Commit graph

10170 commits

Author SHA1 Message Date
bsiegert
9ab6e4ca7b Revbump all Go packages after Go 1.10 update. 2018-03-04 15:52:12 +00:00
bsiegert
3a8354a239 Update Go to 1.10. Via wip.
Full release notes at https://golang.org/doc/go1.10.

The latest Go release, version 1.10, arrives six months after Go 1.9. Most of
its changes are in the implementation of the toolchain, runtime, and libraries.
As always, the release maintains the Go 1 promise of compatibility. We expect
almost all Go programs to continue to compile and run as before.

This release improves caching of built packages, adds caching of successful
test results, runs vet automatically during tests, and permits passing string
values directly between Go and C using cgo. A new compiler option whitelist may
cause unexpected invalid flag errors in code that built successfully with older
releases.


As announced in the Go 1.9 release notes, Go 1.10 now requires FreeBSD 10.3 or
later; support for FreeBSD 9.3 has been removed.

Go now runs on NetBSD again but requires the unreleased NetBSD 8. Only GOARCH
amd64 and 386 have been fixed. The arm port is still broken.

On 32-bit MIPS systems, the new environment variable settings GOMIPS=hardfloat
(the default) and GOMIPS=softfloat select whether to use hardware instructions
or software emulation for floating-point computations.

Go 1.10 is the last release that will run on OpenBSD 6.0. Go 1.11 will require
OpenBSD 6.2.

Go 1.10 is the last release that will run on OS X 10.8 Mountain Lion or OS X
10.9 Mavericks. Go 1.11 will require OS X 10.10 Yosemite or later.

Go 1.10 is the last release that will run on Windows XP or Windows Vista. Go
1.11 will require Windows 7 or later.
2018-03-04 12:54:06 +00:00
gdt
2419a159fd llvm: REmove libLLVM from list of packages to be updated
libLLVM has a different versioning scheme, to accomodate depending
packages that typically do not work with updated libLLVM.
2018-03-04 01:49:21 +00:00
gdt
9bf0a8878c libLLVM: Note plan for this to stay at 4.0 2018-03-04 01:47:39 +00:00
gdt
2b2f68c97c libLLVM: Note that not updating from 4.0 is intentional 2018-03-04 01:46:37 +00:00
ryoon
ab803a6bb2 Update to 1.24.1
Changelog:
    Do not abort when unwinding through FFI (this reverts behavior added
      in 1.24.0)
    Emit UTF-16 files for linker arguments on Windows
    Make the error index generator work again
    Cargo will warn on Windows 7 if an update is needed.
2018-03-03 22:11:26 +00:00
rillig
9050884761 lang/ghc7: download from https instead of http (redirected) 2018-03-03 19:43:20 +00:00
fhajny
c8e449b849 lang/nodejs: Update to 9.7.1.
- libuv: Updated to libuv 1.19.2
- src: Add initial support for Node.js-specific post-mortem
  metadata
- timers: The return value of setImmediate() now has ref() and
  unref() methods
- util: It is now possible to get the name for a numerical
  platform-specific error code as a string
2018-03-02 11:23:35 +00:00
triaxx
862e6d4a6d Enable FreeBSD support 2018-03-02 05:59:18 +00:00
taca
039f5bf887 lang/php56: update to 5.6.34
01 Mar 2018, PHP 5.6.34

- Standard:
  . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas)
2018-03-02 02:13:44 +00:00
taca
5d99ef1ebd lang/php70: update to 7.0.28
01 Mar 2018 PHP 7.0.28

- Standard:
  . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas)
2018-03-02 02:12:26 +00:00
taca
769ee34b6e lang/php72: update to 7.2.3
01 Mar 2018, PHP 7.2.3

- Core:
  . Fixed bug #75864 ("stream_isatty" returns wrong value on s390x). (Sam Ding)

- Apache2Handler:
  . Fixed bug #75882 (a simple way for segfaults in threadsafe php just with
    configuration). (Anatol)

