summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2005-02-03Remove broken and unnecessary "@exec" command for package list whichtron2-4/+3
caused erros while installing the binary package. Bump package revision because of this.
2005-02-03Create a new INSTALL script action "UNPACK" that unpacks all of thejlam1-6/+6
sub-scripts.
2005-02-03Use INFO_FILES for registering the mjpeg-howto.info documentation files.reed2-6/+4
And remove from PLIST. This fixes problem when INFO_DIR is using a custom directory such as share/info. Do not bump PKGREVISION, because couldn't package in first place when this problem occurred. This will cause a warning: install-info: warning: no info dir entry in `/usr/pkg/share/info/mjpeg-howto.info' TODO: so add a START-INFO-DIR-ENTRY/END-INFO-DIR-ENTRY pair dir entry.
2005-02-03Update print/p5-PostScript-MailLabels to version 2.10. Changes fromjlam5-10/+38
version 1.01 include: * Added parameters for 5167 Avery (tm) stock. Also added many new Avery (tm) parameters. * Added new parameter set 'freetype', to allow the user to place a text string anywhere they want. Particular use is for numbering the pages. * Code now escapes special PostScript characters (){}[]<>/% in the input so that they will print properly and not crash the PS interpreter. * Changed to honor user-defined number of columns. * Added y_gap to Avery(tm) labels * Updated calibration plot in BasicData to arbitrary paper size * Added all of the component and label definition stuff. * Added pagesize so that various paper sizes are actually handled correctly.
2005-02-03note update of devel/nss to 3.9.2nb1jschauma1-1/+2
2005-02-03We can't install these libraries into ${PREFIX}/lib, since mozillajschauma4-18/+27
browsers might then falsely load these instead of their own. So: Install the libraries into their own directory. Bump PKGREVISION.
2005-02-03note update of devel/nspr to 4.4.1nb1jschauma1-1/+2
2005-02-03Added a license file for lame based on many notes from differentreed2-3/+134
files in the lame source. And for the audio/lame/Makefile: Change the LICENSE from fee-based-commercial-use to use this new lame-license. The problem before was that fee-based-commercial-use did not exist and the "make show-license" suggested running pkg_info -d to view the long-description of the package (which may not be installed yet). Anyways, the DESCR didn't mention these license issues. Also bump PKGREVISION.
2005-02-03We can't install these libraries into ${PREFIX}/lib, since mozillajschauma3-14/+25
browsers might then falsely load these instead of their own. So: Install the libraries into their own directory. Bump PKGREVISION.
2005-02-03Enable and note addition of beacon.cube2-2/+4
2005-02-03Initial import of beacon, version 1.1.0, into the NetBSD Packagescube4-0/+42
Collection. Initial work by Emmanuel Dreyfus, clean-up and linting by me. The NLANR/DAST Multicast Beacon is a multicast diagnostic tool written in Perl which uses the RTP protocol (RFC3550) to provide useful statistics and diagnostic information about a given multicast group's connectivity characteristics.
2005-02-03zsh-4.2.4 released.xtraeme1-2/+2
2005-02-03Fix a few build warnings.tron3-1/+27
2005-02-03Note update of gdm to 2.6.0.7.jmmv1-2/+2
2005-02-03Update to 2.6.0.7.jmmv5-35/+42
- Convert to use bsd.pkg.options.mk. - Fix PAM handling; the gdmaskpass binary seems to be only available when building with linux-pam, which resulted in broken PLISTs before. Changes in this version: - Now using CVS head of vicious-extensions, left out of previous release due to schedule freeze. - Do not init the wm twice if gdm_wm_init is called twice. (George) - Always destroy dialog widget in greeter to fix non-fatal error dialogs from hanging around. (George) - Leak corrected in daemon/verify-pam.c. (George) - Corrected g_strconcat call in gui/gdmsetup.c. (meissner@suse.de) - Added Afrikaans, Northern Sotho, South African English, and Zulu to language translations. (Dwayne Baily) - Updated build files so it can be built and distributed with new buildtools than 1.4. makedist fixes, etc.
