Age | Commit message (Collapse) | Author | Files | Lines |
|
chat/pidgin-otr: security update
Revisions pulled up:
- chat/pidgin-otr/Makefile 1.25 via patch
- chat/pidgin-otr/distinfo 1.3
---
Module Name: pkgsrc
Committed By: wiz
Date: Wed May 16 14:36:18 UTC 2012
Modified Files:
pkgsrc/chat/pidgin-otr: Makefile distinfo
Log Message:
Update to 3.2.1 (security update):
2012-05-14
* INSTALL: Fixing typo and updating reference to CVS.
* Makefile.mingw, packaging/windows/pidgin-otr.nsi:
Updating to support building the win32 installer on
GNU/Linux.
2012-05-12
* otr-plugin.c: Fixing a format string vulnerability.
Identified by intrigeri <intrigeri@boum.org>.
* Makefile.mingw, README, configure.ac, pidgin-otr.nsi:
Bumped version number to 3.2.1.
2010-03-02
* po/vi.po: Vietnamese translation from Lyndon Johnson
<lyndon.johnson58@gmail.com>
2009-11-14
* gtk-dialog.c (add_to_vbox_verify_fingerprint): Make
the fingerprints in the manual authentication dialog
selectable (but not selected by default).
2009-08-24
* po/fr.po: Fixed \n errors
2009-07-20
* po/fr.po: Complete French translation from Solveig
<perso@solveig.org>
2009-06-24
* po/fr.po: Spelling correction from intrigeri
<intrigeri@boum.org>
2009-03-18
* po/sv.po: Swedish translation from Daniel Nylander
<po@danielnylander.se>
2009-01-18
* po/pl.po: Polish translation from Paweł Czochański
<czochanski@gmail.com>
2008-09-24
* po/it.po: Italian translation from Vincenzo Reale
<smart2128@baslug.org>.
2008-07-10
* otr-plugin.c: Use /dev/urandom to generate keys instead of
/dev/random. [Really: on non-Win32, call
gcry_control(GCRYCTL_ENABLE_QUICK_RANDOM, 0); before OTRL_INIT;.]
2008-07-07
* gtk-conv.c: Don't delete the OTR menus if a non-foreground
conversation window is closed.
2008-06-19
* Makefile.static: Forgot to add tooltipmenu.o to
Makefile.static. Fixed.
2008-06-17
* otr-plugin.c: Except on WIN32, set the umask to 0077 before
creating the otr.* files in the purple directory so that they
end up mode 0600. Based on a patch from Caspar Clemens Mierau
<damokles@ubuntu.com>.
* po/de.po: Updated German translation from Michael Meier
<mail@code.mmsources.de>.
|
|
Mark packages as broken.
Revisions pulled up:
- chat/centericq/Makefile 1.76
- devel/ArX/Makefile 1.33
- lang/gcc3-java/Makefile 1.28
- lang/gcc3/Makefile 1.66
- misc/jitterbug/Makefile 1.35
- www/sope/Makefile 1.18
---
Module Name: pkgsrc
Committed By: dholland
Date: Sat Apr 7 17:31:12 UTC 2012
Modified Files:
pkgsrc/chat/centericq: Makefile
Log Message:
Mark BROKEN; has not been buildable in some years. Will be removed in
due course unless someone fixes it. (Successor is chat/centerim.)
---
Module Name: pkgsrc
Committed By: dholland
Date: Sat Apr 7 17:32:40 UTC 2012
Modified Files:
pkgsrc/devel/ArX: Makefile
Log Message:
Mark BROKEN; has not been buildable (in various differing ways) for
some time. Will be removed in due course unless someone fixes it.
Dead upstream; no successor. If you need this, speak up on pkgsrc-users.
---
Module Name: pkgsrc
Committed By: dholland
Date: Sat Apr 7 17:33:54 UTC 2012
Modified Files:
pkgsrc/lang/gcc3: Makefile
Log Message:
Disable gcc3-java as it does not build, has not built in years, and
attempts to fix it have failed.
