Commit graph

8416 commits

Author SHA1 Message Date
pho
3aadb59630 Use BROKEN_EXCEPT_ON_PLATFORM instead of ONLY_FOR_PLATFORM because it's merely broken on unlisted platforms, not inappropriate 2015-02-11 13:38:42 +00:00
pho
3075a19c62 Uploaded bootkits for NetBSD/amd64, FreeBSD/i386 and Darwin/ppc to LOCAL_PORTS
They derived from safe bootkits in wip/ghc. See my previous commit for
details.
2015-02-11 09:38:08 +00:00
pho
33d62cc145 Oops, I forgot to replace some of ${PKGNAME} with ${PKGNAME_NOREV} 2015-02-11 07:49:51 +00:00
pho
571687122f Preparing to upload some of bootkits to LOCAL_PORTS
Refactored bootstrap.mk with no semantic changes in this commit. I
will soon upload some of bootkits derived from wip/ghc to LOCAL_PORTS
but only for safe ones. Here's a note about safety:

* NetBSD/amd64, FreeBSD/i386, Darwin/ppc [SAFE]: These kits were built
  on my secured private machines under my exclusive control. I'm
  planning to upload them.

* Linux/amd64 [UNSAFE]: I built my kit for this one on a machine
  shared with my co-workers with root access. I won't upload it.

* NetBSD/i386 [UNSAFE]: I built my kit for this one on an Amazon EC2
  instance (although it's private). I won't upload it either.

For other developers, please do not upload any bootkits derived from
unsafe ones mentioned above, because they have some degree of
possibility of being compromised. And please keep in mind that
machines shared with someone or on a cloud hosting service should be
avoided for building bootkits.
2015-02-11 07:47:16 +00:00
tnn
672e032e0c Let the build find intermediate libs when it wants to run intermediate rmic. 2015-02-10 19:31:53 +00:00
tnn
d2b649cd49 Fix error observed in SmartOS bulk build.
Note: PLIST.SunOS should list only files unique to SunOS, not duplicates.
XXX why does it bundle libfreetype.so.6? looks wrong.
2015-02-10 14:57:35 +00:00
tnn
ecf4da4b16 Really fix previous. Now fontconfig loads and the jconsole UI comes up.
Bump PKGREVISION.
2015-02-10 11:44:32 +00:00
tnn
1548f651d1 fix mistake in patch porting 2015-02-10 11:02:16 +00:00
tnn
4c1c1d9e23 try to fix broken freetype detection in some cases 2015-02-10 08:20:27 +00:00
tnn
ba20782665 drop stray X11 runtime dependencies from headless build 2015-02-10 00:26:49 +00:00
tnn
39a9ca1cbd Clean up +UseSerialGC handling and ensure it is set for the entire build.
(has anyone analyzed the concurrent GC memory allocation problem?)
Bump PKGREVISION for this and previous changes.
2015-02-09 00:42:17 +00:00
tnn
e884b5bcba Optionalize debug, X11 and ZeroVM similar to lang/openjdk8 + minor cleanups 2015-02-08 23:40:09 +00:00
tnn
6f2d5b62b8 Infrastructure glue for openjdk8 2015-02-08 17:48:33 +00:00
tnn
531beaf3cf fix hilarious typo 2015-02-08 17:20:54 +00:00
tnn
8cd8f8ca94 FreeBSD/clang build fix 2015-02-08 17:19:59 +00:00
tnn
7114c3a26d Added lang/openjdk8 2015-02-08 08:42:31 +00:00
tnn
c750282763 Import openjdk8-1.8.31 as lang/openjdk8.
Open-source implementation of the Java Platform, Standard Edition.
2015-02-08 08:41:25 +00:00
taca
18e2771321 Update ruby-execjs to 2.3.0.
Changes are not available, it looks various fixes.
2015-02-08 07:58:05 +00:00
tnn
ce9caed38a g/c comment, no longer applies 2015-02-08 07:57:55 +00:00
tnn
2acd3ad6bc Fix inconsistency between _WRAP_EXTRA_ARGS and CWRAPPERS_APPEND 2015-02-08 07:32:15 +00:00
tnn
2d6ff54b74 Don't need to set -DDEFAULT_LIBPATH on compiler command line when it's
handled in a patch already.
2015-02-08 05:55:29 +00:00
tnn
2af6b40e01 netbsd -> ${LOWER_OPSYS} 2015-02-08 04:13:23 +00:00
tnn
c0b8e75c6b No reason to keep netbsd-4 hacks when we don't have it in ONLY_FOR_PLATFORM 2015-02-07 22:35:24 +00:00
joerg
0159b3daaa Provide (invalid) value for BOOT_ARCHIVE for unknown architectures to
avoid warnings in the rest of the while.
2015-02-07 20:08:30 +00:00
pho
87549afed2 Bootkit for FreeBSD needs to use pkgsrc libiconv 2015-02-07 09:35:55 +00:00
pho
3872d9873e ${MAKE} bootstrap: Build bootkits with -static-libgcc
We don't want our bootkits to have a run-time dependency on libgcc. In
fact GHC's implementation of Haskell exception handling does not
depend on libgcc's facilities so it is attractive to do the same for
"normal" build... but we can't. This is because Haskell programs may
call C functions via FFI, and those C functions may call C++ functions
in turn, possibly in a different shared library.

But on some platforms, gcc automagically inserts a dependency on a
shared libgcc when -lpthread is given, which is seemingly unavoidable.
2015-02-06 06:57:13 +00:00
pho
4717122dd9 patches/patch-rts_ghc.mk: dtrace hack is no longer needed
The problem only occurs when $(WhatGccIsCalled) is an absolute path to
the "real" gcc (e.g. "/usr/bin/gcc"), which happens if we run
${WRKSRC}/configure with an option something like
"--with-gcc=/usr/bin/gcc". As long as we use "--with-gcc" with a
command name (i.e. ${CC}, not ${CCPATH}), everything works fine
without any problems.

This is because dtrace(1) executes cpp in a rather weird way: it calls
execvp("/usr/bin/gcc", argv) with argv set to {"gcc", "-E", "-xc",
...}, not {"/usr/bin/gcc", "-E", "-xc", ...}.

When GCC is called that way, it needs to find platform-specific
subprograms by walking through ${PATH}. And if it sees an executable
named "gcc" which in fact isn't actually gcc, it gets confused and
dies with an error:

  % cat dtrace-emu.c
  #include <unistd.h>
  #include <stdio.h>
  int main() {
      char *argv[] = {"gcc", "-E", NULL};
      execvp("/usr/bin/gcc", argv);
      return 0;
  }
  % gcc dtrace-emu.c -o /tmp/gcc
  % /tmp/gcc
  powerpc-apple-darwin9-gcc-4.0.1: no input files
  % PATH=/tmp/gcc /tmp/gcc
  gcc: installation problem, cannot exec '/tmp/powerpc-apple-darwin9-gcc-4.0.1':
  No such file or directory

And even if the problem should really be addressed, it should be done
in the wrapper framework because dtrace(1) is actually a part of
compiler toolchain.
2015-02-06 01:24:48 +00:00
pho
cc42e98e8c patches/patch-rts_ghc.mk: Fix build failure on Darwin
See the comment for details.
2015-02-05 17:45:20 +00:00
dholland
02a2f11169 fix fatal typo 2015-02-05 17:32:20 +00:00
pho
718cd4346a Add upstream Trac URL to patches/patch-rts_StgCRun.c 2015-02-05 00:59:10 +00:00
pho
cd1149ed44 Add comments 2015-02-05 00:38:14 +00:00
pho
989f8ee189 ${MAKE} bootstrap: Be more verbose about what we've built
The "bootstrap" target now prints a message about run-time
dependencies of the bootkit you've just built, something like:

==========================================================================
Done creating ghc-7.6.3-boot-x86_64-unknown-netbsd.tar.xz
  in /usr/pkgsrc/lang/ghc7/work

Now you can copy it into /usr/pkgsrc/distfiles/ to use it as your
bootstrap kit. You may want to take a backup in case "lintpkgsrc -r"
removes it.

Your bootstrap kit has the following run-time dependencies:
  * curses:  native (version/variant unknown)
  * iconv:   native (version/variant unknown)
==========================================================================
2015-02-05 00:26:34 +00:00
tnn
1228c689bc Upstream did distfile switcheroo. Update checksum to match the one listed
on https://golang.org/dl/. Diff to previous rel revealed nothing weird.
2015-02-04 22:57:46 +00:00
jperkin
21e83cae18 Support the override libgcc specs for the cwrappers case. 2015-02-04 14:16:23 +00:00
pho
c0e976aa58 lang/ghc7 no longer requires ${PREFIX}/lib to be put into /etc/ld-elf.so.conf
The installed GHC has already been working without the ld hack. These
changes should only affect the package build so revbump isn't needed.

Makefile (CONFIGURE_ENV):
  Refactored with no semantic changes.

Makefile (post-patch):
  ${WRKSRC}/libraries/base/configure.ac is patched too.

Makefile (CHECK_SHLIBS_SUPPORTED):
  Removed the variable as the package now supports it.

Makefile (CHECK_SHLIBS_SKIP):
  Added to skip checks for dynamic Haskell libraries. See the comment
  for details.

bootstrap.mk (pre-configure):
  Use ${CONFIGURE_ENV} when configuring the stage-0 compiler. See the
  comment for details.

patches/patch-libraries_base_configure.ac:
  Added to prevent {CPP,LD}FLAGS from being clobbered. See the comment
  for details. I will send the patch to the upstream in a few days or
  weeks (or even months, depending on my busyness).
2015-02-04 06:53:18 +00:00
tnn
ecec529b17 Replace the old cacert bundle from 2009 with security/mozilla-rootcerts.
Change the keystore password to the one used by official binary releases.
Bump PKGREVISION.
2015-02-03 16:50:30 +00:00
taca
9405130b39 Update ruby-execjs to 2.2.2.
Changes are not available.
2015-02-03 14:41:38 +00:00
taca
eae53b74ed Update ruby-coffee-script to 2.3.0.
Changes are not available.
2015-02-03 14:36:36 +00:00
taca
e6c9017116 Update ruby-coffee-script-source to 1.9.0.
Changes are not available.
2015-02-03 14:36:01 +00:00
pho
ffc0db8654 Fix build failure that occurs when pkgsrc devel/ncurses is being used
* Formerly we were passing
  "--with-curses-includes=${BUILDLINK_PREFIX.curses}/include" to
  "${WRKSRC}/libraries/terminfo/configure". This is problematic
  because pkgsrc devel/ncurses installs headers into
  ${PREFIX}/include/ncurses, not ${PREFIX}/include, while ghc-cabal
  expects "ncurses.h" and "term.h" in ${PREFIX}/include (because we
  said so) and then it emits an error. The fix is to use
  ${BUILDLINK_INCDIRS.curses} instead of "include". Note that this
  requires my recent changes to ../../mk/curses.buildlink3.mk (r1.21)

* The "bootstrap" target now uses buildlink wrapper not to pick up
  random libraries which happened to be in "${PREFIX}/lib". Bootstrap
  binary kits should be linked with a predictable set of libraries.

* The "bootstrap" target now automatically runs through the wrapper
  phase. You no longer have to run "${MAKE} patch" manually.
2015-02-03 02:32:05 +00:00
obache
eee541e27a Revert
Add support of zend modules.
proposed/discussed is required for such changes, and no package is using.
2015-02-02 12:26:20 +00:00
obache
5f2ef28387 Revert
Add experimental auto extension registory support with PHP_AUTO_REGISTER_EXT=yes
 (=no by default).
proposed/discussed was happened, but remain inconclusive and not approved.
2015-02-02 12:14:56 +00:00
sevan
fcbd010558 As per previous PHP release, apply the necessary flags to sqlite so that it
builds correctly on Darwin prior to v9.

ok wiz@
2015-02-02 10:54:19 +00:00
obache
db941e9db9 Revert "sysconfdir must be same as base php package.",
proposed/discussed is required for such changes.
2015-02-01 11:28:24 +00:00
obache
b030d9a281 revert "Auto detect lua version from required package name.",
proposed/discussed is required for such changes.
2015-02-01 11:21:23 +00:00
abs
4e341b1432 Add in missing bootstrap distinfo. 2015-01-30 09:43:52 +00:00
joerg
0a82e486b0 Limit memory used by the Queens test program. 2015-01-29 21:29:32 +00:00
adam
5e7f3b076f Changes 3.5.1:
All backends have been changed to use the MC asm printer and support for the non MC one has been removed.
Clang can now successfully self-host itself on Linux/Sparc64 and on FreeBSD/Sparc64.
LLVM now assumes the assembler supports .loc for generating debug line numbers. The old support for printing the debug line info directly was only used by llc and has been removed.
All inline assembly is parsed by the integrated assembler when it is enabled. Previously this was only the case for object-file output. It is now the case for assembly output as well. The integrated assembler can be disabled with the -no-integrated-as option.
llvm-ar now handles IR files like regular object files. In particular, a regular symbol table is created for symbols defined in IR files, including those in file scope inline assembly.
LLVM now always uses cfi directives for producing most stack unwinding information.
The prefix for loop vectorizer hint metadata has been changed from llvm.vectorizer to llvm.loop.vectorize. In addition, llvm.vectorizer.unroll metadata has been renamed llvm.loop.interleave.count.
Some backends previously implemented Atomic NAND(x,y) as x & ~y. Now all backends implement it as ~(x & y), matching the semantics of GCC 4.4 and later.
2015-01-29 11:38:29 +00:00
fhajny
02cacf2fe5 Update nodejs to 0.10.36.
2015.01.26, Version 0.10.36 (Stable)
* openssl: update to 1.0.1l
* v8: Fix debugger and strict mode regression (Julien Gilli)
* v8: don't busy loop in cpu profiler thread (Ben Noordhuis)
2015-01-29 08:44:44 +00:00
ryoon
c046b2c61b Update to 1.7.76
* Disable SCTP support under NetBSD.

Changelog:
From: http://www.oracle.com/technetwork/java/javase/7u76-relnotes-2389087.html

IANA Data 2014j

JDK 7u76 contains IANA time zone data version 2014j. For more information, refer to Timezone Data Versions in the JRE Software.