2005-02-03Update exim to 4.44 and exim-exiscan to 4.44_28.abs1-1/+4
Changes in exim version 4.44 1. Change 4.43/35 introduced a bug that caused file counts to be incorrectly computed when quota_filecount was set in an appendfile transport 2. Closing a stable door: arrange to panic-die if setitimer() ever fails. The bug fixed in 4.43/37 would have been diagnosed quickly if this had been in place. 3. Give more explanation in the error message when the command for a transport filter fails to execute. 4. There are several places where Exim runs a non-Exim command in a subprocess. The SIGUSR1 signal should be disabled for these processes. This was being done only for the command run by the queryprogram router. It is now done for all such subprocesses. The other cases are: ${run, transport filters, and the commands run by the lmtp and pipe transports. 5. Some older OS have a limit of 256 on the maximum number of file descriptors. Exim was using setrlimit() to set 1000 as a large value unlikely to be exceeded. Change 4.43/17 caused a lot of logging on these systems. I've change it so that if it can't get 1000, it tries for 256. 6. "control=submission" was allowed, but had no effect, in a DATA ACL. This was an oversight, and furthermore, ever since the addition of extra controls (e.g. 4.43/32), the checks on when to allow different forms of "control" were broken. There should now be diagnostics for all cases when a control that does not make sense is encountered. 7. $recipients is now available in the predata ACL (oversight). 8. Tidy the search cache before the fork to do a delivery from a message received from the command line. Otherwise the child will trigger a lookup failure and thereby defer the delivery if it tries to use (for example) a cached ldap connection that the parent has called unbind on. 9. If verify=recipient was followed by verify=sender in a RCPT ACL, the value of $address_data from the recipient verification was clobbered by the sender verification. 10. If FIXED_NEVER_USERS was defined, but empty, Exim was assuming the uid 0 was its contents. (It was OK if the option was not defined at all.) 11. A "Completed" log line is now written for messages that are removed from the spool by the -Mrm option. 12. $host_address is now set to the target address during the checking of ignore_target_hosts. 13. When checking ignore_target_hosts for an ipliteral router, no host name was being passed; this would have caused $sender_host_name to have been used if matching the list had actually called for a host name (not very likely, since this list is usually IP addresses). A host name is now passed as "[x.x.x.x]". 14. Changed the calls that set up the SIGCHLD handler in the daemon to use the code that specifies a non-restarting handler (typically sigaction() in modern systems) in an attempt to fix a rare and obscure crash bug. 15. Narrowed the window for a race in the daemon that could cause it to ignore SIGCHLD signals. This is not a major problem, because they are used only to wake it up if nothing else does. 16. A malformed maildirsize file could cause Exim to calculate negative values for the mailbox size or file count. Odd effects could occur as a result. The maildirsize information is now recalculated if the size or filecount end up negative. 17. Added HAVE_SYS_STATVFS_H to the os.h file for Linux, as it has had this support for a long time. Removed HAVE_SYS_VFS_H. 18. Updated exipick to current release from John Jetmore. 19. Allow an empty sender to be matched against a lookup in an address list. Previously the only cases considered were a regular expression, or an empty pattern. 20. Exim went into a mad DNS lookup loop when doing a callout where the host was specified on the transport, if the DNS lookup yielded more than one IP address. 21. The RFC2047 encoding function was originally intended for short strings such as real names; it was not keeping to the 75-character limit for encoded words that the RFC imposes. It now respects the limit, and generates multiple encoded words if necessary. To be on the safe side, I have increased the buffer size for the ${rfc2047: expansion operator from 1024 to 2048 bytes. 22. Failure to deliver a bounce message always caused it to be frozen, even if there was an errors_to setting on the router. The errors_to setting is now respected. 