A ports freeze means that commits will be few and far between and only by approval.

Number of commits found: 120 (showing only 100 on this page)

1 | 2  »  

- drop case senstive checks
PR:             127464

pkg_info -> ${PKG_INFO}

- update to 1.3.41+2.8.31

- Security patch
Security: CVE-2007-6388
Security: CVE-2007-5000
Security: CVE-2007-3847
Reported by:    Thomas Vogt

- new option WITH_PERL
workaround till global solution in bsd.apache.mk
PR:             118647, 116984

- fix build on CURRENT
PR:             117233
Reported by:    Alexander Logvinov

- update to 2.8.28-1.3.37
- merge Configure patches

- merge security fiexs from apache 1.3.39
Security: CVE-2006-5752
Security: CVE-2007-3304

Remove thttpd from conflicts list, it has a different name for its
passwd program now.

Approved by:    maintainers/erwin

- update to 2.8.28-1.3.37

- Security patch mod_rewrite
Security: CVE-2006-3747

- update to 1.3.36+2.8.27

- update to mod_ssl-2.8.26-1.3.35
- update to mod_accel-1.0.34
- remove patch, verfied it is in distribution

- support for options:
  APACHE_DATADIR,APACHE_CGIBIN_ROOT,APACHE_DOCUMENT_ROOT
- new options:
  APACHE_LOCALSTATE_DIR,APACHE_LOGFILE_DIR
Submitted by:   Bernard J. Treves Brown

- support for options:
  DEFAULT_PATH

Chase shlib bump of libexpat.

Now that new style rc.d scripts are being run as part of the
base rcorder, hard coded variable values in these scripts
are overriding the values in /etc/rc.conf[.local] (due to
the way that variables from the latter are read at boot time).

Therefore, change the boot scripts to set default values only
if the variable is unset in /etc/rc.conf[.local]. This will
allow the service to start at boot time if it's been enabled
as the user would expect.

This change will be a noop for users who have systems that
have not yet been upgraded to the new rc.d code in the base.

In many cases there are other variables in the scripts that
should get similar treatment, however I did not change
anything other than the _enable lines. I'll leave the rest
up to the maintainers to do as they see fit.

Bump PORTREVISION to make sure that users and packages
pick up this change.

- Securitry Fix
SECURITY: CVE-2005-3352 (cve.mitre.org)

Obtained from:  ports

- Update to 2.8.25-1.3.34

- honor LDFLAGS
- fix EXPAT options
in some cases the external expat was not used.

- unbreak updated dependency (devel/mm)
Submitted by:   Michael Voucko

- update to 1.3.33+2.8.24

- fix build of mod_accel on amd64
PR:             84150
Submitted by:   Bjoern Koenig

- Security Fix CAN-2005-2088

- support new options APACHE_DATADIR, APACHE_DOCUMENT_ROOT
Suggested by: Steve Clement

- update mod_snmp_1.3.14.13, remove BROKEN

- new option WITH_APACHE_LATESTLOG
that patches rotatelogs to always keep a hardlink to the latest log
file, but without the seconds-since-epoch integer. Just as a
convenience - when developing web apps, it makes it easier to just
check the log file.
Submitted by:   Palle Girgensohn

- fix package when WITHOUT_RC_SUBR=YES
and old rc files are installed.
Submitted by:   Dave Ryan

- better wording for a build error.

- update to 2.8.22-1.3.33

- Security Patch
CAN-2004-?0940
Obtained from:  apache-1.3.33

- Security update to 2.8.21-1.3.32
* CAN-2004-0492 (cve.mitre.org)
Reject responses from a remote server if sent an invalid (negative)
Content-Length.

- update mod_snmp to 1.3.14.13
- fix build dependency
:

- Security update to 2.8.20-1.3.31

- Patch for keepalive-bug
PR:             71961
Submitted by:   Kenneth Vestergaard Schmidt

- Security Fix
- update to 2.8.19-1.3.31

- sync build options with other apache ports again.
headsup: please reanme your existings options
PR:             67937
Suggested by:   eik

-new option: WITH_APACHE_INTERNAL_EXPAT

- allow customizing of CATEGORIES
PR:             67937
Submitted by:   eik

- Security Fix
mod_proxy buffer overflow  CAN-2004-0492

- fix extract problems with bsdtar
Reported by:    Tim Kientzle

- update to mod_deflate-1.0.21
Denis Shaposhnikov

- update to mod_ssl-2.8.18-1.3.31
Reported by: kris

- allow build without expat, new option APACHE_WITHOUT_EXPAT
To run some (mod_perl) applications, a full expat library is needed, but the
built-in one conflicts with it.  This patch allows you to build Apache without
the built-in expat so the other modules can load what they need.

