Commit graph

218649 commits

Author SHA1 Message Date
asau
24582c1dd7 Add settings to make the package build on FreeBSD 10. 2014-06-27 22:56:08 +00:00
drochner
9f9fdf801a add patch from 1.2.7 to fix recent integer overflow, bump PKGREV 2014-06-27 17:58:09 +00:00
drochner
d874aa89ae add patch from 1.2.7 to fix recent integer overflow, bump PKGREV
(update to 1.2.7 will be done after the freeze)
2014-06-27 17:27:39 +00:00
drochner
6ff98b280b add patch from ffmpeg to fix the recent LZO integer overflow
bump PKGREV
2014-06-27 15:58:44 +00:00
ryoon
ba9ae3b40c python is used during build process.
From richard@.
2014-06-27 14:23:20 +00:00
ryoon
241844c4ac Updated devel/libvolume_id to 0.81.1nb1 2014-06-27 14:09:29 +00:00
ryoon
50bc00a7e1 Really bump PKGREVISION 2014-06-27 14:08:51 +00:00
ryoon
f24c505ce4 Fix PR pkg/48934, and bump PKGREVISION
Fix broken binary under NetBSD 5, and change OpenBSD case.
O.k. by wiz@.
2014-06-27 14:07:49 +00:00
jperkin
d23787ace2 Explicitly disable HAVE_7REGS on SunOS, it enables certain optimisations
which do not compile.
2014-06-27 12:56:16 +00:00
jperkin
214043261a Disable MMX sections on SunOS. 2014-06-27 12:17:22 +00:00
taca
993a38954b Note update of lang/php55 package to 5.5.14. 2014-06-27 11:34:57 +00:00
taca
f94488369d Update php55 to 5.5.14 which includes several security fixes.
26 Jun 2014, PHP 5.5.14

- Core:
  . Fixed BC break introduced by patch for bug #67072. (Anatol, Stas)
  . Fixed bug #66622 (Closures do not correctly capture the late bound class
    (static::) in some cases). (Levi Morrison)
  . Fixed bug #67390 (insecure temporary file use in the configure script).
    (CVE-2014-3981) (Remi)
  . Fixed bug #67399 (putenv with empty variable may lead to crash). (Stas)
  . Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability).
    (Stefan Esser)

- CLI server:
  . Fixed Bug #67406 (built-in web-server segfaults on startup). (Remi)

- Date:
  . Fixed bug #67308 (Serialize of DateTime truncates fractions of second).
    (Adam)
  . Fixed regression in fix for bug #67118 (constructor can't be called twice).
    (Remi)

- Fileinfo:
  . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary check).
    (CVE-2014-0207)
  . Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal
    string size). (CVE-2014-3478) (Francisco Alonso, Jan Kaluza, Remi)
  . Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary
    check). (CVE-2014-3479) (Francisco Alonso, Jan Kaluza, Remi)
  . Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check).
    (CVE-2014-3480) (Francisco Alonso, Jan Kaluza, Remi)
  . Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary
    check). (CVE-2014-3487) (Francisco Alonso, Jan Kaluza, Remi)

- Intl:
  . Fixed bug #67349 (Locale::parseLocale Double Free). (Stas)
  . Fixed bug #67397 (Buffer overflow in locale_get_display_name and
    uloc_getDisplayName (libicu 4.8.1)). (Stas)

- Network:
  . Fixed bug #67432 (Fix potential segfault in dns_get_record()).
    (CVE-2014-4049). (Sara)

- OPCache:
  . Fixed issue #183 (TMP_VAR is not only used once). (Dmitry, Laruence)

- OpenSSL:
  . Fixed bug #65698 (certificates validity parsing does not work past 2050).
    (Paul Oehler)
  . Fixed bug #66636 (openssl_x509_parse warning with V_ASN1_GENERALIZEDTIME).
    (Paul Oehler)

- PDO-ODBC:
  . Fixed bug #50444 (PDO-ODBC changes for 64-bit).

- SOAP:
  . Implemented FR #49898 (Add SoapClient::__getCookies()). (Boro Sitnikovski)

- SPL:
  . Fixed bug #66127 (Segmentation fault with ArrayObject unset). (Stas)
  . Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence)
  . Fixed bug #67360 (Missing element after ArrayObject::getIterator). (Adam)
  . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
    Confusion). (CVE-2014-3515) (Stefan Esser)

  . Fixed bug #67118 (DateTime constructor crash with invalid data). (Anatol)
  . Fixed bug #67251 (date_parse_from_format out-of-bounds read). (Stas)
  . Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read). (Stas)

- DOM:
  . Fixed bug #67081 (DOMDocumentType->internalSubset returns entire DOCTYPE tag,
    not only the subset). (Anatol)

- Fileinfo:
  . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol)
  . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS) (CVE-2014-0238).
  . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in
    performance degradation) (CVE-2014-0237).

