summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2014-06-28Don't pull in flex with both USE_TOOLS and bl3. USE_TOOLS is sufficient.dholland1-3/+2
Should fix shlib check failure.
2014-06-28fix build failure on netbsd amd64dholland2-1/+29
2014-06-28Work around build problem seen only in pbulk (remains unclear why).dholland3-3/+37
Disable build dependence on gperf as the build doesn't actually run it, and also for this workaround I need to patch the gperf output file.
2014-06-28work with more lex versions (fixes build failure seen with -current)dholland2-3/+15
2014-06-28Apply patch from RT to check more carefully for usesfio. Fixes buildschmonz2-1/+20
with Perl 5.20 (and tests pass).
2014-06-28security'ish update. Changelog:spz2-6/+6
Tomcat 6.0.41 ============= Jasper ------ fix 56529: Avoid NoSuchElementException while handling attributes with empty string value in custom tags. Based on a patch provided by Hariprasad Manchi. (violetagg/kkolinko) Tomcat 6.0.40 not released ============================ Catalina -------- fix 56027: Add more options for managing FIPS mode in the AprLifecycleListener. (schultz/kkolinko) fix 56082: Fix a concurrency bug in JULI's LogManager implementation. (markt) fix 56236: Enable Tomcat to work with alternative Servlet and JSP API JARs that package the XML schemas in such as way as to require a dependency on the JSP API before enabling validation for web.xml. Tomcat has no such dependency. (markt) fix Change the default value of the xmlBlockExternal attribute of Context elements. It is now true. (kkolinko) fix Don't log to standard out in SSLValve. (kkolinko/markt) code Use StringBuilder in DefaultServlet. (kkolinko) fix 56275: Allow web applications to be stopped cleanly even if filters throw exceptions when their destroy() method is called. (markt/kkolinko) fix Redefine the globalXsltFile initialisation parameter of the DefaultServlet as relative to CATALINA_BASE/conf or CATALINA_HOME/conf. Prevent user supplied XSLTs used by the DefaultServlet from defining external entities. (markt) fix Add a work around for validating XML documents (often TLDs) that use just the file name to refer to refer to the JavaEE schema on which they are based. (kkolinko) fix 56369: Ensure that removing an MBean notification listener reverts all the operations performed when adding an MBean notification listener. (markt) fix Only create XML parsing objects if required and fix associated potential memory leak in the default Servlet. (markt) fix Ensure that a TLD parser obtained from the cache has the correct value of blockExternal. (markt/kkolinko) add Extend XML factory, parser etc. memory leak protection to cover some additional locations where, theoretically, a memory leak could occur. (markt) add Add the org.apache.naming package to the packages requiring code to have the defineClassInPackage permission when running under a security manager. (markt) add Add the org.apache.naming.resources package to the packages requiring code to have the accessClassInPackage permission when running under a security manager. (markt) fix Make the naming context tokens for containers more robust. Require RuntimePermission when introducing a new token. (markt/kkolinko) Coyote ------ fix Improve processing of chuck size from chunked headers. Avoid overflow and use a bit shift instead of a multiplication as it is marginally faster. (markt/kkolinko) fix Fix possible overflow when parsing long values from a byte array. (markt) update 56363: Update to version 1.1.30 of Tomcat Native library. The minimum required version of this library for APR connector is now 1.1.30. (kkolinko) Jasper ------ fix Change the default behaviour of JspC to block XML external entities by default. (kkolinko) fix Restore the validateXml option to Jasper that was previously renamed validateTld. Both options are now supported. validateXml controls the validation of web.xml files when Jasper parses them and validateTld controls the validation of *.tld files when Jasper parses them. (markt) fix 54475: Add Java 8 support to SMAP generation for JSPs. Patch by Robbie Gibson. (markt) fix 56010: Don't throw an IllegalArgumentException when JspFactory.getPageContext is used with