Commit Graph

4827 Commits

Author SHA1 Message Date
espie
75b2ed5940 comment out the php4 compat module, there's absolutely no reason for us
to install it.
2010-03-22 10:29:33 +00:00
espie
e2e23af52a a few minor updates 2010-03-22 10:28:38 +00:00
kevlo
094796a27c update to 2.9.2
ok merdely@
2010-03-22 02:00:49 +00:00
sthen
b11b8e9f9f - fix RUN_DEPENDS-main to pull in ${RUN_DEPENDS}, so python gets
installed, needed for the admin interface. ok ajacoutot@

- install blank sample logfiles, rather than make them a copy of
the sample index.html

- unbreak sample rc.local lines in MESSAGE-main (foo-bar isn't
a valid shell variable, foo_bar is)

all found by Rod Whitworth, thanks!
2010-03-22 01:18:26 +00:00
jasper
ec5fe3484c - add a potpourri of fixes from svn 2010-03-21 10:50:14 +00:00
ajacoutot
c4d73539ee Update to community-id-1.2.1. 2010-03-21 10:32:31 +00:00
ajacoutot
2806a1445c Update to gtkhtml3-3.28.3. 2010-03-21 10:08:47 +00:00
sthen
a6aa965fae update to 1.4.26, from Brad 2010-03-21 09:56:55 +00:00
jasper
f0d2133a85 - update py-webkitgtk to 1.1.7 2010-03-21 09:27:54 +00:00
robert
c0f77b04f2 update to version 5.2.13 2010-03-21 09:05:55 +00:00
sthen
44da79e6b5 update to 0.11.7 2010-03-20 23:53:56 +00:00
kili
7c3f32e3b4 Update to 1.0.4.1.
Add a syslog related fix from upstream.

Reminded by Tiago Cunha, who sent me an update diff a
few days ago.
2010-03-20 21:32:23 +00:00
jasper
06682c4bde - update tikiwiki to 4.2
including SECURITY FIXES for SA38896 SA38896
2010-03-20 17:01:28 +00:00
ajacoutot
e6a9498b41 Add a comment about why we don't use libtool from ports.
"yeah... sure... ok" robert@
2010-03-20 17:00:21 +00:00
jasper
8d6d68b504 - set license version
- add working master sites (this port could badly use an update btw)
      - regen and split patches
	- regen plist
	  - deadly.org is long gone.
2010-03-20 16:55:33 +00:00
ajacoutot
03fc5f7544 Maintainance update to version 3.0.7. 2010-03-20 16:54:40 +00:00
jasper
96ab091d1d - update cms-ms to 1.6.6 2010-03-20 16:54:23 +00:00
ajacoutot
eb5566b32a Fix configuration files name.
ok jasper@ sturm@ (maintainer)
2010-03-20 16:51:42 +00:00
espie
cba2887019 security fix "easter egg": old fckeditor is no longer supported, and the
new one tells you fckeditor-2.6.3 is holed... nasty
2010-03-05 10:07:59 +00:00
stephan
9076085bd6 security update to 5.22, addresses DRUPAL-SA-CORE-2010-001.
ok espie@
2010-03-05 09:39:52 +00:00
stephan
f691a20cad security update to 6.16, fixes DRUPAL-SA-CORE-2010-001.
ok jasper@, "I can vouch for it" @espie
2010-03-05 09:09:23 +00:00
stephan
b173411b8f security update to 1.4, fixes DRUPAL-SA-CONTRIB-2010-023.
ok jasper@ and espie@
2010-03-04 11:09:54 +00:00
jasper
28f9a1db02 - update statusnet to 0.8.3
among the many bugfixes is a security fix for a local file inclusion vulnerability.

ok sthen@
2010-03-03 14:17:33 +00:00
benoit
5ab72aa347 - update dillo to 2.2
- update patches
- regen PLIST

This update fixes security vulnerability.
Detailed information: http://secunia.com/advisories/38569/

ok jasper@
2010-03-01 14:53:31 +00:00
espie
816c0235eb a few more rotten eggs 2010-03-01 12:06:02 +00:00
espie
d5858ddd80 unprotect archive, so that clean works 2010-03-01 12:02:20 +00:00
william
efb25578f2 nginx-0.7.65; bugfixes
update from and reminded by Toni Mueller, thanks

ok jasper@
(reminder, ports is not fully open, do not commit without specific permission)
2010-03-01 04:04:50 +00:00
espie
7d1a6d8c2b oopsie 2010-02-28 23:56:20 +00:00
espie
6a383c71cd fix FULLPKGPATHs 2010-02-26 18:31:57 +00:00
sthen
3d9f13534b bump PKGNAMEs, the httpd abi changed, resulting in segfaults after
updating httpd until newly-built packages are installed.

ok espie@
2010-02-26 14:45:02 +00:00
robert
f43f8ed99e Install the tmp dir in the chroot with stricter permissions and change
owner to the www users.

