| Commit History - (may be incomplete: see CVSWeb link above for full details) |
| Date | By | Description |
13 Jul 2008 19:19:16
  1.3.41.1.59_1
|
itetcu  |
load_rc_config before testing for empty vars.
Submitted by: dougb@ |
13 Jul 2008 05:37:41
1.3.41.1.59_1
|
itetcu |
- Honor NO* vars (noticed by ionbot)
- Silence some portlint warnings
- USE_RC_SUBR from the rc.d script
- Bump PORTREVISION
PR: 125131
Submitted by: Philip M. Gollucci |
15 Apr 2008 12:50:11
1.3.41.1.59
|
dinoex |
- Security update to 1.3.41+ssl_1.59
Security: CVE-2008-0555
- fix objformat
PR: 120105 |
17 Jun 2007 17:59:27
1.3.37.1.57
|
anders |
Remove thttpd from conflicts list, it has a different name for its
passwd program now.
Approved by: maintainers/erwin |
18 Mar 2007 17:13:58
1.3.37.1.57
|
clement |
- Update to 1.3.37-1.57 |
27 Jul 2006 21:26:29
1.3.34.1.57_2
|
clement |
- Fix security issue in mod_rewrite.
All people using mod_rewrite are strongly encouraged to update.
An off-by-one flaw exists in the Rewrite module, mod_rewrite.
Depending on the manner in which Apache httpd was compiled, this
software defect may result in a vulnerability which, in combination
with certain types of Rewrite rules in the web server configuration
files, could be triggered remotely. For vulnerable builds, the nature
of the vulnerability can be denial of service (crashing of web server
processes) or potentially allow arbitrary code execution.
This issue has been rated as having important security impact
by the Apache HTTP Server Security Team
Updates to latest versions will follow soon.
Notified by: so@ (simon)
Obtained from: Apache Security Team
Security: CVE-2006-3747 |
20 Feb 2006 20:47:50
1.3.34.1.57_1
 |
dougb |
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts. |
22 Jan 2006 02:58:25
1.3.34.1.57_1
|
edwin |
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry
Approved by: krion@
PR: ports/88711 (related) |
16 Jan 2006 10:13:26
1.3.34.1.57_1
|
clement |
- Remove duplicated mor_dir entries
- Always build (mod_)apache_ssl statically.
- Fix MAN8 logic [1]
Reported by: pointyhat via kris [1] |
14 Jan 2006 13:59:20
1.3.34.1.57
|
clement |
- Update to 1.3.34+1.37
- Use new apache framework. |
12 Dec 2005 20:31:53
1.3.33.1.55_2
|
clement |
SECURITY: CVE-2005-3352 (cve.mitre.org)
mod_imap: Escape untrusted referer header before outputting in HTML
to avoid potential cross-site scripting. Change also made to
ap_escape_html so we escape quotes. Reported by JPCERT.
[Mark Cox]
Reported by: simon |
03 Oct 2005 07:07:19
1.3.33.1.55_1
|
linimon |
Remove obsolete mastersite.
Source: distfile survey |
02 Oct 2005 14:00:06
1.3.33.1.55_1
|
clement |
- Fix build with OpenSSL 0.9.8 |
26 Jul 2005 14:57:42
1.3.33.1.55_1
|
clement |
- Fix CAN-2005-2088
Obtained from: Apache repository |
06 Jun 2005 16:16:31
1.3.33.1.55
|
clement |
- While I'm here, kick portname from COMMENT |
06 Jun 2005 16:09:56
1.3.33.1.55
|
clement |
- En1arge its maintainership |
13 Dec 2004 21:06:18
1.3.33.1.55
|
clement |
- move default configuration files to ${EXAMPLESDIR} and keep
${PREFIX}/etc/apache clean. |
13 Dec 2004 11:16:47
1.3.33.1.55
|
clement |
- Xmas for apache13-ssl!
