[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2010Q4 2011-03-30T19:11:17Z 2011-03-30T19:11:17Z tron tron 2011-03-30T19:11:17Z urn:sha1:4b87b38771fca30555d539000f1d530abd372493 2011-03-30T19:10:59Z tron tron 2011-03-30T19:10:59Z urn:sha1:5e6297dac244bd8eb4e4a77bbceac353f02456c4 sysutils/xenkernel3: security patch sysutils/xenkernel33: security patch Revisions pulled up: - sysutils/xenkernel3/Makefile 1.20 - sysutils/xenkernel3/distinfo 1.13 - sysutils/xenkernel3/patches/patch-ac 1.3 - sysutils/xenkernel33/Makefile 1.13 - sysutils/xenkernel33/distinfo 1.11 - sysutils/xenkernel33/patches/patch-ac 1.1 --- Module Name: pkgsrc Committed By: drochner Date: Thu Mar 24 12:04:57 UTC 2011 Modified Files: pkgsrc/sysutils/xenkernel33: Makefile distinfo Added Files: pkgsrc/sysutils/xenkernel33/patches: patch-ac Log Message: add patch from upstream (manually, due to changed #ifdefs and indentation) to fix possible crashes triggered by 64-bit guests (found by Cherry G. Mathew, CVE-2011-1166) bump PKGREV --- Module Name: pkgsrc Committed By: drochner Date: Thu Mar 24 12:43:53 UTC 2011 Modified Files: pkgsrc/sysutils/xenkernel3: Makefile distinfo Added Files: pkgsrc/sysutils/xenkernel3/patches: patch-ac Log Message: add patch from upstream (manually, due to changed #ifdefs and indentation) to fix possible crashes triggered by 64-bit guests (found by Cherry G. Mathew, CVE-2011-1166) bump PKGREV 2011-03-22T06:58:09Z sbd sbd 2011-03-22T06:58:09Z urn:sha1:d87665e498cdefdaf161f98f1cf08acac0522c86 2011-03-22T06:55:44Z sbd sbd 2011-03-22T06:55:44Z urn:sha1:4048d14fce574fe1800946cd2be586499e591daa security fix for lang/php53 Revisions pulled up: - lang/php53/Makefile 1.8 - lang/php53/Makefile.common 1.5 - lang/php53/distinfo 1.13 - lang/php53/patches/patch-aa 1.2 - lang/php53/patches/patch-ab 1.4 - lang/php53/patches/patch-af 1.2 - lang/php53/patches/patch-ar Removed - lang/php53/patches/patch-ext_exif_exif.c Removed - lang/php53/patches/patch-ext_zip_lib_zip__name__locate.c Removed - lang/php53/patches/patch-ext_zip_php__zip.c Removed --- Module Name: pkgsrc Committed By: taca Date: Sat Mar 19 07:01:19 UTC 2011 Modified Files: pkgsrc/lang/php53: Makefile Makefile.common distinfo pkgsrc/lang/php53/patches: patch-aa patch-ab patch-af Removed Files: pkgsrc/lang/php53/patches: patch-ar patch-ext_exif_exif.c patch-ext_zip_lib_zip__name__locate.c patch-ext_zip_php__zip.c Log Message: Update lang/php53 package to PHP 5.3. PHP 5.3.6 Released! [17-Mar-2011] The PHP development team would like to announce the immediate availability of PHP 5.3.6. This release focuses on improving the stability of the PHP 5.3.x branch with over 60 bug fixes, some of which are security related. Security Enhancements and Fixes in PHP 5.3.6: * Enforce security in the fastcgi protocol parsing with fpm SAPI. * Fixed bug #54247 (format-string vulnerability on Phar). (CVE-2011-1153) * Fixed bug #54193 (Integer overflow in shmop_read()). (CVE-2011-1092) * Fixed bug #54055 (buffer overrun with high values for precision ini setting). * Fixed bug #54002 (crash on crafted tag in exif). (CVE-2011-0708) * Fixed bug #53885 (ZipArchive segfault with FL_UNCHANGED on empty archive). (CVE-2011-0421) Key enhancements in PHP 5.3.6 