Commit Graph

4820 Commits

Author SHA1 Message Date
sthen
a6aa965fae update to 1.4.26, from Brad 2010-03-21 09:56:55 +00:00
jasper
f0d2133a85 - update py-webkitgtk to 1.1.7 2010-03-21 09:27:54 +00:00
robert
c0f77b04f2 update to version 5.2.13 2010-03-21 09:05:55 +00:00
sthen
44da79e6b5 update to 0.11.7 2010-03-20 23:53:56 +00:00
kili
7c3f32e3b4 Update to 1.0.4.1.
Add a syslog related fix from upstream.

Reminded by Tiago Cunha, who sent me an update diff a
few days ago.
2010-03-20 21:32:23 +00:00
jasper
06682c4bde - update tikiwiki to 4.2
including SECURITY FIXES for SA38896 SA38896
2010-03-20 17:01:28 +00:00
ajacoutot
e6a9498b41 Add a comment about why we don't use libtool from ports.
"yeah... sure... ok" robert@
2010-03-20 17:00:21 +00:00
jasper
8d6d68b504 - set license version
- add working master sites (this port could badly use an update btw)
      - regen and split patches
	- regen plist
	  - deadly.org is long gone.
2010-03-20 16:55:33 +00:00
ajacoutot
03fc5f7544 Maintainance update to version 3.0.7. 2010-03-20 16:54:40 +00:00
jasper
96ab091d1d - update cms-ms to 1.6.6 2010-03-20 16:54:23 +00:00
ajacoutot
eb5566b32a Fix configuration files name.
ok jasper@ sturm@ (maintainer)
2010-03-20 16:51:42 +00:00
espie
cba2887019 security fix "easter egg": old fckeditor is no longer supported, and the
new one tells you fckeditor-2.6.3 is holed... nasty
2010-03-05 10:07:59 +00:00
stephan
9076085bd6 security update to 5.22, addresses DRUPAL-SA-CORE-2010-001.
ok espie@
2010-03-05 09:39:52 +00:00
stephan
f691a20cad security update to 6.16, fixes DRUPAL-SA-CORE-2010-001.
ok jasper@, "I can vouch for it" @espie
2010-03-05 09:09:23 +00:00
stephan
b173411b8f security update to 1.4, fixes DRUPAL-SA-CONTRIB-2010-023.
ok jasper@ and espie@
2010-03-04 11:09:54 +00:00
jasper
28f9a1db02 - update statusnet to 0.8.3
among the many bugfixes is a security fix for a local file inclusion vulnerability.

ok sthen@
2010-03-03 14:17:33 +00:00
benoit
5ab72aa347 - update dillo to 2.2
- update patches
- regen PLIST

This update fixes security vulnerability.
Detailed information: http://secunia.com/advisories/38569/

ok jasper@
2010-03-01 14:53:31 +00:00
espie
816c0235eb a few more rotten eggs 2010-03-01 12:06:02 +00:00
espie
d5858ddd80 unprotect archive, so that clean works 2010-03-01 12:02:20 +00:00
william
efb25578f2 nginx-0.7.65; bugfixes
update from and reminded by Toni Mueller, thanks

ok jasper@
(reminder, ports is not fully open, do not commit without specific permission)
2010-03-01 04:04:50 +00:00
espie
7d1a6d8c2b oopsie 2010-02-28 23:56:20 +00:00
espie
6a383c71cd fix FULLPKGPATHs 2010-02-26 18:31:57 +00:00
sthen
3d9f13534b bump PKGNAMEs, the httpd abi changed, resulting in segfaults after
updating httpd until newly-built packages are installed.

ok espie@
2010-02-26 14:45:02 +00:00
robert
f43f8ed99e Install the tmp dir in the chroot with stricter permissions and change
owner to the www users.

ok ajacoutot@
2010-02-25 09:05:04 +00:00
naddy
2c0af6bc4f SECURITY update to 3.0.18:
MFSA 2010-05 XSS hazard using SVG document and binary Content-Type
MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain
MFSA 2010-03 Use-after-free crash in HTML parser
MFSA 2010-01 Crashes with evidence of memory corruption

Also fix some corrupted $OpenBSD keywords, pointed out by sthen@

ok sthen@
2010-02-24 18:17:23 +00:00
sthen
f13bb86663 SECURITY update to Firefox 3.5.8. Same diff from naddy@ and Daniel Dickman.
Update sqlite dependency while there.

ok naddy@
(reminder, ports is not fully open, do not commit without specific permission)
2010-02-24 16:59:49 +00:00
sthen
f2d5b5ba92 SECURITY fix, add patches from upstream to avoid a buffer overflow with
long URLs. Based on a diff from "iridium", similar diff from maintainer.
ok jasper@
2010-02-09 13:44:28 +00:00
jasper
d904463d52 saying pkg_arch=* when invoking cc is wrong wrong wrong
ok ajacoutot@
2010-02-06 22:15:21 +00:00
ajacoutot
c991d74a35 While I'm still unsure why gamin is needed at all, at least use a
correct run_depends: we mean gamin, not libgamin.

"go ahead" jasper@
2010-02-03 12:32:54 +00:00
jasper
82012ecbfd SECURITY FIX for CVE-2010-0308, "Squid DNS Packet Processing
Denial of Service Vulnerability"

brad (MAINTAINER) came up with the same diff
ok ajacoutot@ sthen@
2010-02-03 06:41:17 +00:00
pvalchev
7bfaeca2b9 gamin RUN_DEPENDS, from speedvin@archlinux.us; ok jasper espie 2010-02-03 01:05:41 +00:00
sthen
639fea5f60 SECURITY fix for CVE-2010-0295 DoS issue.
http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt

From Brad, ok ajacoutot@ jasper@
2010-02-02 08:10:29 +00:00
espie
100f0c7870 SUBDIR += is wrong: it means the makefile will pick up SUBDIR from env, thus
breaking cd /usr/ports && SUBDIR=some/path make something for
category makefiles. While there, also put spaces around += uniformously.
okay naddy@, jasper@
2010-02-01 17:00:12 +00:00
jolan
ca7dbb81a7 fix MASTER_SITES, ok naddy@ 2010-01-30 19:08:30 +00:00
naddy
72b44c5513 bump PKGNAME for PLIST changes 4.6 -> 4.7 2010-01-27 21:43:27 +00:00
sthen
77516f5da3 Mention in MESSAGE that this package currently requires SSE2,
and show how to check. This should change sometime, but the
fix is fiddly and for now we should let people know. Committing
now to make sure something is in pre-4.7.

Discussed with pval, this diff ok jasper@ landry@
2010-01-26 15:48:21 +00:00
landry
1cbf5cc3c8 Add gstreamer plugins-ffmpeg & plugins-good to RUN_DEPENDS, somehow i
forgot it when updating to 1.1.18. This will be needed for the day HTML5
video actually works in webkit-based browsers..
ok espie@ jasper@
2010-01-23 10:14:37 +00:00
landry
26e100eda6 Add a patch to fix a use-after-free & a memory leak, from canacar@.
Fwded' and commited upstream.
ok jasper@ sthen@ no objection ajacoutot@
2010-01-19 14:25:08 +00:00
jasper
df30126d85 SECURITY FIX for CVE-2009-4427
phpLDAPadmin "cmd" Local File Inclusion Vulnerability

ok ajacoutot@
2010-01-13 14:36:52 +00:00
ajacoutot
d16d96252f SECURITY: CVE-2009-4489
http://www.vupen.com/english/advisories/2010/0090
(thanks fgsch@ for the link/notice)

Update to cherokee-0.99.39.
Remove debug FLAVOR and use ifdef DEBUG.
Add rrdtool to run_depends.
Byte-compile python modules so that they are registered in the PLIST.

Be careful as cherokee is not started using ${PREFIX}/sbin/cherokee, not
cherokee-guardian anymore.

Fernando Quintero (maintainer) ok
MESSAGE tweak and ok sthen@, ok jasper@
2010-01-13 08:47:57 +00:00
stephan
a4961caa75 - fix licence version
- tweak do-install (no change of PLIST)

ok sthen@ and landry@
2010-01-11 12:48:01 +00:00
stephan
84fdef559b use ${INSTALL_DATA} instead of @mv
reported by naddy@, almost identical diff + help from landry@
2010-01-11 10:45:53 +00:00
msf
1c9d24fcc9 bump PKGNAME again
requested by naddy@
2010-01-11 00:28:06 +00:00
landry
ca1f030fd3 Update to webkit 1.1.18:
- add a pair of patches to make it finally run without SIGBUS on sparc64
  (yay!), reported as https://bugs.webkit.org/show_bug.cgi?id=19775
- add a patch to disable some optimizations on ppc, so that it finally
  builds fine, reported as https://bugs.webkit.org/show_bug.cgi?id=33451
2010-01-10 20:06:17 +00:00
ajacoutot
977a59ba5c +py-htmltmpl 2010-01-10 13:59:14 +00:00
ajacoutot
61e32cf598 Import py-htmltmpl-1.22.
The purpose of the templating engine is to provide web application
developers, who need to separate program code and design (HTML code) of
their web application projects, with a templating tool that can be
easily used by cooperating webdesigners who have no programming skills.

Templating language provided by the engine is inspired by Perl
templating module HTML::Template. Templates created for HTML::Template
can be used with this engine in case they do not violate character case
rules of htmltmpl.

This package includes easydoc, a module which uses the templating engine
to generate HTML documentation from docstrings embedded in source files
of Python modules.


(needed by GNOME Development Monitor which I'm currently working on)
2010-01-10 13:58:06 +00:00
espie
b87f5ba044 update to more recent version, removes the waits during regress... 2010-01-10 13:45:03 +00:00
fgsch
f50c84fc13 Remove file imported by mistake. spotted by ajacoutot 2010-01-10 13:37:15 +00:00
fgsch
37dfdf0207 Enter py-mako and py-pylons. 2010-01-10 13:18:04 +00:00
fgsch
e1568d200f Import pylons 0.9.7, a rapid web application development framework. 2010-01-10 13:17:18 +00:00