summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-03-05Pullup ticket #3373 - requested by tacatron4-16/+86
graphics/ruby-imlib2: build fix Revisions pulled up: - graphics/ruby-imlib2/Makefile 1.25 - graphics/ruby-imlib2/distinfo 1.7 - graphics/ruby-imlib2/files/gemspec 1.1 - graphics/ruby-imlib2/patches/patch-aa 0 --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 28 15:46:08 UTC 2011 Modified Files: pkgsrc/graphics/ruby-imlib2: Makefile distinfo Added Files: pkgsrc/graphics/ruby-imlib2/files: gemspec Removed Files: pkgsrc/graphics/ruby-imlib2/patches: patch-aa Log Message: Fix build problem with ruby18. Give up to patch gemspec but use pre-generated one.
2011-03-03Pullup ticket #3368sbd1-0/+2
2011-03-03Pullup ticket #3368 - requested by tacasbd2-6/+6
net/samba35 security fix. Revisions pulled up: - net/samba35/Makefile 1.2 - net/samba35/distinfo 1.2 --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 28 14:34:56 UTC 2011 Modified Files: pkgsrc/net/samba35: Makefile distinfo Log Message: Update samba35 pacakge to 3.5.7. Release Announcements ===================== Samba 3.5.7, 3.4.12 and 3.3.15 are security releases in order to address CVE-2011-0719. o CVE-2011-0719: All current released versions of Samba are vulnerable to a denial of service caused by memory corruption. Range checks on file descriptors being used in the FD_SET macro were not present allowing stack corruption. This can cause the Samba code to crash or to loop attempting to select on a bad file descriptor set. A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated (guest connection). Currently we do not believe this flaw is exploitable beyond a crash or causing the code to loop, but on the advice of our security reviewers we are releasing fixes in case an exploit is discovered at a later date. Changes ------- o Jeremy Allison <jra at samba.org> * BUG 7949: Fix DoS in Winbind and smbd with many file descriptors open.
2011-03-02pullups 3371 and 3372spz1-0/+4
2011-03-02Pullup ticket 3372 - requested by sbdspz1-2/+2
build fix for Linux Revisions pulled up: - pkgsrc/net/samba35/Makefile 1.3 ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: sbd Date: Tue Mar 1 11:28:59 UTC 2011 Modified Files: pkgsrc/net/samba35: Makefile Log Message: Add --with-cifsumount to CONFIGURE_ARGS on Linux systems in order to build umount.cifs To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/samba35/Makefile
2011-03-02Pullup ticket 3371 - requested by tronspz4-66/+6
security update Revisions pulled up: - pkgsrc/net/wireshark/Makefile 1.60 - pkgsrc/net/wireshark/distinfo by patch Files deleted: pkgsrc/net/wireshark/patches/patch-af pkgsrc/net/wireshark/patches/patch-ag ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: tron Date: Wed Mar 2 00:09:15 UTC 2011 Modified Files: pkgsrc/net/wireshark: Makefile distinfo Removed Files: pkgsrc/net/wireshark/patches: patch-af patch-ag Log Message: Update "wireshark" package to version 1.4.4. Changes since 1.4.3: - Bug Fixes The following vulnerabilities have been fixed. See the security advisory for details and a workaround. o Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that Wireshark could free an uninitialized pointer while reading a malformed pcap-ng file. (Bug 5652) Versions affected: 1.2.0 to 1.2.14 and 1.4.0 to 1.4.3. CVE-2011-0538 o Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that a large packet length in a pcap-ng file could crash Wireshark. (Bug 5661) Versions affected: 1.2.0 to 1.2.14 and 1.4.0 to 1.4.3. o Wireshark could overflow a buffer while reading a Nokia DCT3 trace file. (Bug 5661) Versions affected: 1.2.0 to 1.2.14 and 1.4.0 to 1.4.3. CVE-2011-0713 o Paul Makowski working for SEI/CERT discovered that Wireshark on 32 bit systems could crash while reading a malformed 6LoWPAN packet. (Bug 5661) Versions affected: 1.4.0 to 1.4.3. o joernchen of Phenoelit discovered that the LDAP and SMB dissectors could overflow the stack. (Bug 5717) Versions affected: 1.2.0 to 1.2.14 and 1.4.0 to 1.4.3. (Prior versions including 1.0.x are also affected.) o Xiaopeng Zhang of Fortinet's Fortiguard Labs discovered that large LDAP Filter strings can consume excessive amounts of memory. (Bug 5732) Versions affected: 1.2.0 to 1.2.14 and 1.4.0 to 1.4.3. (Prior versions including 1.0.x are also affected.) The following bugs have been fixed: o A TCP stream would not always be recognized as the same stream. (Bug 2907) o Wireshark Crashing by pressing 2 Buttons. (Bug 4645) o A crash can occur in the NTLMSSP dissector. (Bug 5157) o The column texts from a Lua dissector could be mangled. (Bug 5326) (Bug 5630) o Corrections to ANSI MAP ASN.1 specifications. (Bug 5584) o When searching in packet bytes, the field and bytes are not immediately shown. (Bug 5585) o Malformed Packet: ULP reported when dissecting ULP SessionID PDU. (Bug 5593) o Wrong IEI in container of decode_gtp_mm_cntxt. (Bug 5598) o Display filter does not work for expressions of type BASE_DEC, BASE_DEC_HEX and BASE_HEX_DEC. (Bug 5606) o NTLMSSP dissector may fail to compile due to space embedded in C comment delimiters. (Bug 5614) o Allow for name resolution of link-scope and multicast IPv6 addresses from local host file. (Bug 5615) o DHCPv6 dissector formats DUID_LLT time incorrectly. (Bug 5627) o Allow for IEEE 802.3bc-2009 style PoE TLVs. (Bug 5639) o Various fixes to the HIP packet dissector. (Bug 5646) o Display "Day of Year" for January 1 as 1, not 0. (Bug 5653) o Accommodate the CMake build on Ubuntu 10.10. (Bug 5665) o E.212 MCC 260 Poland update according to local national regulatory. (Bug 5668) o IPP on ports other than 631 not recognized. (Bug 5677) o Potential access violation when writing to LANalyzer files. (Bug 5698) o IEEE 802.15.4 Superframe Specification - Final CAP Slot always 0. (Bug 5700) o Peer SRC and DST AS numbers are swapped for cflow. (Bug 5702) o dumpcap: -q option behavior doesn't match documentation. (Bug 5716) - Updated Protocol Support ANSI MAP, BitTorrent, DCM, DHCPv6, DTAP, DTPT, E.212, GSM Management, GTP, HIP, IEEE 802.15.4, IPP, LDAP, LLDP, Netflow, NTLMSSP, P_Mul, Quake, Skinny, SMB, SNMP, ULP - New and Updated Capture File Support LANalyzer, Nokia DCT3, Pcap-ng To generate a diff of this commit: cvs rdiff -u -r1.59 -r1.60 pkgsrc/net/wireshark/Makefile cvs rdiff -u -r1.41 -r1.42 pkgsrc/net/wireshark/distinfo cvs rdiff -u -r1.1 -r0 pkgsrc/net/wireshark/patches/patch-af \ pkgsrc/net/wireshark/patches/patch-ag
2011-03-01Pullup tickets 3365 3366 3367 3369 3370sbd1-0/+10
2011-03-01Pullup ticket #3370 - requested by tacasbd3-16/+18
lang/pear security fix. Revisions pulled up: - lang/pear/Makefile 1.15 - lang/pear/distinfo 1.7 - lang/pear/patches/patch-aa 1.6 --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Tue Mar 1 03:15:17 UTC 2011 Modified Files: pkgsrc/lang/pear: Makefile distinfo pkgsrc/lang/pear/patches: patch-aa Log Message: Update pear package to 1.9.2, including update of these PEAR packages Console_GetOpt and Structures_Graph. PEAR 1.9.2: Release date: 2011-02-28 18:58 UTC Changelog: Important! This is a security fix release. The advisory can be found at http://pear.php.net/advisory-20110228.txt Bugs: * Fixed Bug #17463: Regression: On Windows, svntag [patch by doconnor] * Fixed Bug #17641: pecl-list doesn't sort packages by name [dufuz] * Fixed Bug #17781: invalid argument warning on foreach due to an empty optional dependencie [dufuz] * Fixed Bug #17801: PEAR run-tests wrongly detects php-cgi [patch by David Jean Louis (izi)] * Fixed Bug #17839: pear svntag does not tag package.xml file [dufuz] * Fixed Bug #17986: PEAR Installer cannot handle files moved between packages [dufuz] * Fixed Bug #17997: Strange output if directories are not writeable [dufuz] * Fixed Bug #18001: PEAR/RunTest coverage fails [dufuz] * Fixed Bug #18056 [SECURITY]: Symlink attack in PEAR install [dufuz] * Fixed Bug #18218: "pear package" does not allow the use of late static binding [dufuz and Christer Edvartsen] * Fixed Bug #18238: Wrong return code from "pear help" [till] * Fixed Bug #18308: Broken error message about missing channel validator [yunosh] This feature is implemented as a result of #18056 * Implemented Request #16648: Use TMPDIR for builds instead of /var/tmp [dufuz] Console_GetOpt 1.3.0 Release date: 2010-12-11 21:23 UTC Changelog: * Implement Request #13140: [PATCH] to skip unknown parameters. [patch by rquadling, improved on by dufuz] Structures_Graph 1.0.4 Release date: 2010-10-26 04:10 UTC Changelog: Bugfix Release: * Bug #17108 BasicGraph::test_directed_degree fails on PHP 5 [clockwerx]
2011-03-01Pullup ticket #3369 - requested by tronsbd3-3/+100
Security patch for "python26" package Revisions pulled up: - lang/python26/Makefile 1.34 - lang/python26/distinfo 1.32 - lang/python26/patches/patch-SA43463 1.1 --- Module Name: pkgsrc Module Name: pkgsrc Committed By: tron Date: Mon Feb 28 22:35:53 UTC 2011 Modified Files: pkgsrc/lang/python26: Makefile distinfo Added Files: pkgsrc/lang/python26/patches: patch-SA43463 Log Message: Add fix for the information disclosure vulnerability reported in SA43463 taken from the Python SVN repository.