Give it a rcNG startup script
Also requested by: sem |
29 Nov 2004 20:14:52
1.3.33.1.55
|
clement |
- Deal with httpsd.conf.bak files, like we did for apache2 previously in the
day. |
12 Nov 2004 10:40:52
1.3.33.1.55
|
clement |
- Update to 1.3.33.1.55 |
31 Jul 2004 12:56:38
1.3.29.1.55
|
clement |
- update to 1.3.29+1.55 |
11 Jun 2004 13:19:05
1.3.29.1.53_2
|
clement |
- Security Fix
mod_proxy buffer overflow CAN-2004-0492
Shamefully stolen from: apache13-mod-ssl port |
09 Jun 2004 07:16:07
1.3.29.1.53_1
|
kris |
Don't remove www/ now that it is created by the system. |
07 Apr 2004 14:47:37
1.3.29.1.53_1
|
clement |
- tar -> ${TAR}
While I'm here put --target=httpsd at the right place. |
18 Mar 2004 20:50:09
1.3.29.1.53_1
|
dinoex |
- CONFLICTS extended |
08 Mar 2004 13:29:47
1.3.29.1.53_1
|
clement |
Fix a bug in the parsing of Allow/Deny rules using IP addresses.
http://www.vuxml.org/freebsd/09d418db-70fd-11d8-873f-0020ed76ef5a.html
Reported by: nectar
Obtained from: Apache CVS |
06 Feb 2004 22:40:34
1.3.29.1.53
|
clement |
- Update to apache 1.3.29
- Update to patchset 1.53
***** SECURITY FIX *****
http://www.apache-ssl.org/advisory-20040206.txt
Time to ask eik how to add it to portaudit |
21 Jan 2004 09:32:13
1.3.28.1.52
|
clement |
Rename patch.
post-patch-conf:httpd.conf-dist.orig =>
post-patch-conf:httpd.conf-dist
Pointed out by: kris,
Koop Mast <kwm@rainbow-runner.nl> |
13 Jan 2004 15:04:51
1.3.28.1.52
|
clement |
- Update my email address
Approved and reviewed by: erwin (mentor) |
20 Nov 2003 11:25:42
1.3.28.1.52
|
jeh |
update apache-ssl patch to 1.52.
apache 1.3.29 is not yet supported.
PR: 59355
Submitted by: Maintainer |
12 Nov 2003 21:09:27
1.3.28.1.51_1
|
jeh |
Here's the patch.
files/patch-FixPatch was missing too.
Submitted by: MAINTAINER |
09 Nov 2003 00:42:20
1.3.28.1.51
|
jeh |
Changelog:
- Sync with apache13 layout (and some patches)
- use DOCSDIR
- Add no_zombies.patch
- use DIST_SUBDIR=apache
Removed files:
- files/patch-aq
- files/patch-ar
Added files:
- files/patch-httpd.conf-dist
- files/post-patch-conf:httpd.conf-dist.orig
- files/patch-FixPatch
- files/patch-SSLpatch
- files/patch-Makefile.tmpl
- files/patch-src::modules::standard::mod_auth_db.module
- files/patch-src::support::dbmanage
- files/patch-src::support::log_server_status
- files/patch-configure
PR: 58403
Submitted By: MAINTAINER |
25 Oct 2003 21:47:38
1.3.28.1.49
|
dinoex |
- fix spelling in CONFLICTS |
14 Oct 2003 16:47:28
1.3.28.1.49
|
dinoex |
- add CONFLICTS
Submitted by: eikemeier@fillmore-labs.com
Approved by: kris |
28 Sep 2003 08:19:54
1.3.28.1.49
|
dinoex |
- Update to 1.3.28.1.49.
- Add suexec support
- Misc changes
- Add a footnote for users, to announce them that next version
will be a complete resync with apache13 ports layout.
PR: 57300
Submitted by: sheepkiller@cultdeadsheep.org |
24 Sep 2003 18:26:47
1.3.27.1.48_3
|
dinoex |
- change ECHO -> ECHO_CMD
PR: 56847 |
06 Sep 2003 22:20:45
1.3.27.1.48_3
|
dinoex |
- drop defunctional MASTER_SITES |
30 Aug 2003 09:02:23
1.3.27.1.48_3
|
dinoex |
- change YES -> yes |
28 Aug 2003 16:38:35
1.3.27.1.48_3
|
dinoex |
- use hook for bsd.openssl.mk
- Cleanup Makefile |
05 Apr 2003 07:55:55
1.3.27.1.48_2
|
dinoex |
- caption in MAINTAINER |
03 Apr 2003 20:39:55
1.3.27.1.48_2
|
dinoex |
- use bsd.openssl.mk |
20 Feb 2003 19:15:38
1.3.27.1.48_2
|
knu |
De-pkg-comment. |
13 Feb 2003 15:04:03
1.3.27.1.48_2
|
naddy |
Use MASTER_SITE_APACHE*.
