| Commit History - (may be incomplete: see CVSWeb link above for full details) |
| Date | By | Description |
09 Feb 2012 02:49:55
2.2.22_4
|
pgollucci  |
- use $SYSCTL
- use full path setfib
PR: ports/153264
Submitted by: Jeremy Chadwick <freebsd@jdc.parodius.com>
With Hat: apache@
Sponsored by: Apache Software Foundation (ASF) |
08 Feb 2012 22:49:54
2.2.22_3
|
pgollucci  |
- Remove 0 length file breaking pkg
Reported by: glarkin |
08 Feb 2012 04:35:31
2.2.22_2
|
pgollucci  |
- Convert to USERS/GROUPS [1]
- Resync proxy connect patch [2]
- Bump PORTREVISION since the proxy patch is unconditionally applied
which means we can remove that OPTION too
PR: ports/164698 [1], ports/164711 [2]
Submitted by: jgh@ [1], freebsd@nagilum.org [2]
With Hat: apache@
Sponsored by: RideCharge Inc. / TaxiMagic |
01 Feb 2012 18:56:08
2.2.22
|
jgh  |
- Update to 2.2.22
Addresses:
* SECURITY: CVE-2011-3607 (cve.mitre.org)
Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP
Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif
module is enabled, allows local users to gain privileges via a .htaccess file
with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request
header, leading to a heap-based buffer overflow.
* SECURITY: CVE-2012-0021 (cve.mitre.org)
The log_cookie function in mod_log_config.c in the mod_log_config module in the
Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not
properly handle a %{}C format string, which allows remote attackers to cause a
denial of service (daemon crash) via a cookie that lacks both a name and a(Only the first 15 lines of the commit message are shown above ) |
23 Jan 2012 23:24:38
2.2.21  |
pgollucci  |
- Restore inadvertently removed log renames from previous commit
Noticed by: sunpoet@
Pointy Hat: pgollucci@ |
18 Jan 2012 03:44:39
2.2.21  |
pgollucci  |
- Pull r1227293 from httpd svn
Note, you have to actually uncomment the include for this to take affect
- No PORTREVISION bump since nothing changes by default
PR: ports/156987
Reported by: Adrian Dimcev <adimcev@carbonwind.net>
With Hat: apache@ |
14 Jan 2012 08:57:23
2.2.21  |
dougb  |
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other. |
23 Sep 2011 22:26:39
2.2.21  |
amdmi3  |
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav |
15 Sep 2011 05:00:28
2.2.21  |
ohauer  |
- update to version 2.2.21
Addresses:
* SECURITY: CVE-2011-3348 (cve.mitre.org)
mod_proxy_ajp when combined with mod_proxy_balancer: Prevents
unrecognized HTTP methods from marking ajp: balancer members
in an error state, avoiding denial of service.
* SECURITY: CVE-2011-3192 (cve.mitre.org)
core: Further fixes to the handling of byte-range requests to use
less memory, to avoid denial of service. This patch includes fixes
to the patch introduced in release 2.2.20 for protocol compliance,
as well as the MaxRanges directive.
PR: ports/160743
Submitted by: Jason Helfman <jhelfman@experts-exchange.com> |
12 Sep 2011 23:17:33
2.2.20_1  |
gabor  |
- Track dependencies after databases/gdbm update |
12 Sep 2011 13:46:59
2.2.20  |
gabor  |
- Track dependencies after databases/gdbm update |
02 Sep 2011 06:18:02
2.2.20  |
ade  |
Emergency upgrade to 2.2.20 - CVE-2011-3192. Any complaints, talk to me.
PR: 160381 |
29 Jun 2011 17:28:44
2.2.19  |
ohauer  |
- Close a race condition that sometimes resulted in configure.in
patches being ignored |
22 May 2011 21:33:31
2.2.19  |
ohauer  |
- update to httpd-2.2.19
Changes with Apache 2.2.19
*) Revert ABI breakage in 2.2.18 caused by the function signature change
of ap_unescape_url_keep2f(). This release restores the signature from
2.2.17 and prior, and introduces ap_unescape_url_keep2f_ex().
[Eric Covener]
commit with hat apache@ |
14 May 2011 21:53:21
2.2.18  |
ohauer  |
- unbreak mpm-itk-20110321-01 patch
PR: ports/157041
Submitted by: zlopi.ru <zlopi.ru _at gmail.com> |
13 May 2011 23:02:38
2.2.18  |
ohauer  |
- update to version 2.2.18
Changes:
http://www.apache.org/dist/httpd/CHANGES_2.2.18
Changes with Apache 2.2.18
*) Log an error for failures to read a chunk-size, and return 408 instead
413 when this is due to a read timeout. This change also fixes some cases
of two error documents being sent in the response for the same scenario.
[Eric Covener] PR49167
*) core: Only log a 408 if it is no keepalive timeout. PR 39785
[Ruediger Pluem, Mark Montague <markmont umich.edu>]
(Only the first 15 lines of the commit message are shown above ) |
18 Apr 2011 20:32:33
2.2.17_2  |
ohauer  |
- fix Ports with version numbers going backwards for www/apache22-peruser-mpm
- by changing PORTREVISION= to ?=
Issue reported by erwin@ |
31 Mar 2011 17:00:37
2.2.17_2  |
ohauer  |
- update Apache 2 ITK MPM patch to version 20110321-01 [1]
- add additional patch for mpm-itk [2]
- add mod_substitute to apache22 [3]
- add some documentation into the mpm-itk* patches
- bump portrevision
Changes:
[1] apache2.2-mpm-itk 2.2.17-01, released 2011-03-21:
* Fixed CVE-2011-1176: If NiceValue was set, the default with no
AssignUserID was to run as root:root instead of the default Apache user
and group, due to the configuration merger having an incorrect default
configuration.
* Rebase against Apache 2.2.17.
* Fix an issue where users can sometimes get spurious 403s on persistent
connections, if the .htaccess files are not world readable.(Only the first 15 lines of the commit message are shown above ) |
19 Mar 2011 12:38:54
2.2.17_1  |
miwi  |
- Get Rid MD5 support |
07 Dec 2010 20:38:17
2.2.17_1  |
pgollucci  |
- update conflicts |
04 Dec 2010 07:34:27
2.2.17_1  |
ade  |
Sync to new bsd.autotools.mk |
21 Oct 2010 18:00:15
2.2.17_1  |
pgollucci  |
- The previous update to the rc.d script didn't quite maintain the old behavior
correctly. This fixes the pid file name
PR: ports/151623
Submitted by: Vivek Khera <vivek@khera.org>
With Hat: apache@
Point hat to: myself (pgollucci) |
20 Oct 2010 21:04:58
2.2.17  |
pgollucci  |
- Update to 2.2.17
**
* Note, no CVE affects the FREEBSD port. devel/apr1 was updated to
* apr-util 1.3.10 on 2010/10/06 05:32:24.
**
Changes: http://www.apache.org/dist/httpd/CHANGES_2.2
PR: ports/151594
Submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
With Hat: apache@
<ChangeLog>
*) prefork MPM: Run cleanups for final request when process exits gracefully
to work around a flaw in apr-util. PR 43857. [Tom Donovan](Only the first 15 lines of the commit message are shown above ) |
16 Oct 2010 11:52:47
2.2.16_2  |
ade  |
Punt autoconf267->autoconf268 |
14 Oct 2010 20:20:06
2.2.16_2  |
pgollucci  |
- s,/usr/local,%%PREFIX%%,'
Reported by: stas |
14 Oct 2010 19:53:25
2.2.16_2  |
pgollucci  |
- Allow overriding of the following on a profile basis.
pidfile
command
envvars
Without profiles, the old defaults remain unchanged. With profiles the old
defaults
remain unchanged.
Sponsored by: RideCharge Inc. / TaxiMagic
Tested by: RideCharge Inc. / TaxiMagic (> 1 yr in
production)
With Hat: apache@ |
15 Sep 2010 18:35:24
2.2.16_1  |
ade  |
Autotools update. Read ports/UPDATING 20100915 for details.
Approved by: portmgr (for Mk/bsd.port.mk part)
Tested by: Multiple -exp runs |
26 Jul 2010 01:28:40
2.2.16  |
kuriyama  |
- Upgrade to 2.2.16.
Security: CVE-2010-1452 (mod_{cache,dev} remote DoS),
CVE-2010-2068 (mod_{proxy_{ajp,http},reqtimeout} related on some
platforms) |
21 May 2010 16:28:25
2.2.15_9  |
pgollucci  |
Bump PORTREVISION forgotten in last commit, by /home/ncvs lied to me.
- Fix misnamed patch that was unconditionally applied.
PR: ports/146789
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
With Hat: apache@ |
21 May 2010 16:27:10
2.2.15_8  |
pgollucci  |
- Fix misnamed patch that was unconditionally applied.
PR: ports/146789
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
With Hat: apache@ |
20 May 2010 21:43:47
2.2.15_8  |
pgollucci  |
- Enable,build, and install mod_reqtimeout.so which mitigates solaris attacks.
- Default on, so bump PORTREVISION
Reuested by: Jonas Eckerman <jonas@fsdb.org> (via apache@)
With Hat: apache@ |
18 May 2010 04:58:08
2.2.15_7  |
pgollucci  |
- Bump PORTREVISION
With Hat: apache@ |
18 May 2010 04:57:46
2.2.15_6  |
pgollucci  |
- Whitespace only
With Hat: apache@ |
18 May 2010 04:57:10
2.2.15_6  |
pgollucci  |
- only need to set grandfather deps
the dbm maze is a bit harder so is left alone for now
With Hat: apache@ |
18 May 2010 04:55:44
2.2.15_6  |
pgollucci  |
- file is only in devel/apr[01] now.
With Hat: apache@ |
18 May 2010 04:55:15
2.2.15_6  |
pgollucci  |
- remove apr/apr-util vestiges
- fullbuild not needed anymore
- buildconf not needed anymore
- scripts_env not needed anymore
With Hat: apache@ |
18 May 2010 04:53:40
2.2.15_6  |
pgollucci  |
- Remove WITH_APR_FROM_PORTS option. Always use devel/apr1 port now.
Bundled srclib/apr is never used now.
With Hat: apache@ |
18 May 2010 04:08:06
2.2.15_6  |
pgollucci  |
- Chase devel/apr -> devel/apr1 shuffling
PR: ports/146553
Submitted by: myself (pgollucci@)
With Hat: apache@ |
18 May 2010 04:05:05
2.2.15_5  |
pgollucci  |
- Convert ports/ to devel/apr1
PR: ports/146553
Submitted by: myself (pgollucci@)
With Hat: apache@ |
14 May 2010 05:05:13
2.2.15_5  |
pgollucci  |
- blasted whitespace |
14 May 2010 05:03:30
2.2.15_5  |
pgollucci  |
By default suexec doesn't enforces different resource limitations configured in
login.conf(5). This is probably because resource limitations are handled
differently on various different platforms.
This modifies suexec behaviour to set resource limits for CGI's
from /etc/login.conf before execing the customers CGI script.
Doesn't affect default package, so no PORTREVISION bumps.
I will follow up at dev@httpd.apache.org to see about adding this
with #ifdefs.
PR: ports/136091
Submitted by: Alexey V.Degtyarev <alexey@renatasystems.org>
With Hat: apache@ |
13 May 2010 00:59:32
2.2.15_5  |
pgollucci  |
- Remove use of $] which is deprecated in perl and gone in perl 5.12
This is already being discussed at dev@httpd and will be committed upstream
Reported by: brad clawsie <clawsie@fastmail.fm> (on apache@ list)
With Hat: apache@ |
07 May 2010 21:46:21
2.2.15_4  |
pgollucci  |
- Continuation of ports/133704
apxs -A comments out the LoadModule line
This adds custom FreeBSD mod to 'DELETE' the line so that it works with
our pkg-plists in packages.
- Remove -s form the cmp httpd.conf in pkg-plist to be blatant about why
it didn't get removed
- Tested with lang/php5
- Bump PORTREVISION
PR: ports/133704
With Hat: apache@ |
07 May 2010 20:53:45
2.2.15_3  |
pgollucci  |
- Fix -A and -a options for apxs to correctly ignore whitespace.
This will fix about 100 pkg-plist left overs for httpd.conf
- Bump PORTREVISION
- This will be in 2.2.16.
PR: ports/133704
Obtained from: http://svn.apache.org/viewvc?rev=942210&view=rev
Reported by: olli hauer <ohauer@gmx.de> (and very good pr!)
With Hat: apache@ |
07 May 2010 18:33:45
2.2.15_2  |
pgollucci  |
- FreeBSD doesn't use EGD sockets. Also the option handling doesn't honor
without-egd.