2011-03-01Pullup ticket #3367 - requested by tacasbd2-7/+6
net/samba33 security fix. Revisions pulled up: - net/samba33/Makefile 1.13 - net/samba33/distinfo 1.6 --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Mon Feb 28 14:34:09 UTC 2011 Modified Files: pkgsrc/net/samba33: Makefile distinfo Log Message: Update samba33 pacakge to 3.3.15. Release Announcements ===================== Samba 3.5.7, 3.4.12 and 3.3.15 are security releases in order to address CVE-2011-0719. o CVE-2011-0719: All current released versions of Samba are vulnerable to a denial of service caused by memory corruption. Range checks on file descriptors being used in the FD_SET macro were not present allowing stack corruption. This can cause the Samba code to crash or to loop attempting to select on a bad file descriptor set. A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated (guest connection). Currently we do not believe this flaw is exploitable beyond a crash or causing the code to loop, but on the advice of our security reviewers we are releasing fixes in case an exploit is discovered at a later date. Changes ------- o Jeremy Allison <jra at samba.org> * BUG 7949: Fix DoS in Winbind and smbd with many file descriptors open.
2011-03-01Pullup ticket #3366 - requested by tacasbd9-37/+39
databases/mysql5-{client,server} security fixes. Revisions pulled up: - databases/mysql5-client/Makefile.common 1.41 - databases/mysql5-client/distinfo 1.30 - databases/mysql5-client/patches/patch-ad 1.8 - databases/mysql5-client/patches/patch-af 1.9 - databases/mysql5-server/PLIST 1.17 - databases/mysql5-server/distinfo 1.26 - databases/mysql5-server/patches/patch-aa 1.7 - databases/mysql5-server/patches/patch-ag 1.9 - databases/mysql5-server/patches/patch-ah 1.8 --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Sat Feb 26 02:58:56 UTC 2011 Modified Files: pkgsrc/databases/mysql5-client: Makefile.common distinfo pkgsrc/databases/mysql5-client/patches: patch-ad patch-af pkgsrc/databases/mysql5-server: PLIST distinfo pkgsrc/databases/mysql5-server/patches: patch-aa patch-ag patch-ah Log Message: Update mysql5-{client,server} pacakge to 5.0.92. Functionality added or changed: * The time zone tables available at http://dev.mysql.com/downloads/timezones.html have been updated. These tables can be used on systems such as Windows or HP-UX that do not include zoneinfo files. (Bug#40230) Bugs fixed: * Security Fix: During evaluation of arguments to extreme-value functions (such as LEAST() and GREATEST()), type errors did not propagate properly, causing the server to crash. (Bug#55826, CVE-2010-3833) * Security Fix: The server could crash after materializing a derived table that required a temporary table for grouping. (Bug#55568, CVE-2010-3834) * Security Fix: A user-variable assignment expression that is evaluated in a logical expression context can be precalculated in a temporary table for GROUP BY. However, when the expression value is used after creation of the temporary table, it was re-evaluated, not read from the table and a server crash resulted. (Bug#55564, CVE-2010-3835) * Security Fix: Joins involving a table with a unique SET column could cause a server crash. (Bug#54575, CVE-2010-3677) * Security Fix: Pre-evaluation of LIKE predicates during view preparation could cause a server crash. (Bug#54568, CVE-2010-3836) * Security Fix: GROUP_CONCAT() and WITH ROLLUP together could cause a server crash. (Bug#54476, CVE-2010-3837) * Security Fix: Queries could cause a server crash if the GREATEST() or LEAST() function had a mixed list of numeric and LONGBLOB arguments, and the result of such a function was processed using an intermediate temporary table. (Bug#54461, CVE-2010-3838) * Security Fix: Using EXPLAIN with queries of the form SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...) could cause a server crash. (Bug#52711, CVE-2010-3682) * InnoDB Storage Engine: Creating or dropping a table with 1023 transactions active caused an assertion failure. (Bug#49238) * The make_binary_distribution target to make could fail on some platforms because the lines generated were too long for the shell. (Bug#54590) * A client could supply data in chunks to a prepared statement parameter other than of type TEXT or BLOB using the mysql_stmt_send_long_data() C API function (or COM_STMT_SEND_LONG_DATA command). This led to a crash because other data types are not valid for long data. (Bug#54041) * Builds of the embedded mysqld would fail due to a missing element of the struct NET. (Bug#53908, Bug#53912) * The definition of the MY_INIT macro in my_sys.h included an extraneous semicolon, which could cause compilation failure. (Bug#53906) * If the remote server for a FEDERATED table could not be accessed, queries for the INFORMATION_SCHEMA.TABLES table failed. (Bug#35333) * mysqld could fail during execution when using SSL. (Bug#34236) * Threads that were calculating the estimated number of records for a range scan did not respond to the KILL statement. That is, if a range join type is possible (even if not selected by the optimizer as a join type of choice and thus not shown by EXPLAIN), the query in the statistics state (shown by the SHOW PROCESSLIST) did not respond to the KILL statement. (Bug#25421)
2011-03-01Pullup ticket #3365 - requested by tacasbd2-2/+4
textproc/php-intl security fix Revisions pulled up: - textproc/php-intl/Makefile 1.5 - textproc/php-intl/distinfo 1.3 - textproc/php-intl/patches/patch-grapheme_grapheme__string.c 1.1 --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Sat Feb 26 02:55:28 UTC 2011 Modified Files: pkgsrc/textproc/php-intl: Makefile distinfo Added Files: pkgsrc/textproc/php-intl/patches: patch-grapheme_grapheme__string.c Log Message: Add a fix for CVE-2011-0420 (CERT: VU#210829) from PHP's repository, r306449. Bump PKGREVISION.