---
Module Name: pkgsrc
Committed By: dholland
Date: Sat Apr 7 17:34:31 UTC 2012
Modified Files:
pkgsrc/lang/gcc3-java: Makefile
Log Message:
Mark BROKEN. Has not built in a long time if ever; attempts to fix it
have failed. Also, gcc3 is obsolete.
---
Module Name: pkgsrc
Committed By: dholland
Date: Sat Apr 7 17:35:09 UTC 2012
Modified Files:
pkgsrc/misc/jitterbug: Makefile
Log Message:
Mark BROKEN; is not buildable and is dead upstream. Will be removed in
due course.
---
Module Name: pkgsrc
Committed By: dholland
Date: Sat Apr 7 17:36:40 UTC 2012
Modified Files:
pkgsrc/www/sope: Makefile
Log Message:
Mark BROKEN; has not been buildable in years. Will be removed in due
course unless fixed. As far as anyone has been able to figure out so
far, this is actually an older version of devel/SOPE.
|
|
(fixes CVE-2011-3594, CVE-2011-4601, CVE-2011-4602, CVE-2011-4603, CVE-2011-4939
and CVE-2012-1178)
version 2.10.3 (03/26/2012):
* Fix buddies not going offline.
version 2.10.2 (03/14/2012):
General:
* Fix compilation when using binutils 2.22 and new GDK pixbuf. (#14799)
* Fix compilation of the MXit protocol plugin with GLib 2.31. (#14773)
Pidgin:
* Add support for the GNOME3 Network dialog. (#13882)
* Fix rare crash. (#14392)
* Add support for the GNOME3 Default Application dialog for configuring
the Browser.
libpurple:
* Support new connection states and signals for NetworkManager 0.9+.
(Dan Williams) (#13859)
AIM and ICQ:
* Fix a possible crash when receiving an unexpected message
from the server. (Thijs Alkemade) (#14983)
* Allow signing on with usernames containing periods and
underscores. (#13500)
* Allow adding buddies containing periods and underscores. (#13500)
* Don't try to format ICQ usernames entered as email addresses.
Gets rid of an "Unable to format username" error at login. (#13883)
MSN:
* Fix possible crashes caused by not validating incoming messages as
UTF-8. (Thijs Alkemade) (#14884)
* Support new protocol version MSNP18. (#14753)
* Fix messages to offline contacts. (#14302)
Windows-Specific Changes:
* Fix the installer downloading of spell-checking dictionaries (#14612)
* Fix compilation of the Bonjour protocol plugin. (#14802)
Plugins:
* The autoaccept plugin will no longer reset the preference for unknown
buddies to "Auto Reject" in certain cases. (#14964)
version 2.10.1 (12/06/2011):
Finch:
* Fix compilation on OpenBSD.
AIM and ICQ:
* Fix remotely-triggerable crashes by validating strings in a few
messages related to buddy list management. Thanks to Evgeny Boger
for reporting this! (#14682)
Bonjour:
* IPv6 fixes (Linus Lüssing)
Gadu-Gadu:
* Fix problems linking against GnuTLS. (#14544)
IRC:
* Fix a memory leak when admitting UTF-8 text with a non-UTF-8 primary
encoding. (#14700)
Jabber:
* Fix crashes and memory leaks when receiving malformed voice
and video requests. Thanks to Thijs Alkemade for reporting this!
Sametime:
* Separate "username" and "server" when adding new Sametime accounts.
