summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2019-12-19Don't buildlink py-dbus, it might not even be the correct version.joerg1-2/+1
2019-12-19gns3-gui: fix permissions of installed filesmarkd1-1/+5
2019-12-19gns3-server: fix install for python != 3.7.markd1-3/+8
Also fix permissions of installed files
2019-12-19ns: modern compilers fussy about unsigned charmarkd1-1/+7
2019-12-19nam: modern compilers fussy about unsigned charmarkd1-1/+7
2019-12-19Don't touch RLIMIT_STACK for now, see https://gnats.netbsd.org/51158kim3-10/+13
2019-12-19Note update of the "mutt" package to version 1.13.2tron1-1/+2
2019-12-19mutt: Update to version 1.13.2tron2-7/+7
Changes since version 1.13.1: ! Bug fix release. Update during freeze approved by gdt@
2019-12-19doc: Updated games/nethack to 3.6.4rhialto1-1/+2
2019-12-19games/nethack: security update to 3.6.4.rhialto2-7/+7
https://www.nethack.org/security/index.html: NetHack: Privilege escalation/remote code execution/crash in configuration parsing Severity: High Affected versions: 3.6.0, 3.6.1, 3.6.2, 3.6.3 First Patched Version: 3.6.4 Basic Information: A buffer overflow issue exists when reading very long lines from a NetHack configuration file (usually named .nethackrc). This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files. All users are urged to upgrade to NetHack 3.6.4 as soon as possible. Additional information related to this advisory, if any, will be made available at https://nethack.org/security.
2019-12-19Updated www/py-django, www/py-django2adam1-1/+3
2019-12-19py-django2: updated to 2.2.9adam2-7/+7
Django 2.2.9 fixes a security issue and a data loss bug in 2.2.8. CVE-2019-19844: Potential account hijack via password reset form By submitting a suitably crafted email address making use of Unicode characters, that compared equal to an existing user email when lower-cased for comparison, an attacker could be sent a password reset token for the matched account. In order to avoid this vulnerability, password reset requests now compare the submitted email using the stricter, recommended algorithm for case-insensitive comparison of two identifiers from Unicode Technical Report 36, section 2.11.2(B)(2). Upon a match, the email containing the reset token will be sent to the email address on record rather than the submitted address. Bugfixes * Fixed a data loss possibility in SplitArrayField. When using with ArrayField(BooleanField()), all values after the first True value were marked as checked instead of preserving passed values
2019-12-19py-django: updated to 1.11.27adam2-7/+7
Django 1.11.27 fixes a security issue and a data loss bug in 1.11.26. CVE-2019-19844: Potential account hijack via password reset form By submitting a suitably crafted email address making use of Unicode characters, that compared equal to an existing user email when lower-cased for comparison, an attacker could be sent a password reset token for the matched account. In order to avoid this vulnerability, password reset requests now compare the submitted email using the stricter, recommended algorithm for case-insensitive comparison of two identifiers from Unicode Technical Report 36, section 2.11.2(B)(2). Upon a match, the email containing the reset token will be sent to the email address on record rather than the submitted address. Bugfixes * Fixed a data loss possibility in SplitArrayField. When using with ArrayField(BooleanField()), all values after the first True value were marked as checked instead of preserving passed values
2019-12-19Fix patch or sys/loadavg.hnros2-13/+13
The patch for including sys/loadavg.h included the file in the section where getloadavg isn't used so the patch did nothing. Include it in the right place to fix it.
2019-12-19grep: Avoid conflict with sys/limits.h guard.jperkin2-1/+19
2019-12-19devel/py-importlib-metadata: fix files' permissiontaca1-1/+4
Fix file's permission to pass build under CHECK_PERMS is yes, i.e. PKG_DEVELOPER is on. Distfile of importlib-metadata 0.23, 1.1.0, 1.2.0 and 1.3.0 are contains world writable permission of files. Adam, why did you remove post-extract part?
