summaryrefslogtreecommitdiff
path: root/www/apache20/files (follow)
Commit message (Collapse)AuthorAgeFilesLines
* - remove www/apache20 and devel/apr0Olli Hauer2012-08-1845-3614/+0
| | | | | | | | | - s/USE_APACHE= 20+/USE_APACHE= 22+/ - unify s/YES/yes/ - cleanup APACHE_VERSION <= 22 usage - add entry to MOVED with hat apache@
* Bump pcre library dependency due to 8.30 updateMartin Matuska2012-02-141-2/+2
| | | | Add (vendor) patch for deprecated pcre_info()
* In the rc.d scripts, change assignments to rcvar to use theDoug Barton2012-01-141-1/+1
| | | | | | | | | | | literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar(). In cases where I had to hand-edit unusual instances also modify formatting slightly to be more uniform (and in some cases, correct). This includes adding some $FreeBSD$ tags, and most importantly moving rcvar= to right after name= so it's clear that one is derived from the other.
* - missed onePhilip M. Gollucci2010-10-211-0/+19
|
* - Update to 2.0.64Philip M. Gollucci2010-10-2131-1503/+1142
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - normalize patch-pcre.diff into makepatch format - All 4 CVE patches are included upstream and part of 2.0.64 - part of the local apxs.in changes are upstream now too - some patches were regenerated for offset updates ** There is NO security update here. ** Changes: http://www.apache.org/dist/httpd/CHANGES_2.0 With Hat: apache@ <ChangeLog> *) SECURITY: CVE-2010-1452 (cve.mitre.org) mod_dav: Fix Handling of requests without a path segment. PR: 49246 [Mark Drayton, Jeff Trawick] *) SECURITY: CVE-2009-1891 (cve.mitre.org) Fix a potential Denial-of-Service attack against mod_deflate or other modules, by forcing the server to consume CPU time in compressing a large file after a client disconnects. PR 39605. [Joe Orton, Ruediger Pluem] *) SECURITY: CVE-2009-3095 (cve.mitre.org) mod_proxy_ftp: sanity check authn credentials. [Stefan Fritsch <sf fritsch.de>, Joe Orton] *) SECURITY: CVE-2009-3094 (cve.mitre.org) mod_proxy_ftp: NULL pointer dereference on error paths. [Stefan Fritsch <sf fritsch.de>, Joe Orton] *) SECURITY: CVE-2009-3555 (cve.mitre.org) mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection attack when compiled against OpenSSL version 0.9.8m or later. Introduces the 'SSLInsecureRenegotiation' directive to reopen this vulnerability and offer unsafe legacy renegotiation with clients which do not yet support the new secure renegotiation protocol, RFC 5746. [Joe Orton, and with thanks to the OpenSSL Team] *) SECURITY: CVE-2009-3555 (cve.mitre.org) mod_ssl: A partial fix for the TLS renegotiation prefix injection attack for OpenSSL versions prior to 0.9.8l; reject any client-initiated renegotiations. Forcibly disable keepalive for the connection if there is any buffered data readable. Any configuration which requires renegotiation for per-directory/location access control is still vulnerable, unless using openssl 0.9.8l or later. [Joe Orton, Ruediger Pluem, Hartmut Keil <Hartmut.Keil adnovum.ch>, Rainer Jung] *) SECURITY: CVE-2010-0434 (cve.mitre.org) Ensure each subrequest has a shallow copy of headers_in so that the parent request headers are not corrupted. Elimiates a problematic optimization in the case of no request body. PR 48359 [Jake Scott, William Rowe, Ruediger Pluem] *) SECURITY: CVE-2008-2364 (cve.mitre.org) mod_proxy_http: Better handling of excessive interim responses from origin server to prevent potential denial of service and high memory usage. Reported by Ryujiro Shibuya. [Ruediger Pluem, Joe Orton, Jim Jagielski] *) SECURITY: CVE-2010-0425 (cve.mitre.org) mod_isapi: Do not unload an isapi .dll module until the request processing is completed, avoiding orphaned callback pointers. [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick] *) SECURITY: CVE-2008-2939 (cve.mitre.org) mod_proxy_ftp: Prevent XSS attacks when using wildcards in the path of the FTP URL. Discovered by Marc Bevand of Rapid7. [Ruediger Pluem] *) Fix recursive ErrorDocument handling. PR 36090 [Chris Darroch] *) mod_ssl: Do not do overlapping memcpy. PR 45444 [Joe Orton] *) Add Set-Cookie and Set-Cookie2 to the list of headers allowed to pass through on a 304 response. [Nick Kew] *) apxs: Fix -A and -a options to ignore whitespace in httpd.conf [Philip M. Gollucci] </ChangeLog>