PR: 47984
Submitted by: Kimura Fuyuki <fuyuki@hadaly.org> |
27 Jan 2003 17:05:36
1.3.27.1.48_2
|
dinoex |
- Use user and group "www"
- fix PLIST
- add patch from ports/36363 (from ryan@servercity.com)
- verify ports/36361
- fix ports/36364 |
20 Jan 2003 18:06:38
1.3.27.1.48_1
|
dinoex |
- update SSL support.
defaults to openssl port (now 0.9.6.h)
New options:
use the lastest version (now 0.9.7)
USE_OPENSSL_BETA=yes
use the base version with
USE_OPENSSL_BASE=yes |
14 Dec 2002 11:25:14
1.3.27.1.48_1
|
dinoex |
- clean up PLIST, unbreak portbuild
- remove config if files are not altered |
06 Nov 2002 16:01:59
1.3.27.1.48_1
|
joerg |
Unmark this port from being forbidden; the reason by its time was that
the port had been updated to 1.2.27 and ssl-1.48 which simply did not
exist then.
Now they do exist. Since it builds, installs and runs correctly with
no further changes, and all the other apache-1.2.27-based ports are
back alive again, there's no reason to keep this one forbidden.
Don't be alarmed that the MD5 sum changes: the previous one in
distinfo was actually the checksum from apache_1.3.26+ssl_1.48.tar.gz,
since the last update to that file only changed the name but not the
MD5 sum. Alas, i could not find any authoritative MD5 on
http://www.apache-ssl.org/ to verify against. |
12 Oct 2002 22:57:11
1.3.27.1.48_1
|
knu |
Add MASTER_SITE_RINGSERVER to MASTER_SITES.
Tag apache-ssl sites with :ssl. |
05 Oct 2002 10:18:45
1.3.27.1.48_1
|
kris |
Update to apache 1.3.27 and 2.0.43. This fixes a security vulnerability.
Mark apache13-ssl FORBIDDEN because the new version does not yet exist.
Partially based on patches submitted by below authors.
Submitted by: "Sergey A. Osokin" <osa@freebsd.org.ru>,
Udo Schweigert <udo.schweigert@siemens.com>,
Lev A. Serebryakov <lev@serebryakov.spb.ru>
PR: ports/43682, ports/43688, ports/43666, ports/43681 |
15 Sep 2002 13:34:17
1.3.26.1.48_1
|
dinoex |
Update to 1.3.26+ssl_1.48
removed FORBIDDEN |
01 Sep 2002 17:07:59
1.3.12.1.40_1
|
dwcjr |
${PERL} -> ${REINPLACE_CMD}
PR: 40784
Submitted by: corecode@corecode.ath.cx
Reviewed by: flynn@energyhq.homeip.net |
18 Jun 2002 13:33:14
1.3.12.1.40_1
|
nectar |
Mark FORBIDDEN until an update is available.
See <URL:http://httpd.apache.org/info/security_bulletin_20020617.txt>. |
28 Mar 2002 22:53:08
1.3.12.1.40_1
|
petef |
Fix a master site.
PR: 36409
Submitted by: Kimura Fuyuki <fuyuki@mj.0038.net> |
23 Mar 2002 19:34:54
1.3.12.1.40_1
|
nectar |
Patch buffer overflow described in
<URL:http://www.apache-ssl.org/advisory-20020301.txt>. |
01 Mar 2002 19:39:18
|
jedgar |
Change BROKEN to FORBIDDEN due to security vulnerabilities. Add SSL
vulnerability to the list: http://www.apache-ssl.org/advisory-20020301.txt
|
21 Dec 2001 19:31:33
|
nectar |
Oops, forgot to quote the parens. Quoting makes the line > 80 characters, so
take a slightly different approach. |
21 Dec 2001 19:25:38
|
nectar |
Set MAINTAINER to freebsd-ports. Previous maintainer says, ``i no longer
support this port as i got fed up with the port committers ignoring my
updates.'' |
01 Jan 2001 10:15:17
|
will |
Goodbye, YEAR2000. Hello, 2001. |
29 Oct 2000 22:43:42
|
steve |
Run 'make certificate' from the correct directory. |
08 Oct 2000 09:11:25
|
asami |
Convert category www to new layout. |
22 Sep 2000 03:59:06
|
kris |
Update all ports using OpenSSL and RSA to work without rsaref since it is no
longer required. Apologies to the various maintainers whom I did not yet hear
back from, but the ports freeze is coming up in a few hours and I will be
verifying all of these ports on a 4.1 machine myself to catch any problems.
|
22 Aug 2000 05:41:07
|
kuriyama |
Cosmetic changes to reduce difference between apache13 ports. (whitespace/tab,
re-ordering, same $DISTNAME) |
09 Aug 2000 19:47:16
|
cpiazza |
Fix up MASTER_SITES |
