./www/apache-httpd [apache HTTP server]
[+] Add this package to your ports tracker

[ CVSweb ] [ Homepage ] [ RSS feed ]

Version: 2.4.53, Package name: apache-httpd-2.4.53
Maintained by: Giovanni Bechis
Master sites:
Flavors (export FLAVOR=xyz, setenv FLAVOR xyz):
  • ldap
Description
The Apache HTTP Server Project is an effort to develop and maintain an
open-source HTTP server for modern operating systems including UNIX and
Windows NT. The goal of this project is to provide a secure, efficient
and extensible server that provides HTTP services in sync with the
current HTTP standards.

Flavors:
ldap - Enable LDAP authentication and caching support

Filesize: 9498.592 KB
Version History (View Complete History)
  • (2022-03-14) Updated to version: apache-httpd-2.4.53
  • (2021-12-21) Updated to version: apache-httpd-2.4.52
  • (2021-10-08) Updated to version: apache-httpd-2.4.51
  • (2021-10-05) Updated to version: apache-httpd-2.4.50
  • (2021-09-17) Updated to version: apache-httpd-2.4.49
  • (2021-06-04) Updated to version: apache-httpd-2.4.48
  • (2020-08-07) Updated to version: apache-httpd-2.4.46
  • (2020-03-31) Updated to version: apache-httpd-2.4.43
  • (2020-01-13) Updated to version: apache-httpd-2.4.41
  • (2017-03-17) Updated to version: apache-httpd-2.4.25
[show/hide] View available PLISTS (Can be a lot of data)

CVS Commit History:

   2021-10-07 11:21:41 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to Apache httpd 2.4.51, the previous fix for CVE-2021-41773 was
insufficient. ok giovanni@
"It was found that the fix for CVE-2021-41773 in Apache HTTP Server
2.4.50 was insufficient. An attacker could use a path traversal attack
to map URLs to files outside the directories configured by Alias-like
directives.
If files outside of these directories are not protected by the usual
default configuration "require all denied", these requests can succeed.
If CGI scripts are also enabled for these aliased pathes, this could
allow for remote code execution.
This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier
versions."
   2021-10-07 11:21:00 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to Apache httpd 2.4.51, the previous fix for CVE-2021-41773 was
insufficient. ok giovanni@
"It was found that the fix for CVE-2021-41773 in Apache HTTP Server
2.4.50 was insufficient. An attacker could use a path traversal attack
to map URLs to files outside the directories configured by Alias-like
directives.
If files outside of these directories are not protected by the usual
default configuration "require all denied", these requests can succeed.
If CGI scripts are also enabled for these aliased pathes, this could
allow for remote code execution.
This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier
versions."
   2021-10-07 11:19:18 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to Apache httpd 2.4.51, the previous fix for CVE-2021-41773 was
insufficient. ok giovanni@
"It was found that the fix for CVE-2021-41773 in Apache HTTP Server
2.4.50 was insufficient. An attacker could use a path traversal attack
to map URLs to files outside the directories configured by Alias-like
directives.
If files outside of these directories are not protected by the usual
default configuration "require all denied", these requests can succeed.
If CGI scripts are also enabled for these aliased pathes, this could
allow for remote code execution.
This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier
versions."
   2021-10-05 09:45:30 by Giovanni Bechis | Files touched by this commit (1)
Log message:
Security update to 2.4.50
fixes CVE-2021-41524 and CVE-2021-41773
   2021-10-05 09:38:14 by Giovanni Bechis | Files touched by this commit (1)
Log message:
Security update to 2.4.50
fixes CVE-2021-41524 and CVE-2021-41773
   2021-10-05 09:35:26 by Giovanni Bechis | Files touched by this commit (2)
Log message:
Security update to 2.4.50
fixes CVE-2021-41524 and CVE-2021-41773
   2021-09-27 09:55:42 by Giovanni Bechis | Files touched by this commit (3)
Log message:
Update to 2.4.49
fixes CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275
and CVE-2021-40438.
Full changelog at https://downloads.apache.org/httpd/CHANGES_2.4.49
   2021-09-16 15:18:10 by Giovanni Bechis | Files touched by this commit (4)
Log message:
Update to 2.4.49
fixes CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275
and CVE-2021-40438.
Full changelog at https://downloads.apache.org/httpd/CHANGES_2.4.49
   2021-06-04 03:00:22 by Giovanni Bechis | Files touched by this commit (4)
Log message:
Update to 2.4.48
bug fixes and improvements
also fixes CVE-2021-31618, CVE-2021-30641, CVE-2020-35452, CVE-2021-26691,
CVE-2021-26690, CVE-2020-13950, CVE-2020-13938, CVE-2019-17567
mod_ssl patch by tb@
   2021-06-04 02:48:37 by Giovanni Bechis | Files touched by this commit (9)
Log message:
Update to 2.4.48
bug fixes and improvements
also fixes CVE-2021-31618, CVE-2021-30641, CVE-2020-35452, CVE-2021-26691,
CVE-2021-26690, CVE-2020-13950, CVE-2020-13938, CVE-2019-17567
mod_ssl patch by tb@
   2020-12-13 01:45:14 by Giovanni Bechis | Files touched by this commit (2)
Log message:
Correctly stop Apache Httpd when daemon_flags is set
from Maxim Tarasov
   2020-08-10 09:17:12 by Giovanni Bechis | Files touched by this commit (3)
Log message:
restore a patch removed in previous commit
   2020-08-07 09:15:37 by Giovanni Bechis | Files touched by this commit (4)
Log message:
Update 2.4.46
fixes CVE-2020-11984 and CVE-2020-11993
full changelog at https://downloads.apache.org/httpd/CHANGES_2.4.46
   2020-07-17 07:09:09 by Giovanni Bechis | Files touched by this commit (2)
Log message:
Avoid NULL pointer dereference, from upstream
ok kn@
   2020-04-17 10:38:19 by Giovanni Bechis | Files touched by this commit (2)
Log message:
fix a memory leak in mod_ssl
ok sthen@
   2020-04-17 10:26:32 by Giovanni Bechis | Files touched by this commit (2)
Log message:
fix a memory leak in mod_ssl and take maintainership
ok sthen@ on a similar diff
   2020-04-01 08:48:15 by Stuart Henderson | Files touched by this commit (3)
Log message:
MFC update to Apache httpd 2.4.43
   2020-03-31 08:30:33 by Stuart Henderson | Files touched by this commit (7)
Log message:
update to Apache httpd 2.4.43
   2019-08-21 02:31:25 by Stuart Henderson | Files touched by this commit (1)
Log message:
rm old patch to unbreak -stable; from Ian McWilliam
   2019-08-19 09:21:34 by Stuart Henderson | Files touched by this commit (3)
Log message:
MFC update to apache-httpd 2.4.41;
CVE-2019-10081: mod_http2, memory corruption on early pushes
CVE-2019-10082: mod_http2, read-after-free in h2 connection shutdown
CVE-2019-10092: Limited cross-site scripting in mod_proxy
CVE-2019-10097: mod_remoteip stack buffer overflow and NULL pointer dereference
CVE-2019-10098: mod_rewrite configurations vulnerable to open redirect
CVE-2019-9517: mod_http2, DoS attack by exhausting h2 workers
   2019-08-13 15:14:11 by Stuart Henderson | Files touched by this commit (16)
Log message:
update to apache-httpd 2.4.41
   2019-07-12 14:50:18 by Stuart Henderson | Files touched by this commit (845)
Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes
   2019-06-16 15:08:56 by Stuart Henderson | Files touched by this commit (2)
Log message:
enable mod_authnz_fcgi in Apache httpd, requested by Bartosz Ku??ma
   2019-04-11 17:02:23 by Stuart Henderson | Files touched by this commit (2)
Log message:
move apache-httpd in -stable back to MODSSL_USE_OPENSSL_PRE_1_1_API codepaths,
in the 2.4.35->37 timeframe they switched to newer-API codepaths which seem to
be working in -current but fall over easily on 6.4/-stable, at least with the
event mpm.
problem reported by Frank Groeneveld.