23. If an IPv6 address is given for -bh or -bhc, it is now converted to the canonical form (fully expanded) before being placed in $sender_host_address. 24. Updated eximstats to version 1.33 25. Include certificate and key file names in error message when GnuTLS fails to set them up, because the GnuTLS error message doesn't include the name of the failing file when there is a problem reading it. 26. Expand error message when OpenSSL has problems setting up cert/key files. As per change 25. 27. Reset the locale to "C" after calling embedded Perl, in case it was changed (this can affect the format of dates). 28. exim_tidydb, when checking for the continued existence of a message for which it has found a message-specific retry record, was not finding messages that were in split spool directories. Consequently, it was deleting retry records that should have stayed in existence. 29. eximstats updated to version 1.35 1.34 - allow eximstats to parse syslog lines as well as mainlog lines 1.35 - bugfix such that pie charts by volume are generated correctly 30. The SPA authentication driver was not abandoning authentication and moving on to the next authenticator when an expansion was forced to fail, contradicting the general specification for all authenticators. Instead it was generating a temporary error. It now behaves as specified. 31. The default ordering of permitted cipher suites for GnuTLS was pessimal (the order specifies the preference for clients). The order is now AES256, AES128, 3DES, ARCFOUR128. 31. Small patch to Sieve code - explicitly set From: when generating an autoreply. 32. Exim crashed if a remote delivery caused a very long error message to be recorded - for instance if somebody sent an entire SpamAssassin report back as a large number of 550 error lines. This bug was coincidentally fixed by increasing the size of one of Exim's internal buffers (big_buffer) that happened as part of the Exiscan merge. However, to be on the safe side, I have made the code more robust (and fixed the comments that describe what is going on). 33. Some experimental protocols are using DNS PTR records for new purposes. The keys for these records are domain names, not reversed IP addresses. The dnsdb PTR lookup now tests whether its key is an IP address. If not, it leaves it alone. Component reversal etc. now happens only for IP addresses. CAN-2005-0021 34. The host_aton() function is supposed to be passed a string that is known to be a valid IP address. However, in the case of IPv6 addresses, it was not checking this. This is a hostage to fortune. Exim now panics and dies if the condition is not met. A case was found where this could be provoked from a dnsdb PTR lookup with an IPv6 address that had more than 8 components; fortuitously, this particular loophole had already been fixed by change 4.50/55 or 4.44/33 above. If there are any other similar loopholes, the new check in host_aton() itself should stop them being exploited. The report I received stated that data on the command line could provoke the exploit when Exim was running as exim, but did not say which command line option was involved. All I could find was the use of -be with a bad dnsdb PTR lookup, and in that case it is running as the user. CAN-2005-0021 35. There was a buffer overflow vulnerability in the SPA authentication code (which came originally from the Samba project). I have added a test to the spa_base64_to_bits() function which I hope fixes it. CAN-2005-0022 36. The daemon start-up calls getloadavg() while still root for those OS that need the first call to be done as root, but it missed one case: when deliver_queue_load_max is set with deliver_drop_privilege. This is necessary for the benefit of the queue runner, because there is no re-exec when deliver_drop_privilege is set. 37. Caching of lookup data for "hosts =" ACL conditions, when a named host list was in use, was not putting the data itself into the right store pool; consequently, it could be overwritten for a subsequent message in the same SMTP connection. (Fix 4.40/11 dealt with the non-cache case, but overlooked the caching.) 38. Sometimes the final signoff response after QUIT could fail to get transmitted in the non-TLS case. Testing !tls_active instead of tls_active < 0 before doing a fflush(). This bug looks as though it goes back to the introduction of TLS in release 3.20, but "sometimes" must have been rare because the tests only now provoked it.