PR:             66650
Submitted by:   Vivek Khera

- move USE_RC_SUBR before bsd.port.pre.mk

- Security update to 2.8.17-1.3.31
- detect fnmatch.h conficts

s/run_rc_commmand/run_rc_command/

Pointed out by: Dan Langille <dan@langille.org>
Pointy hat to:  nork

- rcNG-fy
Submitted by:   nork

WARNING installing the package will overwrite your "etc/rc.d/apache.sh"
installing from port is safe

- new option WITHOUT_RC_SUBR

- fix empty dir in option.

- building mod_accel and friends as apache so modules
Denis Shaposhnikov

- use PLIST_FILES for options

- update CONFLICTS

- add mod_deflate
Submitted by:   Denis Shaposhniko

- CONFLICTS extended

- new option APACHE_WITH_MODACCEL
Submitted by:   Denis Shaposhnikov

- cleanup of all options
- CONFLICTS extended

- Fix build of IPV6 (no Security patch needed)
- cleanup mod_snmp option

- Add securirty Fix from cvs

http://www.apacheweek.com/features/security-13

Source:
http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_access.c?r1=1.46&r2=1.47

Link from:      nectar
Reviewed by:    Munechika Sumikawa (IPV6)

- Fix collision when APACHE_WITH_MODSNMP and APACHE_WITH_IPV6
  are selected.

- Update PATCH_SITES for mod_snmp
Problem found by: Subhi S Hashwa

- option WITH_APACHE_IPV6
PR:             42427
Submitted by:   sec@42.org

- fix Usage

- new option APACHE_RELATIVE_RUNTIMEDIR

- add new Option APACHE_WITH_MODSNMP
PR:             43997
Submitted by:   zin@the.ne.jp

- update to 2.8.16-1.3.29
- remove the now obsolte fixes.

- Security Fix for mod_rewrite with more than 9 brackets.
http://www.apache.org/dist/httpd/Announcement.html

- extend CONFLICTS with w3c-httpd-3.*

- add CONFLICTS
- use DOCSDIR
Submitted by:   eikemeier@fillmore-labs.com [CONFLICTS]

- change ECHO -> ECHO_MSG

- drop defunctional MASTER_SITES

- use hook for bsd.openssl.mk

Call the ${PKGINSTALL} script via ${SH} so that it works in case the
ports tree is mounted noexec.

- Take maintainership

- Fix SUEXEC leaving zombies behind
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21737
http://marc.theaimsgroup.com/?l=apache-httpd-dev&m=105952652425849&w=2
Suggested by: efortenb@sdccd.cc.ca.us

- update to 2.8.15-1.3.28

Bump libmm shlib version after recent update of devel/mm.

- drop defunct define

o DEFAULT_PATH used by --suexec-safepath changed to APACHE_SUEXEC_SAFEPATH
o new build options are APACHE_SUEXEC_CALLER, APACHE_SUEXEC_LOG,
  APACHE_SUEXEC_UIDMIN, APACHE_SUEXEC_GIDMIN, APACHE_SUEXEC_SAFEPATH,
  APACHE_SUEXEC_UMASK
o add APACHE_HARD_SERVER_LIMIT build option
o WITH_APACHE_PERF_TUNING changed to APACHE_PERF_TUNING
o add APACHE_FD_SETSIZE and APACHE_BUFFERED_LOGS build options
  - separated from APACHE_PERF_TUNING
o CFLAGS option, used by APACHE_PERF_TUNING, is changed
o cosmetic changes

PR:             50455
Submitted by:   drazen@avalon.hr

- force bind with openssl port/base as configured

- remove PKG_PREFIX
PR:             50688
Submitted by:   mike@tric.tomsk.gov.ru

- Installation of the port fails at the pre-install stage
  when it tries to execute the pkg-install script.
  The script resides in the ports tree and but not in the WRKDIR
PR:             50688
Submitted by:   mike@tric.tomsk.gov.ru

- use bsd.openssl.mk

Upgrade to mod_ssl-2.8.14-1.3.27 to fix the recent discovered
openssl vulnerabilities. I double checked the checksums and
the Tarball Digital Signatures.

