| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
security fix for php
- pkgsrc/lang/php5/Makefile 1.56
- pkgsrc/lang/php5/distinfo 1.45
- pkgsrc/lang/php5/patches/patch-ad 1.1
- pkgsrc/lang/php5/patches/patch-ae 1.1
- pkgsrc/www/ap-php/Makefile 1.15
- pkgsrc/www/php4/Makefile 1.79
- pkgsrc/www/php4/distinfo 1.66
- pkgsrc/www/php4/patches/patch-aw 1.3
Module Name: pkgsrc
Committed By: taca
Date: Wed Aug 1 01:40:55 UTC 2007
Modified Files:
pkgsrc/www/php4: Makefile distinfo
Added Files:
pkgsrc/www/php4/patches: patch-aw
Log Message:
Add patches to fix CVE-2007-3806 referring CVS repository.
Bump PKGREVISION.
---
Module Name: pkgsrc
Committed By: taca
Date: Wed Aug 1 01:40:08 UTC 2007
Modified Files:
pkgsrc/lang/php5: Makefile distinfo
Added Files:
pkgsrc/lang/php5/patches: patch-ad patch-ae
Log Message:
- Add patches to fix CVE-2007-3806 referring CVS repository.
- Fix compile problem on NetBSD with mremap(2).
Bump PKGREVISION.
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Aug 2 15:10:04 UTC 2007
Modified Files:
pkgsrc/www/ap-php: Makefile
Log Message:
Update of www/php5 package affects ap-php, too.
So, bump PKGREVISION.
(I just forgot to commit.)
|
|
|
|
we don't have it and a replacement for isinf() (the function that sunmath
was used for) is compiled in.
|
|
|
|
|
|
In this case, the += operator appears in an embedded AWK script, so it
is ok.
|
|
|
|
PKGREVISION++
Ok'ed by wiz.
|
|
|
|
conflicting files.
|
|
collect users' e-mail addresses.. Bad developers, bad! No cookie!
|
|
|
|
Patch provided by Holger Weiss in PR 36333.
And specify more platform target.
This release fixes all known bugs in 5.1.1.
|
|
PR pkg/36492.
|
|
For GNU Emacs Version 21.2, not for 20.3, sice updated to 21-2.8.
|
|
fails.
|
|
|
|
|
|
are present if the complex.h header exists. csqrt on the contrary
is actively checked. For now, disable complex double handling on
DragonFly to work around this.
|
|
in lang/guile16. Many, many changes since the last 1.6.x release including
bug fixes, build fixes, and many feature additions. See the NEWS file for the
full (> 1,000 lines) list of changes.
|
|
Magnus Henoch mange()freemail.hu who sent fixes upstream.
Nuke post-patch target and files/* that we no longer need. Tested on
my macppc.
ok agc@
|
|
|
|
support for this before, probably unintentionally.
|
|
|
|
|
|
Patch provided by Yorick Hardy in PR 36335.
And added test target (but fail if effective user == root direcoty owner).
Release notes for version 1.6
* Additions:
o An autogen.sh script for generating the various generated files from source was added.
o Infrastructure for creating, running and composing test suites was added. As a result, "make check" now runs more tests than before.
o It is now possible for adventurous users to run the linker in PLT Scheme.
* Changes:
o make image now assumes a Unicode-capable Scheme 48.
* Bug fixes:
o A bug where automatic port-flushing would churn trying to write to a blocking socket was fixed.
o An infinite loop upon (/ 0.0 0.0) was fixed. (reported by Taylor Campbell)
o A bug that made system unusable was fixed. (reported by Marco Benelli)
o A bug with package mutation, which made running the PreScheme compiler on the VM break was fixed.
o Bugs related to the conversion between OS strings and strings on command-line handling were fixed. (reported by Andreas Rottmann)
o Compilation using gcc now uses the -munaligned-doubles flag where available, which is needed on SPARCs to make floating-point arithmetic work.
o Compilation older versions Cygwin that don't have langinfo.h should be fixed.
o Some problems with installing and running on Windows Vista were fixed. (thanks to Axel T. Schreiner)
Release notes for version 1.5
* Additions:
o Comprehensive Unicode support was added. See the manual for details.
o An implementation of SRFI 19 was added. (thanks to Emilio Lopes)
o Syntax-rules now supports vector patterns and templates.
o The ,bound? command now produces more output. (thanks to Taylor Campbell)
* Changes:
o Many of the POSIX procedures that accepted or returned strings previously now accept or return OS strings. See the manual for details.
o The ,build command now accepts a procedure that will be called with a list of OS strings rather than regular strings.
o The ascii->char and char->ascii procedures from the ascii structure covers only ASCII (codes 0-127) now. (Previously, the range included 128-255 as well.)
