14331 Commits

Author SHA1 Message Date
sthen
643bed3d2f sync wantlib for clamav update 2021-10-19 11:17:57 +00:00
sthen
6ed4ff28bd update to links+-2.25 2021-10-19 11:09:03 +00:00
tb
6376079493 www/dillo: prepare for upcoming libcrypto bump 2021-10-19 10:20:08 +00:00
kirby
d2428dc95b update to goaccess-1.5.2 2021-10-18 11:04:50 +00:00
kn
bba56a3b56 Remove realpath -> readlink(1) quirks, we have realpath(1) in base now 2021-10-17 13:06:59 +00:00
sthen
d570958e79 update to p5-JavaScript-Minifier-XS-0.15 2021-10-17 10:31:08 +00:00
sthen
bf14b95d2c update to p5-JavaScript-Minifier-1.16 2021-10-17 10:29:09 +00:00
rsadowski
3db8977762 Update to lighttpd 1.4.60
- HTTP/2 smoother and lower memory use (in general)
- HTTP/2 tuning to better handle aggressive client initial requests
- reduce memory footprint; workaround poor glibc behavior; jemalloc is better
- mod_magnet lua performance improvements
- mod_dirlisting performance improvements and new caching option
- memory constraints for extreme edge cases in mod_dirlisting, mod_ssi, mod_webdav
- connect(), write(), read() time limits on backends (separate from client timeouts)
- lighttpd restarts if large discontinuity in time occurs (embedded systems)
- RFC7233 Range support for all non-streaming responses, not only static files
- connect() to backend now has default 8 second timeout (configurable)

From Brad
2021-10-16 07:54:22 +00:00
kn
c9400a63e1 Use appropiate mandoc linting level
Otherwise post-install fails if varnish manuals are not installed;
noticed by naddy, thanks.
2021-10-15 21:51:53 +00:00
gonzalo
b09364ab96 Update for Nextcloud to 21.0.5
OK rsadoski@
2021-10-15 09:06:29 +00:00
gonzalo
cdca87e39f Update for Nextcloud to 20.0.13
OK rsadowski@
2021-10-15 09:04:50 +00:00
kn
db8831473f Lint varnishreload script and manual
Better fail in "make fake" then get frustrated with a broken script;
we control/authored both files so yell if they are not up to standard.
2021-10-14 20:57:55 +00:00
kn
df283082d4 Fix statedir creation in PLIST, set management interface port explicitly
No idea why but @extra-add to create /var/varnish on installation does not
work;  it's odd anyway, so use working @sample instead.

To have varnishreload(1) work out of the box, it must know where to find
varnishd(1), which however listens on a random management port unless
explicitly given.

With these two fixed, "pkg_add varnish && rcctl restart|reload varnishd"
work again without any changes in between.
2021-10-13 10:29:29 +00:00
kn
5d4203d0c3 Use distribution configure script, drop autoreconf/conf/make stuff
No need for this (anymore?) as release tarballs ship a ready-to-use script.
No PLIST change.
2021-10-13 08:30:46 +00:00
pvk
231b818c41 Update gitea 1.15.3 -> 1.15.4
Changelog: https://github.com/go-gitea/gitea/releases/tag/v1.15.4
2021-10-10 08:45:37 +00:00
sthen
6de95a4656 update to composer-2.1.9 2021-10-08 20:20:41 +00:00
robert
2c3ade3b84 udpate to 94.0.4606.81 2021-10-08 14:58:14 +00:00
sthen
65c5bce2cc update to Apache httpd 2.4.51, the previous fix for CVE-2021-41773 was
insufficient. ok giovanni@

"It was found that the fix for CVE-2021-41773 in Apache HTTP Server
2.4.50 was insufficient. An attacker could use a path traversal attack
to map URLs to files outside the directories configured by Alias-like
directives.

If files outside of these directories are not protected by the usual
default configuration "require all denied", these requests can succeed.
If CGI scripts are also enabled for these aliased pathes, this could
allow for remote code execution.

This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier
versions."
2021-10-07 17:19:18 +00:00
kirby
6bf49816c4 update HOMEPAGE and switch to HTTPS 2021-10-06 14:13:00 +00:00
pvk
a9f154a313 Update gitea 1.15.2 -> 1.15.3
Changelog: https://github.com/go-gitea/gitea/releases/tag/v1.15.3
2021-10-06 11:25:06 +00:00
gonzalo
ad31fc6364 Update for Nextcloud to 22.2.0
OK rsadowski@

Tested by Adriano Barbosa, thanks!

cvs: ----------------------------------------------------------------------
2021-10-06 08:34:50 +00:00
giovanni
353fac875e Security update to 2.4.50
fixes CVE-2021-41524 and CVE-2021-41773
2021-10-05 15:35:26 +00:00
landry
ac8fa77397 www/firefox-esr: update to 91.2.0.
See https://www.mozilla.org/en-US/firefox/91.2.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-45/
2021-10-05 13:10:20 +00:00
landry
517de2c831 www/mozilla-firefox: update to 93.0.
See https://www.mozilla.org/en-US/firefox/93.0/releasenotes/
Fixes https://www.mozilla.org/en-US/security/advisories/mfsa2021-43/

add a patch to prevent a sysctl call with KERN_PROC_ARGV triggering
pledge violations.
2021-10-05 13:08:43 +00:00
tb
6cb9641d9d www/newsboat: update to 2.25 2021-10-05 05:16:06 +00:00
sthen
c5a57a3b5f update to squid-5.2 2021-10-04 20:11:18 +00:00
robert
9211827887 update to 5.0.2 2021-10-04 18:18:52 +00:00
robert
0923ab631c unbreak after harfbuzz update by cherry-picking some upstream changes 2021-10-04 14:55:17 +00:00
robert
544c7e35d1 update to 94.0.4606.71 2021-10-03 21:26:51 +00:00
kn
814e74b713 Update to varnish 7.0.0
https://varnish-cache.org/releases/rel7.0.0.html
2021-10-03 21:14:21 +00:00
sthen
3cc41ab6f5 update to nghttp2-1.45.1 2021-10-03 19:17:48 +00:00
sthen
da03611585 update to httpie-2.5.0 2021-10-03 19:17:10 +00:00
jturner
9ab430699b Update openradtool to 0.13.9 2021-10-03 19:04:34 +00:00
jturner
f9350a8c62 Update kcgi to 0.13.0 2021-10-03 19:04:15 +00:00
ajacoutot
e66d1a0244 Bump to be ahead of -stable.
ok sthen@
2021-09-21 10:44:46 +00:00
cwen
c2690555bf webkitgtk4: use the "lonesome" DPB_PROPERTIES on macppc
No objections from aja@ (maintainer)
2021-09-19 19:09:39 +00:00
ajacoutot
3cdee6000f Update to webkitgtk4-2.32.4. 2021-09-17 14:50:59 +00:00
sthen
f41b2ce6f9 update to composer-2.1.8, mostly regression fixes 2021-09-17 10:17:59 +00:00
giovanni
4218767dd7 Update to 2.4.49
fixes CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275
and CVE-2021-40438.
Full changelog at https://downloads.apache.org/httpd/CHANGES_2.4.49
2021-09-16 21:18:10 +00:00
robert
18683c3bac bump arm64 memory limit up to 512M (from upstream) because it is partitioned
down in the JIT code so it will not hit the limit and allow amd64 to allocate
128M by default

ok aja@
2021-09-14 14:03:32 +00:00
sebastia
57a73b54fc update 5.1.1 -> 5.2.0 2021-09-14 12:21:58 +00:00
sebastia
c07042d9ea update 5.1.1 -> 5.2.0 2021-09-14 12:21:38 +00:00
sthen
243545d2b4 fix luakit version display; from maintainer Stefan Hagen
small tweak from me, to add a comment near GH_TAGNAME to mention that it's
used later in the Makefile
2021-09-14 10:34:18 +00:00
robert
3131ab94db update to 93.0.4577.82 2021-09-14 06:19:48 +00:00
robert
3609fb20b9 unbreak on arm64 by shuffling some code around because it was broken
in case FIXED_EXECUTABLE_MEMORY_POOL_SIZE_IN_MB is defined
2021-09-13 16:31:09 +00:00
rsadowski
ea21d0899f Update qutebrowser to 2.3.1
Update diff from maintainer
2021-09-12 14:26:40 +00:00
ajacoutot
20d5516bf3 Update to castor-0.8.18. 2021-09-11 08:47:54 +00:00
tb
18f5a5036d Fix build of nginx-lua after libssl crank. 2021-09-10 15:19:00 +00:00
kevlo
98b694931e Add unveil for ~/.config/fcitx to make the input method work when
using fcitx.

Reported by Yifei Zhan.

ok sthen@
2021-09-10 13:36:51 +00:00
robert
ae4f61f369 sync arm64 ffmpeg config 2021-09-09 08:19:51 +00:00