summaryrefslogtreecommitdiff
path: root/www/apache
AgeCommit message (Collapse)AuthorFilesLines
2005-05-17apxs needs perl.jlam1-1/+2
2005-05-06Revert:wiz1-3/+3
Remove an instance of ${TYPE} from pkgsrc. The use of the private variable _INSTALL_CMD is only temporary until we switch over to the new tools framework. The committed version has an additional | (pipe) character in it, breaking the sed and causing an empty apxs file. Replacing the pipes with commas does not help either, because then the backquoted command gets embedded into apxs instead of the correct pathname. Bump PKGREVISION because this broke at least ap-php and ap-ssl.
2005-05-03Remove an instance of ${TYPE} from pkgsrc. The use of the privatejlam1-2/+2
variable _INSTALL_CMD is only temporary until we switch over to the new tools framework.
2005-05-02RCD_SCRIPTS_EXAMPLEDIR is no longer customizable.reed1-1/+2
And always is defined as share/examples/rc.d which was the default before. This rc.d scripts are not automatically added to PLISTs now also. So add to each corresponding PLIST as required. This was discussed on tech-pkg in late January and late April. Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
2005-04-18Remove custom "restart" code from startup script so that Apache reallywiz2-5/+3
gets restarted when "/etc/rc.d/apache restart" is used. This fixes PR pkg/24179 for the "apache" package. Based on a similar change for the apache2 package. Bump PKGREVISION.
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-03-24Don't check for USE_BUILDLINK3 anymore in these files. These are includedjlam1-4/+3
by other package Makefiles, and with the deprecation of USE_BUILDLINK3 support in the infrastructure files, these had the potential to break existing packages.
2005-02-28Update apache to apache_1-3.33nb3:abs4-8/+40
Previously rc.d/apache was updated to run stop & start for restart. '/etc/rc.d/apache restart' then picked up startssl if apache was not running, but if apache was running it has a large chance of the start running before the stop completes, leaving no httpd running. Instead, add a restartssl option to apachectl, and use it.
2005-02-24Add RMD160 checksums.wiz1-1/+4
2004-12-28The default location of the pkgsrc-installed rc.d scripts is nowreed1-2/+2
under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
2004-12-19when Apache is built with dlcompat present, the installed httpd/os.hgrant1-1/+5
header file #includes <dlfcn.h>, so we need to include dlopen.buildlink3.mk so that dlfcn.h can be found by packages which use httpd/os.h. XXX this is not entirely correct, but works around the problem XXX sufficiently. the problem is that Darwin (7.7.x) has dlopen() and XXX friends but does not provide prototypes in dlfcn.h (or anywhere else).
2004-11-26Pass the DL_* flags to the compiler when building httpd so that dlopenjlam3-9/+14
will work correctly on NetBSD-2.x. This should fix PR pkg/29398.
2004-11-22Replace USE_GCC_SHLIB with USE_LANGUAGES=c c++ and a nice big comment whywiz1-2/+5
we add c++ to the variable.
2004-11-16Regen after "patch-ai" was changed. (hi salo!)tron1-2/+2
2004-11-15Revert rev 1.9, do not expand @INSTALL@, it's done in post-patch. (hi abs!)salo1-2/+2
2004-11-15Use ${VARBASE} instead of hardcoded /var.sketch2-9/+9
2004-10-29Update apache to 1.3.33abs16-96/+65
The main security vulnerabilities addressed in 1.3.33 are: * CAN-2004-0940 (cve.mitre.org) Fix potential buffer overflow with escaped characters in SSI tag string. * CAN-2004-0492 (cve.mitre.org) Reject responses from a remote server if sent an invalid (negative) Content-Length. New features * Win32: Improve error reporting after a failed attempt to spawn a piped log process or rewrite map process. * Added new compile-time flag: UCN_OFF_HONOR_PHYSICAL_PORT. It controls how UseCanonicalName Off determines the port value if the client doesn't provide one in the Host header. If defined during compilation, UseCanonicalName Off will use the physical port number to generate the canonical name. If not defined, it tries the current Port value followed by the default port for the current scheme. The following bugs were found in Apache 1.3.31 (or earlier) and have been fixed in Apache 1.3.33: * mod_rewrite: Fix query string handling for proxied URLs. PR 14518. * mod_rewrite: Fix 0 bytes write into random memory position. PR 31036. * mod_digest: Fix nonce string calculation since 1.3.31 which would force re-authentication for every connection if AuthDigestRealmSeed was not configured. PR 30920. * Fix trivial bug in mod_log_forensic that caused the child to seg fault when certain invalid requests were fired at it with forensic logging is enabled. PR 29313. * No longer breaks mod_dav, frontpage and others. Repair a patch in 1.3.31 which prevented discarding the request body for requests that will be keptalive but are not currently keptalive. PR 29237.
