security risk by writing 8 bytes to a 4 byte declared variable.
The first fix introduced a potential security problem.
PR: ports/97681
Submitted by: maintainer, Dan Lukes <dan_at_obluda.cz> (an initial patch)
- Use SUB_FILES to configure launcher shell script
- Set JAVA_VERSION in launcher shell script
- Install JAR files in DATADIR=${JAVASHAREDIR}/${PORTNAME}
- Use %%JAVAJARDIR%% and %%DOCSDIR%% in pkg-plist
- Add $FreeBSD$ tags
- Honor NOPORTDOCS
- Bump PORTREVISION
- Use %%JAVAJARDIR%% in pkg-plist
- Add $FreeBSD$ tag
- Use SUB_FILES (rather than PKGINSTALL) to configure launcher shell script
- Set JAVA_VERSION for javavmwrapper in launcher shell script
- Renamed launcher script: jasmin.sh -> jasmin
- Register java/javavmwrapper in RUN_DEPENDS
- Bump PORTREVISION
- Use DISTVERSION to avoid complex substitutions in DISTNAME
- Use DATADIR=${JAVASHAREDIR}/${PORTNAME}
- Use SUB_FILES to configure launcher shell script
- Set JAVA_VERSION in launcher shell script
- Use 'exec' to launch JVM (as encouraged in the Porter's Handbook)
- Remove port name from COMMENT
- Do not mkdir ${JAVAJARDIR} (it is part of mtree now)
- Use %%DATADIR%% and %%JAVAJARDIR%% in pkg-plist
- Add $FreeBSD$ tags
- Bump PORTREVISION
PR: 97698
Submitted by: hq
Approved by: maintainer
* Cleanup comments [2] [3] [4]
* include bsd.emacs.mk only when USE_EMACS is set [5]
* Silence the install-info target [6] [7]
* Correct the implementation of pretty-print-run-depends-list [8]
* Use a consistent name for the cookies file when PKGNAMEPREFIX/SUFFIX
are set after bsd.port.pre.mk. [9]
* Include bsd.tcl.mk if USE_TCL_BUILD is defined [10]
* Set PERL_MM_USE_DEFAULT in BATCH mode [11]
* Add the {ONLY,NOT}_FOR_ARCH_REASON and
{ONLY,NOT}_FOR_ARCH_REASON_${ARCH} variables to allow better
customization of the error string reported to users when they
attempt a build on an unsupported architecture. [12]
* Avoid errors from duplicated targets when parsing MLINKS on ports
without a default value set. [13]
* Fix handling of MLINKS when invalid entries are listed [14]
* Enforce sanity of DESKTOP_ENTRIES. If the Categories field is
omitted, try to map ports categories to their freedesktop.org
counterpart [15]
PR: 93873 [1], 92923 [2], 93234 [3], 95680 [4], 95238 [5],
91621 [6], 94035 [7], 94164 [8], 94219 [9], 92355 [10],
95579 [11], 94675 [12], 66109 [13], 66110 [14], 95603 [15]
Submitted by: Eric Cronin <ecronin@gizmolabs.org> [1],
edwin [2][12], pav [3], vd [4][8], nobutaka [5],
anray [6], krion [7],
Andrey Deynega <licedey@gmail.com> [9], mnag [9],
garga [10], skv [11], eik [13][14], jylefort [15]
The PostgreSQL Global Development Group today released versions 8.1.4, 8.0.8,
7.4.13 and 7.3.15. This is an urgent update to close a security hole which
can permit a SQL injection attack on some applications running PostgreSQL.
Users are urged to apply the update as soon as reasonably possible. Since the
update affects client functionality, most driver projects will be updating
this week as well.
Because the security issue involved is complex, we have added a section in
Techdocs to explain it: http://www.postgresql.org/docs/techdocs.52. Please
read this first before applying the updates.
Also, fix rc_subr startup problems on FreeBSD-7.x.
Security: http://www.postgresql.org/docs/techdocs.50
PR: ports/95154
FORBIDDEN from the frontpage ports at it.
While this is "only" a cross site scripting vulnerability it has some
rather serious implications which can allow an attacker to take over a
web site, so I'm keeping FORBIDDEN.