New Features and Changes

SSLv3 is disabled by default

Starting with JDK 7u75 release, the SSLv3 protocol (Secure Socket Layer) has been deactivated and is not available by default. See the java.security.Security property jdk.tls.disabledAlgorithms in <JRE_HOME>/lib/security/java.security file.

If SSLv3 is absolutely required, the protocol can be reactivated by removing "SSLv3" from the jdk.tls.disabledAlgorithms property in the java.security file or by dynamically setting this Security property to "true" before JSSE is initialized.

It should be noted that SSLv3 is obsolete and should no longer be used.
Changes to Java Control Panel

Starting with 7u75 release, SSLv3 protocol is removed from Java Control Panel Advanced options.

If the user needs to use SSLv3 for applications, re-enable it manually as follows:

    Enable SSLv3 protocol on JRE level: as described in the previous section.
    Enable SSLv3 protocol on deploy level: edit the deployment.properties file and add the following:

    deployment.security.SSLv3=true
2015-01-27 12:31:06 +00:00
dbj
367155e8a0 manually set CMAKE's PYTHON_INCLUDE_DIR and PYTHON_EXECUTABLE to avoid
it finding the native python versions
2015-01-27 06:33:46 +00:00
dbj
d75e16317e Fix build issues on Darwin 2015-01-27 04:46:06 +00:00
jaapb
ec168fd2ad Added a patch that fixes signal handlers on i386. 2015-01-26 14:46:51 +00:00
taca
3256e3303b Drop RUBYGEMS_REQD. Since all ruby*-base package contains enough version
of rubygems except ruby18-base.
2015-01-25 16:09:16 +00:00
taca
8fe310f3e5 * Add definition for Ruby 2.2.0 (but still disabled.)
* Add RUBY_GEMS_PKGSRC_VERS and RUBY_RDOC_PKGSRC_VERS.
2015-01-25 16:03:38 +00:00
taca
5287f35006 Add http://cache.ruby-lang.org to MASTER_SITE_RUBY. 2015-01-25 15:58:29 +00:00
joerg
98a66edc18 Don't call local function strtoi. 2015-01-25 13:12:54 +00:00
taca
42d22f7ab8 Update php56 to 5.6.5.
22 Jan 2015, PHP 5.6.5

- Core:
  . Upgraded crypt_blowfish to version 1.3. (Leigh)
  . Fixed bug #60704 (unlink() bug with some files path).
  . Fixed bug #65419 (Inside trait, self::class != __CLASS__). (Julien)
  . Fixed bug #68536 (pack for 64bits integer is broken on bigendian). (Remi)
  . Fixed bug #55541 (errors spawn MessageBox, which blocks test automation).
    (Anatol)
  . Fixed bug #68297 (Application Popup provides too few information). (Anatol)
  . Fixed bug #65769 (localeconv() broken in TS builds). (Anatol)
  . Fixed bug #65230 (setting locale randomly broken). (Anatol)
  . Fixed bug #66764 (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR
    correctly). (Ferenc)
  . Fixed bug #68583 (Crash in timeout thread). (Anatol)
  . Fixed bug #65576 (Constructor from trait conflicts with inherited
    constructor). (dunglas at gmail dot com)
  . Fixed bug #68676 (Explicit Double Free). (Kalle)
  . Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
    (CVE-2015-0231) (Stefan Esser)

- CGI:
  . Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427)
    (Stas)

- CLI server:
  . Fixed bug #68745 (Invalid HTTP requests make web server segfault). (Adam)

- cURL:
  . Fixed bug #67643 (curl_multi_getcontent returns '' when
    CURLOPT_RETURNTRANSFER isn't set). (Jille Timmermans)

- Date:
  . Implemented FR #68268 (DatePeriod: Getter for start date, end date and
    interval). (Marc Bennewitz)

- EXIF:
  . Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232)
    (Stas)

- Fileinfo:
  . Fixed bug #68398 (msooxml matches too many archives). (Anatol)
  . Fixed bug #68665 (invalid free in libmagic). (Joshua Rogers, Anatol Belski)
  . Fixed bug #68671 (incorrect expression in libmagic).
    (Joshua Rogers, Anatol Belski)
  . Removed readelf.c and related code from libmagic sources
    (Remi, Anatol)
  . Fixed bug #68735 (fileinfo out-of-bounds memory access).
    (Anatol)

- FPM:
  . Fixed request #68526 (Implement POSIX Access Control List for UDS). (Remi)
  . Fixed bug #68751 (listen.allowed_clients is broken). (Remi)

- GD:
  . Fixed bug #68601 (buffer read overflow in gd_gif_in.c). (Jan Bee, Remi)
  . Fixed request #68656 (Report gd library version). (Remi)

- mbstring:
  . Fixed bug #68504 (--with-libmbfl configure option not present on Windows).
    (Ashesh Vashi)

- Opcache:
  . Fixed bug #68644 (strlen incorrect : mbstring + func_overload=2 +UTF-8
    + Opcache). (Laruence)
  . Fixed bug #67111 (Memory leak when using "continue 2" inside two foreach
    loops). (Nikita)

- OpenSSL:
  . Improved handling of OPENSSL_KEYTYPE_EC keys. (Dominic Luechinger)

- pcntl:
  . Fixed bug #60509 (pcntl_signal doesn't decrease ref-count of old handler
    when setting SIG_DFL). (Julien)

- PCRE:
  . Fixed bug #66679 (Alignment Bug in PCRE 8.34 upstream).
    (Rainer Jung, Anatol Belski)

- pgsql:
  . Fixed bug #68697 (lo_export return -1 on failure). (Ondřej Surý)

- PDO:
  . Fixed bug #68371 (PDO#getAttribute() cannot be called with platform-specifi
    attribute names). (Matteo)

- PDO_mysql:
  . Fixed bug #68424 (Add new PDO mysql connection attr to control multi
    statements option). (peter dot wolanin at acquia dot com)

- SPL:
  . Fixed bug #66405 (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME
    breaks the RecursiveIterator). (Paul Garvin)
  . Fixed bug #68479 (Added escape parameter to SplFileObject::fputcsv). (Salathe)

- SQLite:
  . Fixed bug #68120 (Update bundled libsqlite to 3.8.7.2). (Anatol)

- Streams:
  . Fixed bug #68532 (convert.base64-encode omits padding bytes).
    (blaesius at krumedia dot de)
2015-01-23 16:11:38 +00:00
taca
b019ab3429 Update php55 to 5.5.21.
22 Jan 2014, PHP 5.5.21

- Core:
  . Upgraded crypt_blowfish to version 1.3. (Leigh)
  . Fixed bug #60704 (unlink() bug with some files path).
  . Fixed bug #65419 (Inside trait, self::class != __CLASS__). (Julien)
  . Fixed bug #65576 (Constructor from trait conflicts with inherited
    constructor). (dunglas at gmail dot com)
  . Fixed bug #55541 (errors spawn MessageBox, which blocks test automation).
    (Anatol)
  . Fixed bug #68297 (Application Popup provides too few information). (Anatol)
  . Fixed bug #65769 (localeconv() broken in TS builds). (Anatol)
  . Fixed bug #65230 (setting locale randomly broken). (Anatol)
  . Fixed bug #66764 (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR
    correctly). (Ferenc)
  . Fixed bug #68583 (Crash in timeout thread). (Anatol)
  . Fixed bug #68594 (Use after free vulnerability in unserialize()).
    (CVE-2014-8142) (Stefan Esser)
  . Fixed bug #68676 (Explicit Double Free). (Kalle)
  . Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
    (CVE-2015-0231) (Stefan Esser)

- CGI:
  . Fixed bug #68618 (out of bounds read crashes php-cgi).(CVE-2014-9427)
    (Stas)

- CLI server:
  . Fixed bug #68745 (Invalid HTTP requests make web server segfault). (Adam)

- cURL:
  . Fixed bug #67643 (curl_multi_getcontent returns '' when
    CURLOPT_RETURNTRANSFER isn't set). (Jille Timmermans)

- EXIF:
  . Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232)
    (Stas)

- Fileinfo:
  . Fixed bug #68671 (incorrect expression in libmagic).
    (Joshua Rogers, Anatol Belski)
  . Removed readelf.c and related code from libmagic sources
    (Remi, Anatol)
  . Fixed bug #68735 (fileinfo out-of-bounds memory access).
    (Anatol)

- FPM:
  . Fixed bug #68751 (listen.allowed_clients is broken). (Remi)

- GD:
  . Fixed bug #68601 (buffer read overflow in gd_gif_in.c). (Jan Bee, Remi)

- Mbstring:
  . Fixed bug #68504 (--with-libmbfl configure option not present on Windows).
    (Ashesh Vashi)

- Mcrypt:
  . Fixed possible read after end of buffer and use after free. (Dmitry)

- Opcache:
  . Fixed bug #67111 (Memory leak when using "continue 2" inside two foreach
    loops). (Nikita)

- OpenSSL:
  . Fixed bug #55618 (use case-insensitive cert name matching). (Daniel Lowrey)

- Pcntl:
  . Fixed bug #60509 (pcntl_signal doesn't decrease ref-count of old handler
    when setting SIG_DFL). (Julien)

- PCRE:
  . Fixed bug #66679 (Alignment Bug in PCRE 8.34 upstream).
    (Rainer Jung, Anatol Belski)

- pgsql:
  . Fixed bug #68697 (lo_export return -1 on failure). (Ondřej Surý)

- PDO:
  . Fixed bug #68371 (PDO#getAttribute() cannot be called with platform-specific
    attribute names). (Matteo)

- PDO_mysql:
  . Fixed bug #68424 (Add new PDO mysql connection attr to control multi
    statements option). (peter dot wolanin at acquia dot com)

- SPL:
  . Fixed bug #66405 (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME
    breaks the RecursiveIterator). (Paul Garvin)
  . Fixed bug #65213 (cannot cast SplFileInfo to boolean) (Tjerk)
  . Fixed bug #68479 (Added escape parameter to SplFileObject::fputcsv). (Salathe)

- SQLite:
  . Fixed bug #68120 (Update bundled libsqlite to 3.8.7.2). (Anatol)

- Streams:
  . Fixed bug #68532 (convert.base64-encode omits padding bytes).
    (blaesius at krumedia dot de)
2015-01-23 16:10:34 +00:00
taca
f02c689193 Update to php54 to 5.4.37.
22 Jan 2015 PHP 5.4.37
- Core:
  . Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
    (CVE-2015-0231) (Stefan Esser)

- CGI:
  . Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427)
    (Stas)

- EXIF:
  . Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232) (Stas)

- Fileinfo:
  . Removed readelf.c and related code from libmagic sources
    (Remi, Anatol)
  . Fixed bug #68735 (fileinfo out-of-bounds memory access).
    (Anatol)

- OpenSSL:
  . Fixed bug #55618 (use case-insensitive cert name matching).
    (Daniel Lowrey)
2015-01-23 16:09:26 +00:00
joerg
b5c94e3a8c Explicitly export ANT_OPTS to make sure they are visible. 2015-01-23 15:43:45 +00:00
sevan
d1c8dac856 Remove the whitespace between $(LINKER_RPATH_FLAG) and the path. Otherwise the
flag may be misinterpreted by linker (e.g. Apple's ld)

Closes PR pkg/40028
Reviewed by wiz@
2015-01-22 11:56:31 +00:00
sevan
c3f77a8905 Like the other versions of Python available in our tree, do not trim the library
name on FreeBSD
Resolves packing issue which causes the package to fail
2015-01-22 11:09:18 +00:00
sevan
490da9ab62 Closes PR pkg/49548
Reviewed by benz@ dholland@
2015-01-22 01:22:48 +00:00
obache
8d548ad3ca recuesive bump from libarchive major update. 2015-01-21 09:12:41 +00:00
jaapb
1b39643375 Revbump associated with ocaml 4.02.1 2015-01-20 15:40:14 +00:00
jaapb
714f854d4d Revbump associated with update of lang/ocaml. 2015-01-20 14:24:34 +00:00
jaapb
1415aa2a24 This is an update of OCaml to 4.02.1. Changes are listed below. There is also
a new patch to include a -pkgsrc-runtime compilation option. This option is
needed to compile devel/pcre-ocaml due to buildlink shenanigans
(see http://mail-index.netbsd.org/pkgsrc-users/2014/12/18/msg020800.html )

Changes:
(Changes that can break existing programs are marked with a "*")

Standard library:
* Add optional argument ?limit to Arg.align.
- Bug in Makefile.nt: won't stop on error
- Improve MSVC build
- Configure doesn't detect features correctly on Haiku
- Non-exhaustive matching warning message for open types is confusing
- fix quadratic-time algorithm in Consistbl.extract.
- Add stack overflow handling for native code (OpenBSD i386 and amd64)
- broken semantics of %(%) when substitued by a box
- legacy support for %.10s
- better documentation of flag # in format strings
- Bytes and CamlinternalFormat missing from threads stdlib.cma
- -dsource omits parens for `List ((`String "A")::[]) in patterns
- __MODULE__ aborts the compiler if the module name cannot be inferred
- Debug section is sometimes not readable when using -pack
- Missing command line options for ocamldoc
- fix race condition when retrieving backtraces
- String.sub throws Invalid_argument("Bytes.sub")
- Fix ocamldebug module source lookup
- Inclusion of packs failing to run module initializers
- infinite loop in Mtype.remove_aliases
- compilation fails with Env.Error(_)
- -short-paths and signature inclusion errors
- Fatal error with recursive modules
- Recursive module containing alias causes Segmentation fault
- Some bugs in generative functors
- ocamldep support for "-open M"
- Code generation errors for ARM
- Improve Windows (MSVC and mingw) build
- ocamlbuild: add -bin-annot when using -pack
- Fatal error when tracing a function with abstract type
- ocamlbuild: add an -ocamlmklib option to change the ocamlmklib command
2015-01-20 14:12:25 +00:00
alnsn
58e1c640ff Add support for Lua 5.3. 2015-01-17 17:54:59 +00:00
alnsn
1cda75d123 Add lua53. 2015-01-17 17:52:17 +00:00
alnsn
80bae7f752 Initial import of Lua 5.3.0.
Lua is a powerful, light-weight programming language designed for
extending applications. Lua is also frequently used as a
general-purpose, stand-alone language.

