summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2007-07-04Make it easier to build and install packages "unprivileged", wherejlam137-243/+533
the owner of all installed files is a non-root user. This change affects most packages that require special users or groups by making them use the specified unprivileged user and group instead. (1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to unprivileged.mk. These two variables are lists of other bmake variables that define package-specific users and groups. Packages that have user-settable variables for users and groups, e.g. apache and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP}, etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER} and ${UNPRIVILEGED_GROUP}. (2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
2007-07-04pkgsrc basically follows the BSD man page hierarchy. Install the sujlam6-22/+8
and visudo manpages in man/man1, and the sudoers manpage in man/man5. Remove the platform-specific PLISTs that only differed in the location of the man pages. Bump the PKGREVISION to 5.
2007-07-04Updated sysutils/install-sh to 20070704.jlam1-1/+2
2007-07-04Ensure that nonexistent intermediate directories are created with thejlam1-2/+3
default mode (${PKGDIRMODE}) even if -m <mode> is provided on the command line. Bump the package version to 20070704.
2007-07-04Add a test to verify that nonexistent intermediate directories arejlam1-2/+29
created with the proper permissions. XXX sysutils/install-sh isn't quite right the same as /usr/bin/install XXX because it ignores the umask for directory creation.
2007-07-04Security fix for CVE-2007-2949 heap overflow in the remaining gimp branch.lkundrak1-1/+2
2007-07-04Fix for CVE-2007-2949 heap overflow. Bump PKGREVISION.lkundrak3-2/+32
2007-07-04Security fixes for CVE-2007-2949 heap overflows in gimp.lkundrak1-2/+3
2007-07-04Security for CVE-2007-2949 heap overflow. Bump PKGREVISION.lkundrak3-3/+23
2007-07-04Fix for CVE-2007-2949 heap overflow. Bump PKGREVISION.lkundrak3-3/+23
2007-07-04Update to latest stable release (0.16.8.8). Changes from previous:dsieger3-13/+7
- Fix pagers when enabling after initially being disabled - Remove unused backup-....cfg stuf - Fix fallback textclass - Don't crash if trying to start when no theme is found. Add missing newline. - Fix parsing title, name, and class matches in windowmatches.cfg - Remove trailing dash in release version string - Enable setting imlib2 image cache size - Eliminate some remainders from Window re-wrapping done a while back
2007-07-03gv updated to 3.6.3.wiz2-3/+3
2007-07-03Update to 3.6.3:wiz3-34/+6
%%%%%%%%%%%%%%%%%%% GV 3.6.3 (June 2007) %%%%%%%%%%%%%%%%%%%%%%%%%%%%% # gv is now able to work with latest ghostscript: gs 8.57 # The bug causing the version not to figure in the manual has been fixed. # The SIGINT signal is now masked (ignored) by gv. # gv no more segfaults when reading a configuration file as produced by State -> Setup Options -> Save # gv should compile in non-GNU system that doesnt have glib2. The `getopt' gnulib module has been imported to fix this. # gv now correctly adjust the page index window after PAGE-UP and PAGE-DOWN events. # gv is now able to open files with minus character beginning filenames. # X resources related bugs has been fixed. gv is now able to get resources from the display database, user file, gv system database and command line doing the Right Thing (TM). # gv is now able to correctly understand DocumentMedia and other DSC directives that uses postscript strings. It was not possible with previous versions due to a bug in the postscript names scanning routine. * Vulnerability CVE-2006-5864 has been fixed. * gs is now invoked with `-dFIXEDMEDIA' * The internal gettext implementation has been renamed to `ps_gettext' to avoid collisions with the builtin `gettext' function. * --quiet and --noquiet now works as expected. ? There are troubles with 64 bits machines: the use of x-pointers to store data should be eliminated in subsequent versions.