* Bug fixes:
o A bug with package mutation was fixed. (reported by Taylor Campbell)
Release notes for version 1.4
* Additions:
o Regexp? is now exported from the rexexps structure.
o SRFIs 4, 39, 40, 43, 43, 60, 61, 63, 66, 67, 71, 78 (mostly thanks to David Van Horn)
o In the command processor, switches were generalized to settings, specifically to customize various printing parameters. See the manual for details.
o A generic byte-code parser was added to the system; the disassembler uses it.
o A reinitializers for register actions to be performed after resuming an image was added.
o A variable-arguments-lists structure implementing a macro for dealing with optional default parameters was added.
o A get-interrupt-handler procedure was added.
o An --enable-universal-binary option was added to configure to facilitate building universal binaries on Mac OS X. (thanks to Eric Knauel)
o The C code now has access to enum sets.
* Changes:
o File-options (in the POSIX libary) are now enum sets; this allows using enum-set operations on them.
o Various changes were made to the VM to enable native-code compilation.
o Socket addresses are always reusable.
o 1+ and 1- are no longer valid identifiers.
o The ordering of in/out thunks of dynamic-wind was changed to be consistent with itself and with the upcoming R6RS.
o The Windows build is now done using Visual Studio 2005.
* Bug fixes:
o Macro-defining macros now work in PreScheme.
o Opening a file for both read and write via the POSIX libraries wouldn't work correctly. (Reported by Andreas Rottmann.)
o PreScheme's copy-memory! now works for overlapping regions.
o Various C compilation problems were fixed.
o cmuscheme48.el should now work under GNU Emacs as well as XEmacs.
o Numerous problems with floating-point arithmetic were fixed.
o A race condition with queues was fixed. (thanks to David Frese)
o Part of script messages were printed on stdout rather than stderr; fixed. (thanks to Andreas Rottmann)
o A shadowing bug in the debugging package was fixed. (thanks to Taylor Campbell)
o A bug in the CML sync-group primitive was fixed. (thanks to Heath Putnam)
o Various errors in SRFI 13 were fixed.
o A bug in the auto-integrator was fixed. (thanks to Taylor Campbell)
o A bug in load-dynamic-externals was fixed. (thanks to Taylor Campbell)
o Several bugs in vector-merge were fixed. (reported by Matthias Radestock)
o The CML wrap was made correctly tail-recursive. (reported by Heath Putnam)
o A bug in the PreScheme C backend, that would sometimes incorrectly delete tail calls without a return value, was fixed. (reported by Eric Merritt)
o Several bugs in interface walking were fixed. (reported by Taylor Campbell)
o A bug in the PreScheme compiler affecting the removal of unused procedures was fixed. (thanks to Eric Knauel)
o Some precedence bugs in the C stubgs for the regexp code were fixed. (thanks to Matthew Dempsky)
o A bug in the regexps package for regexps without submatches was fixed.
o (set-current-proposal! (current-proposal)) no longer raises an exception. (thanks to Taylor Campbell)
o A bug in package caching was fixed. (thanks to Taylor Campbell)
o A bug in the generation of environment maps was fixed. (thanks to Taylor Campbell)
o The Windows installer package should now work even on systems that have delayed variable expansion on by default. (thanks to Emilio Lopes)
o Exception handlers that return from raise are now handled correctly. (reported by Norbert Freudemann)
|
|
Based on patch provided by Yorick Hardy in PR 36334, I ajust patch files.
2.41 (2006-10-13)
=================
User visible changes
--------------------
* New module libsvm interfaces to <http://www.csie.ntu.edu.tw/~cjlin/libsvm>
and makes Support Vector Machines available in CLISP.
See <http://clisp.cons.org/impnotes/libsvm.html> for details.
* The same internal interface now handles FFI forms DEF-CALL-OUT and
DEF-C-VAR regardless of the presence of the :LIBRARY argument.
(:LIBRARY NIL) is now identical to omitting the :LIBRARY argument.
The default for the :LIBRARY argument is provided by
FFI:*DEFAULT-FOREIGN-LIBRARY* (bound in a compilation unit).
See <http://clisp.cons.org/impnotes/dffi.html#dffi-default-lib> for details.
* Bug fixes:
+ DOCUMENTATION on built-in functions was broken on some platforms.
[ 1569234 ]
+ Fixed FFI callbacks, broken since the 2.36 release.
+ Fixed the way the top-level driver handles the "--" option terminator.
+ Fixed COMPILE of APPLY in LABELS for local function. [ 1575946 ]
2.40 (2006-09-23)
=================
Important notes
---------------
* All .fas files generated by previous CLISP versions are invalid and
must be recompiled. This is because DOCUMENTATION and LAMBDA-LIST are
now kept with the closures.
Set CUSTOM:*LOAD-OBSOLETE-ACTION* to :COMPILE to automate this.
See <http://clisp.cons.org/impnotes.html#loadfile> for details.
User visible changes
--------------------
* Infrastructure
+ Top-level configure now accepts a new option --elispdir which specifies
the installation directory for the Emacs Lisp files (clhs.el et al).
The default value is ${datadir}/emacs/site-lisp/.
Thus, clhs.el at al are now installed by "make install", and should
be included in the 3rd party distributions.
+ Top-level configure now accepts variables on command line, e.g.,
./configure CC=g++ CFLAGS=-g
* Function PCRE:PCRE-EXEC accepts :DFA and calls pcre_dfa_exec() when
built against PCRE v6. See <http://clisp.cons.org/impnotes/pcre.html>.
* New functions RAWSOCK:IF-NAME-INDEX, RAWSOCK:IFADDRS.
See <http://clisp.cons.org/impnotes/rawsock.html>.
* When the OPTIMIZE SPACE level is low enough, keep function
documentation and lambda list.
See <http://clisp.cons.org/impnotes/declarations.html#space-decl>.
* Bug fixes:
+ Make it possible to set *IMPNOTES-ROOT-DEFAULT* and *CLHS-ROOT-DEFAULT*
to local paths, as opposed to URLs. [ 1494059 ]
+ Fix the evaluation order of initialization and :INITIALLY forms in
then extended LOOP. [ 1516684 ]
+ Do not allow non-symbols as names of anonymous classes. [ 1528201 ]
+ REINITIALIZE-INSTANCE now calls FINALIZE-INHERITANCE. [ 1526448 ]
+ Fix the RAWSOCK module on big-endian platforms. [ 1529244 ]
+ PRINT-OBJECT now works on built-in objects. [ 1482533 ]
+ ADJUST-ARRAY signals an error if :FILL-POINTER is supplied and non-NIL
but the non-adjustable array has no fill pointer, as per ANSI. [ 1538333 ]
+ MAKE-PATHNAME no longer ignores explicit :DIRECTORY NIL (thanks to
Stephen Compall <s11001001@us...>). [ 1550803 ]
+ Executable images now work on ia64 (thanks to Dr. Werner Fink
<werner@su...>).
+ MAKE-PATHNAME on win32 now handles correctly directories that start
with a non-string (e.g., :WILD). [ 1555096 ]
+ SOCKET-STREAM-PEER and SOCKET-STREAM-LOCAL had do-not-resolved-p
inverted since 2.37.
+ Set functions with :TEST 'EQUALP were broken on large lists. [ 1567186 ]
|
|
generates a GNU make specific makefile on this platform.
|
|
|
|
We are pleased to announce the release of Python 2.4.4 (FINAL), a
bugfix release of Python 2.4, on October 18, 2006.
Important: 2.4.4 includes a security fix (PSF-2006-001) for the
repr() of unicode strings in wide unicode builds (UCS-4) [does not
affect pkgsrc]
Python 2.4 is now in bugfix-only mode; no new features are being
added. At least 80 bugs have been squished since Python 2.4.3,
including a number of bugs and potential bugs found by with the
Coverity and Klocwork static analysis tools. We'd like to offer
our thanks to both these firms for making this available for open
source projects - see their websites if you're interested.
|
|
Bump PKGREVISION
|
|
Pointed out by schmonz@ and taca@
Bump PKGREVISION
|
|
mzscheme 205 (released in 2003), including a native JIT compiler.
patches provided by Yorick Hardy in pkg/36330
|
|
Spotted by Takahiro Kambe
|
|
last released version that we have as devel/ffcall. Arrange for
powerpc files (from files/) to end up in the right place and get used
by the build:
tramp-* files are no longer used, so don't copy them. They can
probably be deleted from files/ now.
powerpc is now known to ffcall as powerpc, not rs6000 so change the
target name accordingly and make the makefile rule recognize netbsd
and pick up our file.
Makes clisp build/work on my macppc.
Ok wiz@ (except any typos in this commit message).
|
|
Security Fixes
* Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)
* Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)
* Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)
* Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)
* Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.
* Added mysql_set_charset() to allow runtime altering of connection encoding.
* Upgraded bundled SQLite 3 to version 3.3.17. (Ilia)
* Fixed gd build when used with freetype 1.x (Pierre, Tony)
And a fair few bugs fixed, see: http://www.php.net/ChangeLog-5.php#5.2.3
for all the details.
|
|
pkgrevision.
|
|
JamVM 1.4.5 released on 4th February 2007
=========================================
A summary of changes since 1.4.4:
- Support for Java 1.5 Annotations. This includes the following
methods for reflection access to Annotations:
- VMClass.getDeclaredAnnotations
- java.lang.reflect.Field.getDeclaredAnnotations
- java.lang.reflect.Constructor
- getAnnotation, getDeclaredAnnotations, getParameterAnnotations
- java.lang.reflect.Method
- getDefaultValue, getAnnotation, getDeclaredAnnotations,
getParameterAnnotations
- Class sun.misc.Unsafe implemented, providing VM support for
JSR-166 (Concurrency Utilities).
- Ported to the mipsel architecture. This is a full port, with hand-
coded assembler to handle the construction of a call-frame for calling
JNI native methods. This supports the O32 ABI (for other ABIs libffi
can be used).
- Bug fix in registering references external to the heap with the GC.
The table should be locked for references registered after VM
initialisation.
- Bug fix when expanding the heap and the free-list is empty.
- Fixed race-condition when rewriting OPC_NEW in the indirect-threaded
interpreter (by default the direct-threaded interpreter is used).
- Bug fix in the GC compaction phase. The class-loader references
within the loaded DLL hashtable must be updated when the class-loader
is moved during compaction. This is a regression introduced in
JamVM 1.4.3 (DLL unloading), seen while running Eclipse.
- Bug fix in JNI_GetStringUTFLength. The reported length should not
include space for a NULL terminator.
- Various compile fixes for uClibc. Support for the JNI invocation
API requires glibc features not implemented in uClibc.
- Command line option -fullversion implemented.
JamVM 1.4.4 released on 2nd November 2006
=========================================
A summary of changes since 1.4.3:
- Full JNI Invocation API implemented, enabling JamVM to be linked into
another program.
- JNI_CreateJavaVM, DestroyJavaVM, AttachCurrentThread,
- AttachCurrentThreadAsDaemon, DetachCurrentThread
- JNI_GetDefaultJavaVMInitArgs
- JamVM is now also built as a shared library (lib/libjvm.so).
- The executable (bin/jamvm) is statically linked with this library
instead of being a wrapper. This is because the shared library
runs slower than static linking on some architectures. As JamVM
is small this is not a problem.
- Improved class-loader and shared library support
- When a class-loader (and all its classes) is unloaded all shared
libraries loaded by the class-loader are unloaded and JNI_OnUnload
called (if defined)
- A shared library can no longer be opened by two class-loaders
at once
- A class can only resolve native methods defined in shared libraries
opened by its defining class-loader
- Major re-working of thread/locking code to support additional Java 1.5
functionality
- Thread.getState() implemented
- correct thread states and their transistions (e.g. BLOCKING,
WAITING, TIMED_WAITING, etc.)
- native support for the ThreadMXBean thread system management API
- thread creation statistics (count of live, started and
peak threads)
- Information about a thread (ThreadInfo)
- execution information (thread state, stack backtrace to
a particular depth, object upon which the thread is blocked
or waiting to be notified)
- synchronization statistics (counts of the times the thread
has been blocked or waited for notification)
- Thread.interrupt() re-implemented fixing several bugs
- if a thread was waiting on a monitor, previous implementation
required the monitor lock to be obtained. If a 3rd thread
was holding this, the interrupt could not occur to avoid
deadlock. New thread-code does not require lock to be obtained.
- in rare circumstances another thread waiting on the monitor
could be notified (when there was pending notifications,
and then an interrupt, and subsequent threads waiting on the
monitor).
