54988 Commits

Author SHA1 Message Date
sthen
3d9f13534b bump PKGNAMEs, the httpd abi changed, resulting in segfaults after
updating httpd until newly-built packages are installed.

ok espie@
2010-02-26 14:45:02 +00:00
sthen
bb6fa8ee6c - SECURITY update to 1.6.0.25, fixing AST-2010-003. if you use ACL rules
with something like 'deny 0.0.0.0/0' then this affects you. workaround:
'deny 0.0.0.0/0.0.0.0'

- fix fullpkgpath's for the subpackages, they were including the flavour
and shouldn't have - fixes problems with dpb3 found by naddy. add @pkgpath
markers relating to this fix.

ok naddy@
(reminder, ports is not fully open, do not commit without specific permission)
2010-02-26 12:44:14 +00:00
espie
a435ac28e6 a few improvemennts:
- give more responsibility to tasks, so that they can time themselves without
any higher level support
- record errors the opposite way, so that more recent errors show up first
- better terminal display: use fullwidth, clamp to terminal height
- less logsize fuzz, always trim preparation stages
- dpb's pid - dependent ssh socket names, so that 2 dpb can talk to the same machine.
- pid display for dpb itself, and ssh masters.
2010-02-26 12:14:57 +00:00
espie
a0aa57c2e3 being clueless shouldn't fork-bomb.
featuring tedu@ as crash-test dummy ;-)
2010-02-26 12:11:55 +00:00
sthen
0e401c36bc - update/add OpenBSD-specific plugins (interrupt and pf monitoring), from mk@
- redo MESSAGE-main, making it a little more obvious how to get started,
following discussions with stephan@ and jasper@

ok jasper@
(reminder, ports is not fully open, do not commit without specific permission)
2010-02-25 17:07:17 +00:00
sthen
8bef221d39 Update to 1.4.7, fixing a problem with UTF conversion. From Brad,
ok ajacoutot@ kevlo@

(reminder, ports is not fully open, do not commit without specific permission)
2010-02-25 14:42:52 +00:00
phessler
cd7d60e242 Allow Python to build on loongson. Bring in some libffi fixes, inspired
by jasper@'s fixes to the libffi port.

Mark mips64 (aka, sgi) as BROKEN, as the build fails.  We'll look closer
at this after unlock.

OK jasper@

ports is unlocked for a while only for those who have been informed.
2010-02-25 11:02:39 +00:00
robert
f43f8ed99e Install the tmp dir in the chroot with stricter permissions and change
owner to the www users.

ok ajacoutot@
2010-02-25 09:05:04 +00:00
naddy
2c0af6bc4f SECURITY update to 3.0.18:
MFSA 2010-05 XSS hazard using SVG document and binary Content-Type
MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain
MFSA 2010-03 Use-after-free crash in HTML parser
MFSA 2010-01 Crashes with evidence of memory corruption

Also fix some corrupted $OpenBSD keywords, pointed out by sthen@

ok sthen@
2010-02-24 18:17:23 +00:00
sthen
f13bb86663 SECURITY update to Firefox 3.5.8. Same diff from naddy@ and Daniel Dickman.
Update sqlite dependency while there.

ok naddy@
(reminder, ports is not fully open, do not commit without specific permission)
2010-02-24 16:59:49 +00:00
sthen
188736352e Update to 4.80.1-1, fixes more Perl 5.10.1 taint mode problems
and problems with certain virus scanners.

ok Brad (maintainer), jasper@.

ports is not fully open, do not commit without specific permission.
2010-02-24 15:28:14 +00:00
giovanni
01af372e44 Fix run-dependencies
ok jasper@

(reminder, ports is not fully open.)
2010-02-24 13:51:24 +00:00
sthen
521a7f32bf @sample the roundcubemail/.htaccess file, it contains user-serviceable parts.
Requested by/ok ajacoutot@

(reminder, ports is not fully open.)
2010-02-24 13:40:37 +00:00
espie
61d822e8d5 work-in-progress: new distributed ports builder.
will replace old dpb once we're satisfied it works.
some features:
- no more waiting, starts building right away, the dependencies discovery
process is just another job,
- monitor display that makes it easy to know when jobs get stuck, or machines
get down.
- loads of logs,
- locks that stay around in case of error, and that you can remove when
the error has been fixed (dpb picks it up),
- smart choice of which package to build,
- can take into account previous build times,
- builds on machines of differing speed, offloading "lighter" jobs to slower
boxes.