2011-02-27Pullup ticket #3361.tron1-0/+96
2011-02-27Pullup ticket #3361 - requested by tacatron100-147/+239
archivers/ruby-libarchive: dependence update comms/ruby-termios: dependence update converters/ruby-uconv: dependence update databases/ruby-do_sqlite3: dependence update databases/ruby-ldap: dependence update databases/ruby-mysql: dependence update databases/ruby-odbc: dependence update databases/ruby-pg: dependence update databases/ruby-postgresql: dependence update databases/ruby-qdbm: dependence update databases/ruby-sqlite: dependence update databases/ruby-sqlite3: dependence update databases/ruby-tokyocabinet: dependence update devel/ruby-SDL: dependence update devel/ruby-debug-base: dependence update devel/ruby-eet: dependence update devel/ruby-eventmachine: dependence update devel/ruby-ffi: dependence update devel/ruby-gnome2-atk: dependence update devel/ruby-gnome2-bonobo: dependence update devel/ruby-gnome2-bonoboui: dependence update devel/ruby-gnome2-gconf: dependence update devel/ruby-gnome2-gio: dependence update devel/ruby-gnome2-glib: dependence update devel/ruby-gnome2-libglade: dependence update devel/ruby-gnome2-pango: dependence update devel/ruby-linecache: dependence update devel/ruby-memcache: dependence update devel/ruby-ncurses: dependence update devel/ruby-priority-queue: dependence update devel/ruby-racc: dependence update devel/ruby-rbtree: dependence update devel/ruby-rcov: dependence update devel/ruby-rcsparse: dependence update devel/ruby-subversion: dependence update devel/ruby-thrift: dependence update graphics/ruby-RMagick: dependence update graphics/ruby-clutter-cairo: dependence update graphics/ruby-clutter-core: dependence update graphics/ruby-clutter-gtk: dependence update graphics/ruby-gd: dependence update graphics/ruby-gnome2-gdkpixbuf: dependence update graphics/ruby-gnome2-gnomecanvas: dependence update graphics/ruby-gnome2-goocanvas: dependence update graphics/ruby-gnome2-gtkglext: dependence update graphics/ruby-gnome2-libart: dependence update graphics/ruby-gnome2-rsvg: dependence update graphics/ruby-imlib2: dependence update graphics/ruby-opengl: dependence update graphics/ruby-rcairo: dependence update inputmethod/ruby-zinnia: dependence update lang/ruby: dependence update lang/ruby18-base: security update lang/ruby19-base: security update mail/ruby-tmail: dependence update math/ruby-rb-gsl: dependence update multimedia/ruby-clutter-gst: dependence update multimedia/ruby-gnome2-gstreamer: dependence update multimedia/ruby-ming: dependence update print/ruby-gnome2-gnomeprint: dependence update print/ruby-gnome2-gnomeprintui: dependence update print/ruby-gnome2-poppler: dependence update security/ruby-password: dependence update security/ruby-tcpwrap: dependence update sysutils/ruby-quota: dependence update textproc/ruby-bluecloth: dependence update textproc/ruby-cabocha: dependence update textproc/ruby-eruby: dependence update textproc/ruby-ferret: dependence update textproc/ruby-hpricot: dependence update textproc/ruby-itex2MML: dependence update textproc/ruby-json: dependence update textproc/ruby-libxml: dependence update textproc/ruby-mecab: dependence update textproc/ruby-native-hyperestraier: dependence update textproc/ruby-nokogiri: dependence update textproc/ruby-oniguruma: dependence update textproc/ruby-redcloth: dependence update textproc/ruby-sary: dependence update textproc/ruby-xmlparser: dependence update textproc/ruby-xslt: dependence update textproc/ruby-yamcha: dependence update www/mongrel: dependence update www/ruby-clearsilver: dependence update www/ruby-fcgi: dependence update www/ruby-gnome2-gtkhtml2: dependence update www/ruby-gnome2-gtkmozembed: dependence update www/ruby-patron: dependence update www/thin: dependence update x11/ruby-gnome2-gnome: dependence update x11/ruby-gnome2-gtk: dependence update x11/ruby-gnome2-gtksourceview: dependence update x11/ruby-gnome2-gtksourceview2: dependence update x11/ruby-gnome2-panelapplet: dependence update x11/ruby-gnome2-vte: dependence update Revisions pulled up: - archivers/ruby-libarchive/Makefile 1.2 - comms/ruby-termios/Makefile 1.23 - converters/ruby-uconv/Makefile 1.19 - databases/ruby-do_sqlite3/Makefile 1.2 - databases/ruby-ldap/Makefile 1.7 - databases/ruby-mysql/Makefile 1.34 via patch - databases/ruby-odbc/Makefile 1.10 via patch - databases/ruby-pg/Makefile 1.6 - databases/ruby-postgresql/Makefile 1.37 - databases/ruby-qdbm/Makefile 1.12 - databases/ruby-sqlite/Makefile 1.3 - databases/ruby-sqlite3/Makefile 1.15 - databases/ruby-tokyocabinet/Makefile 1.24 - devel/ruby-SDL/Makefile 1.9 via patch - devel/ruby-debug-base/Makefile 1.7 - devel/ruby-eet/Makefile 1.8 - devel/ruby-eventmachine/Makefile 1.7 - devel/ruby-ffi/Makefile 1.3 - devel/ruby-gnome2-atk/Makefile 1.8 - devel/ruby-gnome2-bonobo/Makefile patch - devel/ruby-gnome2-bonoboui/Makefile patch - devel/ruby-gnome2-gconf/Makefile patch - devel/ruby-gnome2-gio/Makefile 1.3 via patch - devel/ruby-gnome2-glib/Makefile 1.11 - devel/ruby-gnome2-libglade/Makefile patch - devel/ruby-gnome2-pango/Makefile 1.18 via patch - devel/ruby-linecache/Makefile 1.5 - devel/ruby-memcache/Makefile 1.4 - devel/ruby-ncurses/Makefile 1.9 - devel/ruby-priority-queue/Makefile 1.6 - devel/ruby-racc/Makefile 1.18 - devel/ruby-rbtree/Makefile 1.6 - devel/ruby-rcov/Makefile 1.5 - devel/ruby-rcsparse/Makefile 1.10 - devel/ruby-subversion/Makefile 1.28 - devel/ruby-thrift/Makefile 1.4 via patch - graphics/ruby-RMagick/Makefile 1.76 via patch - graphics/ruby-clutter-cairo/Makefile 1.8 via patch - graphics/ruby-clutter-core/Makefile 1.11 via patch - graphics/ruby-clutter-gtk/Makefile 1.8 via patch - graphics/ruby-gd/Makefile 1.34 via patch - graphics/ruby-gnome2-gdkpixbuf/Makefile 1.20 via patch - graphics/ruby-gnome2-gnomecanvas/Makefile patch - graphics/ruby-gnome2-goocanvas/Makefile 1.12 via patch - graphics/ruby-gnome2-gtkglext/Makefile patch - graphics/ruby-gnome2-libart/Makefile patch - graphics/ruby-gnome2-rsvg/Makefile 1.21 va patch - graphics/ruby-imlib2/Makefile 1.24 va patch - graphics/ruby-opengl/Makefile 1.31 - graphics/ruby-rcairo/Makefile 1.22 via patch - inputmethod/ruby-zinnia/Makefile 1.3 - lang/ruby/buildlink3.mk 1.13 - lang/ruby/rubyversion.mk 1.58-1.59 - lang/ruby18-base/distinfo 1.47 - lang/ruby19-base/DEINSTALL 1.2 - lang/ruby19-base/Makefile 1.7 - lang/ruby19-base/PLIST 1.4 - lang/ruby19-base/distinfo 1.4 - lang/ruby19-base/patches/patch-string.c 1.1 - mail/ruby-tmail/Makefile 1.19 - math/ruby-rb-gsl/Makefile 1.9 - multimedia/ruby-clutter-gst/Makefile 1.9 via patch - multimedia/ruby-gnome2-gstreamer/Makefile 1.7 - multimedia/ruby-ming/Makefile 1.15 via patch - print/ruby-gnome2-gnomeprint/Makefile patch - print/ruby-gnome2-gnomeprintui/Makefile patch - print/ruby-gnome2-poppler/Makefile 1.19 via patch - security/ruby-password/Makefile 1.5 - security/ruby-tcpwrap/Makefile 1.18 - sysutils/ruby-quota/Makefile 1.21 - textproc/ruby-bluecloth/Makefile 1.5 - textproc/ruby-cabocha/Makefile 1.3 - textproc/ruby-eruby/Makefile 1.26 - textproc/ruby-ferret/Makefile 1.6 - textproc/ruby-hpricot/Makefile 1.8 - textproc/ruby-itex2MML/Makefile 1.7 - textproc/ruby-json/Makefile 1.9 - textproc/ruby-libxml/Makefile 1.7 - textproc/ruby-mecab/Makefile 1.6 - textproc/ruby-native-hyperestraier/Makefile 1.6 - textproc/ruby-nokogiri/Makefile 1.4 - textproc/ruby-oniguruma/Makefile 1.6 - textproc/ruby-redcloth/Makefile 1.14 - textproc/ruby-sary/Makefile 1.7 - textproc/ruby-xmlparser/Makefile 1.15 - textproc/ruby-xslt/Makefile 1.7 - textproc/ruby-yamcha/Makefile 1.3 - www/mongrel/Makefile 1.13 via patch - www/ruby-clearsilver/Makefile 1.15 - www/ruby-fcgi/Makefile 1.15 - www/ruby-gnome2-gtkhtml2/Makefile patch - www/ruby-gnome2-gtkmozembed/Makefile 1.17 via patch - www/ruby-patron/Makefile 1.5 - www/thin/Makefile 1.8 via patch - x11/ruby-gnome2-gtk/Makefile 1.25 via patch - x11/ruby-gnome2-gtksourceview/Makefile patch via 1.12 - x11/ruby-gnome2-gtksourceview2/Makefile patch - x11/ruby-gnome2-panelapplet/Makefile patch - x11/ruby-gnome2-vte/Makefile 1.16 via patch --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 14:31:06 UTC 2011 Modified Files: pkgsrc/lang/ruby: rubyversion.mk Log Message: * Start upate of ruby18 and ruby19 packags. * Remove redundant GEM_HOME definition from PLIST. --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 14:35:38 UTC 2011 Modified Files: pkgsrc/lang/ruby18-base: distinfo Log Message: Update ruby18-base package to 1.8.7.334 (Ruby 1.8.7p334). * The FileUtils Vulnerability http://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks/ * The $SAFE Vulnerability Fri Feb 18 21:18:55 2011 Shugo Maeda <shugo@ruby-lang.org> * test/ruby/test_exception.rb (TestException::test_to_s_taintness_propagation): Test for below. Fri Feb 18 21:18:55 2011 URABE Shyouhei <shyouhei@ruby-lang.org> * error.c (exc_to_s): untainted strings can be tainted via Exception#to_s, which enables attackers to overwrite sane strings. Reported by: Yusuke Endoh <mame at tsg.ne.jp>. * error.c (name_err_to_s): ditto. Fri Feb 18 21:17:22 2011 Shugo Maeda <shugo@ruby-lang.org> * lib/fileutils.rb (FileUtils::remove_entry_secure): there is a race condition in the case where the given path is a directory, and some other user can move that directory, and create a symlink while this method is executing. Reported by: Nicholas Jefferson <nicholas at pythonic.com.au> Fri Feb 18 19:46:46 2011 NAKAMURA Usaku <usa@ruby-lang.org> * win32/win32.c (init_stdhandle): backport mistake of r29382. some code are needless in ruby 1.8. [ruby-core:34579] Fri Feb 18 19:22:17 2011 URABE Shyouhei <shyouhei@ruby-lang.org> * configure.in: revert revision r29854. This revision introduced binary incompatibilities on some circumstances. The bug that revision was fixing gets reopened by this reversion. [ruby-dev:43152] cf. [Bug #2553] --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 14:44:11 UTC 2011 Modified Files: pkgsrc/lang/ruby19-base: DEINSTALL Makefile PLIST distinfo Added Files: pkgsrc/lang/ruby19-base/patches: patch-string.c Log Message: Update ruby19-base package to 1.9.2pl180 (Ruby 1.9.2 p180). * The FileUtils Vulnerability http://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks/ * Add a patch r30779 from repository; a bug of utf-8 string handling. For more detail changes of Ruby 1.9.2pl180, please refer: http://svn.ruby-lang.org/repos/ruby/tags/v1_9_2_180/ChangeLog --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 15:00:34 UTC 2011 Modified Files: pkgsrc/lang/ruby: buildlink3.mk rubyversion.mk Log Message: Introduce RUBY_ABI_VERSION and use it BUILDLINK_ABI_DEPENDS. There are ABI incompatibility amaong Ruby 1.8.7 patchlevel 302, 330 and 334, So it would be handle if such problem in future. --- Module Name: pkgsrc Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 16:01:24 UTC 2011 Modified Files: pkgsrc/archivers/ruby-libarchive: Makefile pkgsrc/comms/ruby-termios: Makefile pkgsrc/converters/ruby-uconv: Makefile pkgsrc/databases/ruby-do_sqlite3: Makefile pkgsrc/databases/ruby-ldap: Makefile pkgsrc/databases/ruby-mysql: Makefile pkgsrc/databases/ruby-odbc: Makefile pkgsrc/databases/ruby-pg: Makefile pkgsrc/databases/ruby-postgresql: Makefile pkgsrc/databases/ruby-qdbm: Makefile pkgsrc/databases/ruby-sqlite: Makefile pkgsrc/databases/ruby-sqlite3: Makefile pkgsrc/databases/ruby-tokyocabinet: Makefile pkgsrc/devel/ruby-SDL: Makefile pkgsrc/devel/ruby-debug-base: Makefile pkgsrc/devel/ruby-eet: Makefile pkgsrc/devel/ruby-eventmachine: Makefile pkgsrc/devel/ruby-ffi: Makefile pkgsrc/devel/ruby-gnome2-atk: Makefile pkgsrc/devel/ruby-gnome2-gio: Makefile pkgsrc/devel/ruby-gnome2-glib: Makefile pkgsrc/devel/ruby-gnome2-pango: Makefile pkgsrc/devel/ruby-linecache: Makefile pkgsrc/devel/ruby-memcache: Makefile pkgsrc/devel/ruby-ncurses: Makefile pkgsrc/devel/ruby-priority-queue: Makefile pkgsrc/devel/ruby-racc: Makefile pkgsrc/devel/ruby-rbtree: Makefile pkgsrc/devel/ruby-rcov: Makefile pkgsrc/devel/ruby-rcsparse: Makefile pkgsrc/devel/ruby-subversion: Makefile pkgsrc/devel/ruby-thrift: Makefile pkgsrc/graphics/ruby-RMagick: Makefile pkgsrc/graphics/ruby-clutter-cairo: Makefile pkgsrc/graphics/ruby-clutter-core: Makefile pkgsrc/graphics/ruby-clutter-gtk: Makefile pkgsrc/graphics/ruby-gd: Makefile pkgsrc/graphics/ruby-gnome2-gdkpixbuf: Makefile pkgsrc/graphics/ruby-gnome2-goocanvas: Makefile pkgsrc/graphics/ruby-gnome2-rsvg: Makefile pkgsrc/graphics/ruby-imlib2: Makefile pkgsrc/graphics/ruby-opengl: Makefile pkgsrc/graphics/ruby-rcairo: Makefile pkgsrc/inputmethod/ruby-zinnia: Makefile pkgsrc/mail/ruby-tmail: Makefile pkgsrc/math/ruby-rb-gsl: Makefile pkgsrc/multimedia/ruby-clutter-gst: Makefile pkgsrc/multimedia/ruby-gnome2-gstreamer: Makefile pkgsrc/multimedia/ruby-ming: Makefile pkgsrc/print/ruby-gnome2-poppler: Makefile pkgsrc/security/ruby-password: Makefile pkgsrc/security/ruby-tcpwrap: Makefile pkgsrc/sysutils/ruby-quota: Makefile pkgsrc/textproc/ruby-bluecloth: Makefile pkgsrc/textproc/ruby-cabocha: Makefile pkgsrc/textproc/ruby-eruby: Makefile pkgsrc/textproc/ruby-ferret: Makefile pkgsrc/textproc/ruby-hpricot: Makefile pkgsrc/textproc/ruby-itex2MML: Makefile pkgsrc/textproc/ruby-json: Makefile pkgsrc/textproc/ruby-libxml: Makefile pkgsrc/textproc/ruby-mecab: Makefile pkgsrc/textproc/ruby-native-hyperestraier: Makefile pkgsrc/textproc/ruby-nokogiri: Makefile pkgsrc/textproc/ruby-oniguruma: Makefile pkgsrc/textproc/ruby-redcloth: Makefile pkgsrc/textproc/ruby-sary: Makefile pkgsrc/textproc/ruby-xmlparser: Makefile pkgsrc/textproc/ruby-xslt: Makefile pkgsrc/textproc/ruby-yamcha: Makefile pkgsrc/www/mongrel: Makefile pkgsrc/www/ruby-clearsilver: Makefile pkgsrc/www/ruby-fcgi: Makefile pkgsrc/www/ruby-gnome2-gtkmozembed: Makefile pkgsrc/www/ruby-patron: Makefile pkgsrc/www/thin: Makefile pkgsrc/x11/ruby-gnome2-gtk: Makefile pkgsrc/x11/ruby-gnome2-gtksourceview2: Makefile pkgsrc/x11/ruby-gnome2-vte: Makefile Log Message: Bump PKGREVISION due to ABI change of ruby18-base.
2011-02-26Add a fix for CVE-2011-0420 (CERT: VU#210829) from PHP's repository, r306449.taca1-0/+26
Bump PKGREVISION.
2011-02-25Ticket #3358.tron1-0/+3
2011-02-25Pullup ticket #3358 - requested by tacatron4-2/+30
devel/ruby-activemodel: security patch www/ruby-actionpack3: security patch Revisions pulled up - devel/ruby-activemodel/Makefile 1.4 - devel/ruby-activemodel/patches/patch-.._activemodel-3.0.4.gemspec 1.1 - www/ruby-actionpack3/Makefile 1.4 - www/ruby-actionpack3/patches/patch-.._actionpack-3.0.4.gemspec 1.1 --- Module Name: pkgsrc Committed By: taca Date: Sun Feb 20 02:12:08 UTC 2011 Modified Files: pkgsrc/devel/ruby-activemodel: Makefile Added Files: pkgsrc/devel/ruby-activemodel/patches: patch-.._activemodel-3.0.4.gemspec Log Message: Add missing patch file, something was wrong since patches/CVS directory existed but patches directory wasn't cvs added... Bump PKGREVISION. --- Module Name: pkgsrc Committed By: taca Date: Sun Feb 20 15:44:17 UTC 2011 Modified Files: pkgsrc/www/ruby-actionpack3: Makefile Added Files: pkgsrc/www/ruby-actionpack3/patches: patch-.._actionpack-3.0.4.gemspec Log Message: Add another missing patch, noted by HIRAMATSU Yoshifumi on tech-pkg-ja@. Bump PKGREVISION.
2011-02-25Pullup ticket #3364.tron1-0/+2
2011-02-25Pullup ticket #3364 - requested by tacatron4-75/+3
misc/rubygems: build fix Revisions pulled up: - misc/rubygems/Makefile 1.36 - misc/rubygems/distinfo 1.27 - misc/rubygems/patches/patch-aq delete - misc/rubygems/patches/patch-ar delete --- Module Name: pkgsrc Committed By: taca Date: Wed Feb 23 10:32:24 UTC 2011 Modified Files: pkgsrc/misc/rubygems: Makefile distinfo Removed Files: pkgsrc/misc/rubygems/patches: patch-aq patch-ar Log Message: Remove patches to make a gemspec file's format compatible as before. Now latest ruby19-base package comes with gem supporting newer format, so no need to keep older. Shouold be fix build problem of newer rails3 related packages with ruby18-base. Bump PKGREVISION.
