Commit Graph

7022 Commits

Author SHA1 Message Date
jeremy
054823d8c1 Remove msf@ as maintainer from the ports he maintains, at his request,
as he no longer works on OpenBSD.
2012-09-04 03:40:33 +00:00
landry
0ecfafe601 Bump REVISION, since it seems ppl have decided to be picky today. 2012-09-03 15:33:40 +00:00
jasper
277acbc951 sync 2012-09-03 15:12:56 +00:00
jasper
9df53c69c0 import py-urlgrabber 3.9.1
High-level cross-protocol url-grabber.

Using urlgrabber, data can be fetched in three basic ways:

  urlgrab(url) copy the file to the local filesystem
  urlopen(url) open the remote file and return a file object
     (like urllib2.urlopen)
  urlread(url) return the contents of the file as a string

ok aja@
2012-09-03 15:09:10 +00:00
landry
e274991dbc Backport a patch fixing a crash when viewing H264 video through gstreamer.
https://bugzilla.mozilla.org/show_bug.cgi?id=761030.

Crash reported and fix testing by Juan Francisco Cantero Hurtado.
2012-09-03 13:33:05 +00:00
kili
ce97d3002d Update to snap-0.8.1. 2012-09-02 21:51:15 +00:00
kili
1ec3b073c6 Update to warp-1.2.2. 2012-09-02 21:50:39 +00:00
kili
141f6b74b9 Update to wai-1.2.0.3. 2012-09-02 21:49:34 +00:00
kili
348e3bc99c Update to http-types-0.6.11. 2012-09-02 21:49:05 +00:00
kili
71c0fe68d3 Update to snap-server-0.8.1.1. 2012-09-02 21:48:31 +00:00
kili
01e1fba0b1 Update to webkit-0.12.4. 2012-09-02 21:46:54 +00:00
kili
912355badc Update to snap-core-0.8.1. 2012-09-02 21:40:12 +00:00
kili
b670cc117b Add devel/hs-random dependency. 2012-09-02 20:00:55 +00:00
landry
b5c23a2df6 Forgot to commit in previous.. remove the bits overwriting the original
nsSound.cpp with our own, now removed.
noticed by naddy@
2012-09-01 17:48:19 +00:00
ajacoutot
8438ca85a5 rc.d script cleanup:
/etc -> SYSCONFDIR
also match on empty daemon_flags

ok landry@
2012-09-01 16:33:26 +00:00
landry
b966a2d640 +mozilla-sync 2012-09-01 16:12:23 +00:00
landry
78deaf05e8 Import Mozilla Sync Server.
Mozilla Sync server allows bookmarks, tabs, settings, addons, passwords
and history to be shared across several mozilla instances. Most work
done before previous lock, polished last month and finally here it is!
See https://support.mozilla.org/en-US/kb/how-do-i-set-up-firefox-sync
and the provided README for how to set it up properly.

ok sthen@ on a previous version.
2012-09-01 16:11:36 +00:00
ajacoutot
0bbbd35e32 register-plist did not catch the devel/glib2 -main -> empty change.
espie asked me in such a nice way to fix this that I'm bumping all ports
that have a direct dependency on glib2.
2012-09-01 14:36:56 +00:00
landry
bf0ac51cca Garge collect nsSound.cpp, the original one uses libcanberra
properly and thus sndio. Bump corresponding REVISIONs.
2012-09-01 14:35:06 +00:00
landry
c2d8b42b52 Update to seamonkey-i18n 2.12. 2012-09-01 14:11:50 +00:00
landry
59316de88a Update to seamonkey 2.12.
- see http://www.seamonkey-project.org/releases/seamonkey2.12/
- garbage collect nsSound.cpp, the original one uses libcanberra
properly and thus sndio.
- remove patch from #750620, merged upstream (mfbt/double-conversion)
- remove patches from #691898, merged upstream (yarr jit ppc)
- remove useless crashreporter patch, we don't have breakpad
2012-09-01 14:10:03 +00:00
landry
2d72c4dfe2 Update to firefox-i18n 15.0 2012-09-01 13:58:29 +00:00
landry
617089342c Update to firefox 15.0.
- see http://www.mozilla.org/en-US/firefox/15.0/releasenotes/
- add -Os hack to fix a relocation error when linking on ppc (as was
  done in tb since 10..)
- garbage collect nsSound.cpp, the original one uses libcanberra
  properly and thus sndio.
- remove patch from #750620, merged upstream (mfbt/double-conversion)
- remove patches from #747257, merged upstream (gstreamer fix)
- remove patches from #691898, merged upstream (yarr jit ppc)
2012-09-01 13:56:45 +00:00
sthen
ec926d33f8 security update to mediawiki 1.19.2, ok maintainer (Wen Heping) and jasper@
CVE-2012-4377 Stored XSS via a File::link to a non-existing image

CVE-2012-4378 Multiple DOM-based XSS flaws due improper filtering of
uselang parameter

CVE-2012-4379 CSRF tokens, available via API, not protected when
X-Frame-Options headers used

CVE-2012-4380 Did not prevent account creation for IP addresses
blocked with GlobalBlocking

CVE-2012-4381 Password saved always to the local MediaWiki database

CVE-2012-4382 Metadata about blocks
2012-09-01 11:10:45 +00:00
sthen
4b7ad2646b various tweaks to phpMyAdmin packaging.
feedback/OKs from aja@ william@ jasper@ giovanni@ kevlo@

- move MESSAGE to README.