JspWriter.DEFAULT_BUFFER. Based on a patch by Eugene Chung. (markt) fix 56265: Do not escape values of dynamic tag attributes ontaining EL expressions. (kkolinko) fix 56283: Add support for running Tomcat 6 with ecj-P20140317-1600.jar (as drop-in replacement for ecj-4.3.1.jar). Add support for value "1.8" for the compilerSourceVM and compilerTargetVM options. Note that ecj-P20140317-1600.jar can only be used when running with Java 6 or later. The "1.8" options make sense only when running with Java 8 (or later). (kkolinko) fix 56334: Fix a regression in the handling of back-slash escaping introduced by the fix for 55735. (markt/kkolinko) fix Correct the handling of back-slash escaping in the EL parser and no longer require that \$ or \# must be followed by { in order for the back-slash escaping to take effect. (markt) Cluster ------- code Refactor AbstractReplicatedMap and related classes to enable Tomcat 6 to be compiled using Java 8. (markt) Web applications ---------------- add 56093: Documentation for SSLValve. (markt/kkolinko) fix Correct documentation on Windows service options, aligning it with Apache Commons Daemon documentation. (kkolinko) add Add support for version-major, version-major-minor tags in documentation XSLT, to simplify documentation backports. (kkolinko) fix Fix target and rel attributes on links in documentation. They were lost during XSLT transformation. (kkolinko) Other ----- code Remove svn keywords (such as $Id) from source files and documentation. (kkolinko) update Improvements to the Windows installer, to align it with installing the sevice with service.bat. Use explicit memory sizes (--JvmMs 128 Mb and --JvmMx 256 Mb). Specify log directory path when ininstalling, so that the log file is written to the Tomcat logs directory, instead of "%SystemRoot%\System32\LogFiles\Apache". (kkolinko) update 49993, 56143: Improve service.bat script. Allow it to be launched from non-UAC console. The UAC prompt will be shown only once. Now there is no need to run the command shell with elevated privileges. Improve check for JAVA_HOME and add support for JRE_HOME. Warn if neither "client" nor "server" JVM is found. Align classpath, display name and other options with the exe installer. Make command names case-insensitive. Update documentation. (kkolinko)
2014-06-28Stop using "pax -rw -pe", it doesn't work. Use "-pp" instead.asau1-2/+2
2014-06-28Updated net/mikutter to 3.0.2obache1-1/+2
2014-06-28Update mikutter to 3.0.2.obache3-7/+8
* trivial bug fixes.
2014-06-28Updated mail/milter-manager to 2.0.4obache1-1/+2
2014-06-28Update milter-manager to 2.0.4.obache3-7/+9
== [release-2-0-4] 2.0.4: 2014-06-20 A bug fix release of 2.0.3 === Ruby milter ==== Improvements * Add Milter::Client::Test::MilterRunner * Add Milter::Client::EnvelopeAddress ==== Fixes * Fix the bug that milter written in Ruby cannot finish properly on multiple CPU environment
2014-06-28Fix an fd leak when using appledouble = v2 - from upstream.markd3-3/+28
Bump PKGREVISION
2014-06-27configure fails to detect <netinet/ip_icmp.h> presense on FreeBSD 10.asau1-1/+6
Work around it.
2014-06-27Request GNU texinfo as a tool to avoid build failure when it is missing.asau1-1/+2
2014-06-27"configure" is a wrapper script around "waf", it is not GNU configure definitly.asau1-2/+2
2014-06-27One more file installed on FreeBSD 10.asau1-0/+2
2014-06-27FreeBSD 10 is not FreeBSD 1.asau2-4/+31
2014-06-27Add settings to make the package build on FreeBSD 10.asau1-0/+27
2014-06-27add patch from 1.2.7 to fix recent integer overflow, bump PKGREVdrochner3-3/+47
2014-06-27add patch from 1.2.7 to fix recent integer overflow, bump PKGREVdrochner3-3/+51
(update to 1.2.7 will be done after the freeze)
2014-06-27add patch from ffmpeg to fix the recent LZO integer overflowdrochner6-8/+59
bump PKGREV
2014-06-27python is used during build process.ryoon1-1/+2
From richard@.
2014-06-27Updated devel/libvolume_id to 0.81.1nb1ryoon1-1/+2
2014-06-27Really bump PKGREVISIONryoon1-1/+2
2014-06-27Fix PR pkg/48934, and bump PKGREVISIONryoon2-5/+9
Fix broken binary under NetBSD 5, and change OpenBSD case. O.k. by wiz@.
2014-06-27Explicitly disable HAVE_7REGS on SunOS, it enables certain optimisationsjperkin2-1/+20
which do not compile.