2011-02-23Pullup ticket #3363.tron1-0/+2
2011-02-23Pullup ticket #3363 - requested by tacatron6-98/+21
net/bind97: security update Revisions pulled up: - net/bind97/Makefile 1.6 - net/bind97/PLIST 1.4 - net/bind97/distinfo 1.6 - net/bind97/files/named9.sh 1.2 - net/bind97/patches/patch-ac 1.3 - net/bind97/patches/patch-ae 1.2 --- Module Name: pkgsrc Committed By: taca Date: Wed Feb 16 17:43:22 UTC 2011 Modified Files: pkgsrc/net/bind97: Makefile PLIST distinfo pkgsrc/net/bind97/files: named9.sh pkgsrc/net/bind97/patches: patch-ac patch-ae Log Message: Update bind97 package to 9.7.3. * also sync rc scrpt with base system. Bug Fixes 9.7.3 * BIND now builds with threads disabled in versions of NetBSD earlier than 5.0 and with pthreads enabled by default in NetBSD versions 5.0 and higher. Also removes support for unproven-pthreads, mit-pthreads and ptl2. [RT #19203] * Added a regression test for fix 2896/RT #21045 ("rndc sign" failed to properly update the zone when adding a DNSKEY for publication only). [RT #21324] * "nsupdate -l" now gives error message if "session.key" file is not found. [RT #21670] * HPUX now correctly defaults to using /dev/poll, which should increase performance. [RT #21919] * If named is running as a threaded application, after an "rndc stop" command has been issued, other inbound TCP requests can cause named to hang and never complete shutdown. [RT #22108] * After an "rndc reconfig", the refresh timer for managed-keys is ignored, resulting in managed-keys not being refreshed until named is restarted. [RT #22296] * An NSEC3PARAM record placed inside a zone which is not properly signed with NSEC3 could cause named to crash, if changed via dynamic update. [RT #22363] * "rndc -h" now includes "loadkeys" option. [RT #22493] * When performing a GSS-TSIG signed dynamic zone update, memory could be leaked. This causes an unclean shutdown and may affect long-running servers. [RT #22573] * A bug in NetBSD and FreeBSD kernels with SO_ACCEPTFILTER enabled allows for a TCP DoS attack. Until there is a kernel fix, ISC is disabling SO_ACCEPTFILTER support in BIND. [RT #22589] * When signing records, named didn't filter out any TTL changes to DNSKEY records. This resulted in an incomplete key set. TTL changes are now dealt with before signing. [RT #22590] * Corrected a defect where a combination of dynamic updates and zone transfers incorrectly locked the in-memory zone database, causing named to freeze. [RT #22614] * Don't run MX checks (check-mx) when the MX record points to ".". [RT #22645] * DST key reference counts can now be incremented via dst_key_attach. [RT #22672] * The IN6_IS_ADDR_LINKLOCAL and IN6_IS_ADDR_SITELOCAL macros in win32 were updated/corrected per current Windows OS. [RT #22724] * "dnssec-settime -S" no longer tests prepublication interval validity when the interval is set to 0. [RT #22761] * isc_mutex_init_errcheck() in phtreads/mutex.c failed to destroy attr. [RT #22766] * The Kerberos realm was being truncated when being pulled from the the host prinicipal, make krb5-self updates fail. [RT #22770] * named failed to preserve the case of domain names in RDATA which is not compressible when writing master files. [RT #22863] * The man page for dnssec-keyfromlabel incorrectly had "-U" rather than the correct option "-I". [RT #22887] * The "rndc" command usage statement was missing the "-b" option. [RT #22937] * There was a bug in how the clients-per-query code worked with some query patterns. This could result, in rare circumstances, in having all the client query slots filled with queries for the same DNS label, essentially ignoring the max-clients-per-query setting. [RT #22972] * The secure zone update feature in named is based on the zone being signed and configured for dynamic updates. A bug in the ACL processing for "allow-update { none; };" resulted in a zone that is supposed to be static being treated as a dynamic zone. Thus, name would try to sign/re-sign that zone erroneously. [RT #23120]
2011-02-23Pullup ticket #3362.tron1-0/+5
2011-02-23Pullup ticket #3362 - requested by tacatron14-10/+550
archivers/php-zip: security patch graphics/php-exif: security patch lang/php5: security patch lang/php53: security patch Revisions pulled up: - archivers/php-zip/Makefile 1.12-1.13 - graphics/php-exif/Makefile 1.9-1.10 - lang/php5/Makefile 1.82-1.83 - lang/php5/Makefile.php 1.43-1.44 - lang/php5/distinfo 1.86-1.87 - lang/php5/patches/patch-ext_exif_exif.c 1.1 - lang/php5/patches/patch-ext_zip_lib_zip__name__locate.c 1.1 - lang/php5/patches/patch-ext_zip_php__zip.c 1.1 - lang/php53/Makefile 1.7 - lang/php53/Makefile.php 1.5 - lang/php53/distinfo 1.12 - lang/php53/patches/patch-ext_exif_exif.c 1.1 - lang/php53/patches/patch-ext_zip_lib_zip__name__locate.c 1.1 - lang/php53/patches/patch-ext_zip_php__zip.c 1.1 --- Module Name: pkgsrc Committed By: shattered Date: Tue Feb 15 20:52:24 UTC 2011 Modified Files: pkgsrc/lang/php5: Makefile Makefile.php Log Message: Re-enable DL_AUTO_VARS -- makes PHP CLI work again with extensions that are linked to pthread (like mysql.so). --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 16:21:17 UTC 2011 Modified Files: pkgsrc/lang/php5: Makefile.php distinfo Log Message: Re-enable suhosin patch as php53. --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 16:23:58 UTC 2011 Modified Files: pkgsrc/lang/php53: Makefile.php Log Message: Re-enable DL_AUTO_VARS as php5 package. --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 16:25:33 UTC 2011 Modified Files: pkgsrc/lang/php5: Makefile Added Files: pkgsrc/lang/php5/patches: patch-ext_exif_exif.c patch-ext_zip_lib_zip__name__locate.c patch-ext_zip_php__zip.c Log Message: Add patches to fix SA43328. Bump PKGREVISION. --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 16:26:50 UTC 2011 Modified Files: pkgsrc/lang/php5: distinfo Log Message: Regen distinfo. --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 16:29:15 UTC 2011 Modified Files: pkgsrc/lang/php53: Makefile Log Message: Bump PKGREVISION for DL_AUTO_VARS. --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 16:30:44 UTC 2011 Modified Files: pkgsrc/archivers/php-zip: Makefile pkgsrc/graphics/php-exif: Makefile Log Message: Bump PKGREVISION reflects fix of SA43328. --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 21 16:38:40 UTC 2011 Modified Files: pkgsrc/lang/php53: distinfo Added Files: pkgsrc/lang/php53/patches: patch-ext_exif_exif.c patch-ext_zip_lib_zip__name__locate.c patch-ext_zip_php__zip.c Log Message: Oops, it should be commit before CHANGE-2011 update. Add Add patches to fix SA43328. --- Module Name: pkgsrc Committed By: taca Date: Tue Feb 22 07:36:08 UTC 2011 Modified Files: pkgsrc/archivers/php-zip: Makefile pkgsrc/graphics/php-exif: Makefile Log Message: Add missing USE_PHP_EXT_PATCHES to apply patches really.
