4 of 13 on in the package: BDB1GDBMIPV6SSLShow the 9 options that are off
BDB18BDB5LDAPMYSQLNDBMNSSODBCPGSQLSQLITE
pkg-message
Shown after installing
The Apache Portable Runtime project removed support for FreeTDS with
version 1.6. Users requiring MS-SQL connectivity must migrate
configurations to use the added ODBC driver and FreeTDS' ODBC features.
Shown after upgrading
The default BerkeleyDB implementation switched from deprecated
version 5 from ports to BerkeleyDB 1 from base libc. Any BerkeleyDB
databases created with apr-util MUST be rebuilt. Verify your database
files using
$ file file.dbm
and check they report
Berkeley DB 1.85 (Hash, version 2, native byte-order)
other database formats (GDBM etc.) are not affected.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
1.7.6.1.6.3
1.7.6.1.6.3
–
FreeBSD 15
1.7.6.1.6.3
1.7.6.1.6.3
–
FreeBSD 14
1.7.6.1.6.3
1.7.6.1.6.3
1.7.6.1.6.3
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
1.7.6.1.6.3
1.7.6.1.6.3
–
FreeBSD 14
1.7.6.1.6.3
1.7.6.1.6.3
1.7.6.1.6.3
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.7.6.1.6.3.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range the packaged version has left.
Bump PORTREVISION on all ports with USE_SQLITE=yes or USE_SQLITE=3 that have not been bumped yet after the latest libsqlite3.so library version change.
Approved by: portmgr (implicit)
Support LIBS like LDFLAGS.
- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS. Also remove references to
PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
required additional patches.
Somewhat simplified a linker command line looks like:
${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}
where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us. If possible -L and -l flags need to be
added to LIBS to make sure they appear after any -L and -l flags set by
upstream. Many ports currently add -L${LOCALBASE}/lib to LDFLAGS but this
may appear too early on the command line causing installed libraries to
be linked in instead of freshly built ones.
Additional changes:
benchmarks/netio: Replace WITH_IPV6 with an IPV6 option.
comms/gnokii: Replace some patches with USES=pathfix. Also remove -fPIC.
graphics/gimageview: USES=libtool and install desktop file in DESKTOPDIR.
graphics/visionworkbench: Remove FreeBSD 7 support.
multimedia/libmovtar: New LIB_DEPENDS syntax.
multimedia/opencinematools: Use standard do-build.
net/siproxd: USES=libtool:keepla (port actually needs .la files for plugins)
net-mgmt/nagios: Remove -fPIC.
net-mgmt/nagios4: Remove -fPIC.
print/cups-base: Only add -lssp_nonshared on i386 and OSVERSION < 1000036.
security/p11-kit: Replace PTHREAD_LIBS in CONFIGURE_ENV with
ac_cv_func_pthread_mutexattr_init=no in CONFIGURE_ARGS. This skips a test
in configure that falsely detects pthread_mutexattr_init in our libc.
sysutils/dar: Fix iconv detection.
x11/rxvt-unicode: Remove -lstdc++ and patch configure to remove a FreeBSD
hack and use $CXX as linker as on other platforms.
PR: 190592
Exp-run by: antoine
Approved by: portmgr (antoine)
- USES libtool:keepla - bump PORTREVISION
Originally I planned to keep this change on hold,
but a couple of minutes before gdbm was changed
so this is a good time to annoy users only once.
- update apr to 1.5.1 - use OPTIONS_SUB instead PLIST_SUB - remove back ported patch - use POSIX instead SysV SHM - remove LDFLAGS from CONFIGURE_ENV (unbreak auto. testing)
Changes for APR 1.5.1
*) apr_os_proc_mutex_get() on Unix: Avoid segfault for cross-
process pthread mutexes. [Yann Ylavic <ylavic.dev gmail.com>]
*) When using shmget-based shared memory, the ID used for ftok is
now an APR hash of the filename instead of the constant '1'.
We do this to help avoid collisions. PR 53996 [Jim Jagielski]
*) apr_socket_atreadeof(): Fix breakage on OS X. [Jim Jagielski]
*) Fix POSIX shared memory (shm_open) use for named shared memory.
