pkgsrc/www/apache2/Makefile, branch pkgsrc_2009Q3

Back out previous PKG_REVISION bump, hoping that it was in 40 minutes...

2009-08-12T04:18:27Z

Bump PKGREVISION reflecting update of devel/apr0.

2009-08-12T03:38:28Z

Recursive PKGREVISION/ABI-depends bump for db4 4.6->4.7 update (shlib

2008-09-06T20:54:31Z

name change).

CVE-2008-2939

2008-08-09T20:33:37Z

bump PKGREVISION

Fix abs_srcdir definition as done in apache22. Also install

2008-07-10T15:18:23Z

mkdir.sh as expected e.g. by www/ap2-fcgid. Bump revision.

As indicated by comments on pkgsrc-c, move PKGREVISION setting to

2008-06-22T23:01:19Z

individual Makefile files and out of Makefile.common.

Second round of explicit pax dependencies. As reminded by tnn@,

2008-05-26T02:13:14Z

many packages used to use ${PAX}. Use the common way of directly calling pax, it is created as tool after all.

Convert to use PLIST_VARS instead of manually passing "@comment "

2008-04-12T22:42:57Z

through PLIST_SUBST to the plist module.

Update apache package to 2.0.63.

2008-01-21T14:37:22Z

Changes with Apache 2.0.63 *) winnt_mpm: Resolve modperl issues by redirecting console mode stdout to /Device/Nul as the server is starting up, mirroring unix MPM's. PR: 43534 [Tom Donovan , William Rowe] *) winnt_mpm: Restore Win32DisableAcceptEx On directive and Win9x platform by recreating the bucket allocator each time the trans pool is cleared. PR: 11427 #16 (follow-on) [Tom Donovan ] Changes with Apache 2.0.62 (not released) *) SECURITY: CVE-2007-6388 (cve.mitre.org) mod_status: Ensure refresh parameter is numeric to prevent a possible XSS attack caused by redirecting to other URLs. Reported by SecurityReason. [Mark Cox, Joe Orton] *) SECURITY: CVE-2007-5000 (cve.mitre.org) mod_imagemap: Fix a cross-site scripting issue. Reported by JPCERT. [Joe Orton] *) Introduce the ProxyFtpDirCharset directive, allowing the administrator to identify a default, or specific servers or paths which list their contents in other-than ISO-8859-1 charset (e.g. utf-8). [Ruediger Pluem] *) log.c: Ensure Win32 resurrects its lost robust logger processes. [William Rowe] *) mpm_winnt: Eliminate wait_for_many_objects. Allows the clean shutdown of the server when the MaxClients is higher then 257, in a more responsive manner [Mladen Turk, William Rowe] *) Add explicit charset to the output of various modules to work around possible cross-site scripting flaws affecting web browsers that do not derive the response character set as required by RFC2616. One of these reported by SecurityReason [Joe Orton] *) http_protocol: Escape request method in 405 error reporting. This has no security impact since the browser cannot be tricked into sending arbitrary method strings. [Jeff Trawick] *) http_protocol: Escape request method in 413 error reporting. Determined to be not generally exploitable, but a flaw in any case. PR 44014 [Victor Stinner ]

Per the process outlined in revbump(1), perform a recursive revbump

2008-01-18T05:06:18Z

on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@