2011-02-22Pullup tickets #3357 and #3359.tron1-0/+5
2011-02-22Pullup ticket #3359 - requested by tacatron4-172/+1476
www/typo3: security update Revisions pulled up: - www/typo3/Makefile 1.29 - www/typo3/PLIST 1.17 - www/typo3/distinfo 1.22 - www/typo3/patches/patch-aa 1.5 --- Module Name: pkgsrc Committed By: taca Date: Mon Feb 7 12:57:30 UTC 2011 Modified Files: pkgsrc/www/typo3: Makefile PLIST distinfo pkgsrc/www/typo3/patches: patch-aa Log Message: Update to www/typo3 package to 4.5.0. This is TYPO3 Version 4.5: Your Long Term Solution: Please refer new feature and changes in detail: http://typo3.org/news-single-view/?tx_newsimporter_pi1[showItem]=0&tx_newsimporter_pi1[feed]=10&cHash=c5554a06e2
2011-02-22Pullup ticket #3357 - requested by obachetron7-339/+434
lang/sun-jdk6: security update lang/sun-jre6: security update Revivions pulled up: - lang/sun-jdk6/Makefile 1.21 - lang/sun-jdk6/PLIST 1.11 - lang/sun-jdk6/distinfo 1.12 - lang/sun-jre6/Makefile 1.28 - lang/sun-jre6/PLIST.linux-i386 1.21 - lang/sun-jre6/distinfo 1.15 - lang/sun-jre6/sfiles-i386.mk 1.4 --- Module Name: pkgsrc Committed By: obache Date: Mon Feb 21 07:48:20 UTC 2011 Modified Files: pkgsrc/lang/sun-jdk6: Makefile PLIST distinfo pkgsrc/lang/sun-jre6: Makefile PLIST.linux-i386 distinfo sfiles-i386.mk Log Message: Update sun-{jre,jdk}6 to 6.0.24. Java SE 6 Update 24 * OlsonData 2010o * Java DB 10.6.2.1 * Bug Fixes, include following security fix. CVE-2010-4422 CVE-2010-4447 CVE-2010-4448 CVE-2010-4450 CVE-2010-4451 CVE-2010-4452 CVE-2010-4454 CVE-2010-4462 CVE-2010-4463 CVE-2010-4465 CVE-2010-4466 CVE-2010-4467 CVE-2010-4468 CVE-2010-4469 CVE-2010-4470 CVE-2010-4471 CVE-2010-4472 CVE-2010-4473 CVE-2010-4474 CVE-2010-4475 CVE-2010-4476 Java SE 6 Update 23 * OlsonData 2010l * Java Hotspot VM 19.0 * Java VisualVM 1.3.1 * Menu Item Corrections for Right-to-Left Languages * Additional Languages Support in Linux Systems * Bug Fixes
2011-02-20pullup 3356spz1-1/+3
2011-02-20Pullup ticket 3356 - requested by aymericspz2-6/+13
functionality fix Revisions pulled up: - pkgsrc/pkgtools/pkg_install/files/admin/audit.c 1.17 - pkgsrc/pkgtools/pkg_install/files/lib/version.h 1.161 ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: aymeric Date: Fri Feb 18 15:59:52 UTC 2011 Modified Files: pkgsrc/pkgtools/pkg_install/files/admin: audit.c pkgsrc/pkgtools/pkg_install/files/lib: version.h Log Message: . fix audit-history subcommand to include patterns making use of [x-y] notation . bump version to 20110215 To generate a diff of this commit: cvs rdiff -u -r1.16 -r1.17 pkgsrc/pkgtools/pkg_install/files/admin/audit.c cvs rdiff -u -r1.160 -r1.161 pkgsrc/pkgtools/pkg_install/files/lib/version.h
2011-02-16Pullup ticket #3355sbd1-0/+2
2011-02-16Pullup ticket #3355 - requested by tacasbd5-104/+33
Revisions pulled up: - pkgsrc/net/bind96/Makefile 1.18 - pkgsrc/net/bind96/PLIST 1.7 - pkgsrc/net/bind96/distinfo 1.11 - pkgsrc/net/bind96/patches/patch-ad 1.5 - pkgsrc/net/bind96/patches/patch-am 1.3 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 16:24:14 UTC 2011 Modified Files: pkgsrc/net/bind96: Makefile PLIST distinfo pkgsrc/net/bind96/patches: patch-ad patch-am Log Message: Update bind96 package to 9.6.3. 9.6.3 * BIND now builds with threads disabled in versions of NetBSD earlier than 5.0 and with pthreads enabled by default in NetBSD versions 5.0 and higher. Also removes support for unproven-pthreads, mit-pthreads and ptl2. [RT #19203] * HPUX now correctly defaults to using /dev/poll, which should increase performance. [RT #21919] * If named is running as a threaded application, after an "rndc stop" command has been issued, other inbound TCP requests can cause named to hang and never complete shutdown. [RT #22108] * When performing a GSS-TSIG signed dynamic zone update, memory could be leaked. This causes an unclean shutdown and may affect long-running servers. [RT #22573] * A bug in NetBSD and FreeBSD kernels with SO_ACCEPTFILTER enabled allows for a TCP DoS attack. Until there is a kernel fix, ISC is disabling SO_ACCEPTFILTER support in BIND. [RT #22589] * Corrected a defect where a combination of dynamic updates and zone transfers incorrectly locked the in-memory zone database, causing named to freeze. [RT #22614] * Don't run MX checks (check-mx) when the MX record points to ".". [RT #22645] * DST key reference counts can now be incremented via dst_key_attach. [RT #22672] * isc_mutex_init_errcheck() in phtreads/mutex.c failed to destroy attr. [RT #22766] * The Kerberos realm was being truncated when being pulled from the the host prinicipal, make krb5-self updates fail. [RT #22770] * named failed to preserve the case of domain names in RDATA which is not compressible when writing master files. [RT #22863] * There was a bug in how the clients-per-query code worked with some query patterns. This could result, in rare circumstances, in having all the client query slots filled with queries for the same DNS label, essentially ignoring the max-clients-per-query setting. [RT #22972]
2011-02-14pullup 3353 + 3354spz1-0/+18
2011-02-14Pullup ticket 3354 - requested by tacaspz24-252/+265
security update Revisions pulled up: - pkgsrc/databases/ruby-activerecord3/Makefile 1.3 - pkgsrc/databases/ruby-activerecord3/distinfo 1.3 - pkgsrc/databases/ruby-activerecord3/PLIST 1.2 - pkgsrc/databases/ruby-arel/Makefile 1.2 - pkgsrc/databases/ruby-arel/PLIST 1.2 - pkgsrc/databases/ruby-arel/distinfo 1.2 - pkgsrc/devel/ruby-activemodel/Makefile 1.3 - pkgsrc/devel/ruby-activemodel/distinfo 1.3 - pkgsrc/devel/ruby-activesupport3/Makefile 1.3 - pkgsrc/devel/ruby-activesupport3/distinfo 1.3 - pkgsrc/devel/ruby-railties/Makefile 1.3 - pkgsrc/devel/ruby-railties/distinfo 1.3 - pkgsrc/devel/ruby-railties/PLIST 1.2 - pkgsrc/mail/ruby-actionmailer3/Makefile 1.4 - pkgsrc/mail/ruby-actionmailer3/distinfo 1.3 - pkgsrc/www/ruby-actionpack3/Makefile 1.3 - pkgsrc/www/ruby-actionpack3/distinfo 1.3 - pkgsrc/www/ruby-activeresource3/Makefile 1.3 - pkgsrc/www/ruby-activeresource3/distinfo 1.3 - pkgsrc/www/ruby-rack-test/Makefile 1.2 - pkgsrc/www/ruby-rack-test/PLIST 1.2 - pkgsrc/www/ruby-rack-test/distinfo 1.2 - pkgsrc/www/ruby-rails3/Makefile 1.3 - pkgsrc/www/ruby-rails3/distinfo 1.4 ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:54:35 UTC 2011 Modified Files: pkgsrc/www/ruby-rack-test: Makefile PLIST distinfo Log Message: Update ruby-rack-test package to 0.5.7. == 0.5.7 / 2011-01-01 * Bug fixes * If no URI is present, include all cookies (Pratik Naik) To generate a diff of this commit: cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/www/ruby-rack-test/Makefile \ pkgsrc/www/ruby-rack-test/PLIST pkgsrc/www/ruby-rack-test/distinfo ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:55:29 UTC 2011 Modified Files: pkgsrc/databases/ruby-arel: Makefile PLIST distinfo Log Message: Update ruby-arel package to 2.0.8. == 2.0.8 / 2010/02/08 * Bug Fixes * Added set operation support * Fixed problems with *_any / *_all methods. == 2.0.7 (unreleased) * Bug Fixes * Limit members are visited * Fixing MSSQL TOP support == 2.0.6 12/01/2010 * Bug Fixes * Rails 3.0.x does not like that Node is Enumerable, so removing for now. == 2.0.5 11/30/2010 * Enhancements * Arel::Visitors::DepthFirst can walk your AST depth first * Arel::Nodes::Node is enumerable, depth first * Bug fixes * #lock will lock SELECT statements "FOR UPDATE" on mysql * Nodes::Node#not factory method added for creating Nodes::Not nodes * Added an As node * Deprecations * Support for Subclasses of core classes will be removed in ARel version 2.2.0 == 2.0.4 * Bug fixes * Speed improvements for Range queries. Thanks Rolf Timmermans! == 2.0.3 * Bug fixes * Fixing Oracle support * Added a visitor for "Class" objects == 2.0.2 * Bug fixes * MySQL selects from DUAL on empty FROM * Visitor translates nil to NULL * Visitor translates Bignum properly == 2.0.1 * Bug fixes == 2.0.0 / 2010-08-01 * Enhancements * Recreate library using the Visitor pattern. http://en.wikipedia.org/wiki/Visitor_pattern To generate a diff of this commit: cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/databases/ruby-arel/Makefile \ pkgsrc/databases/ruby-arel/PLIST pkgsrc/databases/ruby-arel/distinfo ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:56:49 UTC 2011 Modified Files: pkgsrc/devel/ruby-activesupport3: Makefile distinfo Log Message: Update ruby-activesupport3 package to 3.0.4. * 3.0.4 updates version only for Ruby on Rails 3.0.4 update. *Rails 3.0.3 (November 16, 2010)* * No changes. *Rails 3.0.2 (November 15, 2010)* * Added before_remove_const callback to ActiveSupport::Dependencies.remove_unloadable_constants! [Andrew White] To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 pkgsrc/devel/ruby-activesupport3/Makefile \ pkgsrc/devel/ruby-activesupport3/distinfo ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:57:47 UTC 2011 Modified Files: pkgsrc/devel/ruby-activemodel: Makefile distinfo Log Message: Update ruby-activemodel package to 3.0.4. * More strict dependency reflect gemspec's description. * It is update of version only for Ruby on Rails 3.0.4 update. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 pkgsrc/devel/ruby-activemodel/Makefile \ pkgsrc/devel/ruby-activemodel/distinfo ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:58:53 UTC 2011 Modified Files: pkgsrc/www/ruby-actionpack3: Makefile distinfo Log Message: Update ruby-actionpack3 package to 3.0.4. * More strict dependency reflect gemspec's description. *Rails 3.0.3 (November 16, 2010)* * When ActiveRecord::Base objects are sent to predicate methods, the id of the object should be sent to ARel, not the ActiveRecord::Base object. * :constraints routing should only do sanity checks against regular expressions. String arguments are OK. *Rails 3.0.2 (November 15, 2010)* * The helper number_to_currency accepts a new :negative_format option to be able to configure how to render negative amounts. [Don Wilson] To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/ruby-actionpack3/Makefile \ pkgsrc/www/ruby-actionpack3/distinfo ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 13:00:07 UTC 2011 Modified Files: pkgsrc/databases/ruby-activerecord3: Makefile PLIST distinfo Log Message: Update ruby-activerecord3 package to 3.0.4. * More strict dependency reflect gemspec's description. *Rails 3.0.4 (unreleased)* * Added deprecation warning for has_and_belongs_to_many associations where the join table has additional attributes other than the keys. Access to these attributes is removed in 3.1. Please use has_many :through instead. [Jon Leighton] *Rails 3.0.3 (November 16, 2010)* * Support find by class like this: Post.where(:name => Post) *Rails 3.0.2 (November 15, 2010)* * Dramatic speed increase (see: http://engineering.attinteractive.com/2010/10/arel-two-point-ohhhhh-yaaaaaa/) [Aaron Patterson] * reorder is deprecated in favor of except(:order).order(...) [Santiago Pastorino] * except is now AR public API Model.order('name').except(:order).order('salary') generates: SELECT * FROM models ORDER BY salary [Santiago Pastorino] * The following code: Model.limit(10).scoping { Model.count } now generates the following SQL: SELECT COUNT(*) FROM models LIMIT 10 This may not return what you want. Instead, you may with to do something like this: Model.limit(10).scoping { Model.all.size } [Aaron Patterson] To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 pkgsrc/databases/ruby-activerecord3/Makefile \ pkgsrc/databases/ruby-activerecord3/distinfo cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/databases/ruby-activerecord3/PLIST ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 13:00:50 UTC 2011 Modified Files: pkgsrc/www/ruby-activeresource3: Makefile distinfo Log Message: Update ruby-activeresource3 package to 3.0.4. * More strict dependency reflect gemspec's description. * It is update of version only for Ruby on Rails 3.0.4 update. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/ruby-activeresource3/Makefile \ pkgsrc/www/ruby-activeresource3/distinfo ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 13:01:46 UTC 2011 Modified Files: pkgsrc/mail/ruby-actionmailer3: Makefile distinfo Log Message: Update ruby-actionmailer3 package to 3.0.4. * More strict dependency reflect gemspec's description. * It is update of version only for Ruby on Rails 3.0.4 update. To generate a diff of this commit: cvs rdiff -u -r1.3 -r1.4 pkgsrc/mail/ruby-actionmailer3/Makefile cvs rdiff -u -r1.2 -r1.3 pkgsrc/mail/ruby-actionmailer3/distinfo ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 13:04:29 UTC 2011 Modified Files: pkgsrc/devel/ruby-railties: Makefile PLIST distinfo Log Message: Update ruby-railties package to 3.0.4. * More strict dependency reflect gemspec's description. Not documented but includes fix for security problem: http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 pkgsrc/devel/ruby-railties/Makefile \ pkgsrc/devel/ruby-railties/distinfo cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/devel/ruby-railties/PLIST ----------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 13:05:57 UTC 2011 Modified Files: pkgsrc/www/ruby-rails3: Makefile distinfo Log Message: Update ruby-rails3 package to 3.0.4. * More strict dependency reflect gemspec's description. * It is update of version only for Ruby on Rails 3.0.4 update. (This is meta gem.) To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/ruby-rails3/Makefile cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/ruby-rails3/distinfo
2011-02-14Pullup ticket 3353 - requested by tacaspz14-59/+47
security update Revisions pulled up: - pkgsrc/databases/ruby-activerecord/Makefile 1.21 - pkgsrc/databases/ruby-activerecord/distinfo 1.21 - pkgsrc/devel/ruby-activesupport/Makefile 1.24 - pkgsrc/devel/ruby-activesupport/distinfo 1.21 - pkgsrc/mail/ruby-actionmailer/Makefile 1.19 - pkgsrc/mail/ruby-actionmailer/distinfo 1.20 - pkgsrc/www/ruby-actionpack/Makefile 1.22 - pkgsrc/www/ruby-actionpack/distinfo 1.22 - pkgsrc/www/ruby-actionpack/PLIST 1.21 - pkgsrc/www/ruby-activeresource/Makefile 1.11 - pkgsrc/www/ruby-activeresource/distinfo 1.11 - pkgsrc/www/ruby-rails/Makefile 1.2 - pkgsrc/www/ruby-rails/distinfo 1.2 Files deleted: pkgsrc/www/ruby-rails/patches/patch-ad ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:37:58 UTC 2011 Modified Files: pkgsrc/devel/ruby-activesupport: Makefile distinfo Log Message: Update ruby-activesupport package to 2.3.11. It is update of version only for Ruby on Rails 2.3.11 update. To generate a diff of this commit: cvs rdiff -u -r1.23 -r1.24 pkgsrc/devel/ruby-activesupport/Makefile cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activesupport/distinfo ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:39:41 UTC 2011 Modified Files: pkgsrc/databases/ruby-activerecord: Makefile distinfo Log Message: Update ruby-activerecord package to 2.3.11. * More strict dependency reflect gemspec's description. * It is update of version only for Ruby on Rails 2.3.11 update. To generate a diff of this commit: cvs rdiff -u -r1.20 -r1.21 pkgsrc/databases/ruby-activerecord/Makefile \ pkgsrc/databases/ruby-activerecord/distinfo ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:40:52 UTC 2011 Modified Files: pkgsrc/www/ruby-actionpack: Makefile PLIST distinfo Log Message: Update ruby-actionpack package to 2.3.11. * More strict dependency reflect gemspec's description. *2.3.11 (February 9, 2011)* * Two security fixes. CVE-2011-0446, CVE-2011-0447 To generate a diff of this commit: cvs rdiff -u -r1.21 -r1.22 pkgsrc/www/ruby-actionpack/Makefile \ pkgsrc/www/ruby-actionpack/distinfo cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actionpack/PLIST ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:42:26 UTC 2011 Modified Files: pkgsrc/mail/ruby-actionmailer: Makefile distinfo Log Message: Update ruby-actionmailer package to 2.3.11. * More strict dependency reflect gemspec's description. * It is update of version only for Ruby on Rails 2.3.11 update. To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.19 pkgsrc/mail/ruby-actionmailer/Makefile cvs rdiff -u -r1.19 -r1.20 pkgsrc/mail/ruby-actionmailer/distinfo ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:43:09 UTC 2011 Modified Files: pkgsrc/www/ruby-activeresource: Makefile distinfo Log Message: Update ruby-activeresource/ package to 2.3.11. * More strict dependency reflect gemspec's description. * It is update of version only for Ruby on Rails 2.3.11 update. To generate a diff of this commit: cvs rdiff -u -r1.10 -r1.11 pkgsrc/www/ruby-activeresource/Makefile \ pkgsrc/www/ruby-activeresource/distinfo ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 12:44:07 UTC 2011 Modified Files: pkgsrc/www/ruby-rails: Makefile distinfo Removed Files: pkgsrc/www/ruby-rails/patches: patch-ad Log Message: Update ruby-rails package to 2.3.11. * More strict dependency reflect gemspec's description. * It is update of version only for Ruby on Rails 2.3.11 update. To generate a diff of this commit: cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/www/ruby-rails/Makefile \ pkgsrc/www/ruby-rails/distinfo cvs rdiff -u -r1.1.1.1 -r0 pkgsrc/www/ruby-rails/patches/patch-ad
2011-02-13pullup 3352spz1-0/+2
2011-02-13Pullup ticket 3352 - requested by tronspz2-6/+6
