pkgsrc/lang, branch pkgsrc-2014Q2

Pullup ticket #4507 - requested by spz

2014-09-30T17:03:04Z

lang/perl5: security patch Revisions pulled up: - lang/perl5/Makefile 1.230 - lang/perl5/distinfo 1.123 - lang/perl5/patches/patch-dist_Data-Dumper_Dumper.pm 1.1 - lang/perl5/patches/patch-dist_Data-Dumper_Dumper.xs 1.1 --- Module Name: pkgsrc Committed By: spz Date: Mon Sep 29 11:36:02 UTC 2014 Modified Files: pkgsrc/lang/perl5: Makefile distinfo Added Files: pkgsrc/lang/perl5/patches: patch-dist_Data-Dumper_Dumper.pm patch-dist_Data-Dumper_Dumper.xs Log Message: Minimally invasive fix for CVE-2014-4330, also known as https://www.lsexperts.de/advisories/lse-2014-06-10.txt, a stack overflow vulnerability in Data::Dumper Patches taken from http://perl5.git.perl.org/perl.git/commitdiff/19be3be6968e2337bcdfe480693fff795ecd1304, to be removed when updating to 5.20.1 (or later). perl-5.20.0nb2 is fit for pkg_add -u replacement of perl-5.20.0nb1

Pullup ticket #4489 - requested by tron

2014-08-25T16:50:43Z

lang/ruby21-base: security patch Revisions pulled up: - lang/ruby21-base/Makefile 1.6 - lang/ruby21-base/distinfo 1.7 - lang/ruby21-base/patches/patch-pack.c 1.1 --- Module Name: pkgsrc Committed By: taca Date: Mon Aug 25 03:28:25 UTC 2014 Modified Files: pkgsrc/lang/ruby21-base: Makefile distinfo Added Files: pkgsrc/lang/ruby21-base/patches: patch-pack.c Log Message: Add fix for CVS-2014-4975. Bump PKGREVISION.

Pullup ticket #4488 - requested by tron

2014-08-25T16:31:58Z

lang/ruby200-base: security patch Revisions pulled up: - lang/ruby200-base/Makefile 1.12 - lang/ruby200-base/distinfo 1.15 - lang/ruby200-base/patches/patch-pack.c 1.1 --- Module Name: pkgsrc Committed By: taca Date: Mon Aug 25 03:27:37 UTC 2014 Modified Files: pkgsrc/lang/ruby200-base: Makefile distinfo Added Files: pkgsrc/lang/ruby200-base/patches: patch-pack.c Log Message: Add fix for CVS-2014-4975. Bump PKGREVISION.