- FPM:
  . Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor).
    (Julio Pintos)

- GD:
  . Fixed bug #67248 (imageaffinematrixget missing check of parameters). (Stas)

- PCRE:
  . Fixed bug #67238 (Ungreedy and min/max quantifier bug, applied patch
    from the upstream). (Anatol)

- Phar:
  . Fix bug #64498 ($phar->buildFromDirectory can't compress file with an accent
    in its name). (PR #588)
2014-06-27 11:34:19 +00:00
taca
ec5c4259ab Note update of lang/php54 package to 5.4.30. 2014-06-27 11:32:42 +00:00
taca
b00909cbca Update php54 to 5.4.30 which includes several security fixes.
26 Jun 2014, PHP 5.4.30

- Core:
  . Fixed BC break introduced by patch for bug #67072. (Anatol, Stas)
  . Fixed bug #66622 (Closures do not correctly capture the late bound class
    (static::) in some cases). (Levi Morrison)
  . Fixed bug #67390 (insecure temporary file use in the configure script).
    (CVE-2014-3981) (Remi)
  . Fixed bug #67399 (putenv with empty variable may lead to crash). (Stas)
  . Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability).
    (Stefan Esser)

- CLI server:
  . Fixed Bug #67406 (built-in web-server segfaults on startup). (Remi)

- Date:
  . Fixed bug #67308 (Serialize of DateTime truncates fractions of second).
    (Adam)
  . Fixed regression in fix for bug #67118 (constructor can't be called twice).
    (Remi)

- Fileinfo:
  . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary
    check). (CVE-2014-0207)
  . Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal
    string size). (CVE-2014-3478) (Francisco Alonso, Jan Kaluza, Remi)
  . Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary
    check). (CVE-2014-3479) (Francisco Alonso, Jan Kaluza, Remi)
  . Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check).
    (CVE-2014-3480) (Francisco Alonso, Jan Kaluza, Remi)
  . Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary
    check). (CVE-2014-3487) (Francisco Alonso, Jan Kaluza, Remi)

- Intl:
  . Fixed bug #67349 (Locale::parseLocale Double Free). (Stas)
  . Fixed bug #67397 (Buffer overflow in locale_get_display_name and
    uloc_getDisplayName (libicu 4.8.1)). (Stas)

- Network:
  . Fixed bug #67432 (Fix potential segfault in dns_get_record()).
    (CVE-2014-4049). (Sara)

- OpenSSL:
  . Fixed bug #65698 (certificates validity parsing does not work past 2050).
    (Paul Oehler)
  . Fixed bug #66636 (openssl_x509_parse warning with V_ASN1_GENERALIZEDTIME).
    (Paul Oehler)

- SOAP:
  . Implemented FR #49898 (Add SoapClient::__getCookies()). (Boro Sitnikovski)

- SPL:
  . Fixed bug #66127 (Segmentation fault with ArrayObject unset). (Stas)
  . Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence)
  . Fixed bug #67360 (Missing element after ArrayObject::getIterator). (Adam)
  . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
    Confusion) (CVE-2014-3515). (Stefan Esser)
2014-06-27 11:31:20 +00:00
dholland
f0c1b78a85 Recognize more Perl versions. 2014-06-27 06:51:22 +00:00
schmonz
003fd82448 Updated x11/p5-Alien-wxWidgets to 0.60nb15 2014-06-27 03:29:15 +00:00
schmonz
3c1f83cf57 Apply patch from RT to force intended precedence. Add missing
dependency on Module::Pluggable. Tests pass, and with these changes
p5-Wx builds again on NetBSD. Bump PKGREVISION.
2014-06-27 03:29:03 +00:00
schmonz
49d19e9001 Fix installation on Darwin with the default PKG_OPTIONS.
Background: On systems with CoreText (i.e., Darwin), pango
unconditionally links with it and installs certain libraries; this
is already handled in PLIST.

Problem: On systems where cairo has been built with the "quartz"
option, pango installs an additional header file.

Fix: Given that the "quartz" option is off by default, and assuming
that users who enable it likely do so globally in PKG_DEFAULT_OPTIONS,
add a nominal "quartz" option to pango that conditionalizes whether
to expect this additional header file.

"Sounds good" from jperkin@.

