| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
| |
- s/USE_APACHE= 20+/USE_APACHE= 22+/
- unify s/YES/yes/
- cleanup APACHE_VERSION <= 22 usage
- add entry to MOVED
with hat apache@
Notes:
svn path=/head/; revision=302724
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
keep full backward support until apache20 is removed from the tree
comment code to remove with MFC TODO:
- adjust apache20 and apache22 ports
changes are transparent for users (no PORTREVISION bump)
Users who are using special build instructions in make.conf, such as
- WITH_STATIC_MODULES= alias dir log_config mime rewrite setenvif vhost_alias
should convert the values to UPPERCASE
- WITH_STATIC_MODULES= ALIAS DIR LOG_CONFIG MIME REWRITE SETENVIF VHOST_ALIAS
At the moment code to support old lowercase style is in place, but
target to remove in favor for options NG.
with hat apache@
Notes:
svn path=/head/; revision=302481
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
are no more self hosting so we are stuck with 0.25 version while pkgconf provide
the same set of features as 0.27 and a compatible frontend. A symlink to
pkg-config has been added for convenience and compatibility
This also introduces a new macro to use pkgconf in your ports:
USE_PKGCONFIG
it can take the following arguments:
- yes (meaning build only dep)
- build (meaning build only dep)
- run (meaning run only dep)
- both (meaning run and build dep)
From now USE_GNOME= pkgconfig is deprecated in favour of USE_PKGCONFIG
The old gnome macro has been modified to use pkgconf but still the sameway: run
and build dep to avoid large breakage.
While here fix some ports relying on pkg-config but not specifying it, fix some
ports broken because testing wrong .pc files, and fix ports using pkg-config
--version to determine pkg-config version instead of
pkg-config --modversion pkg-config like recommanded by pkg-config
With Hat: portmgr
Exp-runs by: bapt (pointhat-west), beat (pointyhat)
Notes:
svn path=/head/; revision=301539
|
|
|
|
|
|
|
|
|
|
| |
- use port framework instead pkg-install to check for www user
- no REVISION bump, logic / functionality has not changed
with hat apache@
Notes:
svn path=/head/; revision=301342
|
|
|
|
|
|
|
| |
- remove explicit ABI version number from LIB_DEPENDS
Notes:
svn path=/head/; revision=300636
|
|
|
|
|
|
|
| |
Add (vendor) patch for deprecated pcre_info()
Notes:
svn path=/head/; revision=291337
|
|
|
|
|
|
|
|
| |
PR: ports/147806
With Hat: apache@
Notes:
svn path=/head/; revision=290687
|
|
|
|
|
|
|
| |
With Hat: apache@
Notes:
svn path=/head/; revision=287743
|
|
|
|
|
|
|
|
|
| |
- set EXPIRATION date to 2012-02-01
Feature safe: yes
Notes:
svn path=/head/; revision=285724
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
Notes:
svn path=/head/; revision=282282
|
|
|
|
| |
Notes:
svn path=/head/; revision=281708
|
|
|
|
|
|
|
| |
ignored
Notes:
svn path=/head/; revision=271173
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
apache 2.3.10 will be release next week, 2.3.11 will be 1st beta shortly
after that. 2.4.0 GA will follow not long after. Once 2.4.0 is released
2.0.x will be EOL upstream at httpd ASF.
Get this in before 7.4/8.2 to help raise awareness and start migration plans.
- Work is already well in to move the default apache to www/apache22
http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/147009, help is appreciated there
with the goal to have this be true before 9.0.
- www/apache13* are on track to be deprecated after 9.0. apache1.3.x support has
been EOL upstream at ASF almost 1 year already.
With Hat: apache@
Discussed with: httpd@dev.a.o, private@dev.a.o, #bsdports
Notes:
svn path=/head/; revision=266004
|
|
|
|
| |
Notes:
svn path=/head/; revision=265663
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- normalize patch-pcre.diff into makepatch format
- All 4 CVE patches are included upstream and part of 2.0.64
- part of the local apxs.in changes are upstream now too
- some patches were regenerated for offset updates
** There is NO security update here. **
Changes: http://www.apache.org/dist/httpd/CHANGES_2.0
With Hat: apache@
<ChangeLog>
*) SECURITY: CVE-2010-1452 (cve.mitre.org)
mod_dav: Fix Handling of requests without a path segment.
