19:30 ohauer 

- remove apache13 and ports depending on apache13 from portstree
  ( EXPIRATION_DATE=2012-01-01 )

with hat apache@

22:26 amdmi3 

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

03:00 pgollucci 

- Set EXPIRATION_DATE to an actual date (9.0 is behind, so guess 2 months from
now).
- This can be changed later as needed, if at all, either way we won't remove
them
  until after 9.0 is released.

With Hat:   apache@
Reported by:    dvl via freshports

09:54 ohauer 

- set EXPIRATION_DATE to "one week after FreeBSD 9.0-RELEASE-p0"

with hat apache@

21:45 dougb 

2 more RC_SUBR[_PREFIX] stragglers

22:30 pgollucci 

- Update to 1.3.42

Security:   http://www.vuxml.org/freebsd/cae01d7b-110d-11df-955a-00219b0fc4d8
With hat:   apache

16:27 pgollucci 

- lang/perl5.6 is dead, remove PERL_LEVEL/PERL_VERSION < 500801 checks

PR:             ports/135398
Tested by:      2 -exp runs by pav
Approved by:    portmgr (pav)

07:24 pgollucci 

- Mark SAFE apache@ ports MAKE_JOBS_SAFE=yes

16:56 clement 

- Update apache to 1.3.41

16:57 clement 

- Update:
  * apache to 1.3.39
  * mod_perl to 1.30

11:41 gabor 

- Remove the DESTDIR modifications from individual ports as we have a new,
  fully chrooted DESTDIR, which does not need such any more.

Sponsored by:   Google Summer of Code 2007
Approved by:    portmgr (pav)

16:59 anders 

Remove thttpd from conflicts list, it has a different name for its
passwd program now.

Approved by:    maintainers/erwin

20:21 pav 

- Fix rc script to have overridable apache_flags and apache_pidfile

PR:             ports/104465
Reported by:    Andrey Alakozov <aa29@mail.ru>
Submitted by:   Volker <volker@vwsoft.com>
Approved by:    maintainer timeout (apache; 5 months)

- While here, modernize USE_RC_SUBR usage

12:34 erwin 

Add support for DESTDIR part I.

This commit should largele be a NOOP as it only adds support
for DESTDIR undefined. This does allow us to start testing
ports with DESTDIR set, but this is as of yet not supported.

Although this has been extensively tested on pointyhat, this
is a very intrusive change and some cases may have been
overlooked. Please contact Gabor and me if you find any.

PR:             100555
Submitted by:   gabor
Sponsored by:   Google Summer of Code 2006

09:12 clement 

- Update apache to 1.3.37
- Fix CONFLICTS

20:26 clement 

- Fix security issue in mod_rewrite.
All people using mod_rewrite are strongly encouraged to update.

An off-by-one flaw exists in the Rewrite module, mod_rewrite.
Depending on the manner in which Apache httpd was compiled, this
software defect may result in a vulnerability which, in combination
with certain types of Rewrite rules in the web server configuration
files, could be triggered remotely.  For vulnerable builds, the nature
of the vulnerability can be denial of service (crashing of web server
processes) or potentially allow arbitrary code execution.
This issue has been rated as having important security impact
by the Apache HTTP Server Security Team

Updates to latest versions will follow soon.

Notified by:    so@ (simon)
Obtained from:  Apache Security Team
Security:       CVE-2006-3747

08:19 clement 

- update apache to 1.3.36
- bump HARD_SERVER_LIMIT to 2048
- drop broken WITH*_EXPAT support.
  we always depend on expat from ports (based on [1])

PR:             ports/81183 [1]
Submitted by:   Martin Nilsson <martin@svenskabutiker.se>

23:20 kuriyama 

Chase shlib bump of libexpat.

06:29 dougb 

Now that new style rc.d scripts are being run as part of the
base rcorder, hard coded variable values in these scripts
are overriding the values in /etc/rc.conf[.local] (due to
the way that variables from the latter are read at boot time).

Therefore, change the boot scripts to set default values only
if the variable is unset in /etc/rc.conf[.local]. This will
allow the service to start at boot time if it's been enabled
as the user would expect.

This change will be a noop for users who have systems that
have not yet been upgraded to the new rc.d code in the base.

In many cases there are other variables in the scripts that
should get similar treatment, however I did not change
anything other than the _enable lines. I'll leave the rest
up to the maintainers to do as they see fit.

Bump PORTREVISION to make sure that users and packages
pick up this change.

20:31 clement 

SECURITY: CVE-2005-3352 (cve.mitre.org)
   mod_imap: Escape untrusted referer header before outputting in HTML
   to avoid potential cross-site scripting.  Change also made to
   ap_escape_html so we escape quotes.  Reported by JPCERT.
   [Mark Cox]

Reported by:    simon

11:17 clement 

- Update apache to 1.3.34

13:57 clement 

- Fix CAN-2005-2088

Obtained from:  Apache repository

13:53 clement 

- fix plist

13:09 clement 

- Add missing man page
- Don't create httpd.conf.bak
- Set MAINTAINER to apache@

17:24 erwin 

Reset maintainer

PR:             76720
Submitted by:   maintainer

21:49 clement 

- Update to 1.3.33
- Unmark as DEPRECATED

PR:             ports/74596
Submitted by:   Jonathan Pater <pater@cowboyneal.org> (maintainer)

01:53 sem 

- Standardize an EXPIRATION_DATE format.

Approved by:    krion

12:38 josef 

Mark this port deprecated as the maintainer stated in a private
mail.

With hat:       secteam

19:32 pav 

- Obey WITHOUT_APACHE_EXPAT knob

PR:             ports/67974
Submitted by:   Alexey Mahotkin <alexm@w-m.ru>
Obtained from:  www/apache13 port

14:25 pav 

Add apache13-modperl, an Apache web server with mod_perl statically compiled in.

PR:             ports/67051
Submitted by:   Rod Taylor <ports@rbt.ca>