summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2013-09-24Disable poppler. Addresses PR 48239.wiz1-1/+2
2013-09-24fix build on systems without builtin lua (with lua option disabled,drochner2-1/+14
so that no pkgsrc lua is pulled in) tested by John Klos
2013-09-24Update go to 1.1.2.bsiegert3-8/+17
go1.1.2 (released 2013/08/13) includes fixes to the gc compiler and cgo, and the bufio, runtime, syscall, and time packages. See the change history for details. If you use package syscall's Getrlimit and Setrlimit functions under Linux on the ARM or 386 architectures, please note change 55ac276af5a7 that fixes issue 5949. This is a leaf package, so it should be ok during the freeze.
2013-09-24GNOME-3.10 is out.wiz1-12/+23
+ anjuta-3.10.0, atk-2.10.0, calypso-1.2, cheese-3.10.0, clutter-1.16.0, cogl-1.16.0, gdl-3.10.0, glade-3.8.4, gnome-chess-3.8.4, gnome-common-3.10.0, gnome-keyring-3.10.0, gtk3-3.10, libgnome-keyring-3.10.0, m4-1.4.17, meld-1.8.1, mousetweaks-3.10.0, seahorse-3.10.0, seahorse-nautilus-3.10.0, vala-0.22.0, vinagre-3.10.0, vino-3.10.0, xf86-video-fbdev-0.4.4.
2013-09-24Fix build failure with "error: possibly undefined macro: AC_MSG_ERROR."ryoon1-2/+2
* Add pkg-config to USE_TOOLS.
2013-09-24Updated ham/trustedQSL to 2.0rc6mef1-1/+2
2013-09-24Bump tqsl-2.0rc5 to 2.0rc6.mef3-12/+13
Proposed at tech-pkg@ and supported by gdt@, thanks. ---------------------- Date: Saturday, September 21, 2013 8:32 PM Subject: TQSL-2.0-RC6 Public release available There's a new TQSL beta test release available for download. This release corrects the following defects discovered since TQSL 2.0-RC5 (as well as severl enhancements). Strip leading spaces and trailing spaces from station locations passed on the command line to help correct for common user errors. Display LoTW errors returned when a callsign certificate request fails for some reason. Record multiple outstanding certificate requests and delete the pending status if the user deletes the corresponding callsign certificate. Remove an errant "M" on the certificate request signing page. Properly wrap the text on that page for MacOS. The TQSL version number is always displayed for command line usage unless "-n" (check for new TQSL, configuration and program updates) is used. Added a new icon for TQSL contributed by K1GQ. The default shortcut icon has not changed, but the new icon is available for selection. Display an error when the TQSL configuration files (station locations, callsign certificates, etc.) can't be opened. All earlier versions of TQSL ignored these errors and started up with no callsign certificates or station locations defined. When a user selects a callsign in the Station Location window then clicked on "Create new Station Location", the DXCC entity in the station location wizard used the entity of the first callsign, not the selected callsign. The station location editor no longer shows multiple entries with the same DXCC entity in the entity selection pulldown list when there are multiple callsign certificates for a given callsign.
2013-09-24Support the 'memconf' script on SunOS.jperkin2-2/+5
2013-09-23Updated www/py-wtforms to 1.0.4nb2.kleink1-1/+2
2013-09-23Add upstream commit 723c40a8153d20dce0c6dd1a91f193ef0375a194 via patch:kleink3-3/+55
Update ext.appengine.fields for unicode_literals. Fixes #153. Fixes build failure with on py32. Bump PKGREVISION.
2013-09-23Do not create duplicate definitions. From FreeBSD ports.asau3-1/+30
This fixes package on FreeBSD.
2013-09-23TLS is not supported by NetBSD<6obache1-1/+7
2013-09-23Reset maintainer, address bounces.joerg3-6/+6
2013-09-23Don't bother with unused functions for Clang.joerg1-2/+3
2013-09-23Don't bother with unused functions for Clang. Race conditions whilejoerg1-2/+4
building.
2013-09-23Updated net/ruby-tw to 0.5.1tsutsui1-1/+2
2013-09-23Update ruby-tw to 0.5.1. (leaf package update)tsutsui2-6/+6
Changes from History.txt: === 0.5.1 2013-09-18 * tweet with file % tw 'yummy!!' --file=food.jpg
2013-09-23Treat FreeBSD and NetBSD uniformly. This fixes building the package on FreeBSD.asau2-6/+10
2013-09-23Suggest DRI option for FreeBSD.asau1-2/+2
This lets the build fail further.
