Commit Graph

72506 Commits

Author SHA1 Message Date
ajacoutot
d5be9e9c84 Add a patch from upstream to fix:
phpLDAPadmin "base" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47852/

ok sthen@
2012-02-03 07:48:41 +00:00
sthen
9f37f62817 Add a fix for CVE-2012-0029 from QEMU upstream, ok Brad, ajacoutot
"Heap-based buffer overflow in the process_tx_desc function in the
e1000 emulation (hw/e1000.c) [...] allows guest OS users to cause
a denial of service (QEMU crash) and possibly execute arbitrary
code via crafted legacy mode packets."
2012-02-02 22:07:33 +00:00
sthen
42efe7f60b Add a patch to Unbound from upstream correcting a bug resulting
in failure to validate DNSSEC which was introduced in 1.4.15:
http://permalink.gmane.org/gmane.network.dns.unbound.user/2006

Full update to Unbound 1.4.16 can wait until we're done with 5.1

ok ajacoutot@
2012-02-02 13:42:13 +00:00
ajacoutot
b9644080ef Merge a patch from upstream that fixes a crash when printing from mozilla
apps to a CUPS printer.

ok sthen@
2012-02-02 09:21:07 +00:00
sthen
cb3bccfa8f SECURITY - add a fix from upstream for a bug introduced with the recent
fix for CVE-2011-4885 included in PHP 5.3.9

Note that the Suhosin extension (which is enabled by default in our packages)
mitigates against this problem

ok robert@ ajacoutot@
2012-02-02 08:48:27 +00:00
ajacoutot
2c7aaa9e02 tracker,-evolution has been fixed.
ok sthen@
2012-02-02 07:14:45 +00:00
ajacoutot
1506bbacd1 Fix a typo that would make nautilus to use the wrong class in
nautilus_application_class_init(); from upstream.

ok sthen@
2012-02-02 07:14:07 +00:00
ajacoutot
593772291e Bring a patch from upstream to fix a hard crash with the -evolution
subpackage.
Sync the tracker_file_open_fd patches with upstream.

ok sthen@
2012-02-02 07:12:23 +00:00
ajacoutot
850003653b Remove bogus symlink which can make cups-driverd go into a loop.
Add a note about updating to a new major version (may require to revove
the cache).
Check the configuration file sanity in rc_pre().

ok sthen@
2012-02-02 07:11:19 +00:00
ajacoutot
9852adda0e Implement platform_get_argv0.
We are using autohell to put '-Wstrict-aliasing' into Makefile.am.

ok sthen@
2012-02-02 07:10:17 +00:00
jakob
ea6d4f3311 downgrade from 2.9.0 to 2.8.8; requested by sthen & naddy 2012-02-02 06:57:39 +00:00
jakob
f5294c5fdb upgrade to Postfix 2.9.0; from brad 2012-02-01 21:42:54 +00:00
sthen
a18bf12c7e Revert. Ports commits need explicit approval at this time. 2012-02-01 21:37:48 +00:00
jakob
3939d6f2b1 update postfix snapshot; from brad 2012-02-01 21:30:55 +00:00
jakob
343acd910b Postfix 2.8.8 was reissued due to an error. Patch removed and REVISION++. 2012-02-01 19:56:13 +00:00
jakob
bccc341376 Postfix 2.8.8 (legacy release) 2012-02-01 19:26:33 +00:00
mpi
0dd16b57f8 Fix a memleak reported by upstream.
ok ajacoutot@
2012-02-01 13:26:20 +00:00
ajacoutot
d043b8d6fc Update to webacula-5.5.1 and add a couple of saner defaults to that it
works out of the box with our current version of bacula.

ok sthen@
2012-02-01 12:59:06 +00:00
nigel
cc435678e2 Remove extra REVISION and bump REVISION
Ok ajc@
2012-02-01 12:01:40 +00:00
dcoppa
4be49a9b0c This crashes only when built with gcc 4.2.1, works fine with 4.6.2. Adjust
BROKEN marker consequently.

req.by/ok sthen@
2012-02-01 11:24:46 +00:00
pea
d1116f6eb5 Update to 2012-01-25
Reminded by Christopher Zimmermann (thanks !).

ok ajacoutot@
2012-02-01 09:12:30 +00:00
brynet
3af169cf2a Add my coordinates, icbm's away!
ok sthen@
2012-01-31 23:24:00 +00:00
espie
c422b5ae52 when you never fetched anything after the cipher change, that directory
doesn't exist... don't error out...
2012-01-31 15:45:19 +00:00
sthen
04b42867ab Use GNU libtool, ports libtool doesn't build cgi's statically like it should.
Noted while following up on misc@ post from Pavel Pocheptsov. Bump all the
subpackages for safety though in theory only -cgi should be affected.
While there tweak pre-configure to allow 'make configure' to be re-run
after interruption.

ok ajacoutot@
2012-01-31 14:20:18 +00:00
sthen
1fd7849123 - pdfjam and texlive base conflict because texlive now includes the pdfjam
scripts. add @conflict marker to texlive and remove/unlink pdfjam.

- add missing @man annotation in texmf

conflict noted by naddy@. ok ajacoutot@ espie@
2012-01-31 14:15:57 +00:00
espie
0322fed35a properly re-conflict gpg1/2. Noticed by naddy@
okay ajacoutot@, pea@
2012-01-31 10:51:48 +00:00
ajacoutot
47f56b9a41 Fix conflicts.
reported by naddy@
ok sthen@
2012-01-31 09:24:23 +00:00
sthen
98a844eafa SECURITY fix for CVE-2012-0817, memory leak affecting samba 3.6.0 to 3.6.2
can cause DoS. Pointed out by maintainer.

http://ftp.samba.org/pub/samba/patches/security/samba-3.6.2-CVE-2012-0817.patch

ok ajacoutot@
2012-01-31 09:12:58 +00:00
ajacoutot
51ce8e8a5e Unbreak runtime: set the CATALOG version to match the bacula version we
have in tree.

ok sthen@
2012-01-31 08:59:29 +00:00
ajacoutot
f350ec581f Remove conflicting file from -ui... grr @ make plist.
reported by naddy@
ok sthen@
2012-01-31 07:58:19 +00:00
sthen
4785675f6c Missed bump (the POP fix did actually need a bump as it also affected
the non-broken flavour). Pointed out by pascal@
2012-01-30 19:50:26 +00:00
sthen
a1c5cce0fd SECURITY update to emacs 23.4; EDE (part of CEDET) would automatically run
a Project.ede file if present. The other emacs branches do not have this
functionality.

From Manuel Giraud, ok ajacoutot@
2012-01-30 17:25:53 +00:00
sthen
ab10b10e03 link nmh,sasl, suggested by ajacoutot@ 2012-01-30 17:23:59 +00:00
sthen
6c1d928857 - fix sasl flavour and POP support of mail/nmh, which were broken
following update.

- add missing libiconv MODULES for sasl flavour.

ok ajacoutot@

from pascal@, various versions of this ok william@ (maintainer) and bentley@
2012-01-30 17:23:41 +00:00
espie
10df39f505 missing .P, zap extra parentheses. 2012-01-30 17:11:38 +00:00
ajacoutot
00fa1c45b1 Remove some obsolete syscalls and add one for fpathconf.
From Brad
ok espie@
2012-01-30 16:02:24 +00:00
espie
7b9687cb60 document -DHISTORY_ONLY
nitpick at column width.
2012-01-30 15:15:24 +00:00
espie
7f2b8805ae finish distfiles history handling: people who don't fetch/build the whole
tree may want to weed distfiles too, so allow for a full scan of the tree
without building/fetching anything, just to update history:

dpb -DHISTORY_ONLY

(just requires making sure the right engines are created, and a very shortened
loop at end waiting for history to be updated).
2012-01-30 15:11:04 +00:00
espie
623eb8b2c5 Better name for the task that, duh, is actually updating distfiles history. 2012-01-30 14:19:30 +00:00
jsing
462a218cf5 Add openvpn-auth-ldap to build.
ok sthen@
2012-01-30 14:17:50 +00:00
jsing
8f11a5fba7 Update slideml to v1.1.0.
ok giovanni@ sthen@
2012-01-30 12:37:23 +00:00
nigel
ae0b771c1b Update for Channel4 and Itv Sites.
Ok sthen@
2012-01-30 11:46:36 +00:00
sthen
d263935678 Add a few bug fixes to scrotwm. From upstream repo via Lawrence Teo.
ok ajacoutot@ and maintainer
2012-01-30 11:12:42 +00:00
ajacoutot
6d09b77915 Use gtk+3 by default. Turns out it works fine, the issue Stuart ran into
lies within vte itself, not the toolkit.

ok sthen@
2012-01-30 10:18:19 +00:00
dcoppa
eef31c6446 Add Stuart's mirror to MASTER_SITES, just to be safe.
ok sthen@
2012-01-30 08:49:17 +00:00
sthen
c0f9614217 disable gtk3 with an autoconf flag and sync WANTLIB, problem reported by
TAKAHASHI Tamotsu, ok ajacoutot@
2012-01-29 19:14:07 +00:00
ajacoutot
7e96a56543 Compile the gobject parts with -O0 on 64bit arches. There is a nasty
SEGFAULT when using g_closure() on at least amd64; unclear whether this
is a gcc/binutils/glib... bug yet but we want to be on the safe side for
the release.
Hopefully someone will be able to figure this out, I haven't...

Thanks to Stuart for teaching me PROPERTIES.
ok sthen@ naddy@
2012-01-29 17:28:01 +00:00
espie
cbca6afbb8 allow for simultaneous install of 5.2 and 5.3 extensions.
This solves some nasty 5.0 -> current update problems.

Up to 5.0, lots of php-using packages were depending on php-mysql-5.2.
So the dependencies would update to php-mysql-5.2 from current.
BUT the php-using packages are now depending on 5.3 -> internal conflict !

With this change, things work again. After the update, you end up with
php-mysql-5.2 AND php-mysql-5.3, you can then try pkg_delete -a to weed
out "unneeded" php*-5.2

okay sthen@, ajacoutot@
2012-01-29 14:53:20 +00:00
espie
e8ba37e682 proper usage diagnostic. 2012-01-29 14:35:40 +00:00
espie
bd7f323cd1 openldap doesn't require db,-java, so avoid it. 2012-01-29 13:46:18 +00:00