pkgsrc, branch pkgsrc-2013Q4

pullup 4350

2014-03-22T18:22:13Z

Pullup ticket #4350 - requested by tron

2014-03-22T18:21:02Z

graphics/freetype2: build fix Revisions pulled up: - graphics/freetype2/buildlink3.mk 1.44 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: jperkin Date: Wed Mar 19 10:16:33 UTC 2014 Modified Files: pkgsrc/graphics/freetype2: buildlink3.mk Log Message: Move bzip2 and zlib buildlink3 out of the png PKG_OPTION check, they are unconditional dependencies. To generate a diff of this commit: cvs rdiff -u -r1.43 -r1.44 pkgsrc/graphics/freetype2/buildlink3.mk

pullup 4349

2014-03-21T08:03:49Z

Pullup ticket #4349 - requested by tron

2014-03-21T08:02:35Z

www/apache24: security update Revisions pulled up: - www/apache24/Makefile 1.26 - www/apache24/PLIST 1.15 - www/apache24/distinfo 1.13 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: adam Date: Tue Mar 18 20:09:08 UTC 2014 Modified Files: pkgsrc/www/apache24: Makefile PLIST distinfo Log Message: Changes 2.4.9: *) mod_ssl: Work around a bug in some older versions of OpenSSL that would cause a crash in SSL_get_certificate for servers where the certificate hadn't been sent. *) mod_lua: Add a fixups hook that checks if the original request is intend= ed for LuaMapHandler. This fixes a bug where FallbackResource invalidates t= he LuaMapHandler directive in certain cases by changing the URI before the = map handler code executes Changes 2.4.8: *) SECURITY: CVE-2014-0098 (cve.mitre.org) Clean up cookie logging with fewer redundant string parsing passes. Log only cookies with a value assignment. Prevents segfaults when logging truncated cookies. *) SECURITY: CVE-2013-6438 (cve.mitre.org) mod_dav: Keep track of length of cdata properly when removing leading spaces. Eliminates a potential denial of service from specifically crafted DAV WRITE requests *) core: Support named groups and backreferences within the LocationMatch, DirectoryMatch, FilesMatch and ProxyMatch directives. (Requires non-ancient PCRE library) *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding TE/CL conflicts. *) mod_dir: Add DirectoryCheckHandler to allow a 2.2-like behavior, skipping execution when a handler is already set. *) mod_ssl: Do not perform SNI / Host header comparison in case of a forward proxy request. *) mod_ssl: Remove the hardcoded algorithm-type dependency for the SSLCertificateFile and SSLCertificateKeyFile directives, to enable future algorithm agility, and deprecate the SSLCertificateChainFile directive (obsoleted by SSLCertificateFile). *) mod_rewrite: Add RewriteOptions InheritDown, InheritDownBefore, and IgnoreInherit to allow RewriteRules to be pushed from parent scopes to child scopes without explicitly configuring each child scope. *) prefork: Fix long delays when doing a graceful restart. *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions 5+ instead of just for FreeBSD 5. *) mod_proxy_wstunnel: Avoid busy loop on client errors, drop message IDs 02445, 02446, and 02448 to TRACE1 from DEBUG. *) mod_remoteip: Correct the trusted proxy match test. *) mod_proxy_fcgi: Fix error message when an unexpected protocol version number is received from the application. *) mod_remoteip: Use the correct IP addresses to populate the proxy_ips fie= ld. *) mod_lua: Update r:setcookie() to accept a table of options and add domai= n, path and httponly to the list of options available to set. *) mod_lua: Fix r:setcookie() to add, rather than replace, the Set-Cookie header. *) mod_lua: Allow for database results to be returned as a hash with row-name/value pairs instead of just row-number/value. *) mod_rewrite: Add %{CONN_REMOTE_ADDR} as the non-useragent counterpart to %{REMOTE_ADDR}. *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't save the socket for reuse by the next worker as if it were an APR_SO_DISCONNECTED socket. Restores 2.2 behavior. *) mod_dir: Don't search for a DirectoryIndex or DirectorySlash on a URL that was just rewritten by mod_rewrite. *) mod_session: When we have a session we were unable to decode, behave as if there was no session at all. *) mod_session: Fix problems interpreting the SessionInclude and SessionExclude configuration. *) mod_authn_core: Allow 'es to be seen from auth stanzas under virtual hosts. *) mod_proxy_fcgi: Use apr_socket_timeout_get instead of hard-coded 30 seconds timeout. *) mod_proxy: Added support for unix domain sockets as the backend server endpoint *) build: only search for modules (config*.m4) in known subdirectories, see build/config-stubs. *) mod_cache_disk: Fix potential hangs on Windows when using mod_cache_disk. *) mod_ssl: Add support for OpenSSL configuration commands by introducing the SSLOpenSSLConfCmd directive. *) mod_proxy: Remove (never documented) syntax which is equivalent to . *) mod_authz_user, mod_authz_host, mod_authz_groupfile, mod_authz_dbm, mod_authz_dbd, mod_authnz_ldap: Support the expression parser within the require directives. *) mod_proxy_http: Core dumped under high load. *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size previously limited to 64MB. *) mod_lua: Use binary copy when dealing with uploads through r:parsebody() to prevent truncating files. To generate a diff of this commit: cvs rdiff -u -r1.25 -r1.26 pkgsrc/www/apache24/Makefile cvs rdiff -u -r1.14 -r1.15 pkgsrc/www/apache24/PLIST cvs rdiff -u -r1.12 -r1.13 pkgsrc/www/apache24/distinfo