2005-02-03Update exim to 4.44 and exim-exiscan to 4.44_28.abs4-12/+9
Changes in Exim version 4.44 1. Change 4.43/35 introduced a bug that caused file counts to be incorrectly computed when quota_filecount was set in an appendfile transport 2. Closing a stable door: arrange to panic-die if setitimer() ever fails. The bug fixed in 4.43/37 would have been diagnosed quickly if this had been in place. 3. Give more explanation in the error message when the command for a transport filter fails to execute. 4. There are several places where Exim runs a non-Exim command in a subprocess. The SIGUSR1 signal should be disabled for these processes. This was being done only for the command run by the queryprogram router. It is now done for all such subprocesses. The other cases are: ${run, transport filters, and the commands run by the lmtp and pipe transports. 5. Some older OS have a limit of 256 on the maximum number of file descriptors. Exim was using setrlimit() to set 1000 as a large value unlikely to be exceeded. Change 4.43/17 caused a lot of logging on these systems. I've change it so that if it can't get 1000, it tries for 256. 6. "control=submission" was allowed, but had no effect, in a DATA ACL. This was an oversight, and furthermore, ever since the addition of extra controls (e.g. 4.43/32), the checks on when to allow different forms of "control" were broken. There should now be diagnostics for all cases when a control that does not make sense is encountered. 7. $recipients is now available in the predata ACL (oversight). 8. Tidy the search cache before the fork to do a delivery from a message received from the command line. Otherwise the child will trigger a lookup failure and thereby defer the delivery if it tries to use (for example) a cached ldap connection that the parent has called unbind on. 9. If verify=recipient was followed by verify=sender in a RCPT ACL, the value of $address_data from the recipient verification was clobbered by the sender verification. 10. If FIXED_NEVER_USERS was defined, but empty, Exim was assuming the uid 0 was its contents. (It was OK if the option was not defined at all.) 11. A "Completed" log line is now written for messages that are removed from the spool by the -Mrm option. 12. $host_address is now set to the target address during the checking of ignore_target_hosts. 13. When checking ignore_target_hosts for an ipliteral router, no host name was being passed; this would have caused $sender_host_name to have been used if matching the list had actually called for a host name (not very likely, since this list is usually IP addresses). A host name is now passed as "[x.x.x.x]". 14. Changed the calls that set up the SIGCHLD handler in the daemon to use the code that specifies a non-restarting handler (typically sigaction() in modern systems) in an attempt to fix a rare and obscure crash bug. 15. Narrowed the window for a race in the daemon that could cause it to ignore SIGCHLD signals. This is not a major problem, because they are used only to wake it up if nothing else does. 16. A malformed maildirsize file could cause Exim to calculate negative values for the mailbox size or file count. Odd effects could occur as a result. The maildirsize information is now recalculated if the size or filecount end up negative. 17. Added HAVE_SYS_STATVFS_H to the os.h file for Linux, as it has had this support for a long time. Removed HAVE_SYS_VFS_H. 18. Updated exipick to current release from John Jetmore. 19. Allow an empty sender to be matched against a lookup in an address list. Previously the only cases considered were a regular expression, or an empty pattern. 20. Exim went into a mad DNS lookup loop when doing a callout where the host was specified on the transport, if the DNS lookup yielded more than one IP address. 21. The RFC2047 encoding function was originally intended for short strings such as real names; it was not keeping to the 75-character limit for encoded words that the RFC imposes. It now respects the limit, and generates multiple encoded words if necessary. To be on the safe side, I have increased the buffer size for the ${rfc2047: expansion operator from 1024 to 2048 bytes. 22. Failure to deliver a bounce message always caused it to be frozen, even if there was an errors_to setting on the router. The errors_to setting is now respected. 23. If an IPv6 address is given for -bh or -bhc, it is now converted to the canonical form (fully expanded) before being placed in $sender_host_address. 24. Updated eximstats to version 1.33 25. Include certificate and key file names in error message when GnuTLS fails to set them up, because the GnuTLS error message doesn't include the name of the failing file when there is a problem reading it. 26. Expand error message when OpenSSL has problems setting up cert/key files. As per change 25. 27. Reset the locale to "C" after calling embedded Perl, in case it was changed (this can affect the format of dates). 