Includes adding '--enable-posix-shm' to force POSIX shm if
available, and OS X compatibility. PR 55928.
[Jozef Hatala <jh-asf skrt org>, Jim Jagielski]
*) Fix race condition when calling apr_dir_make_recursive from
multiple threads on Windows.
[Bert Huijben]
*) Fix apr_escape.c compilation errors on EBCDIC platforms.
[Eric Covener]
*) FreeBSD 10: Correct a regression in 1.5.0 which affected non-
blocking sockets in some applications, including httpd. [Jeff
Trawick]
*) apr_skiplist: Add compatibility with C++ applications.
[Jeff Trawick]
*) Correct a regression in 1.5.0 which affected out-of-tree
builds on Unix. [Rainer Jung]
*) Improve platform detection for bundled expat by updating
config.guess and config.sub. [Rainer Jung]
with hat apache@
- update to apr-1.5.0 - add fix for FreeBSD 10 obtained from http://svn.apache.org/viewvc?view=revision&revision=1551672 - bump USE_BDB=42+ -> USE_BDB=48+ [1] - add entry to UPDATING
Changes for APR 1.5.0 (shortened)
http://www.apache.org/dist/apr/CHANGES-APR-1.5
*) Add apr_sockaddr_is_wildcard() to check if a socket address
refers to the wildcard address for the protocol family (e.g.,
0.0.0.0/INADDR_ANY for IPv4). [Jeff Trawick]
*) Add the apr_escape interface. [Graham Leggett]
*) Add apr_skiplist family. [Jim Jagielski]
*) Add the apr_table_getm() call, which transparently handles the
merging of keys with multiple values. [Graham Leggett]
*) Add apr_hash_this_key(), apr_hash_this_key_len(), and
apr_hash_this_val() for easier access to those attributes from
a hash iterator. [Hyrum K. Wright <hyrum_wright mail.utexas.edu>]
*) Improve platform detection by updating config.guess and config.sub.
[Rainer Jung]
*) apr_socket_opt_set: Add support for APR_SO_BROADCAST. PR 46389.
[Armin MÃŒller <mueller itestra com>]
*) Enable platform specific support for the opening of a file or
pipe in non-blocking mode through the APR_FOPEN_NONBLOCK flag.
[Graham Leggett]
[1] requested by Pavel Timofeev, Sean Bruno
with hat apache@
PR: ports/186441
PR: ports/186899
According to the Porter's Handbook (5.12.2.3.) default options must be added to OPTIONS_DEFINE. This policy has been implemented only recently that's why we have many ports violating this policy.
This patch adds the default options specified in the Porter's Handbook to
OPTIONS_DEFINE where they are being used. Ports maintained by
gnome@FreeBSD.org, kde@FreeBSD.org and x11@FreeBSD.org have been excluded.
Approved by: portmgr (bapt)
- update apr-util to 1.5.3 - *no update* to apr-1.5.0 [1]
Changes with APR-util 1.5.3
*) Fix warnings in odbc driver on 64bit systems.
PR 55197 [Tom Donovan]
*) Add support to apr_memcache for unix domain sockets.
PR 54573 [Remi Gacogne <rgacogne+asf aquaray.com>]
*) Add support for Berkeley DB 6.0. [Rainer Jung]
[1] apache24 is broken if build against apr-1.5.0 and
enable-v4-mapped is set to ON (the default)
Introduce variable ICONV_PREFIX at Mk/Uses/iconv.mk. The default for pre 100043 is ${LOCALBASE} and /usr otherwise. Convert all ports to new variable usage.
Approved by: portmgr (bapt, implicit)
- update devel/apr1 apr-1.4.6 -> apr-1.4.8 apr-util-1.4.1 -> apr-util-1.5.2
- add support for NSS crypto driver (apr-util)
Changes URL's:
http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/CHANGES?view=markup
http://svn.apache.org/viewvc/apr/apr-util/branches/1.5.x/CHANGES?view=markup
http://svn.apache.org/viewvc/apr/apr-util/branches/1.4.x/CHANGES?view=markup
Thanks to tijl@ for sending patches to the apache@ list.
http://lists.freebsd.org/pipermail/freebsd-apache/2013-June/003172.html
with hat apache@
- Revert PTHREAD cleanup, else apr-1-config returns wrong values even if build with explicit LDFLAGS set.