Lua combines simple procedural syntax (similar to Pascal) with
powerful data description constructs based on associative arrays and
extensible semantics. Lua is dynamically typed, interpreted from
bytecodes, and has automatic memory management, making it ideal for
configuration, scripting, and rapid prototyping.

Lua is a language engine that you can embed into your application.
This means that, besides syntax and semantics, Lua has an API that
allows the application to exchange data with Lua programs and also to
extend Lua with C functions. In this sense, Lua can be regarded as a
language framework for building domain-specific languages.

Lua is implemented as a small library of C functions, written in ANSI
C, and compiles unmodified in all known platforms. The implementation
goals are simplicity, efficiency, portability, and low embedding cost.
The result is a fast language engine with small footprint, making it
ideal in embedded systems too.
2015-01-17 17:50:23 +00:00
bsiegert
07edc3aa73 Apply the necessary flags to sqlite so that php55 builds correctly on Darwin
prior to v9. From Sevan Janiyan in PR pkg/49527.
2015-01-17 14:56:50 +00:00
wiz
1c9d5ac401 Update to 1.4.1:
We've just released Go version 1.4.1, a minor point release.  This
release fixes bugs in linker and the log, runtime, and syscall
packages.
2015-01-16 11:27:03 +00:00
wiz
b19ccf34ed Fix build on SmartOS. From Nicolas Rosenvik in private mail. 2015-01-16 10:23:24 +00:00
wiz
9e2b1ab141 Update to 0.26.2:
Vala 0.26.2
===========

 * Bug fixes and binding updates.
2015-01-16 09:54:29 +00:00
taca
830c875fdf Fix typo, s/GEM_CLEANBUOLD_EXTENSIONS/GEM_CLEANBUILD_EXTENSIONS/. 2015-01-16 09:18:47 +00:00
wiz
d433eda9ba Remove unsupported configure argument.
From ISIHARA Takanori in PR 49572.
2015-01-15 16:44:33 +00:00
jperkin
e16ea7d0b3 Restore PLIST.java, fixes Darwin (and others) build. 2015-01-15 11:07:01 +00:00
jperkin
74d67c539b Add back missing ecj-4.5.jar 2015-01-14 10:36:17 +00:00
bsiegert
90b4a70bfb Add definition for GOTOOLDIR.
This is needed for the go-tools package.
2015-01-13 21:35:13 +00:00
bsiegert
5c2800a4d2 Make python33 and 34 build under Mac OS X by copying over compat hack from
python27. From J. Lewis Muir.

Note that the correct way to solve this is to do this in the Darwin
specific config files, but until that has landed, this at least fixes the
build.
2015-01-11 14:07:48 +00:00
rumko
44d94ef8c4 lang/openjdk7: make it work on FreeBSD 10.* x86_64
* -Wno-new-returns-null is not currently known to installed clang on fbsd, make it optional
* on fbsd, openjdk builds libjsoundalsa and libsctp, add them optionally to PLIST
* add necessary patches to make it build on fbsd

Reviewed by wiz
2015-01-09 16:29:04 +00:00
cheusov
863b4a16fa Update to 1.6.0
Environment variable RUNAWK_KEEPTMP was introduced. If it set,
  temporary files are kept.  This is useful for debugging.

  io.awk:file_size was fixed (its behaviour depended on FS value)

  AWK_PROGS used for testing is now settable from environment.

  A few typos in runawk_modules.3 were fixed.
  Thanks to Andrew Shadura!
2015-01-07 12:50:47 +00:00
taca
1d73b6cca3 Add patch from PR pkg/49512. 2015-01-07 10:37:56 +00:00
taca
20b1292958 Add patch from PR pkg/49511. 2015-01-07 10:37:10 +00:00
taca
e659346b00 Add comment to recent patch. 2015-01-07 10:35:59 +00:00
jperkin
81b2330b76 Sorry, revert previous, already fixed on HEAD (still broken on 2014Q4). 2015-01-06 11:24:02 +00:00
jperkin
78ba4c3368 Extend valid currency data to 15 years to avoid lag in upstream updates,
fixes current problems with the Turkish data which expired at the end of
last year.
2015-01-06 11:19:19 +00:00
he
81d6748691 Tobias Nygren reports this needs MAKE_JOBS_SAFE=no -- make it so. 2015-01-06 09:51:51 +00:00
wiz
c75c70eeee Add missing continuation line marker.
Remove mention of lang/twelf.
2015-01-05 11:03:22 +00:00
wiz
53320a754a Update to 1.9.0:
1.9.0
-----

- Issue #106: Support the `flush` parameter to `six.print_`.

- Pull request #48 and issue #15: Add the `python_2_unicode_compatible`
  decorator.

- Pull request #57 and issue #50: Add several compatibility methods for unittest
  assertions that were renamed between Python 2 and 3.

- Issue #105 and pull request #58: Ensure `six.wraps` respects the *updated* and
  *assigned* arguments.

- Issue #102: Add `raise_from` to abstract out Python 3's raise from syntax.

- Issue #97: Optimize `six.iterbytes` on Python 2.

- Issue #98: Fix `six.moves` race condition in multi-threaded code.

- Pull request #51: Add `six.view(keys|values|itmes)`, which provide dictionary
  views on Python 2.7+.
2015-01-04 23:44:58 +00:00
asau
616a7bf59c Update to Mercury 14.01.1
NEWS for Mercury 14.01.1
------------------------

This is a bug-fix release.

* The function string.string/1 and related functions now handle version
  arrays properly.
* Fix resource leaks in dir fold predicates.
* The mfilterjavac program is now generated with the correct file extension
  on Windows.
* A problem that caused compilation of the Boehm GC to fail on 64-bit
  openSUSE 13.1 systems has been fixed.  (Github issue #14)
* The documentation now builds correctly on Cygwin systems.
* The script configure_mingw_cross now supports 64-bit Windows targets.
* We have added workarounds for problems with (arguably broken)
  system headers on MinGW and MinGW64 systems.
* The MinGW port now builds in the absence of POSIX threads library.
* Low-level C parallel grades now work on Windows instead of crashing
  at startup.  (Bug #338)
* We now use thread-safe alternatives to strerror().  (Bug #340)
* We have added the configure option --enable-gc-mmap.
* We configure Boehm GC to use mmap in threaded grades on Linux to avoid
  conflicts with glibc malloc leading to memory corruption.
* A problem that caused string.format/[23] to sometimes return incorrect
  results when formatting floats with the 'g' conversion specifier has
  been fixed.  This bug only affected the non-C backends.  (Bug #342)
* string.format now handles special float values (i.e. nan, inf,  and -inf)
  correctly with the non-C backends.
* A bug that caused io.write_float/[34] to append ".0" to float special values
  has been fixed.  This bug affected the C and C# backends.
* In the C# and Java grades, the predicate string.from_char_list now
  implements the documented behaviour for input lists containing null
  characters (i.e. it throws an exception).
  Likewise, for string.from_reverse_char_list in the C# grade.
* We have fixed a problem that caused `mmc --make' to attempt to install
  libraries in non-existent grades.

Changes to the Mercury compiler:

* The compiler now supports stripping of executables in a separate
  post-link step.  The new options, --strip-executable-command,
  --strip-executable-shared-flags and --strip-executable-static-flags
  are used to control this.
  (This is now the default on Mac OS X systems.)


NEWS for Mercury 14.01
----------------------

Changes to the Mercury language:

* Repeated type variables may now occur in the heads of type class instances.
  For example, instance declarations like the following are now allowed:

      :- instance foo(list(T), map(T, T)).

Changes to the Mercury standard library:

* We have added the function cord.condense/1.

* The following functions in the standard library's cord module now use
  constant stack space: foldl/3, foldl_pred/4.

* We have added the following predicates to the array and version_array
  modules: is_empty/1, all_true/2 and all_false/2.

* We have added the following predicates and functions to the map module:
  det_min_key/1, det_max_key/1, foldl2_values/6 and foldl3_values/8.

* We have added the following predicates to the list module: foldr2/6,
  foldr3/8, det_take/3 and map_foldr/5.

* We have added the following predicates to the bag module: foldl/4 and
  foldl2/6.

* We have added the following predicates to the assoc_list module:
  foldl2_values/6 and foldl3_values/8.

* We have added the following predicates and functions to the pqueue module:
  is_empty/1, peek/3, peek_key/2, peek_value/2, det_peek/3, merge/3,
  det_peek_key/1 and det_peek_value/1.

* We have added the predicate bimap.equal/2.

* We have added the following predicates to the int module: fold_up3/9 and
  fold_down3/9.

Changes to the Mercury compiler:

* On Mac OS X systems the compiler is now configured use the version of the
  host system as the default value for the deployment target.

  A new configuration option, `--with-macosx-deployment-target', allows
  an alternative value to be selected at configuration time.

Portability improvements:

* We have made the implementation compatible with GCC 4.8 and Visual Studio
  2013.

* We have made the implementation compatible with OS X 10.9.

Changes to the extras distribution:

* We've added a library that provides support for accessing the function
  trail from Mercury code.
2015-01-04 19:37:02 +00:00
dholland
7661ac7201 -twelf 2015-01-04 10:14:47 +00:00
dholland
6e00bce069 Remove lang/twelf, as proposed on pkgsrc-users; it has not built in
years, is pretty well dead upstream, and is no longer of much interest
for research either.
2015-01-04 10:14:14 +00:00
dholland
6a4591b939 Use PKG_SKIP_REASON for unsupported OSes 2015-01-04 09:41:11 +00:00
dholland
2a965e1c35 Use ONLY_FOR_PLATFORM only to indicate what the compiler knows how to
target. For stuff the packaging doesn't handle, use BROKEN.
2015-01-04 08:57:36 +00:00
dholland
eda923bee9 Use BROKEN_EXCEPT_ON_PLATFORM for this package.
It has the unfortunate property that wrong configs seem to tend to
drop to the debugger while building, which hangs bulk builds and needs
to be masked. However, mucking with configurations isn't all that
difficult provided you can test them, and many that could be added
will probably just work.
2015-01-04 08:28:48 +00:00
dholland
542af20801 Remove ONLY_FOR_PLATFORM list and add NOT_FOR_PLATFORM for vax.
Also, because of a serious codegen bug, demand gcc 4.3 or higher for arm.
2015-01-04 08:22:20 +00:00
dholland
e5c2a73926 document ONLY_FOR_PLATFORM 2015-01-04 08:03:50 +00:00
dholland
e51b4d09df Fix misuse of LOCALBASE. 2015-01-04 07:50:39 +00:00
dholland
63bf250811 Remove alpha restriction from 1998 - even if it had 'severe' problems
then, we've apparently never bumped into 64-bit issues on amd64 so it's
probably been fixed upstream.
2015-01-04 03:31:07 +00:00
dholland
fe1c3dc694 Systematize 32-on-64 handling. 2015-01-04 03:26:34 +00:00
dholland
5d1f5a41ad Use BROKEN_ON_PLATFORM with LP64PLATFORMS.
I looked into this a while back and described it as "thoroughly broken",
so maybe it should be NOT_FOR_PLATFORM, but hope springs eternal...
2015-01-04 03:21:12 +00:00
dholland
8ed920776b Remove NOT_FOR_PLATFORM here; failing the parent package is sufficient.
(If we decide we want the restrictions here after all so modules fail
up front, which isn't completely useless, they should at least match
the ones on the parent package.)
2015-01-04 03:19:45 +00:00
dholland
1b4865e8f8 Use BROKEN_ON_PLATFORM; also remove sparc64 restriction since the link
for it points to a bug that's been fixed upstream.
2015-01-04 03:17:17 +00:00
dholland
1366f06aef Use BROKEN_ON_PLATFORM for "needs porting". 2015-01-04 03:14:00 +00:00
dholland
214f10e112 Update lang/algol68g to 2.8. Changes: bug fixes. 2015-01-04 02:08:45 +00:00
alnsn
ea0cf1383b Fix pkg/49526 Unbreak lang/lua52. From Sevan Janiyan. 2015-01-02 15:50:43 +00:00
bsiegert
e1bf55736f Add infrastructure for compiling software written in Go to pkgsrc. This
used to be in wip/go.
2015-01-02 14:04:00 +00:00
ryoon
caf2f1db22 Bump PKGREVISION
Install new certificate for rubygems.org.
This fixes certification invalid error from gem and bundler.
2015-01-02 07:32:58 +00:00
he
59571a91c9 Update to 3.3.6.
Python 3.3.6 was released on October 11, 2014.

Python 3.3.6 includes fixes for a few of our previously added patches,
as well as other important security-related fixes.  Local changes:
rename the configure patch, remove now-included patches.

Upstream list of changes for this version:

Core and Builtins
-----------------
- Issue #22518: Fixed integer overflow issues in "backslashreplace",
  "xmlcharrefreplace", and "surrogatepass" error handlers.
- Issue #22520: Fix overflow checking when generating the repr of a unicode
  object.
- Issue #22519: Fix overflow checking in PyBytes_Repr.
- Issue #22518: Fix integer overflow issues in latin-1 encoding.

Library
-------
- Issue #22517: When a io.BufferedRWPair object is deallocated, clear its
  weakrefs.
- Issue #22419: Limit the length of incoming HTTP request in wsgiref server to
  65536 bytes and send a 414 error code for higher lengths. Patch contributed
  by Devin Cook.
- Lax cookie parsing in http.cookies could be a security issue when combined
  with non-standard cookie handling in some Web browsers.  Reported by
  Sergey Bobrov.
- Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths
  before checking for a CGI script at that path.
- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second
  parameter. Bug reported by Guido Vranken.
- Issue #20633: Replace relative import by absolute import.
- Issue #21082: In os.makedirs, do not set the process-wide umask. Note this
  changes behavior of makedirs when exist_ok=True.
- Issue #20875: Prevent possible gzip "'read' is not defined" NameError.
  Patch by Claudiu Popa.
- Issue #11599: When an external command (e.g. compiler) fails, distutils now
  prints out the whole command line (instead of just the command name) if the
  environment variable DISTUTILS_DEBUG is set.
- Issue #4931: distutils should not produce unhelpful "error: None" messages
  anymore.  distutils.util.grok_environment_error is kept but doc-deprecated.
- Issue #20283: RE pattern methods now accept the string keyword parameters
  as documented.  The pattern and source keyword parameters are left as
  deprecated aliases.
- Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
  broken by the fix for security issue #19435.  Patch by Zach Byrne.

