variables are no longer saved using MAKEFLAGS since the saved values aren't
correct for recursively invoked make targets that bsd.pkg.mk uses
internally for information-gathering, e.g. show-var, run-depends-list.
Instead of saving the values, we now just don't compute them during phases
of the build that don't care about the dependency information, e.g. when
not in extract, install, or package.
The 12 identified problems range from simple standard stack overflows, over heap overflows to an integer overflow that can be abused to cause a heap overflow. Due to the nature of instant messaging some of these bugs require man-in-the-middle attacks between client and server. But the underlying protocols are easy to implement and MIM attacks on ordinary TCP sessions is afairly simple task.
Please see http://security.e-matters.de/advisories/012004.html
for more details.
Apply the fix posted in that advisory (originally by the FreeBSD security
team) and bump PKGREVISION to 1.
definition is not intended to be set by the user, and so has a leading
'_', and is undocumented.
If set to "yes", then a "make clean" of the package will not be done,
thereby preserving the working directory. This is useful for
debugging problems in bulk builds.
(branching 24 January 2004, from /branches/1.0-stabilization)
http://svn.collab.net/repos/svn/tags/0.37.0
User-visible changes:
* bugfix: buffer overflow for AIX client
* 'svn merge' now notices ancestry by default. (r8390)
* bugfix: double Ctrl-C on windows no longer wedges repository.
* New date formats (see API change: Rewrite of date parser below)
* bugfix: Errors in authentication when --no-interactive is turned on (r8139)
* bugfix: Fix some 'access denied' errors on Windows (r8341, r8352)
Developer-visible changes:
* API change: Rewrite of date parser (r8327, r8328, r8329) (issue #408)
* bugfix: svn_fs__bdb_changes_fetch() fouls up change ordering (issue #1695)
* require SWIG >=1.3.19 (issue #1690)
* numerous changes to language bindings, to keep up with C API.
* fix: apr build issues (r8279, r8280, r8318) (issue #1666)
* changed the auth-provider C API to use 'realmstring' on all funcs
* check the ra plugin ABI versions.
* fix: ABI problem with blame. (r8494) (issue #1705)
* remove svn_io_file_printf from public API. (r8492) (issue #1653)
* extensive changes in the perl client bindings. (r8270)
* too many big and small internal code cleanups and fixes to mention here
