http://svn.apache.org/viewvc/httpd/site/trunk/dist/Announcement2.2.txt?rev=570800&r1=570799&r2=570800&view=diff ============================================================================== --- httpd/site/trunk/dist/Announcement2.2.txt (original) +++ httpd/site/trunk/dist/Announcement2.2.txt Wed Aug 29 06:09:17 2007 @@ -1,7 +1,7 @@ - Apache HTTP Server 2.2.4 Released + Apache HTTP Server 2.2.6 Released The Apache Software Foundation and the Apache HTTP Server Project are - pleased to announce the release of version 2.2.4 of the Apache HTTP Server + pleased to announce the release of version 2.2.6 of the Apache HTTP Server ("Apache"). This version of Apache is principally a bug and security fix release. The following potential security flaws are addressed: @@ -29,7 +29,7 @@ We consider this release to be the best version of Apache available, and encourage users of all prior versions to upgrade. - Apache HTTP Server 2.2.5 is available for download from: + Apache HTTP Server 2.2.6 is available for download from: http://httpd.apache.org/download.cgi @@ -40,21 +40,21 @@ http://httpd.apache.org/docs/2.2/new_features_2_2.html Please see the CHANGES_2.2 file, linked from the download page, for a - full list of changes. A condensed list, CHANGES_2.2.5 provides the - complete list of changes since 2.2.4. A summary of security vulnerabilities - which were addressed in the previous 2.2.4 and earlier releases is + full list of changes. A condensed list, CHANGES_2.2.6 provides the + complete list of changes since 2.2.6. A summary of security vulnerabilities + which were addressed in the previous 2.2.6 and earlier releases is available: http://httpd.apache.org/security/vulnerabilities_22.html - Apache HTTP Server 1.3.38 and 2.0.60 legacy releases are also currently + Apache HTTP Server 1.3.39 and 2.0.61 legacy releases are also currently available. See the appropriate CHANGES from the url above. See the corresponding CHANGES files linked from the download page. The Apache HTTP Project developers strongly encourage all users to migrate to Apache 2.2, as only limited maintenance is performed on these legacy versions. - This release includes the Apache Portable Runtime (APR) version 1.2.9 + This release includes the Apache Portable Runtime (APR) version 1.2.10 bundled with the tar and zip distributions. The APR libraries libapr and libaprutil (and on Win32, libapriconv) must all be updated to ensure binary compatibility and address many known platform bugs. Modified: httpd/site/trunk/dist/README.html URL: http://svn.apache.org/viewvc/httpd/site/trunk/dist/README.html?rev=570800&r1=570799&r2=570800&view=diff ============================================================================== --- httpd/site/trunk/dist/README.html (original) +++ httpd/site/trunk/dist/README.html Wed Aug 29 06:09:17 2007 @@ -46,13 +46,13 @@ 

 % pgpk -a KEYS
-% pgpv httpd-2.2.5.tar.gz.asc
+% pgpv httpd-2.2.6.tar.gz.asc
 or,
 % pgp -ka KEYS
-% pgp httpd-2.2.5.tar.gz.asc
+% pgp httpd-2.2.6.tar.gz.asc
 or,
 % gpg --import KEYS
-% gpg --verify httpd-2.2.5.tar.gz.asc
+% gpg --verify httpd-2.2.6.tar.gz.asc

We offer MD5 hashes as an alternative to validate the integrity