From owner-svn-ports-all@FreeBSD.ORG  Wed Feb 26 21:44:42 2014
Return-Path: <owner-svn-ports-all@FreeBSD.ORG>
Delivered-To: svn-ports-all@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id DEC5593B;
 Wed, 26 Feb 2014 21:44:42 +0000 (UTC)
Received: from svn.freebsd.org (svn.freebsd.org
 [IPv6:2001:1900:2254:2068::e6a:0])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id C9A1C1035;
 Wed, 26 Feb 2014 21:44:42 +0000 (UTC)
Received: from svn.freebsd.org ([127.0.1.70])
 by svn.freebsd.org (8.14.8/8.14.8) with ESMTP id s1QLigbS019239;
 Wed, 26 Feb 2014 21:44:42 GMT (envelope-from ohauer@svn.freebsd.org)
Received: (from ohauer@localhost)
 by svn.freebsd.org (8.14.8/8.14.8/Submit) id s1QLighd019238;
 Wed, 26 Feb 2014 21:44:42 GMT (envelope-from ohauer@svn.freebsd.org)
Message-Id: <201402262144.s1QLighd019238@svn.freebsd.org>
From: Olli Hauer <ohauer@FreeBSD.org>
Date: Wed, 26 Feb 2014 21:44:42 +0000 (UTC)
To: ports-committers@freebsd.org, svn-ports-all@freebsd.org,
 svn-ports-head@freebsd.org
Subject: svn commit: r346230 - head/devel/subversion16
X-SVN-Group: ports-head
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-BeenThere: svn-ports-all@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: SVN commit messages for the ports tree <svn-ports-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-ports-all>,
 <mailto:svn-ports-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-ports-all/>
List-Post: <mailto:svn-ports-all@freebsd.org>
List-Help: <mailto:svn-ports-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-ports-all>,
 <mailto:svn-ports-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Feb 2014 21:44:43 -0000

Author: ohauer
Date: Wed Feb 26 21:44:42 2014
New Revision: 346230
URL: http://svnweb.freebsd.org/changeset/ports/346230
QAT: https://qat.redports.org/buildarchive/r346230/

Log:
  - mark forbidden if build with Apache modules (not the default)
  
  Security:	CVE-2013-4505
  Security:	CVE-2013-4558
  Security:	CVE-2014-0032
  Security:	1839f78c-9f2b-11e3-980f-20cf30e32f6d

Modified:
  head/devel/subversion16/Makefile

Modified: head/devel/subversion16/Makefile
==============================================================================
--- head/devel/subversion16/Makefile	Wed Feb 26 21:27:47 2014	(r346229)
+++ head/devel/subversion16/Makefile	Wed Feb 26 21:44:42 2014	(r346230)
@@ -74,6 +74,10 @@ SUB_LIST+=	SVNSERVE_BIN_EXT=""
 .endif
 
 .if ${PORT_OPTIONS:MMOD_DAV_SVN}
+FORBIDDEN=	Apache modules vulnerability: CVE-2013-4505 CVE-2013-4558 CVE-2014-0032
+.endif
+
+.if ${PORT_OPTIONS:MMOD_DAV_SVN}
 SUB_LIST+=	MOD_DAV_SVN_INSTALL="YES"
 PLIST_SUB+=	SED=${SED}
 SVNGROUP?=	www