Carry the devel/apr fix through
PR: ports/146376
Submitted by: Guido Fals |
07 May 2010 05:56:58
2.2.15_2  |
pgollucci  |
2/2: fix mod_auth_digest builds which needs EGD and DEVRANDOM.
This fixes both bundled apr using the port (devel/apr for
WITH_APR_FROM_PORTS)
PR: ports/134577
Requested by: Pascal Vizeli <pvizeli@yahoo.de>
With Hat: apache@ |
07 May 2010 05:16:39
2.2.15_2  |
pgollucci  |
- silence this warning -- libtool: ignoring unknown tag CXX
With Hat: apache@ |
07 May 2010 05:14:38
2.2.15_2  |
pgollucci  |
- fix ldap support (duplicate www/apache20 fix)
--with-ldap switches on LDAP library linking in apr-util
--enable-ldap option switches on the LDAP caching module
--enable-authnz-ldap option switches on the LDAP authentication module
[AAA was rewritten in 3 peices in 2.4.x, hence the option change]
- no custom patch, the linking was fixed in 2.2.x
- ldap is not in the default package, so no PORTREVISION bump
PR: ports/128079
Reported by: koitsu, skreuzer
With Hat: apache@ |
07 May 2010 03:15:44
2.2.15_2  |
pgollucci  |
- Fix the owner to be root:wheel on files* when running sudo make ...
This doesn't affect the package b/c pointyhat/tb run as root
PR: ports/134456
With Hat: apache@ |
07 May 2010 01:46:06
2.2.15_2  |
pgollucci  |
- Forced commit to note the following CVEs were fixed in 2.2.15
[from CHANGES file]
*) SECURITY: CVE-2009-3555 (cve.mitre.org)
mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection
attack when compiled against OpenSSL version 0.9.8m or later. Introduces
the 'SSLInsecureRenegotiation' directive to reopen this vulnerability
and offer unsafe legacy renegotiation with clients which do not yet
support the new secure renegotiation protocol, RFC 5746.
[Joe Orton, and with thanks to the OpenSSL Team]
*) SECURITY: CVE-2009-3555 (cve.mitre.org)
mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
for OpenSSL versions prior to 0.9.8l; reject any client-initiated
renegotiations. Forcibly disable keepalive for the connection if there(Only the first 15 lines of the commit message are shown above ) |
07 May 2010 00:06:21
2.2.15_2  |
pgollucci  |
- Update CONFLICTS to make apr package names.
With Hat: apache@ |
07 May 2010 00:02:16
2.2.15_2  |
pgollucci  |
- Regenerate patch files with make makepatch for they have
piled up and additional patches conflict.
This also will help when we try to syncronize www/apache20&www/apache22
- Unconditionally apply the mod_proxy_connect patch, you just may or may
not actually compile the file to save some logic in Makefile
With Hat: apache@ |
06 May 2010 23:19:56
2.2.15_2  |
pgollucci  |
- This file isn't even used, it doesn't matter anyway devel/apr(1.4.2) and
the apr bundled with www/apache22 include this file as the licensing
issue was resolved ages ago
With Hat: apache@ |
05 May 2010 22:20:29
2.2.15_2  |
pgollucci  |
- Install check_forensic script if mod_log_forensic is enabled
PR: ports/144292
Submitted by: Dan Mahoney <danm@prime.gushi.org>
With Hat: apache@ |
05 May 2010 22:18:39
2.2.15_1  |
pgollucci  |
- move OPTION handling out of targets section [no-op]
With Hat: apache@ |
05 May 2010 22:17:13
2.2.15_1  |
pgollucci  |
- whitespace only
With Hat: apache@ |
05 May 2010 22:12:43
2.2.15_1  |
pgollucci  |
- fix /etc/ftpusers [really this time], bump PORTREVISION
- DISTFILES is not needed
- CFLAGS is already in CONFIGURE_ENV
- drop apache21 from CONFLICTS
- fix caudium CONFLICTS |
05 May 2010 21:43:30
2.2.15  |
pgollucci  |
2/5: Update to httpd 2.2.15, default to using devel/apr instead of bundled apr
PR: ports/146130
Approved by: portmgr (pav)
Tested by: -exp run (pav)
With Hat: apache@ |
28 Apr 2010 21:05:56
2.2.14_6  |
pgollucci  |
- Fix typo preventing install/deinstall when /etc/ftpusers was present
Note if you already have www/apache20 or www/apache22 installed this is
not worth updating for; however, you should verify your [if you use it]
${PREFIX}/etc/apacheXX/extra/httpd-userdir.conf:
DisableUser dir setting correct lists the users you don't want
to have the ~/dir visible via http requests.