2019-12-19doc: update drupal packagestaca1-1/+3
www/drupal7 7.69 www/drupal8 8.7.11
2019-12-19www/drupal8: update to 8.7.11taca3-8/+9
Update durpal8 to 8.7.11, security release. 8.7.11 (2019-12-18) Release notes Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement.
2019-12-19www/drupal7: update to 7.69taca3-8/+11
Update drupal7 to 7.69, security release. 7.69 (2019-12-18) Release notes Maintenance and security release of the Drupal 7 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement.
2019-12-18Fix setrlimit(3): Invalid argumentkim4-2/+165
The new code that unlimits many resources appears to have been problematic on a number of fronts. Fetched the current version of src/limits.c from the sudo hg repo. RLIMIT_STACK (i.e. "3") is no longer set to RLIM_INFINITY. Added code to output the name of the limit instead of its number.
2019-12-18py-django != py-djangorestframeworkjoerg1-2/+2
2019-12-18doc: Updated graphics/libsixel to 1.8.3tsutsui1-1/+2
2019-12-18libsixel: update to 1.8.3. (security fixes)tsutsui2-8/+7
Upstream changes: v1.8.3 * Security fix for CVE-2018-19757 (#79), NULL pointer dereference problem, reported by @nluedtke and fixed by @knok (#91, #94). * Security fix for CVE-2018-19762 (#81), heap-based buffer overflow problem, reported by @nluedtke and fixed by @knok (#92). * Security fix for CVE-2018-19756 (#80), heap-based buffer over-read problem, reported by @nluedtke and fixed by @knok (#93). * Security fix for CVE-2018-19763 (#82), heap-based buffer over-read problem, reported by @nluedtke and fixed by @knok (#95). * Security fix for CVE-2018-19761, illegal address access, fixed by @knok (#96). * Security fix for CVE-2018-19759, heap-based buffer over-read problem, fixed by @knok (#98). * Security fix for CVE-2018-3753 (#83), infinite loop problem, reported by @cool-tomato and fixed by @knok (#99). * Security fix for CVE-2018-19759 (#102), heap-based buffer over-read that will cause a denial of service. reported and fixed by @YourButterfly. (#106) * Security fix for CVE-2019-19635 (#103), heap-based buffer overflow, reported and fixed by @YourButterfly. (#106) * Security fix for CVE-2019-19636 (#104) and CVE-2019-19637 (#105), integer overflow problem. reported and fixed by @YourButterfly. (#106) * gif loader: check LZW code size (Issue #75), Thanks to @HongxuChen. https://github.com/saitoha/libsixel/commit/7808a06b88c11dbc502318cdd51fa374f8cd47ee * core: Fix a global-buffer-overflow problem (Issue #72), Thanks to @fgeek. https://github.com/saitoha/libsixel/commit/c868b59ec89bdb24c42a0de89e5319a989076c66 * core: Fix unexpected hangs/performance issues (Issue #76), Thanks to @HongxuChen. https://github.com/saitoha/libsixel/commit/88561b7a810017b91d26b6273323dde4b6f9b273 https://github.com/saitoha/libsixel/commit/2d3d9ffe8ab886b7bc670fd896d63c628436cc66 https://github.com/saitoha/libsixel/commit/c9363cd1d5929e1d721af9f09633061dfa8152fe
2019-12-18doc: Updated mail/neomutt to 20191129wiz2-3/+3
2019-12-18neomutt: update to 20191129.wiz2-7/+7
Leaf package. 2019-11-29 Richard Russon <rich@flatcap.org> * Features - Add raw mailsize expando (%cr) * Bug Fixes - Avoid double question marks in bounce confirmation msg - Fix bounce confirmation - fix new-mail flags and behaviour - fix: browser <descend-directory> - fix ssl crash - fix move to trash - fix flickering - Do not check hidden mailboxes for new mail - Fix new_mail_command notifications - fix crash in examine_mailboxes() - fix crash in mutt_sort_threads() - fix: crash after sending - Fix crash in tunnel's conn_close - fix fcc for deep dirs - imap: fix crash when new mail arrives - fix colour 'quoted9' - quieten messages on exit - fix: crash after failed mbox_check - browser: default to a file/dir view when attaching a file * Changed Config - Change $write_bcc to default off * Translations - 100% Portuguese (Brazil) - 92% Polish * Docs - Add a bit more documentation about sending - Clarify $write_bcc documentation. - Update documentation for raw size expando - docbook: set generate.consistent.ids to make generated html reproducible * Build - fix build/tests for 32-bit arches - tests: fix test that would fail soon - tests: fix context for failing idna tests
2019-12-18Disable opengl for qemu-xen, to workaround an issue with epoxy and newerbouyer2-6/+11
x11-links http://mail-index.netbsd.org/tech-pkg/2019/11/02/msg022228.html
2019-12-18doc: fix typo in frozen branch namegdt1-2/+2
2019-12-18Close conditional with .endifryoon1-1/+2
2019-12-18openjdk11: remove MAKE_JOBS_SAFE=no on NetBSDwiz1-6/+1
This workaround didn't help. NetBSD is supposedly fixed now.