2013-09-22+ abcm2ps-7.6.0, elftoolchain-0.6.1 [pkg/48227], etm2-2.2.1 [etmwiz1-10/+23
successor], gbrainy-2.22, grilo-0.2.7, harfbuzz-0.9.21, libgee-0.10.5, libmatroska-1.4.1, libnids-1.24 [pkg/48217], libreoffice4-4.1.1, links-2.8, mame-0.150, mess-0.150, mkvtoolnix-6.4.1, modular-xorg-server-1.14.3, php-tt-rss-1.10, png-1.6.6, py-setuptools-1.1.6, snort-2.9.5.5, x264-devel-20130921, xf86-video-glide-1.2.2, xinput-1.6.1.
2013-09-22Updated net/p5-Net-Amazon to 0.62obache1-1/+2
2013-09-22Update p5-Net-Amazon to 0.62.obache2-7/+6
0.62 (01/26/2013) (dc) Add support for HTTP compression where available, enabled by default. (cb) Add support for EAN to the US locale, as reported by Jacob Turino. (cb) Add Spain and Italy locales, as implemented by Menno Blom. (cb) Add some new departments in Amazon.co.jp, as implemented Naoya Ito.
2013-09-22Updated security/p5-Authen-TacacsPlus to 0.24pettai1-1/+2
2013-09-220.24pettai2-7/+6
- Updated author and distribution location details to airspayce.com
2013-09-21Updated net/nsd to 3.2.16pettai1-1/+2
2013-09-21NSD 3.2.16pettai2-7/+6
Features: * New config option "ip-transparent:" to allow NSD to bind to non local addresses. Default no. * Use IPV6 minimum MTU settings with TCP to reduce failures that are caused by delays in learning working PMTU when communicating through a tunnel. * Bugfix #496: Support for EUI48 and EUI64 RR types. Experimental, turned off by default. Enable with --enable-draft-rrtypes. * New config option "rrl-slip:" to set the average number of packets discarded before we send back a truncated response. * New config option "rrl-ipv4-prefix-length:" and "rrl-ipv6-prefix-length:" to set the prefix lengths. * Improved RRL logging, also print triggering query src address and QTYPE. * Provide RRL documentation in nsd.conf.sample. Bugfixes: * Bugfix #357: Parent process waits until children closed down sockets, to prevent NSD failing to bind to sockets when restarting. * Bugfix #487: lookup3.c determine endianness for BSD systems. * Bugfix #491: pick program name (0th argument) as syslog identity. * Bugfix #494: Exit with return code 1 if socket code fails. * Bugfix #495: Wrong bufsize in dname_to_string for root. * Fix outgoing-interface: Don't fail if family is IPv6 but only IPv4 outgoing-interface is set, or vice versa. * RRtypes ASFDB, RP, RT should not compress dnames. * Check that zone directory is within chroot directory. * Better XFR checking, fallback to AXFR (if allowed) if three malformed XFR packets have been seen.
2013-09-21Updated mail/opendkim to 2.8.4pettai2-3/+3
2013-09-212.8.4 2013/07/15pettai2-7/+6
Fix bug #169: Add "::1" to the default InternalHosts list. Fix bug #171: Escape "+" character in regex generation. Fix bug #172: Repair broken AutoRestartRate logic. Fix bug #SF3603525: Discard duplicate results from non-DKIM methods. Fix bug #SF3611976: Fix up quarantine option handling. TOOLS: Fix bug #SF3609716: Fix meaning of "-S" in opendkim-genkey. BUILD: Fix bug #SF3612816: Build compatibility with Lua 5.2.
2013-09-21Updated security/dnssec-tools to 2.0pettai1-1/+2
2013-09-212.0pettai2-7/+6
- New Features - OWL - The Owl Monitoring System uses timed DNS queries to monitor basic network functionality. The system consists of a manager host and a set of sensor hosts. The Owl sensors perform periodic DNS queries and report to the Owl manager the time taken for each query. Over time, this shows the responsiveness of the DNS infrastructure. - dnssec-nodes - Many new features have been added: - The validation tree now supports clicking on boxes to highlight it and the arrows that derive from it. Great for use when teaching about DNSSEC. - An extensive filter/effect editor now lets you tailor the look of a graph to color-code, set the alpha levels, etc of nodes based on their names, status, data types, etc. - Right clicking on a node lets you center the graph on that node. - More data types are collected and shown in the data view. - Support for arguments on the command line for parsing log files, pcap files and domain names. - The validation view has received a visual clean-up - Many other bug fixes - Bloodhound: - A mozilla-based DNSSEC-enabled browser with DANE support - Added support for validation of SSL certificates using the DANE protocol. - curl - Added support for validation of SSL certificates using the DANE protocol. - libval - Added support for local DANE validation - Extended the dt-danechk commandline tool to check the X509 cert provided over the SSL connection against the TLSA record. - Optimized glue record lookup when the only ip addresses configured for the host are for a single address family (ipv4 or ipv6) - fine tune res_io source management - dnssec-check - dnssec-check now checks DNAME support - rollerd - A new set of steps for KSK rollover has been implemented. A cache-expiration wait phase has been moved after the publication of DS records in order to allow name caches to reflect the changes. In addition to rollerd, supporting program have been modified to recognize this change. - rollrec files - A new "information rollrec" has been added to the rollrec files. This will allow infomration to be specified for the collection of rollrecs. At this time, the only information stored in this rollrec is the version number of the rollrec file. In addition to the rollrec.pm Perl module, programs which use this module have been modified to recognize this change. If you use the rollrec.pm module, you should test to see if your code is affected. The modifications for the info rollrec have been made to minimize affected programs. If you parse the rollrec files yourself, you will have to account for this change. - multiple - The perl-based tools can now use either the ZoneFile::Fast or the Net::DNS zone file parser, thanks to a patch from Sebastian Schmidt (yath@yath.de). - ZoneFile:Fast - Support for TLSA - Made it compatible with newer Net::DNS releases - Qt5 - A patch to support DNSSEC checks in Qt5 DNS lookups - Bug Fixes - zonesigner - Fixed SOA parsing and serial number update issues - libval - Properly initialize memory in sockaddr structures before use.
2013-09-21Updated www/shibboleth-sp to 2.5.2pettai2-3/+3
2013-09-212.5.2:pettai4-40/+54
Bugfixes [SSPCPP-543] - AttributeExtractor fails to deal with multiple Logos [SSPCPP-547] - Encoding problem with Metadata Attribute Extractor [SSPCPP-549] - Shiboleth SP 2.5.1 breaks Apache 2.4.3's error pages [SSPCPP-550] - Problems with native.log file rotation [SSPCPP-551] - DiscoFeed Content-Type header lacks charset [SSPCPP-552] - Solaris TCP Listener code is broken [SSPCPP-568] - Unattended install pegs the CPU and never completes [SSPCPP-569] - native log files not closed at/before CGI exec [SSPCPP-570] - mod_shib takes over valid-user for entire server [SSPCPP-573] - ShibDisable on breaks basic auth valid user [SSPCPP-575] - Source build w/memcached and/or fastcgi support fails [SSPCPP-579] - Internal stack overflow in log4shib Improvements [SSPCPP-493] - Default allow access to Shibboleth.sso by default in shibd.conf [SSPCPP-501] - Make metagen ingest a list of hostnames from a file 2.5.1: Bugfixes [SSPCPP-409] - Shibboleth2.xml - undefined InProcess/OutOfProcess means no shibd.log/native.log [SSPCPP-490] - CLang build issue with stream operator overload [SSPCPP-492] - SP Release 2.5.0 does not compile with xml-security-c versions prior to 1.7.0 [SSPCPP-495] - Warning Shibboleth.PropertySet : load() skipping duplicate property set: [SSPCPP-499] - Fresh Installation on Windows XP fails after service daemon fails to start [SSPCPP-500] - configure fails against Apache 2.4 [SSPCPP-502] - Apache 2.4 post_read hook isn't run on subrequests, breaks module [SSPCPP-504] - ScopedAttributeDecoder fails on non-ascii chars? [SSPCPP-505] - shibd on Windows missing a version option [SSPCPP-507] - Insert record failed Violation of PRIMARY KEY constraint with ODBC plugin [SSPCPP-510] - Installer scripts (particularly the uninstall ones) should fail safe [SSPCPP-514] - FCGI responder stdin buffer missing termination [SSPCPP-516] - apache24.config missing from makefile target [SSPCPP-518] - Incorrect requireLogoutWith redirection if the original URL has query string [SSPCPP-519] - Shorthand SSO/Logout syntax not working with policyId setting [SSPCPP-521] - Schemas are not being edited on Windows Installation [SSPCPP-522] - Transform resolver echoes source string when match fails [SSPCPP-526] - Transaction log crashes on SOAP-based logout [SSPCPP-527] - Add ignoreNoPassive attribute to SSO element [SSPCPP-540] - ISAPI header detection code is prone to false alarms Improvements [SSPCPP-402] - Support front-channel SLO without cookies [SSPCPP-447] - Extension of consistentAddress for IPv6 [SSPCPP-501] - Make metagen ingest a list of hostnames from a file [SSPCPP-517] - Windows SP installer should not always roll back when shibd fails to start New Feature [SSPCPP-515] - Make /Status handler report SessionCache 2.5.0: Bugfixes [SSPCPP-344] - Version strings in various spots are wired at compile time [SSPCPP-345] - Split "package-level" and "user-level" settings in shib.conf to limit effect of RPM upgrades. [SSPCPP-365] - Support for binary attributes in resolver [SSPCPP-382] - Correct date format in Expires headers [SSPCPP-383] - Tag entityID not usable in error templates [SSPCPP-387] - Cryptographic nameID is longer than key length that memcache can handle [SSPCPP-391] - Generation of keys for relay state is not strongly random [SSPCPP-392] - Valgrind detects memory leaks [SSPCPP-393] - Setting session timeout="0" creates infinite loop between SP and IDP [SSPCPP-400] - NameID lookup for logout ignores logical SP boundaries [SSPCPP-401] - IIS App Pool Crash [SSPCPP-406] - Should check for cross platform previous versions? [SSPCPP-408] - ECP flow fails for Session configured inside of ApplicationOverride [SSPCPP-411] - openSUSE 12.1 erases /var/run at each reboot, so shibd fails to start [SSPCPP-413] - Schema catalogs should be set after XMLTooling init. [SSPCPP-416] - IIS breaks with error "isapi_shib: Attempted to insert duplicate storage key." Server restart required to fix [SSPCPP-417] - redirectErrors configuration attribute does not handle relative URLs [SSPCPP-419] - ExtensibleAttribute internal marshalling doesn't handle attribute naming correctly [SSPCPP-423] - After upgrading SP to Alpha SP 2.5 RPM from previous version of SP, shibd does not start. [SSPCPP-431] - Change links of https://spaces.inetrnet2.edu to wiki.shibboleth.net [SSPCPP-438] - Artifact resolver code doesn't use EndpointIndex in 2.0 artifacts [SSPCPP-439] - Auto-generated ACS endpoints improperly tracked by index [SSPCPP-443] - SP not signing ECP AuthnRequests [SSPCPP-444] - Multiple shib_state cookies get set -> server chokes on header field size [SSPCPP-445] - RequestInitiator metadata generated in a case where it shouldn't be [SSPCPP-448] - setting relayState to use ODBC storage service results in attempted redirects to an invalid URL [SSPCPP-449] - RequestMap not normalizing hostname for comparison [SSPCPP-459] - redirectLimit parser typo [SSPCPP-460] - A spelling error in the configure file [SSPCPP-461] - caching DiscoFeed fails b/c cache directory does not exist [SSPCPP-465] - CLONE - Tag entityID not usable in error templates [SSPCPP-467] - Cross-contamination from conflicting @relayState settings [SSPCPP-468] - Aliases support in XML Attribute Extractor no longer working in 2.5.0 Beta 1 [SSPCPP-487] - relayStateLimitWhitelist parameter is being changed inadvertently by limitRelayState method [SSPCPP-488] - No way to get client address set for ExternalAuth sessions [SSPCPP-489] - Windows installer (tries to) install a 64 bit path into IIS [SSPCPP-498] - Hardcoded path in XMLTooling is invalid on localized WinXP/2003 Improvements [SSPCPP-319] - Augment XMLAccessControl for time based access control. [SSPCPP-326] - Abbreviated IPv6 address format and CIDR support for acl [SSPCPP-332] - Session cache slows down if large numbers of sessions with a single NameID are created [SSPCPP-335] - Handle query strings on POST and avoid unintended POST data consumption [SSPCPP-352] - Expose RelayState limiter as a public API and revisit default setting [SSPCPP-353] - Package the SP to run as non-root user [SSPCPP-361] - Session handler with better parseable and accessable (X)HTML code [SSPCPP-362] - add 'metadata last refresh' to SP's status page [SSPCPP-366] - generated metadata should include cryptographic algorithms [SSPCPP-375] - Add httpOnly to cookieProps in the shibboleth2.xml config [SSPCPP-376] - Add a post-filtering hashing feature to shorten long attributes, namely ePTIDs [SSPCPP-394] - Support multiple authn context references in requests [SSPCPP-399] - SImple Aggregation plugin should allow "prefixing" of attributes or dedicated extractors [SSPCPP-403] - Facilitate signing Logout messages [SSPCPP-404] - Log entry for failed consistentAddress="true" check [SSPCPP-405] - CRIT Shibboleth.Application : no MetadataProvider available should be a warning not CRIT [SSPCPP-407] - Improve logging on invalid XML in shibboleth2.xml configuration file [SSPCPP-418] - Incorporating Boost libraries into code base [SSPCPP-420] - Memcache build on RH6 and error handling fixes [SSPCPP-425] - ShibAccessControl Relative Paths to user web content [SSPCPP-436] - Log on DEBUG when a shibsession cookie is being cleared because no corresponding session is found by Shibboleth [SSPCPP-446] - Try moving child_init hooks in Apache 2.x modules to post_config [SSPCPP-458] - Unprecise error message when wrong certificate is used for SAML2 encryption [SSPCPP-464] - Provide Logging to Recommend Production Settings [SSPCPP-470] - Identify deprecated features or suboptimal settings and add warnings [SSPCPP-472] - AttributeExtractor: remove leading/trailing whitespace created by formatter New Features [SSPCPP-245] - Support for attribute requirements in the SP [SSPCPP-339] - Extraction of contacts and other built-in metadata information [SSPCPP-341] - AttributeResolver plugin(s) for regexp or template-based transformation of values [SSPCPP-342] - Metadata / Attribute filtering based on EntityAttributes [SSPCPP-343] - Add support for capturing AuthenticatingAuthority [SSPCPP-349] - Parseable audit logs for SP [SSPCPP-389] - Add option to shibd to set uid and gid at startup [SSPCPP-390] - Multiple language versions for the same attribute [SSPCPP-396] - Simplify logout support for Native SP [SSPCPP-410] - add support for the 'policy' query string parameter [SSPCPP-421] - Extraction of consent attribute from SAML 2 responses [SSPCPP-430] - Apache 2.4 support [SSPCPP-437] - Add artifact binding for resolving artifacts via file system [SSPCPP-440] - Loopback handler to exchange an assertion for a session [SSPCPP-469] - Logout request extension to specify no response [SSPCPP-471] - Shorthand settings for manipulating cookie properties [SSPCPP-486] - Add automatic algorithm blacklist
2013-09-21Invoke correct version of gcc that is specified by GCC_REQD.ryoon1-2/+2
Suggested by obache@, thank you. This is a part of PR pkg/48223.
2013-09-21tiffdholland1-1/+2
2013-09-21Add upstream candidate patch for CVE-2013-4243. PKGREVISION -> 6dholland3-3/+49
2013-09-21+ mysql-5.1.72, mysql-5.5.34, mysql-5.6.14.taca1-1/+6
2013-09-21Note update of php54 and php55 packages.taca1-1/+3
lang/php54 to 5.4.20 lang/php55 to 5.5.4
2013-09-21Update php55 to 5.5.4, approved by wiz@.taca2-6/+6
18 Sep 2013, PHP 5.5.4 - Core: . Fixed bug #60598 (cli/apache sapi segfault on objects manipulation). (Laruence) . Improved fputcsv() to allow specifying escape character. . Fixed bug #65490 (Duplicate calls to get lineno & filename for DTRACE_FUNCTION_*). (Chris Jones) . Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding spaces). (Michael M Slusarz) . Fixed bug #65470 (Segmentation fault in zend_error() with --enable-dtrace). (Chris Jones, Kris Van Hees) . Fixed bug #65225 (PHP_BINARY incorrectly set). (Patrick Allaert) . Fixed bug #62692 (PHP fails to build with DTrace). (Chris Jones, Kris Van Hees) . Fixed bug #61759 (class_alias() should accept classes with leading backslashes). (Julien) . Fixed bug #46311 (Pointer aliasing issue results in miscompile on gcc4.4). (Nikita Popov) - cURL: . Fixed bug #65458 (curl memory leak). (Adam) - Datetime: . Fixed bug #65554 (createFromFormat broken when weekday name is followed by some delimiters). (Valentin Logvinskiy, Stas). . Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught by AddressSanitizer). (Remi). - OPCache: . Fixed bug #65561 (Zend Opcache on Solaris 11 x86 needs ZEND_MM_ALIGNMENT=4). (Terry Ellison) - Openssl: . Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in some cases). (Mark Jones) - Session: . Fixed bug #65475 (Session ID is not initialized properly when strict session is enabled). (Yasuo) . Fixed bug #51127/#65359 Request #25630/#43980/#54383 (Added php_serialize session serialize handler that uses plain serialize()). (Yasuo) - Standard: . Fix issue with return types of password API helper functions. Found via static analysis by cjones. (Anthony Ferrara)
2013-09-21Update php54 to 5.4.20, approved by wiz@.taca6-50/+24
19 Sep 2013, PHP 5.4.20 - Core: . Fixed bug #60598 (cli/apache sapi segfault on objects manipulation). (Laruence) . Fixed bug #65579 (Using traits with get_class_methods causes segfault). (Adam) . Fixed bug #65490 (Duplicate calls to get lineno & filename for DTRACE_FUNCTION_*). (Chris Jones) . Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding spaces). (Michael M Slusarz) . Fixed bug #65481 (shutdown segfault due to serialize) (Mike) . Fixed bug #65470 (Segmentation fault in zend_error() with --enable-dtrace). (Chris Jones, Kris Van Hees) . Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails). (Laruence) . Fixed bug #65304 (Use of max int in array_sum). (Laruence) . Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case). (Arpad) . Fixed bug #65225 (PHP_BINARY incorrectly set). (Patrick Allaert) . Improved fix for bug #63186 (compile failure on netbsd). (Matteo) . Fixed bug #62692 (PHP fails to build with DTrace). (Chris Jones, Kris Van Hees) . Fixed bug #61759 (class_alias() should accept classes with leading backslashes). (Julien) . Fixed bug #61345 (CGI mode - make install don't work). (Michael Heimpold) . Cherry-picked some DTrace build commits (allowing builds on Linux, bug #62691, and bug #63706) from PHP 5.5 branch . Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d) (Chris Jones) - cURL: . Fixed bug #65458 (curl memory leak). (Adam) - Datetime: . Fixed bug #65554 (createFromFormat broken when weekday name is followed by some delimiters). (Valentin Logvinskiy, Stas). . Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught by AddressSanitizer). (Remi). - Openssl: . Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in some cases). (Mark Jones) - Session: . Fixed bug #62129 (rfc1867 crashes php even though turned off). (gxd305 at gmail dot com) . Fixed bug #50308 (session id not appended properly for empty anchor tags). (Arpad) . Fixed possible buffer overflow under Windows. Note: Not a security fix. (Yasuo) . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo) - SOAP: . Fixed bug #65018 (SoapHeader problems with SoapServer). (Dmitry) - SPL: . Fixed bug #65328 (Segfault when getting SplStack object Value). (Laruence) - PDO: . Fixed bug #64953 (Postgres prepared statement positional parameter casting). (Mike) - Phar: . Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents). (Stas) - Pgsql: . Fixed bug #65336 (pg_escape_literal/identifier() silently returns false). (Yasuo) . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()). (Yasuo) - Zlib: . Fixed bug #65391 (Unable to send vary header user-agent when ob_start('ob_gzhandler') is called) (Mike)
2013-09-21Note update of BIND packages, approved by wiz@.taca1-1/+4
net/bind96 9.6.3.1.ESV.10 net/bind98 9.8.6 net/bind99 9.9.4
2013-09-21Update bind99 to 9.9.4 (BIND 9.9.4).taca12-61/+61
(CVE-2013-4854 and CVE-2013-3919 were already fixed in pkgsrc). Security Fixes Previously an error in bounds checking on the private type 'keydata' could be used to deny service through a deliberately triggerable REQUIRE failure (CVE-2013-4854). [RT #34238] Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] New Features Added Response Rate Limiting (RRL) functionality to reduce the effectiveness of DNS as an amplifier for reflected denial-of-service attacks by rate-limiting substantially-identical responses. [RT #28130] Feature Changes rndc status now also shows the build-id. [RT #20422] Improved OPT pseudo-record processing to make it easier to support new EDNS options. [RT #34414] "configure" now finishes by printing a summary of optional BIND features and whether they are active or inactive. ("configure --enable-full-report" increases the verbosity of the summary.) [RT #31777] Addressed compatibility issues with newer versions of Microsoft Visual Studio. [RT #33916] Improved the 'rndc' man page. [RT #33506] 'named -g' now no longer works with an invalid logging configuration. [RT #33473] The default (and minimum) value for tcp-listen-queue is now 10 instead of 3. This is a subtle control setting (not applicable to all OS environments). When there is a high rate of inbound TCP connections, it controls how many connections can be queued before they are accepted by named. Once this limit is exceeded, new TCP connections will be rejected. Note however that a value of 10 does not imply a strict limit of 10 queued TCP connections - the impact of changing this configuration setting will be OS-dependent. Larger values for tcp-listen queue will permit more pending tcp connections, which may be needed where there is a high rate of TCP-based traffic (for example in a dynamic environment where there are frequent zone updates and transfers). For most production servers the new default value of 10 should be adequate. [RT #33029] Added support for OpenSSL versions 0.9.8y, 1.0.0k, and 1.0.1e with PKCS#11. [RT #33463] Added logging messages on slave servers when they forward DDNS updates to a master. [RT #33240] Changed the logging category for RRL events from 'queries' to 'query-errors'. [RT #33540] Bug Fixes Fixed the "allow-query-on" option to correctly check the destination address. [RT #34590] Fix forwarding for forward only "zones" beneath automatic empty zones. [RT #34583] Fix DNSSEC auto maintenance so signatures can be removed from a zone with only KSK keys for an algorithm. [RT #34439] Fix DNSSEC auto maintenance so signatures from newly inactive keys are removed (when publishing a new key while deactivating another key at the same time). [RT #32178] Remove bogus warning log message about missing signatures when receiving a query for a SIG record. [RT #34600] Fix Response Policy Zones on slave servers so new RPZ changes take effect. [RT #34450] Fix the "zone-statistics" option