summaryrefslogtreecommitdiff
path: root/devel/apr
AgeCommit message (Collapse)AuthorFilesLines
2005-02-16fix typogrant1-2/+2
2005-02-13reorder library linker arguments so that -lcrypt comes aftergrant1-1/+3
-laprutil-0. fixes build on Interix. patch from HIRAMATSU Yoshifumi in PR pkg/29336.
2005-02-09Update "apr" package to version 0.9.6.2.0.53. Changes sincetron2-5/+4
version 0.9.5.2.0.52: - Add apr_threadattr_stacksize_set() for overriding the default stack size for threads created by apr_thread_create(). - Add an RPM spec file. - Add a build script to create a solaris package.
2004-12-22Remove support for some variables that are supposed to go away afterjlam1-15/+1
pkgsrc-2004Q4 is branched.
2004-11-26APR abstracts the dl*() functions across different platforms.jlam1-1/+2
2004-11-23More closely follow doc/Makefile-example.jlam1-9/+10
2004-11-22The global PKG_OPTION is "ldap", not "openldap".jlam1-2/+2
2004-11-22Pass extra libraries to configure scripts in LIBS, and remove redundantjlam1-4/+4
environment passing that's already done in bsd.pkg.mk.
2004-11-21The common global option for LDAP support is "ldap".jlam1-4/+4
2004-11-17PKG_OPTIONS.apr needs to be defined before trying to get its value.xtraeme1-1/+3
2004-11-17It's pkgsrc-2004Q4 right now!xtraeme1-2/+2
2004-11-17Convert to use bsd.options.mk and use subst.mk instead of usingxtraeme3-32/+46
sed(1)/mv(1). # XXX Support for the following variables will be removed after the # XXX pkgsrc-2004Q3 branch is released: # XXX # XXX APR_USE_DB4 # XXX APR_USE_OPENLDAP
2004-11-10Support pkgviews.epg1-1/+3
2004-11-08Fix obvious regex typo in conditional.tv1-2/+2
(This should be PKG_OPTIONS-ized, but needs to be done at the same time as www/apache2.)
2004-10-29Set directory permission to PKGDIRMODE to avoid creating a read-onlyminskim1-2/+2
directory; deinstalling files from a read-only directory fails on Linux. OK'ed by adrianp@.
2004-10-26Replace the .elif statement for APR_USE_OPENLDAP with a new .ifxtraeme1-2/+3
block to fix the problem reported in PR pkg/27442 by Rasputin.
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv2-2/+4
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-10-02Get rid of PKGREVISION since just updated apache2 version.reed1-2/+1
2004-10-02Update apache to apache-2.0.52.reed1-3/+3
Also added comment to www/apache2/Makefile.common to remind to update checksum in devel/apr also. No actual devel/apr changes seen. Also removed www/apache2/patches/patch-ab because it is identical to fix for security in new version. Changes with Apache 2.0.52 *) Use HTML 2.0 <hr> for error pages. PR 30732 [André Malo] *) Fix the global mutex crash when the global mutex is never allocated due to disabled/empty caches. [Jess Holle <jessh ptc.com>] *) Fix a segfault in the LDAP cache when it is configured switched off. [Jess Holle <jessh ptc.com>] *) SECURITY: CAN-2004-0811 (cve.mitre.org) Fix merging of the Satisfy directive, which was applied to the surrounding context and could allow access despite configured authentication. PR 31315. [Rici Lake <rici ricilake.net>] *) Fix the handling of URIs containing %2F when AllowEncodedSlashes is enabled. Previously, such urls would still be rejected. [Jeff Trawick, Bill Stoddard] *) mod_mem_cache: Fixed race condition causing segfault because of memory being freed twice, or reused after being freed. [J. Clar, W. Stoddard, G. Ames] *) Add -l option to rotatelogs to let it use local time rather than UTC. PR 24417. [Ken Coar, Uli Zappe <uli ritual.org>] *) mod_log_config: Fix a bug which prevented request completion time from being logged for I_INSIST_ON_EXTRA_CYCLES_FOR_CLF_COMPLIANCE processing. PR 29696. [Alois Treindl <alois astro.ch>]
2004-10-02APR_USE_DB4 recently changed from YES to NO,reed2-3/+4
so bump the PKGREVISION and bump the buildlink dependency needed because previously it wanted libdb4 and now it doesn't it. This fixes build problem with apache2 because of missing -ldb4.