   2019-04-08 17:26:40 by Stuart Henderson | Files touched by this commit (2)
Log message:
MFC: backport Apache httpd fix affecting file uploads, they were broken in 2.4.39
unless the admin specifies an explicit RequestReadTimeout.
https://bz.apache.org/bugzilla/show_bug.cgi?id=63325
https://svn.apache.org/viewvc?view=revision&revision=1857129
   2019-04-08 17:25:23 by Stuart Henderson | Files touched by this commit (2)
Log message:
backport Apache httpd fix affecting file uploads, they were broken in 2.4.39
unless the admin specifies an explicit RequestReadTimeout.  ok naddy@
https://bz.apache.org/bugzilla/show_bug.cgi?id=63325
https://svn.apache.org/viewvc?view=revision&revision=1857129
   2019-04-02 03:27:46 by Stuart Henderson | Files touched by this commit (1)
Log message:
bump REVISION in -current apache-httpd to ensure that the packages for
6.5 (which have a subpackage restructuring) have higher version numbers
than -stable
   2019-04-02 03:26:50 by Stuart Henderson | Files touched by this commit (3)
Log message:
update -stable to apache httpd 2.4.39 - important security fixes
https://httpd.apache.org/security/vulnerabilities_24.html#2.4.39
   2019-04-02 02:17:09 by Stuart Henderson | Files touched by this commit (5)
Log message:
uodate to apache httpd 2.4.39 - important security fixes
https://httpd.apache.org/security/vulnerabilities_24.html#2.4.39
   2019-03-28 06:38:15 by Stuart Henderson | Files touched by this commit (9)
Log message:
merge apache-httpd-common and apache-httpd, there is no need to split
the files now that the openbsd-patched apache-httpd is no more
   2019-03-28 05:46:55 by Stuart Henderson | Files touched by this commit (1)
Log message:
move the REVISION line where it's more likely to be seen next time
   2019-03-28 05:10:23 by Solene Rapenne | Files touched by this commit (2)
Log message:
Update to apache-httpd-2.4.38
ok giovanni@
   2018-11-01 12:05:01 by Stuart Henderson | Files touched by this commit (2)
Log message:
- add libressl patch needed to unbreak startup with ssl enabled
(SSL_CTX_set_post_handshake_auth), problem reported by Helmut Kiessling
- remove no-longer-needed chunk of the patch
   2018-10-24 07:23:59 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to apache-httpd-2.4.37
   2018-10-01 09:21:24 by Stuart Henderson | Files touched by this commit (18)
Log message:
security update to apache httpd 2.4.35, ok giovanni@
Since we no longer have Apache 1.x there's no point renaming most of the
installed files any more, only the ones that conflict with base (httpd and
htpasswd), which avoids some tiresome hand merges that are needed in the
manpages for most updates. Courtesy symlinks added for now so that the
'xxx2' variants still work.
   2018-03-29 13:30:53 by Stuart Henderson | Files touched by this commit (8)
Log message:
security update to apache-httpd 2.4.33
   2018-02-18 14:02:45 by Stuart Henderson | Files touched by this commit (2)
Log message:
fix, now we havef DH_set0_pqg, BIO_set_init, BIO_get_data, BIO_set_data
(code in same ifdef also wants #define BN_get_*_prime_*, BIO_get_shutdown,
BIO_set_shutdown, DH_bits)
   2018-02-18 13:38:15 by Stuart Henderson | Files touched by this commit (2)
Log message:
regen patches, no change
   2018-02-14 09:06:54 by Joel Sing | Files touched by this commit (2)
Log message:
LibreSSL has had SSL_CTX_set_{min,max}_proto_version() for a while now,
so we do not gain much from carrying this diff in ports.
ok sthen@
   2018-01-12 15:11:41 by Stuart Henderson | Files touched by this commit (11)
Log message:
update to apache-httpd 2.4.29, from David CARLIER (slightly overdue commit!)