2004-10-25Update "apache" package to version 1.3.32. Changes since version 1.3.31:tron4-35/+12
- mod_rewrite: Fix query string handling for proxied URLs. PR 14518. [michael teitler <michael.teitler cetelem.fr>, Jan Kratochvil <rcpt-dev.AT.httpd.apache.org jankratochvil.net>] - mod_rewrite: Fix 0 bytes write into random memory position. PR 31036. [André Malo] - mod_digest: Fix nonce string calculation since 1.3.31 which would force re-authentication for every connection if AuthDigestRealmSeed was not configured. PR 30920. [Joe Orton] - Trigger an error when a LoadModule directive attempts to load a module which is built-in. This is a common error when switching from a DSO build to a static build. [Jeff Trawick, Geoffrey Young] - Fix trivial bug in mod_log_forensic that caused the child to seg fault when certain invalid requests were fired at it with forensic logging is enabled. PR 29313. [Will Slater <Will Slater orbisuk.com>] - Fix memory leak in the cache handling of mod_rewrite. PR 27862. [chunyan sheng <shengperson yahoo.com>, André Malo] - mod_rewrite no longer confuses the RewriteMap caches if different maps defined in different virtual hosts use the same map name. PR 26462. [André Malo] - mod_setenvif: Remove "support" for Remote_User variable which never worked at all. PR 25725. [André Malo] - mod_usertrack: Escape the cookie name before pasting into the regexp. [André Malo] - Win32: Improve error reporting after a failed attempt to spawn a piped log process or rewrite map process. [Jeff Trawick] - SECURITY: CAN-2004-0492 (cve.mitre.org) Reject responses from a remote server if sent an invalid (negative) Content-Length. [Mark Cox] - Fix a bunch of cases where the return code of the regex compiler was not checked properly. This affects mod_usertrack and core. PR 28218. [André Malo] - No longer breaks mod_dav, frontpage and others. Repair a patch in 1.3.31 which prevented discarding the request body for requests that will be keptalive but are not currently keptalive. PR 29237. [Jim Jagielski, Rasmus Lerdorf] - COMPATIBILITY: Added new compile-time flag: UCN_OFF_HONOR_PHYSICAL_PORT. It controls how UseCanonicalName Off determines the port value if the client doesn't provide one in the Host header. If defined during compilation, UseCanonicalName Off will use the physical port number to generate the canonical name. If not defined, it tries the current Port value followed by the default port for the current scheme. [Jim Jagielski]
2004-10-18Use "mod_ssl-2.8.20" sources for SSL hooks, bump package revision.tron2-6/+6
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-2/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-09-24Apply fix for security vulnerability in proxy module reported intron3-3/+22
CAN-2004-0492. Bump package revision package of this.
2004-08-22Change the way that legacy USE_* and FOO_USE_* options are convertedjlam1-11/+6
into the bsd.options.mk framework. Instead of appending to ${PKG_OPTIONS_VAR}, it appends to PKG_DEFAULT_OPTIONS. This causes the default options to be the union of PKG_DEFAULT_OPTIONS and any old USE_* and FOO_USE_* settings. This fixes PR pkg/26590.
