19:30 ohauer 

- remove apache13 and ports depending on apache13 from portstree
  ( EXPIRATION_DATE=2012-01-01 )

with hat apache@

15:04 dinoex 

- fix CVE-2011-3368
Feature safe:   yes

23:50 ohauer 

- mark apache13 FORBIDDEN (CVE-2011-3368)

  * There are no patches from upstream and already existing
    exploids in the wild.

- ru-apache13 ports have long outstanding issues and are far
  behind last apache13 patches.

with hat apache@

Feature safe:   yes

20:29 dinoex 

- bump EXPIRATION_DATE

22:26 amdmi3 

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

03:00 pgollucci 

- Set EXPIRATION_DATE to an actual date (9.0 is behind, so guess 2 months from
now).
- This can be changed later as needed, if at all, either way we won't remove
them
  until after 9.0 is released.

With Hat:   apache@
Reported by:    dvl via freshports

09:54 ohauer 

- set EXPIRATION_DATE to "one week after FreeBSD 9.0-RELEASE-p0"

with hat apache@

08:40 erwin 

BROKEN should not be quoted.
No functional change.

07:54 dinoex 

add LICENSE_COMB

04:44 dougb 

Cleanse uneeded RC_SUBR variables

Approved by:    pgolluci

06:10 dinoex 

- Fix a bug in IPv4 logging.

- Security fix for mod_proxy
Security: CVE-2010-0010

18:02 dinoex 

- USE_RC_SUBR != yes
PR:             136853
Submitted by:   Philip M. Gollucci

- extend startup to handle options and multiple instances
Obtained from:  ports/www/apache22

18:34 dinoex 

- add mod_accel patch for amd64
Submitted by:   Sergey Smitienko

03:56 dinoex 

- drop option WITHOUT_RC_SUBR

14:20 pgollucci 

Revert some of the previous commit. Applogies.
I only meant to do clement@ and ports@ ones

14:13 pgollucci 

- Re-assign www/apache* ports to apache@
- Previous MATAINERs please welcome yourself to the apache@ team.

Approved by: portmgr (pav, flz), secteam (simon), clement

07:42 dinoex 

- drop case senstive checks
PR:             127464

00:40 edwin 

pkg_info -> ${PKG_INFO}

20:36 dinoex 

- update to 1.3.41+2.8.31

08:00 dinoex 

- Security patch
Security: CVE-2007-6388
Security: CVE-2007-5000
Security: CVE-2007-3847
Reported by:    Thomas Vogt

10:15 dinoex 

- new option WITH_PERL
workaround till global solution in bsd.apache.mk
PR:             118647, 116984

15:57 dinoex 

- fix build on CURRENT
PR:             117233
Reported by:    Alexander Logvinov

20:05 dinoex 

- update to 2.8.28-1.3.37
- merge Configure patches

08:00 dinoex 

- merge security fiexs from apache 1.3.39
Security: CVE-2006-5752
Security: CVE-2007-3304

16:59 anders 

Remove thttpd from conflicts list, it has a different name for its
passwd program now.

Approved by:    maintainers/erwin

14:13 dinoex 

- update to 2.8.28-1.3.37

17:06 dinoex 

- Security patch mod_rewrite
Security: CVE-2006-3747

13:49 dinoex 

- update to 1.3.36+2.8.27

10:35 dinoex 

- update to mod_ssl-2.8.26-1.3.35
- update to mod_accel-1.0.34
- remove patch, verfied it is in distribution

06:51 dinoex 

- support for options:
  APACHE_DATADIR,APACHE_CGIBIN_ROOT,APACHE_DOCUMENT_ROOT
- new options:
  APACHE_LOCALSTATE_DIR,APACHE_LOGFILE_DIR
Submitted by:   Bernard J. Treves Brown

- support for options:
  DEFAULT_PATH

23:20 kuriyama 

Chase shlib bump of libexpat.

06:29 dougb 

Now that new style rc.d scripts are being run as part of the
base rcorder, hard coded variable values in these scripts
are overriding the values in /etc/rc.conf[.local] (due to
the way that variables from the latter are read at boot time).

Therefore, change the boot scripts to set default values only
if the variable is unset in /etc/rc.conf[.local]. This will
allow the service to start at boot time if it's been enabled
as the user would expect.

This change will be a noop for users who have systems that
have not yet been upgraded to the new rc.d code in the base.

In many cases there are other variables in the scripts that
should get similar treatment, however I did not change
anything other than the _enable lines. I'll leave the rest
up to the maintainers to do as they see fit.

Bump PORTREVISION to make sure that users and packages
pick up this change.

15:52 dinoex 

- Securitry Fix
SECURITY: CVE-2005-3352 (cve.mitre.org)

Obtained from:  ports

10:06 dinoex 

- Update to 2.8.25-1.3.34

05:44 dinoex 

- honor LDFLAGS
- fix EXPAT options
in some cases the external expat was not used.

