122641 Commits

Author SHA1 Message Date
sthen
c3ddfeb0b9 remove old BROKEN-i386 from when java wouldn't build reliably 2017-09-18 20:12:19 +00:00
sthen
bf566a6424 patch apache httpd CVE-2017-9798, backported from upstream's branches/2.4.x
This is a use after free error that causes a corrupted Allow header to
be constructed in response to HTTP OPTIONS requests. It can leak pieces
of arbitrary memory from the server process that may contain secrets.
The memory pieces change after multiple requests, so for a vulnerable
host an arbitrary number of memory chunks can be leaked.

The bug appears if a webmaster tries to use the "Limit" directive with
an invalid HTTP method.
2017-09-18 19:25:38 +00:00
tb
08a014ca9c Display a clear error message indicating that WRKOBJDIR must be on a
wxallowed filesystem for USE_WXNEEDED ports instead of erroring out
unhelpfully.  Prompted by numerous questions about Python builds failing
with "configure: error: cannot run C compiled programs." on ports@

Input, tested in bulks and ok sthen; ok danj; no veto from espie.
2017-09-18 16:32:06 +00:00
espie
f0a5685b2c activate @version 2017-09-18 15:20:54 +00:00
gonzalo
bfde4a8f99 Update for Varnish to 5.2.0
https://varnish-cache.org/docs/5.2/whats-new/changes-5.2.html

OK rsadowski@
2017-09-18 14:09:53 +00:00
sthen
3910ff8613 - add hidden dep on archivers/snappy
- reinstate gtk version, req by tb@
- install mime/appdata files, missing from the !gtk build
2017-09-18 13:41:32 +00:00
landry
cd2192b0dc Update to freexl 1.0.4, fixing CVE-2017-2923 & CVE-2017-2924 2017-09-18 13:41:01 +00:00
espie
fbc2afa76d scaffolding for -V option, the only missing part is activating it in
bsd.port.mk
2017-09-18 13:02:34 +00:00
espie
86839ea99b don't count @version as relevant when registering plists. 2017-09-18 13:01:43 +00:00
landry
202e9dfea5 Update to QGIS 2.18.13.
Remove python/core/qgscoordinatetransform.sip patch, was fixed
differently upstream in https://issues.qgis.org/issues/17039
2017-09-18 12:12:46 +00:00
jca
0b267664fe Update to samba-4.5.13, the latest release of the 4.5.x series
Putting this in now to help handle future possible security issues on
the 6.2 branch.  Tested by Ian McWilliam.
2017-09-18 11:52:04 +00:00
jasper
70f5da62c1 use ${LOCALBASE} as $deity intended 2017-09-18 11:48:57 +00:00
sthen
7027fd10c4 take maintainer, in the hope it will prod portroach into noticing this port :) 2017-09-18 10:23:07 +00:00
sthen
4a841850e1 update to rspamd-1.6.4, similar to a diff from akai.mail@protonmail.com 2017-09-18 09:31:30 +00:00
landry
1ee934eb1e Update to pgrouting 2.5.0.
See
https://github.com/pgRouting/pgrouting/wiki/Migration-Guide#migrating-from-24-to-25
for details.
2017-09-18 08:23:36 +00:00
feinerer
802791af43 Update to Texinfo 6.5
OK kili@
2017-09-18 07:59:40 +00:00
ajacoutot
a9e61da0a5 Update to py-cairo-1.15.3. 2017-09-18 06:24:33 +00:00
jasper
9c44b2c33b adjust for ocamlgraph 1.8.6 API
breakage spotted by naddy@; fix from upstream
2017-09-18 06:06:22 +00:00
tj
3437271f02 add two upstream patches to sanitize input in the bookmark command
and podbeuter feature.

ok abieber
2017-09-17 17:04:52 +00:00
sthen
0c7541c9e7 remove mp3gain, see http://www.openwall.com/lists/oss-security/2017/09/14/
Note that http://www.openwall.com/lists/oss-security/2017/09/14/12 has some
words in its defense; it might make sense to reintroduce if the forked mp3
decoder library is replaced.

link rgain.
2017-09-17 16:45:29 +00:00
sthen
afda54fbe0 import ports/audio/rgain, ok jca@ - this is an alternative to audio/mp3gain
(mp3gain has various vulnerabilities due to a buggy old fork of mpg123's
decoder, additionally is mp3-only, whereas this handles more formats).
See various posts at http://www.openwall.com/lists/oss-security/2017/09/14/

----
ReplayGain is designed to solve the problem of varying volumes between
different audio files. This package provides Python modules and scripts
to read, write and calculate Replay Gain on various file formats (Ogg
Vorbis, flac, WavPack, MP4, MP3).
----
2017-09-17 16:43:24 +00:00
jca
cedb5e690e Update to wifind-0.7
from maintainer Ray Lai
2017-09-16 23:32:03 +00:00
jeremy
b94c051c0a Backport webrick security fix (CVE-2017-10784) from ruby 2.2.8 to JRuby.
Update MASTER_SITES while here.
2017-09-16 22:56:41 +00:00
jeremy
273010916e Backport security fixes from ruby 2.2.8 to ruby 1.8.7. Fixes
CVE-2017-0898 and CVE-2017-10784.  Regen patches while here.
2017-09-16 22:54:58 +00:00
jeremy
3edfa2882e Backport security fixes from ruby 2.2.8 to ruby 2.1.9. Fixes
CVE-2017-14033, CVE-2017-14064, CVE-2017-0898, and CVE-2017-10784.
Regen patches while here.
2017-09-16 22:52:40 +00:00
jeremy
accc0898b0 Update to ruby 2.2.8. Fixes CVE-2017-14033, CVE-2017-14064,
CVE-2017-0898, and CVE-2017-10784. Regen patches while here.
2017-09-16 22:45:26 +00:00
jeremy
2e16c3b2ca Update to ruby 2.3.5. Fixes CVE-2017-14033, CVE-2017-14064,
CVE-2017-0898, and CVE-2017-10784. Shared lib major bump due to
removed/modified functions.  Regen patches while here.
2017-09-16 22:43:38 +00:00
jeremy
a5110ece69 Update to ruby 2.4.2. Fixes CVE-2017-14033, CVE-2017-14064,
CVE-2017-0898, and CVE-2017-10784. Shared lib major bump due to
removed/modified functions.  Regen patches while here.
2017-09-16 22:42:37 +00:00
jca
a2cb393aa9 Update to emacs-25.3, which rolls in the fixes for CVE-2017-14482 2017-09-16 16:42:27 +00:00
dcoppa
2e7954cc7b Drop gettext module 2017-09-16 14:55:27 +00:00
dcoppa
f5b02179a2 Remove gettext module and fix deps accordingly 2017-09-16 14:41:20 +00:00
dcoppa
afdda336d3 Drop maintainership of ruby-redis, get maintainership of x11/mlterm 2017-09-16 14:26:26 +00:00
sunil
313f32fa0c +mblaze 2017-09-16 13:13:42 +00:00
sthen
c101536a68 update to chirp-20170714 2017-09-16 12:59:32 +00:00
sthen
1c56ea1732 update to postfix-3.3-20170910, from Brad 2017-09-16 12:37:24 +00:00
jasper
65e0a4d731 update to cudf-0.9
ok chrisz@ krw@
2017-09-16 09:03:15 +00:00
jasper
be3af1625e update to ocaml-graph-1.8.7
ok chrisz@ (MAINTAINER) krw@
2017-09-16 09:02:21 +00:00
ajacoutot
1fa073903d [X86] Don't create i64 constants on 32-bit targets when lowering v64i1
constant build vectors.

from Brad (maintainer)
2017-09-16 07:01:33 +00:00
ajacoutot
1fe978d0fe Update to cups-filters-1.17.6. 2017-09-16 06:52:01 +00:00
ajacoutot
1d9c59a8be Update to awscli-1.11.154. 2017-09-16 06:47:36 +00:00
ajacoutot
ccd5932340 Update to py-botocore-1.7.12. 2017-09-16 06:47:20 +00:00
akoshibe
099661ec5e Move examples to /usr/local/share/examples.
Fix for bug introduced in last revision

OK phessler@
2017-09-16 06:03:05 +00:00
sunil
9070cc479c Import mblaze, a set of Maildir utilities.
In collaboration with and ok giovanni@, jca@.
2017-09-16 03:43:32 +00:00
jca
717f760fdf Needs a c++ compiler that supports -std=c++11
Spotted on sparc64:

  http://build-failures.rhaalovely.net//sparc64/2017-09-04/x11/nitrogen.log
2017-09-15 20:37:58 +00:00
kili
a961741064 Add ${LIB_DEPENDS} to LIB_DEPENDS-main to get libestdc++ on GCC49_ARCHS
which aren't in CLANG_ARCHS (like sparc64, armv7).

Sorry for the breakage.

Noticed by landry@ on a sparc64 bulk build, fix tested by phessler
on arm.

ok phessler@
2017-09-15 19:52:26 +00:00
dcoppa
ac6b865f52 Fix out-of-bounds read
(git commit b0ed75ee851121ad25491ef6e1dca25be7bc50f3)
2017-09-15 18:06:20 +00:00
gonzalo
b31332a1e4 Update for Lynis to 2.5.5 2017-09-15 16:27:47 +00:00
jasper
5918b3bc2e update to gucharmap-10.0.1 2017-09-15 16:25:46 +00:00
naddy
1bf40b8547 replace gettext module 2017-09-15 15:37:17 +00:00
ajacoutot
a4f3a6101b rednotebook is back. 2017-09-15 13:45:22 +00:00