   2018-01-11 12:27:12 by Robert Peichaer | Files touched by this commit (624)
Log message:
Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d
daemon scripts and bump subpackages that contain the *.rc scripts.
discussed with and OK aja@
OK tb
   2017-07-14 12:32:13 by Stuart Henderson | Files touched by this commit (1)
Log message:
MFC security update to Apache httpd-2.4.27
fixed in 2.4.26:
ap_get_basic_auth_pw() Authentication Bypass CVE-2017-3167
mod_ssl Null Pointer Dereference CVE-2017-3169
mod_http2 Null Pointer Dereference CVE-2017-7659
ap_find_token() Buffer Overread CVE-2017-7668
mod_mime Buffer Overread CVE-2017-7679
fixed in 2.4.27:
Read after free in mod_http2 CVE-2017-9789
Uninitialized memory reflection in mod_auth_digest CVE-2017-9788
   2017-07-14 11:14:33 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to httpd-2.4.27
   2017-07-14 11:10:46 by Stuart Henderson | Files touched by this commit (1)
Log message:
additional patch for ab with earlier libressl (SSL_CTX_set_*_proto_version),
not needed for -current, but easier to keep in sync for -stable if it's here
   2017-07-14 11:06:51 by Stuart Henderson | Files touched by this commit (1)
Log message:
oops, reinstate a line i dropped by mistake
   2017-07-14 11:04:12 by Stuart Henderson | Files touched by this commit (12)
Log message:
security update to apache-httpd-2.4.26, from David CARLIER with minor tweaks from me
(2.4.27 to follow)
   2017-03-27 09:04:24 by Paul Irofti | Files touched by this commit (2)
Log message:
Backport Apache CVE fixes from sthen@.
%--------------------------------------------------------------------
[PATCH] update to apache-httpd-2.4.25 CVE-2016-8740 CVE-2016-5387
CVE-2016-2161 CVE-2016-0736 CVE-2016-8743
%--------------------------------------------------------------------
OK robert@
   2017-03-17 01:36:35 by Stuart Henderson | Files touched by this commit (5)
Log message:
update to apache-httpd-2.4.25
CVE-2016-8740 CVE-2016-5387 CVE-2016-2161 CVE-2016-0736 CVE-2016-8743
   2016-07-05 08:32:16 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to apache-httpd 2.4.23, ok ajacoutot
   2016-06-22 12:52:16 by Antoine Jacoutot | Files touched by this commit (1)
Log message:
Properly bump REVISION.
spotted by Markus Lude
   2016-06-22 02:27:07 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
So, mod_perl will reset $0 to argv[0] which will break the rc.d script
functionality. So let's use apachectl2 for start and stop, disable rc_reload
(which should have been done anyway) and relax the default pexp (workaround).
breakage reported by Michael Lechtermann
ok sthen@
   2016-04-28 12:22:17 by Stuart Henderson | Files touched by this commit (2)
Log message:
replace apache-httpd-openbsd, keeping -common separate for now to avoid pain
with PLISTs
   2016-04-28 02:51:35 by Stuart Henderson | Files touched by this commit (2)
Log message:
http2 works here now, so enable it
   2016-04-28 02:40:42 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to apache-httpd-2.4.20.
   2016-03-18 15:38:26 by Christian Weisgerber | Files touched by this commit (82)
Log message:
remove SHARED_ONLY from simple ports that use the gettext or libiconv module
   2016-01-15 16:40:03 by Stuart Henderson | Files touched by this commit (2)
Log message:
Disable Apache httpd's mod_http2.so for now, as reported by
Pedro de Oliveira it isn't working on OpenBSD yet.
   2015-12-30 02:59:31 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Don't sample /var/www/conf/modules.samples/, let webapps do that.
Optionaly include /var/www/conf/modules/*.conf instead of /etc/apache2/modules/*.conf,
this allows the usual MESSAGE linking from modules.samples/ to modules/ to work
out-of-the-box.
ok sthen@
   2015-12-23 07:51:55 by Antoine Jacoutot | Files touched by this commit (3)
Log message:
Update to apache-httpd-2.4.18.
   2015-12-01 09:45:30 by Stuart Henderson | Files touched by this commit (2)
Log message:
As found by ajacoutot, nghttp2 was getting picked up by httpd's autoconf;
make it an explicit dependency and package mod_http2.
