www/apache24: Security update to 2.4.62

Security:	088b8b7d-446c-11ef-b611-84a93843eb75
MFH: 		2024Q3

www/apache24: Dynamically link rustls-ffi

 * And typo

Reported by:	diizzy

www/apache24: Add option for mod_tls module

 * Note: mod_tls is marked Expirimental.

www/apache24: Security update to 2.4.61

Security:	5d921a8c-3a43-11ef-b611-84a93843eb75
MFH:		2024Q3
With hat:	apache@

www/apache24: Security update to 2.4.60

Security:	d7efc2ad-37af-11ef-b611-84a93843eb75
MFH:		2024Q3
With hat:	apache

www/apache24: Remove extraneous file

 * Patch was backported to 2.4.59 upstream

www/apache24: Security update to 2.4.59

Security:	8e6f684b-f333-11ee-a573-84a93843eb75
With hat:	apache
MFH:		2024Q2

www/apache24: Moved man to share/man

Approved by:    portmgr (blanket)

www/apache24: workaround for bug "opcache + ASLR turned on crashes Apache if
used www/mod_php8{0,1,2,3}"

PR:		268318
Approved by:	joneum (apache@), tcberner (mentor)
MFH:		2023Q4

www/apache24: Security update to 2.4.58

Security:	f923205f-6e66-11ee-85eb-84a93843eb75
MFH:		2023Q4

www/apache24: htcacheclean rc.d script appears too early in rcorder

Because htcacheclean has no dependencies set, it runs before the
file system is ready, even though it makes changes to the file system.
Define FILESYSTEMS as requirement to fix this race condition.

PR:		268216
Approved by:	portmgr (maintainer timeout, 5+ months)

www/apache24: Update to 2.4.57

With hat:	apache

www/apache24: Update to 2.4.56

Changes with Apache 2.4.56

  *) SECURITY: CVE-2023-27522: Apache HTTP Server: mod_proxy_uwsgi
     HTTP response splitting (cve.mitre.org)
     HTTP Response Smuggling vulnerability in Apache HTTP Server via
     mod_proxy_uwsgi. This issue affects Apache HTTP Server: from
     2.4.30 through 2.4.55.
     Special characters in the origin response header can
     truncate/split the response forwarded to the client.
     Credits: Dimas Fariski Setyawan Putra (nyxsorcerer)

  *) SECURITY: CVE-2023-25690: HTTP request splitting with
     mod_rewrite and mod_proxy (cve.mitre.org)

www/apache24: Update to 2.4.55

Fixes multiple vulnerabilities.

PR:		269015
MFH:		2023Q1
Security:	00919005-96a3-11ed-86e9-d4c9ef517024
		CVE-2022-37436, CVE-2022-36760, CVE-2006-20001

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

www/apache24: Security update to 2.5.54

With hat:	apache
Security:	49adfbe5-e7d1-11ec-8fbd-d4c9ef517024
MFH:		2022Q2

www/apache24: switch to pcre2

PR:	262603
Sponsored by:	Netzkommune GmbH

textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)

www/apache24: Security update to 2.4.53

Security:	6601c08d-a46c-11ec-8be6-d4c9ef517024
MFH:		2022Q1

Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port

www/apache24: Update to 2.4.52

Security:	ca982e2d-61a9-11ec-8be6-d4c9ef517024
MFH:		2021Q4

www/apache24: Update to 2.4.51

Fixes: critical: Path Traversal and Remote Code Execution in Apache
HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
(CVE-2021-42013)

PR:		258988
MFH:		2021Q4
Security:	CVE-2021-41773, CVE-2021-42013

www/apache24: Bugfix update to 2.4.50

 * Fixes hang with event MPM

PR:		258767

www/apache24: Security update to 2.4.49

Security:	38f9-17dd-11ec-b335-d4c9ef517024
MFH:		2021Q3

www/apache24: Update to 2.4.48

Approved by:	apache (with hat)