Pullup ticket #4348.

2014-03-18T12:43:15Z

Pullup ticket #4348 - requested by taca

2014-03-18T12:42:57Z

net/samba: security update Revisions pulled up: - net/samba/Makefile 1.242-1.247 - net/samba/distinfo 1.97-1.98 - net/samba/patches/patch-ab 1.29 --- Module Name: pkgsrc Committed By: obache Date: Tue Jan 28 12:16:39 UTC 2014 Modified Files: pkgsrc/net/samba: Makefile Log Message: Use GNU_CONFIGURE_LIBDIR for --libdir. --- Module Name: pkgsrc Committed By: tron Date: Wed Feb 12 23:18:57 UTC 2014 Modified Files: pkgsrc/net/samba: Makefile Log Message: Recursive PKGREVISION bump for OpenSSL API version bump. --- Module Name: pkgsrc Committed By: obache Date: Mon Mar 3 08:05:07 UTC 2014 Modified Files: pkgsrc/net/samba: Makefile Log Message: simplify with SUBST_VARS. --- Module Name: pkgsrc Committed By: obache Date: Mon Mar 3 08:15:10 UTC 2014 Modified Files: pkgsrc/net/samba: Makefile distinfo pkgsrc/net/samba/patches: patch-ab Log Message: Replace log dir in the default sample config file correctly. Bump PKGREVISION. --- Module Name: pkgsrc Committed By: jperkin Date: Thu Mar 13 11:08:54 UTC 2014 Modified Files: pkgsrc/net/samba: Makefile Log Message: Set USE_GCC_RUNTIME=yes for packages which build shared libraries but do not use libtool to do so. This is required to correctly depend upon a gcc runtime package (e.g. gcc47-libs) when using USE_PKGSRC_GCC_RUNTIME. --- Module Name: pkgsrc Committed By: taca Date: Mon Mar 17 14:01:57 UTC 2014 Modified Files: pkgsrc/net/samba: Makefile distinfo Log Message: Update samba to 3.6.23. ============================== Release Notes for Samba 3.6.23 March 11, 2014 ============================== This is a security release in order to address CVE-2013-4496 (Password lockout not enforced for SAMR password changes). o CVE-2013-4496: Samba versions 3.4.0 and above allow the administrator to implement locking out Samba accounts after a number of bad password attempts. However, all released versions of Samba did not implement this check for password changes, such as are available over multiple SAMR and RAP interfaces, allowing password guessing attacks.

Pullup ticket #4347.