05:43 dinoex 

- unbreak updated dependency (devel/mm)
Submitted by:   Michael Voucko

04:44 dinoex 

- update to 1.3.33+2.8.24

04:48 dinoex 

- fix build of mod_accel on amd64
PR:             84150
Submitted by:   Bjoern Koenig

18:07 dinoex 

- Security Fix CAN-2005-2088

17:55 dinoex 

- support new options APACHE_DATADIR, APACHE_DOCUMENT_ROOT
Suggested by: Steve Clement

19:48 dinoex 

- update mod_snmp_1.3.14.13, remove BROKEN

10:03 dinoex 

- new option WITH_APACHE_LATESTLOG
that patches rotatelogs to always keep a hardlink to the latest log
file, but without the seconds-since-epoch integer. Just as a
convenience - when developing web apps, it makes it easier to just
check the log file.
Submitted by:   Palle Girgensohn

16:28 dinoex 

- fix package when WITHOUT_RC_SUBR=YES
and old rc files are installed.
Submitted by:   Dave Ryan

09:46 dinoex 

- better wording for a build error.

15:29 dinoex 

- update to 2.8.22-1.3.33

16:29 dinoex 

- Security Patch
CAN-2004-?0940
Obtained from:  apache-1.3.33

 

11:04 dinoex 

- Security update to 2.8.21-1.3.32
* CAN-2004-0492 (cve.mitre.org)
Reject responses from a remote server if sent an invalid (negative)
Content-Length.

- update mod_snmp to 1.3.14.13
- fix build dependency
:

09:07 dinoex 

- Security update to 2.8.20-1.3.31

04:06 dinoex 

- Patch for keepalive-bug
PR:             71961
Submitted by:   Kenneth Vestergaard Schmidt

04:06 dinoex 

- Security Fix
- update to 2.8.19-1.3.31

04:49 dinoex 

- sync build options with other apache ports again.
headsup: please reanme your existings options
PR:             67937
Suggested by:   eik

-new option: WITH_APACHE_INTERNAL_EXPAT

17:24 dinoex 

- allow customizing of CATEGORIES
PR:             67937
Submitted by:   eik

08:36 dinoex 

- Security Fix
mod_proxy buffer overflow  CAN-2004-0492

07:49 dinoex 

- fix extract problems with bsdtar
Reported by:    Tim Kientzle

04:57 dinoex 

- update to mod_deflate-1.0.21
Denis Shaposhnikov

- update to mod_ssl-2.8.18-1.3.31
Reported by: kris

08:49 dinoex 

- allow build without expat, new option APACHE_WITHOUT_EXPAT
To run some (mod_perl) applications, a full expat library is needed, but the
built-in one conflicts with it.  This patch allows you to build Apache without
the built-in expat so the other modules can load what they need.

PR:             66650
Submitted by:   Vivek Khera

19:07 dinoex 

- move USE_RC_SUBR before bsd.port.pre.mk

07:37 dinoex 

- Security update to 2.8.17-1.3.31
- detect fnmatch.h conficts

16:27 nork 

s/run_rc_commmand/run_rc_command/

Pointed out by: Dan Langille <dan@langille.org>
Pointy hat to:  nork

04:27 dinoex 

- rcNG-fy
Submitted by:   nork

WARNING installing the package will overwrite your "etc/rc.d/apache.sh"
installing from port is safe

- new option WITHOUT_RC_SUBR

08:20 dinoex 

- fix empty dir in option.

16:24 dinoex 

- building mod_accel and friends as apache so modules
Denis Shaposhnikov

- use PLIST_FILES for options

13:58 dinoex 

- update CONFLICTS

07:56 dinoex 

- add mod_deflate
Submitted by:   Denis Shaposhniko

- CONFLICTS extended

20:48 dinoex 

- new option APACHE_WITH_MODACCEL
Submitted by:   Denis Shaposhnikov

- cleanup of all options
- CONFLICTS extended

17:07 dinoex 

- Fix build of IPV6 (no Security patch needed)
- cleanup mod_snmp option

13:54 dinoex 

- Add securirty Fix from cvs

http://www.apacheweek.com/features/security-13

Source:
http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_access.c?r1=1.46&r2=1.47

Link from:      nectar
Reviewed by:    Munechika Sumikawa (IPV6)

04:21 dinoex 

- Fix collision when APACHE_WITH_MODSNMP and APACHE_WITH_IPV6
  are selected.

04:30 dinoex 

- Update PATCH_SITES for mod_snmp
Problem found by: Subhi S Hashwa

16:48 dinoex 

- option WITH_APACHE_IPV6
PR:             42427
Submitted by:   sec@42.org

- fix Usage

03:32 dinoex 

- new option APACHE_RELATIVE_RUNTIMEDIR

15:57 dinoex 

- add new Option APACHE_WITH_MODSNMP
PR:             43997
Submitted by:   zin@the.ne.jp

- update to 2.8.16-1.3.29
- remove the now obsolte fixes.

06:12 dinoex 

- Security Fix for mod_rewrite with more than 9 brackets.
http://www.apache.org/dist/httpd/Announcement.html

20:23 dinoex 

- extend CONFLICTS with w3c-httpd-3.*

13:05 dinoex 

- add CONFLICTS
- use DOCSDIR
Submitted by:   eikemeier@fillmore-labs.com [CONFLICTS]

17:28 dinoex 

- change ECHO -> ECHO_MSG

21:22 dinoex 

- drop defunctional MASTER_SITES

15:38 dinoex 

- use hook for bsd.openssl.mk

17:34 knu 

Call the ${PKGINSTALL} script via ${SH} so that it works in case the
ports tree is mounted noexec.

16:39 dinoex 

- Take maintainership

05:31 dinoex 

- Fix SUEXEC leaving zombies behind
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21737
http://marc.theaimsgroup.com/?l=apache-httpd-dev&m=105952652425849&w=2
Suggested by: efortenb@sdccd.cc.ca.us

20:05 dinoex 

- update to 2.8.15-1.3.28

07:03 demon 

Bump libmm shlib version after recent update of devel/mm.

04:25 dinoex 

- drop defunct define

17:07 dinoex 

o DEFAULT_PATH used by --suexec-safepath changed to APACHE_SUEXEC_SAFEPATH
o new build options are APACHE_SUEXEC_CALLER, APACHE_SUEXEC_LOG,
  APACHE_SUEXEC_UIDMIN, APACHE_SUEXEC_GIDMIN, APACHE_SUEXEC_SAFEPATH,
  APACHE_SUEXEC_UMASK
o add APACHE_HARD_SERVER_LIMIT build option
o WITH_APACHE_PERF_TUNING changed to APACHE_PERF_TUNING
o add APACHE_FD_SETSIZE and APACHE_BUFFERED_LOGS build options
  - separated from APACHE_PERF_TUNING
o CFLAGS option, used by APACHE_PERF_TUNING, is changed
o cosmetic changes

PR:             50455
Submitted by:   drazen@avalon.hr

14:17 dinoex 

- force bind with openssl port/base as configured

03:23 dinoex 

- remove PKG_PREFIX
PR:             50688
Submitted by:   mike@tric.tomsk.gov.ru

18:32 dinoex 

- Installation of the port fails at the pre-install stage
  when it tries to execute the pkg-install script.
  The script resides in the ports tree and but not in the WRKDIR
PR:             50688
Submitted by:   mike@tric.tomsk.gov.ru

19:39 dinoex 

- use bsd.openssl.mk

00:54 mbr 

Upgrade to mod_ssl-2.8.14-1.3.27 to fix the recent discovered
openssl vulnerabilities. I double checked the checksums and
the Tarball Digital Signatures.

19:15 knu 

De-pkg-comment.

15:04 naddy 

Use MASTER_SITE_APACHE*.

PR:             47984
Submitted by:   Kimura Fuyuki <fuyuki@hadaly.org>

18:02 dinoex 

- update SSL support.
defaults to openssl port (now 0.9.6.h)
New options:
use the lastest version (now 0.9.7)
        USE_OPENSSL_BETA=yes
use teh base version with
        USE_OPENSSL_BASE=yes

20:23 tom 

Update mod_ssl to version 2.8.12 which deals with a Cross-Site-Scripting
(XSS) security issue:
http://www.apacheweek.com/issues/02-10-25#security
http://www.mail-archive.com/modssl-users@modssl.org/msg15366.html

Note: This update does not fix ports/36804 - be sure to backup your
certificates before updating.

21:55 knu 

Add MASTER_SITE_RINGSERVER to MASTER_SITES.

09:18 kris 

Update to apache 1.3.27 and 2.0.43.  This fixes a security vulnerability.
Mark apache13-ssl FORBIDDEN because the new version does not yet exist.

Partially based on patches submitted by below authors.

Submitted by:   "Sergey A. Osokin" <osa@freebsd.org.ru>,
                Udo Schweigert <udo.schweigert@siemens.com>,
                Lev A. Serebryakov <lev@serebryakov.spb.ru>
PR:             ports/43682, ports/43688, ports/43666, ports/43681

08:07 ijliao 

find->${FIND},xargs->${XARGS}

PR:             40791
Submitted by:   Simon 'corecode' Schubert <corecode@corecode.ath.cx>

05:47 pat 

Bump shared library version because of devel/mm update

PR:             ports/41053
Submitted by:   Scott Lampert <scott@lampert.org>

00:21 pat 

Sync with www/apache13: suexec

PR:             ports/40426
Submitted by:   Brad Laue <brad@brad-x.com>
Reviewed by:    tobez

16:08 pat 

Don't clobber CONFIGURE_ARGS if user defines it.

PR:             ports/40019
Submitted by:   Christopher H. Laco <chris.laco@threetech.com>