2019-12-18Updated editors/emacs-snapshotmef1-1/+2
2019-12-18Fix missing dependency.joerg1-1/+2
2019-12-18(editors/emacs-snapshot) Makefile.common is not used for nowmef1-81/+0
2019-12-18Use external libuv.joerg3-2/+36
2019-12-18Resolve conflict with STL.joerg2-1/+17
2019-12-18Fix rpath in DSO, don't test on runtime due to $DESTDIR.joerg3-2/+21
2019-12-18Fix build with libc++ having less namespace pollution.joerg2-1/+17
2019-12-18Deal with stricter constness of OpenSSL 1.1.joerg2-1/+24
2019-12-18(editors/emacs-snapshot) Updated 25.0.x to 27.0.50mef14-3955/+4393
- currently almost the same as wip/emacs-git
2019-12-18Explicitly depend on libXmu.joerg1-1/+2
2019-12-18Add one more header to the fixup list.joerg1-2/+2
2019-12-18Don't force -latomic unconditionally with clang.joerg3-1/+41
2019-12-18devel/py-line_profiler: Fix build with python38minskim1-2/+2
Regenerate .c files with recent Cython.
2019-12-18doc: Updated textproc/libhighlight to 3.54schmonz1-1/+2
2019-12-18Update to 3.54 (during the freeze, for the bugfixes). From the changelog:schmonz6-28/+30
- fixed default colour output in BBCode (https://gitlab.com/saalen/highlight/issues/134) - fixed corner case in sh.lang - fixed syntax tests with UTF-8 input (https://gitlab.com/saalen/highlight/issues/123) - added support for Bash in outhtml_codefold.lua plug-in - added ballerina.lang - added block strings to java.lang - added author hints in themes and language definitions - added C++20 reserved words in c.lang - added editorconfig file and validated all files accordingly (thanks to Tristano Ajmone) - CLI: fixed `--list-scripts` with `-d` or HIGHLIGHT_DATADIR env variable (https://gitlab.com/saalen/highlight/issues/139) - GUI W32: replaced multibyte path trace window by startup hint if NtfsDisable8dot3NameCreation is set - GUI: removed AsciiDoc instruction lines from the README popup window
2019-12-18textproc/word2vec: Fix a typo in COMMENTminskim1-2/+2
2019-12-17Update to wtf-20191214sevan2-7/+7
featuring more acronyms since last update
2019-12-17sysutils/xen: Explain security/recommended status in DESCRgdt5-0/+10
2019-12-17sysutils/xen: Note reason why 4.2 still exists.gdt1-0/+4
2019-12-17doc: Note start of 2019Q3 freezegdt1-1/+2
2019-12-17databases/postgresql12-{client,server}: Requires msgfmt to buildminskim2-3/+4
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-07 20:23:16 +0000