2007-07-03xvidcore updated to 1.1.3.wiz2-3/+3
2007-07-03Update to 1.1.3:wiz3-56/+6
Changes since 1.1.2: xvidcore library * Fixed a potential vulnerability in mbcoding.c reported by Trixter Jack at Secunia (was already in patch-ac)
2007-07-03desktop-file-utils updated to 0.13.wiz2-3/+3
2007-07-03Update to 0.13:wiz3-13/+13
============ Version 0.13 ============ o rewrite validator, and update it for desktop entry specification 1.0. The validator should be stricter and report more useful messages. (Vincent) o add --warn-kde and --no-warn-deprecated command line options to desktop-file-validate (Vincent) o port desktop-file-install to GKeyFile (Vincent) o don't require --vendor for desktop-file-install (Vincent) o some general module cleanup (Vincent)
2007-07-03libwnck updated to 2.18.3.wiz2-3/+3
2007-07-03Update to 2.18.3:wiz2-6/+6
2.18.3 ====== Fixes - Fix a crash when dragging a window to somewhere like another workspace/viewport (Vincent) [#420713] - Fix crash on multihead setups (Vincent) - Improve a bit the drawing of the workspaces in the pager (Vincent)
2007-07-03+ be@latin for libwnck.wiz1-1/+5
2007-07-03Make pkgtools/digest cross-compilation ready and actually improvejoerg21-3799/+2804
portability somewhat: - consistently use POSIX uint{8,16,32,64}_t throughout the code. - asssume for now that the compiler supports ULL as suffix - use AC_TYPE_UINT{8,16,32,64}_T instead of bits.c to compute possible replacement types. Bump to 20070703. Tested by Thorsten Glaser on Interix and tnn@ on Solaris.
2007-07-03Update digest to help portability and make it cross-compilable.joerg1-1/+2
2007-07-03wesnoth updated to 1.2.5.wiz2-3/+3
2007-07-03Update to 1.2.5:wiz3-13/+21
Version 1.2.5: * campaigns: * Under the Burning Suns * new ranged attack frames for the Naga Hunter * fixed many wrong image references * updated Elyssas anims to match the "mainline" mage units * language and i18n: * new and updated manual: Serbian * updated translations: Afrikaans, Bulgarian, Chinese, Czech, Dutch, French, German, Italian, Japanese, Polish, Portuguese (Brazil), Serbian, Slovak, Slovenian, Spanish, Swedish * updated DejaVuSans font to version 2.17 * multiplayer maps: * revised maps: Den of Onis, Hamlets, Meteor Lake, Sablestone Delta, Silverhead Crossing, Blue Water Province, Wilderlands * user interface: * ability to view a list of MP servers with the Join Game dialog * misc: * corrected all wrong image references found via macroscope
2007-07-03Add cross-compilation support: realloc(NULL, x) works as expectedjoerg3-2/+203
on NetBSD, just assume that anything follows the ELF semantic and has no leading underscore. This doesn't matter much as the module support of glib is not used by pkg-config. Patch away the check for ANSI library flags as we only support ANSI C compiler anyway. Move the checks for the various inline keywords to compile-only. Always fake the poll results, it doesn't really matter either.