2004-09-25Add APR_USE_DB4 to BUILD_DEFS.epg1-2/+2
2004-09-22Mechanical changes to package PLISTs to make use of LIBTOOLIZE_PLIST.jlam1-9/+1
All library names listed by *.la files no longer need to be listed in the PLIST, e.g., instead of: lib/libfoo.a lib/libfoo.la lib/libfoo.so lib/libfoo.so.0 lib/libfoo.so.0.1 one simply needs: lib/libfoo.la and bsd.pkg.mk will automatically ensure that the additional library names are listed in the installed package +CONTENTS file. Also make LIBTOOLIZE_PLIST default to "yes".
2004-09-20- Update apr to 2.0.51adrianp5-98/+9
- Fix permissions on installed .h files - ok'ed snj@, wiz@ - Thanks to epg@ for final check This version of Apache is principally a bug fix release. Of particular note is that 2.0.51 addresses five security vulnerabilities: An input validation issue in IPv6 literal address parsing which can result in a negative length parameter being passed to memcpy. [CAN-2004-0786] A buffer overflow in configuration file parsing could allow a local user to gain the privileges of a httpd child if the server can be forced to parse a carefully crafted .htaccess file. [CAN-2004-0747] A segfault in mod_ssl which can be triggered by a malicious remote server, if proxying to SSL servers has been configured. [CAN-2004-0751] A potential infinite loop in mod_ssl which could be triggered given particular timing of a connection abort. [CAN-2004-0748] A segfault in mod_dav_fs which can be remotely triggered by an indirect lock refresh request. [CAN-2004-0809] For further details, see http://www.apache.org/dist/httpd/Announcement2.html and http://apache.rmplc.co.uk/httpd/CHANGES_2.0.
2004-07-17Add APR_CONFIGURE_ARGS=--with-ldap, missed in previous.xtraeme1-1/+2
2004-07-16Enable OpenLDAP support in devel/apr, by default it's disabled.xtraeme2-4/+16
If you want to use it, "APR_USE_OPENLDAP" should be set to [Yy][Ee][Ss]. This closes PR pkg/25356.
2004-07-14- Update to apache 2.0.50adrianp2-5/+5
- Add new build def APACHE_DEFAULT_FILES Changes with Apache 2.0.50 *) SECURITY: CAN-2004-0493 (cve.mitre.org) Close a denial of service vulnerability identified by Georgi Guninski which could lead to memory exhaustion with certain input data. [Jeff Trawick] *) mod_cgi: Handle output on stderr during script execution on Unix platforms; preventing deadlock when stderr output fills pipe buffer. Also fixes case where stderr from nph- scripts could be lost. PR 22030, 18348. [Joe Orton, Jeff Trawick] *) mod_alias now emits a warning if it detects overlapping *Alias* directives. [André Malo] *) mod_rewrite no longer turns forward proxy requests into reverse proxy requests. PR 28125 [ast domdv.de, André Malo] *) ap_set_sub_req_protocol and ap_finalize_sub_req_protocol are now exported on Win32 and Netware as well (minor MMN bump). PR 28523. [Edward Rudd <eddie omegaware.com>, André Malo] *) Restore the ability to disable the use of AcceptEx on Win9x systems automatically (broken in 2.0.49). PR 28529. [André Malo] *) <VirtualHost myhost> now applies to all IP addresses for myhost instead of just the first one reported by the resolver. This corrects a regression since 1.3. [Jeff Trawick] *) util_ldap: allow relative paths for LDAPTrustedCA to be resolved against ServerRoot PR#26602 [Brad Nicholes] *) SECURITY: CAN-2004-0488 (cve.mitre.org) mod_ssl: Fix a buffer overflow in the FakeBasicAuth code for a (trusted) client certificate subject DN which exceeds 6K in length. [Joe Orton] *) mod_dav_fs: Fix MKCOL response for missing parent collections, which caused issues for the Eclipse WebDAV extension. PR 29034. [Joe Orton] *) mod_deflate: Fix memory consumption (which was proportional to the response size). PR 29318. [Joe Orton] *) mod_ssl: Log the errors returned on failure to load or initialize a crypto accelerator engine. [Joe Orton] *) Allow RequestHeader directives to be conditional. PR 27951. [Vincent