security vulnerabilities.
* CVE-2009-0200/CVE-2009-0201: Manipulated Microsoft Word files can
lead to heap overflows and arbitrary code execution
* CVE-2009-2414/CVE-2009-2416: Manipulated XML documents can lead to
arbitrary code execution
Release notes: http://development.openoffice.org/releases/2.4.3.html
- Fix getline() problem (patches from misc/openoffice3/patches).
- Use internal neon (9 patches are required to use external neon).
- Use internal openssl for internal neon.
- Disable VBA extension (enabling this causes build error).
Shared directories can now be created independently by the pacakges
needing them and will be removed automatically by pkg_delete when empty.
Packages needing empty directories can use the @pkgdir command in PLIST.
Discussed and ok'd in thread starting at
http://mail-index.netbsd.org/tech-pkg/2009/06/30/msg003546.html
- Install gnome icons (with gnome option only).
- Install MIME info files.
- Fix name of .dekstop files.
- Use startup scripts in OOo (don't generate these in Makefile).
Bump PKGREVISION.
- Change installation directory.
- Reduce usage of ${WRKDIR}.
- Use language packs to install multiple languages.
- Install desktop files as symbolic links.
- Pass MAKE_JOBS to dmake.
- Fix build with PKG_DEVELOPER=yes (add missing rpath flag).
- Fix PLIST without gtk2 option.
- Fix browser plugin.
- Fix open-url with firefox3 and seamonkey.
- Shut up tar warning (remove leading /).
- Use system openssl.
- Use system icu.
- Add lang-all option.
This release fixes three security vulnerabilities.
- CVE-2008-3282: OpenOffice.org "rtl_allocateMemory()" Truncation
(fixed in openoffice2-2.4.1nb1)
- CVE-2008-2237: Manipulated WMF files can lead to heap overflows
and arbitrary code execution
- CVE-2008-2238: Manipulated EMF files can lead to heap overflows
and arbitrary code execution
Release note: http://development.openoffice.org/releases/2.4.2.html
X.Org found in NetBSD-current.
Thanks a lot to all who helped, especially Matthias Scheler who did
repeated tests on Mac OS X and older versions of NetBSD to make sure the
support for those platforms wouldn't be broken (or at least, not fatally,
as I would still expect a few hiccups here and there, because there is
only so much one can test in such limited time).
On the infrastructure side, this branch brings pkgconfig-builtin.mk, in
order to write very easily new builtin.mk files. It can actually handle
more than just pkgconfig files, but it will provide a version if it finds
such a file. x11.builtin.mk has also been made more useful and now all
existing (and future!) native-X11-related builtin.mk files should include
it.
- assume that Python 2.4 and 2.5 are compatible and allow checking for
fallout.
- remove PYTHON_VERSIONS_COMPATIBLE that are obsoleted by the 2.3+
default. Modify the others to deal with the removals.
