summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2002-02-28Update php4 and ap-php4 to 4.1.2. Changes from version 4.1.1 include:jlam7-33/+30
- Fixed start up failure when mm save handler is used and there is multiple SAPIs are working at the same time. (Yasuo) - Fixed a buffer overflow in the RFC-1867 file upload code (Stefan) <===> SECURITY NOTE <===> Note that the buffer overflow fix is a major security fix. Quoting from the security advisory at: http://security.e-matters.de/advisories/012002.html "PHP supports multipart/form-data POST requests (as described in RFC1867) known as POST fileuploads. Unfourtunately there are several flaws in the php_mime_split function that could be used by an attacker to execute arbitrary code. During our research we found out that not only PHP4 but also older versions from the PHP3 tree are vulnerable. [...] "If you are running PHP 4.0.3 or above one way to workaround these bugs is to disable the fileupload support within your php.ini (file_uploads = Off). If you are running php as module keep in mind to restart the webserver. Anyway you should better install the fixed or a properly patched version to be safe."
2002-02-28Move the definition of USE_BUILDLINK_ONLY above the inclusion ofjlam1-3/+4
Makefile.module, as it might indirectly include bsd.buildlink.mk which relies on being able to check whether USE_BUILDLINK_ONLY is defined or not.
2002-02-28Update www/ap-ssl to 2.8.7 from the mod_ssl-2.8.7-1.3.23 distribution.jlam2-8/+8
Relevant changes from version 2.8.6 include: *) Fixed potential buffer overflow in DBM and SHMHT session cache if very very large certificate chains are used. *) Compliance with POSIX 1003.1-2001 (SUSv3) by replacing obsolete "head -1" and "tail -1" constructs with sed variants in scripts.
2002-02-28Update www/apache to 1.3.23nb1. Changes from version 1.3.23 include usingjlam3-5/+28
the EAPI patches from modssl-2.8.7-1.3.23. Also, link against the MM Shared Memory library (devel/libmm) to provide shared memory support in Apache/EAPI. For example, this allows mod_ssl to use a high-performance RAM-based session cache instead of a disk-based one.
2002-02-27Fix relative path in symlink to opera.1 manpage.jlam1-3/+3
2002-02-27The distfile at Lincoln Stein's page appears to be larger than thejlam1-3/+8
ones on the various CPAN sites. Since he's the software author, we assume his is the definitive file.
2002-02-26Wherever "make fetch" simply echos a message, let "make fetch-list|sh"fredb2-6/+22
echo the message, too.
2002-02-26Add back ability to change the value of "apache_start" from /etc/rc.confjlam2-14/+48
that was lost in the previous commit. "${apache_start}" is the subcommand sent to apachectl to control how httpd is started. It's value may be overridden in: @PKG_SYSCONFDIR@/apache_start.conf /etc/rc.conf /etc/rc.conf.d/apache, in order of increasing precedence. Its possible values are "start" and "startssl", and defaults to "start".
2002-02-26Update "opera6" package to version 6.0 Beta 1 (5.999.1). A list of changestron2-7/+8
since version 5.0 can be found under this URL: http://www.opera.com/pressreleases/en/2002/02/20020226.html
2002-02-25added ap-mp3grant1-1/+2
2002-02-25Initial import of mod_mp3.grant5-0/+67
Apache module for streaming mp3 and other audio files.
2002-02-25added ap-layoutgrant1-1/+2
2002-02-25Initial import of mod_layout package.grant5-0/+92
From DESCR: Mod_Layout creates a framework for doing design. Whether you need a simple copyright or ad banner attached to every page, or need to have something more challenging such a custom look and feel for a site that employs an array of technologies (Java Servlets, mod_perl, PHP, CGI's, static HTML, etc...), Mod_Layout creates a framework for such an environment. By allowing you to cache static components and build sites in pieces, it gives you the tools for creating large custom portal sites.
2002-02-24ftp.mrunix.net moved the webalizer directory into an pub directory.veego1-2/+2
2002-02-24Fix build problems on systems without setproctitle(3).veego4-22/+862
Check setproctitle in the configure script and remove the define in patch-ba.