(#14608)
* Fix compilation in Visual C++. (#14608)
SILC:
* Fix CVE-2011-3594, by UTF-8 validating incoming messages before
passing them to glib or libpurple. Identified by Diego Bauche
Madero from IOActive. (#14636)
Yahoo!:
* Fetch buddy icons in some cases where we previously weren't. (#13050)
Windows-Specific Changes:
* Fix compilation
|
|
- Added dependency p5-Test-Differences
Changes:
6.78 Wed Dec 7 20:29:45 GMT 2011
- Prevent an IPv6 test failure
6.77 Fri Dec 2 03:55:14 GMT 2011
- Prevent a test failure in 06_online.t if the host is K-lined
6.76 Tue Nov 29 03:24:55 GMT 2011
- DCC.pm: Fix DCC RESUME, it was broken
- NickReclaim.pm: Make it more robust and prevent an error from being
raised when we quit from IRC.
|
|
converters/libiconv, which did break on NetBSD. Instead, disable nls
explicitly and set CFLAGS.SunOS when using gcc>=4.6.
|
|
- Added CIDR support to eggdrop. This includes accepting and matching b/e/I
masks and user hosts in cidr notation.
- Added a msg-rate config variable, to replace the current #define msgrate
in server.mod.
- Replaced most dns.mod preprocessor definitions with config variables.
- Added a configure option to set the handlen while keeping compatibility with
the older method of editing eggdrop.h directly.
- Explicitly offer both --enable-tcl-threads and --disable-tcl-threads
configure options that can forcefully enable or disable threaded Tcl
library support.
- Fixed a remote DoS in the CTCP parsing code introduced by the servmsg.c
buffer overflow patch by Nico Golde.
Reference: CVE-2009-1789
- Work around Tcl8.5.10 bug 3371644 (strings starting with # could crash
in Tcl_ConvertElement()).
- tcl_maskhost could crash the bot.
- Fixed a potential crash in read_lang() with lines > 512 characters in
language files. Added support for lines of unlimited size.
- Fixed dns.mod SIGBUS crashes on 64-bit Sparc.
- Fixed a crash when restarting, related to bind log.
|
|
|
|
It may break installed header files from gst-plugins0.10-base as PR 46229.
|
|
A brief selection of highlights since v1.3.1:
* URL and email detection in text views has been rewritten from scratch, greatly
improving the handling of various types of URLs and the contexts they might
appear in.
* Extensive improvements to IRC formatting code handling, including the return
of background color support.
* Extensive, sometimes full rewrites of user interface elements such as nearly
all context menus, the URL Catcher and the Warning Dialogs system for a long
list of user interface improvements and bug fixes.
* Improved SSL connection behavior.
* Translation support and various other improvements in several bundled scripts.
* Expanded Python scripting support via the introduction of an API support
package.
* Support for more IRC numerics.
* Various bugfixes to input line command handling and connection behavior.
|
|
|
|
|
|
|
|
Bump PKGREVISION.
|
|
|
|
|
|
Bump PKGREVISION.
|
|
py-* not affected, since it built different versions depending on the
setting already.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
--without-iconv is not enough.
|
|
invoking libtool twice, creating a library with most of the objects
missing.
|
|
anymore, probably due to seemingly innocuous changes to
gobject-introspection, from Patrick Welche per PM
cvs: ----------------------------------------------------------------------
|
|
(Some systems have a 'nogroup' instead of a 'nobody' group.)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
of a strchr(const char *, int c) call a constant.
|
|
|
|
a) tiff update to 4.0 (shlib major change)
b) glib2 update 2.30.2 (adds libffi dependency to buildlink3.mk)
Enjoy.
|
|
|
|
|
|
0.5 (2012-01-20)
- cmake support (autoconf still supported)
- portability fixes
|
|
GNU_CONFIGURE_LIBDIR or GNU_CONFIGURE_LIBSUBDIR.
|
|
* Stop to treat NetBSD's sed as GNU sed, not full compatible.
* Then, no need to reset TOOLS_PLATFORM.gsed for NetBSD if USE_TOOLS+=gsed and
real GNU sed is required.
* In addition, convert simple USE_TOOLS+=gsed to conditionally, without NetBSD.
* convert {BUILD_,}DEPENDS+=gsed to USE_TOOLS, all tools from gsed are real gsed.
|
|
|