Tested on:

* Mac OS X 10.9.3, with and without PKG_DEFAULT_OPTIONS+=quartz
  (from cairo on up the dependency chain)
* NetBSD/amd64 6.1.4, with X sets and the default options
2014-06-27 00:41:47 +00:00
asau
a04affff25 Stop using "pax -rw -pe", it doesn't work. Use "-pp" instead. 2014-06-27 00:25:20 +00:00
asau
854311e2c7 Close the string literal. 2014-06-27 00:07:27 +00:00
rodent
7b3f3a27aa Updated databases/percona-toolkit to 2.2.8 2014-06-27 00:00:47 +00:00
rodent
c6bfc74398 v2.2.8 released 2014-05-30
* Removed pt-agent
  * Added pt-slave-restart GTID support
  * Added pt-table-checksum --plugin
  * Fixed bug 1304062: --ignore-tables does not work correctly
  * Fixed bug 1295667: pt-deadlock-logger logs incorrect ts
  * Fixed bug 1254233: pt-mysql-summary blank InnoDB section for 5.6
  * Fixed bug 1286250: pt-online-schema-change requests password twice
  * Fixed bug  965553: pt-query-digest dosn't fingerprint true/false literals correctly
  * Fixed bug  290911: pt-show-grant --ask-pass prints "Enter password" to STDOUT

v2.2.7 released 2014-02-20

  * Fixed bug 1279502: --version-check behaves like spyware (CVE 2014-2029)
2014-06-27 00:00:34 +00:00
asau
668b04eac3 Don't build bundled implementation of "mktime" on NetBSD.
This makes the package build on 32-bit NetBSD.
Patch is taken from devel/blame that carries the same "mktime" implementation.
2014-06-26 22:46:56 +00:00
asau
29531d9b03 <stdint.h> is needed to make it build on FreeBSD. 2014-06-26 20:36:53 +00:00
asau
65d4db7fc7 FreeBSD 10 is not FreeBSD 1. 2014-06-26 20:34:02 +00:00
asau
13af9151a3 FreeBSD's unzip doesn't handle the distfile.
This fixes the build on FreeBSD 10.
2014-06-26 20:32:25 +00:00
asau
f120992044 FreeBSD doesn't have "alloca.h".
This fixes the build on FreeBSD 10.
2014-06-26 20:31:03 +00:00
asau
65a7f4656c FreeBSD doesn't have libmalloc.
This fixes the build on FreeBSD 10.
2014-06-26 20:26:39 +00:00
asau
205c0d4033 FreeBSD 10 lacks "versionsort" too. 2014-06-26 20:23:14 +00:00
asau
dbcb629774 Define "__u32" and "__u64" for FreeBSD to make the package build on FreeBSD 10. 2014-06-26 20:18:11 +00:00
asau
16955cd12e No "ulong" type on FreeBSD 10. 2014-06-26 20:12:43 +00:00
asau
876a2d66ab Create more symbolic links to fix build on FreeBSD 10. 2014-06-26 20:10:38 +00:00
asau
a2541a5ec3 Treat FreeBSD as NetBSD, it uses NetBSD's libexecinfo.
This fixes the build on FreeBSD 10.
2014-06-26 20:08:53 +00:00
wiz
5017b2efa9 Updated net/iodine to 0.7.0 2014-06-26 18:54:18 +00:00
wiz
9257c54713 Update to 0.7.0, fixing a security issue.
2014-06-16: 0.7.0 "Kryoptonite"
	- Partial IPv6 support (#107)
	   Client can connect to iodined through an relaying IPv6
	   nameserver. Server only supports IPv4 for now.
	   Traffic inside tunnel is IPv4.
	- Add socket activation for systemd, by Michael Scherer.
	- Add automated lookup of external ip (via -n auto).
	- Bugfix for OS X (Can't assign requested address)
	- Fix DNS tunneling bug caused by uninitialized variable, #94
	- Handle spaces when entering password interactively, fixes #93.
		Patch by Hagar.
	- Add -R option to set OpenBSD routing domain for the DNS socket.
		Patch by laurent at gouloum fr, fixes #95.
	- Add android patches and makefile, from Marcel Bokhorst, fixes #105.
	- Added missing break in iodine.c, by Pavel Pergamenshchik, #108.
	- A number of minor patches from Frank Denis, Gregor Herrmann and
		Barak A. Pearlmutter.
	- Testcase compilation fixes for OS X and FreeBSD
	- Do not let sockets be inherited by sub-processes, fixes #99.
	- Add unspecified RR type (called PRIVATE; id 65399, in private use
		range). For servers with RFC3597 support. Fixes #97.
	- Fix authentication bypass vulnerability; found by Oscar Reparaz.
2014-06-26 18:54:09 +00:00
jperkin
990c2b3a9a Use gmake on Darwin, bmake doesn't like the codesign / POSTLINK bits. 2014-06-26 15:59:31 +00:00
joerg
6d66604743 GC apache2-only module. 2014-06-26 11:09:51 +00:00
jperkin
0a612464c9 Limit BUILDLINK_API_DEPENDS to <1.7 to ensure the wrong cups doesn't get
pulled in, should fix bulk build failures seen with a number of packages.
2014-06-26 09:27:04 +00:00
jnemeth
b48402141f add back ap2-auth-external and ap2-chroot 2014-06-26 04:30:47 +00:00
wen
c961cf7b3c Update to 1.22.8
This is a security update and approved by wiz@.

