and add a new helper target and script, "show-buildlink3", that outputs
a listing of the buildlink3.mk files included as well as the depth at
which they are included.
For example, "make show-buildlink3" in fonts/Xft2 displays:
zlib
fontconfig
iconv
zlib
freetype2
expat
freetype2
Xrender
renderproto
set OVERRIDE_DIRDEPTH to find any libtool scripts deeper in the WRKSRC
tree unless they're named something other than "libtool".
SHLIBTOOL_OVERRIDE generally doesn't need to be specified either -- just
define it to the empty list and shlibtool-override will look for libtool
scripts.
PKGLOCALEDIR and which install their locale files directly under
${PREFIX}/${PKGLOCALEDIR} and sort the PLIST file entries. From now
on, pkgsrc/mk/plist/plist-locale.awk will automatically handle
transforming the PLIST to refer to the correct locale directory.
RECOMMENDED is removed. It becomes ABI_DEPENDS.
BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo.
BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo.
BUILDLINK_DEPENDS does not change.
IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS
which defaults to "yes".
Added to obsolete.mk checking for IGNORE_RECOMMENDED.
I did not manually go through and fix any aesthetic tab/spacing issues.
I have tested the above patch on DragonFly building and packaging
subversion and pkglint and their many dependencies.
I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I
have used IGNORE_RECOMMENDED for a long time). I have been an active user
of IGNORE_RECOMMENDED since it was available.
As suggested, I removed the documentation sentences suggesting bumping for
"security" issues.
As discussed on tech-pkg.
I will commit to revbump, pkglint, pkg_install, createbuildlink separately.
Note that if you use wip, it will fail! I will commit to pkgsrc-wip
later (within day).
by Linux) in tests, use value of BUILDLINK_LDADD.dl.
Also use PTHREAD_LIBS instead of hard-coded -lpthread.
Include dlopen.buildlink3.mk and include pthread.buildlink3.mk.
This fixes problem on Linux and DragonFly where it was not
built with silc support.
Okayed by maintainer.
I tested this on Linux, DragonFly and NetBSD 2.0.2.
I also filed a bug report with gaim last week so they can fix the
configure.ac correctly.
"this release of gaim has a few security fixes which mirror
the effects of patch-ae patch-af patch-ag"
ChangeLog says:
version 1.5.0 (8/11/2005):
* Ability to set IRC quit message (Lalo Martins)
* OSCAR file transfers now work for 2 users behind the same NAT
(Jonathan Clark)
* Yahoo! buddy requests to add you to their buddy list now prompt for
authorization
* Added a /clear command for conversations/chats
* Fixed ICQ encoding for messages with offline ICQ users
(Ilya Konstantinov, SF Bug #1179452)
* Default Yahoo! chat roomlist locale to 'us'
file's sole purpose was to provide a dependency on pkg-config and set
some environment variables. Instead, turn pkg-config into a "tool"
in the tools framework, where the pkg-config wrapper automatically
adds PKG_CONFIG_LIBDIR to the environment before invoking the real
pkg-config.
For all package Makefiles that included pkg-config/buildlink3.mk, remove
that inclusion and replace it with USE_TOOLS+=pkg-config.
- An error in the handling of away messages can be exploited to cause
a heap-based buffer overflow by sending a specially crafted away message
to a user logged into AIM or ICQ.
Successful exploitation allows execution of arbitrary code.
- An error in the handling of file transfers can be exploited to crash
the application by attempting to upload a file with a non-UTF8 filename
to a user logged into AIM or ICQ.
Patches from RedHat.
"Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2
and other packages, allows remote attackers to cause a denial of service (bus
error) on certain architectures such as SPARC via an incoming message."
Bump PKGREVISION, patch from Gaim CVS.
changes since 1.3.1:
* Fix system log start times for some protocols
* SILC compiles with newer SILC toolkit versions (Pekka Riikonen)
* Fixed a bug where buddy icon cache files were left in the icon
cache directory after they were no longer in use.
* Attempt to detect the file type of a buddy icon when saving.