- Date:
  . Fixed bug #75857 (Timezone gets truncated when formatted). (carusogabriel)
  . Fixed bug #75928 (Argument 2 for `DateTimeZone::listIdentifiers()` should
    accept `null`). (Pedro Lacerda)
  . Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).
    (jhdxr)

- LDAP:
  . Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros). (dzuelke)

- libxml2:
  . Fixed bug #75871 (use pkg-config where available). (pmmaga)

- PGSQL:
  . Fixed bug #75838 (Memory leak in pg_escape_bytea()). (ard_1 at mail dot ru)

- Phar:
  . Fixed bug #54289 (Phar::extractTo() does not accept specific directories to
    be extracted). (bishop)
  . Fixed bug #65414 (deal with leading slash while adding files correctly).
    (bishopb)
  . Fixed bug #65414 (deal with leading slash when adding files correctly).
    (bishopb)

- ODBC:
  . Fixed bug #73725 (Unable to retrieve value of varchar(max) type). (Anatol)

- Opcache:
  . Fixed bug #75729 (opcache segfault when installing Bitrix). (Nikita)
  . Fixed bug #75893 (file_get_contents $http_response_header variable bugged
    with opcache). (Nikita)
  . Fixed bug #75938 (Modulus value not stored in variable). (Nikita)

- SPL:
  . Fixed bug #74519 (strange behavior of AppendIterator). (jhdxr)

- Standard:
  . Fixed bug #75916 (DNS_CAA record results contain garbage). (Mike,
    Philip Sharp)
  . Fixed bug #75981 (Prevent reading beyond buffer start in http wrapper).
    (Stas)
2018-03-02 02:11:24 +00:00
taca
265fe9fbc3 lang/php71: update to 7.1.15
01 Mar 2018, PHP 7.1.15

- Apache2Handler:
  . Fixed bug #75882 (a simple way for segfaults in threadsafe php just with
    configuration). (Anatol)

- Date:
  . Fixed bug #75857 (Timezone gets truncated when formatted). (carusogabriel)
  . Fixed bug #75928 (Argument 2 for `DateTimeZone::listIdentifiers()` should
    accept `null`). (Pedro Lacerda)
  . Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).
    (jhdxr)

- PGSQL:
  . Fixed #75838 (Memory leak in pg_escape_bytea()). (ard_1 at mail dot ru)

- ODBC:
  . Fixed bug #73725 (Unable to retrieve value of varchar(max) type). (Anatol)

- LDAP:
  . Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros). (dzuelke)

- libxml2:
  . Fixed bug #75871 (use pkg-config where available). (pmmaga)

- Phar:
  . Fixed bug #65414 (deal with leading slash when adding files correctly).
    (bishopb)

- SPL:
  . Fixed bug #74519 (strange behavior of AppendIterator). (jhdxr)

- Standard:
  . Fixed bug #75916 (DNS_CAA record results contain garbage). (Mike,
    Philip Sharp)
  . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas)
2018-03-02 02:09:48 +00:00
fhajny
6af9d8b363 lang/elixit: Update to 1.6.2.
1. Enhancements

Mix
- [mix compile.erlang] Teach Mix erlang compiler alternative spelling
  for -behavior declaration
- [mix format] Support the :subdirectories configuration that points
  to other directories with their own .formatter.exs file. This is
  useful in umbrella applications. mix new --umbrella has also been
  changed to use this new configuration by default
- [mix format] Include the current environment for missing dependency
  errors

2. Bug fixes

Elixir
- [Code.Formatter] Ensure -> does not exceed line length
- [DynamicSupervisor] Properly tag error reports generated by dynamic
  supervisors so they can be properly translated by Logger
- [DynamicSupervisor] Consider extra arguments during child restart
- [Kernel] Ensure arguments given to a guard defined with defguard are
  evaluated in the correct order
- [Module] Do not remove docs for previous function declaration when
  @impl true is used
- [Supervisor] Ensure use Supervisor properly adds the @behaviour
  Supervisor annotation

