summaryrefslogtreecommitdiff
path: root/devel/apr
AgeCommit message (Collapse)AuthorFilesLines
2004-05-05No longer used.snj1-33/+0
2004-03-22Update apache2 to 2.0.49. This includes various changes since last releasereed2-5/+4
including: *) SECURITY: CAN-2004-0174 (cve.mitre.org) Fix starvation issue on listening sockets where a short-lived connection on a rarely-accessed listening socket will cause a child to hold the accept mutex and block out new connections until another connection arrives on that rarely-accessed listening socket. With Apache 2.x there is no performance concern about enabling the logic for platforms which don't need it, so it is enabled everywhere except for Win32. [Jeff Trawick] *) SECURITY: CAN-2004-0113 (cve.mitre.org) mod_ssl: Fix a memory leak in plain-HTTP-on-SSL-port handling. PR 27106. [Joe Orton] *) SECURITY: CAN-2003-0020 (cve.mitre.org) Escape arbitrary data before writing into the errorlog. Unescaped errorlogs are still possible using the compile time switch "-DAP_UNSAFE_ERROR_LOG_UNESCAPED". [Geoffrey Young, Andr<E9> Malo] Complete changelog is at http://www.apache.org/dist/httpd/CHANGES_2.0 Package changes include: buildlink depends increased for apache2 (but not for apr). apr package version changes, but APR_VERSION stays same. more files installed and added to PLIST. share/httpd/manual/search/manual-index.cgi removed from PLIST. Also removing share/httpd/htdocs and share/httpd directories removed from PLIST because already handled by MAKE_DIRS. (I think this should use OWN_DIRS.) (jlam@ said he would like this update done during freeze.)
2004-03-18Fix serious bug where BUILDLINK_PACKAGES wasn't being ordered properlyjlam1-7/+6
by moving the inclusion of buildlink3.mk files outside of the protected region. This bug would be seen by users that have set PREFER_PKGSRC or PREFER_NATIVE to non-default values. BUILDLINK_PACKAGES should be ordered so that for any package in the list, that package doesn't depend on any packages to the left of it in the list. This ordering property is used to check for builtin packages in the correct order. The problem was that including a buildlink3.mk file for <pkg> correctly ensured that <pkg> was removed from BUILDLINK_PACKAGES and appended to the end. However, since the inclusion of any other buildlink3.mk files within that buildlink3.mk was in a region that was protected against multiple inclusion, those dependencies weren't also moved to the end of BUILDLINK_PACKAGES.
2004-03-09Add LDFLAGS.SunOS+=-lnsl. From gavan@ on tech-pkg. Closes PR pkg/24720.snj1-1/+3
2004-03-07bl3ify.minskim2-4/+34
2004-02-14LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globsjlam1-2/+1
relative to ${WRKSRC}. Remove redundant LIBTOOL_OVERRIDE settings that are automatically handled by the default setting in bsd.pkg.mk.
2004-02-13${LIBTOOL} is just a bare "libtool" now. We want to install ${PKG_LIBTOOL}.jlam1-2/+2
2004-01-27Ensure apr-util never picks up gdbm (sometimes helps on GNU/Linux).epg1-2/+3
2004-01-18As i described in <9883.1074028467@gould.diplodocus.org>epg2-6/+28
(http://mail-index.netbsd.org/tech-pkg/2004/01/13/0015.html) and <479.1074093881@gould.diplodocus.org> (http://mail-index.netbsd.org/tech-pkg/2004/01/14/0016.html), add an APR_USE_DB4 variable (defaulting to YES except on platforms where db4 is broken). devel/apr now builds without db4 when APR_USE_DB4 is NO.
2004-01-13db4, a new dependency for apr, is broken (at least on ppc). Revert back tojklos2-5/+3
not needing db4 until it is fixed.
2003-12-03Bump PKGREVISION (thanks Thomas Klausner).epg2-3/+4
2003-12-03Add missing file.epg1-1/+2
2003-12-03Link to db4.epg2-4/+6
2003-11-28Drop revision for version bump (0.9.4 -> 0.9.5).junyoung1-2/+1
2003-10-29libapr-0.so.9.4 -> libapr-0.so.9.5mason1-3/+3
libaprutil-0.so.9.4 -> libaprutil-0.so.9.5
2003-10-28Update checksums to account for Apache 2.0.48, so this will build.mason1-3/+3
2003-10-11bump PKGREVISIONs after bump of expat BUILDLINK_DEPENDS.grant1-1/+2
2003-09-04Now use system/user default CFLAGSadam1-1/+3
2003-07-09upgrade to apache-2.0.47/apr-0.9.4.2.0.47.itojun2-5/+5
Changes with Apache 2.0.47 *) SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one could result in the weak ciphersuite being used in place of the strong one. [Ben Laurie] *) SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing temporary denial of service when accept() on a rarely accessed port returns certain errors. Reported by Saheed Akhtar <S.Akhtar@talis.com>. [Jeff Trawick] *) SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial of service when target host is IPv6 but proxy server can't create IPv6 socket. Fixed by the reporter. [Yoshioka Tsuneo <tsuneo.yoshioka@f-secure.com>] *) SECURITY [VU#379828] Prevent the server from crashing when entering infinite loops. The new LimitInternalRecursion directive configures limits of subsequent internal redirects and nested subrequests, after which the request will be aborted. PR 19753 (and probably others). [William Rowe, Jeff Trawick, André Malo] *) core_output_filter: don't split the brigade after a FLUSH bucket if it's the last bucket. This prevents creating unneccessary empty brigades which may not be destroyed until the end of a keepalive connection. [Juan Rivera <Juan.Rivera@citrix.com>] *) Add support for "streamy" PROPFIND responses. [Ben Collins-Sussman <sussman@collab.net>] *) mod_cgid: Eliminate a double-close of a socket. This resolves various operational problems in a threaded MPM, since on the second attempt to close the socket, the same descriptor was often already in use by another thread for another purpose. [Jeff Trawick] *) mod_negotiation: Introduce "prefer-language" environment variable, which allows to influence the negotiation process on request basis to prefer a certain language. [André Malo] *) Make mod_expires' ExpiresByType work properly, including for dynamically-generated documents. [Ken Coar, Bill Stoddard]
2003-06-06Avoid hardcoding /usr/pkg in the configuration layouts (using the value fromjmmv4-8/+15
the ${PREFIX} variable).
2003-05-30Fix apr-config and apu-config scripts when run fromepg3-1/+93
${BUILDLINK_DIR}/bin. This may help fix ap2-perl, but won't help ap2-php4.
2003-05-30Change the CONFLICTS back to apache2<=2.0.45 and document why (thatepg1-2/+4
version of the package and below included its own apr).
2003-05-29Apache 2.0.46 won't build with the older apr installed; BUILDLINK_DEPENDSjklos1-2/+2
needed to be bumped so apr will get updated with Apache.
2003-05-29upgrade to apache 2.0.46. fixes two vulnerabilities:itojun4-31/+8
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0245 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0189
2003-05-25import apr-0.9.1.2.0.45epg10-0/+248
This package contains apr and apr-util from the latest Apache2 distribution (currently httpd-2.0.45). It is currently (er, currently in a few minutes) shared between the Apache2 and Subversion packages.