Deffontaines <vincent gryzor.com>, André Malo] *) Allow LimitRequestBody to be reset to unlimited. PR 29106 [André Malo] *) Fix a bunch of cases where the return code of the regex compiler was not checked properly. This affects: mod_setenvif, mod_usertrack, mod_proxy, mod_proxy_ftp and core. PR 28218. [André Malo] *) mod_ssl: Fix a potential segfault in the 'shmcb' session cache for small cache sizes. PR 27751. [Geoff Thorpe <geoff geoffthorpe.net>] *) Remove 2Gb log file size restriction on some 32-bit platforms. PR 13511. [Joe Orton] *) mod_logio no longer removes the EOS bucket. PR 27928. [Bojan Smojver <bojan rexursive.com>] *) htpasswd no longer refuses to process files that contain empty lines. [André Malo] *) Regression from 1.3: At startup, suexec now will be checked for availability, the setuid bit and user root. The works only if httpd is compiled with the shipped APR version (0.9.5). PR 28287. [André Malo] *) Unix MPMs: Stop dropping connections when the file descriptor is at least FD_SETSIZE. [Jeff Trawick] *) Fix handling of IPv6 numeric strings in mod_proxy. [Jeff Trawick] *) mod_isapi: send_response_header() failed to copy status string's last character. PR 20619. [Jesse Pelton <jsp pkc.com>] *) Fix a segfault when requests for shared memory fails and returns NULL. Fix a segfault caused by a lack of bounds checking on the cache. PR 24801. [Graham Leggett] *) Throw an error message if an attempt is made to use the LDAPTrustedCA or LDAPTrustedCAType directives in a VirtualHost. PR 26390 [Brad Nicholes] *) Fix a potential segfault if the bind password in the LDAP cache is NULL. PR 28250. [Jari Ahonen <jah progress.com>] *) Quotes cannot be used around require group and require dn directives, update the documentation to reflect this. Also add quotes around the dn and group within debug messages, to make it more obvious why authentication is failing if quotes are used in error. PR 19304. [Graham Leggett] *) The Microsoft LDAP SDK escapes filters for us, stop util_ldap from escaping filters twice when the backslash character is used. PR 24437. [Jess Holle <jessh ptc.com>] *) Overhaul handling of LDAP error conditions, so that the util_ldap_* functions leave the connections in a sane state after errors have occurred. PR 27748, 17274, 17599, 18661, 21787, 24595, 24683, 27134, 27271 [Graham Leggett] *) mod_ldap calls ldap_simple_bind_s() to validate the user credentials. If the bind fails, the connection is left in an unbound state. Make sure that the ldap connection record is updated to show that the connection is no longer bound. [Brad Nicholes] *) Ensure that lines in the request which are too long are properly terminated before logging. [Tsurutani Naoki <turutani scphys.kyoto-u.ac.jp>] *) Update the bind credentials for the cached LDAP connection to reflect the last bind. This prevents util_ldap from creating unnecessary connections rather than reusing cached connections. [Brad Nicholes] *) mod_isapi: GetServerVariable returned improperly terminated header fields given "ALL_HTTP" or "ALL_RAW". PR 20656. [Jesse Pelton <jsp pkc.com>] *) mod_isapi: GetServerVariable("ALL_RAW") returned the wrong buffer size. PR 20617. [Jesse Pelton <jsp pkc.com>] *) mod_dav: Fix a problem that could cause crashes when manipulating locks on some platforms. [Jeff Trawick] *) mod_headers no longer crashes if an empty header value should be added. [André Malo] *) Fix segfault in mod_expires, which occured under certain circumstances. PR 28047. [André Malo] *) htpasswd: use apr_temp_dir_get() and general cleanup [Guenter Knauf <eflash gmx.net>, Thom May] *) mod_ssl: Fix memory leak in session cache handling. PR 26562 [Madhusudan Mathihalli] *) mod_ssl: Fix potential segfaults when performing SSL shutdown from a pool cleanup. PR 27945. [Joe Orton] *) Add forensic logging module (mod_log_forensic). [Ben