Mix
- [Mix.Shell] Bring back Mix.Shell.cmd/2 - this arity was defined via
  a default argument that was accidentally removed
2018-02-28 15:14:02 +00:00
bsiegert
daad0d6527 Mention that on NetBSD, Go 1.4 needs COMPAT_60 to be enabled in the kernel.
Prodded by spz@ in a recent pullup ticket.
2018-02-27 15:19:15 +00:00
adam
b475bd9275 py-js2py: updated to 0.59
0.59:
Bug fixes.
2018-02-26 16:12:32 +00:00
wiz
0bbaf95ef3 vala: update to 0.38.8.
Vala 0.38.8
===========
 * Various bug fixes:
  - Fix GDestroyNotify of delegate parameters in delegate declaration [#639059]
  - Avoid critical when connecting dynamic signals
  - compiler: Prefix headers for set_cheader_override() if includedir is given
    [#793299]
  - Don't warn about unused internal methods which are meant to be visible
    on DBus [#593902]
  - libvaladoc: Prevent WITH_CGRAPH conditional having an impact on generated
    sources

 * Bindings:
  - gio-2.0: Cherry-pick some DBusProxy fixes from 0.40
  - gstreamer-1.0: Update from 1.13+ git master
  - gdk-3.0,gtk+-3.0: Update to 3.22.27
2018-02-25 21:26:09 +00:00
taca
dd2a5a635e lang/ruby: switch default version of Ruby to 2.4
Switch default version of Ruby to 2.4 from 2.3.
Ruby 2.4 supports OpenSSL 1.1.0 and most stable release currently.
2018-02-25 12:24:15 +00:00
christos
032223b4e3 Bump from 7.0 to 7.1: Justification:
- NetBSD current has OpenSSL-1.1 and this requires at least 7.1 to compile.
- http://php.net/supported-versions.php: 7.2 was released 2 months ago and
  is too fresh.
2018-02-23 23:37:38 +00:00
fhajny
0d33e3c1a3 lang/nodejs: Update to 9.6.1.
nodejs 9.6.1

events:
- events.usingDomains being set to false by default was removed in
  9.6.0 which was a change in behavior compares to 9.5.0. This
  behavior change has been reverted and the events object now has
  usingDomains preset to false, which is the behavior in 9.x prior
  to 9.6.0

nodejs 9.6.0

async_hooks:
- deprecate unsafe emit{Before,After}
- rename PromiseWrap.parentId to PromiseWrap.isChainedPromise
deps:
- update node-inspect to 1.11.3
- ICU 60.2 bump
- Introduce ScriptOrModule and HostDefinedOptions to V8
http:
- add options to http.createServer() for IncomingMessage and
  ServerReponse
http2:
- add http fallback options to .createServer
https:
- Adds the remaining options from tls.createSecureContext() to the
  string generated by Agent#getName(). This allows https.request() to
  accept the options and generate unique sockets appropriately.
inspector:
- --inspect-brk for es modules
lib:
- allow process kill by signal number
module:
- enable dynamic import
- dynamic import is now supported
n-api:
- add methods to open/close callback scope
src:
- allow --perf-(basic-)?prof in NODE_OPTIONS
vm:
- add support for es modules
2018-02-23 19:42:04 +00:00
wiz
f0711fb72d lang/*: remove BROKEN markers for known openssl-1.1 breakage
Requested by joerg.
2018-02-23 15:26:14 +00:00
fhajny
4b580df1e8 lang/openjdk8: The libinstrument, libnpt and libsplashscreen libs
require to be linked against libiconv on SunOS too. Fixes problems
with e.g. the JPDA debugger. Bump PKGREVISION.
2018-02-23 14:43:49 +00:00
adam
dce6a117af py-hy: updated to 0.14.0
0.14.0

