Commit Graph

2642 Commits

Author SHA1 Message Date
ajacoutot
33b4c579de Update to vala-0.14.2. 2012-02-16 22:19:27 +00:00
pascal
72bbe18ad2 - modify stack protection to work with our native libc routines, passing the
function name to __stack_smash_handler.  Only supported for "c-family"
  languages at the moment.
- enable it per default on archs where FRAME_GROWS_DOWNWARD
- remove obsolete comment about adastrap needing a specific libc
- -java actually needs a runtime dep on -main for -lgcc

ok espie@
2012-02-16 21:30:15 +00:00
landry
878a92f4a1 Mark gcc 4.6 as BROKEN-sparc64, gengtype loops infinitely.
ok espie@ sthen@
2012-02-03 17:01:17 +00:00
sthen
9670a9ddf5 Update to PHP 5.3.10, rolling in yesterday's security fix and also
fixing a memory leak.  OK robert@
2012-02-03 08:44:51 +00:00
sthen
cb3bccfa8f SECURITY - add a fix from upstream for a bug introduced with the recent
fix for CVE-2011-4885 included in PHP 5.3.9

Note that the Suhosin extension (which is enabled by default in our packages)
mitigates against this problem

ok robert@ ajacoutot@
2012-02-02 08:48:27 +00:00
espie
cbca6afbb8 allow for simultaneous install of 5.2 and 5.3 extensions.
This solves some nasty 5.0 -> current update problems.

Up to 5.0, lots of php-using packages were depending on php-mysql-5.2.
So the dependencies would update to php-mysql-5.2 from current.
BUT the php-using packages are now depending on 5.3 -> internal conflict !

With this change, things work again. After the update, you end up with
php-mysql-5.2 AND php-mysql-5.3, you can then try pkg_delete -a to weed
out "unneeded" php*-5.2

okay sthen@, ajacoutot@
2012-01-29 14:53:20 +00:00
pascal
f5169e7dcb Enable gcc 4.6
ok espie@.
2012-01-26 13:18:16 +00:00
pascal
be59426cab - bump libestdc++ following the bump in gcc 4.2
- deal with ldconfig shitz being run at fake install everywhere
- fix sprintf/strcpy usage in libestdc++ so we don't get a warning every time
  we compile a C++ program

Everything brought up by espie@.
2012-01-26 13:17:22 +00:00
sthen
7ed8f39ef4 Update the Suhosin extension to 0.9.33 fixing CVE-2012-0807.
Stack overflow, only affects a very specific and unusual non-default
configuration: transparent cookie encryption enabled, HTTP response
splitting protection disabled, *and* a PHP application must allow
unfiltered user input to header() in order to be affected.

Good write-up at http://seclists.org/fulldisclosure/2012/Jan/295
ok robert@
2012-01-25 11:17:22 +00:00
sthen
000dccc77b fix php-pcntl PKGNAME, ok robert@ 2012-01-25 10:03:40 +00:00
espie
7ac6808f15 fix for !i386, sorry 2012-01-24 19:19:27 +00:00
espie
022f1ce588 same dance as for 4.6: stop at stage2, oh and use CONFIG_SITE everywhere 2012-01-23 22:20:34 +00:00
espie
64971ac124 as discussed with pascal, make build more reproducible, by enforcing
CONFIG_SITE even if the FSF says no.

Also, finally get rid of the stage3 build/comparison, since apart from
taking build time, it's not really THAT useful unless you're specifically
debugging gcc.
2012-01-23 17:04:10 +00:00
espie
b7fe4f0430 like for 4.2, bundle a libc with adastrap.
cheat a bit: bundle the libc from 5.0, and pretend it's the one we built
with... (to be cleaned next time someone bootstraps ada)
2012-01-23 15:34:01 +00:00
espie
da7ac90093 switch to a new way of bundling bootstrap: this bundles the official
libc.so from OpenBSD 5.0, and tweaks the ada scripts to LD_LIBRARY_PATH
the bundled library.

That way, we should be able to get away by providing a new bootstrap ways
less often (preferably every release, but things won't break if we do it
even LESS often).
2012-01-23 14:59:57 +00:00
espie
280d2bc38a tweak infra to be able to bundle libc in adastrap 2012-01-23 14:47:37 +00:00
sthen
527f3f5f6d Enable chroot in the example php-fpm.conf file, mention it in DESCR-fpm.
ok robert@
2012-01-21 23:59:43 +00:00
sthen
cf14dc2f78 update php-5.3 to 5.3.9
- SECURITY fixes: CVE-2012-0057 CVE-2011-4566 CVE-2012-0788 CVE-2012-0789
- sync WANTLIB for php-5.2 while there

ok robert@
2012-01-21 23:34:35 +00:00
sthen
17b58c9332 regen patches, no pkg change 2012-01-13 18:02:54 +00:00
sthen
fcaa654699 - set SHARED_ONLY and roll PFRAG.shared-main into PLIST-main
- uncomment a couple of lines in the default php-fpm.conf so you
don't have to make any changes before it will start up

- add missing crypt_blowfish.h header to PLIST-main

ok robert@
2012-01-13 17:59:07 +00:00
naddy
6ad7a26783 bump revision for plist changes 5.0 -> 5.1 2012-01-13 00:55:14 +00:00
kili
e519b1cfb2 Replace the bundled xhtml-3000.2.0.1 by a newer version
matching the requirements of haskell-platform-2011.4.0.0.