2002-02-22Create a proper "opera" configuration file if necessary.tron1-1/+2
2002-02-22Add and enable "opera6" package.tron1-1/+2
2002-02-22Import Opera 6.0 for Linux Technology Preview 3 as "opera6":tron5-0/+108
Small, fast and customizable WWW client
2002-02-22Update "squid" package to version 2.4STABLE4. Changes since versiontron2-19/+6
2.4STABLE3: - htcp_port 0 now properly disables htcp - Fixed problem with certain non-anonymous ftp:// style URL's - SNMP bugfixes including several memory leaks
2002-02-21Update to 2.1.8.jdolecek2-6/+6
The only difference is removal of mistakely left debug message.
2002-02-20Add scrollkeeper dependency.wiz1-1/+2
2002-02-20Update "Analog" packge to version 5.21. Changes since version 5.2:tron3-6/+32
- Corrected the MacHTTP log format, which didn't work in 5.2. - All the BARSTYLEs redrawn, and two new BARSTYLEs added, adapted from an idea by Dave Holle. (You will have to move the new graphics into your IMAGEDIR in order to use them.)
2002-02-19Updated webalizer to 2.1.9martti2-6/+6
Fixes several known bugs, as well as a cross-site scripting vulnerability (discovered by Flavio Veloso of Magnux Software), that could allow malicious HTML tags to be injected in the reports generated by the Webalizer. This release also includes several new and updated language files. All users are encouraged to upgrade as soon as possible.
2002-02-19curl is IPv6 ready.itojun1-1/+4
2002-02-19squid-2.4.STABLE3-SNMP_memory_leaks.patch has been updated and checks out thejmc1-3/+3
same from all 3 master sites. Updating distinfo
2002-02-18Update squid to squid-2.4.3nb1.taca4-29/+118
- replace a hack adding fd_mask definition in autoconf.h with re-writing configure script. It cause to run configure twice and result "no fd_mask". - Incorporate three official patches from http://www.squid-cache.org/Versions/v2/2.4/bugs/. o SNMP memory leaks synopsis The SNMP implementation in Squid had several memory leaks possibly causing an denial of service. workaround Disable the SNMP port if enabled by using "snmp_port 0" in squid.conf. Or if you only use SNMP for MRTG data collection running on the same host then use "snmp_incoming_address 127.0.0.1" to limit reachability of the SNMP port to only localhost or some other trusted network. o Coredump on certain ftp:// style URL's synopsis If certain constructed ftp:// style URL's are received then squid crashes, causing a denial of service and maybe even remote execution of code. workaround Deny forwarding of non-anonymous FTP URLs by inserting the following rules at the top of squid.conf, prior to any http_access allow lines. acl non_anonymous_ftp url_regex -i ftp://[^/@]*@ http_access deny non_anonymous_ftp o "htcp_port 0" fails to disable the HTCP port synopsis "htcp_port 0" fails to completely disable the HTCP port as documented in squid.conf, instead HTCP will be listening on a random port number.
2002-02-18Introduce new framework for handling info files generation and installation.seb6-14/+17
Summary of changes: - removal of USE_GTEXINFO - addition of mk/texinfo.mk - inclusion of this file in package Makefiles requiring it - `install-info' substituted by `${INSTALL_INFO}' in PLISTs - tuning of mk/bsd.pkg.mk: removal of USE_GTEXINFO INSTALL_INFO added to PLIST_SUBST `${INSTALL_INFO}' replace `install-info' in target rules print-PLIST target now generate `${INSTALL_INFO}' instead of `install-info' - a couple of new patch files added for a handful of packages - setting of the TEXINFO_OVERRIDE "switch" in packages Makefiles requiring it - devel/cssc marked requiring texinfo 4.0 - a couple of packages Makefiles were tuned with respect of INFO_FILES and makeinfo command usage See -newly added by this commit- section 10.24 of Packages.txt for further information.