2007-07-03sqlite3 updated to 3.4.0.wiz2-3/+3
2007-07-03Update to 3.4.0:wiz2-6/+6
2007 June 18 (3.4.0) * Fix a bug that can lead to database corruption if an SQLITE_BUSY error occurs in the middle of an explicit transaction and that transaction is later committed. Ticket #2409. See the CorruptionFollowingBusyError wiki page for details. * Fix a bug that can lead to database corruption if autovacuum mode is on and a malloc() failure follows a CREATE TABLE or CREATE INDEX statement which itself follows a cache overflow inside a transaction. See ticket #2418. * Added explicit upper bounds on the sizes and quantities of things SQLite can process. This change might cause compatibility problems for applications that use SQLite in the extreme, which is why the current release is 3.4.0 instead of 3.3.18. * Added support for Incremental BLOB I/O. * Added the zeroblob API and the zeroblob() SQL function. * Added support for Incremental Vacuum. * Added the SQLITE_MIXED_ENDIAN_64BIT_FLOAT compile-time option to suppport ARM7 processors with goofy endianness. * Removed all instances of sprintf() and strcpy() from the core library. * Added support for International Components for Unicode (ICU) to the full-text search extensions. * In the windows OS driver, reacquire a SHARED lock if an attempt to acquire an EXCLUSIVE lock fails. Ticket #2354 * Fix the REPLACE() function so that it returns NULL if the second argument is an empty string. Ticket #2324. * Document the hazards of type coversions in sqlite3_column_blob() and related APIs. Fix unnecessary type conversions. Ticket #2321. * Internationalization of the TRIM() function. Ticket #2323 * Use memmove() instead of memcpy() when moving between memory regions that might overlap. Ticket #2334 * Fix an optimizer bug involving subqueries in a compound SELECT that has both an ORDER BY and a LIMIT clause. Ticket #2339. * Make sure the sqlite3_snprintf() interface does not zero-terminate the buffer if the buffer size is less than 1. Ticket #2341 * Fix the built-in printf logic so that it prints "NaN" not "Inf" for floating-point NaNs. Ticket #2345 * When converting BLOB to TEXT, use the text encoding of the main database. Ticket #2349 * Keep the full precision of integers (if possible) when casting to NUMERIC. Ticket #2364 * Fix a bug in the handling of UTF16 codepoint 0xE000 * Consider explicit collate clauses when matching WHERE constraints to indices in the query optimizer. Ticket #2391 * Fix the query optimizer to correctly handle constant expressions in the ON clause of a LEFT JOIN. Ticket #2403 * Fix the query optimizer to handle rowid comparisions to NULL correctly. Ticket #2404 * Fix many potental segfaults that could be caused by malicious SQL statements.
2007-07-03mercurial updated to 0.9.4.wiz2-3/+3
2007-07-03Update to 0.9.4:wiz3-17/+47
New features: * support for symlinks * improved tag handling * improved merge handling of file and directory renames * improved named branch usability * numerous improvements to commands * generic pre- and post-command hooks * improved Windows support * basic BeOS and OpenVMS support * numerous bug fixes New extensions and contributions: * extensions can now be specified in .hg/hgrc * new convert extension with CVS support * new graphlog extension * improved patchbomb extension * example FastCGI script
2007-07-03pcre updated to 7.2.wiz2-3/+3
2007-07-03Update to 7.2:wiz2-7/+6
Release 7.2 19-Jun-07 --------------------- WARNING: saved patterns that were compiled by earlier versions of PCRE must be recompiled for use with 7.2 (necessitated by the addition of \K, \h, \H, \v, and \V). Correction to the notes for 7.1: the note about shared libraries for Windows is wrong. Previously, three libraries were built, but each could function independently. For example, the pcreposix library also included all the functions from the basic pcre library. The change is that the three libraries are no longer independent. They are like the Unix libraries. To use the pcreposix functions, for example, you need to link with both the pcreposix and the basic pcre library. Some more features from Perl 5.10 have been added: (?-n) and (?+n) relative references for recursion and subroutines. (?(-n) and (?(+n) relative references as conditions. \k{name} and \g{name} are synonyms for \k<name>. \K to reset the start of the matched string; for example, (foo)\Kbar matches bar preceded by foo, but only sets bar as the matched string. (?| introduces a group where the capturing parentheses in each alternative start from the same number; for example, (?|(abc)|(xyz)) sets capturing parentheses number 1 in both cases. \h, \H, \v, \V match horizontal and vertical whitespace, respectively.
