This is a rather hillarious bug:
https://www.libssh.org/security/advisories/CVE-2018-10933.txt
Luckily none of our stuff in HaikuPorts actually uses this.
Thanks @waddlesplash for notifying
Changes to recipe:
- Cleaned up cmake call
- Added ugly hack for `-pie` and `-fstack-protector`, probably a cmake
bug, but since linux distros have all gone with default-pie and
default-ssp, it probably got ignored
- Added a _doc subpackage
* The modules were previously installed directly in /system/lib/.
Now the are being installed in /system/lib/apache/.
* On x86 secondary arch the modules are now being installed in
/system/lib/x86/apache/, and we can re-enable that arch.
* The "httpd.conf" file, as well as two subdirectories, "extra"
and "original", were previously installed in /system/settings/.
Now they are being installed in /system/settings/apache/.
* Several directories ("build", "cgi-bin", "error", "htdocs",
"icons" and "manual") which were previously installed in
/system/data/ are now being installed in /system/data/apache/.
Remark: Although "cgi-bin", "htdocs" and "icons" could have been
kept in /system/data/, having "build", "error" and "manual" in
/system/data/ was definitely wrong. Hence the global move.
* Move GLOBAL_WRITABLE_FILES before PROVIDES.
The initial changes in brotli and pycurl to get rid of the "2.7"
and "3.6" were working on my system... but not on the buildbots.
Unfortunately, the fixes to get the recipes also work with the
buildbots have a small drawback: the dependencies evaluated at
build time are no longer tied with the minor version of Python.
So let's not replicate these changes to other recipes for now.
This variable is being computed with an eval call which seems to be
upsetting the build bots but none of my systems. So use:
* cmd:python2 instead of cmd:python2.7 and lib:libpython2.7
* cmd:python3 instead of cmd:python3.6 and lib:libpython3.6m
devel:libpython was in BUILD_PREREQUIRES until the previous commit
and was moved to BUILD_REQUIRES. Move it back to BUILD_PREREQUIRES.
Every commit in this recipe has been tested locally on each arch,
but something went wrong with pycurl_x86 in the build servers.
A REVISION bump was not necessary because the resulting packages
are the same except that REQUIRES_python{,3} are now sorted. But
let's kick a rebuild, after all.