2004-08-02Update apache to 1.3.31nb4:abs2-4/+4
Fix rc.d/apache restart to 'apache_doit stop; apache_doit start' Now in the case of apache_start=startssl and apache not running, 'rc.d/apache restart' will start apache with startssl.
2004-07-30Convert to use bsd.options.mk. The relevant options variable to setjlam1-3/+19
for each package can be determined by invoking: make show-var VARNAME=PKG_OPTIONS_VAR The old options are still supported unless the variable named in PKG_OPTIONS_VAR is set within make(1) (usually via /etc/mk.conf).
2004-07-17Use "mod_ssl-2.8.19" sources for SSL hooks, bump package revision.tron2-6/+6
2004-07-06Remove references to buildlink2.wiz1-4/+2
2004-07-02Unused.wiz1-34/+0
2004-05-30Compile with version 2.8.18 of "mod_ssl" instead with the (reported totron2-8/+8
be vulnerable) version 2.8.17. Bump package revision because of this.
2004-05-17Garbage collect BUILDLINK_PKGBASE.<pkg> from buildlink3: it is not anymoreseb1-2/+1
used since revision 1.139 of mk/buildlink3/bsd.buildlink3.mk.
2004-05-13Regenerate patch-aa to obtain correct offsets so this works with Linux 'patch'.abs2-13/+13
No functional change (other than building again on Linux)
2004-05-13Update apache package to 1.3.31.taca7-155/+20
Apache 1.3.31 Major changes Security vulnerabilities * CAN-2003-0987 (cve.mitre.org) In mod_digest, verify whether the nonce returned in the client response is one we issued ourselves. This problem does not affect mod_auth_digest. * CAN-2003-0020 (cve.mitre.org) Escape arbitrary data before writing into the errorlog. * CAN-2004-0174 (cve.mitre.org) Fix starvation issue on listening sockets where a short-lived connection on a rarely-accessed listening socket will cause a child to hold the accept mutex and block out new connections until another connection arrives on that rarely-accessed listening socket. * CAN-2003-0993 (cve.mitre.org) Fix parsing of Allow/Deny rules using IP addresses without a netmask; issue is only known to affect big-endian 64-bit platforms New features New features that relate to specific platforms: * Linux 2.4+: If Apache is started as root and you code CoreDumpDirectory, core dumps are enabled via the prctl() syscall. New features that relate to all platforms: * Add mod_whatkilledus and mod_backtrace (experimental) for reporting diagnostic information after a child process crash. * Add fatal exception hook for running diagnostic code after a crash. * Forensic logging module added (mod_log_forensic) * '%X' is now accepted as an alias for '%c' in the LogFormat directive. This allows you to configure logging to still log the connection status even with mod_ssl Bugs fixed The following noteworthy bugs were found in Apache 1.3.29 (or earlier) and have been fixed in Apache 1.3.31: * Fix memory corruption problem with ap_custom_response() function. The core per-dir config would later point to request pool data that would be reused for different purposes on different requests. * mod_usertrack no longer inspects the Cookie2 header for the cookie name. It also no longer overwrites other cookies. * Fix bug causing core dump when using CookieTracking without specifying a CookieName directly. * UseCanonicalName off was ignoring the client provided port information.