Pullup ticket #4487 - requested by tron

2014-08-25T16:14:59Z

lang/php55: security update Revisions pulled up: - lang/php/phpversion.mk patch - lang/php55/Makefile 1.16 - lang/php55/distinfo 1.27-1.28 - lang/php55/patches/patch-aclocal.m4 1.2 - lang/php55/patches/patch-build_libtool.m4 1.2 - lang/php55/patches/patch-configure 1.8 - lang/php55/patches/patch-ext_gd_libgd_gdxpm.c deleted - lang/php55/patches/patch-ext_spl_spl__array.c deleted - lang/php55/patches/patch-ext_spl_spl__dllist.c deleted --- Module Name: pkgsrc Committed By: taca Date: Sat Jul 26 00:11:55 UTC 2014 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php55: Makefile distinfo pkgsrc/lang/php55/patches: patch-aclocal.m4 patch-build_libtool.m4 patch-configure Removed Files: pkgsrc/lang/php55/patches: patch-ext_spl_spl__array.c patch-ext_spl_spl__dllist.c Log Message: Update php55 to 5.5.15. 24 Jul 2014, PHP 5.5.15 - Core: . Fixed bug #67428 (header('Location: foo') will override a 308-399 response code). (Adam) . Fixed bug #67436 (Autoloader isn't called if two method definitions don't match). (Bob) . Fixed bug #67091 (make install fails to install libphp5.so on FreeBSD 10.0). (Ferenc) . Fixed bug #67497 (eval with parse error causes segmentation fault in generator). (Nikita) . Fixed bug #67151 (strtr with empty array crashes). (Nikita) . Fixed bug #67407 (Windows 8.1/Server 2012 R2 reported as Windows 8/Server 2012). (Christian Wenz) - CLI server: . Implemented FR #67429 (CLI server is missing some new HTTP response codes). (Adam) . Fixed bug #66830 (Empty header causes PHP built-in web server to hang). (Adam) - FPM: . Fixed bug #67530 (error_log=syslog ignored). (Remi) . Fixed bug #67531 (syslog cannot be set in pool configuration). (Remi) - Intl: . Fixed bug #66921 (Wrong argument type hint for function intltz_from_date_time_zone). (Stas) . Fixed bug #67052 (NumberFormatter::parse() resets LC_NUMERIC setting). (Stas) - OPCache: . Fixed bug #67215 (php-cgi work with opcache, may be segmentation fault happen) (Dmitry, Laruence) - pgsql: . Fixed bug #67550 (Error in code "form" instead of "from", pgsql.c, line 756), which affected builds against libpq < 7.3. (Adam) - Phar: . Fixed bug #67587 (Redirection loop on nginx with FPM). (Christian Weiske) - SPL: . Fixed bug #67539 (ArrayIterator use-after-free due to object change during sorting). (research at insighti dot org, Laruence) . Fixed bug #67538 (SPL Iterators use-after-free). (CVE-2014-4670) (Laruence) - Streams: . Fixed bug #67430 (http:// wrapper doesn't follow 308 redirects). (Adam) --- Module Name: pkgsrc Committed By: taca Date: Sat Aug 23 16:09:21 UTC 2014 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php55: distinfo Removed Files: pkgsrc/lang/php55/patches: patch-ext_gd_libgd_gdxpm.c Log Message: Update php55 to 5.5.16 (PHP 5.5.16). 21 Aug 2014, PHP 5.5.16 - COM: . Fixed missing type checks in com_event_sink (Yussuf Khalil, Stas). - Fileinfo: . Fixed bug #67705 (extensive backtracking in rule regular expression). (CVE-2014-3538) (Remi) . Fixed bug #67716 (Segfault in cdf.c). (CVE-2014-3587) (Remi) - FPM: . Fixed bug #67635 (php links to systemd libraries without using pkg-config). (pacho@gentoo.org, Remi) - GD: . Fixed bug #66901 (php-gd 'c_color' NULL pointer dereference). (CVE-2014-2497) (Remi) . Fixed bug #67730 (Null byte injection possible with imagexxx functions). (CVE-2014-5120) (Ryan Mauger) - Milter: . Fixed bug #67715 (php-milter does not build and crashes randomly). (Mike) - OpenSSL: . Fixed missing type checks in OpenSSL options (Yussuf Khalil, Stas). - readline: . Fixed bug #55496 (Interactive mode doesn't force a newline before the prompt). (Bob, Johannes) . Fixed bug #67496 (Save command history when exiting interactive shell with control-c). (Dmitry Saprykin, Johannes) - Sessions: . Fixed missing type checks in php_session_create_id (Yussuf Khalil, Stas). - Core: . Fixed bug #67693 (incorrect push to the empty array) (Tjerk) . Fixed bug #67717 (segfault in dns_get_record). (CVE-2014-3597) (Remi) - ODBC: . Fixed bug #60616 (odbc_fetch_into returns junk data at end of multi-byte char fields). (Keyur)

Pullup ticket #4486 - requested by taca

2014-08-25T15:59:27Z

lang/php54: security update Revisions pulled up: - lang/php/phpversion.mk patch - lang/php54/Makefile 1.25 - lang/php54/distinfo 1.45-1.46 - lang/php54/patches/patch-aclocal.m4 1.2 - lang/php54/patches/patch-build_libtool.m4 1.2 - lang/php54/patches/patch-configure 1.9 - lang/php54/patches/patch-ext_gd_libgd_gdxpm.c deleted - lang/php54/patches/patch-ext_spl_spl__array.c deleted - lang/php54/patches/patch-ext_spl_spl__dllist.c deleted --- Module Name: pkgsrc Committed By: taca Date: Sat Jul 26 00:12:54 UTC 2014 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php54: Makefile distinfo pkgsrc/lang/php54/patches: patch-aclocal.m4 patch-build_libtool.m4 patch-configure Log Message: Update php54 to 5.4.31. 24 Jul 2014, PHP 5.4.31 - Core: . Fixed bug #67428 (header('Location: foo') will override a 308-399 response code). (Adam) . Fixed bug #67436 (Autoloader isn't called if two method definitions don't match). (Bob) . Fixed bug #67091 (make install fails to install libphp5.so on FreeBSD 10.0). (Ferenc) . Fixed bug #67151 (strtr with empty array crashes). (Nikita) . Fixed bug #67407 (Windows 8.1/Server 2012 R2 reported as Windows 8/Server 2012). (Christian Wenz) - CLI server: . Implemented FR #67429 (CLI server is missing some new HTTP response codes). (Adam) . Fixed bug #66830 (Empty header causes PHP built-in web server to hang). (Adam) - FPM: . Fixed bug #67530 (error_log=syslog ignored). (Remi) . Fixed bug #67531 (syslog cannot be set in pool configuration). (Remi) - Intl: . Fixed bug #67052 (NumberFormatter::parse() resets LC_NUMERIC setting). (Stas) - pgsql: . Fixed bug #67550 (Error in code "form" instead of "from", pgsql.c, line 756), which affected builds against libpq < 7.3. (Adam) - Phar: . Fixed bug #67587 (Redirection loop on nginx with FPM). (Christian Weiske) - Streams: . Fixed bug #67430 (http:// wrapper doesn't follow 308 redirects). (Adam) --- Module Name: pkgsrc Committed By: taca Date: Sat Aug 23 16:07:24 UTC 2014 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php54: distinfo Removed Files: pkgsrc/lang/php54/patches: patch-ext_gd_libgd_gdxpm.c patch-ext_spl_spl__array.c patch-ext_spl_spl__dllist.c Log Message: Update php54 to 5.4.32 (PHP 5.4.32). 07 Aug 2014, PHP 5.4.32 - Core: . Fixed bug #67717 (segfault in dns_get_record). (CVE-2014-3597) (Remi) - COM: . Fixed missing type checks in com_event_sink. (Yussuf Khalil, Stas) - Fileinfo: . Fixed bug #67705 (extensive backtracking in rule regular expression). (CVE-2014-3538) (Remi) . Fixed bug #67716 (Segfault in cdf.c). (CVE-2014-3587) (Remi) - GD: . Fixed bug #66901 (php-gd 'c_color' NULL pointer dereference). (CVE-2014-2497) (Remi) . Fixed bug #67730 (Null byte injection possible with imagexxx functions). (CVE-2014-5120) (Ryan Mauger) - Milter: . Fixed bug #67715 (php-milter does not build and crashes randomly). (Mike) - OpenSSL: . Fixed missing type checks in OpenSSL options (Yussuf Khalil, Stas). - Readline: . Fixed bug #55496 (Interactive mode doesn't force a newline before the prompt). (Bob, Johannes) . Fixed bug #67496 (Save command history when exiting interactive shell with control-c). (Dmitry Saprykin, Johannes) - Sessions: . Fixed missing type checks in php_session_create_id (Yussuf Khalil, Stas). - SPL: . Fixed bug #67539 (ArrayIterator use-after-free due to object change during sorting). (research at insighti dot org, Laruence) . Fixed bug #67538 (SPL Iterators use-after-free). (CVE-2014-4670) (Laruence) - Core: . Fixed bug #67693 (incorrect push to the empty array) (Tjerk) - ODBC: . Fixed bug #60616 (odbc_fetch_into returns junk data at end of multi-byte char fields). (Keyur) - Zlib: . Fixed bug #67724 (chained zlib filters silently fail with large amounts of data). (Mike)

Pullup ticket #4485 - requested by tron

2014-08-25T09:17:26Z

lang/perl5: build fix Revisions pulled up: - lang/perl5/distinfo 1.122 - lang/perl5/patches/patch-hints_netbsd.sh 1.9 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: mrg Date: Tue Aug 12 05:41:39 UTC 2014 Modified Files: pkgsrc/lang/perl5: distinfo pkgsrc/lang/perl5/patches: patch-hints_netbsd.sh Log Message: adjust a pattern to match 0.8 vs everything else. fixes build on netbsd-7, which was matching "not everything else" To generate a diff of this commit: cvs rdiff -u -r1.121 -r1.122 pkgsrc/lang/perl5/distinfo cvs rdiff -u -r1.8 -r1.9 pkgsrc/lang/perl5/patches/patch-hints_netbsd.sh

Remove superfluous patch file. Problem pointed out by Patrick Welche

2014-08-18T14:44:30Z

on ticket #4475.