ok ajacoutot@
2010-02-25 09:05:04 +00:00
naddy
2c0af6bc4f SECURITY update to 3.0.18:
MFSA 2010-05 XSS hazard using SVG document and binary Content-Type
MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain
MFSA 2010-03 Use-after-free crash in HTML parser
MFSA 2010-01 Crashes with evidence of memory corruption

Also fix some corrupted $OpenBSD keywords, pointed out by sthen@

ok sthen@
2010-02-24 18:17:23 +00:00
sthen
f13bb86663 SECURITY update to Firefox 3.5.8. Same diff from naddy@ and Daniel Dickman.
Update sqlite dependency while there.

ok naddy@
(reminder, ports is not fully open, do not commit without specific permission)
2010-02-24 16:59:49 +00:00
sthen
f2d5b5ba92 SECURITY fix, add patches from upstream to avoid a buffer overflow with
long URLs. Based on a diff from "iridium", similar diff from maintainer.
ok jasper@
2010-02-09 13:44:28 +00:00
jasper
d904463d52 saying pkg_arch=* when invoking cc is wrong wrong wrong
ok ajacoutot@
2010-02-06 22:15:21 +00:00
ajacoutot
c991d74a35 While I'm still unsure why gamin is needed at all, at least use a
correct run_depends: we mean gamin, not libgamin.

"go ahead" jasper@
2010-02-03 12:32:54 +00:00
jasper
82012ecbfd SECURITY FIX for CVE-2010-0308, "Squid DNS Packet Processing
Denial of Service Vulnerability"

brad (MAINTAINER) came up with the same diff
ok ajacoutot@ sthen@
2010-02-03 06:41:17 +00:00
pvalchev
7bfaeca2b9 gamin RUN_DEPENDS, from speedvin@archlinux.us; ok jasper espie 2010-02-03 01:05:41 +00:00
sthen
639fea5f60 SECURITY fix for CVE-2010-0295 DoS issue.
http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt

From Brad, ok ajacoutot@ jasper@
2010-02-02 08:10:29 +00:00
espie
100f0c7870 SUBDIR += is wrong: it means the makefile will pick up SUBDIR from env, thus
breaking cd /usr/ports && SUBDIR=some/path make something for
category makefiles. While there, also put spaces around += uniformously.
okay naddy@, jasper@
2010-02-01 17:00:12 +00:00
jolan
ca7dbb81a7 fix MASTER_SITES, ok naddy@ 2010-01-30 19:08:30 +00:00
naddy
72b44c5513 bump PKGNAME for PLIST changes 4.6 -> 4.7 2010-01-27 21:43:27 +00:00
sthen
77516f5da3 Mention in MESSAGE that this package currently requires SSE2,
and show how to check. This should change sometime, but the
fix is fiddly and for now we should let people know. Committing
now to make sure something is in pre-4.7.

Discussed with pval, this diff ok jasper@ landry@
2010-01-26 15:48:21 +00:00
landry
1cbf5cc3c8 Add gstreamer plugins-ffmpeg & plugins-good to RUN_DEPENDS, somehow i
forgot it when updating to 1.1.18. This will be needed for the day HTML5
video actually works in webkit-based browsers..
ok espie@ jasper@
2010-01-23 10:14:37 +00:00
landry
26e100eda6 Add a patch to fix a use-after-free & a memory leak, from canacar@.
Fwded' and commited upstream.
ok jasper@ sthen@ no objection ajacoutot@
2010-01-19 14:25:08 +00:00
jasper
df30126d85 SECURITY FIX for CVE-2009-4427
phpLDAPadmin "cmd" Local File Inclusion Vulnerability

ok ajacoutot@
2010-01-13 14:36:52 +00:00
ajacoutot
d16d96252f SECURITY: CVE-2009-4489
http://www.vupen.com/english/advisories/2010/0090
(thanks fgsch@ for the link/notice)

Update to cherokee-0.99.39.
Remove debug FLAVOR and use ifdef DEBUG.
Add rrdtool to run_depends.
Byte-compile python modules so that they are registered in the PLIST.

Be careful as cherokee is not started using ${PREFIX}/sbin/cherokee, not
cherokee-guardian anymore.

Fernando Quintero (maintainer) ok
MESSAGE tweak and ok sthen@, ok jasper@
2010-01-13 08:47:57 +00:00
stephan
a4961caa75 - fix licence version
- tweak do-install (no change of PLIST)

ok sthen@ and landry@
2010-01-11 12:48:01 +00:00
stephan
84fdef559b use ${INSTALL_DATA} instead of @mv
reported by naddy@, almost identical diff + help from landry@
2010-01-11 10:45:53 +00:00
msf
1c9d24fcc9 bump PKGNAME again
requested by naddy@
2010-01-11 00:28:06 +00:00