Tests
-----
- Issue #17752: Fix distutils tests when run from the installed location.
- Issue #20946: Correct alignment assumptions of some ctypes tests.
- Issue #20939: Fix test_geturl failure in test_urllibnet due to
  new redirect of http://www.python.org/ to https://www.python.org.
2015-01-01 21:39:45 +00:00
dholland
c66776756c Use PKG_FAIL_REASON for errors. 2015-01-01 11:51:41 +00:00
ryoon
9edb37fa0e Add gcc46-libs 2015-01-01 01:37:04 +00:00
ryoon
47d8291942 Import gcc46-libs-4.6.4nb4 as lang/gcc46-libs.
The GNU Compiler Collection (GCC) includes front ends for C, C++, Objective-C,
Fortran, and Go, as well as libraries for these languages (libstdc++,
libgfortran, ...).

To select gcc46-libs over gcc46, this package's PKGREVISION should start
from 4 (gcc46's 3 + 1).
2015-01-01 01:31:52 +00:00
ryoon
e77fe16402 Bump PKGREVISION
* Add support code for gcc46-libs.
2015-01-01 01:29:56 +00:00
wiz
3ec156f142 Improve EGG_NAME default to work for packages with '-' in their name.
Remove now unnecessary overrides in various packages.
2014-12-31 13:57:25 +00:00
bsiegert
fa64415ac2 Remove special case for golang.org/x/tools from the go command.
We handle it differently in the go-tools package. While here, rename
GO_COMPILER to GOCHAR, which is the name upstream uses.

Bump PKGREVISION.
2014-12-31 11:40:14 +00:00
ryoon
061c9ac188 Restore bootstrap kit checksums. 2014-12-31 00:16:17 +00:00
ryoon
fed69fe812 Bump PKGREVISION
* Fix build error with upstream patch. Reported by John Maier on pkgsrc-users@.
2014-12-30 23:48:57 +00:00
wiz
409daf8c25 + qore. 2014-12-30 15:45:52 +00:00
wiz
32776f45dd Import qore-0.8.11nb2 as lang/qore, packaged for wip by nros.
Qore is a modular, multi-threaded, SQL-integrated dynamically typed
scripting language with optional hard typing and procedural and
object-oriented features, powerful and easy-to-use data types,
structures, and operators, a clean and easy-to-lean/read syntax.
2014-12-30 15:39:51 +00:00
wiz
627d407a75 Remove pkg_views support, second part: infrastructure. 2014-12-30 15:13:19 +00:00
plunky
6eca0f12b0 update to 20141228 development snapshot. 2014-12-30 14:49:18 +00:00
fhajny
7c10fe5ea1 Update nodejs to 0.10.35.
Trivial bugfix update of a leaf package.

2014.12.22, Version 0.10.35 (Stable)
* tls: re-add 1024-bit SSL certs removed by f9456a2 (Chris Dickinson)
* timers: don't close interval timers when unrefd (Julien Gilli)
* timers: don't mutate unref list while iterating it (Julien Gilli)

2014.12.17, Version 0.10.34 (Stable)
* uv: update to v0.10.30
* zlib: upgrade to v1.2.8
* child_process: check execFile args is an array (Sam Roberts)
* child_process: check fork args is an array (Sam Roberts)
* crypto: update root certificates (Ben Noordhuis)
* domains: fix issues with abort on uncaught (Julien Gilli)
* timers: Avoid linear scan in _unrefActive. (Julien Gilli)
* timers: fix unref() memory leak (Trevor Norris)
* v8: add api for aborting on uncaught exception (Julien Gilli)
* debugger: fix when using "use strict" (Julien Gilli)
2014-12-28 17:46:17 +00:00
bsiegert
b05f8d8d12 Fix build error on older Mac OS versions, where ndbm.h does not include db.h.
Patch from Sevan Janiyan in PR pkg/49508.
2014-12-28 15:51:01 +00:00
dholland
3c3ad58702 Sort out depends.
- Add options.mk and make most of the heavy depends optional.
 - Add optional support for SDL, disabled by default.
 - Fix curses buildlinking; closes PR 49478.
 - Update readline support for semi-recent API changes.
 - Update PLIST accordingly.

PKGREVISION -> 20.
2014-12-27 00:13:28 +00:00
obache
e81094e787 Catch up to lang/gcc-aux package changes, switch to GCC 4.9.2.
Bump PKGREVISION.
2014-12-21 02:39:24 +00:00
taca
af65cf60a1 Update php56 to 5.6.4, including security fix.
18 Dec 2014, PHP 5.6.4

- Core:
  . Fixed bug #68091 (Some Zend headers lack appropriate extern "C" blocks).
    (Adam)
  . Fixed bug #68104 (Segfault while pre-evaluating a disabled function).
    (Laruence)
  . Fixed bug #68185 ("Inconsistent insteadof definition."- incorrectly
    triggered). (Julien)
  . Fixed bug #68355 (Inconsistency in example php.ini comments).
    (Chris McCafferty)
  . Fixed bug #68370 ("unset($this)" can make the program crash). (Laruence)
  . Fixed bug #68422 (Incorrect argument reflection info for array_multisort()).
    (Alexander Lisachenko)
  . Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
  . Fixed bug #68446 (Array constant not accepted for array parameter default).
    (Bob, Dmitry)
  . Fixed bug #68594 (Use after free vulnerability in unserialize()).
    (CVE-2014-8142) (Stefan Esser)

- Date:
  . Fixed day_of_week function as it could sometimes return negative values
    internally. (Derick)

- FPM:
  . Fixed bug #68381 (fpm_unix_init_main ignores log_level).
    (David Zuelke, Remi)
  . Fixed bug #68420 (listen=9000 listens to ipv6 localhost instead of all
    addresses). (Remi)
  . Fixed bug #68421 (access.format='%R' doesn't log ipv6 address). (Remi)
  . Fixed bug #68423 (PHP-FPM will no longer load all pools). (Remi)
  . Fixed bug #68428 (listen.allowed_clients is IPv4 only). (Remi)
  . Fixed bug #68452 (php-fpm man page is oudated). (Remi)
  . Fixed request #68458 (Change pm.start_servers default warning to
    notice). (David Zuelke, Remi)
  . Fixed bug #68463 (listen.allowed_clients can silently result
    in no allowed access). (Remi)
  . Fixed request #68391 (php-fpm conf files loading order).
    (Florian Margaine, Remi)
  . Fixed bug #68478 (access.log don't use prefix). (Remi)

- Mcrypt:
  . Fixed possible read after end of buffer and use after free. (Dmitry)

- GMP:
  . Fixed bug #68419 (build error with gmp 4.1). (Remi)

- PDO_pgsql:
  . Fixed bug #67462 (PDO_PGSQL::beginTransaction() wrongly throws exception
  when not in transaction) (Matteo)
  . Fixed bug #68351 (PDO::PARAM_BOOL and ATTR_EMULATE_PREPARES misbehaving)
  (Matteo)

- Session:
  . Fixed bug #68331 (Session custom storage callable functions not being called)
    (Yasuo Ohgaki)

- SOAP:
  . Fixed bug #68361 (Segmentation fault on SoapClient::__getTypes).
    (Laruence)

- zlib:
  . Fixed bug #53829 (Compiling PHP with large file support will replace
    function gzopen by gzopen64) (Sascha Kettler, Matteo)
2014-12-19 16:12:48 +00:00
taca
d88e5badbc Update php55 to 5.5.20, including security fix.
17 Dec 2014, PHP 5.5.20

- Core:
  . Fixed bug #68091 (Some Zend headers lack appropriate extern "C" blocks).
    (Adam)
  . Fixed bug #68185 ("Inconsistent insteadof definition."- incorrectly
    triggered). (Julien)
  . Fixed bug #68370 ("unset($this)" can make the program crash). (Laruence)
  . Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
  . Fixed bug #68594 (Use after free vulnerability in unserialize()).
    (CVE-2014-8142) (Stefan Esser)

- Date:
  . Fixed day_of_week function as it could sometimes return negative values
    internally. (Derick)

- FPM:
  . Fixed bug #68381 (fpm_unix_init_main ignores log_level).
    (David Zuelke, Remi)
  . Fixed bug #68420 (listen=9000 listens to ipv6 localhost instead of all
    addresses). (Remi)
  . Fixed bug #68421 (access.format='%R' doesn't log ipv6 address). (Remi)
  . Fixed bug #68423 (PHP-FPM will no longer load all pools). (Remi)
  . Fixed bug #68428 (listen.allowed_clients is IPv4 only). (Remi)
  . Fixed bug #68452 (php-fpm man page is oudated). (Remi)
  . Fixed request #68458 (Change pm.start_servers default warning to
    notice). (David Zuelke, Remi)
  . Fixed bug #68463 (listen.allowed_clients can silently result
    in no allowed access). (Remi)
  . Fixed request #68391 (php-fpm conf files loading order).
    (Florian Margaine, Remi)
  . Fixed bug #68478 (access.log don't use prefix). (Remi)

- Mcrypt:
  . Fixed possible read after end of buffer and use after free. (Dmitry)

- PDO_pgsql:
  . Fixed bug #66584 (Segmentation fault on statement deallocation) (Matteo)
  . Fixed bug #67462 (PDO_PGSQL::beginTransaction() wrongly throws exception
  when not in transaction) (Matteo)
  . Fixed bug #68351 (PDO::PARAM_BOOL and ATTR_EMULATE_PREPARES misbehaving)
  (Matteo)

- zlib:
  . Fixed bug #53829 (Compiling PHP with large file support will replace
    function gzopen by gzopen64) (Sascha Kettler, Matteo)
2014-12-19 16:10:38 +00:00
taca
1b2d155c66 Update php54 to 5.4.36, including security fix.
18 Dec 2014 PHP 5.4.36

- Core:
  . Upgraded crypt_blowfish to version 1.3. (Leigh)
  . Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
  . Fixed bug #68594 (Use after free vulnerability in unserialize()).
    (CVE-2014-8142) (Stefan Esser)

13 Nov 2014 PHP 5.4.35

- Core:
  . Fixed bug #68365 (zend_mm_heap corrupted after memory overflow in
    zend_hash_copy). (Dmitry)

- Fileinfo:
  . Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers).
    (CVE-2014-3710) (Remi)

- GMP:
 . Fixed bug #63595 (GMP memory management conflicts with other libraries
   using GMP). (Remi)

- PDO_pgsql:
  . Fixed bug #66584 (Segmentation fault on statement deallocation) (Matteo)
2014-12-19 16:08:35 +00:00
wiz
3f35b0a261 Bump py-setuptools dependency to 0.8 since that version changed
version number handling.
2014-12-17 07:23:04 +00:00
wiz
594c758054 Fix build with py-setuptools-0.8. 2014-12-16 22:59:50 +00:00
chopps
ebb42a926e Update PLIST with new additions -- PKG_DEVELOPER=1 is your friend 2014-12-16 08:45:12 +00:00
chopps
da4cc60d03 remove PKGREVISION since we bumped the dist version 2014-12-16 07:40:58 +00:00
chopps
55eff53d2f Update to 2.7.9 removing patches that were incorporated. Significant
changes include:

- The entirety of Python 3.4's ssl module has been backported for
  Python 2.7.9. See PEP 466 for justification.
- HTTPS certificate validation using the system's certificate store
  is now enabled by default. See PEP 476 for details.
- SSLv3 has been disabled by default in httplib and its reverse
  dependencies due to the POODLE attack.
- The ensurepip module module has been backported, which provides the
  pip package manager in every Python 2.7 installation. See PEP 477.
2014-12-16 07:07:32 +00:00
jperkin
c24ed9c54f The "rename" rule is a published synonym for the "opt" transform rule, however
only the latter is supported by cwrappers.  Change them all to "opt" rules for
consistency and to gain compatibility with cwrappers.
2014-12-15 11:46:34 +00:00
asau
c14ad36df2 Update to Squeak 4.4
Prompted by Rhialto in private mail.


Squeak 4.4 - Ulam Spiral

Changelog:
* Cleanup and simplification of Morphic text editing
* Add host window support, letting you display things
  in a host window. (Currently only on Windows and Mac.)
* Bugfixes in the Compiler, Parser and Debugger toolchain
* Stub support for the ability to evolve the bytecode set
* Better printing of Floats, hashing of DateAndTimes
* ChangeSorter improvements
* ToolBuilder improvements
* Merged network improvements from Etoys
* Monticello browsing can now group versions by branch,
  making tracking of parallel developments easier
* Decreased coupling between core packages
* IPv6 support (if your VM provides it)
2014-12-15 02:11:06 +00:00
taca
d9f08543b6 Add patches for supporting tcl/tk 8.6 on ruby-tk package. 2014-12-14 13:59:53 +00:00
obache
d705be77bd time/py-dateutil support py3k now. 2014-12-14 02:34:52 +00:00
fhajny
88f01bb366 Only use PLIST subst vars were they should really be. 2014-12-13 15:14:26 +00:00
obache
a279c99857 devel/py-unittest2 support py3x now. 2014-12-13 09:05:30 +00:00
joerg
7925505522 Add a comment that disabling optimisation is needed not just for the
memory usage.
2014-12-12 10:52:33 +00:00
wiz
5fe43b2df2 Update to 1.4, ok bsiegert:
Today we announce Go 1.4, the fifth major stable release of Go,
arriving six months after our previous major release Go 1.3. It
contains a small language change, support for more operating systems
and processor architectures, and improvements to the tool chain
and libraries. As always, Go 1.4 keeps the promise of compatibility,
and almost everything will continue to compile and run without
change when moved to 1.4. For the full details, see the Go 1.4
release notes.