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

fix OpenSSL KTLS causes regression: SSL_ERROR_HANDSHAKE_UNEXPECTED_ALERT

PR:		253394
Reported by:	many
Approved by:	apache (with hat)
MFH:	2021Q1
Sponsored by:	Netzkommune GmbH
Differential Revision:	https://reviews.freebsd.org/D28932

www/apache24: Change strip behavior

 * Use the dists build/rules.mk method
 * cleanup of left-over files from strip

PR:		252792
Submitted by:	meta
Approved by:	joneum (apache)
Differential Revision:	https://reviews.freebsd.org/D28217

www/apache24: Don't install suexec manpage when option is off

PR:		248052
Submitted by:	Michael Osipov <michael osipov siemens com>
Approved by:	apache (brnrd)

www/apache24: Update to 2.4.46

enable MD as default

PR:		237726
Submitted by:	Igor Galic <me@igalic.co>
Sponsored by:	Netzkommune GmbH

www/apache24: enable syslog for suexec

This adds another knob to configure apache with syslog-enabled suexec

PR:	239264
Submitted by:	Robert Schulze <rs@bytecamp.net>
Approved by:	apache (with hat)
Sponsored by:	Netzkommune GmbH

Update to 2.4.43

Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.43

MFH:		2020Q2
Security:	b360b120-74b1-11ea-a84a-4c72b94353b5
Sponsored by:	Netzkommune GmbH

Drop the ipv6 virtual category for w* category as it is not relevant anymore

Update to 2.4.41

Changelog: http://www.apache.org/dist/httpd/CHANGES_2.4.41

Sponsored by:	Netzkommune GmbH

Convert to UCL & cleanup pkg-message (categories w)

Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330

meout: fix default_[stage]_rate_factor initializations.

PR:		238488
Reported by:	girgen
Sponsored by:	Netzkommune GmbH

www/apache24: add USES=compiler:c11

This is needed to fix build of www/mod_maxminddb.

Approved by:	mentors (implicit approval)

www/apache24: Security update to 2.4.39

 - Adds mod_socache_redis feature

Changes: https://www.apache.org/dist/httpd/CHANGES_2.4.39

MFH:		2019Q2
Security:	cf2105c6-551b-11e9-b95c-b499baebfeaf

Update to 2.4.38

Changelog:
  *) SECURITY: CVE-2018-17199 (cve.mitre.org)
     mod_session: mod_session_cookie does not respect expiry time allowing
     sessions to be reused.  [Hank Ibell]

  *) SECURITY: CVE-2018-17189 (cve.mitre.org)
     mod_http2: fixes a DoS attack vector. By sending slow request bodies
     to resources not consuming them, httpd cleanup code occupies a server
     thread unnecessarily. This was changed to an immediate stream reset
     which discards all stream state and incoming data.  [Stefan Eissing]

  *) SECURITY: CVE-2019-0190 (cve.mitre.org)
     mod_ssl: Fix infinite loop triggered by a client-initiated

Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724

www/apache24: Update to 2.4.37

 - Adds TLSv1.3 support with security/openssl111

PR:		232687
Submitted by:	Pascal Christen <pascal christen hostpoint.ch>
Reported by:	Markus Kohlmeyer <rootservice gmail com>
Reviewed by:	ohauer
Approved by:	joneum
Differential Revision:	https://reviews.freebsd.org/D17668

www/apache24: Update to 2.4.35

Changelog:

  *) http: Enforce consistently no response body with both 204 and 304
     statuses.  [Yann Ylavic]

  *) mod_status: Cumulate CPU time of exited child processes in the
     "cu" and "cs" values. Add CPU time of the parent process to the
     "c" and "s" values.
     [Rainer Jung]

  *) mod_proxy: Improve the balancer member data shown in mod_status when
     "ProxyStatus" is "On": add "busy" count and show byte counts in
     auto mode always in units of kilobytes.  [Rainer Jung]

Add DOCS options to ports that should have one.

Also various fixes related to said option.

PR:		230864
Submitted by:	mat
exp-runs by:	antoine

www/apache24: Update to 2.4.34

 - fixes vulns in mod_http2 and mod_md
 - include SSL_* options in alphabetic ordering
 - Remove unneeded SSL_CFLAGS and _LDFLAGS
 - Remove WITH_HTTP_PORT and WITH_SSL_PORT
 - Remove trailing whitespace
 - Fix build with HTTP2 but without SSL [1]

PR:		229802, 227944 [1]
With hat:	apache
Approved by:	brnrd (apache)
MFH:		2018Q3
Security:	8b1a50ab-8a8e-11e8-add2-b499baebfeaf
Differential Revision:	https://reviews.freebsd.org/D16294