PR: 49246 [Mark Drayton, Jeff Trawick]
*) SECURITY: CVE-2009-1891 (cve.mitre.org)
Fix a potential Denial-of-Service attack against mod_deflate or other
modules, by forcing the server to consume CPU time in compressing a
large file after a client disconnects. PR 39605.
[Joe Orton, Ruediger Pluem]
*) SECURITY: CVE-2009-3095 (cve.mitre.org)
mod_proxy_ftp: sanity check authn credentials.
[Stefan Fritsch <sf fritsch.de>, Joe Orton]
*) SECURITY: CVE-2009-3094 (cve.mitre.org)
mod_proxy_ftp: NULL pointer dereference on error paths.
[Stefan Fritsch <sf fritsch.de>, Joe Orton]
*) SECURITY: CVE-2009-3555 (cve.mitre.org)
mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection
attack when compiled against OpenSSL version 0.9.8m or later. Introduces
the 'SSLInsecureRenegotiation' directive to reopen this vulnerability
and offer unsafe legacy renegotiation with clients which do not yet
support the new secure renegotiation protocol, RFC 5746.
[Joe Orton, and with thanks to the OpenSSL Team]
*) SECURITY: CVE-2009-3555 (cve.mitre.org)
mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
for OpenSSL versions prior to 0.9.8l; reject any client-initiated
renegotiations. Forcibly disable keepalive for the connection if there
is any buffered data readable. Any configuration which requires
renegotiation for per-directory/location access control is still
vulnerable, unless using openssl 0.9.8l or later.
[Joe Orton, Ruediger Pluem, Hartmut Keil <Hartmut.Keil adnovum.ch>,
Rainer Jung]
*) SECURITY: CVE-2010-0434 (cve.mitre.org)
Ensure each subrequest has a shallow copy of headers_in so that the
parent request headers are not corrupted. Elimiates a problematic
optimization in the case of no request body. PR 48359
[Jake Scott, William Rowe, Ruediger Pluem]
*) SECURITY: CVE-2008-2364 (cve.mitre.org)
mod_proxy_http: Better handling of excessive interim responses
from origin server to prevent potential denial of service and high
memory usage. Reported by Ryujiro Shibuya. [Ruediger Pluem,
Joe Orton, Jim Jagielski]
*) SECURITY: CVE-2010-0425 (cve.mitre.org)
mod_isapi: Do not unload an isapi .dll module until the request
processing is completed, avoiding orphaned callback pointers.
[Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
*) SECURITY: CVE-2008-2939 (cve.mitre.org)
mod_proxy_ftp: Prevent XSS attacks when using wildcards in the path of
the FTP URL. Discovered by Marc Bevand of Rapid7. [Ruediger Pluem]
*) Fix recursive ErrorDocument handling. PR 36090 [Chris Darroch]
*) mod_ssl: Do not do overlapping memcpy. PR 45444 [Joe Orton]
*) Add Set-Cookie and Set-Cookie2 to the list of headers allowed to pass
through on a 304 response. [Nick Kew]
*) apxs: Fix -A and -a options to ignore whitespace in httpd.conf
[Philip M. Gollucci]
</ChangeLog>
Notes:
svn path=/head/; revision=263382
|
|
|
|
| |
Notes:
svn path=/head/; revision=263089
|
|
|
|
|
|
|
|
| |
Approved by: portmgr (for Mk/bsd.port.mk part)
Tested by: Multiple -exp runs
Notes:
svn path=/head/; revision=261230
|
|
|
|
| |
Notes:
svn path=/head/; revision=255149
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
[http://svn.apache.org/viewvc?view=revision&revision=153384]
Essentially this internalizes the pcre POSIX API in the ap_ namespace.
Thus fixing the use of an external pcre library and hence mod_redirect
and other consumers.
- This includes an MMN bump which means you will need to recompile all your
modules. With ports this will happen when you upgrade via portmaster or
portupgrade. If you have any modules outside of ports they will need to
be recompiled too.
- There is a small chance you will need to change some of your custom modules
to adapt to the ap_regex_t and ap_regmatch_t api changes.
