A ports freeze means that commits will be few and far between and only by approval.

Number of commits found: 32

- update to 2.8.28-1.3.37
- merge Configure patches

- preserve symbolic links if modified
Suggested by:   Panagiotis Christias

Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)

- Update to 2.8.25-1.3.34

- Security update to 2.8.21-1.3.32
* CAN-2004-0492 (cve.mitre.org)
Reject responses from a remote server if sent an invalid (negative)
Content-Length.

- update mod_snmp to 1.3.14.13
- fix build dependency
:

Don't remove www/ now that it is created by the system.

- Security update to 2.8.17-1.3.31
- detect fnmatch.h conficts

- rcNG-fy
Submitted by:   nork

WARNING installing the package will overwrite your "etc/rc.d/apache.sh"
installing from port is safe

- new option WITHOUT_RC_SUBR

- building mod_accel and friends as apache so modules
Denis Shaposhnikov

- use PLIST_FILES for options

- add mod_deflate
Submitted by:   Denis Shaposhniko

- CONFLICTS extended

- new option APACHE_WITH_MODACCEL
Submitted by:   Denis Shaposhnikov

- cleanup of all options
- CONFLICTS extended

- option WITH_APACHE_IPV6
PR:             42427
Submitted by:   sec@42.org

- fix Usage

- add new Option APACHE_WITH_MODSNMP
PR:             43997
Submitted by:   zin@the.ne.jp

- update to 2.8.16-1.3.29
- remove the now obsolte fixes.

- add CONFLICTS
- use DOCSDIR
Submitted by:   eikemeier@fillmore-labs.com [CONFLICTS]

- update to 2.8.15-1.3.28

- Remove only symbolic links on deinstall
PR:             36804

Update to apache 1.3.27 and 2.0.43.  This fixes a security vulnerability.
Mark apache13-ssl FORBIDDEN because the new version does not yet exist.

Partially based on patches submitted by below authors.

Submitted by:   "Sergey A. Osokin" <osa@freebsd.org.ru>,
                Udo Schweigert <udo.schweigert@siemens.com>,
                Lev A. Serebryakov <lev@serebryakov.spb.ru>
PR:             ports/43682, ports/43688, ports/43666, ports/43681

Sync with www/apache13: suexec

PR:             ports/40426
Submitted by:   Brad Laue <brad@brad-x.com>
Reviewed by:    tobez

- Sync with www/apache13 a bit
- Fix clobbering ${PREFIX}/www on install and warnings coughing up
  on deinstall when ${PREFIX}/www is not empty
- Remove pkg-deinstall

PR:             ports/39645, ports/36804
Submitted by:   Charles Sprickman <freebsd@fasttrackmonkey.com>,
                Peter C. Lai <sirmoo@cowbert.2y.net>

Update to apache 1.3.26 / mod_ssl 2.8.9.
Fixes chunking vulnerability, so now no longer FORBIDDEN.

Update to 1.3.24+2.8.8

Update to 1.3.23+2.8.6    

Merge from www/apache13:     Don't put 'manual' link to the Apache manual.    

Merge from www/apache13:     Add symbolic link to apache's manual into
pkg-plist.    

Fix plist.    

Sync with main Apache port    

Upgrade to Apache 1.3.22 + mod_ssl 2.8.5    

Upgrading to Apache 1.3.20 + mod_ssl 2.8.4    

Upgrade to Apache 1.3.19 + mod_ssl 2.8.1    

Upgrade to Apache 1.3.17 + mod_ssl 2.8.0.    

Gently persuade apache13-modssl to install in the same filesystem   space as
www/apache13 does, so that other apache-dependendent ports   DTRT regardless of
which one is installed.    

Upgrade:   Apache  1.3.12 -> 1.3.14   mod_ssl 2.6.6  -> 2.7.1    

Number of commits found: 32

14 vulnerabilities affecting 30 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities