112412 Commits

Author SHA1 Message Date
ajacoutot
9fed53fe45 Update to passwdqc-1.3.1 and unbreak (getpwnam_shadow). 2016-07-30 14:26:36 +00:00
ajacoutot
b292fc9bdc Update to owncloud-9.1.0. 2016-07-30 14:25:37 +00:00
ajacoutot
51ad349c6b Update to orca-3.20.3. 2016-07-30 14:25:01 +00:00
ajacoutot
0db1459e16 Update to nautilus-3.20.2. 2016-07-30 14:24:33 +00:00
ajacoutot
24e723decf Update to meld-3.16.2. 2016-07-30 14:24:01 +00:00
ajacoutot
b7ec49eacc Update to libtasn1-4.9. 2016-07-30 14:23:29 +00:00
ajacoutot
25374a81a4 Update to libidn-1.33. 2016-07-30 14:22:43 +00:00
jsg
72870e0e4b build some additional board configurations 2016-07-30 14:22:19 +00:00
ajacoutot
76a89c98a8 Update to libgpg-error-1.24. 2016-07-30 14:22:13 +00:00
ajacoutot
e713df8a46 Update to libgcrypt-1.7.2.
ok sthen@ before lock
2016-07-30 14:21:44 +00:00
ajacoutot
2471fd43d4 Update to latexila-3.20.1. 2016-07-30 14:21:09 +00:00
ajacoutot
b891811b8c Update to hplip-3.16.7. 2016-07-30 14:20:24 +00:00
ajacoutot
5de6625220 Update to harfbuzz-1.3.0.
- tested in a bulk
2016-07-30 14:19:51 +00:00
ajacoutot
586a4f2a59 Update to cyrus-imapd-2.5.9. 2016-07-30 14:19:13 +00:00
jsg
647c7fe2ec update to afl 2.21b 2016-07-30 14:19:12 +00:00
ajacoutot
4d09ab7bc8 Update to cups-filters-1.10.0. 2016-07-30 14:18:35 +00:00
ajacoutot
de79864f6a Update to caribou-0.4.21. 2016-07-30 14:17:58 +00:00
ajacoutot
3f0488f73e Update to appstream-glib-0.5.17. 2016-07-30 14:17:14 +00:00
naddy
39edf931c2 update paths for Perl 5.20.3 2016-07-30 14:10:58 +00:00
ajacoutot
d78b535acb Rename patches; file name too long for ustar.
Temporary fix but we are in release mode.

patch from jca@, ok sthen@
prodded by deraadt@
2016-07-26 12:42:03 +00:00
naddy
159facc32a sync, 9613 2016-07-23 15:02:41 +00:00
sthen
38ce99bb81 Backport code fixes to devel/libidn from r1.33; out-of-bounds reads,
memory leak and a crash with invalid UTF-8. Not doing the full update
this late before release as they also updated gnulib and m4 files.
Thanks naddy@ for autoconf help.
https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html

ok naddy
2016-07-22 12:27:42 +00:00
rpointel
ce2b83db84 Django security releases issued: 1.9.8 and 1.8.14.
ok naddy@
2016-07-20 18:34:59 +00:00
pea
c2816f26a8 Security update to 1.6.3 (CVE-2016-5386)
ok jsing@, naddy@
2016-07-20 15:52:14 +00:00
semarie
b779fa17de patch libupnp to not allowing unhandled POSTs to write to the filesystem.
http://www.openwall.com/lists/oss-security/2016/07/18/13

ok naddy@ sthen@
2016-07-19 14:45:18 +00:00
sthen
2b012a1821 Update to BIND 9.10.4-P2, fixes CVE-2016-2775 ("getrrsetbyname with a non
absolute name could trigger an infinite recursion bug in lwres[..]"; affects
users of lwresd and users with "lwres" enabled in their configuration).
Also has a couple of regression fixes. OK naddy@
2016-07-19 10:46:15 +00:00
zhuk
000ddbbd31 Move KDE3's KDM and kcheckpass to BSD authentication.
This effectively unbreaks KDE3 after recent changes in getpw* land,
same way as it was done for KDE4.
2016-07-17 21:00:16 +00:00
zhuk
9fbecafa33 Remove recently (a few days ago) introduced debugging printout of usernames
and passwords entered inside KDE4's KDM to syslog.

okay sthen@ & naddy@
2016-07-17 16:04:32 +00:00
jsg
3fd97820b9 The armv7 fdt console selection tries to find /chosen/stdout-path and
falls back to /aliases/serial0.

Add patches to set stdout-path for dts files that don't set stdout-path
and are known to use a serial device other than serial0 as a console.

