Re: Removal of www/apache22

[Bernard Spil]

Hi All,

I've pulled the trigger on the removal of www/apache22.
I've kept mod_memcache_blok but marked it BROKEN pending maintaner update.

Added bofh@ as resin3 is also affected (option, default disabled).

If the port does work with Apache 2.4 (or with a patch), let me know
so we can add it again.

Cheers, Bernard.

2018-04-12 9:50 GMT+02:00 Hung-Yi Chen :
> Hi,
>
> www/mod_memcache_block can work with apache 2.4.
>
> I'll send a PR.
>
>
> 2018-04-12 4:35 GMT+08:00 Philip M. Gollucci :
>>
>> mod_log_mysql ->
>> https://github.com/freebsd/freebsd-ports/blob/master/www/mod_log_sql
>>
>> On Wed, Apr 11, 2018 at 12:52 PM, Łukasz Wąsikowski
>>  wrote:
>>>
>>> W dniu 2018-04-11 o 20:29, Bernard Spil pisze:
>>>
>>> > You are all maintainer of a port that depends on www/apache22. The
>>> > Apache 2.2 port has been marked EXPIRED for almost a year. I was about
>>> > to delete it but didn't want to go ahead without informing you. My
>>> > analysis of the dependent ports can be found in the FreeBSD wiki
>>> > https://wiki.freebsd.org/Apache#Apache_2.2
>>>
>>> [...]
>>>
>>> > www/mod_macro22 luk...@wasikowski.net
>>>
>>> This is apache 2.2 only version. Feature provided by this port is
>>> included in apache 2.4 , so feel free to bury www/mod_macro22.
>>>
>>> --
>>> best regards,
>>> Lukasz Wasikowski
>>> ___
>>> freebsd-apa...@freebsd.org mailing list
>>> https://lists.freebsd.org/mailman/listinfo/freebsd-apache
>>> To unsubscribe, send any mail to "freebsd-apache-unsubscr...@freebsd.org"
>>
>>
>>
>>
>> --
>>
>> -
>> 4096R/D21D2752 ECDF B597 B54B 7F92 753E  E0EA F699 A450 D21D 2752
>> Philip M. Gollucci (pgollu...@p6m7g8.com) c: 703.336.9354
>> Member,   Apache Software Foundation
>> Committer,FreeBSD Foundation
>> Consultant,   P6M7G8 Inc.
>> Director Cloud Technology,Capital One
>>
>> What doesn't kill us can only make us stronger;
>> Except it almost kills you.
>
>
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Philip M. Gollucci]

mod_log_mysql ->
https://github.com/freebsd/freebsd-ports/blob/master/www/mod_log_sql

On Wed, Apr 11, 2018 at 12:52 PM, Łukasz Wąsikowski 
wrote:

> W dniu 2018-04-11 o 20:29, Bernard Spil pisze:
>
> > You are all maintainer of a port that depends on www/apache22. The
> > Apache 2.2 port has been marked EXPIRED for almost a year. I was about
> > to delete it but didn't want to go ahead without informing you. My
> > analysis of the dependent ports can be found in the FreeBSD wiki
> > https://wiki.freebsd.org/Apache#Apache_2.2
>
> [...]
>
> > www/mod_macro22 luk...@wasikowski.net
>
> This is apache 2.2 only version. Feature provided by this port is
> included in apache 2.4 , so feel free to bury www/mod_macro22.
>
> --
> best regards,
> Lukasz Wasikowski
> ___
> freebsd-apa...@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-apache
> To unsubscribe, send any mail to "freebsd-apache-unsubscr...@freebsd.org"
>



-- 
-
4096R/D21D2752
 ECDF B597
B54B 7F92 753E  E0EA F699 A450 D21D 2752
Philip M. Gollucci (pgollu...@p6m7g8.com) c: 703.336.9354
Member,   Apache Software Foundation
Committer,FreeBSD Foundation
Consultant,   P6M7G8 Inc.
Director Cloud Technology,Capital One

What doesn't kill us can only make us stronger;
Except it almost kills you.
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Łukasz Wąsikowski]

W dniu 2018-04-11 o 20:29, Bernard Spil pisze:

> You are all maintainer of a port that depends on www/apache22. The
> Apache 2.2 port has been marked EXPIRED for almost a year. I was about
> to delete it but didn't want to go ahead without informing you. My
> analysis of the dependent ports can be found in the FreeBSD wiki
> https://wiki.freebsd.org/Apache#Apache_2.2

[...]

