Pullup ticket #5907 - requested by khorben

finance/bitcoin: security update

Revisions pulled up:
- finance/bitcoin/Makefile                                      1.9
- finance/bitcoin/distinfo                                      1.2

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	khorben
   Date:		Mon Feb  4 22:06:22 UTC 2019

   Modified Files:
   	pkgsrc/finance/bitcoin: Makefile distinfo

   Log Message:
   Update finance/bitcoin to version 0.16.3

   - From the release notes for version 0.16.2:

   Wallet
   * #13622 c04a4a5 Remove mapRequest tracking that just effects Qt
   display. (TheBlueMatt)
   * #12905 cfc6f74 [rpcwallet] Clamp walletpassphrase value at 100M
   seconds (sdaftuar)
   * #13437 ed82e71 wallet: Erase wtxOrderd wtx pointer on
   removeprunedfunds (MarcoFalke)

   RPC and other APIs
   * #13451 cbd2f70 rpc: expose CBlockIndex::nTx in getblock(header)
   (instagibbs)
   * #13507 f7401c8 RPC: Fix parameter count check for importpubkey
   (kristapsk)
   * #13452 6b9dc8c rpc: have verifytxoutproof check the number of txns
   in proof structure (instagibbs)
   * #12837 bf1f150 rpc: fix type mistmatch in listreceivedbyaddress
   (joemphilips)
   * #12743 657dfc5 Fix csBestBlock/cvBlockChange waiting in rpc/mining
   (sipa)

   GUI
   * #12432 f78e7f6 [qt] send: Clear All also resets coin control options
   (Sjors)
   * #12617 21dd512 gui: Show messages as text not html (laanwj)
   * #12793 cf6feb7 qt: Avoid reseting on resetguisettigs=0 (MarcoFalke)

   Build system
   * #13544 9fd3e00 depends: Update Qt download url (fanquake)
   * #12573 88d1a64 Fix compilation when compiler do not support
   __builtin_clz* (532479301)

   Tests and QA
   * #13061 170b309 Make tests pass after 2020 (bmwiedemann)
   * #13192 79c4fff [tests] Fixed intermittent failure in
   p2p_sendheaders.py (lmanners)
   * #13300 d9c5630 qa: Initialize lockstack to prevent null pointer
   deref (MarcoFalke)
   * #13545 e15e3a9 tests: Fix test case streams_serializedata_xor Remove
   Boost dependency. (practicalswift)
   * #13304 cbdabef qa: Fix wallet_listreceivedby race (MarcoFalke)

   Miscellaneous
   * #12887 2291774 Add newlines to end of log messages (jnewbery)
   * #12859 18b0c69 Bugfix: Include for std::unique_ptr (luke-jr)
   * #13131 ce8aa54 Add Windows shutdown handler (ken2812221)
   * #13652 20461fc rpc: Fix that CWallet::AbandonTransaction would leave
   the grandchildren, etc. active (Empact)

   - From the release notes for version 0.16.3:

   Consensus
   * #14249 696b936 Fix crash bug with duplicate inputs within a
   transaction (TheBlueMatt, sdaftuar)

   RPC and other APIs
   * #13547 212ef1f Make signrawtransaction* give an error when amount is
   needed but missing (ajtowns)

   Miscellaneous
   * #13655 1cdbea7 bitcoinconsensus: invalid flags error should be set
   to bitcoinconsensus_err (afk11)

   Documentation
   * #13844 11b9dbb correct the help output for -prune (hebasto)

   This also fixes a denial-of-service vulnerability (CVE-2018-17144). It i
   s
   exploitable by miners and has been discovered in Bitcoin Core versions
   0.14.0
   up to 0.16.2. It is recommended to upgrade any of the vulnerable
   versions to
   0.16.3 as soon as possible.

   XXX pull-up (security fix)


   To generate a diff of this commit:
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/finance/bitcoin/Makefile
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/finance/bitcoin/distinfo

2 files changed, 7 insertions, 8 deletions

diff --git a/finance/bitcoin/Makefile b/finance/bitcoin/Makefile
index e0350d4b776..afef3b19a1d 100644
--- a/finance/bitcoin/Makefile
+++ b/finance/bitcoin/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.8 2018/12/13 19:51:50 adam Exp $
+# $NetBSD: Makefile,v 1.8.2.1 2019/02/08 22:38:58 spz Exp $
 
-DISTNAME=	bitcoin-0.16.1
-PKGREVISION=	6
+DISTNAME=	bitcoin-0.16.3
 CATEGORIES=	finance
 MASTER_SITES=	${MASTER_SITE_GITHUB:=bitcoin/}
 GITHUB_TAG=	v${PKGVERSION_NOREV}
diff --git a/finance/bitcoin/distinfo b/finance/bitcoin/distinfo
index a81701bf062..2eb2eb3da51 100644
--- a/finance/bitcoin/distinfo
+++ b/finance/bitcoin/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.1 2018/07/08 11:13:46 khorben Exp $
+$NetBSD: distinfo,v 1.1.4.1 2019/02/08 22:38:58 spz Exp $
 
-SHA1 (bitcoin-0.16.1.tar.gz) = 3454dd16befc04bbd624aece219206728982b9bf
-RMD160 (bitcoin-0.16.1.tar.gz) = 70710030badc9287870c26a6436c7a108dfab1cc
-SHA512 (bitcoin-0.16.1.tar.gz) = d7b7bd376aa743b9f17a1f3299e4c2f924263e7b8231475cc6b6ecf7a551cb639ffdc1f20820e2030f5d8268a099e4a465cbc3512c281005daaa30ec4e1e326b
-Size (bitcoin-0.16.1.tar.gz) = 6655512 bytes
+SHA1 (bitcoin-0.16.3.tar.gz) = efb4e2757f1ae47b1083ec90c7ceb964427e90f8
+RMD160 (bitcoin-0.16.3.tar.gz) = edaac28b150a380075735dbb74c14451019845c9
+SHA512 (bitcoin-0.16.3.tar.gz) = cc7ccd09a6561cb32dee1e95041d8499347e04dd5ae4de89a36bc3dd07024af0f9151fef93bf49e05b078baf247f1b0b84c8fd1b600953ba27d31e5cbc1534b4
+Size (bitcoin-0.16.3.tar.gz) = 6655901 bytes
 SHA1 (patch-src_leveldb_port_port__posix.h) = 6a3cde12951b9801e8ffe19b6134ca48ad0d876c
 SHA1 (patch-src_netbase.cpp) = c1357ce9437fab87651df9fd4ca12dd24c59830c
 SHA1 (patch-src_secp256k1_configure.ac) = 688e13e1da110bf15557434f19507f43290be8ef