2007-07-03+ eel2-2.18.3, evince-0.8.2, evolution-2.10.3,wiz1-9/+23
evolution-data-server-1.10.3.1, evolution-exchange-2.10.3, file-roller-2.18.4, gdm-2.18.3, gnome-desktop-2.18.3, gnome-menus-2.18.3, gnome-panel-2.18.3, gnome-session-2.18.3, gnome-user-docs-2.18.2, gnucash-current-2.1.5, gtkhtml314-3.14.3, libwnck-2.18.3, nautilus-2.18.3, sylpheed-claws-2.10.0 [now claws-mail], tea-17.0.0, tuxpaint-0.9.17, wxRemind-0.9.11, xchat-2.8.4, xvidcore-1.1.3.
2007-07-03curl updated to 7.16.3.wiz2-3/+3
2007-07-03Update to 7.16.3:wiz2-6/+6
Version 7.16.3 (25 June 2007) Daniel S (23 June 2007) - As reported by "Tro" in http://curl.haxx.se/mail/lib-2007-06/0161.html and http://curl.haxx.se/mail/lib-2007-06/0238.html, libcurl didn't properly do no-body requests on FTP files on re-used connections properly, or at least it didn't provide the info back in the header callback properly in the subsequent requests. Daniel S (21 June 2007) - Gerrit Bruchhäuser pointed out a warning that the Intel(R) Thread Checker tool reports and it was indeed a legitimate one and it is one fixed. It was a use of a share without doing the proper locking first. Daniel S (20 June 2007) - Adam Piggott filed bug report #1740263 (http://curl.haxx.se/bug/view.cgi?id=1740263). Adam discovered that when getting a large amount of URLs with curl, they were fetched slower and slower... which turned out to be because the --libcurl data collecting which wrongly always was enabled, but no longer is... Daniel S (18 June 2007) - Robson Braga Araujo filed bug report #1739100 (http://curl.haxx.se/bug/view.cgi?id=1739100) that mentioned that libcurl could not actually list the contents of the root directory of a given FTP server if the login directory isn't root. I fixed the problem and added three test cases (one is disabled for now since I identified KNOWN_BUGS #44, we cannot use --ftp-method nocwd and list ftp directories). Daniel S (14 June 2007) - Shmulik Regev: I've encountered (and hopefully fixed) a problem involving proxy CONNECT requests and easy handles state management. The problem isn't simple to reproduce since it depends on socket state. It only manifests itself when working with non-blocking sockets. Here is the scenario: 1. in multi_runsingle the easy handle is in the CURLM_STATE_WAITCONNECT and calls Curl_protocol_connect 2. in Curl_proxyCONNECT, line 1247, if the socket isn't ready the function returns and conn->bits.tunnel_connecting is TRUE 3. when the call to Curl_protocol_connect returns the protocol_connect flag is false and the easy state is changed to CURLM_STATE_PROTOCONNECT which isn't correct if a proxy is used. Rather CURLM_STATE_WAITPROXYCONNECT should be used. I discovered this while performing an HTTPS request through a proxy (squid) on my local network. The problem caused openssl to fail as it read the proxy response to the CONNECT call ('HTTP/1.0 Established') rather than the SSL handshake (the exact openssl error was 'wrong ssl version' but this isn't very important) - Dave Vasilevsky filed bug report #1736875 (http://curl.haxx.se/bug/view.cgi?id=1736875) almost simultanouesly as Dan Fandrich mentioned a related build problem on the libcurl mailing list: http://curl.haxx.se/mail/lib-2007-06/0131.html. Both problems had the same reason: the definitions of the POLL* defines and the pollfd struct in the libcurl code was depending on HAVE_POLL instead of HAVE_SYS_POLL_H. Daniel S (13 June 2007) - Tom Regner provided a patch and worked together with James Housley, so now CURLOPT_FTP_CREATE_MISSING_DIRS works for SFTP connections as well as FTP ones. - Rich Rauenzahn filed bug report #1733119 (http://curl.haxx.se/bug/view.cgi?id=1733119) and we collaborated on the fix. The problem is that for 64bit HPUX builds, several socket-related functions would still assume int (32 bit) arguments and not socklen_t (64 bit) ones. Daniel S (12 June 2007) - James Housley brought his revamped SSH code that is state-machine driven to