> www/mod_macro22 luk...@wasikowski.net

This is apache 2.2 only version. Feature provided by this port is
included in apache 2.4 , so feel free to bury www/mod_macro22.

-- 
best regards,
Lukasz Wasikowski
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Philip M. Gollucci]

#winning!

On Sun, Apr 8, 2018 at 3:52 AM, Spil Oss  wrote:

> There's been no-one wanting to keep Apache 2.2 that has come forward.
>
> Expect www/apache22 to be removed later in the week. Cleanup of
> Mk/Uses/apache.mk after that.
>
> 2018-03-30 17:37 GMT+02:00 Spil Oss :
> > Thanks Vincent! I was looking for these but could not find them any
> > more. Should've looked in archive naturally.
> >
> > Hanging in here for a bit to find out if there's anyone else wanting
> > to comment. Deletion 14 days after original message.
> >
> > Cheers, Bernard.
> >
> > 2018-03-27 16:07 GMT+02:00 Vincent Hoffman-Kazlauskas <
> vi...@unsane.co.uk>:
> >>
> >>
> >> On 27/03/2018 13:52, Bernard Spil wrote:
> >>> Hi all,
> >>>
> >>> Just noticed that the Apache project has removed the patches they had
> >>> for 2.2.34.
> >>>
> >>> http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/
> >>>
> >>> Combined with the security update of 2.4 branch to 2.4.33 leads me to
> >>> believe that Apache 2.2 is now vulnerable and no patches will be
> provided.
> >>>
> >>> If someone wishes to step up and get patches for 2.2 from e.g. RedHat,
> >>> we may be able to keep the port alive for a bit longer. If no one steps
> >>> up, I see no other way forward than to delete the port as indicated by
> >>> the DEPRECATED variable and expiration date 2017-07-01 since July 2016.
> >>>
> >>
> >> While I agree that apache 2.2 is now firmly dead, they moved the patches
> >> for 2.2.34 to
> >> https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ ,
> however
> >> no new patches for the recent CVEs were added.
> >>
> >>
> >> Vince
> >>
> >>
> >>
> >>> Cheers,
> >>>
> >>> Bernard.
> >>> ___
> >>> freebsd-ports@freebsd.org mailing list
> >>> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
> >>> To unsubscribe, send any mail to "freebsd-ports-unsubscribe@
> freebsd.org"
> >> ___
> >> freebsd-ports@freebsd.org mailing list
> >> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
> >> To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org
> "
> ___
> freebsd-apa...@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-apache
> To unsubscribe, send any mail to "freebsd-apache-unsubscr...@freebsd.org"
>



-- 
-
4096R/D21D2752
 ECDF B597
B54B 7F92 753E  E0EA F699 A450 D21D 2752
Philip M. Gollucci (pgollu...@p6m7g8.com) c: 703.336.9354
Member,   Apache Software Foundation
Committer,FreeBSD Foundation
Consultant,   P6M7G8 Inc.
Director Cloud Technology,Capital One

What doesn't kill us can only make us stronger;
Except it almost kills you.
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Bernard Spil]

Hi All,

You are all maintainer of a port that depends on www/apache22. The
Apache 2.2 port has been marked EXPIRED for almost a year. I was about
to delete it but didn't want to go ahead without informing you. My
analysis of the dependent ports can be found in the FreeBSD wiki
https://wiki.freebsd.org/Apache#Apache_2.2

www/mod_antiloris a...@vts.su.ac.rs
www/mod_clamav tmu...@kommunity.net
www/mod_extract_forwarded kuriy...@freebsd.org
www/mod_log_config-st portmas...@bsdforge.com
www/mod_log_mysql portmas...@bsdforge.com
www/mod_macro22 luk...@wasikowski.net
www/mod_memcache_block g...@hychen.org
www/mod_remoteip po...@christianserving.org
www/mod_uid jon...@freebsd.org
www/mod_whatkilledus f...@moov.de
www/mod_xml2enc dna...@gmail.com
www/mod_spdy mas...@club.kyutech.ac.jp

If the port cannot be updated to work with Apache 2.4 it will be
removed together with www/apache22. Let me and apache@ know if you can
update the port to use 2.4 or if there's a different port we should be
pointing to in MOVED.