Remove CONFLICTS_INSTALL with apache22. Apache 2.2 is EoL since 16.04.2018

www/apache24: Fix runtime failure with LibreSSL 2.7

 - Fix LOG_FORENSIC in plist while here

PR:		227868
Reported by:	Jens K. Loewe <mozilla tuxproject de>
Approved by:	hat (apache@)

www/apache24: Really unbreak make index

www/apache24: Unbreak make index

 - While here, fix a regression with mod_session

www/apache24: Fix ssl linking issues

 - Remove -L/usr/lib from LDFLAGS [1]
 - Remove non-working show-modules target
 - Use new style patch filenames

PR:		227108 [1]
With hat:	apache
Submitted by:	mat [1]
Reported by:	eugen [1]
MFH:		2018Q1

www/apache24: Update to 2.4.33

 - Add new uwsgi and md modules
 - Fix LibreSSL 2.7.x builds
 - Remove conflicts for non-existent ports
 - There are no slave-ports
 - Coalesce .if WITH_DEBUG blocks
 - Use OPTIONS where possible
 - Remove dead code
 - Actually enable/disable modules in ALL_MODULES loop
 - Add suexec warning
 - Move Makefile.options to Makefile (too small)

PR:		226647
With hat:	apache
Approved by:	brnrd (apache)
MFH:		MFH2018Q1
Security:	f38187e7-2f6e-11e8-8f07-b499baebfeaf

devel/apr1: Bump portrevision

 - Repair my rookie mistake of earlier today
 - Bump revision of dependent ports (again)

Reported by:	antoine

devel/apr1: Fix runtime issues of dependent port

 - iconv is in base in all supported FreeBSD versions
 - Fix build with MariaDB 10.2 [2]
 - Bump portrevision in dependencies

PR:		226705 [1], 226026 [2]
With hat:	apache
Approved by:	joneum (apache)

Mk/Uses/apache.mk: Migrate Mk/bsd.apache.mk to Uses

 - Chase required changes in framework (bsd.sanity.mk, bsd.port.mk)
 - Chase required changes in ports (version checks)
 - Chase required changes in PHP ports (include bsd.apache.mk)
 - exp-run by antoine, brnrd, joneum

PR:             223691 (exp-run)
Reviewed by:    joneum (hat apache), mat (portmgr), antoine (portmgr)
Approved by:    joneum (hat apache)
Approved by:	portmgr
With hat:       apache

www/apache24: Update to 2.4.29

 - Remove patch for CVE-2017-9798 (included upstream)
 - Remove mod_ssl LibreSSL patches (included upstream)
 - Fix SSL stapling patch for LibreSSL
 - mod_http2 no longer experimental

PR:		222814
With hat:	apache

- Add upstream commit for CVE-2017-9798
- Bump PORTREVISION

Security:	76b085e2-9d33-11e7-9260-000c292ee6b8

www/apache24: Update to 2.4.27

 - Bugfix update to 2.4.27
 - Fix build with LibreSSL [1]
 - Add brotli compression option
 - Add pkg-message for 10.3 base-ssl users
 - HTTP/2 is production ready, default enable
   - warn users of 10.3 for mod_http2/OpenSSL 1.0.1

[1] https://bz.apache.org/bugzilla/show_bug.cgi?id=61184

PR:             220160 [1]
Reported by:    Markus Kohlmeyer <rootservice@gmail.com>
Reviewed by:    ohauer (hat)
Approved by:    ohauer (hat)
Differential Revision:  https://reviews.freebsd.org/D11285

Update to 2.4.26.

MFH:		2017Q2
Security:	CVE-2017-3167
Security:	CVE-2017-3169
Security:	CVE-2017-7659
Security:	CVE-2017-7668
Security:	CVE-2017-7679
With hat:	portmgr
Sponsored by:	Absolight

- fix third party module build e.g. mod_mpm_itk by removing -Werror from
configure.in
- bump PORTREVISON (fix changes config_vars.mk that is used to build third party
modules)

PR:		215594
Submitted by:	Marcelo Araujo
MFH:		2016Q4
Sponsored by:	iXsystems

- update to 2.4.25

PR:		215457
Reported by:	Apache Software Foundation
MFH:		2016Q4
Security:	vid 862d6ab3-c75e-11e6-9f98-20cf30e32f6d
		CVE-2016-8743
		CVE-2016-2161
		CVE-2016-0736
		CVE-2016-8740
		CVE-2016-5387

- Change *_DEPENDS from www/nghttp2 to www/libnghttp2
- Bump PORTREVISION for dependency change

www/apache24: Fix HTTP/2 DoS vulnerability

  - Add patch from upstream security advisory
  - Bump PORTREVISION

PR:		215096
MFH:		2016Q4
Security:	cb0bf1ec-bb92-11e6-a9a5-b499baebfeaf
Security:	CVE-2016-8740

- Add LICENSE

Approved by:	portmgr (blanket)

${RM} already has -f.

PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

- mod_proxy_http2 requires mod_proxy_balancer

No PORTREVISION bump
 defaults: PROXY_BALANCER=on PROXY_HTTP2=off

PR:		210868
Submitted by:	M. Macha

www/apache24: Fix httpoxy vulnerability (+2.2)

  - Add upstream patch to www/apache24
  - Add upstream patch to www/apache22
  - Bump PORTREVISION

Approved by:    feld (ports-secteam)
MFH:            2016Q3
Security:       cf0b5668-4d1b-11e6-b2ec-b499baebfeaf
Security:       CVE-2016-5387

o update to 2.4.23
o disable build time stamp in favor of reproducible build
o remove obsolate scoreboard/status patch
o s/USE_OPENSSL=yes/USES=ssl/
o add OPTION for two new modules:
   mod_proxy_hcheck (default=on)
   mod_http2_proxy (experimental => default=off)

Changelog:
 http://www.apache.org/dist/httpd/CHANGES_2.4.23

MFH:		2016Q3

- Fix trailing whitespace in pkg-messages

Approved by:	portmgr blanket

- fix scoreboard, backport fix from [1]
- bump PORTREVISION

For details see discussion:
 http://mail-archives.apache.org/mod_mbox/httpd-dev/201604.mbox/browser

Thanks to Ken J. for reporting the issue and testing the patch!

Reported by:	Ken J. (on apache@ list)
Obtained from:	http://home.apache.org/~ylavic/patches/scoreboard-2.4.18.diff 
[1]
MFH:		2016Q2

- update to 2.4.20
- use ${OPTION}_IMPLIES and remove some IGNORES
- turn on proxy_html and xml2enc as default [1]

[1] Often requested by users. The modules are not enabled in
    the default configuration.

Full changelog for apache version 2.4.19/2.4.20:
 http://www.apache.org/dist/httpd/CHANGES_2.4.20

Note: Apache httpd 2.4.19 was not released.

MFH:	2016Q2

Remove ${PORTSDIR}/ from dependencies, categories v, w, x, y, and z.

With hat:	portmgr
Sponsored by:	Absolight

- use new $opt-target
- improve kldstat check
- use new defined postexec, preunexec in pkg-plist

with hat apache@

- update to 2.4.18
- backport r1719967
  mod_ssl: fix build with openssl < 0.9.8m (missing semicolon).

This release also contains the patch for FreeBSD PR 204304
 Make the fix for fully qualifying REDIRECT_URL from PR#57785 opt-in.
 http://svn.apache.org/viewvc?view=revision&revision=1712268

Changes with Apache 2.4.18

  *) mod_ssl: for all ssl_engine_vars.c lookups, fall back to master connection
     if conn_rec itself holds no valid SSLConnRec*. Fixes PR58666.
     [Stefan Eissing]

  *) mod_http2: connection level window for flow control is set to protocol

- fix build with nghttp2

no version bump as OPTION is off by default

PR:		204293
Submitted by:	<idefix_at_fechner.net>

- update to 2.4.17
- add support for HTTP/2 (RFC 7540)
- remove obsolate libressl patches [1]

In this release are some exciting new features including:

 *) HTTP/2 support via mod_http2 module
 *) Support for SO_REUSEPORT in MPMs for significant scalability

Changes with Apache 2.4.17

 *) mod_http2: added donated HTTP/2 implementation via core module. Similar
    configuration options to mod_ssl. [Stefan Eissing]

 *) mod_proxy: don't recyle backend announced "Connection: close" connections

Remove UNIQUENAME and LATEST_LINK.

UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now,
we won't have conflicts there.

Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer
is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel
has the correct PKGNAME anyway.

Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called
OPTIONS_FILE now.)