* Additional Yahoo! boot protection (Peter Lawler)
* A few Yahoo! memory leaks plugged (Peter Lawler)
* Fixed handling of the new Yahoo! profile page. (Joshua Honeycutt,
Peter Lawler)
* Fixed localized Yahoo! room lists. Please refer to the Yahoo!
section of the Gaim FAQ for details. (Peter Lawler)
* Enabled sending files to ICQ users using ICQ 5.02 and newer
(Jonathan Clark)
Changes:
- security fixes for DoS issues:
http://gaim.sourceforge.net/security/index.php?id=18http://gaim.sourceforge.net/security/index.php?id=19
- Fix Yahoo! privacy bug
- Fix Jabber Get Info crash on busted servers
- The file transfer details section now also displays the full
path to the local file sent/received.
- Yahoo! has the following new "/" commands: /join, /buzz
- Updated our gaim.desktop file, thanks to all our terrific
- translators for sending in translations of the changes
- Improvements to how Gaim handles new message notification
Several changes are involved since they are all interrelated. These
changes affect about 1000 files.
The first major change is rewriting bsd.builtin.mk as well as all of
the builtin.mk files to follow the new example in bsd.builtin.mk.
The loop to include all of the builtin.mk files needed by the package
is moved from bsd.builtin.mk and into bsd.buildlink3.mk. bsd.builtin.mk
is now included by each of the individual builtin.mk files and provides
some common logic for all of the builtin.mk files. Currently, this
includes the computation for whether the native or pkgsrc version of
the package is preferred. This causes USE_BUILTIN.* to be correctly
set when one builtin.mk file includes another.
The second major change is teach the builtin.mk files to consider
files under ${LOCALBASE} to be from pkgsrc-controlled packages. Most
of the builtin.mk files test for the presence of built-in software by
checking for the existence of certain files, e.g. <pthread.h>, and we
now assume that if that file is under ${LOCALBASE}, then it must be
from pkgsrc. This modification is a nod toward LOCALBASE=/usr. The
exceptions to this new check are the X11 distribution packages, which
are handled specially as noted below.
The third major change is providing builtin.mk and version.mk files
for each of the X11 distribution packages in pkgsrc. The builtin.mk
file can detect whether the native X11 distribution is the same as
the one provided by pkgsrc, and the version.mk file computes the
version of the X11 distribution package, whether it's built-in or not.
The fourth major change is that the buildlink3.mk files for X11 packages
that install parts which are part of X11 distribution packages, e.g.
Xpm, Xcursor, etc., now use imake to query the X11 distribution for
whether the software is already provided by the X11 distribution.
This is more accurate than grepping for a symbol name in the imake
config files. Using imake required sprinkling various builtin-imake.mk
helper files into pkgsrc directories. These files are used as input
to imake since imake can't use stdin for that purpose.
The fifth major change is in how packages note that they use X11.
Instead of setting USE_X11, package Makefiles should now include
x11.buildlink3.mk instead. This causes the X11 package buildlink3
and builtin logic to be executed at the correct place for buildlink3.mk
and builtin.mk files that previously set USE_X11, and fixes packages
that relied on buildlink3.mk files to implicitly note that X11 is
needed. Package buildlink3.mk should also include x11.buildlink3.mk
when linking against the package libraries requires also linking
against the X11 libraries. Where it was obvious, redundant inclusions
of x11.buildlink3.mk have been removed.
Changes:
- Fixes for two remotely exploitable crash bugs. See
http://gaim.sourceforge.net/security/ for more information.
- Removed parts of the font selection dialog that were not respected
- Fix being invited to a multi user chat on MSN
- Multiple SILC accounts should work now (Pekka Riikonen)
- Fix times on jabber chat backlogs
- Fix gevolution plugin to compile with e-d-s 1.0 or 1.2
- Fix gevolution plugin to remember buddy name when someone added you
and you then add them
- Formatting in jabber chats works
- Fix to prevent MSN disconnecting if you change status while
- connecting
- Change to correctly handle adding jabber buddies on ejabberd servers
Mostly from MAINTAINER via PR pkg/30204
Security fixes for three DoS vulnerabilities:
Remote DoS on receiving malformed HTML
Remote DoS on receiving certain messages over IRC
Jabber remote crash
Changes:
- URL escaping now works with UTF-8 text. This may break some old
log files.
- Revert to XOR auth for ICQ as the md5 is not fully functional
- Fix bug with going away while in a jabber chat
- MSN bug fixes (Felipe Contreras)
- Escape things properly in IRC
From MAINTAINER via PR pkg/29888
Patch provided by Matthew Luckie (maintainer) in PR pkg/29752.