2014-03-17T09:31:07Z

Pullup ticket #4347 - requested by spz

2014-03-17T09:30:55Z

graphics/freetype2: security update Revisions pulled up: - graphics/freetype2/Makefile 1.92-1.94 - graphics/freetype2/PLIST 1.21 - graphics/freetype2/buildlink3.mk 1.38-1.43 - graphics/freetype2/distinfo 1.51 - graphics/freetype2/options.mk 1.1-1.2 --- Module Name: pkgsrc Committed By: spz Date: Thu Mar 13 23:26:35 UTC 2014 Modified Files: pkgsrc/graphics/freetype2: Makefile PLIST buildlink3.mk distinfo Log Message: security update, upstream short changelog ('here' being releasenotes): FreeType 2.5.3 2014-03-08 FreeType 2.5.3 has been released. All users should upgrade due to fixed vulnerability in the CFF driver (CVE-2014-2240). Its main new feature is much enhanced support of auto-hinting SFNT fonts (i.e., TrueType and CFF fonts) due to the use of the HarfBuzz library. A more detailed description of this and other changes can be found here. FreeType 2.5.2 2013-12-08 FreeType 2.5.2 has been released. It fixes a serious bug introduced in version 2.5.1; all users should upgrade. A listing of the changes can be found here. FreeType 2.5.1 2013-11-25 FreeType 2.5.1 has been released, providing three major new features. - Support for the WOFF font format, contributed by Behdad Esfahbod. - The auto-hinter now supports Hebrew, together with improved support for Cyrillic and Greek. - The directory layout of the (installed) FreeType header files has been simplified. Among other changes I want to mention that FreeType's TrueType debugger (ttdebug) has been made more versatile. An exhaustive list of changes can be found here. FreeType 2.5 2013-06-19 FreeType 2.5 has been released. A major new feature is support for color embedded bitmaps (eg. color emoji), contributed by Behdad Esfahbod on behalf of Google. Additionally, Adobe's CFF engine is now the default, which makes a good reason to change from the 2.4.x to the 2.5.x series. On the technical side, the property API to access FreeType module parameters (FT_Property_Set and FT_Property_Get) is now declared as stable. As usual, see this file for the complete release notes, which give more details. And we have again blog entries from Adobe and Google. FreeType 2.4.12 2013-05-08 FreeType 2.4.12 has been released. A major new feature is a new parsing and hinting engine for CFF fonts, contributed by Adobe in collaboration with Google. It was my job the last few months to fully adapt the code to FreeType, and we are very pleased with the results. You might also read the blog entries from Adobe and Google. In connection with the new CFF engine, the demo programs, especially ftview and ftdiff, have been improved a lot; as usual, more details on the changes can be found in the release notes. --- Module Name: pkgsrc Committed By: ryoon Date: Fri Mar 14 13:12:34 UTC 2014 Modified Files: pkgsrc/graphics/freetype2: buildlink3.mk Log Message: graphics/png is also needed now --- Module Name: pkgsrc Committed By: ryoon Date: Fri Mar 14 13:38:20 UTC 2014 Modified Files: pkgsrc/graphics/freetype2: buildlink3.mk Log Message: graphics/png should be included when non-builtin freetype2. Pointed out by obache@, thank you. --- Module Name: pkgsrc Committed By: obache Date: Fri Mar 14 13:43:17 UTC 2014 Modified Files: pkgsrc/graphics/freetype2: buildlink3.mk Log Message: To get USE_BUILTIN.freetype2, builtin.mk must be included. --- Module Name: pkgsrc Committed By: ryoon Date: Fri Mar 14 14:54:02 UTC 2014 Modified Files: pkgsrc/graphics/freetype2: Makefile buildlink3.mk Added Files: pkgsrc/graphics/freetype2: options.mk Log Message: Make png dependency as option, and move option to options.mk Revert bump of BUILDLINK_ABI_DEPENDS.freetype2 --- Module Name: pkgsrc Committed By: drochner Date: Fri Mar 14 19:39:52 UTC 2014 Modified Files: pkgsrc/graphics/freetype2: Makefile buildlink3.mk options.mk Log Message: make the optional-png logics work

Pullup ticket #4346.

2014-03-14T13:59:58Z

Pullup ticket #4346 - requested by obache

2014-03-14T13:59:47Z

graphics/MesaLib: build fix for depending packages Revisions pulled up: - graphics/MesaLib/dri.mk 1.8 - graphics/MesaLib/options.mk 1.26 --- Module Name: pkgsrc Committed By: obache Date: Fri Mar 14 07:19:36 UTC 2014 Modified Files: pkgsrc/graphics/MesaLib: dri.mk options.mk Log Message: Overall dri related dependency clean up. * move dri related API_DEPENDS into dri.mk. * add missing API_DEPENDS. * only define such API_DEPENDS only not using builtin MesaLib. Fixes following issues on platforms that builtin one is older than required version (ex. NetBSD-5). * build issue of MesaLib * unwanted dependency on MesaLib from pkgsrc even if builtin one is sufficient.