PR: ports/144422
Reported by: several
With hat: apache@ |
27 Mar 2010 00:15:24
2.2.14_5  |
dougb  |
Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr# |
12 Dec 2009 13:44:13
2.2.14_5  |
kuriyama  |
- Fix plist with WITH_BDB case. |
12 Dec 2009 10:42:51
2.2.14_5  |
kuriyama  |
- Add support for db48 (with WITH_BDB=t and WITH_BDB_VER=48) by
updating patch to dbm.m4. Old patch for dbm.m4 is for db47. But
recent apache dist already includes code block for db47, so update a
patch by replacing it to db48.
- No $PORTREVISION bump (no effect to packages with default options).
Submitted by: ume |
12 Dec 2009 00:43:27
2.2.14_5  |
pgollucci  |
- Allow install by a user other then root
[Duplicate fix for devel/apr here in www/apache22 too]
PR: ports/13876 [based on]
Submitted by: Mel Flynn <mel at rachie.is-a-geek.net>
miwi@ |
11 Dec 2009 23:56:52
2.2.14_4  |
pgollucci  |
whitespace fixes only |
11 Dec 2009 23:43:26
2.2.14_4  |
pgollucci  |
- envvars needs to be sourced before _all_ commands if it exists
PR: ports/138466 (based on)
Submitted by: Dmitry Pryanishnikov <lynx.ripe@gmail.com> |
11 Dec 2009 23:37:04
2.2.14_3  |
pgollucci  |
- Fix handling of apache22_http_accept_enable="YES|NO"
o Note, don't use required_modules you can not check the return value
to conditionalize the -DNOHTTPACCEPT flag
PR: ports/138373
Submitted by: Helmut Schneider <jumper99@gmx.de> |
11 Dec 2009 22:57:29
2.2.14_2  |
pgollucci  |
- Fix option WITH_PATCH_PROXY_CONNECT
PR: ports/138846
Submitted by: "George D." <gi@azagal.com> |
10 Dec 2009 08:09:46
2.2.14_1  |
pgollucci  |
- OPTIONS+= PROXY_SCGI
PR: ports/140137
Submitted by: olli hauer <ohauer@gmx.de> |
09 Dec 2009 23:48:01
2.2.14  |
pgollucci  |
- Update to 2.2.14
- With hat apache@
Note: The 3 CVE's are a no-op for the FreeBSD port --
date: 2009/08/25 05:33:03; author: kuriyama; state: Exp; lines: +0 -0
(Forced commit)
- 2.2.13 (acutally 2.2.12) includes fixes for several CVEs. [1]
but in our ports tree, APR related ones (CVE-2009-0023,
CVE-2009-1955, CVE-2009-1956) were already backported in 2.2.11_5.
References: http://www.apache.org/dist/httpd/CHANGES_2.2.12 [1]
Changes: (Only the first 15 lines of the commit message are shown above ) |
16 Sep 2009 14:17:57
2.2.13  |
pav  |
- Update MPM-ITK patch to 20090414-00
PR: ports/137953
Submitted by: Emil Mikulic <emikulic@gmail.com>
Feature safe: yes |
25 Aug 2009 05:33:03
2.2.13  |
kuriyama  |
(Forced commit)
- 2.2.13 (acutally 2.2.12) includes fixes for several CVEs. [1]
but in our ports tree, APR related ones (CVE-2009-0023,
CVE-2009-1955, CVE-2009-1956) were already backported in 2.2.11_5.
References: http://www.apache.org/dist/httpd/CHANGES_2.2.12 [1] |
25 Aug 2009 04:58:54
2.2.13  |
kuriyama  |
- Upgrade to 2.2.13.
PR: ports/137651
Submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp> |
02 Aug 2009 19:36:34
2.2.11_7  |
mezz  |
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.
It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.