2014-06-27Disable MMX sections on SunOS.jperkin4-10/+68
2014-06-27Note update of lang/php55 package to 5.5.14.taca1-1/+2
2014-06-27Update php55 to 5.5.14 which includes several security fixes.taca3-8/+7
26 Jun 2014, PHP 5.5.14 - Core: . Fixed BC break introduced by patch for bug #67072. (Anatol, Stas) . Fixed bug #66622 (Closures do not correctly capture the late bound class (static::) in some cases). (Levi Morrison) . Fixed bug #67390 (insecure temporary file use in the configure script). (CVE-2014-3981) (Remi) . Fixed bug #67399 (putenv with empty variable may lead to crash). (Stas) . Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability). (Stefan Esser) - CLI server: . Fixed Bug #67406 (built-in web-server segfaults on startup). (Remi) - Date: . Fixed bug #67308 (Serialize of DateTime truncates fractions of second). (Adam) . Fixed regression in fix for bug #67118 (constructor can't be called twice). (Remi) - Fileinfo: . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary check). (CVE-2014-0207) . Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal string size). (CVE-2014-3478) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary check). (CVE-2014-3479) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check). (CVE-2014-3480) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary check). (CVE-2014-3487) (Francisco Alonso, Jan Kaluza, Remi) - Intl: . Fixed bug #67349 (Locale::parseLocale Double Free). (Stas) . Fixed bug #67397 (Buffer overflow in locale_get_display_name and uloc_getDisplayName (libicu 4.8.1)). (Stas) - Network: . Fixed bug #67432 (Fix potential segfault in dns_get_record()). (CVE-2014-4049). (Sara) - OPCache: . Fixed issue #183 (TMP_VAR is not only used once). (Dmitry, Laruence) - OpenSSL: . Fixed bug #65698 (certificates validity parsing does not work past 2050). (Paul Oehler) . Fixed bug #66636 (openssl_x509_parse warning with V_ASN1_GENERALIZEDTIME). (Paul Oehler) - PDO-ODBC: . Fixed bug #50444 (PDO-ODBC changes for 64-bit). - SOAP: . Implemented FR #49898 (Add SoapClient::__getCookies()). (Boro Sitnikovski) - SPL: . Fixed bug #66127 (Segmentation fault with ArrayObject unset). (Stas) . Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence) . Fixed bug #67360 (Missing element after ArrayObject::getIterator). (Adam) . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion). (CVE-2014-3515) (Stefan Esser) . Fixed bug #67118 (DateTime constructor crash with invalid data). (Anatol) . Fixed bug #67251 (date_parse_from_format out-of-bounds read). (Stas) . Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read). (Stas) - DOM: . Fixed bug #67081 (DOMDocumentType->internalSubset returns entire DOCTYPE tag, not only the subset). (Anatol) - Fileinfo: . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol) . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS) (CVE-2014-0238). . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in performance degradation) (CVE-2014-0237). - FPM: . Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor). (Julio Pintos) - GD: . Fixed bug #67248 (imageaffinematrixget missing check of parameters). (Stas) - PCRE: . Fixed bug #67238 (Ungreedy and min/max quantifier bug, applied patch from the upstream). (Anatol) - Phar: . Fix bug #64498 ($phar->buildFromDirectory can't compress file with an accent in its name). (PR #588)
2014-06-27Note update of lang/php54 package to 5.4.30.taca1-1/+2
2014-06-27Update php54 to 5.4.30 which includes several security fixes.taca3-8/+7
26 Jun 2014, PHP 5.4.30 - Core: . Fixed BC break introduced by patch for bug #67072. (Anatol, Stas) . Fixed bug #66622 (Closures do not correctly capture the late bound class (static::) in some cases). (Levi Morrison) . Fixed bug #67390 (insecure temporary file use in the configure script). (CVE-2014-3981) (Remi) . Fixed bug #67399 (putenv with empty variable may lead to crash). (Stas) . Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability). (Stefan Esser) - CLI server: . Fixed Bug #67406 (built-in web-server segfaults on startup). (Remi) - Date: . Fixed bug #67308 (Serialize of DateTime truncates fractions of second). (Adam) . Fixed regression in fix for bug #67118 (constructor can't be called twice). (Remi) - Fileinfo: . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary check). (CVE-2014-0207) . Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal string size). (CVE-2014-3478) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary check). (CVE-2014-3479) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check). (CVE-2014-3480) (Francisco Alonso, Jan Kaluza, Remi) . Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary check). (CVE-2014-3487) (Francisco Alonso, Jan Kaluza, Remi) - Intl: . Fixed bug #67349 (Locale::parseLocale Double Free). (Stas) . Fixed bug #67397 (Buffer overflow in locale_get_display_name and uloc_getDisplayName (libicu 4.8.1)). (Stas) - Network: . Fixed bug #67432 (Fix potential segfault in dns_get_record()). (CVE-2014-4049). (Sara) - OpenSSL: . Fixed bug #65698 (certificates validity parsing does not work past 2050). (Paul Oehler) . Fixed bug #66636 (openssl_x509_parse warning with V_ASN1_GENERALIZEDTIME). (Paul Oehler) - SOAP: . Implemented FR #49898 (Add SoapClient::__getCookies()). (Boro Sitnikovski) - SPL: . Fixed bug #66127 (Segmentation fault with ArrayObject unset). (Stas) . Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence) . Fixed bug #67360 (Missing element after ArrayObject::getIterator). (Adam) . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion) (CVE-2014-3515). (Stefan Esser)
2014-06-27Recognize more Perl versions.dholland2-4/+4
2014-06-27Updated x11/p5-Alien-wxWidgets to 0.60nb15schmonz1-1/+2
2014-06-27Apply patch from RT to force intended precedence. Add missingschmonz3-3/+22
dependency on Module::Pluggable. Tests pass, and with these changes p5-Wx builds again on NetBSD. Bump PKGREVISION.
