cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
112,639 Commits 1 Branch 0 Tags
Commit Graph

1230 Commits

Author SHA1 Message Date
jasper
c119dbd446 Fix for CVE-2016-3189; proposed patch from RH 2016-06-28 09:56:23 +00:00
naddy
cb3c01cc50 Security update to 3.2.1. 
This release fixes several critical bugs, including some with security
implications.  (At least CVE-2016-4300, CVE-2016-4301.)
 2016-06-23 20:19:36 +00:00
danj
7b811febd9 + snappy 2016-06-14 19:02:06 +00:00
danj
97e012f549 import snappy-1.1.3 
Snappy is a compression/decompression library. It does not aim for maximum
compression, or compatibility with any other compression library; instead,
it aims for very high speeds and reasonable compression. For instance,
compared to the fastest mode of zlib, Snappy is an order of magnitude faster
for most inputs, but the resulting compressed files are anywhere from 20% to
100% bigger.

From Frederic Cambus,  thanks!
ok sthen@
 2016-06-14 18:59:52 +00:00
semarie
c6f7352c67 archivers/par2cmdline: adds pledge(2) to par2 and its utilities 
diff from Carlin Bingham
ok Mikolaj Kucharski (maintener)
 2016-06-13 17:32:27 +00:00
juanfra
971f1deeef Update to lzip 1.18. 2016-06-08 01:19:54 +00:00
sthen
ecccd93c04 As pointed out by Yozo TODA, SourceForge.jp renamed to OSDN in 2015. 
Rename MASTER_SITE_SOURCEFORGE_JP to MASTER_SITE_OSDN_JP and update ports
references, and list some of their mirrors in network.conf.template.
 2016-06-05 11:02:25 +00:00
juanfra
e5266f3e8e Update to plzip 1.5. 2016-06-04 19:15:20 +00:00
juanfra
d85cbcf414 Update to lzlib 1.8. 2016-06-04 19:14:48 +00:00
naddy
916985b208 Update to 1.29, which adds some new options: 
--verbatim-files-from, --no-verbatim-files-from
--owner-map=FILE, --group-map=FILE
--clamp-mtime
 2016-06-03 14:53:32 +00:00
juanfra
bb595799fa Update to clzip 1.8. 2016-06-01 21:23:27 +00:00
sthen
448f67f4c0 Security fix for p7zip; CVE-2016-2334 and CVE-2016-2335. 
From Josh Grosse.
 2016-05-30 21:22:50 +00:00
bentley
f058156073 Update homepages: sourceforge.jp is dead. long live osdn.jp. 
Replace 403/500 webpages with the project page, which is at least
semi-useful.
 2016-05-29 21:41:45 +00:00
juanfra
ec839d992d Update to lunzip 1.8. 2016-05-29 01:53:34 +00:00
naddy
a10cd49ab2 Oops, add library bump and forgotten patch file. 2016-05-26 20:42:59 +00:00
naddy
228abeda46 Update to 3.2.0. Notable changes include: 
* Incorporate patches for crash and overflow bugs
* Add support for lz4 compression
* Add bsdcat command-line tool

Also avoid picking up ext2fs header; reported by rpe@
 2016-05-26 20:31:37 +00:00
juanfra
27882b561f Update to pdlzip 1.7. 2016-05-25 17:59:34 +00:00
juanfra
ba699db75c Update to lziprecover 1.18. 2016-05-23 12:49:59 +00:00
jca
f4c776badf More lua52-flavored packages broken at runtime 2016-05-17 11:38:09 +00:00
bentley
7a6cabbec2 Use https for Blogspot URLs. 2016-05-05 02:32:55 +00:00
jasper
d9e62c8094 update to libzip-1.1.2 2016-05-04 06:09:55 +00:00
zhuk
974b126c27 Update to 0.7.2. 
Now we have tests enabled (all pass).

From Rafael Sadowski (with some tweaks by me), thanks!
 2016-04-30 16:37:55 +00:00
jca
1364b7e4ad One FAKE= statement I missed 2016-04-29 14:05:34 +00:00
dcoppa
af741acfa7 Update to innoextract-1.6 
Fix build failure with upcoming cmake-3.5.2

ok sthen@
 2016-04-28 10:43:19 +00:00
naddy
ed27f40d40 replace gettext module 2016-04-26 17:47:36 +00:00
naddy
5ea80c92b5 remove final instances of DEPBASE, long forgotten 2016-04-26 16:37:47 +00:00
sthen
d3f5168cbc update to pecl-lzf 1.6.5, from maintainer Johan Huldtgren 2016-04-22 22:22:57 +00:00
sthen
01d52b9d33 Use HW_PHYSMEM64 to retrieve memory, from Josh Grosse (maintainer). I found 
this with a distfiles search following graphics/darktable fix earlier, and
Josh fixed my fix (I missed an ifdef, and he also found places which needed
a ps pledge after enabling this).
 2016-04-12 23:13:22 +00:00
naddy
32cd7e42e2 replace gettext module 2016-04-12 15:19:39 +00:00
naddy
3f14a23e1c maintenance update to 5.31 2016-04-12 15:03:11 +00:00
naddy
2f0bc9fb1f Update: 15.09 -> 15.14.1 
While here removes some trailing whitespace in pkg/DESCR-main noted
by portcheck(1).