(again, ports is still locked for most people)
2010-02-24 11:33:31 +00:00
landry
a2bd8e8fc3 Allow libsigsegv to build on hppa, thus allowing bash and rarian and a
shitload of gnome stuff to build. Hints from kettenis@ for the sp register.
ok espie@ jasper@

while is unlocked ports only for those informed have been.
2010-02-23 22:51:46 +00:00
sthen
e43d961628 Fix an LP64 segfault and flesh out PLIST. Original diff from
Aaron Stellman, revised by Daniel Dickman and myself.

ok jasper@

ports is unlocked for a while only for those who have been informed.
IF JASPER DID NOT MAIL YOU, DO NOT COMMIT!
2010-02-23 21:35:37 +00:00
jasper
872ea89026 Increase offset to reduce false positives.
ok sthen@

ports is unlocked for a while only for those who have been informed.
if I DID NOT MAIL YOU, DO NOT COMMIT!
2010-02-23 20:34:01 +00:00
jasper
72bde0cc0a - prevent running a configure build test, which allows mips64(el) to pass
configure and package.

ok sthen@

ports is unlocked for a while only for those who have been informed.
if I DID NOT MAIL YOU, DO NOT COMMIT!
2010-02-23 20:15:01 +00:00
jasper
6ee5d7b9ef - fix build on mips64(el)
ok sthen@

ports is unlocked for a while only for those who have been informed.
if I DID NOT MAIL YOU, DO NOT COMMIT!
2010-02-23 20:12:04 +00:00
jasper
9e316775ae - fix build on mips64(el), other arches are untouched
ok sthen@

ports is unlocked for a while only for those who have been informed.
if I DID NOT MAIL YOU, DO NOT COMMIT!
2010-02-23 20:11:15 +00:00
jasper
99c462b4ab Add back homepage/master_sites.
ok benoit@ (MAINTAINER), sthen@

ports is unlocked for a while only for those who have been informed.
if I DID NOT MAIL YOU, DO NOT COMMIT!
2010-02-23 20:09:12 +00:00
jasper
49caddd96d - update HOMEPAGE
- regen WANTLIB

ok sthen@

ports is unlocked for a while only for those who have been informed.
if I DID NOT MAIL YOU, DO NOT COMMIT!
2010-02-23 20:08:04 +00:00
phessler
f92d2c5701 enable building on loongson
OK jasper@

ports is unlocked for a while only for those who have been informed.
2010-02-23 19:59:13 +00:00
phessler
4591b5e88f add mips64el to the list of supported arches, unbreaks for loongson
OK jasper@

ports is unlocked for a while only for those who have been informed.
2010-02-23 19:55:15 +00:00
jasper
de46d01df2 - enable libffi on mips64(el)
ok espie@ phessler@

ports is unlocked for a while only for those who have been informed.
if I DID NOT MAIL YOU, DO NOT COMMIT!
2010-02-23 19:08:55 +00:00
naddy
2e36cd0adc sync, 6190 2010-02-17 18:47:01 +00:00
jasper
9aac101629 - fix a regression from the last openmotif update, which would manifest
in an extra (empty) pane in xpdf.

from upstream bug #1476.

from sthen@, tested by kili@ and me
2010-02-17 18:15:09 +00:00
jsg
c4093906b0 Bring in pdfjadetex.ini from TeX Live svn revision 16978
by Karl Berry, which unbreaks jadetex with TeX Live 2009.

