A ports freeze means that commits will be few and far between and only by approval.

Number of commits found: 14

- retire www/apache2

- Don't rerun the apache2.sh rc script on restart's, just stop and start
  normally

PR:             ports/86402
Submitted by:   Jarrod Sayers <jarrod@netleader.com.au>

- Fix reload/restart when using profiles

Submitted by:   thomas, Jarrod <jarrod@netleader.com.au>

- Remove debug line.

- Add support for multiple instances of apache2 to startup script.
  It's a little bit experimental, but it works.

o startup script:
- Use apache{2,21}flags variable in apache{2,21}_checkconfig().
  It fixes restart when apache2ssl_enable is set to YES in rc.conf
  and httpd.conf is "old" (i.e. non -DSSL safe) [1]

o Makefile
- split post-install target to add install-startup-script:
  User can now upgrade startup script without reinstalling apache2.
  NOTE: this is NOT package-safe and NOT supported, even if in most of
  cases they're no risk.

Noticed by:     many [1]

- minor cleanups.

- Add a sanity check on apache2 configuration files before reloading or
  restarting apache2 (to avoid an expected failure on restart)

apache2 NG patch 1/5.

o Changes in httpd.conf
  - mod_userdir:
        . set Userdir if mod_userdir is loaded [1]
        . Userdir is denied for users from /etc/ftpusers
  - set more "secure" permissions.
    By default, policy is to deny access to filesystem.
    You HAVE to _ENABLE_ access to your filesystem in httpd.conf.
  - Add an "Includes" directory to ${PREFIX}/etc/apache2/
    to make configuration more flexible
    ${PREFIX}/etc/apache2/*.conf files are now automatically loaded.

o apache.sh
  - be closer to apachectl, apache.sh need envvars [2]
    It should restore subversion behavior.

Partially submitted by:
                kuriyama [1],
                Gregory (Grisha) Trubetskoy <grisha at apache dot org> [2]

Future changes are mostly written, they should be committed during the
week-end.
If you're interrested in changes, feel free contact me.

- change limits from user www to daemon class to be in sync with
  apachectl
- fix limits (missing eval)

-1- make show-options readable from a vt100 ;-)
-2- add WITH_DEBUG knob (supports DEBUG_FLAGS)
-3- convert start script to RCng [1]
    - add possibility to run limits(1) before apache starts
    - apache2.sh reload = apachectl graceful
-4- Add threadpool MPM
-5- Adapt COMMENT to fit MPM.
-6- Bump PORTREVISION

PR:             ports/66955 [1]
Submitted by:   nork [1] (partially)
Requested by:   ume [1]

- Update to 2.0.39, the emergency security update.
- Unmark FORBIDDEN

PR:             ports/39477
Submitted by:   maintainer

Respect $DESTDIR for all paths

PR:             37211
Submitted by:   maintainer

Update to 2.0.35 (first GA release!)

PR:             36834
Submitted by:   maintainer

Number of commits found: 14

14 vulnerabilities affecting 30 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities