<feed xmlns='http://www.w3.org/2005/Atom'>
<title>pkgsrc/security/libssh/buildlink3.mk, branch pkgsrc_2013Q3</title>
<subtitle>[no description]</subtitle>
<id>https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2013Q3</id>
<link rel='self' href='https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2013Q3'/>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/'/>
<updated>2013-02-06T23:20:50Z</updated>
<entry>
<title>PKGREVISION bumps for the security/openssl 1.0.1d update.</title>
<updated>2013-02-06T23:20:50Z</updated>
<author>
<name>jperkin</name>
<email>jperkin</email>
</author>
<published>2013-02-06T23:20:50Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=3f77c48b9aa5259445074dd7190ffd1dbb9b5d62'/>
<id>urn:sha1:3f77c48b9aa5259445074dd7190ffd1dbb9b5d62</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Commit missing file, and fix the version gate. Thanks to Noud de Brouwer</title>
<updated>2013-02-01T16:47:51Z</updated>
<author>
<name>is</name>
<email>is</email>
</author>
<published>2013-02-01T16:47:51Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=fb0611baaefadf8b6d19af5349f36e713cf3b4be'/>
<id>urn:sha1:fb0611baaefadf8b6d19af5349f36e713cf3b4be</id>
<content type='text'>
for beta-testing the package.
</content>
</entry>
<entry>
<title>Update libssh to (upstream) 0.5.4 == (our) 0.54.</title>
<updated>2013-02-01T13:33:48Z</updated>
<author>
<name>is</name>
<email>is</email>
</author>
<published>2013-02-01T13:33:48Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=0bcbf6543656d2916f4b109fbc59eaef2432891a'/>
<id>urn:sha1:0bcbf6543656d2916f4b109fbc59eaef2432891a</id>
<content type='text'>
(We need to keep the old numbering syntax to make versions compare
correctly.)

There are only two consumers in pkgsrc; one of them (remmina and
remmina-plugins) actually needed library version 0.4 or later, and
didn't build the ssh/sftp/nx plugins without. Hydra is also supposed
to build with 0.4.x and later.)

Upstream changelogs:

0.5.4:
	CVE-2013-0176 - NULL dereference leads to denial of service
	Fixed several NULL pointer dereferences in SSHv1.
	Fixed a free crash bug in options parsing.

and for completeness 0.5.3:

	This is an important SECURITY and maintenance release in
	order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561
	and CVE-2012-4562.

	CVE-2012-4559 - Fix multiple double free() flaws
	CVE-2012-4560 - Fix multiple buffer overflow flaws
	CVE-2012-4561 - Fix multiple invalid free() flaws
	CVE-2012-4562 - Fix multiple improper overflow checks

	(...)
</content>
</entry>
<entry>
<title>Set BUILDLINK_ABI_DEPENDS correctly (with +=, not ?=)</title>
<updated>2012-05-07T01:53:12Z</updated>
<author>
<name>dholland</name>
<email>dholland</email>
</author>
<published>2012-05-07T01:53:12Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=cc1ac695ede7d3d2b8292cbd2a5325c37d1f50a1'/>
<id>urn:sha1:cc1ac695ede7d3d2b8292cbd2a5325c37d1f50a1</id>
<content type='text'>
It turns out there were a lot of these.
</content>
</entry>
<entry>
<title>Add missing devel/zlib buildlink.</title>
<updated>2011-11-27T03:49:03Z</updated>
<author>
<name>sbd</name>
<email>sbd</email>
</author>
<published>2011-11-27T03:49:03Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=5c4c5e62908bb1e3fb7073074c9c8150cfa73139'/>
<id>urn:sha1:5c4c5e62908bb1e3fb7073074c9c8150cfa73139</id>
<content type='text'>
Bump PKGREVISION
</content>
</entry>
<entry>
<title>Simply and speed up buildlink3.mk files and processing.</title>
<updated>2009-03-20T19:23:50Z</updated>
<author>
<name>joerg</name>
<email>joerg</email>
</author>
<published>2009-03-20T19:23:50Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=405c61d80251d8e80401aed2264d4bede218cb22'/>
<id>urn:sha1:405c61d80251d8e80401aed2264d4bede218cb22</id>
<content type='text'>
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
</content>
</entry>
<entry>
<title>Change the format of BUILDLINK_ORDER to contain depth information as well,</title>
<updated>2006-07-08T23:10:35Z</updated>
<author>
<name>jlam</name>
<email>jlam</email>
</author>
<published>2006-07-08T23:10:35Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=b96729a13e6502c6d9d1c2912a698e23f57d3965'/>
<id>urn:sha1:b96729a13e6502c6d9d1c2912a698e23f57d3965</id>
<content type='text'>
and add a new helper target and script, "show-buildlink3", that outputs
a listing of the buildlink3.mk files included as well as the depth at
which they are included.

For example, "make show-buildlink3" in fonts/Xft2 displays:

	zlib
	fontconfig
	    iconv
	    zlib
	    freetype2
	    expat
	freetype2
	Xrender
	    renderproto
</content>
</entry>
<entry>
<title>Track information in a new variable BUILDLINK_ORDER that informs us</title>
<updated>2006-07-08T22:38:58Z</updated>
<author>
<name>jlam</name>
<email>jlam</email>
</author>
<published>2006-07-08T22:38:58Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=6e7d67f4b1fea88b6cff1f00142907eca4188add'/>
<id>urn:sha1:6e7d67f4b1fea88b6cff1f00142907eca4188add</id>
<content type='text'>
of the order in which buildlink3.mk files are (recursively) included
by a package Makefile.
</content>
</entry>
<entry>
<title>Aligned the last line of the buildlink3.mk files with the first line, so</title>
<updated>2006-04-12T10:26:59Z</updated>
<author>
<name>rillig</name>
<email>rillig</email>
</author>
<published>2006-04-12T10:26:59Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=f39c7a6814118271c6fbfe87140ce12d8a3146d7'/>
<id>urn:sha1:f39c7a6814118271c6fbfe87140ce12d8a3146d7</id>
<content type='text'>
that they look nicer.
</content>
</entry>
<entry>
<title>Over 1200 files touched but no revisions bumped :)</title>
<updated>2006-04-06T06:21:32Z</updated>
<author>
<name>reed</name>
<email>reed</email>
</author>
<published>2006-04-06T06:21:32Z</published>
<link rel='alternate' type='text/html' href='https://git.osdyson.ru/mirror/pkgsrc/commit/?id=3b50716541c42bd031d14157665a74004901cade'/>
<id>urn:sha1:3b50716541c42bd031d14157665a74004901cade</id>
<content type='text'>
RECOMMENDED is removed. It becomes ABI_DEPENDS.

BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo.

BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo.

BUILDLINK_DEPENDS does not change.

IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS
which defaults to "yes".

Added to obsolete.mk checking for IGNORE_RECOMMENDED.

I did not manually go through and fix any aesthetic tab/spacing issues.

I have tested the above patch on DragonFly building and packaging
subversion and pkglint and their many dependencies.

I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I
have used IGNORE_RECOMMENDED for a long time). I have been an active user
of IGNORE_RECOMMENDED since it was available.

As suggested, I removed the documentation sentences suggesting bumping for
"security" issues.

As discussed on tech-pkg.

I will commit to revbump, pkglint, pkg_install, createbuildlink separately.

Note that if you use wip, it will fail!  I will commit to pkgsrc-wip
later (within day).
</content>
</entry>
</feed>