ok edd@ jasper@
2010-02-17 10:19:08 +00:00
jakemsr
ed39c64d90 remove empty flavor of quake port, since there is no such thing
ok naddy@, espie@
2010-02-16 21:29:22 +00:00
espie
8461975175 band-aid for out-of-date, as noticed by various people
(there are probably nicer ways to do this now)
2010-02-16 20:50:32 +00:00
naddy
74034d3a79 sync Ada bootstrap; with and ok espie@ 2010-02-14 20:13:18 +00:00
naddy
9d77290bb6 make sure flavor-invariant packages really don't pick up any flavor 2010-02-14 20:01:00 +00:00
espie
9e0b3d6c97 don't iterate on IGNORE, this breaks java's jrl message 2010-02-13 21:11:35 +00:00
jasper
b63b3e3e1a this works fine on sgi and loongson, remove BROKEN marker
ok espie@
2010-02-13 13:17:03 +00:00
landry
a66ec0703b Use -O0 too on hppa to let this brain^Wmemory-eater build.
ok jasper@
2010-02-13 13:10:19 +00:00
landry
59f3a8ba9a Fix packaging, symlink in package was pointing to a file in fake dir.
Spotted by PLIST_DB.
ok espie@
2010-02-13 12:20:23 +00:00
ajacoutot
fad6692e73 SECURITY: CVE-2010-0422, handle monitor hotplugging more securely.
ok jasper@
2010-02-13 09:17:33 +00:00
jakemsr
fe1e131411 display maximum delay as miliseconds instead of fractional seconds to
workaround a crash when sprintf()ing a double (or float) type argument

ok jasper@
2010-02-12 20:46:16 +00:00
espie
f7f5b4ff0a some important improvements to bsd.port.mk
- simplify IGNORE handling, always define it, even when NO_IGNORE is set,
and only use it for the targets it's meant to influence.
- make it possible to multiply-IGNORE a port, so stuff that's BROKEN and
NOT_FOR_ARCH will show up as both.
- DESCRIBE_TARGETs can die, since we no longer need special IGNORE dance
for them.
- add an IGNORE_IS_FATAL tweak, so that ignored ports can actually error out.
- reorg dump-vars to choose what to show, including new IGNORE, and COMES_WITH.
- name an explicit prepare step, which does check build dependencies and
install them (useful for build timing purposes)
- move the do-fetch test out, so that we can add pre-extract and do-extract
there eventually.
2010-02-12 12:00:19 +00:00
espie
94160ea7d4 get mksqlitedb to handle IGNORE and COMES_WITH if they show up.
Also don't spazz out if we meet variables we don't know. This makes us
safe from changes in dump-vars.
2010-02-12 11:53:09 +00:00
naddy
f7d8d158a2 bump so we don't collide with earlier package names; ok ajacoutot@ 2010-02-10 16:32:22 +00:00
naddy
3510a6604a SECURITY fix for libcurl data callback excessive length bug.
http://curl.haxx.se/docs/adv_20100209.html

ok ajacoutot@, jasper@
2010-02-10 16:27:32 +00:00
matthieu
d360aa3a46 add support for mips64el. ok jasper@ 2010-02-09 20:43:57 +00:00
sthen
f2d5b5ba92 SECURITY fix, add patches from upstream to avoid a buffer overflow with
long URLs. Based on a diff from "iridium", similar diff from maintainer.
ok jasper@
2010-02-09 13:44:28 +00:00
jasper
228964a8d2 - extend archtecture tests for mips64el
ok naddy@ phessler@
2010-02-09 12:23:59 +00:00
jasper
fcaeef2071 - extend archtecture tests for mips64el
ok naddy@
2010-02-09 12:18:45 +00:00
jasper
5738e2c41e - let this build on mips64el too
ok espie@
2010-02-08 17:42:51 +00:00
ajacoutot
0414f64f1b SECURITY: Ensure keyboard grab and unlock dialog exist after monitor removal
(CVE-2010-0414)

gnome-screensaver currently doesn't deal with monitors getting
removed properly.  If the unlock dialog is on the removed monitor
then the unlock dialog and its associated keyboard grab are not
moved to an existing monitor when the monitor removal is processed.

This means that users can gain access to the locked system by placing
the mouse pointer on an external monitor and then disconnect the
external monitor.

https://bugzilla.gnome.org/show_bug.cgi?id=609337

ok jasper@
2010-02-08 17:04:14 +00:00
jasper
7b605490f2 - add the plist i've used to build the first packages
ok naddy@
2010-02-08 12:57:02 +00:00
jasper
733af9e6e8 - make this work on mips64el too, giving bash and bison a chance to build as well.
ok naddy@
2010-02-07 21:02:46 +00:00