Noted on the apache@ list by Geoff Speicher
http://lists.freebsd.org/pipermail/freebsd-apache/2013-February/003044.html
- add apu OPTION for freetds (no PORTREVISION bump, since not a default option)
Requested on
http://lists.freebsd.org/pipermail/freebsd-apache/2013-January/003020.html
Apache bug Id.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53666
Submitted by: "Mikhail T." <mi+thun@aldan.algebra.com>
- add and enable Crypto framework [1] (only OpenSSL, there are some build issues with NSS) - remove unused PERL build dependency [2] - use OPTIONS_GROUP instead OPTIONS_DEFINE - bump PORTREVISION
[1] requested by many on the apache@ list
[2] thanks to andre@ (noted on the apache@ list)
devel/apr1 [1] - update APR to 1.4.6 - update APR-util to 1.4.1 - remove PKGNAMESUFFIX'es
www/apache-(event|itk|peruser|worker)-mpm
- adopt new Makefile header, adjust
PKGNAMESUFFIX in apache22 masterport
PKGNAME match now LATEST_LINK
www/apache22 [2]-[6]
- rewrite for options NG
- PORTNAME s|apache|apache22|
- remove APR APR-util specific otions,
will be checked now with help of apr/u-1-config
Mk/bsd.apache.mk
- rewrite for options NG
- remove no longer needet make targets
(show-categories, make-options-list)
[1]
PR: 165143
[2]-[6]
PR: 130479
PR: 153406
PR: 158565
PR: 168769
PR: 167965
with hat apache@
- update to apr-1.4.5 - update to apr-util-1.3.12 - add new make target "test:"
Changes for APR 1.4.5
*) Security: CVE-2011-1928
apr_fnmatch(): Fix high CPU loop. [William Rowe]
*) Fix top_builddir in installed apr_rules.mk. [Bojan Smojver]
Changes with APR-util 1.3.12
*) apr_ldap: Fix crash because of NULL cleanup registered by
apr_ldap_rebind_init(). [Rainer Jung]
commit with hat apache@
- update apr1 to version 1.4.4 (security update CVE-2011-0419)
Changes: (trimmed non FreeBSD related to keep the list shorter)
http://www.apache.org/dist/apr/CHANGES-APR-1.4
Changes for APR 1.4.4
Changes for APR 1.4.3
*) Security: CVE-2011-0419
Reimplement apr_fnmatch() from scratch using a non-recursive
algorithm; now has improved compliance with the fnmatch() spec.
[William Rowe]
*) poll, pollset, pollcb on Windows: Handle calls with no file/socket
descriptors. PR 49882. [Stefan Ruppert <sr myarm.com>, Jeff Trawick]
*) Fix address handling when accepting an AF_INET socket from a socket
bound as AF_INET6. PR 49678. [Joe Orton]
*) Add new experimental configure option --enable-allocator-uses-mmap to
use mmap instead of malloc in apr_allocator_alloc(). This greatly reduces
memory fragmentation with malloc implementations (e.g. glibc) that
don't handle allocationss of a page-size-multiples in an efficient way.
It also makes apr_allocator_max_free_set() actually have some effect
on such platforms. [Stefan Fritsch]
*) configure: Make definition of apr_ino_t independent of
_FILE_OFFSET_BITS even on platforms where ino_t is 'unsigned int'.
[Stefan Fritsch]
*) apr_ring: Workaround for aliasing problem that causes gcc 4.5 to
miscompile some brigade related code. PR 50190. [Stefan Fritsch]
*) apr_file_flush_locked(): Handle short writes. [Stefan Fritsch]
*) apr_pollset_create_ex(): Trap errors from pollset providers.
PR 49094. [Sami Tolvanen <sami.tolvanen mywot.com>]
*) apr_pollset_create*(): Fix memory lifetime problem with the wakeup
pipe when the pollset was created with APR_POLLSET_NOCOPY.