The most notable new feature in this release is official support
for Android. Using the support in the core and the libraries in
the golang.org/x/mobile repository, it is now possible to write
simple Android apps using only Go code. At this stage, the support
libraries are still nascent and under heavy development. Early
adopters should expect a bumpy ride, but we welcome the community
to get involved.

The language change is a tweak to the syntax of for-range loops.
You may now write "for range s {" to loop over each item from s,
without having to assign the value, loop index, or map key. See
the release notes for details.

The go command has a new subcommand, go generate, to automate the
running of tools to generate source code before compilation. For
example, it can be used to automate the generation of String methods
for typed constants using the new stringer tool. For more information,
see the design document.

Most programs will run about the same speed or slightly faster in
1.4 than in 1.3; some will be slightly slower. There are many
changes, making it hard to be precise about what to expect. See
the release notes for more discussion.

And, of course, there are many more improvements and bug fixes.

In case you missed it, a few weeks ago the sub-repositories were
moved to new locations. For example, the go.tools packages are now
imported from "golang.org/x/tools". See the announcement post for
details.

This release also coincides with the project's move from Mercurial
to Git (for source control), Rietveld to Gerrit (for code review),
and Google Code to Github (for issue tracking and wiki). The move
affects the core Go repository and its sub-repositories. You can
find the canonical Git repositories at go.googlesource.com, and
the issue tracker and wiki at the golang/go GitHub repo.
2014-12-12 09:41:40 +00:00
joerg
e1aa839c08 Pass down normal sanitised environment. 2014-12-10 23:24:42 +00:00
gdt
a43a8efdff -guile16 2014-12-10 15:32:16 +00:00
gdt
ec0147d4c2 Remove guile16.
Guile has had multiple versions in pkgsrc because of compatibility
problems, starting with 1.4.  Currently, 1.8 is the stable version and
2.0 the new version in pkgsrc, even though in the regular world 1.8 is
old and 2.0 is stable.  As far as I know, no one uses guile 1.6 any
more, and it has no depending packages in pkgsrc (tex2page was the
last one).
2014-12-10 01:18:25 +00:00
joerg
79915485d0 Fix RCS ID. 2014-12-09 15:11:36 +00:00
ryoon
da8710b6af Bump PKGREVISION.
* Switch to GCC 4.9.2 based.
* binutils of NetBSD 7.99 is modern enough, and use binutils in base.
  Fix build under NetBSD/amd64 7.99.1 with this workaround.
2014-12-07 10:45:32 +00:00
obache
eafc44a3e1 Auto detect lua version from required package name.
resolve PR pkg/49318
2014-12-07 05:10:43 +00:00
dholland
ebfc7d6753 Add missing svr4.h for ppc netbsd. From Frank Wille in PR 49453. 2014-12-06 18:47:01 +00:00
rodent
0788d56618 Make EGG_INFODIR available for use in Makefiles. Clarify comment regarding
necessity of substituting EGG_NAME in PLISTs.
2014-12-06 15:17:08 +00:00
rodent
a31f3a20b4 +google-api-python-client 2014-12-05 21:44:10 +00:00
joerg
00f9d27c07 Explicitly add library path for gdbm and iconv, don't depend on the
implicit one added by the wrappers.
2014-12-03 14:00:57 +00:00
joerg
ff321b08ab Support cwrappers for packages appending arguments in the wrappers. 2014-12-01 12:39:16 +00:00
joerg
20f2d2f76e Works with IAS now. 2014-12-01 11:29:26 +00:00
spz
9a75bfced7 add patches for CVE-2012-3543 and CVE-2012-3382 from upstream 2014-11-30 21:51:44 +00:00
spz
30664b516f master site seems to have reorganized itself, adjust to new link 2014-11-30 18:11:23 +00:00
spz
98c02dcb4d dragonfly patch ought to ifdef __DragonFly__ 2014-11-30 08:50:26 +00:00
spz
447a8172f3 Update of Mono to version 3.10.0
Also: general patch refresh

Upstream release notes:

Mono 3.10.0 is a bugfix release with a few features.

Highlights

    Implemented System.IO.Compression.FileSystem.
    Uri now implements the .NET 4.5 behavior, it can be reverted to
    the old behavior in the same way by setting the System.Uri::s_IriParsing
    static field to false.

Performance

    Remove unnecessary locking from core metadata parsing functions.
    Avoid cache thrashing of locals array when looping over enumerator.

Known Issues

    The OSX packages have an invalid libgdiplus library that affects
    users of System.Drawing that requires it to work.
    This specially affects Xamarin.Mac users that fit the following criteria:

    Uses Xamarin.Mac Classic (Unified is unaffected).
    Uses the subsets of System.Drawing that use libgdiplus.dylib internally
    - System.Drawing.RectangleF, PointF, Colors are unaffected
    - System.Drawing.Bitmap, and font for example are affected

    The symptom of the problem is your application failing with:
    “System.TypeInitializationException: An exception was thrown by
    the type initializer for
    System.Drawing.GDIPlus —> System.Exception: GdiplusStartup”

Bug fixes
+++++++++
Runtime

    Fix support for unaligned offsets in the store_membase_imm opcodes.
    Fixes #23267.
    Fix the lookup of nested types which have a namespace. Fixes #21653.
    Increase some opcode sizes. Fixes #23026.
    Always pass the imt arg to interface calls in gsharedvt methods.
    Fixes #22624.
    Store the epilog length in MonoArchEHJitInfo instead of encoding
    it in jinfo->unwind_desc, since the latter can overflow for methods
    with large epilogs. Fixes #22685.
    Add a mono_thread_detach_if_exiting () public api function which
    can be called by embedding code to detach the runtime if the code
    is running from a pthread dtor. Fixes #21164.
    Fix yet another native types problem. Fixes #22053.
    Fix the leaking of mach ports introduced by
    98bbf8512aec0fa01b4426583280f6d231d22187. Fixes #22068.
    Add support for constrained calls with vtype return types in
    gsharedvt code. Fixes #22109.
    Fix the PLATFORM_GNU check so it works with gnueabi etc. as well.
    Fixes #21520.
    Don’t make runtime invoke signatures generic. Fixes #21973.
    Allow v8..v15 in unwind info on arm64. Fixes part of #21615.
    Fix Process.PrivateMemorySize64 etc. on ios. Fixes #21882.
    Fix enum->int casts in gsharedvt code. Fixes #21893.
    Don’t assert when loading a generic methodspec with 0 arity. Fixes #19097.
    Avoid asserting when a cattr cannot be loaded. Fixes #21653.
    Avoid making generic calls from gsharedvt methods normally, go
    through the rgctx infrastructure instead. Fixes #21677.

Class Libraries

    Fix Uri UserInfo parsing. Fixes 23246.
    Update RequestMessage.RequestUri.AbsoluteUri after redirect. Fixes #22383.
    Fixes XContainer attempt to create a XNode from a null value. Fixes #20151.
    Changed XObject OnChanged and OnChanging to use Owner. When
    XObject.Owner is not a XElement XObject.Parent returns null and the
    owner would not be notified of changing and changed events. Fixes #18772.
    Process XslLiteralElements with only child attributes as empty ones.
    Fixes #14751.
    ‘finally’ protect ClientRuntimeChannel.Begin/EndProcess(). Fixes #22179.
    WebClient.OpenWrite() must get the response on close. Fixes #10163.
    Fix WebClient.UploadValuesTaskAsync(); Fixes #20359.
    Improve System.Security.Claims. Fixes #22282.
    Fixed serialization of XmlNode field with attribute XmlAnyElement.
    Fixes #3211.
    Handle String::Format with escaped closing }. Fixes #22114
    Add a missing check to TypeBuilder.CreateType (). Fixes #22059.
    Xml Serialization of Base class w/o a parameterless constructor.
    Removed validation code that did not allowed serialization of
    base classes without a parameterless constructor. Fixes #6913.
    Fixed XmlSerializer to handle attribute XmlSchemePrivider.IsAny.
    XmlSerializer no longer outputs a root element with class name when
    the class has the attribute XmlSchemeProvider and IsAny is true.
    Fixes #11916
    Test that DeflateStream.Read does read an empty stream. Covers #19313.
    Reseting all private key values to null is required because a new
    import may not overwrite existing values. Fixes #18482.
    Handle quoted filename value. Fixes #21960.
    Dispose XmlReader using correct value. Fixes #21771.

C# Compiler

    Don’t use `1 naming for compiler generated second level and deeper
    nested types. Fixes #22893.
    Extend missing type check to type lookups. Fixes #20933.
    Fix copy and paste error in constraints checker. Fixes #22131.
    Speed up nullable tokenizer. Fixes #20195.
    Coalescing operator if the lhs of a null is a integer type that is
    larger than the integer type on the rhs. Fixes #22054.
    Check for duplicate destructors. Fixes #21983.
    Switch statement with constant block at first label. Fixes #21805.
    Decimal constants modulo folding. Fixes #21743.
    Update codegen for boolean loads. Fixes #21685.

MSBuild

    Workaround for issues with CreateItem task where metadata are
    not generated due to up-to-data inputs. Fixes #23022.
    Add KeepDuplicates etc. to 4.0 as internal. Fixes #20961.

------------------------------------------------------------------------
Mono 3.8.0 has 711 commits since the last release.
This is the work of 61 contributors since May 28. 58 bugs were fixed.

Highlights

    Major performance and scalability improvements across the the whole runtime.
    Finished the Windows 64 port.
    Debugger wire protocol optimized for usb connections.

Debugger

    Updated wire protocol better handles high latency connections such
    as those found when doing USB debugging.
    Client library now aggressively caches information and batches
    requests. Under one test scenario single stepping packets
    transmitted dropped from 2233 to only 16, with the latency going
    from seconds to 20 milliseconds.

Performance

    The JIT now better handles long remainders by powers of two,
    generating significantly better code.
    Over 10x faster code is generated for delegates that are only
    invoked once. C# features such as async and LINQ produce a lot of
    those delegates, so this improvement will impact everyone.
    Improved alias analysis can now handle second order aliases and
    eliminate null checks.
    The runtime now has a concurrently readable hashtable that can
    makes reflection heavy workloads significantly faster and more scalable.

Garbage Collection

    Optimized one of the core data structures of the garbage collector;
    should result in 5-10% reduction in collection times.

Bug fixes
+++++++++
Runtime

    Fix the leaking of mach ports introduced by
    98bbf8512aec0fa01b4426583280f6d231d22187. Fixes #22068
    Fix Process.PrivateMemorySize64 etc. on ios. Fixes #21882
    Fix enum->int casts in gsharedvt code. Fixes #21893
    Avoid making generic calls from gsharedvt methods normally, go
    through the rgctx infrastructure instead. Fixes #21677
    Fix another native-types problem. Hopefully fixes #21670 and #21636
    Use alias information to eliminate explicit null checks. Fixes #21645
    Initialize fields in MonoField:GetFieldOffset () if needed.
    Fixes part of #21604
    Properly handle rethrow outside of catch blocks. Fixes #20412
    Disable runtime unit tests on linux, because it cannot be linked
    due to circular dependencies between libraries. Fixes #21520
    When parsing a method header, ensure we pass any available generic
    context. Fixes #21388
    Added new mono_domain_set_config function; used to fix
    ConfigurationErrorsException in #10468
    Only apply the maverick stack size hack to the main thread. Fixes #10096
    Don’t hardcode the temp dir to /tmp, use g_get_tmp_dir instead.
    Fixes #20894
    Explicit thread GC data around instead of relying on TLS storage.
    Fixes #20360
    Make WaitForPendingFinalizers () really wait for the finalizers
    added by a previous GC. Fixes #20503
    Fix the marshal7.cs test, longs can be aligned to 4 bytes on
    32 bit linux, and the runtime no longer aligns structure sizes
    to 8 bytes. Fixes #20788
    Fix the popping of LMF frames during unwinding. Fixes #20616
    Fix the marshalling of ByValTStr types which have a size specified.
    Fixes #20674
    Fix the decoding of MonoJitInfo. Fixes #16439
    Make it possible to create views to magic zero size files such as
    /dev/zero. Fixes #19460
    Free static bound delegate wrappers of dynamic methods. Fixes #19058
    Don’t perform double accounting of offset for named memory segments.
    Fixes #20591
    Avoid joining attached threads. Fixes #19343
    Fix support for custom marshallers defined in other assemblies.
    Fixes #20020
    Fix a jit assertion on a class which contains an empty struct as
    a static field. Fixes #20349
    Applied patch from Kyle Edwards kyleedwardsny@gmail.com.
    Fix isinf () check with clang. Fixes #20244
    Fix constrained type unwrap for enum types. Fixes #18371

Class Libraries

    Handle quoted filename value. Fixes #21960
    Correctly handle partial chunk sizes. Fixes #20583
    Tweak Dictionary initial capacity to be more conservative. Fixes #21375
    Handle closed-over-null delegates created with IL when using
    InvokeDynamic. Fixes #21196
    Fix a race in a Task test. Fixes #20921
    Contract the values array when decoding an array with a negative
    number and a trailer that evals to zero. Fixes #20456
    Fixes issue with expression columns and IsNull. Fixes #20925
    Array qsort without head allocation. Fixes #20922
    Enum::TryParse ignores leading whitespaces. Fixes #20870
    Fix disposing of DelegatingHandler. Fixes #20818
    Fix digest authentication (bug #18799)
    Only recycle ServicePoints from the idle timer (fixes #19823)
    Changed ConcurrentDictionary.Contains(KeyValuePair<TKey, TValue>)
    to also compare value. Fixes #16990
    Add System.ServiceModel.Security assembly. Fixes #20108
    Removed NET_2_1 conditional blocks from FileInfo. Fixes #19862

C# Compiler

    Update codegen for boolean loads. Fixes #21685
    Effective base class can include inherited types. Fixes #21390
    Handle duplicate resume point registration. Fixes #21387
    Arguments can be empty when reporting missing params argument. Fixes #21215
    Flow analysis of moved arguments. Fixes #20983
    Run new initializer await checks only in async context. Fixes #20614
    Parse numeric expressions using invariant culture. Fixes #20582
    Reachability analysis should ignore local variables declarations.
    Fixes #20603
    Check for missing dependencies of container types. Fixes #20382
    Resolve event expression when testing left side expression. Fixes #20493
    Flow analysis of binary expressions not using logical operators.
    Fixes #20515