- add missing dep on php-mysqli.

- change the unpack/fake-install method to use the standard
extract infrastructure.

- @sample contrib/htaccess into .htaccess so apache can use it by
default if allowoverride is enabled. this does some basic user-agent
checks to reduce the risk of phpmyadmin sites showing up in
search engines.

- provide an @sample'd apache config file which enables use of
the .htaccess file and restricts access to localhost. talk about
this in README so people know what's going on. (phpMyAdmin has
a history of security-related bugs, but because it's rather
commonly used it's much better to have it in ports so that
it can be updated easily; these changes make the default
installation safer).
2012-08-31 16:40:38 +00:00
sthen
ba107788c6 bump a bunch of pecl-*, thanks to cvs's non-atomic commits/updates some of
these got built on amd64 without the WANTLIB they should have had, this is
causing issues with pkg_add updates reported by Johan Huldtgren
2012-08-30 14:09:21 +00:00
sthen
9fc05a7ddf Use 'pkg-config glib-2.0 --libs --static' to construct linker flags when
building the static binary. Fixes build problem reported by nigel@ since the
glib-2.0.pc now (correctly) only lists pthread in Libs.private not in Libs.
ok ajacoutot@
2012-08-30 13:47:45 +00:00
william
fcc19956cb Update to phpmyadmin-3.4.11.1, resolving CVE-2012-4345
and closing other security holes as well.

ok kevlo@ (MAINTAINER)
similar diff from jasper@
2012-08-30 02:47:52 +00:00
giovanni
bcc1a73a93 Bugfix update to 1.8.3 2012-08-28 14:50:05 +00:00
robert
0f152b0ab3 add yubikey support by using a distpatch, ok ajacoutot@ 2012-08-27 10:39:42 +00:00
ajacoutot
e197aaebf5 Remove -pthread patching.
from Brad
2012-08-27 06:19:48 +00:00
robert
963cc1a660 update to 21.0.1180.81 2012-08-26 18:47:01 +00:00
ajacoutot
1357eb3177 Make sure rc_post does not fail by using rm -f ; lockfiles aren't
supposed to stay around.

from rte
2012-08-25 11:41:46 +00:00
sthen
72a1e1685b ajaxterm needs -d to daemonize; move it from daemon_flags to daemon.
From rpe, ok ajacoutot@
2012-08-25 10:05:34 +00:00
jasper
0b8889a1de SECURITY UPDATE to 1.4.1, fixes CVE-2012-3442 CVE-2012-3443 CVE-2012-3444
Django Cross-Site Scripting and Two Denial of Service Vulnerabilities

from ryan boggs (MAINTAINER)
2012-08-24 17:01:32 +00:00
jasper
f0594de073 - update colorbox distfile 2012-08-24 07:09:36 +00:00
sthen
cc855487de sync wantlib for pecl-* 2012-08-23 19:35:31 +00:00
sthen
3875e272a2 sync wantlib 2012-08-23 16:02:37 +00:00
espie
dd86f0535c bump the translations of updated modules 2012-08-23 14:13:56 +00:00
sthen
d443de5cb5 missing wantlib/modules; p5-* thingys which are *not* just WANTLIB+=c. 2012-08-23 13:52:39 +00:00
espie
307e52055c minor updates 2012-08-23 13:50:54 +00:00
espie
08a87efcf0 minor security update 2012-08-23 13:33:59 +00:00
espie
77f09f2687 minor update 2012-08-23 09:45:11 +00:00
espie
06e5b9df6e security update 2012-08-23 09:44:02 +00:00
landry
4f9c4f4351 Bugfix update to webkit 1.8.3.
Remove the pthread/lpthread chunks from patch-GNUmakefile_in while here.

Successfully tested with GtkLauncher on sparc64 after a whooping 21h-build..
2012-08-22 07:48:37 +00:00
sebastia
143bc6cdf6 Bump revision, since we now link against libobjc2
OK landry@
2012-08-22 07:16:37 +00:00
bluhm
85f9bdc5e8 add p5-Gravatar-URL 2012-08-20 18:02:31 +00:00
bluhm
1f1499ba2b Initial import of p5-Gravatar-URL 1.06
A Gravatar is a Globally Recognized Avatar for a given email address.
This allows you to have a global picture associated with your email
address.  You can look up the Gravatar for any email address by
constructing a URL to get the image from gravatar.com.  This module
does that.

OK sthen@
2012-08-20 17:55:23 +00:00
jasper
f48ecec85f Security fix for CVE-2012-3458, py-beaker weak use of crypto can
leak information to remote attackers.
2012-08-20 14:38:10 +00:00
jasper
ed2039ac0a Security fix for CVE-2012-3505, tinyproxy: multiple headers hashmap DoS 2012-08-20 09:51:20 +00:00