to work with the default traditional statistics (not new "--enable-newstats" feature). [RT #34466] named could crash when deleting inline-signing zones with "rndc delzone". [RT #34066] Improved resistance to a theoretical authentication attack based on differential timing. [RT #33939] named was failing to answer queries during "rndc reload" [RT #34098] win32: Some executables had been omitted from the installer. [RT #34116] fixed a broken 'Invalid keyfile' error message in dnssec-keygen. [RT #34045] The build of BIND now installs isc/stat.h so that it's available to /isc/file.h when building other applications that reference these header files - for example dnsperf (see Debian bug ticket #692467). [RT #33056] Better handle failures building XML for stats channel responses. [RT #33706] Fixed a memory leak in GSS-API processing. [RT #33574] Fixed an acache-related race condition that could cause a crash. [RT #33602] rndc now properly fails when given an invalid '-c' argument. [RT #33571] Fixed an issue with the handling of zero TTL records that could cause improper SERVFAILs. [RT #33411] Fixed a crash-on-shutdown race condition with DNSSEC validation. [RT #33573] Corrected the way that "rndc addzone" and "rndc delzone" handle non-standard characters in zone names. [RT #33419] Adjusted RRL behavior for recursive queries to defer rate-limiting until after recursion is complete. Also uses correct rcode for slipped NXDOMAIN responses. [RT #33604] Previously, BIND could erroneously report a missing file specification when using inline slave zones. [RT #33662]
2013-09-21Update bind98 to 9.8.6 (BIND 9.8.6).taca7-37/+39
(CVE-2013-4854 and CVE-2013-3919 were already fixed in pkgsrc.) Security Fixes Previously an error in bounds checking on the private type 'keydata' could be used to deny service through a deliberately triggerable REQUIRE failure (CVE-2013-4854). [RT #34238] Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] Feature Changes rndc status now also shows the build-id. [RT #20422] Improved OPT pseudo-record processing to make it easier to support new EDNS options. [RT #34414] "configure" now finishes by printing a summary of optional BIND features and whether they are active or inactive. ("configure --enable-full-report" increases the verbosity of the summary.) [RT #31777] Addressed compatibility issues with newer versions of Microsoft Visual Studio. [RT #33916] Improved the 'rndc' man page. [RT #33506] 'named -g' now no longer works with an invalid logging configuration. [RT #33473] The default (and minimum) value for tcp-listen-queue is now 10 instead of 3. This is a subtle control setting (not applicable to all OS environments). When there is a high rate of inbound TCP connections, it controls how many connections can be queued before they are accepted by named. Once this limit is exceeded, new TCP connections will be rejected. Note however that a value of 10 does not imply a strict limit of 10 queued TCP connections - the impact of changing this configuration setting will be OS-dependent. Larger values for tcp-listen queue will permit more pending tcp connections, which may be needed where there is a high rate of TCP-based traffic (for example in a dynamic environment where there are frequent zone updates and transfers). For most production servers the new default value of 10 should be adequate. [RT #33029] Added support for OpenSSL versions 0.9.8y, 1.0.0k, and 1.0.1e with PKCS#11. [RT #33463] Added logging messages on slave servers when they forward DDNS updates to a master. [RT #33240] Bug Fixes Fixed the "allow-query-on" option to correctly check the destination address. [RT #34590] Fix DNSSEC auto maintenance so signatures can be removed from a zone with only KSK keys for an algorithm. [RT #34439] Fix forwarding for forward only "zones" beneath automatic empty zones. [RT #34583] Fix DNSSEC auto maintenance so signatures from newly inactive keys are removed (when publishing a new key while deactivating another key at the same time). [RT #32178] Remove bogus warning log message about missing signatures when receiving a query for a SIG record. [RT #34600] Fix Response Policy Zones on slave servers so new RPZ changes take effect. [RT #34450] Improved resistance to a theoretical authentication attack based on differential timing. [RT #33939] named was failing to answer queries during "rndc reload" [RT #34098] Fixed a broken 'Invalid keyfile' error message in dnssec-keygen. [RT #34045] The build of BIND now installs isc/stat.h so that it's available to /isc/file.h when building other applications that reference these header files - for example dnsperf (see Debian bug ticket #692467). [RT #33056] Better handle failures building XML for stats channel responses. [RT #33706] Fixed a memory leak in GSS-API processing. [RT #33574] Fixed an acache-related race condition that could cause a crash. [RT #33602] rndc now properly fails when given an invalid '-c' argument. [RT #33571] Fixed an issue with the handling of zero TTL records that could cause improper SERVFAILs. [RT #33411] Fixed a crash-on-shutdown race condition with DNSSEC validation. [RT #33573] Corrected the way that "rndc addzone" and "rndc delzone" handle non-standard characters in zone names. [RT #33419]
