OpenBSD ports changes summary for 2017-09-29 ============================================
databases/postgresql devel/argp-standalone devel/json-glib devel/ti-msp430gcc editors/TeXmacs emulators/qemu graphics/libgphoto2 lang/jamvm lang/swi-prolog mail/courier-authlib mail/maildrop multimedia/avidemux net/net-snmp net/openvpn security/lastpass-cli x11/gnome == databases ========================================================= 01/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/databases postgresql ~ Makefile ~ distinfo ~ pkg/PLIST-docs + patches/patch-src_pl_plperl_GNUmakefile TAGGED OPENBSD_6_1 > + Bugfix update to 9.6.5 > + add patch to fix plperl extension (pea@) == devel ============================================================= 02/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/devel argp-standalone ~ Makefile ~ patches/patch-acinclude_m4 > fix a broken patch. I think this is actually a noop, the "function > definition > is not allowed here" doesn't get triggered when running (this was an > earlier > found port from the initial grep over unpacked ports source rather than > from > the build-time check) and the relevant file doesn't get installed. however > it confused me a lot when I was trying to port over this patch to another > port which borrowed this and *does* use it. (sthen@) json-glib ~ Makefile ~ patches/patch-configure_ac > Unbreak autoconf checks with clang by not using nested functions (naddy@) ti-msp430gcc ~ Makefile > Use COMPILER=base-gcc, for consistency. Requested by sthen@ (jca@) == editors =========================================================== 03/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/editors TeXmacs ~ Makefile > Use COMPILER=base-gcc, for consistency. Requested by sthen@ (jca@) == emulators ========================================================= 04/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/emulators qemu ~ Makefile > don't pick up archivers/snappy in configure (naddy@) == graphics ========================================================== 05/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/graphics libgphoto2 ~ Makefile > needs aclocal, may need libtool.m4 (sthen@) ~ Makefile > avoid triggering autotools cascade after patching configure.ac (naddy@) == lang ============================================================== 06/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/lang jamvm ~ Makefile > add BROKEN-i386 (sthen@) swi-prolog - patch-packages_clib_maildrop_rfc822_configure ~ Makefile + patch-packages_clib_maildrop_rfc822_configure_in > sync with mail/maildrop as far as applicable (naddy@) == mail ============================================================== 07/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/mail courier-authlib ~ Makefile > needs libtool.m4 (sthen@) ~ Makefile > run autotools before configure, not during build (naddy@) ~ Makefile > Simplify: avoid triggering autotools cascade after patching configure.ac. > No need to pull in automake and libtool. (naddy@) maildrop ~ Makefile > Needs devel/libtool for autohell. (ajacoutot@) ~ Makefile > run autotools before configure, not during build (naddy@) ~ Makefile > Simplify: avoid triggering autotools cascade after patching configure.ac. > No need to pull in automake and libtool. (naddy@) == multimedia ======================================================== 08/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/multimedia avidemux ~ Makefile > Use COMPILER=base-gcc, for consistency. Requested by sthen@ (jca@) == net =============================================================== 09/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net net-snmp ~ Makefile + patches/patch-snmplib_snmp_api_c > Fix a crash in libnetsnmp client, occurring in some circumstances where > a local IP address is set. Cause is a use-after-free, OpenBSD's malloc > helpfully often picks these up early (with relatively low impact on > performance), often turning what would be a hidden bug into a likely > crash. > Reported and analysis from Andrea Biscuola of Zabbix, > https://support.zabbix.com/browse/ZBX-12726 > https://sourceforge.net/p/net-snmp/bugs/2803/ > Diff from me. I was going to wait for confirmation from Andrea that it > fixes the issue, but having read more of the code I'm confident that this > change or something like it is needed, so committing now to make it pre > 6.2. > ok naddy (sthen@) openvpn ~ Makefile ~ distinfo ~ patches/patch-configure ~ patches/patch-src_openvpn_route_c ~ pkg/PLIST > SECURITY update to openvpn-2.4.4 > Among other changes, fix for > o CVE-2017-12166: out of bounds write in key-method 1 > https://community.openvpn.net/openvpn/wiki/CVE-2017-12166 > ok sthen@ (jca@) ~ Makefile ~ distinfo ~ patches/patch-configure ~ patches/patch-src_openvpn_route_c ~ pkg/PLIST TAGGED OPENBSD_6_1 > SECURITY update to openvpn-2.4.4 > Among other changes, fix for > o CVE-2017-12166: out of bounds write in key-method 1 > https://community.openvpn.net/openvpn/wiki/CVE-2017-12166 (jca@) == security ========================================================== 10/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security lastpass-cli ~ Makefile + patches/patch-http_c > fix obvious use-after-free (committed upstream), from Bjorn Ketelaars, ok > naddy (sthen@) == x11 =============================================================== 11/11 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/x11 gnome ~ mutter/Makefile ~ mutter/patches/patch-clutter_configure_ac > - unbreak a second autoconf check with clang by not using nested functions > - set AUTOCONF_DIR to actually regenerate clutter/configure, it wasn't > being > regen'd at all, so both the -fvisibility=hidden and -Bsymbolic-functions > tests > were broken (sthen@) =============================================================================== _______________________________________________ odc mailing list [email protected] http://www.squish.net/mailman/listinfo/odc
