summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2013-09-21Updated www/shibboleth-sp to 2.5.2pettai2-3/+3
2013-09-212.5.2:pettai4-40/+54
Bugfixes [SSPCPP-543] - AttributeExtractor fails to deal with multiple Logos [SSPCPP-547] - Encoding problem with Metadata Attribute Extractor [SSPCPP-549] - Shiboleth SP 2.5.1 breaks Apache 2.4.3's error pages [SSPCPP-550] - Problems with native.log file rotation [SSPCPP-551] - DiscoFeed Content-Type header lacks charset [SSPCPP-552] - Solaris TCP Listener code is broken [SSPCPP-568] - Unattended install pegs the CPU and never completes [SSPCPP-569] - native log files not closed at/before CGI exec [SSPCPP-570] - mod_shib takes over valid-user for entire server [SSPCPP-573] - ShibDisable on breaks basic auth valid user [SSPCPP-575] - Source build w/memcached and/or fastcgi support fails [SSPCPP-579] - Internal stack overflow in log4shib Improvements [SSPCPP-493] - Default allow access to Shibboleth.sso by default in shibd.conf [SSPCPP-501] - Make metagen ingest a list of hostnames from a file 2.5.1: Bugfixes [SSPCPP-409] - Shibboleth2.xml - undefined InProcess/OutOfProcess means no shibd.log/native.log [SSPCPP-490] - CLang build issue with stream operator overload [SSPCPP-492] - SP Release 2.5.0 does not compile with xml-security-c versions prior to 1.7.0 [SSPCPP-495] - Warning Shibboleth.PropertySet : load() skipping duplicate property set: [SSPCPP-499] - Fresh Installation on Windows XP fails after service daemon fails to start [SSPCPP-500] - configure fails against Apache 2.4 [SSPCPP-502] - Apache 2.4 post_read hook isn't run on subrequests, breaks module [SSPCPP-504] - ScopedAttributeDecoder fails on non-ascii chars? [SSPCPP-505] - shibd on Windows missing a version option [SSPCPP-507] - Insert record failed Violation of PRIMARY KEY constraint with ODBC plugin [SSPCPP-510] - Installer scripts (particularly the uninstall ones) should fail safe [SSPCPP-514] - FCGI responder stdin buffer missing termination [SSPCPP-516] - apache24.config missing from makefile target [SSPCPP-518] - Incorrect requireLogoutWith redirection if the original URL has query string [SSPCPP-519] - Shorthand SSO/Logout syntax not working with policyId setting [SSPCPP-521] - Schemas are not being edited on Windows Installation [SSPCPP-522] - Transform resolver echoes source string when match fails [SSPCPP-526] - Transaction log crashes on SOAP-based logout [SSPCPP-527] - Add ignoreNoPassive attribute to SSO element [SSPCPP-540] - ISAPI header detection code is prone to false alarms Improvements [SSPCPP-402] - Support front-channel SLO without cookies [SSPCPP-447] - Extension of consistentAddress for IPv6 [SSPCPP-501] - Make metagen ingest a list of hostnames from a file [SSPCPP-517] - Windows SP installer should not always roll back when shibd fails to start New Feature [SSPCPP-515] - Make /Status handler report SessionCache 2.5.0: Bugfixes [SSPCPP-344] - Version strings in various spots are wired at compile time [SSPCPP-345] - Split "package-level" and "user-level" settings in shib.conf to limit effect of RPM upgrades. [SSPCPP-365] - Support for binary attributes in resolver [SSPCPP-382] - Correct date format in Expires headers [SSPCPP-383] - Tag entityID not usable in error templates [SSPCPP-387] - Cryptographic nameID is longer than key length that memcache can handle [SSPCPP-391] - Generation of keys for relay state is not strongly random [SSPCPP-392] - Valgrind detects memory leaks [SSPCPP-393] - Setting session timeout="0" creates infinite loop between SP and IDP [SSPCPP-400] - NameID lookup for logout ignores logical SP boundaries [SSPCPP-401] - IIS App Pool Crash [SSPCPP-406] - Should check for cross platform previous versions? [SSPCPP-408] - ECP flow fails for Session configured inside of ApplicationOverride [SSPCPP-411] - openSUSE 12.1 erases /var/run at each reboot, so shibd fails to start [SSPCPP-413] - Schema catalogs should be set after XMLTooling init. [SSPCPP-416] - IIS breaks with error "isapi_shib: Attempted to insert duplicate storage key." Server restart required to fix [SSPCPP-417] - redirectErrors configuration attribute does not handle relative URLs [SSPCPP-419] - ExtensibleAttribute internal marshalling doesn't handle attribute naming correctly [SSPCPP-423] - After upgrading SP to Alpha SP 2.5 RPM from previous version of SP, shibd does not start. [SSPCPP-431] - Change links of https://spaces.inetrnet2.edu to wiki.shibboleth.net [SSPCPP-438] - Artifact resolver code doesn't use EndpointIndex in 2.0 artifacts [SSPCPP-439] - Auto-generated ACS endpoints improperly tracked by index [SSPCPP-443] - SP not signing ECP AuthnRequests [SSPCPP-444] - Multiple shib_state cookies get set -> server chokes on header field size [SSPCPP-445] - RequestInitiator metadata generated in a case where it shouldn't be [SSPCPP-448] - setting relayState to use ODBC storage service results in attempted redirects to an invalid URL [SSPCPP-449] - RequestMap not normalizing hostname for comparison [SSPCPP-459] - redirectLimit parser typo [SSPCPP-460] - A spelling error in the configure file [SSPCPP-461] - caching DiscoFeed fails b/c cache directory does not exist [SSPCPP-465] - CLONE - Tag entityID not usable in error templates [SSPCPP-467] - Cross-contamination from conflicting @relayState settings [SSPCPP-468] - Aliases support in XML Attribute Extractor no longer working in 2.5.0 Beta 1 [SSPCPP-487] - relayStateLimitWhitelist parameter is being changed inadvertently by limitRelayState method [SSPCPP-488] - No way to get client address set for ExternalAuth sessions [SSPCPP-489] - Windows installer (tries to) install a 64 bit path into IIS [SSPCPP-498] - Hardcoded path in XMLTooling is invalid on localized WinXP/2003 Improvements [SSPCPP-319] - Augment XMLAccessControl for time based access control. [SSPCPP-326] - Abbreviated IPv6 address format and CIDR support for acl [SSPCPP-332] - Session cache slows down if large numbers of sessions with a single NameID are created [SSPCPP-335] - Handle query strings on POST and avoid unintended POST data consumption [SSPCPP-352] - Expose RelayState limiter as a public API and revisit default setting [SSPCPP-353] - Package the SP to run as non-root user [SSPCPP-361] - Session handler with better parseable and accessable (X)HTML code [SSPCPP-362] - add 'metadata last refresh' to SP's status page [SSPCPP-366] - generated metadata should include cryptographic algorithms [SSPCPP-375] - Add httpOnly to cookieProps in the shibboleth2.xml config [SSPCPP-376] - Add a post-filtering hashing feature to shorten long attributes, namely ePTIDs [SSPCPP-394] - Support multiple authn context references in requests [SSPCPP-399] - SImple Aggregation plugin should allow "prefixing" of attributes or dedicated extractors [SSPCPP-403] - Facilitate signing Logout messages [SSPCPP-404] - Log entry for failed consistentAddress="true" check [SSPCPP-405] - CRIT Shibboleth.Application : no MetadataProvider available should be a warning not CRIT [SSPCPP-407] - Improve logging on invalid XML in shibboleth2.xml configuration file [SSPCPP-418] - Incorporating Boost libraries into code base [SSPCPP-420] - Memcache build on RH6 and error handling fixes [SSPCPP-425] - ShibAccessControl Relative Paths to user web content [SSPCPP-436] - Log on DEBUG when a shibsession cookie is being cleared because no corresponding session is found by Shibboleth [SSPCPP-446] - Try moving child_init hooks in Apache 2.x modules to post_config [SSPCPP-458] - Unprecise error message when wrong certificate is used for SAML2 encryption [SSPCPP-464] - Provide Logging to Recommend Production Settings [SSPCPP-470] - Identify deprecated features or suboptimal settings and add warnings [SSPCPP-472] - AttributeExtractor: remove leading/trailing whitespace created by formatter New Features [SSPCPP-245] - Support for attribute requirements in the SP [SSPCPP-339] - Extraction of contacts and other built-in metadata information [SSPCPP-341] - AttributeResolver plugin(s) for regexp or template-based transformation of values [SSPCPP-342] - Metadata / Attribute filtering based on EntityAttributes [SSPCPP-343] - Add support for capturing AuthenticatingAuthority [SSPCPP-349] - Parseable audit logs for SP [SSPCPP-389] - Add option to shibd to set uid and gid at startup [SSPCPP-390] - Multiple language versions for the same attribute [SSPCPP-396] - Simplify logout support for Native SP [SSPCPP-410] - add support for the 'policy' query string parameter [SSPCPP-421] - Extraction of consent attribute from SAML 2 responses [SSPCPP-430] - Apache 2.4 support [SSPCPP-437] - Add artifact binding for resolving artifacts via file system [SSPCPP-440] - Loopback handler to exchange an assertion for a session [SSPCPP-469] - Logout request extension to specify no response [SSPCPP-471] - Shorthand settings for manipulating cookie properties [SSPCPP-486] - Add automatic algorithm blacklist
2013-09-21Invoke correct version of gcc that is specified by GCC_REQD.ryoon1-2/+2
Suggested by obache@, thank you. This is a part of PR pkg/48223.