* - Fix the exactly one s/REG_EXTENDED/AP_REG_EXTENDED/ I missed.Philip M. Gollucci2010-05-261-2/+6
| | | | | | | - This is a non default option in the compile so no PORTREVISION bump Reported by: henrik@iaeste.dk With Hat: apache@
* - Partial httpd SVN MFC of r15338Philip M. Gollucci2010-05-261-0/+1310
| | | | | | | | | | | | | | | | | | | | | | [http://svn.apache.org/viewvc?view=revision&revision=153384] Essentially this internalizes the pcre POSIX API in the ap_ namespace. Thus fixing the use of an external pcre library and hence mod_redirect and other consumers. - This includes an MMN bump which means you will need to recompile all your modules. With ports this will happen when you upgrade via portmaster or portupgrade. If you have any modules outside of ports they will need to be recompiled too. - There is a small chance you will need to change some of your custom modules to adapt to the ap_regex_t and ap_regmatch_t api changes. - For security, speed, maintenance, and simplification in the ports/ framework this route was chosen instead of reverting the devel/pcre change in 2.0.63_4. PR: ports/146604 Reported by: Stefan Bethke <stb@lassitu.de>, serveral on ports@, apache@ With Hat: apache@
* - Fix 5 seen in 3rd party module failures due to converting from bundled apr ↵Philip M. Gollucci2010-05-231-6/+14
| | | | | | | to ports apr. Reported by: pav via pointyhat With Hat: apache@
* - Force devel/apr0. Bundled srclib/apr is never used now.Philip M. Gollucci2010-05-1814-393/+19
| | | | With Hat: apache@
* - drop KQUEUE_SUPPORT, patch doesn't apply cleaning to devel/apr0Philip M. Gollucci2010-05-181-493/+0
| | | | | | Patches to devel/apr0 are welcome, send-pr. With Hat: apache@
* By default suexec doesn't enforces different resource limitations configured inPhilip M. Gollucci2010-05-141-0/+50
| | | | | | | | | | | | | | | | | login.conf(5). This is probably because resource limitations are handled differently on various different platforms. This modifies suexec behaviour to set resource limits for CGI's from /etc/login.conf before execing the customers CGI script. Doesn't affect default package, so no PORTREVISION bumps. I will follow up at dev@httpd.apache.org to see about adding this with #ifdefs. PR: ports/136928 Submitted by: Alexey V.Degtyarev <alexey@renatasystems.org> With Hat: apache@
* - Dupliate $] fix in apxs in www/apache22Philip M. Gollucci2010-05-132-3/+11
| | | | | | | - Rename rc.d script apache2.sh -> apache2 - Bump PORTREVISION With Hat: apache@
* - Fix openssl rengotiation patch [1]Philip M. Gollucci2010-05-133-269/+144
| | | | | | | | | | | | | | | | | | | | | | - Fix the openssl from ports flag - Bump PORTREVISION - Also patch 2 more CVEs *) SECURITY: CVE-2010-0434 (cve.mitre.org) Ensure each subrequest has a shallow copy of headers_in so that the parent request headers are not corrupted. Elimiates a problematic optimization in the case of no request body. PR 48359 [Jake Scott, William Rowe, Ruediger Pluem] *) SECURITY: CVE-2008-2364 (cve.mitre.org) mod_proxy_http: Better handling of excessive interim responses from origin server to prevent potential denial of service and high memory usage. Reported by Ryujiro Shibuya. [Ruediger Pluem, Joe Orton, Jim Jagielski] PR: ports/146389 [1] Submitted by: several [1] With Hat: apache@
* - That was the wrong patch file, too much git/cvs for mePhilip M. Gollucci2010-05-071-3/+9
|
* - Fix -A and -a options for apxs to correctly ignore whitespace.Philip M. Gollucci2010-05-071-1/+22