De-pkg-comment.

Use MASTER_SITE_APACHE*.

PR:             47984
Submitted by:   Kimura Fuyuki <fuyuki@hadaly.org>

- update SSL support.
defaults to openssl port (now 0.9.6.h)
New options:
use the lastest version (now 0.9.7)
        USE_OPENSSL_BETA=yes
use teh base version with
        USE_OPENSSL_BASE=yes

Update mod_ssl to version 2.8.12 which deals with a Cross-Site-Scripting
(XSS) security issue:
http://www.apacheweek.com/issues/02-10-25#security
modssl-users@modssl.org/msg15366.html">http://www.mail-archive.com/modssl-users@modssl.org/msg15366.html

Note: This update does not fix ports/36804 - be sure to backup your
certificates before updating.

Add MASTER_SITE_RINGSERVER to MASTER_SITES.

Update to apache 1.3.27 and 2.0.43.  This fixes a security vulnerability.
Mark apache13-ssl FORBIDDEN because the new version does not yet exist.

Partially based on patches submitted by below authors.

Submitted by:   "Sergey A. Osokin" <osa@freebsd.org.ru>,
                Udo Schweigert <udo.schweigert@siemens.com>,
                Lev A. Serebryakov <lev@serebryakov.spb.ru>
PR:             ports/43682, ports/43688, ports/43666, ports/43681

find->${FIND},xargs->${XARGS}

PR:             40791
Submitted by:   Simon 'corecode' Schubert <corecode@corecode.ath.cx>

Bump shared library version because of devel/mm update

PR:             ports/41053
Submitted by:   Scott Lampert <scott@lampert.org>

Sync with www/apache13: suexec

PR:             ports/40426
Submitted by:   Brad Laue <brad@brad-x.com>
Reviewed by:    tobez

Don't clobber CONFIGURE_ARGS if user defines it.

PR:             ports/40019
Submitted by:   Christopher H. Laco <chris.laco@threetech.com>

- Update to 1.3.26+2.8.10
- Use MASTER_SITES grouping

- Sync with www/apache13 a bit
- Fix clobbering ${PREFIX}/www on install and warnings coughing up
  on deinstall when ${PREFIX}/www is not empty
- Remove pkg-deinstall

PR:             ports/39645, ports/36804
Submitted by:   Charles Sprickman <freebsd@fasttrackmonkey.com>,
                Peter C. Lai <sirmoo@cowbert.2y.net>

Update to apache 1.3.26 / mod_ssl 2.8.9.
Fixes chunking vulnerability, so now no longer FORBIDDEN.

Mark FORBIDDEN until an update is available.
See <URL:http://httpd.apache.org/info/security_bulletin_20020617.txt>.

- make it work with newer SSL
( same hack as in suck, openssh and openssh-portable )
USE_OPENSSL should be improved, see PR: ports/36080

PR:             36080

Make startscript apache.sh PREFIX aware at install time,
so it can be called within an path or dir.
e.g. in: /usr/local/etc/rc.local/apache.sh

Update to 1.3.24+2.8.8

Small sync with apache13
- The standard apache distribution now comes with a FreeBSD layout
  that is the same as the one that was in files/FreeBSD.layout

Update to modssl version 2.8.7    

Update to 1.3.23+2.8.6    

use xargs -0 to avoid 'unterminated quote' error at ${PREFIX}/share/doc.    

Back out last commit.    

fix finding OpenSSL problem    

Suggest a command to delete user instead of actually deleting it    

Merge from www/apache13:     Don't put 'manual' link to the Apache manual.    

Merge from www/apache13:     Add symbolic link to apache's manual into
pkg-plist.    

Number of commits found: 120 (showing only 100 on this page)

1 | 2  »  

20 vulnerabilities affecting 36 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities