Commit graph

231184 commits

Author SHA1 Message Date
tsutsui
4fdfc8e78c Pull upstream fix for NetBSD which also affects RPIs.
d2f31b50c2
> x_display_wscons.c: WSDISPLAYIO_GET_FBINFO is supported.

Tested on RPI2 with the following change by jun@:
http://mail-index.netbsd.org/source-changes/2015/01/21/msg062550.html
> Newer Raspberry Pi firmware has changed the framebuffer from BGR to RGB.

Bump PKGREVISION.  (leaf package update)
2015-03-21 20:41:37 +00:00
bsiegert
0899bf00a3 Note lftp update. 2015-03-21 20:05:35 +00:00
bsiegert
1bf889fa19 SECURITY: add a patch to prevent saving of unknown host keys without user
intervention.
Bump PKGREVISION.
2015-03-21 20:04:39 +00:00
jperkin
cbd3c21859 Ensure RANLIB is defined in the environment. 2015-03-21 19:39:44 +00:00
joerg
6459a13862 Honor our CFLAGS. Fix build on systems with linkat. 2015-03-21 19:27:56 +00:00
joerg
d658dc2bb6 Don't care about using plain return in K&R function for clang. 2015-03-21 19:27:23 +00:00
joerg
f93c9e5c83 Provide library path to libpython too. 2015-03-21 19:26:47 +00:00
joerg
9b78c313fa Uses set and dict comprehension as well as OrderedDict -- not for Python
2.6.
2015-03-21 19:25:23 +00:00
tron
faa762fe09 Fix build under Solaris 10. 2015-03-21 19:25:21 +00:00
bsiegert
3a1f9a972b Note vorbis-tools update. 2015-03-21 19:10:49 +00:00
bsiegert
dd30c4e739 SECURITY: Fix CVE-2014-9640.
https://trac.xiph.org/changeset/19117
oggenc: fix crash on raw file close, reported by Hanno in issue #2009. pointer
to a non-static struct was escaping its scope.
2015-03-21 19:06:54 +00:00
bsiegert
629c587f97 Note tcllib update. 2015-03-21 18:48:36 +00:00
joerg
40fe982cc1 Fix rpath use. 2015-03-21 17:31:47 +00:00
bsiegert
fe97a9aba1 SECURITY: Apply patch for XSS in html::textarea as of
http://core.tcl.tk/tcllib/info/09110adc43.
Bump PKGREVISION.
2015-03-21 17:14:04 +00:00
wiz
fe50bcdc76 Add default-off libusb option.
If you enable this, scdaemon can use some USB Tokens without another
pcsc daemon.

From Yasushi Oshima in PR 49760.
2015-03-21 16:24:51 +00:00
wiz
0653819946 Updated devel/pth to 2.0.7nb4 2015-03-21 16:18:20 +00:00
wiz
07b7bebeec Adapt syscall name patch for NetBSD>=6.0.
From Yasushi Oshima in PR 49759.
2015-03-21 16:18:12 +00:00
ryoon
e4732dcf6a Updated www/php-basercms to 3.0.7 2015-03-21 08:03:33 +00:00
ryoon
e462331871 Update to 3.0.7
Changelog:
7 New features and 27 bugfixes.
See http://basercms.net/release/3_0_7 (in Japanese).
2015-03-21 08:03:09 +00:00
ryoon
22d2284e85 Updated www/firefox-l10n to 36.0.3 2015-03-21 06:33:41 +00:00
ryoon
bfcbcb1447 Update to 36.0.3
* Sync with firefox-36.0.3
2015-03-21 06:31:23 +00:00
ryoon
93d2752bff Updated www/firefox to 36.0.3 2015-03-21 06:13:59 +00:00
ryoon
4df6b11c33 Update to 36.0.3
Changelog:
Fixed 36.0.3: Security fixes for issues disclosed at HP Zero Day Initiative's Pwn2Own contest
2015-03-21 06:13:16 +00:00
ryoon
2efea110b2 Updated www/php-ja-wordpress to 4.1.1 2015-03-21 04:15:47 +00:00
ryoon
8dd4e1da05 Update to 4.1.1
Changelog:
* 21 bugs are fixed.
2015-03-21 04:15:19 +00:00
tnn
4371204567 fix PLIST breakage on amd64 2015-03-21 02:20:52 +00:00
tnn
f8f2697102 fix build with clang ... but mark the package as BROKEN because even though
it builds now, the resulting binary does not boot in qemu.
2015-03-21 02:18:39 +00:00
tnn
a892c15c68 Fix build on MKGCC=no systems 2015-03-21 01:17:08 +00:00
tnn
f1375eacf1 don't send standard error to /dev/null, we'd like to know if cp(1) fails 2015-03-21 01:06:49 +00:00
tnn
bebdedacd1 Fix error spotted in bulk build.
1) add patch-elisp-comp from FreeBSD ports to fix
   "Wrong type argument: stringp, nil"
2) for some reason the unit test fails if we're in CET time zone so
   just set TZ=GMT in the make environment for now.
2015-03-21 00:36:08 +00:00
joerg
8aa80327f4 Has race conditions at least on NetBSD. 2015-03-20 22:46:09 +00:00
rodent
a9770fe561 Fix build on FreeBSD. Approved by gdt@. 2015-03-20 22:41:19 +00:00
tnn
96fef8ab60 Extend the list of packages that ccache.mk avoids in order to prevent
circular dependency errors on platforms where most builtins are provided
by pkgsrc.
2015-03-20 17:53:14 +00:00
taca
1fb1d4a781 + openssh-6.8p1. 2015-03-20 16:34:35 +00:00
taca
46db04877f Note update of PHP:
lang/php54	5.4.39
	lang/php55	5.5.23
	lang/php56	5.6.7
2015-03-20 16:34:12 +00:00
taca
72cbb2ccac Reset PKGREVISION with updating of php54, php55 and php56. 2015-03-20 16:33:28 +00:00
taca
034948e5a7 Update php56 to 5.6.7, including security fix.
19 Mar 2015, PHP 5.6.7

- Core:
  . Fixed bug #69174 (leaks when unused inner class use traits precedence).
    (Laruence)
  . Fixed bug #69139 (Crash in gc_zval_possible_root on unserialize).
    (Laruence)
  . Fixed bug #69121 (Segfault in get_current_user when script owner is not
    in passwd with ZTS build). (dan at syneto dot net)
  . Fixed bug #65593 (Segfault when calling ob_start from output buffering
    callback). (Mike)
  . Fixed bug #68986 (pointer returned by php_stream_fopen_temporary_file
    not validated in memory.c). (nayana at ddproperty dot com)
  . Fixed bug #68166 (Exception with invalid character causes segv). (Rasmus)
  . Fixed bug #69141 (Missing arguments in reflection info for some builtin
    functions). (kostyantyn dot lysyy at oracle dot com)
  . Fixed bug #68976 (Use After Free Vulnerability in unserialize()). (Stas)
  . Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM
    configuration options). (Anatol Belski)
  . Fixed bug #69207 (move_uploaded_file allows nulls in path). (Stas)

- CGI:
  . Fixed bug #69015 (php-cgi's getopt does not see $argv). (Laruence)

- CLI:
  . Fixed bug #67741 (auto_prepend_file messes up __LINE__). (Reeze Xia)

- cURL:
  . Fixed bug #69088 (PHP_MINIT_FUNCTION does not fully initialize cURL on
    Win32). (Grant Pannell)
  . Add CURLPROXY_SOCKS4A and CURLPROXY_SOCKS5_HOSTNAME constants if supported
    by libcurl. (Linus Unneback)

- Ereg:
  . Fixed bug #69248 (heap overflow vulnerability in regcomp.c) (CVE-2015-2305).
    (Stas)

- FPM:
  . Fixed bug #68822 (request time is reset too early). (honghu069 at 163 dot com)

- ODBC:
  . Fixed bug #68964 (Allowed memory size exhausted with odbc_exec). (Anatol)

- Opcache:
  . Fixed bug #69159 (Opcache causes problem when passing a variable variable
    to a function). (Dmitry, Laruence)
  . Fixed bug #69125 (Array numeric string as key). (Laruence)
  . Fixed bug #69038 (switch(SOMECONSTANT) misbehaves). (Laruence)

- OpenSSL:
  . Fixed bug #68912 (Segmentation fault at openssl_spki_new). (Laruence)
  . Fixed bug #61285, #68329, #68046, #41631 (encrypted streams don't observe
    socket timeouts). (Brad Broerman)
  . Fixed bug #68920 (use strict peer_fingerprint input checks)
    (Daniel Lowrey)
  . Fixed bug #68879 (IP Address fields in subjectAltNames not used)
    (Daniel Lowrey)
  . Fixed bug #68265 (SAN match fails with trailing DNS dot) (Daniel Lowrey)
  . Fixed bug #67403 (Add signatureType to openssl_x509_parse) (Daniel Lowrey)
  . Fixed bug (#69195 Inconsistent stream crypto values across versions)
    (Daniel Lowrey)

- pgsql:
  . Fixed bug #68638 (pg_update() fails to store infinite values).
    (william dot welter at 4linux dot com dot br, Laruence)

- Readline:
  . Fixed bug #69054 (Null dereference in readline_(read|write)_history() without
    parameters). (Laruence)

- SOAP:
  . Fixed bug #69085 (SoapClient's __call() type confusion through
    unserialize()). (andrea dot palazzo at truel dot it, Laruence)

- SPL:
  . Fixed bug #69108 ("Segmentation fault" when (de)serializing
    SplObjectStorage). (Laruence)
  . Fixed bug #68557 (RecursiveDirectoryIterator::seek(0) broken after
    calling getChildren()). (Julien)

- ZIP:
  . Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap
    boundary) (CVE-2015-2331). (Stas)
2015-03-20 16:31:47 +00:00
taca
72e144321e Update php55 to 5.5.23, including security fix.
19 Mar 2015, PHP 5.5.23

- Core:
  . Fixed bug #69174 (leaks when unused inner class use traits precedence).
    (Laruence)
  . Fixed bug #69139 (Crash in gc_zval_possible_root on unserialize).
    (Laruence)
  . Fixed bug #69121 (Segfault in get_current_user when script owner is not
    in passwd with ZTS build). (dan at syneto dot net)
  . Fixed bug #65593 (Segfault when calling ob_start from output buffering
    callback). (Mike)
  . Fixed bug #69017 (Fail to push to the empty array with the constant value
    defined in class scope). (Laruence)
  . Fixed bug #68986 (pointer returned by php_stream_fopen_temporary_file
    not validated in memory.c). (nayana at ddproperty dot com)
  . Fixed bug #68166 (Exception with invalid character causes segv). (Rasmus)
  . Fixed bug #69141 (Missing arguments in reflection info for some builtin
    functions). (kostyantyn dot lysyy at oracle dot com)
  . Fixed bug #68976 (Use After Free Vulnerability in unserialize()). (Stas)
  . Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM
    configuration options). (Anatol Belski)
  . Fixed bug #69207 (move_uploaded_file allows nulls in path). (Stas)

- CGI:
  . Fixed bug #69015 (php-cgi's getopt does not see $argv). (Laruence)

- CLI:
  . Fixed bug #67741 (auto_prepend_file messes up __LINE__). (Reeze Xia)

- cURL:
  . Fixed bug #69088 (PHP_MINIT_FUNCTION does not fully initialize cURL on
    Win32). (Grant Pannell)
  . Add CURLPROXY_SOCKS4A and CURLPROXY_SOCKS5_HOSTNAME constants if supported
    by libcurl. (Linus Unneback)

- Ereg:
  . Fixed bug #69248 (heap overflow vulnerability in regcomp.c). (Stas)

- FPM:
  . Fixed bug #68822 (request time is reset too early). (honghu069 at 163 dot com)

- ODBC:
  . Fixed bug #68964 (Allowed memory size exhausted with odbc_exec). (Anatol)

- Opcache:
  . Fixed bug #69125 (Array numeric string as key). (Laruence)
  . Fixed bug #69038 (switch(SOMECONSTANT) misbehaves). (Laruence)

- OpenSSL:
  . Fixed bugs #61285, #68329, #68046, #41631 (encrypted streams don't observe
    socket timeouts). (Brad Broerman)

- pgsql:
  . Fixed bug #68638 (pg_update() fails to store infinite values).
    (william dot welter at 4linux dot com dot br, Laruence)

- Readline:
  . Fixed bug #69054 (Null dereference in readline_(read|write)_history() without
    parameters). (Laruence)

- SOAP:
  . Fixed bug #69085 (SoapClient's __call() type confusion through
    unserialize()). (andrea dot palazzo at truel dot it, Laruence)

- SPL:
  . Fixed bug #69108 ("Segmentation fault" when (de)serializing
    SplObjectStorage). (Laruence)
  . Fixed bug #68557 (RecursiveDirectoryIterator::seek(0) broken after
    calling getChildren()). (Julien)

- ZIP:
  . Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap
    boundary) (CVE-2015-2331). (Stas)
2015-03-20 16:30:37 +00:00
taca
7e868e355f Update php54 to 5.4.39, including securitfy fix.
19 Mar 2015 PHP 5.4.39

- Core:
  . Fixed bug #68976 (Use After Free Vulnerability in unserialize()). (Stas)
  . Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM
    configuration options). (Anatol Belski)
  . Fixed bug #69207 (move_uploaded_file allows nulls in path). (Stas)

- Ereg:
  . Fixed bug #69248 (heap overflow vulnerability in regcomp.c). (Stas)

- SOAP:
  . Fixed bug #69085 (SoapClient's __call() type confusion through
    unserialize()). (Dmitry)

- ZIP:
  . Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap
    boundary). (Stas)
2015-03-20 16:29:23 +00:00
mef
c9d0386265 Fix problem of pod2man not found, thanks joerg. 2015-03-20 15:19:46 +00:00
ryoon
c0389a2c2c Fix build under Cygwin. 2015-03-20 14:46:47 +00:00
martin
3f916b6010 Updated www/firefox to 36.0.1nb1 2015-03-20 10:14:12 +00:00
martin
8f7aed372f Make it build & work on sparc64 again 2015-03-20 10:13:57 +00:00
taca
9c0bd257c2 Restore hpn-patch delated DISTFIELS. 2015-03-20 02:34:32 +00:00
taca
c6bcd3a2db Note update of mail/dovecot2-pigeonhole package to 0.4.7. 2015-03-20 01:26:09 +00:00
taca
8dd29ee170 Update dovecot2-pigeonhole to 0.4.7, a leaf package and this update is
needed to dovecot2-pigeonhole compatible with Dovecot 2.2.16.

v0.4.7 19-03-2015 Stephan Bosch <stephan@rename-it.nl>

	* editheader extension: Made protection against addition and deletion of
	  headers configurable separately. Also, the `Received' and `Auto-Submitted'
	  headers are no longer protected against addition by default.
	* Turned message envelope address parse errors into warnings.
	* The interpreter now accepts non-standard domain names, e.g. containing '_'.
	+ Implemented the Sieve index extension (RFC 5260).
	+ Implemented support for the mboxmetadata and servermetadata extensions
	  (RFC 5490).
	+ Implemented new sieve commands for the doveadm command line utility. These
	  commands are currently limited to ManageSieve operations, but the other
	  current sieve tools will be migrated to doveadm in the near future as well.
	+ Added more debug output about binary up-to-date checking.
	+ Added script metadata to binary dump output.
	- Fixed Sieve script binary up-to-date checking by normalizing the script
	  location.
	- The Sieve interpreter now flushes the duplicate database during start phase
	  of result execution rather than commit phase. This makes sure locks on the
	  duplicate database are released as soon as possible, preventing contention.
	- Performed a few optimizations in the lexical scanner of the language.
	- Fixed bug in `:matches' match-type that made a pattern without
	  wildcards match as if there were a '*' at the beginning.
	- Fixed crash in validation of the string parameter of the comparator tag.
	- extprograms extension: Made sure supplemental group privileges are also
	  dropped. This was a problem reported by Debian lintian.
	- Fixed bug in handling of binary errors for action side-effects and message
	  overrides.
	- file script storage: Restructured storage initialization to address
	  backwards compatibility issues.
	- dict script storage: Fixed small memory allocation bug.
2015-03-20 01:25:31 +00:00
tnn
3780d04ada g/c leftover patch 2015-03-20 01:04:40 +00:00
tnn
f30302de0e add missing patch sum and annotate the patch
bump revision
2015-03-20 00:58:38 +00:00
ryoon
274f335fe2 Updated fonts/ricty-ttf to 3.2.4 2015-03-19 23:41:40 +00:00
ryoon
91c4f7b2b1 Change LICENSE=. 2015-03-19 23:41:22 +00:00