really take advantage of the now totally non-blocking libssh2 (in CVS). Dan F (8 June 2007) - Incorporated Daniel Black's test706 and test707 SOCKS test cases. - Fixed a few problems when starting the SOCKS server. - Reverted some recent changes to runtests.pl that weren't compatible with perl 5.0. - Fixed the test harness so that it actually kills the ssh being used as the SOCKS server. Daniel S (6 June 2007) - -s/--silent can now be used to toggle off the silence again if used a second time. Daniel S (5 June 2007) - Added Daniel Black's work that adds the first few SOCKS test cases. I also fixed two minor SOCKS problems to make the test cases run fine. Daniel S (31 May 2007) - Feng Tu made (lib)curl support "upload" resuming work for file:// URLs. Daniel S (30 May 2007) - I modified the 10-at-a-time.c example to transfer 500 downloads in parallel with a c-ares enabled build only to find that it crashed miserably, and this was due to some select()isms left in the code. This was due to API restrictions in c-ares 1.3.x, but with the upcoming c-ares 1.4.0 this is no longer the case so now libcurl runs much better with c-ares and the multi interface with > 1024 file descriptors in use. Extra note: starting now we require c-ares 1.4.0 for asynchronous name resolves. - Added CURLMOPT_MAXCONNECTS which is a curl_multi_setopt() option for setting the maximum size of the connection cache maximum size of the multi handle. Daniel S (27 May 2007) - When working with a problem Stefan Becker had, I found an off-by-one buffer overwrite in Curl_select(). While fixing it, I also improved its performance somewhat by changing calloc to malloc and breaking out of a loop earlier (when possible). Daniel S (25 May 2007) - Rob Crittenden fixed bug #1705802 (http://curl.haxx.se/bug/view.cgi?id=1705802), which was filed by Daniel Black identifying several FTP-SSL test cases fail when we build libcurl with NSS for TLS/SSL. Listed as #42 in KNOWN_BUGS. Daniel S (24 May 2007) - Song Ma filed bug report #1724016 (http://curl.haxx.se/bug/view.cgi?id=1724016) noticing that downloading glob-ranges for TFTP was broken in CVS. Fixed now. - 'mytx' in bug report #1723194 (http://curl.haxx.se/bug/view.cgi?id=1723194) pointed out that the warnf() function in the curl tool didn't properly deal with the cases when excessively long words were used in the string to chop up. Daniel S (22 May 2007) - Andre Guibert de Bruet fixed a memory leak in the function that verifies the peer's name in the SSL certificate when built for OpenSSL. The leak happens for libcurls with CURL_DOES_CONVERSIONS enabled that fail to convert the CN name from UTF8. He also fixed a leak when PKCS #12 parsing failed. Daniel S (18 May 2007) - Feng Tu reported that curl -w did wrong on TFTP transfers in bug report #1715394 (http://curl.haxx.se/bug/view.cgi?id=1715394), and the transfer-related info "variables" were indeed overwritten with zeroes wrongly and have now been adjusted. The upload size still isn't accurate. Daniel S (17 May 2007) - Feng Tu pointed out a division by zero error in the TFTP connect timeout code for timeouts less than five seconds, and also provided a fix for it. Bug report #1715392 (http://curl.haxx.se/bug/view.cgi?id=1715392) Dan F (16 May 2007) - Added support for compiling under Minix 3.1.3 using ACK. Dan F (14 May 2007) - Added SFTP directory listing test case 613. - Added support for quote commands before a transfer using SFTP and test case 614. - Changed the post-quote commands to occur after the transferred file is closed. - Allow SFTP quote commands chmod, chown, chgrp to set a value of 0. Dan F (9 May 2007) - Kristian Gunstone fixed a problem where overwriting an uploaded file with sftp didn't truncate it first, which would corrupt the file if the new file was shorter than the old. Dan F (8 May 2007) - Added FTPS test cases 406 and 407 Daniel S (8 May 2007) - CURLE_FTP_COULDNT_STOR_FILE is now known as CURLE_UPLOAD_FAILED. This