- For security, speed, maintenance, and simplification in the ports/ framework
this route was chosen instead of reverting the devel/pcre change in 2.0.63_4.
PR: ports/146604
Reported by: Stefan Bethke <stb@lassitu.de>, serveral on ports@, apache@
With Hat: apache@
Notes:
svn path=/head/; revision=255132
|
|
|
|
|
|
|
|
|
|
| |
to ports apr.
Reported by: pav via pointyhat
With Hat: apache@
Notes:
svn path=/head/; revision=254924
|
|
|
|
|
|
|
|
|
| |
- Bump PORTREVISION
Reported by: Geraint Edwards <gedge@yadn.org> via apache@
Notes:
svn path=/head/; revision=254613
|
|
|
|
| |
Notes:
svn path=/head/; revision=254612
|
|
|
|
|
|
|
| |
With Hat: apache@
Notes:
svn path=/head/; revision=254534
|
|
|
|
|
|
|
| |
With Hat: apache@
Notes:
svn path=/head/; revision=254533
|
|
|
|
|
|
|
| |
With Hat: apache@
Notes:
svn path=/head/; revision=254532
|
|
|
|
|
|
|
| |
With hat: apache@
Notes:
svn path=/head/; revision=254531
|
|
|
|
|
|
|
|
|
| |
Patches to devel/apr0 are welcome, send-pr.
With Hat: apache@
Notes:
svn path=/head/; revision=254530
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
login.conf(5). This is probably because resource limitations are handled
differently on various different platforms.
This modifies suexec behaviour to set resource limits for CGI's
from /etc/login.conf before execing the customers CGI script.
Doesn't affect default package, so no PORTREVISION bumps.
I will follow up at dev@httpd.apache.org to see about adding this
with #ifdefs.
PR: ports/136928
Submitted by: Alexey V.Degtyarev <alexey@renatasystems.org>
With Hat: apache@
Notes:
svn path=/head/; revision=254328
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the bundled pcre defined REG_NOSUB as 0 b/c its not used
the devel/pcre port (8.0.0) defines it as 0x0020 which is causing havoc
The REG_NOSUB was never used by pcre in www/apache20
So, replace it with 0 in the www/apache20 code forcibly
- Bump PORTERVISION
PR: ports/146399
Reported by: ervin valentin <ervin23@gmail.com>
With Hat: apache@
Notes:
svn path=/head/; revision=254246
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
clement@ added this patch in 1.201 of Makefile for fbsd 6.x
This only adds -funsigned-char to CFLAGS and I haven't seen
it break anything or anyone report any issues with not having the update.
It was also only neccessary in apr 0.9.x not apr 1.x+
This was remove entirely in http://svn.apache.org/viewvc?view=revision&revision=65257
- Bump PORTREVISION
With Hat: apache@
Notes:
svn path=/head/; revision=254244
|
|
|
|
|
|
|
|
|
|
| |
- Rename rc.d script apache2.sh -> apache2
- Bump PORTREVISION
With Hat: apache@
Notes:
svn path=/head/; revision=254239
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Fix the openssl from ports flag
- Bump PORTREVISION
- Also patch 2 more CVEs
*) SECURITY: CVE-2010-0434 (cve.mitre.org)
Ensure each subrequest has a shallow copy of headers_in so that the
parent request headers are not corrupted. Elimiates a problematic
optimization in the case of no request body. PR 48359
[Jake Scott, William Rowe, Ruediger Pluem]
*) SECURITY: CVE-2008-2364 (cve.mitre.org)
mod_proxy_http: Better handling of excessive interim responses
from origin server to prevent potential denial of service and high
memory usage. Reported by Ryujiro Shibuya. [Ruediger Pluem,
Joe Orton, Jim Jagielski]
PR: ports/146389 [1]
Submitted by: several [1]
With Hat: apache@
Notes:
svn path=/head/; revision=254235
|
|
|
|
|
|
|
|
|
|
|
|
| |
also be in OPTIONS or they aren't passed to make.
Thats one huge subtlety. I'll fix this later, but don't have time now.