[Neil Conway <nrc cs.berkeley.edu>]
*) Fix detection of some Linux variants when configure is built with
recent GNU tools. [Eric Covener]
*) Avoid a redundant fcntl() call in apr_file_open() where O_CLOEXEC
is supported. PR 46297. [Joe Orton]
*) Improve platform detection by updating config.guess and config.sub.
[Rainer Jung]
commit with apache@ hat
PR: 156997
Submitted by: Tsurutani Naoki <turutani _at_ scphys.kyoto-u.ac.jp>
- make sure the system own sed is choosen even when textproc/gsed is installed during build time.
This preserves issues in case textproc/gsed is removed
from the system after build time.
Issue described by Ryusuke SUZUKI <ryusuke _at_ FreeBSD.org>
With Hat: apache@
- Update apr-util to 1.3.10
Security: http://www.vuxml.org/freebsd/dd943fbb-d0fe-11df-95a8-00219b0fc4d8.html
With Hat: apache@
<ChangeLog>
*) SECURITY: CVE-2010-1623 (cve.mitre.org)
Fix a denial of service attack against apr_brigade_split_line().
[Stefan Fritsch]
*) SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
Fix two buffer over-read flaws in the bundled copy of expat which
could cause applications to crash while parsing specially-crafted
XML documents. [Joe Orton]
*) Upgrade bundled copy of expat library to 1.95.7. [Joe Orton]
*) apr_thread_pool: Fix some potential deadlock situations. PR 49709.
[Joe Mudd <Joe.Mudd sas.com>]
*) apr_thread_pool_create: Fix pool corruption caused by multithreaded
use of the pool when multiple initial threads are created. PR 47843.
[Alex Korobka <akorobka fxcm.com>]
*) apr_thread_pool_create(): Only set the output thread pool handle on
success. [Paul Querna]
*) DBD ODBC support: Fix memory corruption using apr_dbd_datum_get() with
several different data types, including APR_DBD_TYPE_TIME. PR 49645.
[<kappa psilambda.com>]
*) Add support for Berkeley DB 4.8 and 5.0. PR 49866, PR 49179.
[Bernhard Rosenkraenzer <br blankpage.ch>,
Arfrever Frehtes Taifersar Arahesis <arfrever.fta gmail.com>]
*) Make bundled expat compatible with libtool 2.x. PR 49053.
[Rainer Jung]
*) Prefer libtool 1.x when searching for libtool in
bundled expat release process. [Rainer Jung, Jim Jagielski]
*) Improve platform detection for bundled expat by updating
config.guess and config.sub. [Rainer Jung]
</ChangeLog>
- bsd.port.mk adds CFLAGS to CONFIGURE_ENV but not if you reference it directly in the Makefile. Even if you use bsd.port.(pre|post).mk.
- This re-fixes WITH_MYSQL=yes WITH_MYSQL_VER=55 after ale@ really fixed
database/mysql55-client, databases/mysql55-server include/mysql layout.
This is a very non default config, so no PORTREVISION bump
PR: ports/146276
- Define python version explicitly ${APR_WRKDIR}/build/gen-build.py does not work with Python 3.1 - No PORTREVISION bump (build only)
PR: ports/146621
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
With Hat: apache@
- devel/apr|devel/apr1|2010-05-18|Renamed to devel/apr1
Remove now obsolete devel/apr. See devel/apr1
PR: ports/146553
With Hat: apache@
Tested by: make index and make index WITH_APACHE=1
- Default DEVRANOM support to on b/c mod_auth_digest is default on but pointhat package builds don't set WITH_DEVRANDOM for devel/apr. - Bump PORTREVISION
With Hat: apache@
1/2: OPTIONS+= EGD and DEVRANDOM which allow mod_auth_digest to build next www/apache2* need to pass it through Default package doesn't change
PR: ports/134577
Requested by: Pascal Vizeli <pvizeli@yahoo.de>
With Hat: apache@
- Harden the OPTION processing to explicity enable/disable in BOTH cases. - Remove some invalid quotes in the OSVERSION handling - CFLAGS is already in CONFIGURE_ENV - Fix some tabs/whitespace
None of this changes the default package, so no PORTREVISION bumps.
PR: ports/145744
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
With Hat: apache@