Removals
* Python 3.3 is no longer supported
* def is gone; use setv instead
* apply is gone; use the new #* and #** syntax instead
* yield-from is no longer supported under Python 2
* Periods are no longer allowed in keywords
* Numeric literals can no longer begin with a comma or underscore
* Literal Inf\s and NaN\s must now be capitalized like that

Other Breaking Changes
* Single-character "sharp macros" are now "tag macros", which can have
  longer names
* xi from hy.extra.anaphoric is now a tag macro #%
* eval is now a function instead of a special form

New Features
* The compiler now automatically promotes values to Hy model objects
  as necessary, so you can write (eval (+ 1 ~n)) instead of
  (eval (+ 1 ~(HyInteger n)))
* return has been implemented as a special form
* Added a form of string literal called "bracket strings" delimited by
  #[FOO[ and ]FOO], where FOO is customizable
* Added support for PEP 492 (async and await) with fn/a, defn/a,
  with/a, and for/a
* Added Python-style unpacking operators #* and  #** (e.g.,
  (f #* args #** kwargs))
* Added a macro comment
* Added EDN #_ syntax to discard the next term
* while loops may now contain an else clause, like for loops
* #% works on any expression and has a new &kwargs parameter %**
* Added a macro doc and a tag macro #doc
* get is available as a function
* ~@ (unquote-splice) form now accepts any false value as empty

Bug Fixes
* Relative imports (PEP 328) are now allowed
* Numeric literals are no longer parsed as symbols when followed by a dot
  and a symbol
* Hy now respects the environment variable PYTHONDONTWRITEBYTECODE
* String literals should no longer be interpreted as special forms or macros
* Tag macros (née sharp macros) whose names begin with ! are no longer
  mistaken for shebang lines
* Fixed a bug where REPL history wasn't saved if you quit the REPL with
  (quit) or (exit)
* exec now works under Python 2
* No TypeError from multi-arity defn returning values evaluating to None
* try forms are now possible in defmacro and deftag
* Multiple expressions are now allowed in try
* Fixed a crash when macroexpand\ing a macro with a named import
* Fixed a crash when with suppresses an exception. with now returns
  None in this case.
* Fixed a crash when --repl-output-fn raises an exception
* Fixed a crash when HyTypeError was raised with objects that had no
  source position
* assoc now evaluates its arguments only once each
* Multiple expressions are now allowed in the else clause of
  a for loop
* else clauses in for and while are recognized more reliably
* Statements in the condition of a while loop are repeated properly
* Argument destructuring no longer interferes with function docstrings
* Nullary yield-from is now a syntax error
* break and continue now raise an error when given arguments
  instead of silently ignoring them

Misc. Improvements
* read, read_str, and eval are exposed and documented as top-level
  functions in the hy module
* An experimental let macro has been added to hy.contrib.walk
2018-02-23 07:03:09 +00:00
adam
b5006d1161 py-asttokens: updated to 1.1.10
1.1.10:
Unknown changes.
2018-02-22 10:07:59 +00:00
wiz
48141e5499 php: bump default to 70. 2018-02-20 13:22:42 +00:00
wiz
8e26913586 ruby23: mark as broken on NetBSD-current due to openssl-1.1 2018-02-20 06:43:32 +00:00
wiz
eef6a7adac ruby22-base: mark as broken on NetBSD-current due to openssl-1.1 2018-02-20 06:43:14 +00:00
wiz
db48249836 python34: mark as broken on NetBSD-current due to openssl-1.1 2018-02-20 06:42:32 +00:00
wiz
140c937b88 php56: mark as broken on NetBSD-current due to openssl-1.1 2018-02-20 06:42:20 +00:00
taca
7116f74b77 lang/ruby22-base: rubygem security fix
Add an patch to fix security problem of rubygems.

Bump PKGREVISION.
2018-02-19 16:47:53 +00:00
taca
5716995b01 lang/ruby25-base: rubygem security fix
Add an patch to fix security problem of rubygems.