Confirmed to restore console output on pandaboard es by abieber@

ok sthen@ naddy@
2016-07-17 15:09:39 +00:00
zhuk
426cc853dc Finish & actually enable BSD authentication support in KDE4.
This overcomes tweaking getpw* calls: KDM and kcheckpass code did it wrong
on OpenBSD anyway (for example, compared the whole pw_passwd with "*",
instead of checking first character only). And we support other types
of password-based authentication as a bonus now (hello, login_-ldap!).

Also, we now create directory for persistent data of KDM by default,
and it's /var/kdm (previously KDM tried to access /var/lib/kdm).
The persistent data means "the name of the previous user" etc.
Previously features like "remember last user logged in" didn't work.

KDE3 bits to follow a bit later.

generic approvement from sthen@
2016-07-16 10:38:50 +00:00
pea
1fb08c968d Bugfix update to 2016-06-26a
ok landry@
2016-07-16 09:55:37 +00:00
jeremy
c322ffdfb9 Fix REVISION-main bumps 2016-07-15 15:53:05 +00:00
jeremy
7465a481c5 Use shadow versions of password functions 2016-07-15 15:39:03 +00:00
pea
28375a9b42 Bugfix update to 1.22.1
Spotted / patch provided by Ryan Boggs ( boggsrm at gmail.com), thanks.
ok ajacoutot@
2016-07-15 14:43:40 +00:00
tom
163a5e56c8 Add myself to geo/openbsd-developers.
ok espie@ (who also reminded me to update REVISION - thanks)
2016-07-15 13:49:04 +00:00
jasper
fc6cef4a3e update to logstash-2.3.4
https://www.elastic.co/blog/logstash-2-3-4-released:
"Prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP
authorization headers which could contain sensitive information."

from Pavel Korovin
ok aja@ sthen@
2016-07-15 11:11:41 +00:00
jasper
79ccf75c40 update to kibana-4.5.3
https://www.elastic.co/blog/kibana-4-5-3-and-4-1-10:
"Kibana has important fix regarding tile maps, it stopped working
yesterday due to MapQuest discontinued tile API access which was used by Kibana"

from Pavel Korovin (MAINTAINER)
ok aja@ sthen@
2016-07-15 11:10:20 +00:00
jasper
f7e95ab8a9 update to elasticsearch-2.3.4
https://www.elastic.co/blog/elasticsearch-2-3-4-released:
"The transaction log can be corrupted following a disk full exception and
several attempts to recover the shard. This has been reported once in the wild."

from Pavel Korovin
ok aja@ sthen@
2016-07-15 11:08:45 +00:00
jca
d15938b514 Unhook the default emacs flavor (gtk3), currently unusable.
I tried to debug it but was too lazy to do a proper bisect.

Reported by many, reminded by danj@
2016-07-14 20:56:09 +00:00
ajacoutot
76bcb83998 Mark BROKEN, useless without kern.usermount. 2016-07-14 16:58:29 +00:00
ajacoutot
ccd5f7aaeb No more kern.usermount.
ok sthen@
2016-07-14 16:57:55 +00:00
ajacoutot
5d568f913e Drop mention of kern.usermount.
ok sthen@
2016-07-14 16:57:20 +00:00
tobiasu
1a681052d6 Sync startfile spec, fixes egcc -static to link against rcrt0
ok stefan@ pascal@ naddy@
2016-07-14 07:22:31 +00:00
tobiasu
6331309983 Sync startfile spec, fixes egcc -static to link against rcrt0
ok stefan@ pascal@ naddy@
2016-07-14 07:20:28 +00:00
jung
ad77b3dc1f update to latest snapshot 201607122008 to unbreak after api and header changes
this snapshot also removes most filters, as they are not considered ready

people who started using filters like dkim-signer already, need to look for
other alternatives in ports tree e.g. dkimproxy

ok sthen giovanni
2016-07-13 20:23:40 +00:00
ajacoutot
91663c0fe0 Forgot to move converters/libiconv to LIB_DEPENDS in previous. 2016-07-13 14:04:22 +00:00
ajacoutot
0f19baba19 Do not ship the libturbojpeg pkgconfig file since we explicitely configure
--without-turbojpeg.

from Brad
ok robert@
2016-07-13 09:43:39 +00:00
ajacoutot
74329f82de Limit gc stack space; half of the pkgsrc patch was missing.
May help in bulks...

ok robert (maintainer)
2016-07-13 08:21:38 +00:00
ajacoutot
8c83ac2f74 Set gnome-maps as BROKEN; MapQuest changed its usage policy and it's not longer
possible to use it as a tile provider, making the application totally useless.
2016-07-13 07:48:42 +00:00
jsg
431157f5d0 Update to U-Boot 2016.07 which will be used in the armv7 release.
This includes the patch to not allocate memory from holes with the efi
loader and adds support for network access from efi payloads as well.

ok sthen@ naddy@
2016-07-12 12:35:44 +00:00