Thank you for your cooperation!

With kind regards, Bernard Spil (with hat apache@)

2018-04-08 12:57 GMT+02:00 Bernard Spil :
> There's been no-one wanting to keep Apache 2.2 that has come forward.
>
> Expect www/apache22 to be removed later in the week. Cleanup of
> Mk/Uses/apache.mk after that.
>
> 2018-03-27 14:52 GMT+02:00 Bernard Spil :
>> Hi all,
>>
>> Just noticed that the Apache project has removed the patches they had for
>> 2.2.34.
>>
>> http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/
>>
>> Combined with the security update of 2.4 branch to 2.4.33 leads me to
>> believe that Apache 2.2 is now vulnerable and no patches will be provided.
>>
>> If someone wishes to step up and get patches for 2.2 from e.g. RedHat, we
>> may be able to keep the port alive for a bit longer. If no one steps up, I
>> see no other way forward than to delete the port as indicated by the
>> DEPRECATED variable and expiration date 2017-07-01 since July 2016.
>>
>> Cheers,
>>
>> Bernard.
>> ___
>> freebsd-apa...@freebsd.org mailing list
>> https://lists.freebsd.org/mailman/listinfo/freebsd-apache
>> To unsubscribe, send any mail to "freebsd-apache-unsubscr...@freebsd.org"
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Bernard Spil]

There's been no-one wanting to keep Apache 2.2 that has come forward.

Expect www/apache22 to be removed later in the week. Cleanup of
Mk/Uses/apache.mk after that.

2018-03-27 14:52 GMT+02:00 Bernard Spil :
> Hi all,
>
> Just noticed that the Apache project has removed the patches they had for
> 2.2.34.
>
> http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/
>
> Combined with the security update of 2.4 branch to 2.4.33 leads me to
> believe that Apache 2.2 is now vulnerable and no patches will be provided.
>
> If someone wishes to step up and get patches for 2.2 from e.g. RedHat, we
> may be able to keep the port alive for a bit longer. If no one steps up, I
> see no other way forward than to delete the port as indicated by the
> DEPRECATED variable and expiration date 2017-07-01 since July 2016.
>
> Cheers,
>
> Bernard.
> ___
> freebsd-apa...@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-apache
> To unsubscribe, send any mail to "freebsd-apache-unsubscr...@freebsd.org"
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Spil Oss]

There's been no-one wanting to keep Apache 2.2 that has come forward.

Expect www/apache22 to be removed later in the week. Cleanup of
Mk/Uses/apache.mk after that.

2018-03-30 17:37 GMT+02:00 Spil Oss :
> Thanks Vincent! I was looking for these but could not find them any
> more. Should've looked in archive naturally.
>
> Hanging in here for a bit to find out if there's anyone else wanting
> to comment. Deletion 14 days after original message.
>
> Cheers, Bernard.
>
> 2018-03-27 16:07 GMT+02:00 Vincent Hoffman-Kazlauskas :
>>
>>
>> On 27/03/2018 13:52, Bernard Spil wrote:
>>> Hi all,
>>>
>>> Just noticed that the Apache project has removed the patches they had
>>> for 2.2.34.
>>>
>>> http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/
>>>
>>> Combined with the security update of 2.4 branch to 2.4.33 leads me to
>>> believe that Apache 2.2 is now vulnerable and no patches will be provided.
>>>
>>> If someone wishes to step up and get patches for 2.2 from e.g. RedHat,
>>> we may be able to keep the port alive for a bit longer. If no one steps
>>> up, I see no other way forward than to delete the port as indicated by
>>> the DEPRECATED variable and expiration date 2017-07-01 since July 2016.
>>>
>>
>> While I agree that apache 2.2 is now firmly dead, they moved the patches
>> for 2.2.34 to
>> https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ , however
>> no new patches for the recent CVEs were added.
>>
>>
>> Vince
>>
>>
>>
>>> Cheers,
>>>
>>> Bernard.
>>> ___
>>> freebsd-ports@freebsd.org mailing list
>>> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
>>> To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
>> ___
>> freebsd-ports@freebsd.org mailing list
>> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
>> To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Spil Oss]

Thanks Vincent! I was looking for these but could not find them any
more. Should've looked in archive naturally.