| | | | | | | | | | | | | | | | This will fix about 100 pkg-plist left overs for httpd.conf apxs -A comments out the LoadModule line This adds custom FreeBSD mod to 'DELETE' the line so that it works with our pkg-plists in packages. - Remove -s form the cmp httpd.conf in pkg-plist to be blatant about why it didn't get removed - Bump PORTREVISION - This will be in 2.0.64 PR: ports/133704 Obtained from: http://svn.apache.org/viewvc?rev=942211&view=rev Reported by: olli hauer <ohauer@gmx.de> (and very good pr!) With Hat: apache@
* - fix ldap supportPhilip M. Gollucci2010-05-071-0/+11
| | | | | | | | | | | | | --with-ldap switches on LDAP library linking in apr-util --enable-ldap option switches on the LDAP caching module --enable-auth-ldap option switches on the LDAP authentication module also apply a custom patch to fix the linking - add a missing quote to OPTIONS desc - ldap is not in the default package, so no PORTREVISION bump PR: ports/128079 Reported by: koitsu, skreuzer With Hat: apache@
* - Apply SECURITY: CVE-2009-3555 (cve.mitre.org)Philip M. Gollucci2010-05-071-0/+279
| | | | | | | | to www/apache20 as well. PR: ports/140357 Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> With Hat: apache@
* - Force devel/pcre and abandon the bundled pcre:Philip M. Gollucci2010-05-074-2/+51
| | | | | | | | | | 0) its like 7yrs old 0) the new version have speed,bug,&security fixes 0) www/apache22 already does this 0) www/apache23+ no longer bundle pcre [or apr* for that matter] - Bump PORTREVISION With Hat: apache@
* - Sync with the www/apache22 layout for mpm itk and *only* conditionallyPhilip M. Gollucci2010-05-061-0/+0
| | | | | | apply this patch. [Note, they are different revisions] With Hat: apache@
* - Regenerate patch files with make makepatch for they havePhilip M. Gollucci2010-05-0629-282/+251
| | | | | | | piled up and additional patches conflict. This also will help when we try to syncronize www/apache20&www/apache22 With Hat: apache@
* - Fix build for !root usersPhilip M. Gollucci2010-05-061-1/+2
| | | | | | | | | duplicated from www/apache22 and devel/apr Originally: PR: ports/13876 [based on] Submitted by: Mel Flynn <mel@rachie.is-a-geek.net> With Hat: apache@
* - Fix compile with security/opensslPhilip M. Gollucci2010-05-061-0/+40
| | | | | | | | | | | - No PORTREVISION bump [security/openssl is not the default] PR: ports/146218 Submitted by: Kazuo Dohzono <dohzono@axion-software.com> Obtained from: http://mail-index.netbsd.org/pkgsrc-users/2009/08/25/msg010537.html With Hat: apache@ [I will contemplate sending this back to dev@httpd for branches/2.0.x for 2.0.64]
* - openssl patch is unconditionally appliedPhilip M. Gollucci2010-05-061-0/+0
| | | | With Hat: apache@
* Cleanse uneeded RC_SUBR variablesDoug Barton2010-03-281-1/+1
| | | | Approved by: pgolluci
* Begin the process of deprecating sysutils/rc_subr byDoug Barton2010-03-271-1/+1
| | | | s#. %%RC_SUBR%%#. /etc/rc.subr#
* -Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.Jeremy Messenger2009-08-023-29/+180
| | | | | | | | | | | | | | | | | | -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr
* Fix a few "bad example" problems in the rc.d scripts that have beenDoug Barton2009-07-151-2/+0
| | | | | | | | | | | | | | | | | | | | propogated by copy and paste. 1. Primarily the "empty variable" default assignment, which is mostly ${name}_flags="", but fix a few others as well. 2. Where they are not already documented, add the existence of the _flags (or other deleted empties) option to the comments, and in some cases add comments from scratch. 3. Replace things that look like: prefix=%%PREFIX%% command=${prefix}/sbin/foo to just use %%PREFIX%%. In many cases the $prefix variable is only used once, and in some cases it is not used at all. 4. In a few cases remove ${name}_flags from command_args 5. Remove a long-stale comment about putting the port's rc.d script in /etc/rc.d (which is no longer necessary). No PORTREVISION bumps because all of these changes are noops.