Moving the xhtml library back to a separate port (www/hs-xhtml)
would be nice but it causes too much headache (like dependency
cycles with devel/haddock).
2012-01-12 20:13:17 +00:00
pascal
1e01a1282f This patch is no longer needed, noticed by Brad. 2012-01-10 17:18:18 +00:00
robert
3f56d3542a fix after kinfo_proc2 removal 2012-01-08 20:05:45 +00:00
jeremy
fb2e479888 Update to 1.6.5.1, fixing the denial of service vulnerability
described in CERT-2011-003.
2012-01-05 02:10:06 +00:00
jeremy
a566fc944a Update to 1.8.7-p357, fixing the denial of service vulnerability
described in CERT-2011-003.
2012-01-05 02:09:02 +00:00
krw
312ae7a305 Ooops. Missed PLIST updates. Cluebat provided by joshe@. 2012-01-04 20:16:43 +00:00
sthen
5370b8f32d - update adastrap to a newer version built by kili@ against libc.so.60.1
(from OpenBSD 5.0-release), thanks ajacoutot@ for hosting the distfile.

- check that the bootstrap egcc can actually run; the reason for failure
due to missing libs is now clear (previously it was a cryptic "C compiler
cannot create executables" type message during configure).
2012-01-04 12:29:01 +00:00
krw
bd672bae5e Update to 1.0.54. Some regressions fixed. Some macppc ones still
fail.

Maintainer timeout. ok sthen@ pirofti@ ok for superseded 1.0.52
update.
2012-01-03 02:01:25 +00:00
kili
94f4cad048 Bump after previous hs- library updates.
Necessary because of ghc's over-aggressive inlining
which causes ABI changes in libraries depending on
updated libraries.

ok jasper@
2011-12-31 22:19:45 +00:00
sthen
22327db1fe BROKEN on sparc64 (and has been for quite some time) 2011-12-30 21:46:01 +00:00
sthen
ea5cf85180 Mark BROKEN on sparc64, vm segfaults when building the openssl extension.
Upstream are working on a different branch so this should be re-checked
after a 2.x release is made. Discussed with / ok jeremy@
2011-12-30 10:42:20 +00:00
kili
903b5233a6 Bump to enforce updates. 2011-12-27 21:10:28 +00:00
kili
c1cbe21efb Simplify the SIGTSTP handler to let it work with uthreads.
Suspending multithreaded programs built with ghc (including ghc
itself) should just work[tm] now. (Except for the bootstrapping
compiler which of course still uses the old code)
2011-12-27 20:53:01 +00:00
jasper
4833f0936b - update to R14B04
- fix conflict with speech-dispatcher
- fix gen-versions target
- i386 ethread compat

update to R14B04 from dlg@, rest by piotr sikora and me
tested with rabbitmq and ejabberd on amd64; sparc64 is still happy too

maintainer timed-out
2011-12-23 13:40:13 +00:00
avsm
8b3a4ece12 Upgrade to ocaml-3.12.1
Also include the compiler standard libraries under compiler-libs/, as this
is the convention adopted by other packaging (Debian, FreeBSD), and is used
by various utility software such as the Lwt interactive toplevel and some
of the graphical IDEs.
2011-12-21 21:31:50 +00:00
fgsch
7cf02618d6 RIP python2.4.
jasper@ ok
2011-12-20 13:08:06 +00:00
jeremy
65c428a6de sync 2011-12-19 22:37:49 +00:00
jeremy
077a4f1628 Import coffeescript 1.2.0
CoffeeScript is a little language that compiles into JavaScript.
Underneath all those awkward braces and semicolons, JavaScript has
always had a gorgeous object model at its heart. CoffeeScript is an
attempt to expose the good parts of JavaScript in a simple way.

The golden rule of CoffeeScript is: "It's just JavaScript". The code
compiles one-to-one into the equivalent JS, and there is no
interpretation at runtime. You can use any existing JavaScript library
seamlessly from CoffeeScript (and vice-versa). The compiled output is
readable and pretty-printed, passes through JavaScript Lint without
warnings, will work in every JavaScript implementation, and tends to run
as fast or faster than the equivalent handwritten JavaScript.

Feedback and OK jasper@
2011-12-19 22:21:47 +00:00
sthen
1d1b9adbb4 llvm-gcc4 is no longer supported; reminded by jasper@ 2011-12-16 11:57:28 +00:00
jeremy
3108bdac2b Build depend on llvm-3.0 and bump REVISION 2011-12-15 17:52:03 +00:00
rpointel
650dd13bbf Permit to build Python 2 and Python 3 ports.
ok fgsch@.
2011-12-14 20:31:28 +00:00
robert
9d3dc83a2a missing endif 2011-12-14 18:16:51 +00:00
pascal
3afb4d8443 Fix configure test for wstring support, reported by robert@. 2011-12-13 13:46:45 +00:00
pascal
d16fa4f7fa don't pick up gmkdir 2011-12-11 21:11:37 +00:00
naddy
3ba3d24b0d ./configure[7897]: LIBS: not found
Don't introduce a syntax error in configure; sh(1) is not make(1)
and here the expansion happens in sh.  ok rpointel@
2011-12-10 19:06:03 +00:00
pascal
c20fdc65e8 don't need gsed patch anymore 2011-12-10 13:38:45 +00:00
pascal
74d633cf69 - fix fixincludes to work with our sed
- mention bootstrap comparison failure on alpha
2011-12-09 22:45:18 +00:00
jeremy
53bee10b3a Setup symlink to jruby/bin/jruby at bin/jruby, so that jruby is usable
without any modifications to PATH.  To run an ruby program that is
installed in jruby's bin directory (which no longer needs to be in the
PATH), use jruby -S program.
2011-12-09 21:46:15 +00:00
jeremy
d916ad4bb8 Fix NO_REGRESS=Yes being set on ruby ports with MODRUBY_REGRESS set,
broken in r1.49.
2011-12-09 21:41:43 +00:00