With help: marcus and kwm
Pointyhat-exp: a few times by pav
Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and
a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by: marcus
Approved by: portmgr |
15 Jul 2009 16:56:10
2.2.11_7  |
dougb  |
Fix a few "bad example" problems in the rc.d scripts that have been
propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops. |
16 Jun 2009 17:04:56
2.2.11_7  |
pgollucci  |
- Change OPTION help text for WITH_APR_FROM_PORTS
beware -> preferred
In preparation for making it the default and dropping the option.
Discussed on: ports@, apache@ |
12 Jun 2009 17:24:58
2.2.11_7  |
pgollucci  |
- Revert the bdb change in the last batch
- Reported by: Serveral
With Hat: apache@ |
12 Jun 2009 00:53:43
2.2.11_6  |
pgollucci  |
- forced commit to note that previous message had an incorrect pr #
ports/135457 should have been ports/134457 |
12 Jun 2009 00:37:51
2.2.11_6  |
pgollucci  |
crap, that was supposed to be in the previous commit |
12 Jun 2009 00:33:30
2.2.11_6  |
pgollucci  |
- Drop .sh suffices on rc.d scripts, add note to UPDATING
- Commit the final part of the bdb patch improving the value passed
to --with-berkely-db [1]
- Silence the blasted warnings about accf [2]
(Will send this upstream)
- Address httpd issue 42829* - graceful restart with multiple listeners
using prefork MPM can result in hung processes [3]
- Address httpd issue 29744+ - CONNECT does not work over existing
SSL connection [4]
- Drop .sh suffices on rc.d scripts, add note to UPDATING [5]
- Bump PORTREVISION
PRs: ports/110651 [1], ports/132528 [2], ports/134457 [3]
ports/135478
Submitted by: "Timur I. Bakeyev" <timur@gnu.org> [1]
bz@ [2]
Alexander <freebsd@nagilum.org> [4]
myself (pgollucci@) [5]
Requested by: apache@ (several) [3]
Tested by: P6 TB (running live > 5 days)
RideCharge TB (running live > 3 days)
Apache Software Foundation (ASF) TB (running live > 1 day)
Sponosored by: RideCharge Inc. |
08 Jun 2009 03:10:25
2.2.11_5  |
pgollucci  |
- Backport apr-util security fixes pending the 2.2.12 release (forthcomming)
Security:
http://www.vuxml.org/freebsd/eb9212f7-526b-11de-bbf2-001b77d09812
PR: ports/135310
Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru>
With Hat: apache |
17 May 2009 07:24:35
2.2.11_4  |
pgollucci  |
- Mark SAFE apache@ ports MAKE_JOBS_SAFE=yes |
10 Apr 2009 06:39:46
2.2.11_4  |
pgollucci  |
Add note tp pkg-message informing users of FAQ:
your hostname must be resolvable via at least
1 mechanism configured in /etc/nsswitch.conf
or depending on the modules you hae loaded
apache might not be able to start.
PRs: ports/131563, ports/131564, ports/131565
Submitted by: Glen Barber <glen.j.barber@gmail.com>
Discussed with: me |
02 Apr 2009 01:22:58
2.2.11_4  |
kuriyama  |
- Add a patch to fix ab(1) fails to connect with "Operation already in
progress (37)" errno.
References: https://issues.apache.org/bugzilla/show_bug.cgi?id=44584
Obtained from:
http://svn.apache.org/viewvc/httpd/httpd/trunk/support/ab.c?r1=748396&r2=749438
Reviewed by: apache@ (pgollucci@) |
29 Jan 2009 23:51:46
2.2.11_3  |
pgollucci  |
- www/apache22-peruser-mpm overwrites the apache22.tbz package in Latest/
due to the Master/Slave relationship
(Needs LATEST_LINK et al)
Discussed on: apache@
Reported by: John Hay <jhay@meraka.org.za>
Approved by: Jille Timmermans <jille@quis.cx>
With hat: apache |
19 Jan 2009 19:08:23
2.2.11_2  |
pgollucci  |
remove now unused option WITH_SVN |
19 Jan 2009 19:05:11
2.2.11_1  |
pgollucci  |
Chase devel/apr-svn removal
Reported by: tabthorpe
Pointyhat: me |
09 Jan 2009 14:13:05
2.2.11  |
pgollucci  |
- Re-assign www/apache* ports to apache@
- Previous MATAINERs please welcome yourself to the apache@ team.
