[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc-2016Q3 2016-10-22T16:18:27Z 2016-10-22T16:18:27Z bsiegert bsiegert@pkgsrc.org 2016-10-22T16:18:27Z urn:sha1:f2e0e9e86ae7cba5d8fa3ce834d95fa0972b0dff databases/mysql56-client: security fix databases/mysql56-server: security fix Revisions pulled up: - databases/mysql56-client/Makefile.common 1.36-1.37 - databases/mysql56-client/distinfo 1.38-1.39 - databases/mysql56-client/patches/patch-client_mysql.cc deleted - databases/mysql56-client/patches/patch-cmake_readline.cmake 1.4 - databases/mysql56-server/PLIST 1.27 --- Module Name: pkgsrc Committed By: fhajny Date: Fri Sep 30 11:54:49 UTC 2016 Modified Files: pkgsrc/databases/mysql56-client: Makefile.common distinfo pkgsrc/databases/mysql56-client/patches: patch-cmake_readline.cmake Removed Files: pkgsrc/databases/mysql56-client/patches: patch-client_mysql.cc Log Message: Change the way readline/editline support is patched, based on what mysql57-client has. This fixes at least SmartOS builds, no changes for NetBSD (and presumably elsewhere). --- Module Name: pkgsrc Committed By: adam Date: Wed Oct 12 16:58:21 UTC 2016 Modified Files: pkgsrc/databases/mysql56-client: Makefile.common distinfo pkgsrc/databases/mysql56-server: PLIST Log Message: Changes 5.6.34: Packaging Notes --------------- RPM and Debian packages now create the /var/lib/mysql-files directory, which is now the default value of the secure_file_priv system variable that specifies a directory for import and export operations. Security Notes -------------- Incompatible Change: The secure_file_priv system variable is used to limit the effect of data import and export operations. Functionality Added or Changed ------------------------------ yaSSL was upgraded to version 2.4.2. This upgrade corrects issues with: Potential AES side channel leaks; DSA padding for unusual sizes; the SSL_CTX_load_verify_locations() OpenSSL compatibility function failing to handle long path directory names. 2016-10-22T16:02:56Z bsiegert bsiegert@pkgsrc.org 2016-10-22T16:02:56Z urn:sha1:69ec4c45e7b944ff41430c5fbe612b76f40160a3 databases/mysql55-client: security fix databases/mysql55-server: security fix Revisions pulled up: - databases/mysql55-client/Makefile.common 1.55 - databases/mysql55-client/distinfo 1.53 - databases/mysql55-server/PLIST 1.45 --- Module Name: pkgsrc Committed By: adam Date: Wed Oct 12 16:57:30 UTC 2016 Modified Files: pkgsrc/databases/mysql55-client: Makefile.common distinfo pkgsrc/databases/mysql55-server: PLIST Log Message: Changes 5.5.53: Packaging Notes --------------- RPM packages now create the /var/lib/mysql-files directory, which is now the default value of the secure_file_priv system variable that specifies a directory for import and export operations. Security Notes -------------- Incompatible Change: The secure_file_priv system variable is used to limit the effect of data import and export operations. Functionality Added or Changed ------------------------------ yaSSL was upgraded to version 2.4.2. This upgrade corrects issues with: Potential AES side channel leaks; DSA padding for unusual sizes; the SSL_CTX_load_verify_locations() OpenSSL compatibility function failing to handle long path directory names. 2016-10-15T18:06:08Z bsiegert bsiegert@pkgsrc.org 2016-10-15T18:06:08Z urn:sha1:6e4f92650a3569b34b13b26cc0eb7a6edb9ad151 databases/geneweb: build fix Revisions pulled up: - databases/geneweb/Makefile 1.44 --- Module Name: pkgsrc Committed By: dholland Date: Sun Oct 9 21:25:11 UTC 2016 Modified Files: pkgsrc/databases/geneweb: Makefile Log Message: Fix install rule. Switch to user-destdir. Should retire PR 51545. PKGREVISION -> 10 because prior packages might have unintended mode 600 data files. 