2014-06-27Fix installation on Darwin with the default PKG_OPTIONS.schmonz3-14/+20
Background: On systems with CoreText (i.e., Darwin), pango unconditionally links with it and installs certain libraries; this is already handled in PLIST. Problem: On systems where cairo has been built with the "quartz" option, pango installs an additional header file. Fix: Given that the "quartz" option is off by default, and assuming that users who enable it likely do so globally in PKG_DEFAULT_OPTIONS, add a nominal "quartz" option to pango that conditionalizes whether to expect this additional header file. "Sounds good" from jperkin@. Tested on: * Mac OS X 10.9.3, with and without PKG_DEFAULT_OPTIONS+=quartz (from cairo on up the dependency chain) * NetBSD/amd64 6.1.4, with X sets and the default options
2014-06-27Stop using "pax -rw -pe", it doesn't work. Use "-pp" instead.asau1-2/+2
2014-06-27Close the string literal.asau1-2/+2
2014-06-27Updated databases/percona-toolkit to 2.2.8rodent1-1/+2
2014-06-27v2.2.8 released 2014-05-30rodent2-7/+6
* Removed pt-agent * Added pt-slave-restart GTID support * Added pt-table-checksum --plugin * Fixed bug 1304062: --ignore-tables does not work correctly * Fixed bug 1295667: pt-deadlock-logger logs incorrect ts * Fixed bug 1254233: pt-mysql-summary blank InnoDB section for 5.6 * Fixed bug 1286250: pt-online-schema-change requests password twice * Fixed bug 965553: pt-query-digest dosn't fingerprint true/false literals correctly * Fixed bug 290911: pt-show-grant --ask-pass prints "Enter password" to STDOUT v2.2.7 released 2014-02-20 * Fixed bug 1279502: --version-check behaves like spyware (CVE 2014-2029)
2014-06-26Don't build bundled implementation of "mktime" on NetBSD.asau2-1/+30
This makes the package build on 32-bit NetBSD. Patch is taken from devel/blame that carries the same "mktime" implementation.
2014-06-26<stdint.h> is needed to make it build on FreeBSD.asau2-6/+14
2014-06-26FreeBSD 10 is not FreeBSD 1.asau4-7/+53
2014-06-26FreeBSD's unzip doesn't handle the distfile.asau1-1/+8
This fixes the build on FreeBSD 10.
2014-06-26FreeBSD doesn't have "alloca.h".asau2-4/+4
This fixes the build on FreeBSD 10.
2014-06-26FreeBSD doesn't have libmalloc.asau2-1/+15
This fixes the build on FreeBSD 10.
2014-06-26FreeBSD 10 lacks "versionsort" too.asau3-7/+8
2014-06-26Define "__u32" and "__u64" for FreeBSD to make the package build on FreeBSD 10.asau1-1/+2
2014-06-26No "ulong" type on FreeBSD 10.asau2-5/+8
2014-06-26Create more symbolic links to fix build on FreeBSD 10.asau1-2/+4
2014-06-26Treat FreeBSD as NetBSD, it uses NetBSD's libexecinfo.asau1-2/+2
This fixes the build on FreeBSD 10.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-19 05:11:30 +0000