5649 Commits

Author SHA1 Message Date
robert
7edcdfdb76 Use KERN_PROC2 everywhere instead of trying to use /proc and use
kvm(3) to help chrome identify it's own processes.
2011-03-02 08:53:51 +00:00
giovanni
e749a09db5 Bsdi emulation is dead, switch to FreeBSD emulation.
ok sthen@
2011-03-02 08:44:08 +00:00
jasper
a87f904c7a - the issues some people have been seeing with the build crashing in v8, is
related to too low limits, so remove the comment and set VMEM_WARNING instead.

(ports is unlocked, but no new files/directories/imports!, if in doubt, ask!)
2011-03-02 06:29:44 +00:00
pea
9b749c36f3 Fix CVE-2010-1452
ok sthen@, landry@
2011-02-12 21:05:38 +00:00
jasper
7fa477c473 - SECURITY UPDATE of chromium to 9.0.597.94, fixes about 13 CVE's.
tested by myself on amd64, and espie@ on i386.
"sure, make sure it works" robert@ (MAINTAINER), ok espie@
2011-02-12 10:42:43 +00:00
jasper
84ff9e5db1 Security fixes for django that address CVE-2011-069{6,7,8}.
Patches from upstream svn, via ryan boggs (MAINTAINER)
ok espie@
2011-02-11 11:45:48 +00:00
jasper
368a34f067 Security update of phpmyadmin to 3.3.9.1, addresses PMASA-2011-1.
pointed out by rpointel@
ok kevlo@ (MAINTAINER) aja@
2011-02-10 12:55:05 +00:00
espie
da899085eb fix MESSAGE, bump 2011-02-10 08:26:06 +00:00
sthen
ed3d1a0a57 tweak wrapper script; use larger default limits for FD and datasize
(you may still need to raise them if you open many tabs, but this
should be enough to avoid problems in normal use), only warn if
softlimits can't be raised, and adjust messages to mention login.conf
(and login.conf.db if detected).

ok espie@ "feel free to modify it if you don't like it" robert@
2011-02-08 21:10:28 +00:00
espie
8422be1e92 ... and ditch older patches too 2011-02-08 09:48:26 +00:00
espie
ae6e8f236b late update to chromium 9, robert@ did the work, but he doesn't have the
time right now.
Tree is still locked!
Reasons for the update:
- good work that can be used now
- only builds on i386/amd64, and they're fast
- multiple security problems in old chrome
- old chrome half working, can't break it more than it was.

This one requires resources (see MESSAGE), but it's ways more stable.

Again, discussed with sthen@, jasper@, naddy@, miod@
2011-02-08 09:43:02 +00:00
stephan
55eedb8bbe security update to 3.9, addresses SA-CONTRIB-2011-002 (XSS), see
http://drupal.org/node/1024972 for details.
"These are security things that need to go in before the lock. So commit with my OK." jasper@, maintainer timeout.
2011-02-04 10:28:01 +00:00
stephan
ef44e77bb0 update to 1.8 as a prerequisite for a security update of www/drupal6/panels.
"These are security things that need to go in before the lock. So commit it with my OK." jasper@
2011-02-04 10:22:16 +00:00
robert
1c272110c2 Disable on amd64, because it does not work.
After unlock a chrome update will come...

ok ajacoutot@, sthen@ and requested by many people
2011-02-03 10:31:12 +00:00
landry
1c74338058 Fix an unaligned access on sparc64 leading to random crashes when
mozilla tries to read a malformed ICC profile on random image content
found on the web.
backport of http://hg.mozilla.org/mozilla-central/rev/e8207773d54d
ref: https://bugzilla.mozilla.org/show_bug.cgi?id=629057
issue reported and fix found by naddy@
ok naddy@ ajacoutot@
2011-01-28 21:38:12 +00:00
okan
613460855d zap stray 2011-01-18 15:53:06 +00:00
landry
109b199a68 mozilla.port.mk makes all mozilla ports use the sydney_audio_sndio.c
file from www/mozilla-firefox, so remove old instances of that file that
weren't updated with last commits (and were unused anyway)
While here bump all REVISIONs after LIB_DEPENDS change.
ok naddy@
2011-01-18 12:37:44 +00:00
landry
008d9875bc Bump after LIB_DEPENDS changed, and add an empty
sa_stream_get_min_write() func to sydney_audio_sndio.c, required by
ffx4.0b9. (ofc it doesn't confuse other mozilla ports)
2011-01-18 12:33:38 +00:00
landry
7337b6d3c1 Tighten LIB_DEPENDS on very latest nss 3.12.9/nspr 4.8.7.
Remove @ silencing files/ copies.
ok naddy@
2011-01-18 12:31:24 +00:00
dcoppa
1247fd64da From upstream svn:
bump QuickTime emulation to 7.6.9 (fix apple.com movie trailers)
set width and height from the style attribute if present
2011-01-18 11:04:23 +00:00
benoit
dc23299924 - update p5-XML-Atom-SimpleFeed to 0.86
- maintainer timeout
2011-01-17 11:57:10 +00:00
sthen
b51c226ab2 SECURITY update to 5.2.17, and sync WANTLIB-imap while there.
lang/php will follow later.  ok robert@ (maintainer) aja@ jasper@
2011-01-17 11:47:19 +00:00
landry
958982dc66 Forgot to bump REVISION-lightning. All mozilla and no play makes jack a
dull boy.
Spotted by naddy@, thanks...
2011-01-16 16:56:02 +00:00
ajacoutot
8800006e21 Update to xcache-1.3.1.
from Brad (maintainer)
2011-01-16 07:58:09 +00:00
jasper
90847ee882 - remove USE_GROFF=Yes, manpages checked by brad.
from brad (MAINTAINER)
2011-01-15 10:56:51 +00:00
naddy
4cb3e73f03 bump revision for plist changes 4.8 -> 4.9 2011-01-15 01:09:42 +00:00
naddy
5ba9e6cafd Epoch bump for lang/gcc/3.3 because the version number shouldn't
count as older than one from 2005.

