Commit Graph

72666 Commits

Author SHA1 Message Date
sthen
b76eef507e update to new dimp/horde/imp 2012-02-16 21:19:30 +00:00
naddy
34e15bab6a sync, 7386; ok sthen@ 2012-02-09 22:24:41 +00:00
ajacoutot
c8731b53b3 Fix a NULL ptr dereference (from upstream).
reported by "remco"
ok naddy@ sthen@
2012-02-07 06:36:39 +00:00
espie
5ee810f609 update fix: vte2 should *not* update to vte3.
parts of gnome want vte3, and yet some other stuff (py-vte) still wants vte2.
if we let vte2->vte3 because of gnome, then py-vte will complain, and the
update won't happen.

considering we've set things up so vte2 and vte3 can coexist, the thing to do
is have vte2 update to vte2-newer, let gnome3 pick and install vte3 as well,
keeping py-vte happy and ending with a fully updated machine.

On the way, need to tell quirks AND vte about vte-pyhelper, which vanished
into vte2/vte3 (and again, pick one).

(triggers a bug in pkg_add caching which requires -current, btw ;( )

Solves update issue reported by Mikolaj.

Ports STILL fully locked, this making it in as a vital update thing,
(no don't ask, your silly little update won't make it)

okayed by naddy@
2012-02-06 22:07:09 +00:00
naddy
71ae0c9d4a sync, 7386; ok sthen@ 2012-02-05 19:04:23 +00:00
gsoares
b38fd19cea Fix for CVE-2011-3464
(libpng "png_formatted_warning()" Off-by-One Vulnerability)

patch came from upstream git:
(http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commit;h=
00c6a9a62c1825617c35c03ceb408114fffeca32)

OK sthen@
2012-02-03 18:23:14 +00:00
landry
878a92f4a1 Mark gcc 4.6 as BROKEN-sparc64, gengtype loops infinitely.
ok espie@ sthen@
2012-02-03 17:01:17 +00:00
dcoppa
b1d0bffc10 *** empty log message *** 2012-02-03 11:48:52 +00:00
espie
560cb4021c xss agregator dos in 6.22
okay sthen@
2012-02-03 10:14:12 +00:00
sthen
9670a9ddf5 Update to PHP 5.3.10, rolling in yesterday's security fix and also
fixing a memory leak.  OK robert@
2012-02-03 08:44:51 +00:00
ajacoutot
d5be9e9c84 Add a patch from upstream to fix:
phpLDAPadmin "base" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47852/

ok sthen@
2012-02-03 07:48:41 +00:00
sthen
9f37f62817 Add a fix for CVE-2012-0029 from QEMU upstream, ok Brad, ajacoutot
"Heap-based buffer overflow in the process_tx_desc function in the
e1000 emulation (hw/e1000.c) [...] allows guest OS users to cause
a denial of service (QEMU crash) and possibly execute arbitrary
code via crafted legacy mode packets."
2012-02-02 22:07:33 +00:00
sthen
42efe7f60b Add a patch to Unbound from upstream correcting a bug resulting
in failure to validate DNSSEC which was introduced in 1.4.15:
http://permalink.gmane.org/gmane.network.dns.unbound.user/2006

Full update to Unbound 1.4.16 can wait until we're done with 5.1

ok ajacoutot@
2012-02-02 13:42:13 +00:00
ajacoutot
b9644080ef Merge a patch from upstream that fixes a crash when printing from mozilla
apps to a CUPS printer.

ok sthen@
2012-02-02 09:21:07 +00:00
sthen
cb3bccfa8f SECURITY - add a fix from upstream for a bug introduced with the recent
fix for CVE-2011-4885 included in PHP 5.3.9

Note that the Suhosin extension (which is enabled by default in our packages)
mitigates against this problem

ok robert@ ajacoutot@
2012-02-02 08:48:27 +00:00
ajacoutot
2c7aaa9e02 tracker,-evolution has been fixed.
ok sthen@
2012-02-02 07:14:45 +00:00
ajacoutot
1506bbacd1 Fix a typo that would make nautilus to use the wrong class in
nautilus_application_class_init(); from upstream.

ok sthen@
2012-02-02 07:14:07 +00:00
ajacoutot
593772291e Bring a patch from upstream to fix a hard crash with the -evolution
subpackage.
Sync the tracker_file_open_fd patches with upstream.

ok sthen@
2012-02-02 07:12:23 +00:00
ajacoutot
850003653b Remove bogus symlink which can make cups-driverd go into a loop.
Add a note about updating to a new major version (may require to revove
the cache).
Check the configuration file sanity in rc_pre().

ok sthen@
2012-02-02 07:11:19 +00:00
ajacoutot
9852adda0e Implement platform_get_argv0.
We are using autohell to put '-Wstrict-aliasing' into Makefile.am.

ok sthen@
2012-02-02 07:10:17 +00:00
jakob
ea6d4f3311 downgrade from 2.9.0 to 2.8.8; requested by sthen & naddy 2012-02-02 06:57:39 +00:00
jakob
f5294c5fdb upgrade to Postfix 2.9.0; from brad 2012-02-01 21:42:54 +00:00
sthen
a18bf12c7e Revert. Ports commits need explicit approval at this time. 2012-02-01 21:37:48 +00:00
jakob
3939d6f2b1 update postfix snapshot; from brad 2012-02-01 21:30:55 +00:00
jakob
343acd910b Postfix 2.8.8 was reissued due to an error. Patch removed and REVISION++. 2012-02-01 19:56:13 +00:00
jakob
bccc341376 Postfix 2.8.8 (legacy release) 2012-02-01 19:26:33 +00:00
mpi
0dd16b57f8 Fix a memleak reported by upstream.
ok ajacoutot@
2012-02-01 13:26:20 +00:00
ajacoutot
d043b8d6fc Update to webacula-5.5.1 and add a couple of saner defaults to that it
works out of the box with our current version of bacula.

ok sthen@
2012-02-01 12:59:06 +00:00
nigel
cc435678e2 Remove extra REVISION and bump REVISION
Ok ajc@
2012-02-01 12:01:40 +00:00
dcoppa
4be49a9b0c This crashes only when built with gcc 4.2.1, works fine with 4.6.2. Adjust
BROKEN marker consequently.

req.by/ok sthen@
2012-02-01 11:24:46 +00:00
pea
d1116f6eb5 Update to 2012-01-25
Reminded by Christopher Zimmermann (thanks !).

ok ajacoutot@
2012-02-01 09:12:30 +00:00
brynet
3af169cf2a Add my coordinates, icbm's away!
ok sthen@
2012-01-31 23:24:00 +00:00
espie
c422b5ae52 when you never fetched anything after the cipher change, that directory
doesn't exist... don't error out...
2012-01-31 15:45:19 +00:00
sthen
04b42867ab Use GNU libtool, ports libtool doesn't build cgi's statically like it should.
Noted while following up on misc@ post from Pavel Pocheptsov. Bump all the
subpackages for safety though in theory only -cgi should be affected.
While there tweak pre-configure to allow 'make configure' to be re-run
after interruption.

ok ajacoutot@
2012-01-31 14:20:18 +00:00
sthen
1fd7849123 - pdfjam and texlive base conflict because texlive now includes the pdfjam
scripts. add @conflict marker to texlive and remove/unlink pdfjam.

- add missing @man annotation in texmf

conflict noted by naddy@. ok ajacoutot@ espie@
2012-01-31 14:15:57 +00:00
espie
0322fed35a properly re-conflict gpg1/2. Noticed by naddy@
okay ajacoutot@, pea@
2012-01-31 10:51:48 +00:00
ajacoutot
47f56b9a41 Fix conflicts.
reported by naddy@
ok sthen@
2012-01-31 09:24:23 +00:00
sthen
98a844eafa SECURITY fix for CVE-2012-0817, memory leak affecting samba 3.6.0 to 3.6.2
can cause DoS. Pointed out by maintainer.

http://ftp.samba.org/pub/samba/patches/security/samba-3.6.2-CVE-2012-0817.patch

ok ajacoutot@
2012-01-31 09:12:58 +00:00
ajacoutot
51ce8e8a5e Unbreak runtime: set the CATALOG version to match the bacula version we
have in tree.

ok sthen@
2012-01-31 08:59:29 +00:00
ajacoutot
f350ec581f Remove conflicting file from -ui... grr @ make plist.
reported by naddy@
ok sthen@
2012-01-31 07:58:19 +00:00
sthen
4785675f6c Missed bump (the POP fix did actually need a bump as it also affected
the non-broken flavour). Pointed out by pascal@
2012-01-30 19:50:26 +00:00
sthen
a1c5cce0fd SECURITY update to emacs 23.4; EDE (part of CEDET) would automatically run
a Project.ede file if present. The other emacs branches do not have this
functionality.

From Manuel Giraud, ok ajacoutot@
2012-01-30 17:25:53 +00:00
sthen
ab10b10e03 link nmh,sasl, suggested by ajacoutot@ 2012-01-30 17:23:59 +00:00
sthen
6c1d928857 - fix sasl flavour and POP support of mail/nmh, which were broken
following update.

- add missing libiconv MODULES for sasl flavour.

ok ajacoutot@

from pascal@, various versions of this ok william@ (maintainer) and bentley@
2012-01-30 17:23:41 +00:00
espie
10df39f505 missing .P, zap extra parentheses. 2012-01-30 17:11:38 +00:00
ajacoutot
00fa1c45b1 Remove some obsolete syscalls and add one for fpathconf.
From Brad
ok espie@
2012-01-30 16:02:24 +00:00
espie
7b9687cb60 document -DHISTORY_ONLY
nitpick at column width.
2012-01-30 15:15:24 +00:00
espie
7f2b8805ae finish distfiles history handling: people who don't fetch/build the whole
tree may want to weed distfiles too, so allow for a full scan of the tree
without building/fetching anything, just to update history:

dpb -DHISTORY_ONLY

(just requires making sure the right engines are created, and a very shortened
loop at end waiting for history to be updated).
2012-01-30 15:11:04 +00:00
espie
623eb8b2c5 Better name for the task that, duh, is actually updating distfiles history. 2012-01-30 14:19:30 +00:00
jsing
462a218cf5 Add openvpn-auth-ldap to build.
ok sthen@
2012-01-30 14:17:50 +00:00