Upstream changes:
Changes since 1.22.7
(bug 65839) SECURITY: Prevent external resources in SVG files.
(bug 66428) MimeMagic: Don't seek before BOF. This has weird side effects like only extracting the tail of the file partially or not at all.
2014-06-26 01:19:54 +00:00
rodent
cb930fe5cf Updated textproc/py-validators to 0.6.0 2014-06-26 01:19:20 +00:00
rodent
b35eb70e42 This version fixes an issue with other packages from the same upstream
provider regarding files being installed to ${PYSITELIB}/tests/. The
others have yet to be imported, but let's fix this now. From CHANGES.rst:

0.6.0 (2014-06-25)
^^^^^^^^^^^^^^^^^^

- Added new validator: slug
2014-06-26 01:19:04 +00:00
schmonz
200838eefa Updated devel/p5-Coro to 6.39 2014-06-25 22:31:05 +00:00
schmonz
2dd4d5a742 Update to 6.39. From the changelog:
- work around more incompatible changes in 5.20.
- check that perl slots actually have enough space to hold
  interpreter variables.
- untested port to perl 5.19 (64 bit tmps indices) (reported
  by Andreas König).
- croak when cancel is called without a thread context.
- *sigh*, removed leftover debugging code from debugging a
  perl bug, of all things.
- semaphores would not clear the destroy hook when interrupted
  by ->throw, causing segfaults or worse.
- ->throw on a thread waiting for a semaphore did not acquire
  the semaphore, but also didn't wake up other waiters,
  possibly causing a deadlock.
- "FATAL: $Coro::IDLE blocked itself" will now use Carp::confess
  to report a full stacktrace, which should help find out
  where the actual call is.
- "atomically" destroy data in slf_destroy, because it is
  the right thing to do, just in case.
- disable ecb.h libm dependency, to compile on ancient systems
  or under adverse conditions.
- do not crash when freeing padlists with holes (in 5.18).
- tentative SVt_BIND 5.19 port/fix.
- use a new algorithm to derive padlists for perl 5.18. The old
  one could lead to 0-pointer accesses inside perl (reported
  by Darin McBride).

Not a leaf, but this update should fix a handful of depending
packages, and at least one of those passes its tests against this
version.
2014-06-25 22:30:54 +00:00
schmonz
12e726e114 Updated devel/p5-ExtUtils-MakeMaker to 6.98 2014-06-25 22:13:52 +00:00
schmonz
3e2234be78 Update to 6.98, catching up to what's included in lang/perl5 (and
making this package installable again).

Dist fixes:
* Removed redundant File::Spec check from Makefile.PL

Bug fixes:
* Resolve another regression related to not recursing into distdirs
* Work-around v5.10.1 for the MIN_PERL_VERSION v-string handling
* Make MIN_PERL_VERSION handle v-strings properly
* Resolved a regression in MM_Unix.pm
  (https://github.com/Perl-Toolchain-Gang/ExtUtils-MakeMaker/issues/96)
* Libraries are not transitive on Android

Test fixes:
* Make meta tests more robust to changes in CPAN::Meta

Not a leaf, but this update should fix a handful of depending
packages.
2014-06-25 22:13:47 +00:00
wiz
14bf094af8 Updated pkgtools/pkglint to 4.144 2014-06-25 17:53:46 +00:00
wiz
4c13f8267d Add LIBTOOL_REQD. Bump version. 2014-06-25 17:51:55 +00:00
ryoon
4266cd1b0c Updated audio/pulseaudio to 5.0nb1 2014-06-25 15:27:08 +00:00
ryoon
4453d92d00 Bump PKGREVISION
Use /dev/audio instead of /dev/sound under NetBSD.
This change fixes unstable audio output.
O.k. by wiz@.
2014-06-25 15:26:40 +00:00