2005-10-19 23:42:59 by Manuel Bouyer | Files touched by this commit (1) | |
Log message:
Add missing entry for a new file. Pointed out by Lubomir Sedlacik.
Close enouth to the package update to not bump pkgrevision.
|
2005-10-19 22:30:21 by Manuel Bouyer | Files touched by this commit (2) |
Log message:
Update to 1.3.34. This is a security fix release, fix pkg/31868 by
Zafer Aydogan. Changes from 1.3.33:
*) hsregex: fix potential core dumping on 64 bit machines, such as
AMD64. PR 31858. [Glenn Strauss < gs-apache-dev gluelogic.com>]
*) SECURITY: core: If a request contains both Transfer-Encoding and
Content-Length headers, remove the Content-Length, mitigating some
HTTP Request Splitting/Spoofing attacks. This has no impact on
mod_proxy_http, yet affects any module which supports chunked
encoding yet fails to prefer T-E: chunked over the Content-Length
purported value. [Paul Querna, Joe Orton]
*) Added TraceEnable [on|off|extended] per-server directive to alter
the behavior of the TRACE method. This addresses a flaw in proxy
conformance to RFC 2616 - previously the proxy server would accept
a TRACE request body although the RFC prohibited it. The default
remains 'TraceEnable on'.
[William Rowe]
*) mod_digest: Fix another nonce string calculation issue.
[Eric Covener]
|
2005-10-05 15:29:51 by Thomas Klausner | Files touched by this commit (40) |
Log message:
Remove some more *LEGACY* settings that are over a month old and
thus were before 2005Q3.
|
2005-09-16 15:53:57 by Lubomir Sedlacik | Files touched by this commit (4) |
Log message:
Update ap-ssl to version 2.8.24.
- Fix a security issue (CAN-2005-2700) where "SSLVerifyClient require"
was not enforced in per-location context if "SSLVerifyClient optional"
was configured in the global virtual host configuration.
Sync apache with the latest ap-ssl.
|
2005-08-23 13:48:52 by Roland Illig | Files touched by this commit (58) |
Log message:
The real user name in PKG_USERS does not need to be escaped with double
backslashes anymore. A single backslash is enough. Changed the
definition in all affected packages. For those that are not caught, an
additional check is placed into bsd.pkginstall.mk.
|
2005-08-22 18:19:01 by Jeremy C. Reed | Files touched by this commit (3) |
Log message:
Add DragonFly support.
(An httpd service was only briefly tested.)
|
2005-08-20 21:16:23 by Johnny C. Lam | Files touched by this commit (36) |
Log message:
Use REQD_DIRS instead of MAKE_DIRS for directories under ${PREFIX} so
that these directories will be conditionally removed (based on reference
counts), regardless of the value of PKG_CONFIG. Bump the PKGREVISION
for packages that were modified as a result.
|
2005-08-19 20:12:40 by Johnny C. Lam | Files touched by this commit (49) |
Log message:
Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMS
as the INSTALL and DEINSTALL scripts no longer distinguish between
the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the
packages in pkgsrc accordingly.
|
2005-07-16 03:19:27 by Johnny C. Lam | Files touched by this commit (273) |
Log message:
Get rid of USE_PERL5. The new way to express needing the Perl executable
around at either build-time or at run-time is:
USE_TOOLS+= perl # build-time
USE_TOOLS+= perl:run # run-time
Also remove some places where perl5/buildlink3.mk was being included
by a package Makefile, but all that the package wanted was the Perl
executable.
|
2005-05-31 22:00:43 by Thomas Klausner | Files touched by this commit (1) |
Log message:
Remove some obsolete variables from BUILD_DEFS.
|