2013-09-21tiffdholland1-1/+2
2013-09-21Add upstream candidate patch for CVE-2013-4243. PKGREVISION -> 6dholland3-3/+49
2013-09-21+ mysql-5.1.72, mysql-5.5.34, mysql-5.6.14.taca1-1/+6
2013-09-21Note update of php54 and php55 packages.taca1-1/+3
lang/php54 to 5.4.20 lang/php55 to 5.5.4
2013-09-21Update php55 to 5.5.4, approved by wiz@.taca2-6/+6
18 Sep 2013, PHP 5.5.4 - Core: . Fixed bug #60598 (cli/apache sapi segfault on objects manipulation). (Laruence) . Improved fputcsv() to allow specifying escape character. . Fixed bug #65490 (Duplicate calls to get lineno & filename for DTRACE_FUNCTION_*). (Chris Jones) . Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding spaces). (Michael M Slusarz) . Fixed bug #65470 (Segmentation fault in zend_error() with --enable-dtrace). (Chris Jones, Kris Van Hees) . Fixed bug #65225 (PHP_BINARY incorrectly set). (Patrick Allaert) . Fixed bug #62692 (PHP fails to build with DTrace). (Chris Jones, Kris Van Hees) . Fixed bug #61759 (class_alias() should accept classes with leading backslashes). (Julien) . Fixed bug #46311 (Pointer aliasing issue results in miscompile on gcc4.4). (Nikita Popov) - cURL: . Fixed bug #65458 (curl memory leak). (Adam) - Datetime: . Fixed bug #65554 (createFromFormat broken when weekday name is followed by some delimiters). (Valentin Logvinskiy, Stas). . Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught by AddressSanitizer). (Remi). - OPCache: . Fixed bug #65561 (Zend Opcache on Solaris 11 x86 needs ZEND_MM_ALIGNMENT=4). (Terry Ellison) - Openssl: . Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in some cases). (Mark Jones) - Session: . Fixed bug #65475 (Session ID is not initialized properly when strict session is enabled). (Yasuo) . Fixed bug #51127/#65359 Request #25630/#43980/#54383 (Added php_serialize session serialize handler that uses plain serialize()). (Yasuo) - Standard: . Fix issue with return types of password API helper functions. Found via static analysis by cjones. (Anthony Ferrara)
2013-09-21Update php54 to 5.4.20, approved by wiz@.taca6-50/+24
19 Sep 2013, PHP 5.4.20 - Core: . Fixed bug #60598 (cli/apache sapi segfault on objects manipulation). (Laruence) . Fixed bug #65579 (Using traits with get_class_methods causes segfault). (Adam) . Fixed bug #65490 (Duplicate calls to get lineno & filename for DTRACE_FUNCTION_*). (Chris Jones) . Fixed bug #65483 (quoted-printable encode stream filter incorrectly encoding spaces). (Michael M Slusarz) . Fixed bug #65481 (shutdown segfault due to serialize) (Mike) . Fixed bug #65470 (Segmentation fault in zend_error() with --enable-dtrace). (Chris Jones, Kris Van Hees) . Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails). (Laruence) . Fixed bug #65304 (Use of max int in array_sum). (Laruence) . Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case). (Arpad) . Fixed bug #65225 (PHP_BINARY incorrectly set). (Patrick Allaert) . Improved fix for bug #63186 (compile failure on netbsd). (Matteo) . Fixed bug #62692 (PHP fails to build with DTrace). (Chris Jones, Kris Van Hees) . Fixed bug #61759 (class_alias() should accept classes with leading backslashes). (Julien) . Fixed bug #61345 (CGI mode - make install don't work). (Michael Heimpold) . Cherry-picked some DTrace build commits (allowing builds on Linux, bug #62691, and bug #63706) from PHP 5.5 branch . Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d) (Chris Jones) - cURL: . Fixed bug #65458 (curl memory leak). (Adam) - Datetime: . Fixed bug #65554 (createFromFormat broken when weekday name is followed by some delimiters). (Valentin Logvinskiy, Stas). . Fixed bug #65564 (stack-buffer-overflow in DateTimeZone stuff caught by AddressSanitizer). (Remi). - Openssl: . Fixed bug #64802 (openssl_x509_parse fails to parse subject properly in some cases). (Mark Jones) - Session: . Fixed bug #62129 (rfc1867 crashes php even though turned off). (gxd305 at gmail dot com) . Fixed bug #50308 (session id not appended properly for empty anchor tags). (Arpad) . Fixed possible buffer overflow under Windows. Note: Not a security fix. (Yasuo) . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo) - SOAP: . Fixed bug #65018 (SoapHeader problems with SoapServer). (Dmitry) - SPL: . Fixed bug #65328 (Segfault when getting SplStack object Value). (Laruence) - PDO: . Fixed bug #64953 (Postgres prepared statement positional parameter casting). (Mike) - Phar: . Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents). (Stas) - Pgsql: . Fixed bug #65336 (pg_escape_literal/identifier() silently returns false). (Yasuo) . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()). (Yasuo) - Zlib: . Fixed bug #65391 (Unable to send vary header user-agent when ob_start('ob_gzhandler') is called) (Mike)
2013-09-21Note update of BIND packages, approved by wiz@.taca1-1/+4
net/bind96 9.6.3.1.ESV.10 net/bind98 9.8.6 net/bind99 9.9.4
2013-09-21Update bind99 to 9.9.4 (BIND 9.9.4).taca12-61/+61
(CVE-2013-4854 and CVE-2013-3919 were already fixed in pkgsrc). Security Fixes Previously an error in bounds checking on the private type 'keydata' could be used to deny service through a deliberately triggerable REQUIRE failure (CVE-2013-4854). [RT #34238] Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] New Features Added Response Rate Limiting (RRL) functionality to reduce the effectiveness of DNS as an amplifier for reflected denial-of-service attacks by rate-limiting substantially-identical responses. [RT #28130] Feature Changes rndc status now also shows the build-id. [RT #20422] Improved OPT pseudo-record processing to make it easier to support new EDNS options. [RT #34414] "configure" now finishes by printing a summary of optional BIND features and whether they are active or inactive. ("configure --enable-full-report" increases the verbosity of the summary.) [RT #31777] Addressed compatibility issues with newer versions of Microsoft Visual Studio. [RT #33916] Improved the 'rndc' man page. [RT #33506] 'named -g' now no longer works with an invalid logging configuration. [RT #33473] The default (and minimum) value for tcp-listen-queue is now 10 instead of 3. This is a subtle control setting (not applicable to all OS environments). When there is a high rate of inbound TCP connections, it controls how many connections can be queued before they are accepted by named. Once this limit is exceeded, new TCP connections will be rejected. Note however that a value of 10 does not imply a strict limit of 10 queued TCP connections - the impact of changing this configuration setting will be OS-dependent. Larger values for tcp-listen queue will permit more pending tcp connections, which may be needed where there is a high rate of TCP-based traffic (for example in a dynamic environment where there are frequent zone updates and transfers). For most production servers the new default value of 10 should be adequate. [RT #33029] Added support for OpenSSL versions 0.9.8y, 1.0.0k, and 1.0.1e with PKCS#11. [RT #33463] Added logging messages on slave servers when they forward DDNS updates to a master. [RT #33240] Changed the logging category for RRL events from 'queries' to 'query-errors'. [RT #33540] Bug Fixes Fixed the "allow-query-on" option to correctly check the destination address. [RT #34590] Fix forwarding for forward only "zones" beneath automatic empty zones. [RT #34583] Fix DNSSEC auto maintenance so signatures can be removed from a zone with only KSK keys for an algorithm. [RT #34439] Fix DNSSEC auto maintenance so signatures from newly inactive keys are removed (when publishing a new key while deactivating another key at the same time). [RT #32178] Remove bogus warning log message about missing signatures when receiving a query for a SIG record. [RT #34600] Fix Response Policy Zones on slave servers so new RPZ changes take effect. [RT #34450] Fix the "zone-statistics" option to work with the default traditional statistics (not new "--enable-newstats" feature). [RT #34466] named could crash when deleting inline-signing zones with "rndc delzone". [RT #34066] Improved resistance to a theoretical authentication attack based on differential timing. [RT #33939] named was failing to answer queries during "rndc reload" [RT #34098] win32: Some executables had been omitted from the installer. [RT #34116] fixed a broken 'Invalid keyfile' error message in dnssec-keygen. [RT #34045] The build of BIND now installs isc/stat.h so that it's available to /isc/file.h when building other applications that reference these header files - for example dnsperf (see Debian bug ticket #692467). [RT #33056] Better handle failures building XML for stats channel responses. [RT #33706] Fixed a memory leak in GSS-API processing. [RT #33574] Fixed an acache-related race condition that could cause a crash. [RT #33602] rndc now properly fails when given an invalid '-c' argument. [RT #33571] Fixed an issue with the handling of zero TTL records that could cause improper SERVFAILs. [RT #33411] Fixed a crash-on-shutdown race condition with DNSSEC validation. [RT #33573] Corrected the way that "rndc addzone" and "rndc delzone" handle non-standard characters in zone names. [RT #33419] Adjusted RRL behavior for recursive queries to defer rate-limiting until after recursion is complete. Also uses correct rcode for slipped NXDOMAIN responses. [RT #33604] Previously, BIND could erroneously report a missing file specification when using inline slave zones. [RT #33662]
2013-09-21Update bind98 to 9.8.6 (BIND 9.8.6).taca7-37/+39
(CVE-2013-4854 and CVE-2013-3919 were already fixed in pkgsrc.) Security Fixes Previously an error in bounds checking on the private type 'keydata' could be used to deny service through a deliberately triggerable REQUIRE failure (CVE-2013-4854). [RT #34238] Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] Feature Changes rndc status now also shows the build-id. [RT #20422] Improved OPT pseudo-record processing to make it easier to support new EDNS options. [RT #34414] "configure" now finishes by printing a summary of optional BIND features and whether they are active or inactive. ("configure --enable-full-report" increases the verbosity of the summary.) [RT #31777] Addressed compatibility issues with newer versions of Microsoft Visual Studio. [RT #33916] Improved the 'rndc' man page. [RT #33506] 'named -g' now no longer works with an invalid logging configuration. [RT #33473] The default (and minimum) value for tcp-listen-queue is now 10 instead of 3. This is a subtle control setting (not applicable to all OS environments). When there is a high rate of inbound TCP connections, it controls how many connections can be queued before they are accepted by named. Once this limit is exceeded, new TCP connections will be rejected. Note however that a value of 10 does not imply a strict limit of 10 queued TCP connections - the impact of changing this configuration setting will be OS-dependent. Larger values for tcp-listen queue will permit more pending tcp connections, which may be needed where there is a high rate of TCP-based traffic (for example in a dynamic environment where there are frequent zone updates and transfers). For most production servers the new default value of 10 should be adequate. [RT #33029] Added support for OpenSSL versions 0.9.8y, 1.0.0k, and 1.0.1e with PKCS#11. [RT #33463] Added logging messages on slave servers when they forward DDNS updates to a master. [RT #33240] Bug Fixes Fixed the "allow-query-on" option to correctly check the destination address. [RT #34590] Fix DNSSEC auto maintenance so signatures can be removed from a zone with only KSK keys for an algorithm. [RT #34439] Fix forwarding for forward only "zones" beneath automatic empty zones. [RT #34583] Fix DNSSEC auto maintenance so signatures from newly inactive keys are removed (when publishing a new key while deactivating another key at the same time). [RT #32178] Remove bogus warning log message about missing signatures when receiving a query for a SIG record. [RT #34600] Fix Response Policy Zones on slave servers so new RPZ changes take effect. [RT #34450] Improved resistance to a theoretical authentication attack based on differential timing. [RT #33939] named was failing to answer queries during "rndc reload" [RT #34098] Fixed a broken 'Invalid keyfile' error message in dnssec-keygen. [RT #34045] The build of BIND now installs isc/stat.h so that it's available to /isc/file.h when building other applications that reference these header files - for example dnsperf (see Debian bug ticket #692467). [RT #33056] Better handle failures building XML for stats channel responses. [RT #33706] Fixed a memory leak in GSS-API processing. [RT #33574] Fixed an acache-related race condition that could cause a crash. [RT #33602] rndc now properly fails when given an invalid '-c' argument. [RT #33571] Fixed an issue with the handling of zero TTL records that could cause improper SERVFAILs. [RT #33411] Fixed a crash-on-shutdown race condition with DNSSEC validation. [RT #33573] Corrected the way that "rndc addzone" and "rndc delzone" handle non-standard characters in zone names. [RT #33419]
2013-09-21Update bind96 to bind-9.6.3.1.ESV.10 (BIND 9.6-ESV-R10).taca5-18/+19
(CVE-2013-3919 is already fixed in pkgsrc). Security Fixes Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] Feature Changes rndc status now also shows the build-id. [RT #20422] Improved OPT pseudo-record processing to make it easier to support new EDNS options. [RT #34414] "configure" now finishes by printing a summary of optional BIND features and whether they are active or inactive. ("configure --enable-full-report" increases the verbosity of the summary.) [RT #31777] Addressed compatibility issues with newer versions of Microsoft Visual Studio. [RT #33916] Improved the 'rndc' man page. [RT #33506] 'named -g' now no longer works with an invalid logging configuration. [RT #33473] The default (and minimum) value for tcp-listen-queue is now 10 instead of 3. This is a subtle control setting (not applicable to all OS environments). When there is a high rate of inbound TCP connections, it controls how many connections can be queued before they are accepted by named. Once this limit is exceeded, new TCP connections will be rejected. Note however that a value of 10 does not imply a strict limit of 10 queued TCP connections - the impact of changing this configuration setting will be OS-dependent. Larger values for tcp-listen queue will permit more pending tcp connections, which may be needed where there is a high rate of TCP-based traffic (for example in a dynamic environment where there are frequent zone updates and transfers). For most production servers the new default value of 10 should be adequate. [RT #33029] Bug Fixes Fixed the "allow-query-on" option to correctly check the destination address. [RT #34590] Fix forwarding for forward only "zones" beneath automatic empty zones. [RT #34583] Remove bogus warning log message about missing signatures when receiving a query for a SIG record. [RT #34600] Improved resistance to a theoretical authentication attack based on differential timing. [RT #33939] The build of BIND now installs isc/stat.h so that it's available to /isc/file.h when building other applications that reference these header files - for example dnsperf (see Debian bug ticket #692467). [RT #33056] Better handle failures building XML for stats channel responses. [RT #33706] Fixed a memory leak in GSS-API processing. [RT #33574] Fixed an acache-related race condition that could cause a crash. [RT #33602] rndc now properly fails when given an invalid '-c' argument. [RT #33571] Fixed an issue with the handling of zero TTL records that could cause improper SERVFAILs. [RT #33411] Fixed a crash-on-shutdown race condition with DNSSEC validation. [RT #33573]
2013-09-21Not compatible with gmime-2.6, so switch to use mail/gmime20.obache1-4/+4
Bump PKGREVISION.
2013-09-21+ gmime20obache1-1/+2
2013-09-21Added mail/gmime20 version 2.2.25obache1-1/+2
2013-09-21Import gmime20-2.2.25 as mail/gmime20.obache11-0/+296
based on mail/gmime before updated to incompatible 2.6, with patches for new glib2 borrowed by mail/gmime24. approved by wiz@ dureing freeze. GMime is a set of utilities for parsing and creating messages using the Multipurpose Internet Mail Extension (MIME) as defined by the following RFCs: * 0822: Standard for the Format of Arpa Internet Text Messages * 1521: MIME (Multipurpose Internet Mail Extensions) Part One: Mechanisms for Specifying and Describing the Format of Internet Message Bodies * 1847: Security Multiparts for MIME: Multipart/Signed and Multipart/Encrypted * 1864: The Content-MD5 Header Field (Obsoletes rfc1544) * 2015: MIME Security with Pretty Good Privacy (PGP) * 2045: Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies * 2046: Multipurpose Internet Mail Extensions (MIME) Part Two: Media Types * 2047: Multipurpose Internet Mail Extensions (MIME) Part Three: Message Header Extensions for Non-ASCII Text * 2048: Multipurpose Internet Mail Extensions (MIME) Part Four: Registration Procedures * 2049: Multipurpose Internet Mail Extensions (MIME) Part Five: Conformance Criteria and Examples * 2183: Communicating Presentation Information in Internet Messages: The Content-Disposition Header Field * 2184: MIME Parameter Value and Encoded Word Extensions: Character Sets, Languages, and Continuations * 2231: MIME Parameter Value and Encoded Word Extensions: Character Sets, Languages, and Continuations (Obsoletes rfc2184) * 3156: MIME Security with OpenPGP (Updates rfc2015)
2013-09-21Fix non-official branding build.ryoon2-4/+6
2013-09-21For mbft/Poison.cpp, OS_SOLARIS is not defined, use __sun__ instead.ryoon2-4/+4
2013-09-21Regen checksum.ryoon1-2/+2
2013-09-21Try to reintrodece PLIST conditionals related to vorbis.ryoon1-2/+3
2013-09-21Fix build on SmartOS.ryoon4-5/+57
I cannot confirm the functionality of this change's result sadly (no display and no ssh -Y). The build is completed.
2013-09-21GC, merged into main PLIST.joerg1-2/+0
2013-09-21Use a more robust way to find the current stack frame. Fixes infinitejoerg2-1/+18
loop when trying to load the script binding, if build with clang.
2013-09-21The about-wordmark resource changed from .svg to .pngmartin1-2/+2
2013-09-20Add boost header required by parts of xmltooling.joerg3-2/+16
2013-09-20Update to hydra-7.5 since the old version doesn't build with newerjoerg15-361/+111
libssh. Too many changes to list indivually. Adjust license to AGPLv3.
2013-09-20Fix include guards. Fix format string. Fix uninitialised variables.joerg6-10/+69
Not MAKE_JOBS_SAFE. Bump revision.
2013-09-20Don't use gethostbyname_r on NetBSD.joerg1-1/+7
2013-09-20Updated lang/g95 to 0.93nb4joerg1-1/+2
2013-09-20Build libf95 as shared library. Add rpath entries automatically asjoerg8-16/+158
needed. Bump revision.
2013-09-20Fix template lookup.joerg2-1/+15
2013-09-20<cstdlib> is needed for rand(). Kill various inconsistent restricts.joerg22-1/+1033
2013-09-20Updated www/py-nevow to 0.10.0nb2wiz1-1/+2
2013-09-20Replace python interpreter path in installed script.wiz1-3/+5
Bump PKGREVISION.
2013-09-20Updated lang/python27 to 2.7.5nb3ryoon1-1/+2
2013-09-20Bump PKGREVISION.ryoon1-2/+3
* Pass /usr/bin/env interpreter check for more files, fix build on OmniOS.
2013-09-20Needs the same __fpending workaround on Cygwin as devel/m4.joerg1-1/+7
2013-09-20Fix build on OmniOS.ryoon10-97/+181
* Add -fno-stack-protector to CFLAGS to fix link error for SunOS. * Patch configure.ac and regenerate the related stuff. * Buildlink sysutils/file for libmagic. * Detect dirfd, setprogname and htonll in configure script. * Create PLIST for NetBSD and SunOS.
2013-09-20Fix build on SunOS with native curses.ryoon4-4/+47
* Detect isblank in configure script.
2013-09-20Not safe to build parallelizedsno1-1/+3
2013-09-20Not safe to build parallizedsno1-1/+3
2013-09-20Remove curl dependency, put file on nbftp.wiz1-2/+1
2013-09-20Updated parallel/py-billiard to 2.7.3.32rodent2-3/+3
2013-09-20Updated to latest release. From CHANGES.txt:rodent2-6/+7
2.7.3.32 - 2012-08-16 --------------------- - Fixed compatibility with Python 3.3 - Process boostrap: Now ignores errors while flushing stdout (Issue #16).
2013-09-20fixes previous PKGLOCALEDIR support commitobache3-18/+8
* fixes missing PREFIX for PKGLOCALEDIR * avoid regeneration of *.po file from source update
2013-09-20fixes for the case of PKGLOCALEDIR != share.obache4-2/+40
2013-09-20Force the __fpending to be known on Cygwin. stdlib_ext.h defines it asjoerg1-1/+3
macro or inline function, so the link test fails.
2013-09-20definition file for Cygwin.joerg1-0/+2
2013-09-20Add -D__EXTENSIONS__ on SunOS for PATH_MAX.jperkin1-1/+3
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-16 21:35:03 +0000