   2015-10-27 12:18:17 by Stuart Henderson | Files touched by this commit (11)
Log message:
update to apache-httpd-2.4.17, and add scaffolding to use the same type of
modules.sample mechanism as apache-httpd-openbsd
   2015-10-24 10:41:37 by Stuart Henderson | Files touched by this commit (4)
Log message:
sync Apache httpd in 5.8-stable with -current:
- build mod_cgi.so, for CGI use with the default prefork mpm
- install mod_cgid.so (it was already built but not installed),
for CGI use with optional multi-threaded mpm
- add patches to guard SSLv3 (not required for 5.8 but doesn't hurt,
and simplifies any future syncs)
   2015-10-24 06:17:50 by Claudio Jeker | Files touched by this commit (2)
Log message:
Make sure mod_cgi and mod_cgid are built and installed. Depending if apache
is prefork or threaded one or the other needs to be used to allow CGI handling.
For fast cgi mod_proxy_fcgi should be used.
OK sthen@ tested by Alessandro DE LAURENZIS
   2015-09-13 06:37:49 by Stuart Henderson | Files touched by this commit (2)
Log message:
fix miscommit that removed @rcscript (thanks, update-plist!)
   2015-09-13 06:31:46 by Stuart Henderson | Files touched by this commit (8)
Log message:
Move to improved version of no_ssl3 patch for apache-httpd, thanks to
Kaspar Brand (https://bz.apache.org/bugzilla/show_bug.cgi?id=58349)
- small tweak from Kaspar's patch for 2.4 backport.
   2015-09-10 04:30:04 by Antoine Jacoutot | Files touched by this commit (1)
Log message:
Do not pick up gawk.
   2015-09-07 00:32:04 by Jeremie Courreges-Anglas | Files touched by this commit (2)
Log message:
Guard use of SSLv3*method.  Die if SSLv3 forced in conf but unavail.
Fixes "undefined symbol" errors at dlopen time.
Reported by Pedro de Oliveira, ok sthen@
   2015-07-18 14:01:13 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Don't own /var/www/htdocs/, it's part of mtree.
Don't ship the empty example logs directory.
   2015-07-17 22:59:42 by Stuart Henderson | Files touched by this commit (2)
Log message:
cope with sslv3 being disabled
   2015-07-17 19:11:40 by Stuart Henderson | Files touched by this commit (2)
Log message:
adjust @pkgpath depending on flavour, so updates for apache-httpd--ldap work
correctly. (in reality this wasn't a big problem as we don't build the ldap
flavoured version in bulk builds anyway, due to dependence on conflicting
versions of apr-util).
   2015-07-17 18:55:09 by Antoine Jacoutot | Files touched by this commit (6)
Log message:
Update to apache-httpd-2.4.16.
ok sthen@
   2015-07-17 18:33:53 by Antoine Jacoutot | Files touched by this commit (4)
Log message:
Cleanup.
   2015-07-17 17:57:58 by Antoine Jacoutot | Files touched by this commit (11)
Log message:
Move default document root to /var/www to be able to switch between web
servers easily; idea from stsp@
Split the package into -main and -common (which holds common files for
apache 1 and 2).
discussed with stsp@ sthen@
ok stsp@
   2015-07-17 13:52:06 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
Change the default user to "www".
This makes it easier to switch from one web server to the other.
discussed with stsp@ sthen@
ok sthen@
   2015-05-15 02:08:04 by Stefan Sperling | Files touched by this commit (27)
Log message:
Update www/apache-httpd to 2.4.12.
Manual configuration updates might be required, see
http://httpd.apache.org/docs/2.4/upgrading.html
MPMs can now be loaded at runtime. The default config keeps using 'prefork'.
Based on an initial diff by claudio@
ok sthen@ ajacoutot@
   2015-02-16 15:57:14 by Christian Weisgerber | Files touched by this commit (213)
Log message:
Drop USE_GROFF from ports where the formatting differences are acceptable
or mandoc provides the more useful output.
   2015-02-06 08:19:01 by Stuart Henderson | Files touched by this commit (4)
Log message:
Drop some patches; libressl renamed SSL_CTX_use_certificate_chain to
SSL_CTX_use_certificate_chain_mem (libssl/src/ssl/ssl.h r1.79 et al) so
this no longer conflicts.