Bump PKGREVISION.
2018-02-19 16:47:17 +00:00
taca
5e98e578da lang/ruby24-base: rubygem security fix
Add an patch to fix security problem of rubygems.

Bump PKGREVISION.
2018-02-19 16:46:58 +00:00
taca
9cc413ac3a lang/ruby23-base: rubygem security fix
Add an patch to fix security problem of rubygems.

Bump PKGREVISION.
2018-02-19 16:46:26 +00:00
taca
f5b3ce1a39 lang/ruby: GC unused variable related to version of Rubygems
Remove RUBY_GEMS_VERSION which is referenced by _RUBYGEMS_MAJOR and
_RUBYGEMS_MINOR, unused variables.
2018-02-19 13:48:11 +00:00
taca
2847f349e9 Add RUBY_NAME to PLIST_SUBST to fix ruby-xapian. 2018-02-19 13:31:23 +00:00
ryoon
a325dccc60 Update to 1.24.0
* Disable SunOS support for a while

Changelog:
Version 1.24.0 (2018-02-15)
Language
    External sysv64 ffi is now available. eg. extern "sysv64" fn foo () {}

Compiler
    rustc now uses 16 codegen units by default for release builds. For
      the fastest builds, utilize codegen-units=1.
    Added armv4t-unknown-linux-gnueabi target.
    Add aarch64-unknown-openbsd support

Libraries
    str::find::<char> now uses memchr. This should lead to a 10x improvement
      in performance in the majority of cases.
    OsStr's Debug implementation is now lossless and consistent with Windows.
    time::{SystemTime, Instant} now implement Hash.
    impl From<bool> for AtomicBool
    impl From<{CString, &CStr}> for {Arc<CStr>, Rc<CStr>}
    impl From<{OsString, &OsStr}> for {Arc<OsStr>, Rc<OsStr>}
    impl From<{PathBuf, &Path}> for {Arc<Path>, Rc<Path>}
    float::from_bits now just uses transmute. This provides some optimisations
      from LLVM.
    Copied AsciiExt methods onto char
    Remove T: Sized requirement on ptr::is_null()
    impl From<RecvError> for {TryRecvError, RecvTimeoutError}
    Optimised f32::{min, max} to generate more efficent x86 assembly
    [u8]::contains now uses memchr which provides a 3x speed improvement

Stabilized APIs
    RefCell::replace
    RefCell::swap
    atomic::spin_loop_hint

The following functions can now be used in a constant expression.
eg. let buffer: [u8; size_of::<usize>()];, static COUNTER: AtomicUsize =
AtomicUsize::new(1);

    AtomicBool::new
    AtomicUsize::new
    AtomicIsize::new
    AtomicPtr::new
    Cell::new
    {integer}::min_value
    {integer}::max_value
    mem::size_of
    mem::align_of
    ptr::null
    ptr::null_mut
    RefCell::new
    UnsafeCell::new

Cargo
    Added a workspace.default-members config that overrides implied --all
      in virtual workspaces.
    Enable incremental by default on development builds. Also added
      configuration keys to Cargo.toml and .cargo/config to disable on
      a per-project or global basis respectively.