Hanging in here for a bit to find out if there's anyone else wanting
to comment. Deletion 14 days after original message.

Cheers, Bernard.

2018-03-27 16:07 GMT+02:00 Vincent Hoffman-Kazlauskas :
>
>
> On 27/03/2018 13:52, Bernard Spil wrote:
>> Hi all,
>>
>> Just noticed that the Apache project has removed the patches they had
>> for 2.2.34.
>>
>> http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/
>>
>> Combined with the security update of 2.4 branch to 2.4.33 leads me to
>> believe that Apache 2.2 is now vulnerable and no patches will be provided.
>>
>> If someone wishes to step up and get patches for 2.2 from e.g. RedHat,
>> we may be able to keep the port alive for a bit longer. If no one steps
>> up, I see no other way forward than to delete the port as indicated by
>> the DEPRECATED variable and expiration date 2017-07-01 since July 2016.
>>
>
> While I agree that apache 2.2 is now firmly dead, they moved the patches
> for 2.2.34 to
> https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ , however
> no new patches for the recent CVEs were added.
>
>
> Vince
>
>
>
>> Cheers,
>>
>> Bernard.
>> ___
>> freebsd-ports@freebsd.org mailing list
>> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
>> To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
> ___
> freebsd-ports@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Philip M. Gollucci]

I support removal

On Tue, Mar 27, 2018 at 10:11 AM Vincent Hoffman-Kazlauskas <
vi...@unsane.co.uk> wrote:

>
>
> On 27/03/2018 13:52, Bernard Spil wrote:
> > Hi all,
> >
> > Just noticed that the Apache project has removed the patches they had
> > for 2.2.34.
> >
> > http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/
> >
> > Combined with the security update of 2.4 branch to 2.4.33 leads me to
> > believe that Apache 2.2 is now vulnerable and no patches will be
> provided.
> >
> > If someone wishes to step up and get patches for 2.2 from e.g. RedHat,
> > we may be able to keep the port alive for a bit longer. If no one steps
> > up, I see no other way forward than to delete the port as indicated by
> > the DEPRECATED variable and expiration date 2017-07-01 since July 2016.
> >
>
> While I agree that apache 2.2 is now firmly dead, they moved the patches
> for 2.2.34 to
> https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ , however
> no new patches for the recent CVEs were added.
>
>
> Vince
>
>
>
> > Cheers,
> >
> > Bernard.
> > ___
> > freebsd-ports@freebsd.org mailing list
> > https://lists.freebsd.org/mailman/listinfo/freebsd-ports
> > To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
> ___
> freebsd-ports@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
>
-- 
-
4096R/D21D2752
 ECDF B597
B54B 7F92 753E  E0EA F699 A450 D21D 2752
Philip M. Gollucci (pgollu...@p6m7g8.com) c: 703.336.9354
Member,   Apache Software Foundation
Committer,FreeBSD Foundation
Consultant,   P6M7G8 Inc.
Director Cloud Technology,Capital One

What doesn't kill us can only make us stronger;
Except it almost kills you.
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Removal of www/apache22

[Vincent Hoffman-Kazlauskas]

On 27/03/2018 13:52, Bernard Spil wrote:
> Hi all,
> 
> Just noticed that the Apache project has removed the patches they had
> for 2.2.34.
> 
>     http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/
> 
> Combined with the security update of 2.4 branch to 2.4.33 leads me to
> believe that Apache 2.2 is now vulnerable and no patches will be provided.
> 
> If someone wishes to step up and get patches for 2.2 from e.g. RedHat,
> we may be able to keep the port alive for a bit longer. If no one steps
> up, I see no other way forward than to delete the port as indicated by
> the DEPRECATED variable and expiration date 2017-07-01 since July 2016.
> 

While I agree that apache 2.2 is now firmly dead, they moved the patches
for 2.2.34 to
https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ , however
no new patches for the recent CVEs were added.


Vince



> Cheers,
> 
> Bernard.
> ___
> freebsd-ports@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"