Pullup ticket #4475 - requested by prlw1

2014-08-18T12:48:05Z

lang/php53: security update Revisions pulled up: - lang/php/phpversion.mk 1.69 via patch - lang/php53/Makefile 1.49 - lang/php53/Makefile.php 1.41 - lang/php53/distinfo 1.75-1.76 - lang/php53/patches/patch-Zend_zend_language_parser.h deleted - lang/php53/patches/patch-ext_date_lib_parse__iso__intervals.c deleted - lang/php53/patches/patch-ext_date_lib_parse__iso__intervals.re deleted --- Module Name: pkgsrc Committed By: prlw1 Date: Mon Jul 28 16:12:57 UTC 2014 Modified Files: pkgsrc/lang/php53: distinfo Added Files: pkgsrc/lang/php53/patches: patch-Zend_zend_language_parser.h Log Message: Fix build of www/ap-php with PHP 5.3. --- Module Name: pkgsrc Committed By: taca Date: Fri Aug 15 16:09:16 UTC 2014 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php53: Makefile Makefile.php distinfo Removed Files: pkgsrc/lang/php53/patches: patch-Zend_zend_language_parser.h patch-ext_date_lib_parse__iso__intervals.c patch-ext_date_lib_parse__iso__intervals.re Log Message: Update php53 to 5.3.29, final PHP 5.3 release. 14 Aug 2014, PHP 5.3.29 - Core: . Fixed bug #66127 (Segmentation fault with ArrayObject unset). (Stas) . Fixed bug #67247 (spl_fixedarray_resize integer overflow). (Stas) . Fixed bug #67249 (printf out-of-bounds read). (Stas) . Fixed bug #67250 (iptcparse out-of-bounds read). (Stas) . Fixed bug #67252 (convert_uudecode out-of-bounds read). (Stas) . Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence) . Fixed bug #67390 (insecure temporary file use in the configure script). (Remi) (CVE-2014-3981) . Fixed bug #67399 (putenv with empty variable may lead to crash). (Stas) . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion) (CVE-2014-3515). (Stefan Esser) . Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability). (Stefan Esser) - COM: . Fixed missing type checks in com_event_sink (Yussuf Khalil, Stas). - Date: . Fixed bug #66060 (Heap buffer over-read in DateInterval). (CVE-2013-6712) (Remi) . Fixed bug #67251 (date_parse_from_format out-of-bounds read). (Stas) . Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read). (Stas) - Exif: . Fixed bug #65873 (Integer overflow in exif_read_data()). (Stas) - Fileinfo: . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol) . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary check). (CVE-2014-0207) . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS). (CVE-2014-0238) . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in performance degradation). (CVE-2014-0237) . Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal string size). (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary check). (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check). (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary check). (Francisco Alonso, Jan Kaluza, Remi) - Intl: . Fixed bug #67349 (Locale::parseLocale Double Free). (Stas) . Fixed bug #67397 (Buffer overflow in locale_get_display_name and uloc_getDisplayName (libicu 4.8.1)). (Stas) - Network: . Fixed bug #67432 (Fix potential segfault in dns_check_record()). (CVE-2014-4049). (Sara) - OpenSSL: . Fixed missing type checks in OpenSSL options (Yussuf Khalil, Stas). - Session: . Fixed missing type checks in php_session_create_id (Yussuf Khalil, Stas).

Pullup ticket #4472 - requested by prlw1

2014-08-13T21:09:05Z

lang/gcc44: build fix Revisions pulled up: - lang/gcc44/Makefile 1.43 --- Module Name: pkgsrc Committed By: prlw1 Date: Tue Aug 12 08:33:31 UTC 2014 Modified Files: pkgsrc/lang/gcc44: Makefile Log Message: Fix for PR pkg/48683 based on a hint from wiz@.