   2014-11-04 14:46:55 by Stuart Henderson | Files touched by this commit (1)
Log message:
sync WANTLIB to fix the -ldap flavour, as found by Joe Price
(missed during the heimdal removal because this isn't linked to the build
to avoid conflicting dependencies on apr-util and apr-util--ldap by
different ports in the tree).
   2011-02-12 14:05:38 by Pierre-Emmanuel Andre | Files touched by this commit (3)
Log message:
Fix CVE-2010-1452
ok sthen@, landry@
   2010-11-22 01:37:07 by Marc Espie | Files touched by this commit (859)
Log message:
new depends
   2010-11-11 05:35:09 by Stuart Henderson | Files touched by this commit (38)
Log message:
new-style LIB_DEPENDS/REVISION/WANTLIB
   2010-10-19 02:02:58 by Marc Espie | Files touched by this commit (243)
Log message:
USE_GROFF=Yes
   2010-06-27 11:27:03 by Robert Nagy | Files touched by this commit (3)
Log message:
update to 2.2.15
   2009-12-08 18:01:55 by William Yodlowsky | Files touched by this commit (3)
Log message:
MFC:
Security update to apache-httpd-2.2.14. (CVE-2009-3095, CVE-2009-3094)
ok jasper@ bernd@
   2009-12-01 06:38:23 by Bernd Ahlers | Files touched by this commit (4)
Log message:
Security update to apache-httpd-2.2.14. (CVE-2009-3095, CVE-2009-3094)
   2009-10-24 21:34:26 by William Yodlowsky | Files touched by this commit (3)
Log message:
MFC:
SECURITY FIX
Update to 2.2.13
SECURITY: CVE-2009-2412, CVE-2009-1891, CVE-2009-1195, CVE-2009-1890,
CVE-2009-1191, CVE-2009-0023, CVE-2009-1955, CVE-2009-1956
Update the Makefile to properly depend on the mt version of apr-util
in ldap flavour. (from bernd@)
   2009-09-14 20:27:53 by William Yodlowsky | Files touched by this commit (3)
Log message:
MFC:
SECURITY FIX
Update to 2.2.13
SECURITY: CVE-2009-2412, CVE-2009-1891, CVE-2009-1195, CVE-2009-1890,
CVE-2009-1191, CVE-2009-0023, CVE-2009-1955, CVE-2009-1956
Update the Makefile to properly depend on the mt version of apr-util
in ldap flavour. (from bernd@)
ok jasper@
   2009-08-30 12:06:07 by Felix Kronlage | Files touched by this commit (4)
Log message:
Update to 2.2.13
SECURITY: CVE-2009-2412, CVE-2009-1891, CVE-2009-1195, CVE-2009-1890,
CVE-2009-1191, CVE-2009-0023, CVE-2009-1955, CVE-2009-1956
Update the Makefile to properly depend on the mt version of apr-util
in ldap flavour. (from bernd@)
ok jasper@, ajacoutot@
   2009-06-27 21:03:09 by William Yodlowsky | Files touched by this commit (2)
Log message:
SECURITY FIX
MFC:
Update to apache-httpd-2.2.11.
Lots of bugfixes and a security fix for CVE-2008-2939.
ok robert@
   2009-05-15 09:46:58 by Claudio Jeker | Files touched by this commit (2)
Log message:
Enable suexec for apache2 with these config changes:
- install the binary under ${TRUEPREFIX}/sbin/suexec2
- change suexec-caller to _apache2
- log to /var/log/suexec2_log similar to the suexec in base
Inputs and OK sthen@, simon@
   2009-04-09 12:36:00 by Bernd Ahlers | Files touched by this commit (4)
Log message:
Update to apache-httpd-2.2.11.
Lots of bugfixes and a security fix for CVE-2008-2939.
Enable usage of the threaded apr which is needed for
an upcoming port.
ok simon@
   2008-09-02 16:05:23 by Bernd Ahlers | Files touched by this commit (7)
Log message:
Security update to apache-httpd-2.2.9. (CVE-2008-2364 and CVE-2007-6420)
http://www.apache.org/dist/httpd/CHANGES_2.2.9
Also fix LIB_DEPENDS and use the external pcre library instead of the shipped
one.
ok dlg@, simon@, merdely@ (pre-lock)
   2008-01-28 12:48:47 by Bernd Ahlers | Files touched by this commit (7)
Log message:
Security update to apache2 2.2.8.