- a thread waiting on a thin-lock (waiting for inflation)
could erroneously report an InterruptedException
- GC bug fix for class-unloading when only using the compactor
(-Xcompactalways). The compactor in some circumstances could move
objects ontop of the object holding the native class-loader VM data
before it was freed leading to a SEGV.
- Bug fix for abstract methods which fell through previous
AbstractMethodError checks (using a stub method)
- AbstractMethodError now also gives the method name
- Bug fix to not allow abstract classes to be instantiated
- Bug fix for NULL in identityHashCode (a regression in JamVM 1.4.3)
- Bug fix for NULL in JNI method GetStringUTFLength|Chars
- Bug fix for $ in native method names
- FirstNonNullClassLoader implemented
- Access-checking bug fix. In reflection method/field access, also
check class access in addition to method/field.
- Ensure created threads have a native stack size of at least 2MB. This
fixes SEGVs due to stack overflow seen on OpenBSD/Darwin
(default 512KB).
- Property sun.boot.class.path is now also defined in addition to
java.boot.classpath. Certain applications look for the Sun property
(e.g. Dacapo bloat benchmark).
- Extra bootclasspath command line options
- bootclasspath/v overrides the default VM classes path
- bootclasspath/c overrides the default GNU Classpath classes path
- java.endorsed.dirs support added
- directories are scanned and any jar/zip files are added to the
boot classpath.
- Improved thread dump (produced via ctrl-\). Now shows thread state.
- JamVM by default now installs in its own directory (/usr/local/jamvm)
JamVM 1.4.3 released on 21st May 2006
=====================================
A summary of changes since 1.4.2:
- Heap compaction implemented. Previously on some programs the object
allocation pattern could lead to a highly fragmented heap (lots of
small holes). This caused early heap expansion, and in some cases
an OutOfMemory exception (a result of repeated heap expansion until
heap fully expanded).
JamVM now includes a mark/compact collector in addition to the
mark/sweep GC. This is normally ran after forced finalisation, and
before heap expansion. It removes fragmentation by sliding the objects
to the bottom of the heap, closing the holes.
Two new command line options can be used to control compaction :
-Xnocompact : don't do compaction and just use the mark/sweep
collector. This is equivalent to JamVM 1.4.2 behaviour.
-Xcompactalways : do compaction on every garbage-collection. In
some cases this may lead to less collections, but
the compactor is slower than the sweeper.
- The interned String table is now garbage-collected (JamVM uses its
own interned String hashtable).
- Additional Java 1.5 support
- New methods within VMClass implemented
- isMemberClass, isLocalClass, isAnonymousClass,
getEnclosingClass, getEnclosingMethod,
getEnclosingConstructor, getClassSignature.
- Generic signature support in reflection classes (Constructor, Method
Field).
- getTypeParameters, getSignature, getGenericExceptionTypes,
getGenericParameterTypes, toGenericString, getGenericType,
getGenericReturnType
- Uncaught exceptions will now use the thread's uncaughtExceptionHandler
(if available).
- Fix for Non-ASCII characters in class name parameter
- affected methods Class.ForName, ClassLoader.defineClass
- Use getcwd() instead of PWD enviroment variable for user.dir
property. This fixes problems seen on some applications.
- Fix in VMClass.defineClass on 64-bit machines (protection domain
parameter assumed to be 4 bytes).
- Minor interpreter optimisation in direct-mode with handler
prefetch (reload of handler address in aload_0/getfield pair).
- Command line options -version and -showversion now prints a "Java
compatible" version number. This is to work with shell scripts which
parse the output to get the Java version.
- Set the java.home property to the JAVA_HOME environment variable if set.
- Ported to Mac OS X on Intel.
- Runtime.availableProcessors implemented (Linux, Mac OS X and BSD
systems).
- Updated to be compatible with Classpath 0.91.
- Merged in changes to GNU Classpath's VM reference classes and
JamVM's classes.
- Various compiler warnings.
|
|
(guile-oops is included in newer guile, guile-gtk replaces guile14-gtk).
|
|
|
|
lang/guile to 1.8.1. This package will be available for those which will
not work with guile-1.8.x.
|
|
* Minor bugfixes
|
|
|
|
|
|
databases/zope-mysql
lang/py-extclass
textproc/py-dtml
www/py-pcgi
www/py-zpublisher
www/zope
No objection from pkgsrc-users.
cVS: ----------------------------------------------------------------------
|
|
filename clash with "Makefile".
|
|
|
|
|
|
|
|
From Sergey Svishchev.
|