MSBuild

    Add 4.5.1 framework. Fixes #20827
    Parsing conditions with property references. Fixes #20634
    Implements property functions using constructor syntax. Fixes #12999

Mono Debugger

    Avoid clearning event requests if they reference an assembly which
    is unloaded. Instead, remove the assembly reference from the event
    request so it stays active. Fixes #9924.
2014-11-30 08:40:50 +00:00
markd
35199047cb Bring up to date PLIST.Linux. 2014-11-30 02:40:18 +00:00
obache
a247ea8a2a sysconfdir must be same as base php package. 2014-11-29 07:58:10 +00:00
joerg
51e69a8bc0 Apply additional clang arguments with cwrappers too. 2014-11-29 00:47:35 +00:00
bsiegert
d9d5ce62c7 Add a patch to fix compilation on Debian Etch. From Mikhail Gusarov in
PR pkg/49296.
2014-11-28 11:47:00 +00:00
obache
b58314711f Bump PKGREVISION to 3, to be one more than gcc48. 2014-11-28 09:59:31 +00:00
obache
24efdc1fe4 Bump PKGREVISION.
* Fixes regressions, revive parts removed at "Fix build under OpenBSD/amd64 5.5"
* Drop default behaviour changes and local features from OpenBSD ports,
  it break other platforms, at least, NetBSD-6.0/i386.
* Remove needless patches after "Restore monolithic gcc48 and gcc48-libs".
2014-11-28 09:57:32 +00:00
obache
2e56ebefcf fixes dependency pattern, PKGBASE is "gcc48", not "gcc". 2014-11-26 10:35:49 +00:00
wiz
5dbfdf6060 Remove vala018, nothing in pkgsrc uses it any longer. 2014-11-25 13:34:22 +00:00
wiz
58b3ff5cf3 Remove vala014, no packages using it left in pkgsrc. 2014-11-25 11:59:58 +00:00
obache
41c2261336 linker flag hack is required on Darwin prior to 9 too.
PR pkg/49417 by Sevan Janiyan.
2014-11-25 11:09:51 +00:00
wiz
f63ddde094 Remove vala012, no packages using it left in pkgsrc. 2014-11-25 10:09:14 +00:00
wiz
1f2bbb1462 Remove vala024, no packages using it left. 2014-11-24 16:31:50 +00:00
wiz
7a42374d88 Remove vala020, no packages using it left. 2014-11-24 16:28:03 +00:00
taca
eb2670b299 Add and enable php56. 2014-11-24 15:39:28 +00:00
taca
39506d885e Add php56, PHP version 5.6.3.
THe main features of PHP 5.6:

* Constant scalar expressions.
* Variadic functions and argument unpacking using the ... operator.
* Exponentiation using the ** operator.
* Function and constant importing with the use keyword.
* phpdbg as an interactive integrated debugger SAPI.
* php://input is now reusable, and $HTTP_RAW_POST_DATA is deprecated.
* GMP objects now support operator overloading.
* File uploads larger than 2 gigabytes in size are now accepted.

Please refer for difference from oldre release:http://php.net/migration56.
2014-11-24 15:37:08 +00:00
taca
3aa2158e8d Add support for php56 (PHP 5.6.x). 2014-11-24 15:36:05 +00:00
adam
3819f0e357 Changes 8.6.3:
Correct Method Search Order
Regression [lreplace {} 1 1]
Crash regression in [oo::class destroy]
Regress [regsub -all {\(.*} a(b) {}]
[try {} on ok {} - on return {} {}] panic
[tcl::unsupported::getbytecode] disassember
[string cat] bytecode optimization
segfault in mangled bytecode
Hang in some [read]s of limited size
segfault in [array set] of traced array
MSVC14 compile support
[fcopy] treats [blocked] as error
regression in Tcl_Write() interface
fix [gets] on non-blocking channels
restore [open comX: r+]
Restore [lappend v] return value
Stop forcing EOF to be permanent
2014-11-22 15:57:17 +00:00
bsiegert
61b572397b Declare MACOSX_DEPLOYMENT_TARGET for versions from 10.3 to 10.5 to fix
the build.

Patch provided by Sevan Janiyan in PR pkg/49394.
2014-11-22 15:45:41 +00:00
wiz
cfe2e18350 Replace perl interpreter in one more file. 2014-11-22 03:04:31 +00:00
wiz
ffc01a35f8 Remove path to non-existing file, and fix path to existing one. 2014-11-22 03:01:52 +00:00
joerg
46c384c24f ARM assembler glue needs either Thumb or ARMv6 with emulation for one
Thumb instruction. Go with FreeBSD and use the latter.
2014-11-21 14:15:20 +00:00
joerg
0555d2392d Fix build on !Linux ARM platforms. Ignore the existance of CRAY for now,
if someone really have one which is broken in this regard, it should use
normal offsetof...
2014-11-21 14:13:51 +00:00
joerg
18d3eb244b Really match all ARM variants. 2014-11-20 15:24:57 +00:00
joerg
9f4b2d2308 Match all ARM variants. 2014-11-20 15:22:44 +00:00
wiz
ed23781648 Update to 4.9.2:
Over 65 bugs fixed. Details:
https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&resolution=FIXED&target_milestone=4.9.2
2014-11-19 15:21:45 +00:00
bsiegert
9c2fed0197 Add a separate Makefile for the version string plus GOARCH. To be used
by Go packages.
2014-11-18 20:39:11 +00:00
taca
60555b521e Start update of Ruby on Rails to 3.2.21. 2014-11-18 15:41:34 +00:00
ryoon
a94522830c Update to 7.0.72
Changelog:
7.0.72: http://www.oracle.com/technetwork/java/javase/7u72-relnotes-2296190.html
Instructions to disable SSL v3.0 in Oracle JDK and JRE

Oracle recommends that users and developers disable use of the SSLv3 protocol. Please follow the Instructions to disable SSL v3.0 in Oracle JDK and JRE.
Change in javax.smartcardio.Card.disconnect(boolean reset) method behavior

Prior to the JDK 8u20 and JDK 7u72 releases, the javax.smartcardio.Card.disconnect(boolean reset) method had inverted logic for the 'reset' boolean value passed to it. The card was reset upon a disconnect if false was passed to it and vice versa. Starting with JDK 7u72 and JDK 8u20, the correct behavior as per API documentation has been implemented.

In order to provide backwards compatibility to users who rely on the old behavior, a new system property has been introduced. The following command-line option can be used to enforce the old broken behavior:

-Dsun.security.smartcardio.invertCardReset=true


This property is set by default for 7u72 and later JDK 7 update releases. By default, no behavioral change will be noticed in this area for JDK 7 update releases.

Also the following command-line option can be used to enforce the new correct behavior:

-Dsun.security.smartcardio.invertCardReset=false


This is default for 8u20 and later JDK 8 update releases. In future Java releases, the property will be ignored/disabled and default disconnect method behavior will be as specified by API.
Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

For a list of bug fixes included in this release, see JDK 7u72 Bug Fixes page.

Area: security-libs/javax.net.ssl
Synopsis: Decrease the preference mode of RC4 in the enabled cipher suite list

This fix decreases the preference of RC4 based cipher suites in the default enabled cipher suite list of SunJSSE provider.

See JDK-8043832 (not public).

From: http://www.oracle.com/technetwork/java/javase/2col/7u72-bugfixes-2298229.html
Bug Id 	Category 	Subcategory 	Description
8036022 	client-libs 	2d 	D3D: rendering with XOR composite causes InternalError.
8019623 	client-libs 	java.awt 	Lack of synchronization in AppContext.getAppContext()
8024061 	client-libs 	java.awt 	Exception thrown when drag and drop between two components is executed quickly
8028617 	client-libs 	java.awt 	Dvorak keyboard mapping not honored when ctrl key pressed
8016545 	client-libs 	java.beans 	java.beans.XMLEncoder.writeObject output is wrong
8036819 	client-libs 	javax.accessibility 	JAB: mneumonics not read for textboxes
8036983 	client-libs 	javax.accessibility 	JAB:Multiselection Ctrl+CursorUp/Down and ActivateDescenderPropertyChanged event
8028616 	client-libs 	javax.swing 	Htmleditorkit parser doesn't handle leading slash (/)
8032872 	client-libs 	javax.swing 	[macosx] Cannot select from JComboBox in a JWindow
8032874 	client-libs 	javax.swing 	ArrayIndexOutOfBoundsException in JTable while clearing data in JTable
8032878 	client-libs 	javax.swing 	Editable combos in table do not behave as expected
8041451 	core-libs 	javax.naming 	com.sun.jndi.ldap.Connection:ReadTimeout should abandon ldap request
8042857 	core-libs 	javax.naming 	14 stuck threads waiting for notification on LDAPRequest
7142035 	core-svc 	java.lang.instrument 	assert in j.l.instrument agents during shutdown when daemon thread is running
8028623 	core-svc 	tools 	SA: hash codes in SymbolTable mismatching java_lang_String::hash_code for extended characters.
8028619 	deploy 	deployment_toolkit 	Display issue of java control panel in ko and ja locale
8031490 	deploy 	deployment_toolkit 	Broken Java SE 7 jnlp samples (app2 and app3)
8038463 	deploy 	deployment_toolkit 	Java Control Panel doesn't display correctly in high resolution
8025051 	globalization 	locale-data 	Update resource files for TimeZone display names
8039298 	hotspot 	compiler 	C2: assert(base == NULL || t_adr->isa_rawptr() || !phase->type(base)->higher_equal(TypePtr::NULL_PTR)) failed: NULL+offs not RAW address?
8038925 	hotspot 	gc 	Java with G1 crashes in dump_instance_fields using jmap or jcmd without fullgc
8019324 	hotspot 	runtime 	assert(_f2 == 0 || _f2 == f2) failed: illegal field change
8031290 	hotspot 	runtime 	Adjust call to getisax() for additional words returned
8033696 	hotspot 	runtime 	"assert(thread != NULL) failed: just checking" due to Thread::current() and JNI pthread interaction
8051012 	hotspot 	runtime 	Regression in verifier for <init> method call from inside of a branch
8021804 	security-libs 	java.security 	Certpath validation fails if validity period of root cert does not include validity period of intermediate cert
8050158 	security-libs 	javax.net.ssl 	Introduce system property to maintain RC4 preference order
7047033 	security-libs 	javax.smartcardio 	(smartcardio) Card.disconnect(boolean reset) does not reset when reset is true
7195480 	security-libs 	javax.smartcardio 	javax.smartcardio does not detect cards on Mac OS X
8039319 	security-libs 	javax.smartcardio 	(smartcardio) Card.transmitControlCommand() does not work on Mac OS X
8043507 	security-libs 	javax.smartcardio 	(smartcardio) javax.smartcardio.CardTerminals.list() fails on MacOSX
8046343 	security-libs 	javax.smartcardio 	(smartcardio) CardTerminal.connect('direct') does not work on MacOSX
8049250 	security-libs 	javax.smartcardio 	(smartcardio) Need a flag to invert the Card.disconnect(reset) argument
8036709 	tools 	jar 	Java 7 jarsigner displays warning about cert policy tree
8033113 	xml 	jax-ws 	wsimport fails on WSDL:header parameter name customization
8029837 	xml 	jaxp 	NPE seen in XMLDocumentFragmentScannerImpl.setProperty since 7u40b33

7.0.71:
From: http://www.oracle.com/technetwork/java/javase/2col/7u71-bugfixes-2298226.html
Bug Id 	Category 	Subcategory 	Description
8032788 	client-libs 	java.awt 	ImageIcon constructor throws an NPE and hangs when passed a null String parameter
8057184 	client-libs 	javax.swing 	JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset failed with GTKLookAndFeel on Linux and Solaris run v.s. JDK8+
8001105 	core-libs 	java.lang.invoke 	findVirtual of Object[].clone produces internal error
8031502 	core-libs 	java.lang.invoke 	JSR292: IncompatibleClassChangeError in LambdaForm for CharSequence.toString() method handle type converter
8027821 	deploy 	  	For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.
8054904 	deploy 	webstart 	Webstart cache path error for Java >= 7u65
8032883 	deploy 	plugin 	java.lang.UnsupportedClassVersionError occurs while accessing an applet
8036620 	deploy 	plugin 	JAR file is downloaded on DownloadService.removeResource, if it is not in Deployment Cache
8040786 	deploy 	plugin 	Text is truncated in JavaScript to Java security warning dialog on OS X
8043478 	deploy 	plugin 	Oracle Linux 5.x: Expired JRE disabled in the browser automatically and no native dialog prompting for the JRE update
8025726 	deploy 	webstart 	Certificate rule in DRS does not work for Java Web Start app when caching is turned off
8051891 	deploy 	webstart 	SWT cannot load native look&feel
8050485 	hotspot 	runtime 	super() in a try block in a ctor may need to cause VerifyError
8027686 	install 	  	Fail to install on MacOS 10.10
7160837 	security-libs 	javax.crypto 	DigestOutputStream does not turn off digest calculation when "close()" is called
8028627 	security-libs 	javax.crypto 	Unsynchronized code path from javax.crypto.Cipher to the WeakHashMap used by JceSecurity to store codebase mappings
8012026 	client-libs 	java.awt 	[macosx] Component.getMousePosition() does not work in an applet on MacOS
8032078 	client-libs 	java.awt 	[macosx] CPlatformWindow.setWindowState throws RuntimeException, if windowState=ICONIFIED:MAXIMIZED_BOTH
8032961 	client-libs 	java.awt 	A JTextField of an applet loses the abillity to receive the focus under certain circumstances.
8032669 	client-libs 	javax.swing 	Mouse release not being delivered to Swing component in 7u45
7122142 	core-libs 	java.lang 	(ann) Race condition between isAnnotationPresent and getAnnotations
8005232 	core-libs 	java.lang 	(JEP-149) Class Instance size reduction
7185456 	core-libs 	java.lang.reflect 	(ann) Optimize Annotation handling in java/sun.reflect.* code for small number of annotationsC
8015421 	core-libs 	java.net 	NegativeArraySizeException occurs in ChunkedOutputStream() with Integer.MAX_VALUE
8021372 	core-libs 	java.net 	NetworkInterface.getNetworkInterfaces() returns duplicate hardware address
8009764 	deploy 	webstart 	Java Web Start app run on Java SE 8 b79 shows "trust level" SecurityExceptions
7094099 	deploy 	plugin 	DropDown List of JComboBox detached
6653795 	hotspot 	compiler 	C2 intrinsic for Unsafe.getAddress performs pointer sign extension on 32-bit systems
8027359 	xml 	jaxp 	XML parser returns incorrect parsing results
8032909 	xml 	jaxp 	XSLT string-length returns incorrect length when string includes complementary chars
2014-11-15 21:01:26 +00:00
taca
9d371b6e26 Update php55 to 5.5.19.
13 Nov 2014, PHP 5.5.19