Revision bump for all ports that depend on libstdc++-3 because the
package specs have changed.
2011-01-15 01:07:45 +00:00
landry
f325f438b2 Add same PRAGMA secure_delete patch to seamonkey and ffx35 for the sake
of consistency, and build against systemwide sqlite.
2011-01-14 22:56:11 +00:00
landry
8bcab2e860 Actually depend on sqlite 3.7.4 which is the version where PRAGMA
secure_delete was added, and where FTS3 is enabled for mozilla-firefox.
2011-01-14 22:52:37 +00:00
jasper
23bdc66288 Remove mjc@ as maintainer after several generous time-outs. 2011-01-14 22:50:56 +00:00
landry
b07f44ae2e Add a patch doing PRAGMA secure_delete ON when opening connection to
sqlite database. Allows us to build against system sqlite3 again, and
get rid of the infamous symbol size mismatch warning reported several
times on ports@.
See https://bugzilla.mozilla.org/show_bug.cgi?id=445164 for why mozilla
now hard-requires secure_delete, and
https://bugzilla.mozilla.org/show_bug.cgi?id=546162 for the reasons they
don't want to make that an option and forces us to do such hacks.
ok jasper@
2011-01-14 22:49:47 +00:00
landry
7b2880d114 For all mozilla ports (but ffx4), build against system sqlite.
Trick configure into believing our sqlite has secure_delete enabled by
default.
2011-01-14 22:46:29 +00:00
jasper
00d1353d18 - update linkchecker to 6.2 2011-01-14 19:56:01 +00:00
jasper
a5b4450ad2 - SECURITY UPDATE of mhonarc to 2.6.18
Fixes:
CVE-2010-1677: DoS when processing html messages with deep nesting
CVE-2010-4524: Improper escaping of certain HTML sequences (XSS)
Specially crafted <base href> can lead to XSS exploit (bug id #32080)

From Christian Rueger (MAINTAINER)
2011-01-13 09:53:50 +00:00
stephan
78db77e639 update to 2.10 2011-01-13 08:46:36 +00:00
rpointel
1ad25b4ea2 Update ruby-thin to 1.2.7.
ok jeremy@ landry@
2011-01-12 17:47:38 +00:00
jeremy
0f569324e1 SUBDIR += squid,ntlm
OK jasper@
2011-01-11 18:01:09 +00:00
sthen
d803e5a5f6 update to 2.2 2011-01-11 14:04:30 +00:00
sebastia
0a41f531a0 Add sogo to the build, so that even more people might try it.
OK jasper@, landry@
2011-01-10 18:29:42 +00:00
marco
12e1cb6cd6 Bug fixes
ok stu and ian
2011-01-09 21:28:37 +00:00
stephan
0c4e382bcf update to 1.23 2011-01-08 13:31:15 +00:00
stephan
6b32512eaf update to 1.12 2011-01-08 13:24:28 +00:00
stephan
e296934ac9 update to 2.7 2011-01-08 13:21:17 +00:00
stephan
69f397385a update to 1.2, fix COMMENT 2011-01-08 13:14:26 +00:00
stephan
1689e80d3f update to 2.9 2011-01-08 13:10:54 +00:00
stephan
2cd5bcd3ae update to 3.9 2011-01-08 13:07:12 +00:00
stephan
c0a6e0ebef update to 2.4 2011-01-08 12:54:52 +00:00
stephan
1d028b9c06 update to 1.4 2011-01-08 12:48:46 +00:00
stephan
adc0696ba3 update to 2.2 2011-01-08 12:46:30 +00:00
landry
3eaef10d18 Fix WANTLIB. For some reason this one was not catched in bulks with
openldap 2.4.
2011-01-08 08:47:53 +00:00