security update Revisions pulled up: - pkgsrc/databases/phpmyadmin/Makefile 1.88 - pkgsrc/databases/phpmyadmin/distinfo 1.49 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: tron Date: Sun Feb 13 16:11:11 UTC 2011 Modified Files: pkgsrc/databases/phpmyadmin: Makefile distinfo Log Message: Update "phpmyadmin" package to version 2.11.11.3. This version fixes the script insertion reported in CVE-2011-0987. To generate a diff of this commit: cvs rdiff -u -r1.87 -r1.88 pkgsrc/databases/phpmyadmin/Makefile cvs rdiff -u -r1.48 -r1.49 pkgsrc/databases/phpmyadmin/distinfo
2011-02-12pullups 3344 and 3345spz1-7/+11
file syntax fixes
2011-02-12Pullup ticket 3345 - requested by tacaspz3-5/+17
portability fix Revisions pulled up: - pkgsrc/lang/ruby19-base/Makefile 1.6 - pkgsrc/lang/ruby19-base/distinfo 1.3 - pkgsrc/lang/ruby19-base/patches/patch-as 1.2 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Mon Feb 7 11:15:29 UTC 2011 Modified Files: pkgsrc/lang/ruby19-base: Makefile distinfo pkgsrc/lang/ruby19-base/patches: patch-as Log Message: Add a patch from FreeBSD's port and it fixes runtime problem on DragonFly, too. The patch was provided by Rumko via private mail. Bump PKGREVISION. To generate a diff of this commit: cvs rdiff -u -r1.5 -r1.6 pkgsrc/lang/ruby19-base/Makefile cvs rdiff -u -r1.2 -r1.3 pkgsrc/lang/ruby19-base/distinfo cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/lang/ruby19-base/patches/patch-as
2011-02-12Pullup ticket 3344 - requested by tacaspz1-1/+4
portability fix Revisions pulled up: - pkgsrc/lang/ruby/rubyversion.mk 1.57 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Tue Feb 1 22:32:38 UTC 2011 Modified Files: pkgsrc/lang/ruby: rubyversion.mk Log Message: Apply patch provided by obache@, fixing build problem on Solaris. Should be fix PR pkg/44480. To generate a diff of this commit: cvs rdiff -u -r1.55 -r1.56 pkgsrc/lang/ruby/rubyversion.mk ---------------------------------------------------------------------- Module Name: pkgsrc Committed By: obache Date: Wed Feb 2 08:47:01 UTC 2011 Modified Files: pkgsrc/lang/ruby: rubyversion.mk Log Message: fixes shlib alias name for Solaris. PR#44480. RUBY_API_TEENY must be used instead of _RUBY_VER_TEENY for shlib name. To generate a diff of this commit: cvs rdiff -u -r1.56 -r1.57 pkgsrc/lang/ruby/rubyversion.mk
2011-02-11Pullup ticket's 3343, 3347, 3348, 3349, 3350 and 3351sbd1-0/+12
2011-02-11Pullup ticket #3348 - requested by rumkosbd2-4/+7
lang/php53 with suhosin build fix Revisions pulled up: - pkgsrc/lang/php53/Makefile.php ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: rumko Date: Sun Jan 30 17:58:06 UTC 2011 Modified Files: pkgsrc/lang/php53: Makefile.php distinfo Log Message: lang/php53: add the missing suhosin patch 5.3.5 was released due to a critical issue and the previous suhosin patch still applies. Prior art of this can be seen in OpenBSD's and FreeBSD's ports. ok@ wiz To generate a diff of this commit: cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/php53/Makefile.php cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/php53/distinfo
2011-02-11Pullup ticket #3351 - requested by drochnersbd4-2/+62
wireshark security patches Revisions pulled up: - pkgsrc/net/wireshark/Makefile 1.59 - pkgsrc/net/wireshark/distinfo 1.41 - pkgsrc/net/wireshark/patches/patch-af 1.1 - pkgsrc/net/wireshark/patches/patch-ag 1.1 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: drochner Date: Thu Feb 10 11:00:57 UTC 2011 Modified Files: pkgsrc/net/wireshark: Makefile distinfo Added Files: pkgsrc/net/wireshark/patches: patch-af patch-ag Log Message: add two patches from upstream: -fix possible free() of an uninitialized pointer when reading a malformed pcap-ng file (CVE-2011-0538) -add length check in pcap-ng reader bump PKGREV
2011-02-11Pullup ticket #3350 - requested by tronsbd2-7/+6
Security update for "phpmyadmin" package Revisions pulled up: - pkgsrc/databases/phpmyadmin/Makefile 1.87 - pkgsrc/databases/phpmyadmin/distinfo 1.48 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: tron Date: Thu Feb 10 16:48:09 UTC 2011 Modified Files: pkgsrc/databases/phpmyadmin: Makefile distinfo Log Message: Update "phpmyadmin" package to version 2.11.11.2. This version fixes the information leak reported in PMASA-2011-1.
2011-02-11Pullup ticket #3349 - requested by morrsbd2-6/+6
www/wordpress update Revisions pulled up: - pkgsrc/www/wordpress/Makefile 1.15 - pkgsrc/www/wordpress/distinfo 1.11 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: morr Date: Thu Feb 10 10:25:50 UTC 2011 Modified Files: pkgsrc/www/wordpress: Makefile distinfo Log Message: Security update to 3.0.5. Changes: * Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer additional sanitization to various fields. Affects users of the Author or Contributor role. * Fix XSS bug: Preserve tag escaping in the tags meta box. Affects users of the Author or Contributor role. * Fix potential information disclosure of posts through the media uploader. Affects users of the Author role. * Enhancement: Force HTML filtering on comment text in the admin * Enhancement: Harden check_admin_referer() when called without arguments, which plugins should avoid. * Update the license to GPLv2 (or later) and update copyright information for the KSES library.
2011-02-11Pullup ticket #3347 - requested by tacasbd3-2/+34
security/openssl security fix Revisions pulled up: - pkgsrc/security/openssl/Makefile 1.154 - pkgsrc/security/openssl/distinfo 1.80 - pkgsrc/security/openssl/patches/patch-ssl_t1__lib.c 1.1 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Wed Feb 9 00:15:30 UTC 2011 Modified Files: pkgsrc/security/openssl: Makefile distinfo Added Files: pkgsrc/security/openssl/patches: patch-ssl_t1__lib.c Log Message: Add fix for security issue CVE-2011-0014. Bump PKGREVISION.
2011-02-11Pullup ticket #3343 - requested by tacasbd3-9/+14
mail/ruby-mail security fix Revisions pulled up: - pkgsrc/mail/ruby-mail/Makefile 1.3 - pkgsrc/mail/ruby-mail/PLIST 1.3 - pkgsrc/mail/ruby-mail/distinfo 1.3 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Fri Jan 28 13:23:20 UTC 2011 Modified Files: pkgsrc/mail/ruby-mail: Makefile PLIST distinfo Log Message: Update ruby-mail package to 2.2.15. == Wed 26 Jan 2011 02:23:09 UTC Mikel Lindsaar <mikel@rubyx.com> * Update addresses passed into sendmail to escape them (Andy Lindeman) * Version bump to 2.2.15 and gem release
2011-02-05pullup 3340spz1-0/+2
2011-02-05Pullup ticket 3340 - requested by tronspz3-2/+22
functionality fix Revisions pulled up: - pkgsrc/mail/dovecot2/Makefile 1.7 - pkgsrc/mail/dovecot2/distinfo 1.7 Files added: pkgsrc/mail/dovecot2/patches/patch-ad ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: tron Date: Wed Feb 2 22:19:25 UTC 2011 Modified Files: pkgsrc/mail/dovecot2: Makefile distinfo Added Files: pkgsrc/mail/dovecot2/patches: patch-ad Log Message: Add fix by Timo Sirainen from the Dovecot Mercury repository to fix a hang when trying to COPY to a non existent mailbox via IMAP. To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/dovecot2/Makefile \ pkgsrc/mail/dovecot2/distinfo cvs rdiff -u -r0 -r1.3 pkgsrc/mail/dovecot2/patches/patch-ad
2011-01-27Pullup ticket #3338 - requested by tronsbd1-0/+2
2011-01-27Pullup ticket #3338 - requested by tronsbd7-4/+144
Security patch for "phpmyadmin" package Revisions pulled up: - pkgsrc/databases/phpmyadmin/Makefile 1.86 - pkgsrc/databases/phpmyadmin/PLIST 1.22 - pkgsrc/databases/phpmyadmin/distinfo 1.47 - pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-1 1.1 - pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-2 1.1 - pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-3 1.1 - pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4481 1.1 ------------------------------------------------------------------------- Module Name: pkgsrc Committed By: tron Date: Thu Jan 27 13:45:56 UTC 2011 Modified Files: pkgsrc/databases/phpmyadmin: Makefile PLIST distinfo Added Files: pkgsrc/databases/phpmyadmin/patches: patch-CVE-2010-4480-1 patch-CVE-2010-4480-2 patch-CVE-2010-4480-3 patch-CVE-2010-4481 Log Message: Add fixes for the security vulnerabilities reported in CVE-2010-4480 and CVE-2010-4481 taken from the phpMyAdmin GIT repository. Thanks a lot to Tim Zingelman for pointing out that the fixes had finally been made available. To generate a diff of this commit: cvs rdiff -u -r1.85 -r1.86 pkgsrc/databases/phpmyadmin/Makefile cvs rdiff -u -r1.21 -r1.22 pkgsrc/databases/phpmyadmin/PLIST cvs rdiff -u -r1.46 -r1.47 pkgsrc/databases/phpmyadmin/distinfo cvs rdiff -u -r0 -r1.1 \ pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-1 \ pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-2 \ pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-3 \ pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4481
2011-01-27revert accidental commit to release branchgdt2-5/+5
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-21 06:14:21 +0000