- Core:
  . Fixed bug #68095 (AddressSanitizer reports a heap buffer overflow in
    php_getopt()). (Stas)
  . Fixed bug #68118 ($a->foo .= 'test'; can leave $a->foo undefined). (Nikita)
  . Fixed bug #68129 (parse_url() - incomplete support for empty usernames
    and passwords) (Tjerk)
    Fixed bug #68365 (zend_mm_heap corrupted after memory overflow in
    zend_hash_copy). (Dmitry)

- Fileinfo:
  . Fixed bug #66242 (libmagic: don't assume char is signed). (ArdB)
  . Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers).
    (CVE-2014-3710) (Remi)

- FPM:
  . Implemented FR #55508 (listen and listen.allowed_clients should take IPv6
    addresses). (Robin Gloster)

- GD:
  . Fixed bug #65171 (imagescale() fails without height param). (Remi)

- GMP:
  . Fixed bug #63595 (GMP memory management conflicts with other libraries
    using GMP). (Remi)

- Mysqli:
  . Fixed bug #68114 (linker error on some OS X machines with fixed width
    decimal support) (Keyur Govande)

- ODBC:
  . Fixed bug #68087 (ODBC not correctly reading DATE column when preceded by
    a VARCHAR column) (Keyur Govande)

- SPL:
  . Fixed bug #68128 (Regression in RecursiveRegexIterator) (Tjerk)

- CURL:
  . Add CURL_SSLVERSION_TLSv1_0, CURL_SSLVERSION_TLSv1_1, and
    CURL_SSLVERSION_TLSv1_2 constants if supported by libcurl (Rasmus)
2014-11-15 14:53:12 +00:00
taca
8add7f0b9f Update php54 to 5.4.35 (PHP 5.4.35).
13 Nov 2014 PHP 5.4.35

- Core:
  . Fixed bug #68365 (zend_mm_heap corrupted after memory overflow in
    zend_hash_copy). (Dmitry)

- Fileinfo:
  . Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers).
    (CVE-2014-3710) (Remi)

- GMP:
 . Fixed bug #63595 (GMP memory management conflicts with other libraries
   using GMP). (Remi)

- PDO_pgsql:
  . Fixed bug #66584 (Segmentation fault on statement deallocation) (Matteo)
2014-11-15 14:49:45 +00:00
taca
22c6492ba3 Update ruby21-base (and ruby21) package to 2.1.5 (Ruby 2.1.5).
* CVE-2014-8090: Another Denial of Service XML Expansion.
2014-11-15 14:42:20 +00:00
taca
e9fd21e805 Update ruby193-base (and ruby193) to 1.9.3p551 (Ruby 1.9.3-p551).
* CVE-2014-8090: Another Denial of Service XML Expansion.
2014-11-15 14:39:09 +00:00
taca
3fe70bbf26 Update ruby200-base and related packages to 2.0.0-p598 (Ruby 2.0.0-p598).
* CVE-2014-8090: Another Denial of Service XML Expansion.
2014-11-15 14:33:45 +00:00
ryoon
b0eabc3b02 Bump PKGREVISION
* Enable Unlimited JCE support without Oracle's binary with jre-jce option.
  Thank you, fhajny@.
2014-11-15 12:10:54 +00:00
riz
e1d0f01ea6 This builds with gcc 4.8 too, don't make me build 4.7. 2014-11-15 00:04:33 +00:00
tron
5553b92be2 Don't append ".gz" to the filenames of Perl manual page that are already
compress. This fixes the build of e.g. the "p5-YAML-LibYAML" package
if "MANZ" is set.
2014-11-13 17:48:59 +00:00
asau
f2334a415c Update cparser to version 0.9.14
cparser 0.9.14 (2012-11-21)
---------------------------

* Adapt to libfirm-1.21.0
* Improved error recovery
* Improved firm graph generation (faster/smaller graphs)
* Implement U,u and u8 strings
* Preliminary preprocessor (we still use system cpp by default, as some macro
  expansion corner cases are still buggy and prevent us from compiling glibc
  headers)
* More gcc extensions: binary constants, __leaf__ attribute

cparser 0.9.13 (2011-12-07)
---------------------------

* Adapt to libfirm-1.20.0
* Implement --help
* More work on preprocessor (still not finished though)
* Refactoring work so others can reuse input, optimization order logic
* Columns in source positions (but external preprocessor doesn't preserve all spaces)
* Improvements to gnu builtins/attributes
* Bugfixes (we did alot of csmith testing)

cparser 0.9.12 (2011-03-15)
---------------------------

* Adapt to libfirm-1.19.0
* Introduce -mtarget (and -mtriple for llvm compatibility) for conventient
  cross-compilation
* Fix big-endian struct layouting
* Bugfixes

cparser 0.9.11 (2009-05-16)
---------------------------

* add missing NEWS entries
* fix crash when known C library functions had the wrong number of arguments

cparser 0.9.10 (2009-04-15)
---------------------------

* bugfixes
* adapt to libfirm-1.18.0
2014-11-10 16:54:12 +00:00
rodent
e8f2c03fe9 Update to 0.10.1. No ChangeLog found. Move hy2py to hy2py${PYVERSSUFFIX} in
post-install and add to ALTERNATIVES.
2014-11-09 19:31:56 +00:00
ryoon
89dd301d89 Extract tarball with GNU tar.
* Fix errors when LANG=C.
2014-11-06 16:13:56 +00:00
ryoon
2860662987 Update to 1.7.71
* Update icedtea* to latest
* UTF-8 build patch
These are based on the patches from richard@.

Changelog:
From: http://www.oracle.com/technetwork/java/javase/7u71-relnotes-2296187.html

The full version string for this update release is 1.7.0_71-b14 (where "b" means "build"). The version number is 7u71.
IANA Data 2014c

JDK 7u71 contains IANA time zone data version 2014c. For more information, refer to Timezone Data Versions in the JRE Software.
2014-11-03 12:25:36 +00:00
wiz
59a7cf8097 Switch from gcc48-cc++ to gcc48. 2014-11-03 10:35:33 +00:00
wiz
aeff7bf869 Sync. 2014-11-03 10:34:57 +00:00
spz
8f4251047f add the patches for Python issue 22518, also known as 22470, from
the python source repository.
Refresh patches
2014-11-02 13:31:11 +00:00
obache
1cc49decde Add experimental auto extension registory support with PHP_AUTO_REGISTER_EXT=yes
(=no by default).
2014-11-02 08:51:41 +00:00
obache
af5589fce8 Add support of zend modules. 2014-11-02 06:49:28 +00:00
taca
b8518bacd2 Start update of Ruby on Rails to 3.2.20. 2014-11-01 14:57:15 +00:00
wiz
43ee8f0201 + guile20. 2014-11-01 13:24:51 +00:00
wiz
1d78de338b Import guile20-2.0.11 as lang/guile20.
GUILE, GNU's Ubiquitous Intelligent Language for Extension, is a library
that implements the Scheme language plus various convenient facilities.
It's designed so that you can link it into an application or utility to
make it extensible. Our plan is to link this library into all GNU programs
that call for extensibility.

This is guile 2.0, the current stable version.
2014-11-01 13:24:37 +00:00
prlw1
8b085ce5ed Update vala to 0.26.1
The hope is that backward compatibility will be sufficient for us
not to need to import every new stable version as a separate package.

Changes since vala024 was imported:

Vala 0.26.0
===========

 * Bug fix and binding updates.

Vala 0.25.4
===========

 * Add option --vapi-comments.
 * Bug fixes and binding updates.

Vala 0.25.3
===========

 * Bug fixes and binding updates.

Vala 0.25.2
===========

 * Require and target GLib >= 2.24.
 * Report warning for private struct fields.
 * Replace webkit2gtk-3.0 bindings with webkit2gtk-4.0 bindings.
 * Always build vapigen.
 * Bug fixes and binding updates.

Vala 0.25.1
===========

 * Support explicit interface method implementation.
 * Support (unowned type)[] syntax.
 * Support non-literal length in fixed-size arrays.
 * Mark regular expression literals as stable.
 * GIR parser updates.
 * Add webkit2gtk-3.0 bindings.
 * Add gstreamer-allocators-1.0 and gstreamer-riff-1.0 bindings.
 * Bug fixes and binding updates.
2014-11-01 10:25:20 +00:00
obache
e0489444c4 add some missing files for 4.02.0. 2014-11-01 08:51:32 +00:00
wiz
e54b06d177 Add a comment for MAKE_JOBS_SAFE=no:
# --- ext/date/all ---
# make[2]: make[2]: don't know how to make ../../.ext/common/date. Stop
# make[2]: stopped in .../lang/ruby193-base/work/ruby-1.9.3-p550/ext/date
2014-11-01 01:25:06 +00:00
adam
d719101c50 Changes 8.6.2:
This is a bug-fix release.
2014-10-31 21:11:18 +00:00
ryoon
e470b7e219 Restore monolithic gcc48 and gcc48-libs.
* No objection on tech-pkg@ mailing list.
2014-10-31 14:22:20 +00:00
prlw1
9dcd3fc00c Rename vala to vala012 2014-10-29 09:18:50 +00:00
wiz
3a4035d024 Not MAKE_JOBS_SAFE (two tries with MAKE_JOBS=8 failed for me in a row). 2014-10-28 07:48:19 +00:00
drochner
1c9accd607 apply patch from upstream to fix possible overflow in "buffer"
object accesses (CVE-2014-7185)
bump PKGREV
2014-10-27 20:11:34 +00:00
taca
acdcfdb23f Update ruby21/ruby21-base package to 2.1.4.
Ruby 2.1.4 is released

Ruby 2.1.4 has been released.

This release includes security fixes for the following vulnerabilities:

    * CVE-2014-8080: Denial Of Service XML Expansion
    * Changed default settings of ext/openssl related to CVE-2014-3566

And there are some bug-fixes.

See tickets and ChangeLog for details.


Ruby 2.1.3 Released

We are pleased to announce the release of Ruby 2.1.3. This is a patchlevel
release of the stable 2.1 series.

This release contains a change of full GC timing to reduce memory consumption
(see Bug #9607), and many bugfixes.

See tickets and ChangeLog for details.
2014-10-27 16:29:57 +00:00
taca
e7ae34a2cd Update ruby200-base and related packages to 2.0.0-p594 (Ruby 2.0.0-p594).
Ruby 2.0.0-p594 Released

We are pleased to announce the release of Ruby 2.0.0-p594.

This release includes a security fix for DoS vulnerability of REXML.

* CVE-2014-8080: Denial Of Service XML Expansion

This release also includes the change of default settings of
ext/openssl. Insecure SSL/TLS options are now turn off by default.

* Changed default settings of ext/openssl

And, many bug fixes are also included. See tickets and ChangeLog for details.


Ruby 2.0.0-p576 Released

We are pleased to announce the release of Ruby 2.0.0-p576, to celebrate the
holding of RubyKaigi2014 in Japan now.

This release includes many bugfixes, such as:

* many fixes of memory leaks and using extra memory.
* many fixes of platform-specific issues (especially in build process).
* many document fixes.

See tickets and ChangeLog for details.
2014-10-27 16:20:16 +00:00
taca
d94a742394 Update ruby193-base and related packages to 1.9.3p550 (Ruby 1.9.3-p550).
Ruby 1.9.3-p550 Released

We are pleased to announce the release of Ruby 1.9.3-p550.

This release includes a security fix for DoS vulnerability of REXML.

    * CVE-2014-8080: Denial Of Service XML Expansion

This release also includes the change of default settings of
ext/openssl. Insecure SSL/TLS options are now turn off by default.