is because I just made SCP uploads return this value if the file size of the upload file isn't given with CURLOPT_INFILESIZE*. Docs updated to reflect this news, and a define for the old name was added to the public header file. Daniel S (7 May 2007) - James Bursa fixed a bug in the multi handle code that made the connection cache grow a bit too much, beyond the normal 4 * easy_handles. Daniel S (2 May 2007) - Anders Gustafsson remarked that requiring CURLOPT_HTTP_VERSION set to 1.0 when CURLOPT_HTTP200ALIASES is used to avoid the problem mentioned below is not very nice if the client wants to be able to use _either_ a HTTP 1.1 server or one within the aliases list... so starting now, libcurl will simply consider 200-alias matches the to be HTTP 1.0 compliant. - Tobias Rundström reported a problem they experienced with xmms2 and recent libcurls, which turned out to be the 25-nov-2006 change which treats HTTP responses without Content-Length or chunked encoding as without bodies. We now added the conditional that the above mentioned response is only without body if the response is HTTP 1.1. - Jeff Pohlmeyer improved the hiperfifo.c example to use the CURLMOPT_TIMERFUNCTION callback option. - Set the timeout for easy handles to expire really soon after addition or when CURLM_CALL_MULTI_PERFORM is returned from curl_multi_socket*/perform, to make applications using only curl_multi_socket() to properly function when adding easy handles "on the fly". Bug report and test app provided by Michael Wallner. Dan F (30 April 2007) - Improved the test harness to allow running test servers on other than the default port numbers, allowing more than one test suite to run simultaneously on the same host. Daniel S (28 April 2007) - Peter O'Gorman fixed libcurl to not init GnuTLS as early as we did before, since it then inits libgcrypt and libgcrypt is being evil and EXITS the application if it fails to get a fine random seed. That's really not a nice thing to do by a library. - Frank Hempel fixed a curl_easy_duphandle() crash on a handle that had been removed from a multi handle, and then fixed another flaw that prevented curl_easy_duphandle() to work even after the first fix - the handle was still marked as using the multi interface. Daniel S (26 April 2007) - Peter O'Gorman found a problem with SCP downloads when the downloaded file was 16385 bytes (16K+1) and it turned out we didn't properly always "suck out" all data from libssh2. The effect being that libcurl would hang on the socket waiting for data when libssh2 had in fact already read it all... Dan F (25 April 2007) - Added support in runtests.pl for "!n" test numbers to disable individual tests. Changed -t to only keep log files around when -k is specified, to have the same behaviour as without -t. Daniel S (25 April 2007) - Sonia Subramanian brought our attention to a problem that happens if you set the CURLOPT_RESUME_FROM or CURLOPT_RANGE options and an existing connection in the connection cache is closed to make room for the new one when you call curl_easy_perform(). It would then wrongly free range-related data in the connection close funtion. Yang Tse (25 April 2007) - Steve Little fixed compilation on VMS 64-bit mode Daniel S (24 April 2007) - Robert Iakobashvili made the 'master_buffer' get allocated first once it is can/will be used as it then makes the common cases save 16KB of data for each easy handle that isn't used for pipelining. Dan F (23 April 2007) - Added <postcheck> support to the test harness. - Added tests 610-612 to test more SFTP post-quote commands. Daniel S (22 April 2007) - Song Ma's warning if -r/--range is given with a "bad" range, also noted in the man page now. - Daniel Black filed bug #1705177 (http://curl.haxx.se/bug/view.cgi?id=1705177) where --without-ssl --with-gnutl outputs a warning about SSL not being enabled even though GnuTLS was found and used. Daniel S (21 April 2007) - Daniel Black filed bug #1704675 (http://curl.haxx.se/bug/view.cgi?id=1704675) identifying a double-free problem in the SSL-dealing layer, telling GnuTLS to free NULL credentials on closedown after a failure and a bad #ifdef for NSS when closing down SSL. Yang Tse (20 April 2007) - Save one call to curlx_tvnow(), which calls gettimeofday(), in each of Curl_socket_ready(), Curl_poll() and Curl_select() when these are called with a zero timeout or a timeout value indicating a blocking call should be performed. Daniel S (18 April 2007) - James Housley made SFTP uploads use libssh2's non-blocking API - Prevent the internal progress meter from updating more frequently than once per second. Dan F (17 April 2007) - Added test cases 296, 297 and 298 to test --ftp-method handling Daniel S (16 April 2007) - Robert Iakobashvil added curl_multi_socket_action() to libcurl, which is a function that deprecates the curl_multi_socket() function. Using the new function the application tell libcurl what action that was found in the socket that it passes in. This gives a significant performance boost as it allows libcurl to avoid a call to poll()/select() for every call to curl_multi_socket*(). I added a define in the public curl/multi.h header file that will make your existing application automatically use curl_multi_socket_action() instead of curl_multi_socket() when you recompile. But of course you'll get better performance if you adjust your code manually and actually pass in the correct action bitmask to this function. Daniel S (14 April 2007) - Jay Austin added "DH PARAMETERS" to the stunnel.pem certificate for the test suite to make stunnel run better in some (most?) environments. Dan F (13 April 2007) - Added test cases 294 and 295 to test --ftp-account handling - Improved handling of out of memory in ftp. Yang Tse (13 April 2007) - Fix test case 534 which started to fail 2007-04-13 due to the existance of a new host on the net with the same silly domain the test was using for a host which was supposed not to exist. Daniel S (12 April 2007) - Song Ma found a memory leak in the if2ip code if you pass in an interface name longer than the name field of the ifreq struct (typically 6 bytes), as then it wouldn't close the used dummy socket. Bug #1698974 (http://curl.haxx.se/bug/view.cgi?id=1698974)
2007-07-03Updated sysutils/mklivecd to 0.15.3xtraeme1-1/+3
2007-07-03Update to 0.15.3:xtraeme3-8/+8
Remove -nobak from MKISOFS_ARGS, which is not available on newer cdrtools versions. Pointed out by Zafer Aydogan, thanks.
2007-07-03Note update of net/p5-Net-DNS pacakge to 0.60.taca1-1/+2
2007-07-03Update p5-Net-DNS package to 0.60.taca2-6/+6
Changes are more than 100 lines, but it fixes these security problem. http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3377 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3409
2007-07-03Fix typo. Thanks schmonz@joerg2-4/+4
2007-07-03Updated security/amavisd-new to 2.5.2xtraeme2-3/+3
2007-07-03Update to 2.5.2:xtraeme2-6/+6
BUG FIXES - in a milter setup log_id was left undefined, which resulted in log lines without id, and a SQL constraint violation "Column 'am_id' cannot be null" when logging to SQL was enabled. The bug was introduced in 2.5.1; problem reported by Martin Svensson; - suppress a quarantining attempt if the message also needs to be archived to the same location (same sql key or same local filename); reported by Wazir Shpoon; - adjust $socketname in amavisd-release to match its default counterpart in amavisd (i.e. /var/amavis/amavisd.sock); reported by Stanley Appel; And more... please review the Changelog file.
2007-07-03Note update of the "phpmyadmin" package to version 2.10.2.tron2-3/+3
2007-07-03Update "phpmyadmin" package to version 2.10.2.tron2-6/+6
The new version fixes several bugs and addresses the security vulerability reported in PMASA-2007-4.
2007-07-03Override CHECK_PERMS for checkperms and its dependency digest.joerg2-3/+9
This allows making it a real dependency for bulk builds.