2004-05-08include apache's buildlink3.mk if using buildlink3.grant1-2/+6
2004-04-26Convert to use bdb.buildlink3.mk and fix sources so that we can use db4.jlam3-25/+27
2004-04-25Convert to buildlink3.snj1-5/+5
2004-04-24Relinquish maintainership of packages to tech-pkg@NetBSD.org.jlam1-2/+2
2004-04-23mk/bsd.pkg.install.mk now automatically registersreed1-2/+1
the RCD_SCRIPTS rc.d script(s) to the PLIST. This GENERATE_PLIST idea is part of Greg A. Woods' PR #22954. This helps when the RC_SCRIPTS are installed to a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later, the default RCD_SCRIPTS_EXAMPLEDIR will be changed to be more clear that they are the examples.) These patches also remove the etc/rc.d/ scripts from PLISTs (of packages that use RCD_SCRIPTS). (This also removes now unused references from openssh* makefiles. Note that qmail package has not been changed yet.) I have been doing automatic PLIST registration for RC_SCRIPTS for over a year. Not all of these packages have been tested, but many have been tested and used. Somethings maybe to do: - a few packages still manually install the rc.d scripts to hard-coded etc/rc.d. These need to be fixed. - maybe remove from mk/${OPSYS}.pkg.dist mtree specifications too.
2004-04-07Fix patch checksums and bump package revision again because the securitytron2-3/+6
patches weren't applied before.
2004-04-07Add three patches to resolve security issue:reed4-1/+121
SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the errorlog The three patches are from Apache cvs. http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/ Also bump PKGREVISION too.
2004-03-29Add a BUILDLINK_PKGBASE.<pkg> definition where it's not equal to <pkg>,jlam2-2/+4
e.g. "BUILDLINK_PKGBASE.gtk?= gtk+". This is mandated by the example buildlink[23].mk files in bsd.buildlink[23].mk.
2004-03-05Reorder location and setting of BUILDLINK_PACKAGES to match templatejlam1-7/+11
buildlink3.mk file in revision 1.101 of bsd.buildlink3.mk.
2004-02-28Forgot to commit this part. MAKE_ENV needs CHGRP="${CHGRP}".snj1-2/+2
2004-02-28Use ${CHGRP} instead of chgrp. From Georg Schwarz in PR pkg/24594.snj2-7/+10
2004-02-18Include "../../mk/compiler.mk" to get the value of CC_VERSION beforejlam1-1/+3
testing it.
2004-02-11Fix pasto(?) in BUILDLINK_PKGSRCDIR.apache's value.seb1-2/+2
2004-02-09USE_GCC[23], USE_SUNPRO, and USE_MIPSPRO are all deprecated.jlam1-2/+2
2004-01-24Append to BUILDLINK_DEPENDS.<pkg> instead of setting a default value. Injlam1-2/+2
the normal case when BUILDLINK_DEPENDS.<pkg> isn't specified, it receives a value only once due to the multiple inclusion protection in the bulldlink3.mk files. In the case where a package includes several buildlink3.mk files that each want a slightly different version of another dependency, having BUILDLINK_DEPENDS.<pkg> be a list allows for the strictest <pkg> dependency to be matched.
2004-01-05Use S/+$// instead of C/\+$// to save a backslash. Very highlyjlam1-2/+2
recommended by seb :)
2004-01-04Re-arrange to match example buildlink3.mk file in bsd.buildlink3.mk.jlam1-10/+9
2004-01-03Initial sprinkling of work-in-progress buildlink3.mk files for using thejlam1-0/+29
buildlink3 framework.
2003-11-02Updated apache to 1.3.29.grant7-128/+15
Major changes since 1.3.28: Security vulnerabilities * CAN-2003-0542 (cve.mitre.org) Fix buffer overflows in mod_alias and mod_rewrite which occurred if one configured a regular expression with more than 9 captures. Bugs fixed The following noteworthy bugs were found in Apache 1.3.28 (or earlier) and have been fixed in Apache 1.3.29: * Within ap_bclose(), ap_pclosesocket() is now called * consistently for sockets and ap_pclosef() for files. Also, closesocket() is used consistenly to close socket fd's. The previous confusion between socket and file fd's would cause problems with some applications now that we proactively close fd's to prevent leakage. * Fixed mod_usertrack to not get false positive matches on the user-tracking cookie's name. * Prevent creation of subprocess Zombies when using CGI wrappers such as suEXEC and cgiwrap.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-15 11:58:19 +0000