Reported by: kevin brintnall <kbrint@qwest.net> via e-mail
Pointy hat: myself
With Hat: apache@
Notes:
svn path=/head/; revision=253929
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This will fix about 100 pkg-plist left overs for httpd.conf
apxs -A comments out the LoadModule line
This adds custom FreeBSD mod to 'DELETE' the line so that it works with
our pkg-plists in packages.
- Remove -s form the cmp httpd.conf in pkg-plist to be blatant about why
it didn't get removed
- Bump PORTREVISION
- This will be in 2.0.64
PR: ports/133704
Obtained from: http://svn.apache.org/viewvc?rev=942211&view=rev
Reported by: olli hauer <ohauer@gmx.de> (and very good pr!)
With Hat: apache@
Notes:
svn path=/head/; revision=253919
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
--with-ldap switches on LDAP library linking in apr-util
--enable-ldap option switches on the LDAP caching module
--enable-auth-ldap option switches on the LDAP authentication module
also apply a custom patch to fix the linking
- add a missing quote to OPTIONS desc
- ldap is not in the default package, so no PORTREVISION bump
PR: ports/128079
Reported by: koitsu, skreuzer
With Hat: apache@
Notes:
svn path=/head/; revision=253880
|
|
|
|
|
|
|
|
|
| |
PR: ports/144422
Reported by: several
With hat: apache@
Notes:
svn path=/head/; revision=253876
|
|
|
|
|
|
|
|
|
|
|
| |
to www/apache20 as well.
PR: ports/140357
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru>
With Hat: apache@
Notes:
svn path=/head/; revision=253867
|
|
|
|
|
|
|
|
|
|
|
|
| |
Some options were intentionally omitted.
- Remove a legacy option kludge
PR: ports/146199
Requested by: Nick Hibma <nick@anywi.com>
With Hat: apache@
Notes:
svn path=/head/; revision=253864
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
0) its like 7yrs old
0) the new version have speed,bug,&security fixes
0) www/apache22 already does this
0) www/apache23+ no longer bundle pcre [or apr* for that matter]
- Bump PORTREVISION
With Hat: apache@
Notes:
svn path=/head/; revision=253862
|
|
|
|
|
|
|
| |
With Hat: apache@
Notes:
svn path=/head/; revision=253855
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- No PORTREVISION bump [security/openssl is not the default]
PR: ports/146218
Submitted by: Kazuo Dohzono <dohzono@axion-software.com>
Obtained from: http://mail-index.netbsd.org/pkgsrc-users/2009/08/25/msg010537.html
With Hat: apache@
[I will contemplate sending this back to dev@httpd for branches/2.0.x for 2.0.64]
Notes:
svn path=/head/; revision=253847
|
|
|
|
|
|
|
| |
With Hat: apache@
Notes:
svn path=/head/; revision=253806
|
|
|
|
| |
Notes:
svn path=/head/; revision=253798
|
|
|
|
|
|
|
| |
- Silence portlitn for IGNORE message
Notes:
svn path=/head/; revision=253797
|
|
|
|
|
|
|
| |
With Hat: apache@
Notes:
svn path=/head/; revision=253796
|
|
|
|
|
|
|
|
|
| |
- fix caudium12 conflict
With Hat: apache@
Notes:
svn path=/head/; revision=253795
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Note if you already have www/apache20 or www/apache22 installed this is
not worth updating for; however, you should verify your [if you use it]
${PREFIX}/etc/apacheXX/extra/httpd-userdir.conf:
DisableUser dir setting correct lists the users you don't want
to have the ~/dir visible via http requests.
PR: ports/144422
Reported by: several
With hat: apache@
Notes:
svn path=/head/; revision=253392
|
|
|
|
|
|
|
| |
Approved by: pgolluci
Notes:
svn path=/head/; revision=251602
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.
It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.
With help: marcus and kwm
Pointyhat-exp: a few times by pav
Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and
a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by: marcus
Approved by: portmgr
Notes:
svn path=/head/; revision=238781
|
|
|
|
|
|
|
|
|
|
| |
Security: http://www.vuxml.org/freebsd/eb9212f7-526b-11de-bbf2-001b77d09812
PR: ports/135310
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru>
With Hat: apache
Notes:
svn path=/head/; revision=235409
|