2016-09-27T09:01:59Z fhajny fhajny@pkgsrc.org 2016-09-27T09:01:59Z urn:sha1:1eccba52231eca742cd86c08247750217837993c 2016-09-26T13:35:42Z fhajny fhajny@pkgsrc.org 2016-09-26T13:35:42Z urn:sha1:b50a20963b9d439b08f6c79dea9816d4ba377c28 This is a Redis critical release in order to fix a security issue which is documented clearly here: https://github.com/antirez/redis/commit/6d9f8e2462fc2c426d48c941edeb78e5df7d2977 Thanks to Cory Duplantis of Cisco Talos for reporting the issue. IMPACT: The gist is that using CONFIG SET calls (or by manipulating redis.conf) an attacker is able to compromise certain fields of the "server" global structure, including the aof filename pointer, that could be made pointing to something else. In turn the AOF name is used in different contexts such as logging, rename(2) and open(2) syscalls, leading to potential problems. Please note that since having access to CONFIG SET also means to be able to change the AOF filename (and many other things) directly, this issue actual real world impact is quite small, so I would not panik: if you have CONFIG SET level of access, you can do more and more easily. AFFECTED VERSIONS: - All Redis 3.2.x versions are affected. OTHER CHANGES IN THIS RELEASE: - TCP binding bug fixed when only certain addresses were available for a given port. - A much better crash report that includes part of the Redis binary: this will allow to fix bugs even when we just have a crash log and no other help from the original poster oft the issue. - A fix for Redis Cluster redis-trib displaying of info after creating a new cluster. 2016-09-26T13:28:14Z ryoon ryoon@pkgsrc.org 2016-09-26T13:28:14Z urn:sha1:4d0d39dd8107f3ec6c66360ff6e5b309e10434c8 Changelog: https://docs.mongodb.com/manual/release-notes/3.2-changelog/ 3.2.9 Changelog Security SERVER-17856 users on mongods should always be able to run currentOp and killOp on their own operations Sharding SERVER-23958 DBConfig::_loadIfNeeded will not do a reload even in cases where a force reload is needed SERVER-24810 Swap movePrimary command for ShardingTest::ensurePrimaryShard SERVER-24842 ShardingStateRecovery::recover cleanup should not wait for replication SERVER-24892 "Creating first chunks failed: Data inconsistency detected amongst config servers" when using 3.2.3+ without replica set config servers SERVER-25029 Segmentation fault in mongos when config servers not available SERVER-25052 csrs_upgrade_set_shard_version.js test is racy SERVER-25254 Only advance config server optime in response to messages from cluster members SERVER-25258 Improve parsing of killOp opID in mongos Replication SERVER-22136 Attach term metadata to UpdatePosition command SERVER-23795 master/slave looks at on-disk size on a resync SERVER-24630 Mongos erroneously advances config optime for writes that fail write concern SERVER-24933 Clean shutdown of secondaries should occur in between oplog batches, not during SERVER-25353 Clean shutdown should leave secondaries without the batch-in-progress flag Query SERVER-24693 group7.js should deterministically check for yields SERVER-24761 Queries being planned with the subplanner can ignore when the PlanExecutor is killed Storage SERVER-16910 sorth.js makes invalid assumption about order of results WiredTiger SERVER-23659 Provide useful message when wiredTigerJournalCompressor is changed SERVER-24334 Support conditional files in WiredTiger builds WT-2711 Change statistics log configuration options WT-2730 cursor next/prev can return the wrong key/value pair when crossing a page boundary WT-2760 Fix a bug in backup related to directory sync. Change the filesystem API to make durable the default WT-2798 Crash vulnerability with nojournal after create during checkpoint WT-2802 Transaction commit causes heap-use-after free Operations SERVER-20239 Built-in sampling heap profiler SERVER-22347 Mongo shell replica set connections must use legacy readMode SERVER-22383 mongo shell should permit mongodb:// URI