Reviewed by:	antoine, bapt
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3336

By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do.  On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same

www/apache24: fix CVEs, update 2.4.12 -> 2.4.16

- Convet to USES=autoreconf
- Sort USES
- Remove now empty patch files

Security:              
https://vuxml.freebsd.org/freebsd/a12494c1-2af4-11e5-86ff-14dae9d210b8.html
Differential Revision:  https://reviews.freebsd.org/D3101

Submitted by:           feld
Reviewed by:            pgollucci (myself)
With Hat:               apache@
MFH:                    2015Q3

MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight

- Remove libtool hacks and patches that are now handled by USES=libtool
- Remove CONFIG_SHELL from CONFIGURE_ENV because bsd.port.mk handles that

- update to 2.4.12

- change MPM backend from static to dynamic,
  but keep mpm_prefork for compatiblity with e.g. php modules
- install dedicated MPM load file in case httpd was build with modular MPM
  (modules.d/000_mpm_prefork_fallback.conf)
- disable SSLv3 and SSLv2 fallback in sample httpd-ssl-conf
- use @sample macro instead EXAMPLESDIR
- add some SSLCipherSuite examples for OpenSSL >= 1.0.x
- add libressl support [1]
- add pkg-install script (to handle new modular MPM build)
- build now most all modules, so users using packages don't have
  to run a custom build for missing modules
- fix suexec mode

PR:		196139 [1]
MFH:		2015Q1

- make QA script happy and RMDIR empty folder below $PORTDOCS
  the script complans on them even PORTDOCS=* is set
- do not slence INSTALL commands

apache24

- remove check if apr is build with threads
- bump PORTREVISION
- adopt new pkg-plist @dir

@with hat apache@

Remove unused LIBTOOLFILES

- adjust default modules, changed during the last revisions
  + SESSION_DBD
  + SLOTMEM_SHM (e.g neeed for mod_ajp)
  - CERN_META

- Use OPTION desc. from modules/config.m4 to match upstream
- bump PORTREVISION

with hat apache@

MFH:		2014Q3

- security update to release 2.4.10

- add OPTION for new mod_authnz_fcgi module

- s/libluajit.so/libluajit-5.1.so/ (there is no libluajit.so)

- backport for mod_lua: Don't quote values in cookies
   Make IE happy again [#56734]
   http://svn.apache.org/viewvc?view=revision&revision=1611744

- disable sanity check on demand [1]

Release Notes:
 http://www.apache.org/dist/httpd/CHANGES_2.4.10

PR:		191398 [1]
Submitted by:	Robert Schulze <rs@bytecamp.net>
MFH:		2014Q3
Security:	4364e1f1-0f44-11e4-b090-20cf30e32f6d
		CVE-2014-0117
		CVE-2014-3523
		CVE-2014-0226
		CVE-2014-0118
		CVE-2014-0231

Use modern LIB_DEPENDS on non default options

Submitted by:	ohauer

- revert conflict (apache22 has MPM sub ports)

- strip
- remove obsolete apache-*-2.2.* conflict
- add modules.d to EXAMPLESDIR
- always install DOC (remove Makefile hack)
- bump PORREVISION
- sort pkg-plist

- fix build with lua51 / lua52
- strip trailing white space
- no PORTREVISION bump (LUA is not a default OPTION)

Lua build issue reported on apache@ and lua@
 by Peter Olsson and Jason Hellenthal

- fix LIB_DEPENDS (after adding libtool:keepla to devel/apr1)
- bump PORTREVISION

Submitted by:	David Cecchin <dcecchin@gmail.com>

Add CPE information.

With hat:	ports-secteam

- /USE_AUTOTOOLS=libtool/USES=libtool/

with hat apache@

Replace lang/lua with the new lang/lua51

lang/lua51 is working the same way lang/lua52, chase ports using lua 5.1
Make the default lua lua52
Make all lua ports using USES=lua

Approved by:	portmgr (implicit)

The FreeBSD x11@ and graphics team proudly presents
a zeising, kwm production, with help from dumbbell, bdrewery:

NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE

This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.

This patch also contains updates of libxcb and related ports, pixman, as well

- mod_authn_socache.c: fix creation of default socache_instance.
- add Note how the OpenSSL version used to build httpd is found (apr-1-config)

Upstream r1576233 commit message
================================
In pre_config, default socache_provider is created, but socache_instance
initialization is missing. This leads to crash on startup if default
socache_provider is used (AuthnCacheSOCache is not called) and
AuthnCacheEnable or AuthnCacheProvideFor is used.

Submitted by:	Michael Bennett (per PM)
Obtained from:	http://svn.apache.org/viewvc?view=revision&revision=1576233