2007-07-03Add common handling for libresolv similiar to dlopen(3) wrapping.joerg13-24/+169
For now, DragonFly and FreeBSD use the libc version, it is not reentrant, but thread-safe. NetBSD 3.0+ and Darwin 8.0+ use libresolv from base (the BIND9 resolver), all other fall back to net/bind9. Feel free to add your favorite platform if it has a thread-safe resolver in base. Modify mail/libspf-alf, mail/milter-greylist, mail/spamdyke and net/nocol accordingly. Testing on !DragonFly and feedback from tron@
2007-07-03Wire down malloc(0) != NULL for more Xorg packages on NetBSD.joerg3-3/+21
2007-07-03Update net/citrix_ica to 10.6.115659sborrill1-1/+2
2007-07-03Update to version 10.6.115659 of Linux client. Changes are:sborrill2-7/+7
Build Fix 1 Fixes a failure to disconnect the session if the smart card used for logon is removed during a reconnected session with a server running Citrix Presentation Server version version 4.0. (Hotfix Rollup Pack 3 or later must be installed on the server.) Corrects problems that prevent the client from running on Ubuntu Linux version 6.10. This build also includes all fixes from versions 9.43 to 9.49. 9.43: Fixes a problem that prevented the Microsoft Windows "Snap To" mouse option from working. 9.44: Ensures that the maximization state of seamless windows is correctly restored when they are maximized after being reduced to icon size. Adds a "TWIConfineToWorkArea" configuration option that can be set "Off" to allow seamless windows to be moved outside the work area. Also adds configuration parameters "PointerGrabTime" and "PointerClickTime" to set two timer parameters for pointer position echo suppression. They control the period after a mouse position report is sent during which any server-originated positions are discarded as echoes, and the period after a mouse click during which all server positions are accepted as a response to the click. Values are in milliseconds. 9.45: Citrix internal build. 9.46: Corrects an error in the treatment of the "BrowserTimeout" parameter that was introduced in build 9.20. The SCardListReaders function can now be called with a null context parameter when using the smart card virtual channel. The pnabrowse utility now enumerates applications correctly when $HOME/.ICAClient has not been populated. 9.47: Improves the change to pointer positioning introduced in version 9.43 and prevents client work-area information from having an effect in non-seamless sessions. Corrects an error in the pnabrowse utility that stopped it working with some server configurations. 9.48: Corrects the modification time of files edited using client drive mapping. Corrects an error in the pnabrowse utility that could stop it launching published applications. 9.49: Corrects an error that may inhibit session sharing when one seamless session is started within a few seconds of another. Adds special behaviour to the smart card virtual channel to correct problems with a particular application following session reconnection. That is controlled by a new configuration parameter "UCSCWAMap", and is normally disabled. 2 Causes tear-off menus from Microsoft Windows applications to vanish correctly when the application loses focus. Improves the drawing performance with seamless windows, particularly in 256-color sessions with multiple windows. Adds workspace control operations to the pnabrowse utility. 3 Fixes incorrect use of SSL error message 47. 4 Enlarges the sensitive area of notification area icons, improves text parameter handling in locales using the ISO 8859-15 character set and improves reconnection to multiple sessions using pnabrowse. 5 Fixes a font problem when using Ubuntu Linux version 7, and the appearance of some application icons in non-seamless sessions. Corrects Program Neighborhood's handling of 8-bit characters in user and client names when using non-UTF8 locales. Corrects the behaviour of seamless sessions started by Web Interface or Program Neighborhood Agent, when the default session type is full screen. 6 Updated for release to Web.
2007-07-03Include Makefile.common earlier to get the PKG_OPTIONS handling right.joerg1-3/+2
From Tomofumi Hayashi.
2007-07-03Fixed security issues CVE-2005-1704 and CVE-2005-1705 in gdb5.lkundrak1-1/+2