Misc
Compatibility Notes
    Floating point types Debug impl now always prints a decimal point.
    Ipv6Addr now rejects superfluous ::'s in IPv6 addresses This is in
      accordance with IETF RFC 4291 Sec. 2.2.
    Unwinding will no longer go past FFI boundaries, and will instead abort.
    Formatter::flags method is now deprecated. The sign_plus, sign_minus,
      alternate, and sign_aware_zero_pad should be used instead.
    Leading zeros in tuple struct members is now an error
    column!() macro is one-based instead of zero-based
    fmt::Arguments can no longer be shared across threads
    Access to #[repr(packed)] struct fields is now unsafe
    Cargo sets a different working directory for the compiler
2018-02-18 12:12:54 +00:00
rillig
057906f507 lang/mercury: move HTML documentation to share/doc/mercury/html 2018-02-18 05:30:55 +00:00
rillig
05c3eb5ef8 lang/jikes: move documentation to share/doc/jikes 2018-02-18 05:06:18 +00:00
wiz
b0df3c4789 openjdk8: remove -Werror from compiler flags. 2018-02-16 22:31:01 +00:00
jdolecek
db831ebb99 remove patches/patch-ext_imap_config.m4, it's not needed any more
mail/php-imap was changed to not use the option this patch adds; it was
also entirely ineffective in what it was supposed to do
2018-02-16 22:26:29 +00:00
fhajny
2ad4cb62d5 lang/nodejs6: Update to 6.13.0.
- console:
  - added console.count() and console.clear()
- crypto:
  - expose ECDH class
  - added cypto.randomFill() and crypto.randomFillSync()
  - warn on invalid authentication tag length
- deps:
  - upgrade libuv to 1.16.1
- dgram:
  - added socket.setMulticastInterface()
- http:
  - add agent.keepSocketAlive and agent.reuseSocket as to allow
    overridable keep-alive behavior of `Agent`
- lib:
  - return this from net.Socket.end()
- module:
  - add builtinModules api that provides list of all builtin modules
    in Node
- net:
  - return this from getConnections()
- promises:
  - more robust stringification for unhandled rejections
- repl:
  - improve require() autocompletion
- src:
  - add openssl-system-ca-path configure option
  - add --use-bundled-ca --use-openssl-ca check
  - add process.ppid
- tls:
  - accept `lookup` option for `tls.connect()`
- tools, build:
  - a new macOS installer!
- url:
  - WHATWG URL api support
- util:
  - add %i and %f formatting specifiers
2018-02-16 11:53:54 +00:00
ryoon
23ad862b7b Update to 1.8.162
* Pass -fno-lifetime-dse for GCC 6 to prevent segfault

Changelog:
Fix security bugs
CVE-2018-2638
CVE-2018-2639
CVE-2018-2633
CVE-2018-2627
CVE-2018-2637
CVE-2018-2634
CVE-2018-2582
CVE-2018-2641
CVE-2018-2618
CVE-2018-2629
CVE-2018-2603
CVE-2018-2657
CVE-2018-2599
CVE-2018-2581
CVE-2018-2602
CVE-2018-2677
CVE-2018-2678
CVE-2018-2588
CVE-2018-2663
CVE-2018-2675
CVE-2018-2579
2018-02-13 12:57:44 +00:00
wiz
e3f7fa4b12 vala: update to 0.38.7.
Vala 0.38.7
===========
 * Regression fix:
  - codegen: Don't try to infer error argument on async begin methods [#793158]
    This was a regression introduced by [#614294]

Vala 0.38.6
===========
 * Various bug fixes:
  - girparser:
    + Set NoAccessorMethod for non-readable and construct-only properties
    + Ignore conflicting closure/destroy indexes
    + Don't accept methods as property-accessor which throw errors [#792998]
  - codegen:
    + Infer error parameter from abstract/virtual base methods [#614294]
    + Fix return-type for cancelled async creation methods of classes [#792942]
  - vala: Variadic constructors without a real first parameter are not allowed
  - libvaladoc: Keep bootstrap-support with valac >= 0.16.1

 * Bindings:
  - gstreamer-1.0: Update from 1.13+ git master
  - gtk+-4.0: Only override type of "event" parameters

Vala 0.38.5
===========
 * Various improvements and bug fixes:
  - codegen
    + Only add property-enum and GParamSpec-array for GObject classes
    + Add destroy param when invoking delegate returned by delegate [#792077]
  - vala: Add pkgdatadir and pkglibdir to pkg-config file
  - gidlparser: Update type qualifiers
  - libvaladoc: Allow @link tags to be split over multiple lines [#646982]
  - libvaladoc: Add support for single line documentation comments [#736483]
  - vala: Fix parameter type inference of overridden async methods [#792660]
  - codewriter: Don't use string.replace() to apply header_to_override [#731322]

