[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2008Q2 2008-09-23T11:15:53Z 2008-09-23T11:15:53Z tron tron 2008-09-23T11:15:53Z urn:sha1:2e81e223f9753f038df1165f3cff319592e93836 mysql5-client: security update mysql5-server: security update Revisions pulled up: - databases/mysql5-client/Makefile 1.19 - databases/mysql5-client/Makefile.common 1.33 - databases/mysql5-client/buildlink3.mk 1.12 - databases/mysql5-client/distinfo 1.24 - databases/mysql5-client/patches/patch-ab 1.3 - databases/mysql5-client/patches/patch-ac 1.7 - databases/mysql5-client/patches/patch-af 1.7 - databases/mysql5-client/patches/patch-ag 1.4 - databases/mysql5-client/patches/patch-aj 1.3 - databases/mysql5-client/patches/patch-ak delete - databases/mysql5-client/patches/patch-al 1.3 - databases/mysql5-server/Makefile 1.25 - databases/mysql5-server/PLIST 1.13 - databases/mysql5-server/distinfo 1.21 - databases/mysql5-server/patches/patch-ad 1.4 - databases/mysql5-server/patches/patch-ag 1.7 - databases/mysql5-server/patches/patch-ai 1.3 - databases/mysql5-server/patches/patch-an 1.5 - databases/mysql5-server/patches/patch-ca 1.2 - databases/mysql5-server/patches/patch-cb 1.2 - databases/mysql5-server/patches/patch-cc 1.2 - databases/mysql5-server/patches/patch-da delete - databases/mysql5-server/patches/patch-db delete --- Module Name: pkgsrc Committed By: taca Date: Thu Sep 18 11:50:44 UTC 2008 Modified Files: pkgsrc/databases/mysql5-client: Makefile.common buildlink3.mk distinfo pkgsrc/databases/mysql5-client/patches: patch-ab patch-af patch-ag patch-aj patch-al Added Files: pkgsrc/databases/mysql5-client/patches: patch-ac Removed Files: pkgsrc/databases/mysql5-client/patches: patch-ak Log Message: Update mysql5-client pacakge to 5.0.67. For complete changes, please refer http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-67.html. Here is a part of it. Functionality added or changed: Security Enhancement: To enable stricter control over the location from which user-defined functions can be loaded, the plugin_dir system variable has been backported from MySQL 5.1. If the value is non-empty, user-defined function object files can be loaded only from the directory named by this variable. If the value is empty, the behavior that is used before 5.0.67 applies: The UDF object files must be located in a directory that is searched by your system's dynamic linker. (Bug#37428) Important Change: Incompatible Change: The FEDERATED storage engine is now disabled by default in the .cnf files shipped with MySQL distributions (my-huge.cnf, my-medium.cnf, and so forth). This affects server behavior only if you install one of these files. (Bug#37069) Cluster API: Important Change: Because NDB_LE_MemoryUsage.page_size_kb shows memory page sizes in bytes rather than kilobytes, it has been renamed to page_size_bytes. The name page_size_kb is now deprecated and thus subject to removal in a future release, although it currently remains supported for reasons of backward compatibility. See The Ndb_logevent_type Type, for more information about NDB_LE_MemoryUsage. (Bug#30271) Important Change: Some changes were made to CHECK TABLE ... FOR UPGRADE and REPAIR TABLE with respect to detection and handling of tables with incompatible .frm files (files created with a different version of the MySQL server). These changes also affect mysqlcheck because that program uses CHECK TABLE and REPAIR table, and thus also mysql_upgrade because that program invokes mysqlcheck. --- Module Name: pkgsrc Committed By: taca Date: Thu Sep 18 11:51:37 UTC 2008 Modified Files: pkgsrc/databases/mysql5-server: Makefile PLIST distinfo pkgsrc/databases/mysql5-server/patches: patch-ad patch-ag patch-ai patch-an patch-ca patch-cb patch-cc Removed Files: pkgsrc/databases/mysql5-server/patches: patch-da patch-db Log Message: Update mysql5-server pacakge to 5.0.67. This is security fix. For complete changes, please refer http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-67.html. Here is a part of it. Functionality added or changed: Security Enhancement: To enable stricter control over the location from which user-defined functions can be loaded, the plugin_dir system variable has been backported from MySQL 5.1. If the value is non-empty, user-defined function object files can be loaded only from the directory named by this variable. If the value is empty, the behavior that is used before 5.0.67 applies: The UDF object files must be located in a directory that is searched by your system's dynamic linker. (Bug#37428) Important Change: Incompatible Change: The FEDERATED storage engine is now disabled by default in the .cnf files shipped with MySQL distributions (my-huge.cnf, my-medium.cnf, and so forth). This affects server behavior only if you install one of these files. (Bug#37069) Cluster API: Important Change: Because NDB_LE_MemoryUsage.page_size_kb shows memory page sizes in bytes rather than kilobytes, it has been renamed to page_size_bytes. The name page_size_kb is now deprecated and thus subject to removal in a future release, although it currently remains supported for reasons of backward compatibility. See The Ndb_logevent_type Type, for more information about NDB_LE_MemoryUsage. (Bug#30271) Important Change: Some changes were made to CHECK TABLE ... FOR UPGRADE and REPAIR TABLE with respect to detection and handling of tables with incompatible .frm files (files created with a different version of the MySQL server). These changes also affect mysqlcheck because that program uses CHECK TABLE and REPAIR table, and thus also mysql_upgrade because that program invokes mysqlcheck. --- Module Name: pkgsrc Committed By: tron Date: Thu Sep 18 12:49:40 UTC 2008 Modified Files: pkgsrc/databases/mysql5-client: Makefile Log Message: Fix path to Perl interpreter in the installed scripts. Bump package revision because of this fix. 2008-09-21T13:18:54Z rtr rtr 2008-09-21T13:18:54Z urn:sha1:55aca29c9bf682113c122c56d45311400087f536 phpmyadmin: update package for security fixes revisions pulled up: pkgsrc/databases/phpmyadmin/Makefile 1.75 pkgsrc/databases/phpmyadmin/distinfo 1.38 Module Name: pkgsrc Committed By: tron Date: Thu Sep 18 14:33:35 UTC 2008 Modified Files: pkgsrc/databases/phpmyadmin: Makefile distinfo Log Message: Update "phpmyadmin" package to version 2.11.9.1. Changes since 2.11.8.1: - bug #2031221 [auth] Links to version number on login screen - bug #2032707 [core] PMA does not start if ini_set() is disabled - bug #2004915 [bookmarks] Saved queries greater than 1000 chars not displayed - bug #2037381 [export] Export type "replace" does not work - bug #2037375 [export] DROP PROCEDURE needs IF EXISTS - bug #2045512 [export] Numbers in Excel export + [lang] Norwegian UTF-8 original file remerged - bug #2074250 [parser] Undefined variable seen_from - [security] Code execution vulnerability This update fixes the security vulnerability reported in PMASA-2008-7. 2008-09-10T11:17:56Z tron tron 2008-09-10T11:17:56Z urn:sha1:707c984e576231b379d3ca16142334e4d6c6a7d4 rrdtool: update package to avoid data corruption Revisions pulled up: databases/rrdtool/Makefile 1.68-1.69 databases/rrdtool/buildlink3.mk 1.20 databases/rrdtool/distinfo 1.30-1.31 databases/rrdtool/patches/patch-al 1.13-1.14 databases/rrdtool/patches/patch-am delete --- Module Name: pkgsrc Committed By: martti Date: Tue Jul 29 17:23:17 UTC 2008 Modified Files: pkgsrc/databases/rrdtool: Makefile distinfo pkgsrc/databases/rrdtool/patches: patch-al Removed Files: pkgsrc/databases/rrdtool/patches: patch-am Log Message: Updated databases/rrdtool to 1.3.1 * image size does get returned properly even with --lazy