summaryrefslogtreecommitdiff
path: root/lang
AgeCommit message (Collapse)AuthorFilesLines
2009-12-05Follow f2c/libf2c split, bump revision.asau3-17/+4
2009-12-03Restore YACC dependency lost during previous update.asau1-1/+2
2009-12-03Split f2c into library (devel/libf2c) and translator packages.asau12-370/+22
Requested by <joerg>.
2009-12-01NetBSD<5.99's curses has a wrong keypad(3) declaration, use pkgsrcdrochner1-1/+4
ncurses there noticed by joerg
2009-12-01USE_TOOLS+=yacc - For building in semi bovine-free environments.dsainty1-2/+2
2009-11-30Add fixes for http://secunia.com/advisories/37412/ from PHP's repositry.taca10-27/+171
1. CVE-2009-3292 is already fixed in 5.2.11. 2. CVE-2009-3558 http://svn.php.net/viewvc?view=revision&revision=288934 3. CVE-2009-3557 http://svn.php.net/viewvc?view=revision&revision=288945 http://svn.php.net/viewvc?view=revision&revision=288971 4. CVE-2009-4017 http://svn.php.net/viewvc?view=revision&revision=289990 http://svn.php.net/viewvc?view=revision&revision=290820 http://svn.php.net/viewvc?view=revision&revision=290885 Other pkgsrc changes: * Don't hardcord /usr/pkg in php.ini-dist and php.ini-recommended. * Add comments to some of patch files. Bump PKGREVISION.
2009-11-29Make lang/gauceh work on arm baed NetBSD.enami3-6/+75
- Don't define DOUBLE_ARMENDIAN if netbsd. - Backport alignment problem fix from trunk.
2009-11-27Sort --mode argument before comiler in libtool invocation.joerg2-4/+4
2009-11-27Update gauche to 0.9. Ok'ed by uebayashi.enami10-128/+91
- patch-ae is removed since the change is included in upstream. - patch-a[h-k] is removed since the way to handle rpath leak is changed; now gauche-config is also `relink'ed before installed. Here is breif list of changes from 0.8.13: 2009/11/22 Gauche 0.9: Major Feature Enhancements * C API incompatible changes: Several incompatible C API changes are introduced, which may cause some extension to fail to compile. See API Changes in 0.9 for the details. * New features o New module: rfc.zlib: Zlib compression/decompression. o New module: rfc.sha: SHA2 support. rfc.sha1 is superseded by this module. o New module: util.sparse: Sparse vectors backed up by space-efficient trie, and hash-tables implemented on top of sparse vectors. They are memory efficient than the builtin hash tables when you want to keep tens of millions of entries. o Autoprovide: You no longer need 'provide' form for most of times. If (require "X") successfully loads X.scm and it doesn't have a provide form, the feature "X" is automatically provided. See the "Require and provide" section of the reference for more details. o Module gauche.test: Improved testing for exceptions. You can now test whether a specific type of condition is thrown by giving (test-error condition-type) as the expected result. See the manual entry for more details. o Module rfc.http: Now handles proxy by :proxy keyword argument. You can also easily compose application/x-www-form-urlencoded and multipart/form-data message to send form parameters. New procedures: http-put and http-delete. o Module rfc.mime: Added support of composing a MIME message. o Module gauche.threads: New procedures: thread-stop!, thread-cont!, thread-state. o Module gauche.termios: On Windows native support, this module provides Windows Console API instead of POSIX termios API, since emulationg POSIX termios on Windows is too much. A set of common high-level API that can be used on both POSIX and Windows are also added. o Module gauche.dictionary provides a bidirectional map, <bimap>. o run-process in module gauche.process, and builtin sys-exec and sys-fork-and-exec support :directory keyword argument to specify the working directory of the executed process. o Module file.util provides create-directory-tree and check-directory-tree. o Module gauche.net provides low-level socket operations: socket-sendmsg, socket-buildmsg, and socket-ioctl. Call-with-client-socket takes new keyword args to specify buffering mode for the socket. o Module www.cgi: cgi-main switches the buffering mode of stderr to line, so that the httpd log can record error messages line-by-line (much less clutter than before). * Major fixes and improvements o Fixed build problem on OSX 10.6 (Snow Leopard). o Performance is greatly improved on floating point number arithmetics, optional argument handling of builtin procedures, and case-lambda. o Now all whitespace characters defined in R6RS works as intertoken spaces in the source code. o A warning message is printed when a thread exits with an error and no other thread retrieve its status by thread-join! before the thread is GC-ed. This helps troubleshooting. Since thread-join! is the only way to know if the thread exitted by an error, you have either to call thread-join! to make sure to check the status, or to write the thread thunk to catch all errors and handle them properly. o Anonymous module name is #f now, instead of (somewhat arbitrarily chosen) |#|. o Some enhancements on symbols: 'uninterned' symbos are officially supported (symbols generated by gensym have been uninterned, but never been documented officially.) Uninterned symbols are written as #:symbol a la CommonLisp. Uninterned symbols are not registered to the internal symbol table, so there's no worry about name crash. The only way to refer to the same uninterned symbol from more than one place in the source code is to use srfi-38 notation (#n= and #n#). You can create uninterned symbol by string->uninterned-symbol and check whether a symbol is interned or not by symbol-intened?. There is also a new procedure, symbol-sans-prefix. * Windows support o Precompiled binary installer for Windows is now available. Get Gauche-mingw-0.9.exe. It is supported on Windows NT 3.5 and later (sorry, no support for Win9x.) o Precompiled binary does not include thread and gdbm support (yet). It is compiled to use utf-8 internal encoding. o Some Unix-specific system functions are not available, or have slightly different semantics because they are emulated via Windows API. If a function is not available on Windows, the reference manual says so. Windows version hasn't be used heavily, so expect bugs. o Large character set support on Windows Console is pretty limited. It is recommended to run gosh under Emacs for interactive use. See WindowsConsole for the details. 2008/10/6 Gauche 0.8.14: Maintenance release. * Bug fixes o In some cases, an argument list passed to apply wasn't copied. o On some platforms, signal mask of threads could be altered inadvertently by exception handling due to the different behavior of sigsetjmp. o format now raises an error if there's an incomplete tilde sequence in the given format string. o Internal parameter (gauche.parameter) code had a bug that allocates not enough storage. o There was a couple of bugs in dynamic-load that could cause dead lock or leaving internal state inconsistent. o Module rfc.http: The 'host' field became inconsistent when redirection happened. * R6RS-ish extensions o R6RS reader directive #!r6rs, #!fold-case and #!no-fold-case are recognized now. The latter two can be used to change case-folding mode of the reader in the middle of the source code. See the manual for the details. o New core procedures: finite?, infinite?, nan?, eof-object. o Two argument version of log: (log z b) is for base-b logarithm of z. * Extension-building improvements o gauche-config script provides --rpath-flag option to retrieve platform-specific rpath link option (e.g. "-Wl,--rpath -Wl,"). o gauche-package script accepts --local option to the 'compile' and 'install' command to add local include paths and local library search paths conveniently. Basically, gauche-package compile --local=DIR package.tgz causes -IDIR/include and -LDIR/lib to be added to the actual compile and link command lines. To give more than one directory, say --local=DIR1:DIR2:.... o A stub generator and ahead-of-time compiler (the facility to pre-compile Scheme code into VM instruction array as static C data) is integrated, allowing C and Scheme code to be mixed in the same source; this feature is not yet documented and the details are subject to change, but the curious mind can take a look at ext/dbm/*, which were much simpler than the previous version. * Additional improvements, new procedures & macros o GC is now Boehm GC 7.1. o Large part of VM code is rewritten for better performance and maintainability. o New procedure: hash-table-copy. o New convenience macros: rlet1 and if-let1. o You can now hook exit operation by the exit-handler parameter. See the "Program termination" section of the manual for the detailed description of this feature. o Made sys-lstat work like sys-stat on Windows platform; one less headache to write cross-platform code. o Module gauche.net: Constants SHUT_RD, SHUT_WR and SHUT_RDWR are defined to pass to socket-shutdown. o Module file.util: New convenience procedures: copy-directory*, touch-files, remove-files, delete-files. o Module dbm.*: Renamed dbm-rename to dbm-move for the consistency. (The old name is kept as alias for the backward compatibility). Added dbm-copy and dbm-move missing from dbm.fsdbm. Also properly detects variations of suffixes of ndbm-compatible database at configuration time. o Module www.cgi: :mode option is added to the MIME part handler passed to get-mime-parts to specify the permissions of the saved file. o Module rfc.ip: New procedure: ipv4-global-address?.
2009-11-26Pass down --x-includes/--x-libraries for modular Xorg too.joerg1-1/+8
2009-11-26Just use our CC, don't override it. Helps libtool-2.2.joerg2-4/+4
2009-11-25Make 'clang -pthread' work on recent DragonFly versions. The patch fromhasso3-3/+17
upstream svn trunk. Bump PKGREVISION.
2009-11-25build with moonlight support. Added as a default option. Bump pkgrevisionkefren5-5/+71
2009-11-23Use ${BSD_INSTALL_DATA} instead of ${INSTALL_FILE} which is only availabletron1-1/+1
under NetBSD and conflicts with a "pkgsrc" setting. The "f2c" package now builds and installs under Mac OS X (Snow Leopard).
2009-11-23fix grammar to make bison happytnn2-1/+19
2009-11-23Fix NetBSD builds now: include bsd.dep.mk, conditionalize bsd.depall.mk.asau3-3/+6
2009-11-23Simulate "bsd.init.mk" because for some unknown reasonasau3-3/+36
pkgsrc doesn't provide it. This fixes build problems on platforms other than NetBSD.
2009-11-22Resurrect patch-ai, it's needed to build on 64-bit platforms. (hi asau!)tnn2-1/+32
2009-11-22Updated lang/sun-jdk15 to 5.0.22abs2-10/+10
Changes in 1.5.0_22 The full internal version number for this update release is 1.5.0_22-b03 (where "b" means "build"). The external version number is 5.0u22. OlsonData 2009m This release contains Olson time zone data version 2009m. For more information, refer to Timezone Data Versions in the JRE Software . Security Baseline This update release specifies the following security baseline: JRE Family Version Java SE Security Baseline Java SE for Business Security Baseline 1.4.2 1.4.2_19 1.4.2_24 In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java SE for Business subscribers. For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer . Root Certificates Root Certificates are included in this release. * Added one new root certificate for SECOM. (Refer to 6872579.) * Added one new root certificate for GlobalSign. (Refer to 6860447.) Bug Fixes This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 269868, 270474, 270475, and 270476. Bug fixes for vulnerabilities are listed in the following table. BugId Category Subcategory Description 6631533 java classes_2d ICC_Profile allows detecting if some files exist 6815780 java classes_2d TrueType font parsing crash when stressing Sun Bug 6751322 test case 6822057 java classes_2d X11 and Win32GraphicsDevice don't clone arrays returned from getConfigurations() 6862969 java classes_2d JPEG JFIF Decoder issue 6862970 java classes_2d Image Color Profile parsing issue 6872357 java classes_2d JRE AWT setDifflCM vulnerable to Stack Overflow 6872358 java classes_2d JRE AWT setBytePixels vulnerable to Heap Overflow 6664512 java classes_awt Component and [Default]KeyboardFocusManager pass security sensitive objects to loggers 6636650 java classes_lang (cl) Resurrected ClassLoaders can still have children 6861062 java classes_security Disable MD2 in certificate chain validation 6863503 java classes_security SECURITY: MessageDigest.isEqual introduces timing attack vulnerabilities 6864911 java classes_security ASN.1/DER input stream parser needs more work 6854303 java classes_sound Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability 6657026 java classes_swing Numerous static security flaws in Swing (findbugs) 6657138 java classes_swing Mutable statics in Windows PL&F (findbugs) 6824265 java classes_util_i18n (tz) TimeZone.getTimeZone allows probing local filesystem 6632445 java imageio DoS from parsing BMPs with UNC ICC links 6862968 java imageio JPEG Image Writer quantization problem 6874643 java imageio ImageI/O JPEG is vulnerable to Heap Overflow 6869694 java install java update malfunctioning Other bug fixes are listed in the following table. BugId Category Subcategory Description 6876061 java classes_awt Following JCK5 test not working as exp-d on linux: awt-interactive-ComponentTests 6860447 java classes_security Add GlobalSign R3 Root certificate to the JDK 6872579 java classes_security Add SECOM Root CA 2 to JDK 6880110 java classes_util_i18n (tz) Support tzdata2009m Changes in 1.5.0_21 The full internal version number for this update release is 1.5.0_21-b01 (where "b" means "build"). The external version number is 5.0u21. OlsonData 2009l This release contains Olson time zone data version 2009l. For more information, refer to Timezone Data Versions in the JRE Software . Security Baseline This update release specifies the following security baseline: JRE Family Version Java SE Security Baseline Java SE for Business Security Baseline 1.4.2 1.4.2_19 1.4.2_22 On October 30, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java SE for Business subscribers. For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer . Additional Supported System Configurations As of this update, support has been added for the following system configurations: * Windows Vista SP2 * Windows Server 2008 SP2 Refer to the Supported System Configurations page. Bug Fixes Bug fixes are listed in the following table. BugId Category Subcategory Description 6422099 hotspot compiler2 C2 assert("live value must not be garbage") 6445745 hotspot compiler2 TransformerManagementThreadAddTests.java fails an assertion 6772683 hotspot compiler2 Thread.isInterrupted() fails to return true on multiprocessor PC 6842999 hotspot runtime_system Update hotspot windows os_win32 for windows 2008 R2 6845161 jaas login Bottleneck in Configuration.getConfiguration synchronized call 6860491 java classes_awt WRAP_TIME_MILLIS incorrectly set 6843003 java classes_lang Windows Server 2008 R2 system recognition 6808046 java classes_swing Having image problems on Asian Languages display 6645292 java classes_text [Fmt-Da] Timezone Western Summer Time (Australia) is parsed incorrectly 6665028 java classes_text native code of method j*.text.Bidi.nativeBidiChars is using the contents of a primitive array direct 6872467 java classes_util_i18n (tz) Support tzdata2009l 6814140 java classes_util_logging deadlock due to synchronized demandLogger() code that locks ServerLogManager 6817482 java_plugin iexplorer On IE, modal JDialog from an Applet in html frame is not modal 6432317 java_plugin misc Vista: Java Plugin won't be able to launch extension installers. 6818278 javawebstart jnlp_file sunmc console when started with javaws does not communicate with the firewall port range 6748156 jndi ldap add an new JNDI property to control the boolean flag WaitForReply (JDK5) 6750362 jndi ldap Very large LDAP requests throw a OOM on LDAP servers which aren't aware of Paged Results Controls
2009-11-22Updated lang/sun-jre15 to 5.0.22abs2-10/+10
Changes in 1.5.0_22 The full internal version number for this update release is 1.5.0_22-b03 (where "b" means "build"). The external version number is 5.0u22. OlsonData 2009m This release contains Olson time zone data version 2009m. For more information, refer to Timezone Data Versions in the JRE Software . Security Baseline This update release specifies the following security baseline: JRE Family Version Java SE Security Baseline Java SE for Business Security Baseline 1.4.2 1.4.2_19 1.4.2_24 In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java SE for Business subscribers. For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer . Root Certificates Root Certificates are included in this release. * Added one new root certificate for SECOM. (Refer to 6872579.) * Added one new root certificate for GlobalSign. (Refer to 6860447.) Bug Fixes This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 269868, 270474, 270475, and 270476. Bug fixes for vulnerabilities are listed in the following table. BugId Category Subcategory Description 6631533 java classes_2d ICC_Profile allows detecting if some files exist 6815780 java classes_2d TrueType font parsing crash when stressing Sun Bug 6751322 test case 6822057 java classes_2d X11 and Win32GraphicsDevice don't clone arrays returned from getConfigurations() 6862969 java classes_2d JPEG JFIF Decoder issue 6862970 java classes_2d Image Color Profile parsing issue 6872357 java classes_2d JRE AWT setDifflCM vulnerable to Stack Overflow 6872358 java classes_2d JRE AWT setBytePixels vulnerable to Heap Overflow 6664512 java classes_awt Component and [Default]KeyboardFocusManager pass security sensitive objects to loggers 6636650 java classes_lang (cl) Resurrected ClassLoaders can still have children 6861062 java classes_security Disable MD2 in certificate chain validation 6863503 java classes_security SECURITY: MessageDigest.isEqual introduces timing attack vulnerabilities 6864911 java classes_security ASN.1/DER input stream parser needs more work 6854303 java classes_sound Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability 6657026 java classes_swing Numerous static security flaws in Swing (findbugs) 6657138 java classes_swing Mutable statics in Windows PL&F (findbugs) 6824265 java classes_util_i18n (tz) TimeZone.getTimeZone allows probing local filesystem 6632445 java imageio DoS from parsing BMPs with UNC ICC links 6862968 java imageio JPEG Image Writer quantization problem 6874643 java imageio ImageI/O JPEG is vulnerable to Heap Overflow 6869694 java install java update malfunctioning Other bug fixes are listed in the following table. BugId Category Subcategory Description 6876061 java classes_awt Following JCK5 test not working as exp-d on linux: awt-interactive-ComponentTests 6860447 java classes_security Add GlobalSign R3 Root certificate to the JDK 6872579 java classes_security Add SECOM Root CA 2 to JDK 6880110 java classes_util_i18n (tz) Support tzdata2009m Changes in 1.5.0_21 The full internal version number for this update release is 1.5.0_21-b01 (where "b" means "build"). The external version number is 5.0u21. OlsonData 2009l This release contains Olson time zone data version 2009l. For more information, refer to Timezone Data Versions in the JRE Software . Security Baseline This update release specifies the following security baseline: JRE Family Version Java SE Security Baseline Java SE for Business Security Baseline 1.4.2 1.4.2_19 1.4.2_22 On October 30, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java SE for Business subscribers. For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer . Additional Supported System Configurations As of this update, support has been added for the following system configurations: * Windows Vista SP2 * Windows Server 2008 SP2 Refer to the Supported System Configurations page. Bug Fixes Bug fixes are listed in the following table. BugId Category Subcategory Description 6422099 hotspot compiler2 C2 assert("live value must not be garbage") 6445745 hotspot compiler2 TransformerManagementThreadAddTests.java fails an assertion 6772683 hotspot compiler2 Thread.isInterrupted() fails to return true on multiprocessor PC 6842999 hotspot runtime_system Update hotspot windows os_win32 for windows 2008 R2 6845161 jaas login Bottleneck in Configuration.getConfiguration synchronized call 6860491 java classes_awt WRAP_TIME_MILLIS incorrectly set 6843003 java classes_lang Windows Server 2008 R2 system recognition 6808046 java classes_swing Having image problems on Asian Languages display 6645292 java classes_text [Fmt-Da] Timezone Western Summer Time (Australia) is parsed incorrectly 6665028 java classes_text native code of method j*.text.Bidi.nativeBidiChars is using the contents of a primitive array direct 6872467 java classes_util_i18n (tz) Support tzdata2009l 6814140 java classes_util_logging deadlock due to synchronized demandLogger() code that locks ServerLogManager 6817482 java_plugin iexplorer On IE, modal JDialog from an Applet in html frame is not modal 6432317 java_plugin misc Vista: Java Plugin won't be able to launch extension installers. 6818278 javawebstart jnlp_file sunmc console when started with javaws does not communicate with the firewall port range 6748156 jndi ldap add an new JNDI property to control the boolean flag WaitForReply (JDK5) 6750362 jndi ldap Very large LDAP requests throw a OOM on LDAP servers which aren't aware of Paged Results Controls
2009-11-22Updated lang/sun-jdk6 to 6.0.17abs2-10/+8
6u17 contains Olson time zone data version 2009m. For more information, refer to Timezone Data Versions in the JRE Software . Security Baseline 6u17 specifies the following security baselines for use with Java Plug-in technology: JRE Family Version Java SE Security Baseline Java SE for Business Security Baseline 6 1.6.0_17 1.6.0_17 5.0 1.5.0_22 1.5.0_22 1.4.2 1.4.2_19 1.4.2_24 Root Certificates Root Certificates are included in this release. * Added one new root certificate for SECOM. (Refer to 6872579.) * Added one new root certificate for GlobalSign. (Refer to 6860447.) Bug Fixes This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 269868, 269869, 269870, 270474, 270475, and 270476. Bug fixes for vulnerabilities are listed in the following table. BugId Category Subcategory Description 6631533 java classes_2d ICC_Profile allows detecting if some files exist 6815780 java classes_2d TrueType font parsing crash when stressing Sun Bug 6751322 test case 6822057 java classes_2d X11 and Win32GraphicsDevice don't clone arrays returned from getConfigurations() 6862969 java classes_2d JPEG JFIF Decoder issue 6862970 java classes_2d Image Color Profile parsing issue 6872357 java classes_2d JRE AWT setDifflCM vulnerable to Stack Overflow 6872358 java classes_2d JRE AWT setBytePixels vulnerable to Heap Overflow 6664512 java classes_awt Component and [Default]KeyboardFocusManager pass security sensitive objects to loggers 6636650 java classes_lang (cl) Resurrected ClassLoaders can still have children 6861062 java classes_security Disable MD2 in certificate chain validation 6863503 java classes_security SECURITY: MessageDigest.isEqual introduces timing attack vulnerabilities 6864911 java classes_security ASN.1/DER input stream parser needs more work 6854303 java classes_sound Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability 6657026 java classes_swing Numerous static security flaws in Swing (findbugs) 6657138 java classes_swing Mutable statics in Windows PL&F (findbugs) 6824265 java classes_util_i18n (tz) TimeZone.getTimeZone allows probing local filesystem 6632445 java imageio DoS from parsing BMPs with UNC ICC links 6862968 java imageio JPEG Image Writer quantization problem 6874643 java imageio ImageI/O JPEG is vulnerable to Heap Overflow 6869694 java install java update malfunctioning 6869752 java_deployment deployment_toolkit Deployment Toolkit plugin "launch" method vulnerable to exploits 6872824 javawebstart general arbitary code execution using java web start 6870531 javawebstart other REGRESSION:have problem to run JNLP app and applets with signed Jar files Other bug fixes are listed in the following table. BugId Category Subcategory Description 6842999 hotspot runtime_system Update hotspot windows os_win32 for windows 2008 R2 6804454 java classes_2d RFE: Provide a way to control the printing dpi resolution from MSIE browser print. See also 6801859 6813208 java classes_awt pageDialog throws NPE from applet 6825342 java classes_awt Security warning may change Z-order of top-level 6843003 java classes_lang Windows Server 2008 R2 system recognition 6860447 java classes_security Add GlobalSign R3 Root certificate to the JDK 6872579 java classes_security Add SECOM Root CA 2 to JDK 6880110 java classes_util_i18n (tz) Support tzdata2009m 6814140 java classes_util_logging deadlock due to synchronized demandLogger() code that locks ServerLogManager 6879614 jaxp parse com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl failing to parse xml document
2009-11-22Updated lang/sun-jre6 to 6.0.17abs2-9/+9
6u17 contains Olson time zone data version 2009m. For more information, refer to Timezone Data Versions in the JRE Software . Security Baseline 6u17 specifies the following security baselines for use with Java Plug-in technology: JRE Family Version Java SE Security Baseline Java SE for Business Security Baseline 6 1.6.0_17 1.6.0_17 5.0 1.5.0_22 1.5.0_22 1.4.2 1.4.2_19 1.4.2_24 Root Certificates Root Certificates are included in this release. * Added one new root certificate for SECOM. (Refer to 6872579.) * Added one new root certificate for GlobalSign. (Refer to 6860447.) Bug Fixes This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 269868, 269869, 269870, 270474, 270475, and 270476. Bug fixes for vulnerabilities are listed in the following table. BugId Category Subcategory Description 6631533 java classes_2d ICC_Profile allows detecting if some files exist 6815780 java classes_2d TrueType font parsing crash when stressing Sun Bug 6751322 test case 6822057 java classes_2d X11 and Win32GraphicsDevice don't clone arrays returned from getConfigurations() 6862969 java classes_2d JPEG JFIF Decoder issue 6862970 java classes_2d Image Color Profile parsing issue 6872357 java classes_2d JRE AWT setDifflCM vulnerable to Stack Overflow 6872358 java classes_2d JRE AWT setBytePixels vulnerable to Heap Overflow 6664512 java classes_awt Component and [Default]KeyboardFocusManager pass security sensitive objects to loggers 6636650 java classes_lang (cl) Resurrected ClassLoaders can still have children 6861062 java classes_security Disable MD2 in certificate chain validation 6863503 java classes_security SECURITY: MessageDigest.isEqual introduces timing attack vulnerabilities 6864911 java classes_security ASN.1/DER input stream parser needs more work 6854303 java classes_sound Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability 6657026 java classes_swing Numerous static security flaws in Swing (findbugs) 6657138 java classes_swing Mutable statics in Windows PL&F (findbugs) 6824265 java classes_util_i18n (tz) TimeZone.getTimeZone allows probing local filesystem 6632445 java imageio DoS from parsing BMPs with UNC ICC links 6862968 java imageio JPEG Image Writer quantization problem 6874643 java imageio ImageI/O JPEG is vulnerable to Heap Overflow 6869694 java install java update malfunctioning 6869752 java_deployment deployment_toolkit Deployment Toolkit plugin "launch" method vulnerable to exploits 6872824 javawebstart general arbitary code execution using java web start 6870531 javawebstart other REGRESSION:have problem to run JNLP app and applets with signed Jar files Other bug fixes are listed in the following table. BugId Category Subcategory Description 6842999 hotspot runtime_system Update hotspot windows os_win32 for windows 2008 R2 6804454 java classes_2d RFE: Provide a way to control the printing dpi resolution from MSIE browser print. See also 6801859 6813208 java classes_awt pageDialog throws NPE from applet 6825342 java classes_awt Security warning may change Z-order of top-level 6843003 java classes_lang Windows Server 2008 R2 system recognition 6860447 java classes_security Add GlobalSign R3 Root certificate to the JDK 6872579 java classes_security Add SECOM Root CA 2 to JDK 6880110 java classes_util_i18n (tz) Support tzdata2009m 6814140 java classes_util_logging deadlock due to synchronized demandLogger() code that locks ServerLogManager 6879614 jaxp parse com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl failing to parse xml document
2009-11-22Follow package update.asau1-3/+4
2009-11-22Update f2c to 2009-04-11 snapshot.asau16-509/+324
Changes are mostly bug fixes. Perform conservative update: recreate libF77 and libI77 providing binary compatibility. Prefer files to patches creating respective files. Override build system completely, we effectively did that anyway.
2009-11-20+rcfungedrochner1-1/+2
2009-11-20add rcfunge-2.02, a (be)funge interpreterdrochner8-0/+122
2009-11-19ocaml's stub libraries are also built on 64-bit Darwin 10.minskim1-1/+2
2009-11-19Let ocaml's configure recognize 64-bit Darwin 10.minskim2-15/+17
2009-11-17It needs "libexec". Bump revision.asau1-2/+3
2009-11-16+clangdrochner1-1/+2
2009-11-16add clang-2.6, a C compiler based om LLVM, based on Adam Hoka's llvmdrochner7-0/+761
pkg in pkgsrc-wip (This installs all the LLVM bits too, so it conflicts with a pure llvm pkg, but it is not easily separated.)
2009-11-16Teach plistlib to parse unsigned integers as externalized by NetBSD proplib(3).jakllsch3-3/+19
Bump PKGREVISION.
2009-11-16Improve DB support by always building the 1.85 compat module.joerg3-8/+208
Only search the BUILDLINK_DIR for libraries to not leak random junk. Bump revision.
2009-11-15+ pfeasau1-1/+2
2009-11-15Import Portable Forth Environment (PFE) 0.33.71 as lang/pfe.asau5-0/+1587
The Portable Forth Environment (PFE) is portable, modular, and extensible in run time Forth programming environment, based on the ANSI Standard for Forth.
2009-11-08Use full pathname to libfontconfig.so.tnn5-52/+48
Really fixes NullPointerException in getDefaultPlatformFont. Remove previous hack and bump revision again.
2009-11-08Add hack to avoid NPE in sun.awt.X11FontManager.getDefaultPlatformFont.tnn3-2/+20
Should make gui apps work again. Bump rev.
2009-11-07Support DESTDIR.asau1-6/+9
2009-11-07Update to b75 + bsd-port 20091106 snapshot.tnn7-65/+47
Around 200 bugs were fixed since b72.
2009-11-05Override CC in the Makefiles as newer libtool does not handlejoerg1-1/+3
alternative compiler names without explicit tag.
2009-11-03As the default PYTHON_VERSIONS_ACCEPTED matches with the supported listjoerg1-3/+1
of py-setuptools, drop the override here.
2009-11-03Update for Python26-2.6.4wiz1-3/+3
2009-11-03Update to 2.6.4:wiz3-9/+14
What's New in Python 2.6.4 final? ================================= *Release date: 25-Oct-2009* (nothing) What's New in Python 2.6.4rc2? ============================== *Release date: 18-Oct-2009* Library ------- - Issue #7115: Fixed the extension module builds that is failing when using paths in the extension name instead of dotted names. - Issue #7120: logging: Removed import of multiprocessing which is causing crash in GAE. - Issue #7149: fix exception in urllib when detecting proxy settings on OSX. What's New in Python 2.6.4rc1? ============================== *Release date: 07-Oct-2009* Core and Builtins ----------------- - Issue #7019: Raise ValueError when unmarshalling bad long data, instead of producing internally inconsistent Python longs. Library ------- - Issue #7068: Fixed the partial renaming that occured in r72594. - Issue #7064: Fixed the incompatibility with Setuptools in distutils when running the build_ext command. - Issue #7052: Removed nonexisting NullHandler from logging.__all__. - Issue #7039: Fixed distutils.tests.test_sysconfig when running on installation with no build. Tests ----- - Issue #7042: Fix test_signal (test_itimer_virtual) failure on OS X 10.6.
2009-10-31avoid conflict with native popcount64(3)tnn2-1/+24
2009-10-31Don't enforce linking in MAIN__. Bump package revision.asau5-31/+18
No changes in libraries. No fallout expected, none found so far.
2009-10-31Add "-f" flag for install to prevent installed package from installationobache1-2/+2
when "make replace" or using DESTDIR.
2009-10-31two more skip files.obache1-1/+3
2009-10-30Honour compiler selection.ahoka2-6/+8
2009-10-29getline -> get_linetnn4-7/+9
2009-10-29Define TEST_TARGET.asau1-1/+3
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-03 11:20:50 +0000