From maintainer Josh Grosse.
 2016-04-10 19:53:09 +00:00
naddy
c6629cd4ad replace gettext module with library dependency 2016-04-06 21:14:13 +00:00
naddy
91abebf71b replace libiconv module with library dependency 2016-04-06 14:16:58 +00:00
jca
c9c383fa63 +lz4json, ok sthen@ 2016-04-04 11:35:13 +00:00
jca
c134e1a25a Import lz4json; ok sthen@ 
cat pkg/DESCR:
A little utility to unpack lz4json files as generated by Firefox's book
mark backups.  This is a different format from what the normal lz4
utility expects.  The data is dumped to stdout.

$ lz4jsoncat bookmarks-2014-12-27_151_0UCIWGB4x3hhQXpuSMs5WQ==.jsonlz4
 2016-04-04 11:26:22 +00:00
naddy
cfbb239b6a Remove SHARED_ONLY from all CPAN Perl ports and the cpan and perl MODULES. 
Add WANTLIB+=perl and PKG_ARCH=* as appropriate.
 2016-03-20 19:56:05 +00:00
naddy
2081760307 remove SHARED_ONLY from non-CPAN Perl ports 2016-03-20 16:36:33 +00:00
naddy
88c5a3338b For all our ports that use the pecl module, SHARED_ONLY is always 
defined and "c" is always added to WANTLIB.  Remove the check from
the module and add WANTLIB += c to the individual port Makefiles.
No changes in package signature, no other modules affected.
 2016-03-19 21:18:37 +00:00
ajacoutot
b52a520759 Remove cyphertite ports. 
from David Hill
ok sthen@
 2016-03-19 10:23:11 +00:00
naddy
fbe8082fe1 remove SHARED_ONLY from simple lua ports 2016-03-18 20:49:27 +00:00
naddy
ef68f42b62 remove SHARED_ONLY from ports that don't use any MODULES 2016-03-16 16:46:31 +00:00
naddy
ce859edcb4 garbage collect CONFIGURE_SHARED 2016-03-11 20:28:21 +00:00
naddy
c07aaff4f9 garbage collect CONFIGURE_SHARED 2016-03-11 20:11:39 +00:00
naddy
c253f424ca garbage collect CONFIGURE_SHARED 2016-03-11 19:59:11 +00:00
naddy
407f17974c remove various instances of NO_SHARED_LIBS and PROPERTIES:Mno_shared, 
fold PFRAG.shared into PLIST
 2016-03-10 21:58:51 +00:00
sthen
3ed9d74707 update to ripole-0.2.2, and while there fix an attempt at freeing a static 
constant if the -d flag was not used. ok william@ (maintainer)
 2016-03-02 13:34:32 +00:00
tb
dcd1484562 Further pledge(2) fallout due to password protected archives. 
Listing or checking the integrity may call readpassphrase(3)
and thus requires a "tty" promise.

Report and fix by provided by Andre S, thanks!

ok czarkoff@, Josh Grosse (MAINTAINER)
 2016-02-04 10:38:26 +00:00
sthen
65893c92de Bump pecl-* and a couple of other ports which have now lost their 
MESSAGE/UNMESSAGE. Add @extra lines in place of UNMESSAGE. Docs about
activating these have been rolled into the general PHP pkg-readmes file.
OK/feedback aja@ jasper@
 2016-02-01 21:55:38 +00:00
sthen
a6fea3759d p7zip needs to pledge tty as well (in standard and SFX archives), it's needed 
for password entry. Reported by Andre S, debugging tb@, fix from Josh Grosse.
ok tb@
 2016-01-31 22:29:37 +00:00
naddy
e2dd70eb66 Apply patches for multiple security vulnerablities; 
- CVE-2013-0211: denial of service via unspecified vectors
- CVE-2015-2304: directory traveral via absolute paths
- crash/infinite loop on malformed CPIO archives

From upstream git (commits 2253154, 5935715, 3865cf2, e6c9668, 24f5de6)
via FreeBSD.

Minor bump for the new ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS option.
 2016-01-30 23:34:44 +00:00