 * Bindings:
  - glib-2.0: Add GLib.OPTION_REMAINING and GLib.OptionFlags.NONE
  - gstreamer-1.0: Update from 1.13+ git master
  - gtk+-2.0: Mark MessageDialog constructor parameter, message_format, as
    nullable [#791570]
  - gtk+-2.0/3.0: Don't hide user_data in Clipboard.set_with_data() [#792237]
  - gtk+-3.0: Update to 3.22.26+6f26d0dc
  - gtk+-4.0: Update to 3.93.0 and split Gsk.RenderNode into several classes
  - libwnck-3.0: Update to 3.24.1
  - posix: Add ctime(3) and fix binding of struct hostent and gethostbyname(3)
  - webkit2gtk-4.0: Update to 2.19.5
  - webkit2gtk-web-extension-4.0: Fix DOM.EventTarget interface
2018-02-11 16:27:27 +00:00
adam
6581d74097 py-cxfreeze: updated to 5.1.1
Version 5.1.1:
Correct code used to identify the directory in which the library and its zip file are located.
Ensure that the pythoncom and pywintypes DLLs are found in the lib directory, not in the base directory.
Copy dependent files to the same directory as the file it depends on, not the root directory; also add a sample for PyQt5 to demonstrate its correct use.

Version 5.1:
Use fixed library location on all platforms; should correct the error “no module named __startup__”.
Correct sqlite3 hook for use in Python 2.7.
Correct usage of scipy.lib.
Correct handling of __path__ attribute in module.
Fix gevent bug 42.
Droppped support for Python 3.4.
2018-02-09 08:04:41 +00:00
jdolecek
7b39c84375 Add upstream bug report number for the libgcc part of patch too
Thanks Jonathan for elaboration of why it's necessary.
2018-02-09 00:01:13 +00:00
jdolecek
f88f94cca8 note configure meta_ccld was reported upstream as #75940 2018-02-08 21:50:55 +00:00
jdolecek
3123663b49 drop patch removing pthread checks for apache <2.4.1 module build
the patch predates php56, doesn't seem to be necessary when building
with apache22, and we want to reduce diffs against upstream; maybe
that part was needed with distant past with apache 1.3 or whatnot,
but that is not in pkgsrc any more
2018-02-08 21:23:04 +00:00
jdolecek
75a44c8ee3 remove part of configure patch related to sqlite3
the part of the patch is not needed anymore, we use external sqlite3 lib,
and the patch was for the bundled sqlite3 build
2018-02-08 20:55:42 +00:00
bsiegert
66aa33f03a Update Go to 1.9.4.
By using the clang or gcc plugin mechanism, it was possible for an attacker to
trick the “go get” command into executing arbitrary code. The go command now
restricts the set of allowed host compiler and linker arguments in cgo source
files to a list of allowed flags, in particular disallowing -fplugin= and
-plugin=.

The issue is CVE-2018-6574 and Go issue golang.org/issue/23672. See the Go
issue for details.

Thanks to Christopher Brown of Mattermost for reporting this problem.
2018-02-08 19:32:17 +00:00
jperkin
b7fb739101 php: Remove LIBTOOL_OVERRIDE=YES.
This was added 8 years ago intending to ensure pkgsrc libtool was used, except
it actually did the opposite.  By default we will try to replace any script
named "libtool" up to the override depth.  Setting LIBTOOL_OVERRIDE changes
the behaviour to instead override the list of filenames specified by the
LIBTOOL_OVERRIDE variable.  Thus we were trying to replace any file named
"YES" instead of "libtool".

Noticed by SmartOS/clang builds of php-intl which were using the supplied
broken libtool script instead of the correct pkgsrc one.
2018-02-07 16:14:36 +00:00