active this broke a number of frontends which should work now. * fix rrd_restore to be able to read rrd 1.0.x generated dumps again. * several documetation fixes * make rrdtool.spec work without php * complain when someone tries to create an rrd file with step size zero. * added filename to illegal updated interval error message. * fix number of rows returned by python modules fetch implementation. --- Module Name: pkgsrc Committed By: martti Date: Wed Sep 10 05:38:12 UTC 2008 Modified Files: pkgsrc/databases/rrdtool: Makefile buildlink3.mk distinfo pkgsrc/databases/rrdtool/patches: patch-al Log Message: Updated databases/rrdtool to 1.3.2 MAJOR BUG-FIX: * When running rrdtool update with multiple updates in one go and MMAP enabled, there was a data corruption bug at wrap around. See http://oss.oetiker.ch/rrdtool-trac/ticket/178 for details Thanks to Kevin Brintnall OTHER FIXES: * Forward ported rra cur_row randomization patch from rrdtool 1.2.28 (it got lost in development). * Contrary to the documentation imginfo did return the full path of the image and not only the file name. * Make --lazy mode work even when PRINT commands are present. http://oss.oetiker.ch/rrdtool-trac/ticket/163 * Fix Ruby Bindings memory leak. * Fix compilation on solaris 2.8 * Fix a ton of memory leaks in rrd_create and some in rrd_tool as well. Based on valgrind analysis by Sven Engelhardt. Thanks! * Fix handling of error conditions in rrd_tool.c (errno is not the ideal indicator) ENHANCEMENTS: * Text Strings entered in the current locale will automatically be transformed to utf8 for proper handling by Pango. * Dramatically improved Pango Performance by introducing a static fontmap. On my test system the persistent fontmap causes the second graph with the same fonts in a single session to be created about 0.18s faster than the first one. For a total graph creation time of 0.21s this is a pretty substantial improvement. With this patch, performance for the second graph is back to 1.2.x levels or even better. 2008-07-30T10:03:25Z rtr rtr 2008-07-30T10:03:25Z urn:sha1:5b05b3387e6b23f271b17b2d553b786bfcaa2a13 phpmyadmin: update for security fixes revisions pulled up: pkgsrc/databases/phpmyadmin/Makefile 1.74 pkgsrc/databases/phpmyadmin/distinfo 1.37 Module Name: pkgsrc Committed By: tron Date: Tue Jul 29 18:59:51 UTC 2008 Modified Files: pkgsrc/databases/phpmyadmin: Makefile distinfo Log Message: Update "phpmyadmin" package to version 2.11.8.1. Changes since 2.11.7.1: - patch #1987593 [interface] Table list pagination in navi - bug #1989081 [profiling] Profiling causes query to be executed again (really causes a problem in case of INSERT/UPDATE) - bug #1990342 [import] SQL file import very slow on Windows - bug [XHTML] problem with tabindex and radio fields - bug #1971221 [interface] tabindex not set correctly - bug [views] VIEW name created via the GUI was not protected with backquotes - bug #1989813 [interface] Deleting multiple views (space in name) - bug #1992628 [parser] SQL parser removes essential space - bug #1989281 [export] CSV for MS Excel incorrect escaping of double quotes - bug #1959855 [interface] Font size option problem when no config file - bug #1982489 [relation] Relationship view should check for changes - bug [history] Do not save too big queries in history - [security] Do not show version info on login screen - bug #2018595 [import] Potential data loss on import resubmit - patch #2020630 [export] Safari and timedate - bug #2022182 [import, export] Import/Export fails because of Mac files - [security] protection against cross-frame scripting and new directive AllowThirdPartyFraming - [security] possible XSS during setup - [interface] revert language changing problem introduced with 2.11.7.1 - small fix for notice about "lang" This update fixes the security vulnerability reported in PMASA-2008-6. 