Laurie] *) logresolve: Allow size of log line buffer to be overridden at build time (MAXLINE). PR 27793. [Jeff Trawick] *) Fix the comment delimiter in htdbm so that it correctly parses the username comment. Also add a terminate function to allow NetWare to pause the output before the screen is destroyed. [Guenter Knauf <eflash gmx.net>, Brad Nicholes] *) Fix crash when Apache was started with no Listen directives. [Michael Corcoran <mcorcoran warpsolutions.com>] *) core_output_filter: Fix bug that could result in sending garbage over the network when module handlers construct bucket brigades containing multiple file buckets all referencing the same open file descriptor. [Bojan Smojver] *) Fix memory corruption problem with ap_custom_response() function. The core per-dir config would later point to request pool data that would be reused for different purposes on different requests. [Jeff Trawick, based on an old 1.3 patch submitted by Will Lowe] *) Win32: Tweak worker thread accounting routines to eliminate server hang when number of Listen directives in httpd.conf is greater than or equal to the setting of ThreadsPerChild. [Bill Stoddard]
2004-05-05No longer used.snj1-33/+0
2004-03-22Update apache2 to 2.0.49. This includes various changes since last releasereed2-5/+4
including: *) SECURITY: CAN-2004-0174 (cve.mitre.org) Fix starvation issue on listening sockets where a short-lived connection on a rarely-accessed listening socket will cause a child to hold the accept mutex and block out new connections until another connection arrives on that rarely-accessed listening socket. With Apache 2.x there is no performance concern about enabling the logic for platforms which don't need it, so it is enabled everywhere except for Win32. [Jeff Trawick] *) SECURITY: CAN-2004-0113 (cve.mitre.org) mod_ssl: Fix a memory leak in plain-HTTP-on-SSL-port handling. PR 27106. [Joe Orton] *) SECURITY: CAN-2003-0020 (cve.mitre.org) Escape arbitrary data before writing into the errorlog. Unescaped errorlogs are still possible using the compile time switch "-DAP_UNSAFE_ERROR_LOG_UNESCAPED". [Geoffrey Young, Andr<E9> Malo] Complete changelog is at http://www.apache.org/dist/httpd/CHANGES_2.0 Package changes include: buildlink depends increased for apache2 (but not for apr). apr package version changes, but APR_VERSION stays same. more files installed and added to PLIST. share/httpd/manual/search/manual-index.cgi removed from PLIST. Also removing share/httpd/htdocs and share/httpd directories removed from PLIST because already handled by MAKE_DIRS. (I think this should use OWN_DIRS.) (jlam@ said he would like this update done during freeze.)
2004-03-18Fix serious bug where BUILDLINK_PACKAGES wasn't being ordered properlyjlam1-7/+6
by moving the inclusion of buildlink3.mk files outside of the protected region. This bug would be seen by users that have set PREFER_PKGSRC or PREFER_NATIVE to non-default values. BUILDLINK_PACKAGES should be ordered so that for any package in the list, that package doesn't depend on any packages to the left of it in the list. This ordering property is used to check for builtin packages in the correct order. The problem was that including a buildlink3.mk file for <pkg> correctly ensured that <pkg> was removed from BUILDLINK_PACKAGES and appended to the end. However, since the inclusion of any other buildlink3.mk files within that buildlink3.mk was in a region that was protected against multiple inclusion, those dependencies weren't also moved to the end of BUILDLINK_PACKAGES.
2004-03-09Add LDFLAGS.SunOS+=-lnsl. From gavan@ on tech-pkg. Closes PR pkg/24720.snj1-1/+3
2004-03-07bl3ify.minskim2-4/+34
2004-02-14LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globsjlam1-2/+1
relative to ${WRKSRC}. Remove redundant LIBTOOL_OVERRIDE settings that are automatically handled by the default setting in bsd.pkg.mk.