2002-02-15switch to a MASTER_SITE that worksdrochner2-8/+6
2002-02-15mkdir -> ${MKDIR}skrll16-61/+61
rmdir -> ${RMDIR} rm -> ${RM} (${RM} added to PLIST_SUBST) chmod -> ${CHMOD} chown -> ${CHOWN}
2002-02-14Update to 2.1.7. Changes are merely bugfixes.jdolecek2-6/+6
2002-02-14Updated wdg-validate to 1.03abs2-5/+5
* added a --emacs command-line option to produce output intended for parsing by Emacs * added errors for references to non-existent IDs in attributes such as the headers attribute of the td element
2002-02-13Update htmlfix to 1.01 - ignore symlinksabs2-5/+5
2002-02-13Update "analog" package to version 5.2. Changes since version 5.1:tron4-20/+24
5.2 (13-Feb-02) - You can now plot the lower levels of hierarchical reports on the pie charts by using the new CHARTEXPAND family of commands. - Added MACHTTP to the list of built-in log formats that analog recognises automatically. - Recognises ; as well as & as query-string separator. - The rules for generating "organisations" from numerical addresses have changed. - Filenames given on the command line are now relative to the current directory, not the analog directory. - Ignores completely blank lines at the top of a logfile. - Makefiles for Microsoft Visual C++ can be found in the new src/build directory. Makefiles for other platforms have moved out of the source tree into there too. - You can now refer to kilobytes as kibibytes by editing your language file. - Revised versions of Japanese language files. - Revised the Licence. - Advertised new donations page.
2002-02-12Update dillo package to version 0.6.4. Main new features are improved tablereinoud2-5/+5
support making it render NetBSD's homepage correctly (!) and other goodies like remembering where the scroll bar was when you go back...
2002-02-12Update ap-ruby package to 0.9.7.taca2-5/+5
Tue Feb 12 13:00:01 2002 Shugo Maeda <shugo@modruby.net> * version 0.9.7 released. Tue Feb 12 12:59:21 2002 Shugo Maeda <shugo@modruby.net> * lib/aapche/ruby-run.rb (handler): return DECLINED for OPTIONS requests. * lib/aapche/eruby-run.rb (handler): ditto. * lib/aapche/erb-run.rb (handler): ditto. * lib/aapche/ruby-debug.rb (handler): ditto. * lib/aapche/rd2html.rb (handler): ditto.
2002-02-11Update to adzap 20020209.simonb3-8/+8
- Fix a typo in the wrapzap script. - Add/adjust more ad patterns.
2002-02-10Create ${PREFIX}/etc/squid during pre-install, so copying the defaultveego1-1/+2
config file doesn't fail.
2002-02-10Update galeon to 1.0.3taya2-6/+6
From release mail: NEWS - a few bugfixes - Mozilla 0.9.8 compatibility
2002-02-09Update mozilla to 0.9.8taya14-186/+426
See the release notes for detail. http://www.mozilla.org/releases/mozilla0.9.8/
2002-02-08Mozilla is install in X11PREFIX, not PREFIX. Make config.mk relfect the rightjmc2-13/+53
pathnames
2002-02-06Changes instances where BSD_INSTALL_* were used by targets in the Makefilejlam1-2/+2
into the equivalent INSTALL_*. This is fallout from the change in revision 1.915 that removed ${MAKE_ENV} from the environment for a recursive make.
2002-02-06Fix dependency typo for gnome-libsjmc1-2/+2
2002-02-05/bin/mkdir -> ${MKDIR}.skrll1-3/+3
Make the print-PLIST target output ${MKDIR} also.
2002-02-05ap-mod_python->ap-pythondrochner8-9/+9
2002-02-05add ap-mod_pythondrochner1-1/+2
2002-02-05initial import of ap-mod_python-2.7.6, a Python interpretter embedded intodrochner7-0/+219
Apache submitted by Jarkko Torppa per PR pkg/14522
2002-02-05add py-HTMLgendrochner1-1/+2
2002-02-05initial import of py-HTMLgen-2.2.2, a class library for the generation ofdrochner6-0/+96
HTML documents such a pkg was submitted in PR pkg/13042, but the URL it refers to is invalid
2002-02-05Solaris' test binary (test/[) doesn't grok "-e". Replace with "-f".jlam3-9/+9
Noted by Stoned Elipot <seb@netbsd.org> in private email.
2002-02-05Add apache buildlink so it installs perl when building. That way apxs can runjmc1-1/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-14 12:29:30 +0000