* - Backport apr-util security fixes pending the 2.2.12 release (forthcomming)Philip M. Gollucci2009-06-083-0/+90
| | | | | | | Security: http://www.vuxml.org/freebsd/eb9212f7-526b-11de-bbf2-001b77d09812 PR: ports/135310 Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> With Hat: apache
* - Revert previous patch to "fix" missing rc.d scripts. ItClement Laforet2008-08-311-0/+11
| | | | | | | actually breaks profiles. - Fix CVE-2008-2939 for mod_proxy_ftp (XSS attacks when using wildcards in the path of the FTP URL) - Bump PORTREVISION
* - Fix profiles support in startup script [1]Clement Laforet2007-09-181-6/+5
| | | | | | | | | | - move envvars support to the beginning of apache2_checkconfig() to be sure we're using envvars during configtest [2] PR: ports/116401 [1], ports/116329 [2] Submitted by: kevin brintnall <kbrint@rufus.net> [1], Ruud Althuizen <ruud@il.fontys.nl>
* - Re-add apache2ssl_enable supportClement Laforet2007-09-101-0/+8
| | | | Noticed by: Oliver Brandmueller <ob at e-Gitt dot NET>
* - Update to 2.0.61Clement Laforet2007-09-092-116/+123
| | | | - sync' startup script with www/apache22
* - Add itk MPMClement Laforet2006-11-012-15/+1673
| | | | | | mpm-itk allows you to run each of your vhost under a separate UID and GID WWW: http://home.samfundet.no/~sesse/mpm-itk/ - use LD_CONFIG
* - Update to 2.0.59Clement Laforet2006-08-051-13/+0
|
* - Fix security issue in mod_rewrite.Clement Laforet2006-07-271-0/+13
| | | | | | | | | | | | | | | | | | | | All people using mod_rewrite are strongly encouraged to update. An off-by-one flaw exists in the Rewrite module, mod_rewrite. Depending on the manner in which Apache httpd was compiled, this software defect may result in a vulnerability which, in combination with certain types of Rewrite rules in the web server configuration files, could be triggered remotely. For vulnerable builds, the nature of the vulnerability can be denial of service (crashing of web server processes) or potentially allow arbitrary code execution. This issue has been rated as having important security impact by the Apache HTTP Server Security Team Updates to latest versions will follow soon. Notified by: so@ (simon) Obtained from: Apache Security Team Security: CVE-2006-3747
* - Remove obsolete patch which add support to Windows Update Service whenClement Laforet2006-05-101-11/+0
| | | | | | apache acts as a proxy. Reported by: Bjoern Voigt <bjoern@cs.tu-berlin.de>
* - Fix build with WITH_KQUEUE_SUPPORTClement Laforet2006-05-021-51/+20
| | | | Pointed out by: Marian Cerny <cerny@icomvision.com>
* Oops I forgot to "cvs rm" a secfixClement Laforet2006-05-011-35/+0
| | | | Spotted by: krion
* - Update to 2.0.58Clement Laforet2006-05-011-4/+6
|
* Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.Doug Barton2006-02-201-1/+1
| | | | | | | We have not checked for this KEYWORD for a long time now, so this is a complete noop, and thus no PORTREVISION bump. Removing it at this point is mostly for pedantic reasons, and partly to avoid perpetuating this anachronism by copy and paste to future scripts.
* Cleanups and fixesClement Laforet2006-01-151-1/+1
| | | | | | | | | | | | - remove useless options (and fix thread stuff) [1] - move print-closest-mirror to bsd.apache.mk - move threads configure options out of Makefile.modules - Fix stupid logic to disable v4mapped address [2] - and more... Submitted/spotted by: many, Hirohisa Yamaguchi <umq@ueo.co.jp> [1] ume[2] PR: ports/91813 [1]
* SECURITY: CVE-2005-3352 (cve.mitre.org)Clement Laforet2005-12-121-0/+35
| | | | | | | | | mod_imap: Escape untrusted referer header before outputting in HTML to avoid potential cross-site scripting. Change also made to ap_escape_html so we escape quotes. Reported by JPCERT. [Mark Cox] Reported by: simon
* - resync' with www/apache2Clement Laforet2005-12-031-1/+1
|
* - Don't rerun the apache2.sh rc script on restart's, just stop and startClement Laforet2005-10-301-1/+1
| | | | | | | normally PR: ports/86402 Submitted by: Jarrod Sayers <jarrod@netleader.com.au>
* - Update to 2.0.55Clement Laforet2005-10-146-291/+0
|
* - Sync with www/apache2Clement Laforet2005-09-104-0/+164
|
* - Add fix for CAN-2005-2088Clement Laforet2005-07-262-0/+20
| | | | | | | | | | | | | | From Changelog: *) SECURITY: CAN-2005-2088 core: If a request contains both Transfer-Encoding and Content-Length headers, remove the Content-Length, mitigating some HTTP Request Splitting/Spoofing attacks. [Paul Querna, Joe Orton] - Rename previous patch to CVE ID - bump PORTREVISION Security: CAN-2005-2088 Obtained From: Apache repository
* Security: fix a buffer overrun in ssl_callback_SSLVerify_CRL()Clement Laforet2005-07-261-0/+11
| | | | Reported by: thierry
* - Remove debug line.Clement Laforet2005-06-011-1/+0
|
* - Add support for multiple instances of apache2 to startup script.Clement Laforet2005-06-011-7/+51
| | | | It's a little bit experimental, but it works.
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-14 09:54:46 +0000