www/darkhttpd: Update to 1.14 (Fixes CVE-2020-25691)
ChangeLog: https://github.com/emikulic/darkhttpd/releases/tag/v1.14
* Add support for logging with syslog.
* Fix hung connection from consecutive keep-alive requests.
* Fix high CPU usage when timeout is disabled.
* Add --forward-https.
* Make header parsing case insensitive, to work behind an HTTP2 reverse proxy.
* Add trailing slash to links for directories.
* Fix crash when a file has a large (year 10,000+) mtime.
A flaw was found in darkhttpd. Invalid error handling allows remote attackers
to cause denial-of-service by accessing a file with a large modification date.
The highest threat from this vulnerability is to system availability.
PR: 267507
Reported by: henrichhartzer@tuta.io
MFH: 2022Q4 (security update)
Security: CVE-2020-25691
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
www/darkhttpd: Add new port
Simple static http web server.
When you need a web server in a hurry.
PR: 262234
Reported by: henrichhartzer@tuta.io
Reviewed by: diizzy@