2013-09-21Update bind96 to bind-9.6.3.1.ESV.10 (BIND 9.6-ESV-R10).taca5-18/+19
(CVE-2013-3919 is already fixed in pkgsrc). Security Fixes Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] Feature Changes rndc status now also shows the build-id. [RT #20422] Improved OPT pseudo-record processing to make it easier to support new EDNS options. [RT #34414] "configure" now finishes by printing a summary of optional BIND features and whether they are active or inactive. ("configure --enable-full-report" increases the verbosity of the summary.) [RT #31777] Addressed compatibility issues with newer versions of Microsoft Visual Studio. [RT #33916] Improved the 'rndc' man page. [RT #33506] 'named -g' now no longer works with an invalid logging configuration. [RT #33473] The default (and minimum) value for tcp-listen-queue is now 10 instead of 3. This is a subtle control setting (not applicable to all OS environments). When there is a high rate of inbound TCP connections, it controls how many connections can be queued before they are accepted by named. Once this limit is exceeded, new TCP connections will be rejected. Note however that a value of 10 does not imply a strict limit of 10 queued TCP connections - the impact of changing this configuration setting will be OS-dependent. Larger values for tcp-listen queue will permit more pending tcp connections, which may be needed where there is a high rate of TCP-based traffic (for example in a dynamic environment where there are frequent zone updates and transfers). For most production servers the new default value of 10 should be adequate. [RT #33029] Bug Fixes Fixed the "allow-query-on" option to correctly check the destination address. [RT #34590] Fix forwarding for forward only "zones" beneath automatic empty zones. [RT #34583] Remove bogus warning log message about missing signatures when receiving a query for a SIG record. [RT #34600] Improved resistance to a theoretical authentication attack based on differential timing. [RT #33939] The build of BIND now installs isc/stat.h so that it's available to /isc/file.h when building other applications that reference these header files - for example dnsperf (see Debian bug ticket #692467). [RT #33056] Better handle failures building XML for stats channel responses. [RT #33706] Fixed a memory leak in GSS-API processing. [RT #33574] Fixed an acache-related race condition that could cause a crash. [RT #33602] rndc now properly fails when given an invalid '-c' argument. [RT #33571] Fixed an issue with the handling of zero TTL records that could cause improper SERVFAILs. [RT #33411] Fixed a crash-on-shutdown race condition with DNSSEC validation. [RT #33573]
2013-09-21Not compatible with gmime-2.6, so switch to use mail/gmime20.obache1-4/+4
Bump PKGREVISION.
2013-09-21+ gmime20obache1-1/+2
2013-09-21Added mail/gmime20 version 2.2.25obache1-1/+2
2013-09-21Import gmime20-2.2.25 as mail/gmime20.obache11-0/+296
based on mail/gmime before updated to incompatible 2.6, with patches for new glib2 borrowed by mail/gmime24. approved by wiz@ dureing freeze. GMime is a set of utilities for parsing and creating messages using the Multipurpose Internet Mail Extension (MIME) as defined by the following RFCs: * 0822: Standard for the Format of Arpa Internet Text Messages * 1521: MIME (Multipurpose Internet Mail Extensions) Part One: Mechanisms for Specifying and Describing the Format of Internet Message Bodies * 1847: Security Multiparts for MIME: Multipart/Signed and Multipart/Encrypted * 1864: The Content-MD5 Header Field (Obsoletes rfc1544) * 2015: MIME Security with Pretty Good Privacy (PGP) * 2045: Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies * 2046: Multipurpose Internet Mail Extensions (MIME) Part Two: Media Types * 2047: Multipurpose Internet Mail Extensions (MIME) Part Three: Message Header Extensions for Non-ASCII Text * 2048: Multipurpose Internet Mail Extensions (MIME) Part Four: Registration Procedures * 2049: Multipurpose Internet Mail Extensions (MIME) Part Five: Conformance Criteria and Examples * 2183: Communicating Presentation Information in Internet Messages: The Content-Disposition Header Field * 2184: MIME Parameter Value and Encoded Word Extensions: Character Sets, Languages, and Continuations * 2231: MIME Parameter Value and Encoded Word Extensions: Character Sets, Languages, and Continuations (Obsoletes rfc2184) * 3156: MIME Security with OpenPGP (Updates rfc2015)
2013-09-21Fix non-official branding build.ryoon2-4/+6
2013-09-21For mbft/Poison.cpp, OS_SOLARIS is not defined, use __sun__ instead.ryoon2-4/+4
2013-09-21Regen checksum.ryoon1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-26 04:13:34 +0000