2008-07-25T09:53:55Z tron tron 2008-07-25T09:53:55Z urn:sha1:8467d923f9603c35004fef2c225b508431a58216 Revisions pulled up: databases/sqlitemanager/Makefile 1.8 databases/sqlitemanager/PLIST 1.3 databases/sqlitemanager/distinfo 1.3 databases/sqlitemanager/patches/patch-aa 1.1 databases/sqlitemanager/patches/patch-ab 1.1 databases/sqlitemanager/patches/patch-ac 1.1 databases/sqlitemanager/patches/patch-ad 1.1 databases/sqlitemanager/patches/patch-ae 1.1 databases/sqlitemanager/patches/patch-af 1.1 databases/sqlitemanager/patches/patch-ag 1.1 databases/sqlitemanager/patches/patch-ah 1.1 databases/sqlitemanager/patches/patch-ai 1.1 databases/sqlitemanager/patches/patch-aj 1.1 databases/sqlitemanager/patches/patch-ak 1.1 --- Module Name: pkgsrc Committed By: tonnerre Date: Fri Jul 25 00:53:58 UTC 2008 Modified Files: pkgsrc/databases/sqlitemanager: Makefile PLIST distinfo Added Files: pkgsrc/databases/sqlitemanager/patches: patch-aa patch-ab patch-ac patch-ad patch-ae patch-af patch-ag patch-ah patch-ai patch-aj patch-ak Log Message: Fix two SQLitemanager vulnerabilities (arbitrary remote file inclusion and directory traversal), CVE-2007-1232 an CVE-2008-0516. Update to 1.2.0 in order to make this possible at all. Also remove manu as maintainer as he suggested in mail. 2008-07-18T10:05:00Z rtr rtr 2008-07-18T10:05:00Z urn:sha1:51b9cc7321233d7e8120b3e412a32c2f1d0cbe7b phpmyadmin: package update for bug and security fixes revisions pulled up: pkgsrc/databases/phpmyadmin/Makefile 1.73 pkgsrc/databases/phpmyadmin/distinfo 1.36 Module Name: pkgsrc Committed By: tron Date: Thu Jul 17 15:55:16 UTC 2008 Modified Files: pkgsrc/databases/phpmyadmin: Makefile distinfo Log Message: Updatep "phpmyadmin" package to version 2.11.7.1. Changes since 2.11.7: - bug #1908719 [interface] New field cannot be auto-increment and primary key - [dbi] Incorrect interpretation for some mysqli field flags - bug #1910621 [display] part 1: do not display a TEXT utf8_bin as BLOB (fixed for mysqli extension only) - [interface] sanitize the after_field parameter, thanks to Norman Hippert - [structure] do not remove the BINARY attribute in drop-down - bug #1955386 [session] Overriding session.hash_bits_per_character - [interface] sanitize the table comments in table print view, thanks to Norman Hippert - bug #1939031 Auto_Increment selected for TimeStamp by Default - patch #1957998 [display] No tilde for InnoDB row counter when we know it for sure, thanks to Vladyslav Bakayev - dandy76 - bug #1955572 [display] alt text causes duplicated strings - bug #1762029 [interface] Cannot upload BLOB into existing row - bug #1981043 [export] HTML in exports getting corrupted, thanks to Jason Judge - jasonjudge - bug #1936761 [interface] BINARY not treated as BLOB: update/delete issues - protection against XSS when register_globals is on and .htaccess has no effect, thanks to Tim Starling - bug #1996943 [export] Firefox 3 and .sql.gz (corrupted); detect Gecko 1.9, thanks to Juergen Wind - (2.11.7.1) [security] XSRF/CSRF by manipulating the db, convcharset and collation_connection parameters, thanks to YGN Ethical Hacker Group This update fixes the security vulnerability reported in PMASA-2008-5. 2008-07-13T17:55:38Z tonnerre tonnerre 2008-07-13T17:55:38Z urn:sha1:9829f2525024ed0fc749e62d3baf0be02e35204c 2008-07-03T22:14:50Z tonnerre tonnerre 2008-07-03T22:14:50Z urn:sha1:9fc7556a244d50085e5b3e4cf57024e6488f45e1 2008-07-02T14:10:04Z obache obache 2008-07-02T14:10:04Z urn:sha1:49f19ddd1e2c2f8ebb56f331dcea2da225d7bf11 as NetBSD - both use libedit emulation of the libreadline now. Patch provided by Hasso Tepper in PR 39059. 2008-07-01T09:22:59Z tron tron 2008-07-01T09:22:59Z urn:sha1:c08a5463123bfdb3f020ca9b38a4fea1456b09cf security vulnerability reported in CVE-2008-2079.