www/darkhttpd: Fix CPE_VENDOR datab465f9a06a
darkhttpd -- DOS vulnerabilityentered 2022-11-08
Simple, static web server
# pkg install darkhttpdinstalls 1.16 from latest; from quarterly (2026Q4) 1.16# cd /usr/ports/www/darkhttpd && make install cleandarkhttpd, group darkhttpd| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.16 | 1.16 | – |
| FreeBSD 15 | 1.16 | 1.16 | – |
| FreeBSD 14 | 1.16 | 1.16 | 1.16 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.16 | 1.16 | – |
| FreeBSD 14 | 1.16 | 1.16 | 1.16 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 1.16.www/darkhttpd: Fix CPE_VENDOR datab465f9a06a
www/darkhttpd: Update to 1.16 Changelogs: - 1.16: https://github.com/emikulic/darkhttpd/releases/tag/v1.16 - 1.15: https://github.com/emikulic/darkhttpd/releases/tag/v1.15 PR: 277386 MFH: 2024Q1 Approved by: tcberner (mentor, implicit)564aedad9a
www/darkhttpd: Update to 1.14 (Fixes CVE-2020-25691) ChangeLog: https://github.com/emikulic/darkhttpd/releases/tag/v1.14 * Add support for logging with syslog. * Fix hung connection from consecutive keep-alive requests. * Fix high CPU usage when timeout is disabled. * Add --forward-https. * Make header parsing case insensitive, to work behind an HTTP2 reverse proxy. * Add trailing slash to links for directories. * Fix crash when a file has a large (year 10,000+) mtime. A flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a file with a large modification date. The highest threat from this vulnerability is to system availability. PR: 267507 Reported by: henrichhartzer@tuta.io MFH: 2022Q4 (security update) Security: CVE-2020-256911de880e0f6
www/darkhttpd: add rc script PR: 266239 Reported by: DtxdF@disroot.org Approved by: henrichartzer@tuta.io (maintainer, timeout > 1 month)9884951c50
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
www/darkhttpd: Add CPE information, pet porlint warning Approved by: portmgr (blanket)b11734a3db
www/darkhttpd: Fix NO_INSTALL This port actually install things... Reported by: danfe@088f0b29ee
www/darkhttpd: Add new port Simple static http web server. When you need a web server in a hurry. PR: 262234 Reported by: henrichhartzer@tuta.io Reviewed by: diizzy@76aee1b05b