include: * Upgraded bundled Sqlite3 to version 3.7.4. * Upgraded bundled PCRE to version 8.11. * Added ability to connect to HTTPS sites through proxy with basic authentication using stream_context/http/header/Proxy-Authorization. * Added options to debug backtrace functions. * Changed default value of ini directive serialize_precision from 100 to 17. * Fixed Bug #53971 (isset() and empty() produce apparently spurious runtime error). * Fixed Bug #53958 (Closures can't 'use' shared variables by value and by reference). * Fixed bug #53577 (Regression introduced in 5.3.4 in open_basedir with a trailing forward slash). * Over 60 other bug fixes. 2011-03-22T06:31:55Z sbd sbd 2011-03-22T06:31:55Z urn:sha1:d6095b4f79a1dd0823d576f1bde3d943f4ae0757 security fix for lang/php5 Revisions pulled up: - lang/php5/Makefile 1.84 - lang/php5/distinfo 1.89 - lang/php5/patches/patch-main_snprintf.c 1.1 - lang/php5/patches/patch-main_snprintf.h 1.1 - lang/php5/patches/patch-main_spprintf.c 1.1 --- Module Name: pkgsrc Committed By: taca Date: Mon Mar 21 16:34:28 UTC 2011 Modified Files: pkgsrc/lang/php5: Makefile distinfo Added Files: pkgsrc/lang/php5/patches: patch-main_snprintf.c patch-main_snprintf.h patch-main_spprintf.c Log Message: Apply changes by r308525 from PHP's repository to fix bug #54055 (buffer overrun with high values for precision ini setting). It fixes one of security fixes by PHP 5.3.6. Bump PKGREVISION. 2011-03-22T06:22:17Z sbd sbd 2011-03-22T06:22:17Z urn:sha1:a360480337e36e7f095ce155f1c973f717e7f656 security fix for devel/php-shmop Revisions pulled up: - devel/php-shmop/Makefile 1.10 - lang/php5/distinfo 1.88 - lang/php5/patches/patch-ext_shmop_shmop.c 1.1 --- Module Name: pkgsrc Committed By: taca Date: Mon Mar 21 16:08:29 UTC 2011 Modified Files: pkgsrc/devel/php-shmop: Makefile pkgsrc/lang/php5: distinfo Added Files: pkgsrc/lang/php5/patches: patch-ext_shmop_shmop.c Log Message: Add a patch to fix bug #54193 (Integer overflow in shmop_read()) referring r309018 from PHPs' repository. (CVE-2011-1092) Bump PKGREVISION of devel/php-shmop. 2011-03-13T21:11:38Z sbd sbd 2011-03-13T21:11:38Z urn:sha1:351a8768525aed4b6fafe93d4837071bd5014493 2011-03-13T21:10:18Z sbd sbd 2011-03-13T21:10:18Z urn:sha1:8b2af12fa4ec6fd99b703f5fac1abc8620b33f60 Security update for graphic/tiff Revisions pulled up: - graphics/tiff/Makefile 1.99 - graphics/tiff/distinfo 1.50 - graphics/tiff/patches/patch-SA43593 1.1 --- Module Name: pkgsrc Committed By: tron Date: Sat Mar 12 16:10:43 UTC 2011 Modified Files: pkgsrc/graphics/tiff: Makefile distinfo Added Files: pkgsrc/graphics/tiff/patches: patch-SA43593 Log Message: Add fix for vulnerability reported in SA43593 taken from the "libtiff" CVS repository. 2011-03-12T03:02:33Z sbd sbd 2011-03-12T03:02:33Z urn:sha1:7e21ca736c5f2a658c71f5f803eb1c92c8021149 2011-03-12T02:59:46Z sbd sbd 2011-03-12T02:59:46Z urn:sha1:07e60a220da617ccffa32fd6fc0b39a9b68890e1 build fix for devel/bmake Revisions pulled up: - devel/bmake/files/make-bootstrap.sh.in 1.2 --- Module Name: pkgsrc Committed By: wiz Date: Wed Jan 26 10:13:48 UTC 2011 Modified Files: pkgsrc/devel/bmake/files: make-bootstrap.sh.in Log Message: Add missing ".o". Found by Matthieu Herrb in PR 44461.