    * Changed default settings of ext/openssl

And, in addition, bandled jQuery for darkfish template of RDoc is also
updated.
2014-10-27 16:11:17 +00:00
fhajny
4c2149e598 Update nodejs to 0.10.33.
2014.10.20, Version 0.10.33 (Stable)
- openssl: Update to 1.0.1j (Addressing multiple CVEs)
- uv: Update to v0.10.29
- child_process: properly support optional args (cjihrig)
- crypto: Disable autonegotiation for SSLv2/3 by default
  (Fedor Indutny, Timothy J Fontaine, Alexis Campailla)
2014-10-23 22:04:51 +00:00
taca
e8f850cbf3 Add patch for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670.
Bump PKGREVISION.
2014-10-23 16:18:47 +00:00
alnsn
ca0ebeeb63 Change lua-5.1.pc file to link to -llua5.1. 2014-10-19 22:26:38 +00:00
taca
d163a3afe7 Update to php54 5.4.34.
16 Oct 2014, PHP 5.4.34

- Fileinfo:
  . Fixed bug #66242 (libmagic: don't assume char is signed). (ArdB)

- Core:
  . Fixed bug #67985 (Incorrect last used array index copied to new array after
    unset). (Tjerk)
  . Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)).
    (CVE-2014-3669) (Stas)

- cURL:
  . Fixed bug #68089 (NULL byte injection - cURL lib). (Stas)

- EXIF:
  . Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
    (Stas)

- OpenSSL:
  . Reverted fixes for bug #41631, due to regressions. (Stas)

- XMLRPC:
  . Fixed bug #68027 (Global buffer overflow in mkgmtime() function).
    (CVE-2014-3668) (Stas)
2014-10-18 14:29:04 +00:00
taca
374708f6d7 Update php55 to 5.5.18.
16 Oct 2014, PHP 5.5.18

- Core:
  . Fixed bug #67985 (Incorrect last used array index copied to new array after
    unset). (Tjerk)
  . Fixed bug #67739 (Windows 8.1/Server 2012 R2 OS build number reported
    as 6.2 (instead of 6.3)). (Christian Wenz)
  . Fixed bug #67633 (A foreach on an array returned from a function not doing
    copy-on-write). (Nikita)
  . Fixed bug #51800 (proc_open on Windows hangs forever). (Anatol)
  . Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)).
    (CVE-2014-3669) (Stas)

- cURL:
  . Fixed bug #68089 (NULL byte injection - cURL lib). (Stas)

- EXIF:
  . Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
    (Stas)

- FPM:
  . Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable
    when using Apache, mod_proxy-fcgi and ProxyPass). (Remi)

- OpenSSL:
  . Revert regression introduced by fix of bug #41631

- Reflection:
  . Fixed bug #68103 (Duplicate entry in Reflection for class alias). (Remi)

- Session:
  . Fixed bug #67972 (SessionHandler Invalid memory read create_sid()). (Adam)

- XMLRPC:
  . Fixed bug #68027 (Global buffer overflow in mkgmtime() function).
    (CVE-2014-3668) (Stas)
2014-10-18 14:27:30 +00:00
taca
94055a59ae Update included pear Archive_Tar package to 1.3.13.
Release date: 2014-09-03 22:08 UTC
Release state: stable

Changelog:

* Fix Bug #20382: gzopen fix [mrook]


Bump PKGREVISION.
2014-10-14 16:27:48 +00:00
taca
0098c131eb clang 3.5 needs gcc 4.7 and later when build with gcc. 2014-10-14 16:26:00 +00:00
joerg
f4b5b6b151 Deal with systems providing execvpe. 2014-10-14 14:04:19 +00:00
jaapb
cae4bb438a Extra patch - syntactical change only, but needed for x11/ocaml-graphics 2014-10-13 13:24:45 +00:00
wiz
80ca574991 Update to 1.3.3:
go1.3.3 (released 2014/09/30) includes further bug fixes to cgo,
the runtime package, and the nacl port.
2014-10-12 14:51:03 +00:00
khorben
360914d754 Also look for the right path for the SSL certificate repository on NetBSD.
Fixes "go get code.google.com/p/..." for me, once security/mozilla-rootcerts
installed and configured (with the default settings).

Bumps PKGREVISION, since the package is modified.

ok bsiegert@
2014-10-11 16:41:47 +00:00
jaapb
f130e82ddf Changed package dependencies to reflect lablgtk name change. 2014-10-10 08:39:08 +00:00
jaapb
4c03ebf068 Revbump because of ocaml 4.02, added compilation patch (already in
repository upstream) and updated package to use ocaml.mk framework.
2014-10-09 22:19:01 +00:00
jaapb
6e2aeb9653 Updated package to latest version, 6.12. Package uses ocaml.mk.
Minor fixes for compatibility with ocaml 4.02.
2014-10-09 21:42:03 +00:00
jaapb
2962d3f252 Added camlp4 to SUBDIR 2014-10-09 20:40:47 +00:00
jaapb
3c35fdb3bf Re-added package lang/camlp4 - it was split off from the main ocaml
distribution in version 4.02.
2014-10-09 20:39:27 +00:00
jaapb
1e2c6eff15 Revbump for ocaml 4.02.0.
(Some packages omitted because they will be updated to new versions)
2014-10-09 19:14:03 +00:00
jaapb
b3f84848fb Update to ocaml 4.02.0. Main changes (apart from ocamldoc and bugfixes, see
also upstream changelog):
Language features:
- Attributes and extension nodes
- Generative functors
- Module aliases
* Alternative syntax for string literals {id|...|id} (can break comments)
- Separation between read-only strings (type string) and read-write byte
  sequences (type bytes). Activated by command-line option -safe-string.
Build system for the OCaml distribution:
- Use -bin-annot when building.
- Use GNU make instead of portable makefiles.
- Updated build instructions for 32-bit Mac OS X on Intel hardware.
Shedding weight:
* Removed Camlp4 from the distribution, now available as third-party software.
* Removed Labltk from the distribution, now available as a third-party library.
Type system:
* Keep typing of pattern cases independent in principal mode
- Allow opening a first-class module or applying a generative functor
  in the body of a generative functor. Allow it also in the body of
  an applicative functor if no types are created
* Module aliases are now typed in a specific way, which remembers their
  identity. In particular this changes the signature inferred by
  "module type of"
- Slight change in the criterion to distinguish private
  abbreviations and private row types: create a private abbreviation for
  closed objects and fixed polymorphic variants.
* Compare first class module types structurally rather than
  nominally. Value subtyping allows module subtyping as long as the internal
  representation is unchanged.
Compilers:
- More aggressive constant propagation, including float and
  int32/int64/nativeint arithmetic.  Constant propagation for floats
  can be turned off with option -no-float-const-prop, for codes that
  change FP rounding modes at run-time.
- New back-end optimization pass: common subexpression elimination (CSE).
  (Reuses results of previous computations instead of recomputing them.)
- New back-end optimization pass: dead code elimination.
  (Removes arithmetic and load instructions whose results are unused.)
- Optimization of sequences of string patterns
- Experimental native code generator for AArch64 (ARM 64 bits)
- Optimization of integer division and modulus by constant divisors
- Add "-open" command line flag for opening a single module before typing
* "-o" now sets module name to the output file name up to the first "."
  (it also applies when "-o" is not given, i.e. the module name is then
   the input file name up to the first ".")
* better sharing of structured constants
- new flag to keep locations in cmi files
- issue warning 3 when referring to a value marked with
  the [@@ocaml.deprecated] attribute
- a new format implementation based on GADTs
* Constant exception constructors no longer allocate
- avoid unnecessary boxing in let
- Better compilation of optional arguments with default values
- ocamlopt -opaque option for incremental native compilation
Toplevel interactive system:
- New "#show_*" directives
Runtime system:
- New configure option "-no-naked-pointers" to improve performance by
  avoiding page table tests during block darkening and the marking phase
  of the major GC.  In this mode, all out-of-heap pointers must point at
  things that look like OCaml values: in particular they must have a valid
  header.  The colour of said headers should be black.
- Fixed bug in native code version of [caml_raise_with_string] that could
  potentially lead to heap corruption.
- Blocks initialized by [CAMLlocal*] and [caml_alloc] are now filled with
  [Val_unit] rather than zero.
- Fixed a major performance problem on large heaps (~1GB) by making heap
  increments proportional to heap size by default
- Structural equality treats exception specifically
- efficient comparison/indexing of exceptions
- avoid using unsafe C library functions (strcpy, strcat, sprintf)
- An ISO C99-compliant C compiler and standard library is now assumed.
  (Plus special exceptions for MSVC.)  In particular, emulation code for
  64-bit integer arithmetic was removed, the C compiler must support a
  64-bit integer type.
Standard library:
* Add new modules Bytes and BytesLabels for mutable byte sequences.
- add List.sort_uniq and Set.of_list
- a faster version of "raise" which does not maintain the backtrace
- support "Unix.kill pid Sys.sigkill" under Windows
- speed improvement for Buffer
- efficient creation of uninitialized float arrays
- Improve documentation regarding finalisers and multithreading
- Trigger warning 3 for all values marked as deprecated in the documentation.
2014-10-09 19:08:28 +00:00
wiz
a85c5da6f1 Remove pkgviews: don't set PKG_INSTALLATION_TYPES in mk files. 2014-10-09 14:09:23 +00:00
wiz
cda18437be Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles. 2014-10-09 14:05:50 +00:00
wiz
0bf1e512bd Remove another unneeded patch after update. 2014-10-09 09:32:39 +00:00
adam
0fe0ffa0c4 Python 3.4.2 has many bugfixes and other small improvements over 3.4.1. One new feature for Mac OS X users: the OS X installers are now distributed as signed installer package files compatible with the OS X Gatekeeper security feature. 2014-10-09 09:15:38 +00:00
ryoon
7ca7147014 Update to 7.0.67
Changelog:
7.0.67: http://www.oracle.com/technetwork/java/javase/7u67-relnotes-2251330.html
Bug Fixes

The following bug fix is included in this release:

Area: deploy/plugin
Synopsis: regression - java_arguments not accepted after update to 7u65

The regression is addressed in this release.

See 8050875.


7.0.65: http://www.oracle.com/technetwork/java/javase/7u65-relnotes-2229169.html
IANA Data 2014c

JDK 7u65 contains IANA time zone data version 2014c. For more information, refer to Timezone Data Versions in the JRE Software.

New Features and Changes

New Java Control Panel option to disable sponsors

Currently, to disable sponsor offers at the time of installation, the user can de-select the option during installation or can pass SPONSORS=0 as a commandline option.

In this release, a new Java Control Panel(JCP) option to disable sponsors is available. To use this option, go to JCP's "Advanced" tab, and check or uncheck "Suppress sponsor offers when updating Java".

This option is applicable to 32 and 64 bit Windows operating systems.
New JAXP processing limit property - maxElementDepth

A new property, maxElementDepth, is added to provide applications the ability to set limit on maximum element depth in an xml file that they parse. This may be helpful for applications that may use too much resources when processing an xml file with excessive element depth.

    Name: http://java.sun.com/xml/jaxp/properties/maxElementDepth
    Definition: Limit the maximum element depth
    Value: A positive integer. 0 is treated as no limit. Negative numbers are treated as 0.
    Defaule value: 0
    System property: jdk.xml.maxElementDepth

For more details, see Processing Limits from JAXP tutorial trail.

See 8031541 (not public).
Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Critical Patch Update Advisory.

For a list of bug fixes included in this release, see JDK 7u65 Bug Fixes page.

The following are some of the notable bug fixes in this release:

Area: client-libs/AWT
Synopsis: Using RMI from a restricted environment may cause a NullPointerException.

If an application uses RMI and runs in a restricted environment (ie. Java Plugin, Java Web Start), it may not work. In particular, if you run a UI from an RMI callback, a NullPointerException is likely to be thrown.

See 8019274.

Area: other-libs/corba
Synopsis: org.omg.CORBA.ORBSingletonClass loading no longer uses context class loader

The system property org.omg.CORBA.ORBSingletonClass is used to configure the system-wide/singleton ORB. The handling of this system property was changed in the 7u55 release to require that the system wide/singleton ORB be visible to the system class loader.

In this release, the handling of this system property has been reverted to match the behavior found in JDK versions prior to 7u55 release, i.e. the singleton ORB is once again located using the thread context class loader of the first thread, to call the no-argument ORB.init method. The change is made to support applications which depend on this behavior.

Note that this change is applicable to 8u20, 7u65, 6u85 and 5.0u75 releases. For JDK 9, the new behavior, where the system wide/singleton ORB needs to be visible to the system class loader, will continue.

See 8046603.
Known Issues

Area: xml/jax-ws
Synopsis: JAF initialization in SAAJ clashing with the one in javax.mail

After initialization of SAAJ components, the javax.mail library may fail to work under certain circumstances, which in turn could break the javax.mail's JAF setup.

A possible workaround is to re-add the javax.mail handler before using javax.mail API:
MailcapCommandMap mailMap = (MailcapCommandMap) CommandMap.getDefaultCommandMap();
mailMap.addMailcap("multipart/mixed;;x-java-content-handler=com.sun.mail.handlers.multipart_mixed");

See 8043129.
2014-10-07 18:07:07 +00:00
adam
243c29c4cc Revbump after updating libwebp and icu 2014-10-07 16:47:10 +00:00
wiz
8b765c474f Fix ``Please add a line "# used by foo/bar/Makefile" here.'' warnings. 2014-10-05 16:41:05 +00:00
joerg
4e503f1689 Two more cases for serialized GC and memory limits. 2014-10-04 22:47:32 +00:00
taca
70859bda54 Fix typo in comment in a patch file. 2014-10-02 08:59:26 +00:00
taca
a1f3100ee5 Fix typo in comment in a patch file. 2014-10-02 08:50:12 +00:00
wiz
ce32265c0e Add option for installing the static analyzer.
Default off since it depends on perl AND python.
2014-10-01 09:41:02 +00:00
adam
9710448feb Perl 5.20.1 has been released, this is the latest stable version of Perl.
Changes include performance enhancements and various bug fixes.

Perl 5.20.1 represents approximately 4 months of development since Perl 5.20.0 and contains approximately 12,000 lines of changes across 170 files from 36 authors.
2014-10-01 07:17:02 +00:00
taca
7f32b2ad60 Add fix for CVS-2014-4975 as ruby200-base and ruby21-base.
Bump PKGREVISION.
2014-09-30 10:40:08 +00:00
taca
1c9a0fda95 Update to php54 to 5.4.33, aprroved by wiz@.
18 Sep 2014, PHP 5.4.33

- Core:
  . Fixed bug #47358 (glob returns error, should be empty array()). (Pierre)
  . Fixed bug #65463 (SIGSEGV during zend_shutdown()). (Keyur Govande)
  . Fixed bug #66036 (Crash on SIGTERM in apache process). (Keyur Govande)

- OpenSSL:
  . Fixed bug #41631 (socket timeouts not honored in blocking SSL reads).
    (Daniel Lowrey)

- Date:
  . Fixed bug #66091 (memory leaks in DateTime constructor). (Tjerk)

- FPM:
  . Fixed #67606 (FPM with mod_fastcgi/apache2.4 is broken). (David Zuelke)

- GD:
  . Made fontFetch's path parser thread-safe. (Sara)

- Wddx:
  . Fixed bug #67873 (Segfaults in php_wddx_serialize_var). (Anatol, Remi)

- Zlib:
  . Fixed bug #67724 (chained zlib filters silently fail with large amounts of
    data). (Mike)
  . Fixed bug #67865 (internal corruption phar error). (Mike)
2014-09-30 08:16:10 +00:00