Pullup ticket #4465 - requested by dholland

2014-07-27T12:36:21Z

lang/openjdk7: fix for netbsd-5 Revisions pulled up: - lang/openjdk7/Makefile 1.71-1.72 - lang/openjdk7/bootstrap.mk 1.11 - lang/openjdk7/distinfo 1.50-1.51 - lang/openjdk7/patches/patch-aa 1.12 - lang/openjdk7/patches/patch-ak 1.7 - lang/openjdk7/patches/patch-hotspot_agent_src_share_classes_sun_jvm_hotspot_utilities_PlatformInfo.java 1.1 - lang/openjdk7/patches/patch-jdk_make_java_net_FILES__c.gmk 1.1 - lang/openjdk7/patches/patch-jdk_src_solaris_classes_java_lang_UNIXProcess.java.bsd 1.1 - lang/openjdk7/patches/patch-jdk_src_solaris_native_java_lang_UNIXProcess__md.c 1.1 - lang/openjdk7/patches/patch-jdk_src_solaris_native_java_lang_java__props__md.c 1.1 - lang/openjdk7/patches/patch-jdk_src_solaris_native_java_net_net__util__md.h 1.1 - lang/openjdk7/patches/patch-jdk_test_jprt.config 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: ryoon Date: Mon Jul 21 00:15:41 UTC 2014 Modified Files: pkgsrc/lang/openjdk7: Makefile distinfo Added Files: pkgsrc/lang/openjdk7/patches: patch-jdk_src_solaris_classes_java_lang_UNIXProcess.java.bsd patch-jdk_src_solaris_native_java_lang_UNIXProcess__md.c Log Message: Bump PKGREVISION. Fix PR pkg/48982. * Use fork instead of posix_spawn under NetBSD 5. To generate a diff of this commit: cvs rdiff -u -r1.70 -r1.71 pkgsrc/lang/openjdk7/Makefile cvs rdiff -u -r1.49 -r1.50 pkgsrc/lang/openjdk7/distinfo cvs rdiff -u -r0 -r1.1 \ pkgsrc/lang/openjdk7/patches/patch-jdk_src_solaris_classes_java_lang_UNIXProcess.java.bsd \ pkgsrc/lang/openjdk7/patches/patch-jdk_src_solaris_native_java_lang_UNIXProcess__md.c ------------------------------------------------------------------- Module Name: pkgsrc Committed By: ryoon Date: Fri Jul 25 20:35:14 UTC 2014 Modified Files: pkgsrc/lang/openjdk7: Makefile bootstrap.mk distinfo pkgsrc/lang/openjdk7/patches: patch-aa patch-ak Added Files: pkgsrc/lang/openjdk7/patches: patch-hotspot_agent_src_share_classes_sun_jvm_hotspot_utilities_PlatformInfo.java patch-jdk_make_java_net_FILES__c.gmk patch-jdk_src_solaris_native_java_lang_java__props__md.c patch-jdk_src_solaris_native_java_net_net__util__md.h patch-jdk_test_jprt.config Log Message: Bump PKGREVISION * Use working bootstrap kits for DragonFly from DPorts. * Borrow patches from DragonFly Dports. Fix build under DragonFly 3.6.2 and 3.8.1. To generate a diff of this commit: cvs rdiff -u -r1.71 -r1.72 pkgsrc/lang/openjdk7/Makefile cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/openjdk7/bootstrap.mk cvs rdiff -u -r1.50 -r1.51 pkgsrc/lang/openjdk7/distinfo cvs rdiff -u -r1.11 -r1.12 pkgsrc/lang/openjdk7/patches/patch-aa cvs rdiff -u -r1.6 -r1.7 pkgsrc/lang/openjdk7/patches/patch-ak cvs rdiff -u -r0 -r1.1 \ pkgsrc/lang/openjdk7/patches/patch-hotspot_agent_src_share_classes_sun_jvm_hotspot_utilities_PlatformInfo.java \ pkgsrc/lang/openjdk7/patches/patch-jdk_make_java_net_FILES__c.gmk \ pkgsrc/lang/openjdk7/patches/patch-jdk_src_solaris_native_java_lang_java__props__md.c \ pkgsrc/lang/openjdk7/patches/patch-jdk_src_solaris_native_java_net_net__util__md.h \ pkgsrc/lang/openjdk7/patches/patch-jdk_test_jprt.config