without database name SERVER-23069 Improve tcmalloc freelist statistics SERVER-23145 Shell sharding helpers should give feedback on success SERVER-23409 Add tunability to tcmalloc serverStatus detail SERVER-23830 On RHEL7/Centos7 mongod can't stop if pid location in conf differs from the init.d script SERVER-24335 Shell sharding helpers should use wtimeout and respond appropriately Build and Packaging SERVER-7285 Support systemd in future compatible distributions SERVER-19986 clang-format.py lint fails in mci if files were deleted SERVER-21820 Export "endian" option from SConstruct SERVER-21830 Import the edit "endian" option in SConscript SERVER-24849 Vendor SCons Tools TOOLS-1336 Make -version spit out a bit more information. Internals SERVER-23226 Port resmoke.py's CheckReplDBHash hook to javascript SERVER-23306 Check collection attributes during (js) testing SERVER-23661 $sample takes disproportionately long time on newly created collection SERVER-23902 Failing to create a thread should fail with a useful error message SERVER-24073 Update system perf, longevity, and distributed correctness projects to use dedicated work directory SERVER-24346 Run jstestfuzz on rhel55-test instead of rhel55 SERVER-24593 virtualenv used for ese test should not use system-site-package SERVER-24716 Remove the CheckReplDBHashDeprecated hook SERVER-24758 Move initial_sync suite of tests into its own tasks in sys-perf project SERVER-24820 move push tasks to use relevant ec2 distro rather than rhel55 SERVER-24919 Perf.yml should consistently call pip install in venv SERVER-24925 add url_raw field to resmoke SERVER-24946 Evergreen.yml test for storageEngineCacheSizeGB cannot use [[ ]] SERVER-24990 Update command_line_parsing.js to ignore cacheSizeGB in configuration comparison SERVER-25006 Connection Pool ASIO must indicate use separately from non-error SERVER-25074 make performance analysis run with log analysis SERVER-25146 JS replset dbhash hook fails when checking nindexes with a collection containing a background index SERVER-25169 for all branches earlier than master, change rhel55 compile distro to rhel55-large SERVER-25193 Update system_perf.yml to simplify patch builds SERVER-25198 Increase scons stack size for eslint SERVER-25199 performance project: enable time logic for log analysis SERVER-25212 work around stale dbhash value on v3.2 SERVER-25259 Drop temporary databases in dbhash testing hook SERVER-25273 Concurrency suite dbHash check should call checkDBHashesFsyncLocked SERVER-25274 Make checkDBHashesFsyncLocked from jstests/hooks/check_repl_dbhash.js, an internal function SERVER-25302 turn on YCSB throughput analysis for YCSB tasks in sys-perf SERVER-25330 Update system_perf.yml to use different test_control file for replica and sharded ycsb TOOLS-1079 write_concern_mongos jstests are flaky TOOLS-1176 -dumpDbUsersAndRoles without users creates broken dumps 2016-09-20T13:07:08Z jaapb jaapb@pkgsrc.org 2016-09-20T13:07:08Z urn:sha1:8870cb1f31212df4be6a20bf604399feb3f8e266 2016-09-20T12:55:04Z jaapb jaapb@pkgsrc.org 2016-09-20T12:55:04Z urn:sha1:1487e883b47de5326dbe227314ca271af5ace0d4 2016-09-20T12:52:59Z jaapb jaapb@pkgsrc.org 2016-09-20T12:52:59Z urn:sha1:c1cb6d4a358b0867766e831eb203790181b40699 Ocamldap is an implementation of the Light Weight Directory Access Protocol, and a set of useful tools built around it. It includes high level libraries for creating ldap clients and ldap servers. It also includes many of the auxiliary tools needed for building intelligent solutions, and interoperating with other directories. These include, an rfc2252 schema parser, and an schema checker, an ldif parser and printer, a search filter parser (but no printer yet), and a rudimentary ldap url parser. 2016-09-19T13:04:18Z wiz wiz@pkgsrc.org 2016-09-19T13:04:18Z urn:sha1:3934860d710f1ea7cac64ab919d68428bad05705