* Yahoo file receiving and buddy icon receiving work again.
* Limit animated buddy icon frame rates to 10 frames per second (Nathan Conrad)
* Fix a bug where portions of your account configuration would fail to be
read correctly if you set a proxy user name or password containing invalid
XML characters such as < and > (Bastien Durel)
* Yahoo! privacy improvements (Bleeter)
under NetBSD 1.6 (gaim hanging during MSN connection). Bump revision to 1.
No objections in tech-pkg@ and got positive comments from tv@ and maintainer.
Closes PR pkg/28690 by chemical-al at suomi24.fi.
* Fixed a bug where Yahoo! would lose messages (and any other packet really).
* Correctly show the time when incoming Gadu-Gadu messages were sent
(Carl-Daniel Hailfinger).
* Fixed crashes with glib 2.6.
* Fixed MSN crash when conversations time out after the conversation window
was closed.
* Fixed an html parsing bug, CAN-2005-0208.
Luke: Yet another bug fix release, many thanks to everyone who has
helped to make gaim more stable!
Stu: I fixed too many Yahoo HTTP proxy bugs, I should just go and
write some core HTTP support that works better. A good all round
bug fix release otherwise.
Luke: Another Bug fix release. This one featuring a fix to the HTTP
Method for MSN users and other MSN fixes. A big thanks to Stu and
Felipe Contreras for those. Stu also spent a long time in valgrind
and so this brings you a Gaim release with fewer memory leaks. This
release is on time primarily because I want to see the MSN fixes
make it into Debian and Fedora before freezes. Expect further bug
fix only releases to come at longer intervals, at Mark's request.
Daniel: This is my first NEWS! (YaY) I didn't really do too much for
this release. There are a few bugfixes, mostly wingaim stuff. Oh, and
I like the new XP System Tray icons.
Sean: I'm down here today. I haven't really been paying too much
attention to these boring bugfix releases, but I'd like to thank
David and welcome him to the team. I'd also like to thank Steven
and Nathan from Silverorange who redid the webpage.
Tim: Another bug fix release. I didn't really fix any bugs, so
I didn't exactly do much for this one. The autopackage will now
work with mozilla-nss, if anyone has that, and not gnutls11. (It
works with either gnutls11 or mozilla-nss, but not gnutls10)
I started working on Gaim-vv again though, and I merged someone's
custom msn smiley patch into the 2.0.0 tree, so expect good things
whenever that's released (no, don't try it now, you won't like it).
Oh and welcome to the team Daniel. Of course, he was already on my
Gaim-vv team.
Stu: Welcome Daniel! you've done some good stuff already. Felipe did some
good work on MSN yet again, so you can all use the HTTP method now. I
didn't do all that much, other than let valgrind tell me what to fix, and
a couple of easy bug fixes from the bug tracker. Hopefully Ethan will get
well soon, so he can get back to merging patches and fixing things.
Nathan: I think I made some Jabber fixes, at least one of which is
ChangeLog'd. I will continue to make empty promises about new features,
especially for 2.0.0. Until then, welcome Daniel!
* Allow SILC authentication via public key if your key is password
protected (Michele Baldessari)
* More MSN bug fixes (Felipe Contreras)
* Drag-and-drop to conversation window file transfers work again
* Disable the delete button on pounces that aren't saved yet anyway
(Kevin Stange)
New Features:
* Binary relocable. Gaim will find its files even if it's installed
in a location other than the --prefix it was ./configured with.
Pass --disable-binreloc to ./configure to disable.
* IRC now has fallback encodings, and tries harder to display
something useful during an encoding error.
* New MSN protocol icon (Felipe Contreras)
Bug Fixes:
* Fix some leaks (Miah Gregory, Felipe Contreras)
* Fix crashes when removing buddies in certain situations (Andrew Hart)
* Eliminate MSN switchboard errors (Felipe Contreras)
* Fix MSN buddy icon syncronization (Felipe Contreras)
* Correctly display file transfer dialogs for filenames containing &, < or >
* Correctly display MSN authorization dialogs for friendly names containing
&, < or >
* Properly align the right-click docklet menu with the docklet icon in
*nix.
* Fix a crash if the MSN buddy list is not available
* Fix a bug in the request api (Gary Kramlich)