2004-02-13${LIBTOOL} is just a bare "libtool" now. We want to install ${PKG_LIBTOOL}.jlam1-2/+2
2004-01-27Ensure apr-util never picks up gdbm (sometimes helps on GNU/Linux).epg1-2/+3
2004-01-18As i described in <9883.1074028467@gould.diplodocus.org>epg2-6/+28
(http://mail-index.netbsd.org/tech-pkg/2004/01/13/0015.html) and <479.1074093881@gould.diplodocus.org> (http://mail-index.netbsd.org/tech-pkg/2004/01/14/0016.html), add an APR_USE_DB4 variable (defaulting to YES except on platforms where db4 is broken). devel/apr now builds without db4 when APR_USE_DB4 is NO.
2004-01-13db4, a new dependency for apr, is broken (at least on ppc). Revert back tojklos2-5/+3
not needing db4 until it is fixed.
2003-12-03Bump PKGREVISION (thanks Thomas Klausner).epg2-3/+4
2003-12-03Add missing file.epg1-1/+2
2003-12-03Link to db4.epg2-4/+6
2003-11-28Drop revision for version bump (0.9.4 -> 0.9.5).junyoung1-2/+1
2003-10-29libapr-0.so.9.4 -> libapr-0.so.9.5mason1-3/+3
libaprutil-0.so.9.4 -> libaprutil-0.so.9.5
2003-10-28Update checksums to account for Apache 2.0.48, so this will build.mason1-3/+3
2003-10-11bump PKGREVISIONs after bump of expat BUILDLINK_DEPENDS.grant1-1/+2
2003-09-04Now use system/user default CFLAGSadam1-1/+3
2003-07-09upgrade to apache-2.0.47/apr-0.9.4.2.0.47.itojun2-5/+5
Changes with Apache 2.0.47 *) SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one could result in the weak ciphersuite being used in place of the strong one. [Ben Laurie] *) SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing temporary denial of service when accept() on a rarely accessed port returns certain errors. Reported by Saheed Akhtar <S.Akhtar@talis.com>. [Jeff Trawick] *) SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial of service when target host is IPv6 but proxy server can't create IPv6 socket. Fixed by the reporter. [Yoshioka Tsuneo <tsuneo.yoshioka@f-secure.com>] *) SECURITY [VU#379828] Prevent the server from crashing when entering infinite loops. The new LimitInternalRecursion directive configures limits of subsequent internal redirects and nested subrequests, after which the request will be aborted. PR 19753 (and probably others). [William Rowe, Jeff Trawick, André Malo] *) core_output_filter: don't split the brigade after a FLUSH bucket if it's the last bucket. This prevents creating unneccessary empty brigades which may not be destroyed until the end of a keepalive connection. [Juan Rivera <Juan.Rivera@citrix.com>] *) Add support for "streamy" PROPFIND responses. [Ben Collins-Sussman <sussman@collab.net>] *) mod_cgid: Eliminate a double-close of a socket. This resolves various operational problems in a threaded MPM, since on the second attempt to close the socket, the same descriptor was often already in use by another thread for another purpose. [Jeff Trawick] *) mod_negotiation: Introduce "prefer-language" environment variable, which allows to influence the negotiation process on request basis to prefer a certain language. [André Malo] *) Make mod_expires' ExpiresByType work properly, including for dynamically-generated documents. [Ken Coar, Bill Stoddard]
2003-06-06Avoid hardcoding /usr/pkg in the configuration layouts (using the value fromjmmv4-8/+15
the ${PREFIX} variable).
2003-05-30Fix apr-config and apu-config scripts when run fromepg3-1/+93
${BUILDLINK_DIR}/bin. This may help fix ap2-perl, but won't help ap2-php4.
2003-05-30Change the CONFLICTS back to apache2<=2.0.45 and document why (thatepg1-2/+4
version of the package and below included its own apr).
2003-05-29Apache 2.0.46 won't build with the older apr installed; BUILDLINK_DEPENDSjklos1-2/+2
needed to be bumped so apr will get updated with Apache.
2003-05-29upgrade to apache 2.0.46. fixes two vulnerabilities:itojun4-31/+8
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0245 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0189
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-11 18:11:33 +0000