28. exim_tidydb, when checking for the continued existence of a message for which it has found a message-specific retry record, was not finding messages that were in split spool directories. Consequently, it was deleting retry records that should have stayed in existence. 29. eximstats updated to version 1.35 1.34 - allow eximstats to parse syslog lines as well as mainlog lines 1.35 - bugfix such that pie charts by volume are generated correctly 30. The SPA authentication driver was not abandoning authentication and moving on to the next authenticator when an expansion was forced to fail, contradicting the general specification for all authenticators. Instead it was generating a temporary error. It now behaves as specified. 31. The default ordering of permitted cipher suites for GnuTLS was pessimal (the order specifies the preference for clients). The order is now AES256, AES128, 3DES, ARCFOUR128. 31. Small patch to Sieve code - explicitly set From: when generating an autoreply. 32. Exim crashed if a remote delivery caused a very long error message to be recorded - for instance if somebody sent an entire SpamAssassin report back as a large number of 550 error lines. This bug was coincidentally fixed by increasing the size of one of Exim's internal buffers (big_buffer) that happened as part of the Exiscan merge. However, to be on the safe side, I have made the code more robust (and fixed the comments that describe what is going on). 33. Some experimental protocols are using DNS PTR records for new purposes. The keys for these records are domain names, not reversed IP addresses. The dnsdb PTR lookup now tests whether its key is an IP address. If not, it leaves it alone. Component reversal etc. now happens only for IP addresses. CAN-2005-0021 34. The host_aton() function is supposed to be passed a string that is known to be a valid IP address. However, in the case of IPv6 addresses, it was not checking this. This is a hostage to fortune. Exim now panics and dies if the condition is not met. A case was found where this could be provoked from a dnsdb PTR lookup with an IPv6 address that had more than 8 components; fortuitously, this particular loophole had already been fixed by change 4.50/55 or 4.44/33 above. If there are any other similar loopholes, the new check in host_aton() itself should stop them being exploited. The report I received stated that data on the command line could provoke the exploit when Exim was running as exim, but did not say which command line option was involved. All I could find was the use of -be with a bad dnsdb PTR lookup, and in that case it is running as the user. CAN-2005-0021 35. There was a buffer overflow vulnerability in the SPA authentication code (which came originally from the Samba project). I have added a test to the spa_base64_to_bits() function which I hope fixes it. CAN-2005-0022 36. The daemon start-up calls getloadavg() while still root for those OS that need the first call to be done as root, but it missed one case: when deliver_queue_load_max is set with deliver_drop_privilege. This is necessary for the benefit of the queue runner, because there is no re-exec when deliver_drop_privilege is set. 37. Caching of lookup data for "hosts =" ACL conditions, when a named host list was in use, was not putting the data itself into the right store pool; consequently, it could be overwritten for a subsequent message in the same SMTP connection. (Fix 4.40/11 dealt with the non-cache case, but overlooked the caching.) 38. Sometimes the final signoff response after QUIT could fail to get transmitted in the non-TLS case. Testing !tls_active instead of tls_active < 0 before doing a fflush(). This bug looks as though it goes back to the introduction of TLS in release 3.20, but "sometimes" must have been rare because the tests only now provoked it.
2005-02-03add one more malloc.h->stdlib.h patch from PR29206dmcmahill2-1/+13
2005-02-03use stdlib.h instead of malloc.h. Addresses PR29206 by John Bakerdmcmahill2-7/+12
which prevented compilation on MacOS X 10.2.8.
2005-02-03Note update of ggv2 to 2.8.3. While here, fix date of last entry.jmmv1-2/+3
2005-02-03Update to 2.8.3:jmmv2-5/+5
- The program should now not insist on having a peek at each remote URI in your recently used document list. (Looks like faster startup times.) - Many warnings fixed. - Many updated translations.
2005-02-03Note update of gpdf to 2.8.3.jmmv1-1/+2
2005-02-03Update to 2.8.3:jmmv2-5/+5
Version 2.8.3 ------------- * Fix for CAN 2005-0064 (Derek Noonburg) * Fix font encoding code for Type1C fonts and freetype > 2.1.7 Version 2.8.2 ------------- * Fix potential buffer overflow in xpdf colorspace handling code. (Derek Noonburg) - CAN 2004-1125 * Fix bookmarks navigation. (Martin Sjogren, Marco Pesenti Gritti) - #159937 * Show "Exit Fullscreen" button only on current workspace. (Gordon Ingram) - #161225 * Fix crash with broken embedded fonts. (Martin) - #161066 * Fix several crashes with mouse-over-links. (Martin) - #156784 * Translation updates: Vincent van Adrighem (nl)
2005-02-03Sort.wiz1-2/+2
2005-02-02Modify openssl/Makefile so that it's easier to test the -STABLE andjlam1-6/+22
-SNAP OpenSSL snapshots.