(CVE-2007-6420, CVE-2007-6421, CVE-2007-6422, CVE-2007-6423,
CVE-2008-0005, CVE-2007-6388)
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059626.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059560.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059561.html
ok dlg@
   2007-09-18 23:47:36 by Steven Mestdagh | Files touched by this commit (8)
Log message:
SECURITY update to 2.2.6
fixes various vulnerabilities:
CVE-2007-3847, CVE-2007-1863, CVE-2007-3304, CVE-2006-5752, CVE-2007-1862
more details can be found at:
http://www.apache.org/dist/httpd/CHANGES_2.2.6
ok merdely@
   2007-09-06 01:33:53 by Michael Erdely | Files touched by this commit (4)
Log message:
Added ldap flavor which includes mod_authnz_ldap + mod_ldap
Removed quotes around COMMENT while here.
From Peter Hessler with tweaks by me.
Advice from Brad.  Help from deanna@, simon@.
ok dlg@, simon@
   2007-04-05 11:26:27 by Marc Espie | Files touched by this commit (815)
Log message:
more base64 checksums
   2007-03-25 11:40:55 by Deanna Phillips | Files touched by this commit (14)
Log message:
Update to 2.2.4.  This is principally a bugfix release.  See
Changelog: http://www.apache.org/dist/httpd/CHANGES_2.2
While here, regen patches with the new diff.
ok dlg
   2007-01-15 18:12:26 by Deanna Phillips | Files touched by this commit (13)
Log message:
Append a 2 to every mention of anything that exists in both the base
httpd and this port.  Hopefully we got them all.
Requested by robert@, ok dlg@.
   2007-01-09 04:18:13 by David Gwynne | Files touched by this commit (2)
Log message:
enable the cache, disk_cache, and all the proxy modules. mem_cache wont
build since we arent using a threaded worker.
requested by ssehic
   2007-01-09 03:47:37 by David Gwynne | Files touched by this commit (3)
Log message:
enable all the modules, and build them as shared objects. mark the port
SHARED_ONLY.
ok robert@
   2007-01-09 02:56:57 by David Gwynne | Files touched by this commit (3)
Log message:
switch apache2 from a gnu style configure to a simple one so we can
define prefix the way apache likes it.
this is because apache2 has a different understanding of what the prefix
means, and our understanding and application of it on this port leads to
extremely confused paths in a lot of its generated files.
our understanding of prefix is to mean the path at which the binaries,
libs, manpages, and so on are stored, ie, /usr/local. apache2 understands
prefix to mean "install architecture-independent files", or in real terms
the ServerRoot. obviously using /usr/local as the server root when we want
to use /var/apache2 for that purpose is uncomfortable for it, and it leads
to things like broken paths in the default config files and builds of
modules.
ok robert@
   2007-01-05 15:57:11 by David Gwynne | Files touched by this commit (3)
Log message:
move the dir with the build files out of /var/apache2 and into
/usr/local/share/apache2.
based on a suggestion from robert@
   2007-01-05 15:22:04 by David Gwynne | Files touched by this commit (3)
Log message:
revert the part of the previous commit that removed the install of the
build dir. you can build apache 2 modules again now.
   2006-12-25 13:40:02 by Deanna Phillips | Files touched by this commit (7)
Log message:
- stop setting SYSCONFDIR
- put config files in /etc/apache2 instead of /var since this is not
chrooted
- make a couple of comments that refer to 'httpd' refer to 'httpd2'
instead
- don't install the build makefiles
ideas from bernd@ and steven@, ok steven@
   2006-12-15 17:41:56 by Deanna Phillips | Files touched by this commit (2)
Log message:
To avoid name clashes with the system httpd, configure with program
name httpd2. Rename the support programs and their manual pages
accordingly.
bump pkgname.
ok steven@, bernd@.
   2006-12-14 04:20:22 by Steven Mestdagh | Files touched by this commit (1)
Log message:
use MASTER_SITE_APACHE, pointed out by dlg