Approved by: portmgr (pav, flz), secteam (simon), clement |
06 Jan 2009 16:53:07
2.2.11  |
wxs  |
- Remove conditional checks for FreeBSD 5.x and older
Approved by: pav |
15 Dec 2008 22:05:56
2.2.11  |
clement  |
- Update to 2.2.11
- Always depend on pcre from ports [1]
- Fix plist with LDAP/without apr-util DSO
- source envvars as late as possible [2]
Requested by: ale
Eygene Ryabinkin <rea-fbsd at codelabs dot ru> [2]
PR: ports/127418 [2] |
03 Sep 2008 19:08:17
2.2.9_5  |
clement  |
- Fix @comment string
Pointy hat to: clement
Reported by: Christer Solskogen |
03 Sep 2008 19:07:56
2.2.9_5  |
clement  |
- Fix @comment string
Pointy hat to: clement
Reported by: Christer Solskogen |
03 Sep 2008 13:19:24
2.2.9_4  |
clement  |
- Fix plist where apr_dbd is used
- Fix Postgresql build, don't trust pg_config
- Don't overwrite apr_dbd_mysql.c
- Bump PORTREVISION
No cookie for: clement |
02 Sep 2008 12:26:37
2.2.9_3  |
clement  |
- Update MPM itk patch to 20080727-00 (it is actually a no op
on FreeBSD)
- Move mpm-itk patch to EXTRA_PATCHES to avoid conflicts with
alternative mpm patches [1]
- update PLIST_SUBS when SLAVE_PORT_MPM is defined
Requested by: Jille Timmermans [1] |
02 Sep 2008 07:34:21
2.2.9_3  |
clement  |
- Fix incorrect redirection order in startup script
- Bump PORTREVISION
PR: ports/127038 [1]
Submitted by: edwin@ [1]
Reported by: Tod McQuillin |
31 Aug 2008 23:00:27
2.2.9_2  |
clement  |
- Yet Another Plist Fix [1]
- Completely shut up rc.d script when no profiles are enabled
(add add support to disable profiles) [2]
- Fix CVE-2008-2939 for mod_proxy_ftp
(XSS attacks when using wildcards in the path of the FTP URL)
- Add "apache22_fib" to start apache22 prefixed by
"setfib -F ${apache22_fib}", so apache can use an alternate
network view (not carefully tested yet)
- Revert previous patch to "fix" missing rc.d scripts. It
actually breaks profiles.
- Bump PORTREVISION
PR: ports/126670 [1],
ports/116627 [2]
Submitted by: Joseph S. Atkinson [1],
Eygene Ryabinkin [2]
Security: CVE-2008-2939
Special thanks to: pgollucci@ |
31 Aug 2008 16:51:38
2.2.9_1  |
clement  |
- Fix plist when NOPORTDOCS is defined [1]
- Add WITH_SVN knob. It enables BDB for apache22 port and
force dependency on dev/apr-svn when WITH_APR_FROM_PORTS is
defined. (should help fixing [2]).
Introduce APR_PORT.
- Add support for db-4.7 [3]
- Add mod_ldap OPTIONS fixup [4]
- Sometimes, rc scripts aren't included in package
Try to fix this. [5]
PR: ports/126053 [2], ports/125520 [3]
ports/124651 [4], ports/126670 [5] (partially)
Reported by: QA Tindy [1],
Crazig Leres [2],
Larry Rosenman [4]
Kirk Strauser [3],
Joseph S. Atkinson [5] |
21 Aug 2008 06:18:49
2.2.9  |
rafan  |
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk (Only the first 15 lines of the commit message are shown above ) |
20 Aug 2008 00:57:32
2.2.9  |
ade  |
Conversion from (now defunct) autoconf-2.61 to autoconf-2.62
Tested by: exp build run (erwin) |
23 Jun 2008 21:11:15
2.2.9  |
clement  |
- Update to 2.2.9
- Add a note to UPDATING about the forced build of subversion
because of apr/apu bumped version. |
28 Jan 2008 20:42:04
2.2.8  |
clement  |
- Fix recursive use of WITH_BDB_VER when WITH_BERKELEYDB and WITH_BDB_VER
are both defined.
Reported by: Vivek Khera <VIVEK@KHERA.ORG> |