2005-02-02Set INSTALLATION_DIRS to create some directories used by the do-installjlam1-3/+5
target that appears later in the Makefile. Also move inclusion of buildlink3.mk files above target definitions, as per style guidelines.
2005-02-02mention digicam updates/additionsdrochner1-1/+5
2005-02-02Note update of "speedtouch" package to version 1.3.1nb2.tron1-1/+2
2005-02-02Improve "rc.d" startup script:tron2-11/+13
- Fix shell quoting bugs in adsl_stop() procedure. - Fix "awk" command used to find process id of "ppp" program. - Remove SysV semaphore which might be left behind by "modem_run". Bump package revision because of these fixes.
2005-02-02new gimp pluginsdrochner1-1/+3
2005-02-02update to 2.3drochner2-6/+7
changes: added -cl (insert comment literal) option Added -norot (zero out rotation tag) option Added handling of explicit 35mm equivalent tag Added ability to do sequencial renaming and fixes
2005-02-02import ufraw-0.3, a GIMP import plugin for raw-format dicgicam imagesdrochner4-0/+35
(this competes with the gimp-rawphoto plugin, but not in a pkgsrc sense, so I'll leave it to the user to sort it out)
2005-02-02import rawphoto-1.19, a GIMP import plugin for raw-format dicgicam imagesdrochner6-0/+60
2005-02-02update to 1.233 -- some fixes, some new cameras... anyway, we have todrochner2-7/+7
stay up-to-date because the distribution files don't change names.
2005-02-02Note addition of chat/gaim-encryptionjschauma1-1/+2
2005-02-02add/enable gaim-encryptionjschauma1-1/+2
2005-02-02Initial import of chat/gaim-encryption from pkgsrc-wip, provided byjschauma4-0/+57
geeohgeegeeoh: Gaim-encryption is a module for GAIM which adds NSS/NSPR based SSL encryption. It is compatible with certain other IM crypto systems.
2005-02-02Add a buildlink that can be used by gaim plugins.jschauma1-0/+20
2005-02-02Fix a local root exploit and a buffer overflow (CAN-2005-{0155,0156}).jlam3-3/+28
Patches from Nicholas Clark in private mail. Bump the PKGREVISION to 3.
2005-02-02Add missing buildlink3 dependencies.xtraeme1-1/+3
2005-02-02Added archivers/libarchive.xtraeme2-2/+4
2005-02-02Initial import of libarchive-102.002.xtraeme4-0/+34
Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants and several cpio formats. It can also write shar archives and read ISO9660 CDROM images. See http://people.freebsd.org/~kientzle/libarchive/
2005-02-02Note updates of:jlam1-1/+8
p5-Kwiki-Archive-Rcs p5-Kwiki-BreadCrumbs p5-Kwiki-Favorites p5-Kwiki-RecentChanges p5-Kwiki-Revisions p5-Kwiki-UserName p5-Kwiki-UserPreferences
2005-02-02Update www/p5-Kwiki-UserPreferences to 0.13. Changes from versionjlam2-6/+6
0.12 include adapting to Spoon-0.21.
2005-02-02Update www/p5-Kwiki-UserName to 0.14. Changes from version 0.13jlam2-7/+7
include updating the username on the screen immediately after the user changes it.
2005-02-02Update www/p5-Kwiki-Revisions to 0.14. Changes from version 0.13 includejlam2-6/+6
adapting to Spoon-0.21.
2005-02-02Update www/p5-Kwiki-RecentChanges to 0.13. Changes from version 0.12jlam2-6/+6
include adding a 6-months option.
2005-02-02Update www/p5-Kwiki-Favorites to 0.13. Changes from version 0.12 includejlam2-6/+6
adapting to p5-Spoon-0.21.
2005-02-02Update www/p5-Kwiki-BreadCrumbs to 0.12. Changes from version 0.11 includejlam2-6/+6
adapting to Spoon-0.21.
2005-02-02Update www/p5-Kwiki-Archive-Rcs to 0.14. Changes from version 0.13jlam2-6/+6
include: - Add archive if none for new page - Move commit hook to super class - Fix unix time to work for older stuff