OpenBSD ports changes summary for 2016-04-17 to 2016-04-24 inclusive ====================================================================
archivers/pecl-lzf audio/ncmpcpp databases/hs-hedis databases/ruby-redis databases/tdb devel devel/atk devel/ccache devel/cmake devel/cppcheck devel/cpphs devel/glib2 devel/glib2mm devel/gobject-introspection devel/jenkins devel/json-glib devel/libgtop2 devel/libpeas devel/libsoup devel/libtalloc devel/p5-Devel-FindRef devel/pango devel/pangomm devel/py-babel devel/py-backports-ssl-match-hostname devel/py-gobject3 devel/py-path.py devel/py-pexpect devel/quirks devel/zeal fonts fonts/terminus-font games/jag games/warzone2100 graphics/ImageMagick graphics/feh graphics/gdk-pixbuf2 graphics/geeqie graphics/inkscape graphics/p5-Imager graphics/rawstudio infrastructure/bin infrastructure/db infrastructure/man java/jna lang/node lang/php lang/pypy lang/vala mail mail/fdm mail/libetpan mail/lumail mail/mailman mail/razor-agents mail/roundcubemail mail/zarafa math/ntl math/octave misc/bible-kjv misc/gtk3mm-documentation misc/hwdata net net/amsn net/dhcpcd net/glib2-networking net/icinga net/icmpinfo net/libproxy net/librenms net/pebrot net/py-boto3 net/py-botocore net/py-msgpack net/rrdtool net/samba net/sslh net/syncthing net/wireshark news/pan plan9/plan9port print/texlive productivity/glabels security/ccid security/lastpass-cli security/libgcrypt security/libsodium security/oletools security/py-oauthlib security/stunnel shells shells/yash sysutils/awscli sysutils/collectd sysutils/colortree sysutils/d-feet sysutils/google-cloud-sdk sysutils/logstash sysutils/pstree sysutils/sysclean telephony/asterisk telephony/siproxd textproc textproc/hs-HaXml textproc/hs-polyparse textproc/hs-scanner textproc/jq textproc/lua-lustache textproc/lua-markdown textproc/lua-yaml textproc/pdfpc textproc/py-numpydoc www www/c-icap www/chromium www/kcaldav www/kcgi www/lynx www/nginx www/squid www/vimb www/webkit www/webkitgtk4 x11/gnome x11/gtk+3 x11/gtk3mm x11/kde x11/mlterm x11/type1inst == archivers ========================================================= 01/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/archivers pecl-lzf ~ Makefile ~ distinfo > update to pecl-lzf 1.6.5, from maintainer Johan Huldtgren (sthen@) == audio ============================================================= 02/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/audio ncmpcpp ~ Makefile ~ distinfo > Update to ncmpcpp-0.7.4 (dcoppa@) == databases ========================================================= 03/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/databases hs-hedis ~ Makefile ~ distinfo > Update to hedis-0.8.0 (dcoppa@) ruby-redis ~ Makefile ~ distinfo ~ pkg/PLIST > Update to ruby-redis-3.3.0 (dcoppa@) tdb - patches/patch-buildtools_wafadmin_Tools_ccroot_py - patches/patch-lib_replace_replace_h ~ Makefile ~ distinfo ~ patches/patch-buildtools_wafsamba_samba_install_py ~ patches/patch-buildtools_wafsamba_wafsamba_py ~ pkg/PLIST TAGGED OPENBSD_5_9 > Update to tdb-1.3.7, needed to backport recent samba updates. > ok sthen@ (jca@) ~ Makefile ~ distinfo ~ patch-buildtools_wafsamba_samba_install_py ~ patch-buildtools_wafsamba_wafsamba_py TAGGED OPENBSD_5_9 > Update to tdb-1.3.8 (jca@) == devel ============================================================= 04/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/devel devel ~ Makefile > Add devel/zeal to the build (awolk@) atk ~ Makefile ~ distinfo ~ pkg/PLIST > Update to atk-2.20.0. (ajacoutot@) ccache ~ Makefile ~ distinfo > update to ccache-3.2.5 (sthen@) cmake ~ Makefile ~ cmake.port.mk > sync (dcoppa@) cppcheck ~ Makefile ~ distinfo > update to 1.73 (gsoares@) cpphs ~ Makefile > Update to hs-polyparse-1.12 (dcoppa@) glib2 - patches/patch-gio_gunionvolumemonitor_c ~ Makefile ~ distinfo ~ pkg/PLIST + patches/patch-gio_gioenums_h > Update to glib2-2.48.0. (ajacoutot@) glib2mm ~ Makefile ~ distinfo ~ pkg/PLIST > Update to glib2mm-2.48.1. (ajacoutot@) gobject-introspection - patch-giscanner_transformer_py ~ Makefile ~ distinfo > - update to gobject-introspection-1.48.0 > this and the upcoming vala update were tested in a bulk by aja@, thanks! > (jasper@) jenkins ~ devel/Makefile ~ devel/distinfo ~ stable/Makefile ~ stable/distinfo > Update to 1.651/1.656, fixes CVS-2016-0788 to 0792, thanks Sevan Janiyan. > (ian@) json-glib ~ Makefile ~ distinfo ~ pkg/PLIST > update to json-glib-1.2.0 (jasper@) libgtop2 - patches/patch-sysdeps_openbsd_glibtop_suid_h - patches/patch-sysdeps_openbsd_open_c - patches/patch-sysdeps_openbsd_procargs_c - patches/patch-sysdeps_openbsd_procmap_c - patches/patch-sysdeps_openbsd_procopenfiles_c - patches/patch-sysdeps_openbsd_suid_open_c - patches/patch-sysdeps_openbsd_uptime_c ~ Makefile ~ distinfo ~ patches/patch-configure ~ pkg/PLIST > update to libgtop-2.34.0 (jasper@) libpeas ~ Makefile ~ distinfo ~ pkg/PLIST > update to libpeas-1.18.0 (jasper@) libsoup ~ Makefile ~ distinfo ~ pkg/PLIST > Update to libsoup-2.52.2. (ajacoutot@) libtalloc - patches/patch-buildtools_wafadmin_Tools_ccroot_py - patches/patch-buildtools_wafadmin_Tools_gcc_py - patches/patch-buildtools_wafadmin_Tools_gxx_py - patches/patch-lib_replace_replace_h ~ Makefile ~ distinfo ~ patches/patch-buildtools_wafsamba_samba_install_py ~ patches/patch-buildtools_wafsamba_wafsamba_py TAGGED OPENBSD_5_9 > Update to talloc-2.1.3, needed to backport recent samba updates. > ok sthen@ (jca@) ~ Makefile ~ distinfo ~ patch-buildtools_wafsamba_samba_install_py ~ patch-buildtools_wafsamba_wafsamba_py + patches/patch-wscript TAGGED OPENBSD_5_9 > Update to talloc-2.1.6 (jca@) p5-Devel-FindRef ~ Makefile + patches/patch-FindRef_xs > Patch devel/p5-Devel-FindRef to build on perl 5.22 > https://rt.cpan.org/Public/Bug/Display.html?id=101077 > OK sthen@ (afresh1@) pango ~ Makefile ~ distinfo ~ pkg/PLIST > Update to pango-1.40.1. (ajacoutot@) pangomm ~ Makefile ~ distinfo ~ pkg/PLIST > Update to pangomm-2.40.0. (ajacoutot@) py-babel ~ Makefile ~ distinfo ~ pkg/PLIST > Update to py-babel 2.3.3 and take maintainer. > ok danj@ (shadchin@) py-backports-ssl-match-hostname ~ Makefile ~ distinfo ~ pkg/PLIST > Update to py-backports-ssl-match-hostname 3.5.0.1 and take maintainer. > (shadchin@) py-gobject3 ~ Makefile ~ distinfo > Update to py-gobject3-3.20.0. (ajacoutot@) py-path.py ~ Makefile ~ distinfo > Minor update to py-path.py 8.2.1 (shadchin@) py-pexpect ~ Makefile > Missing build dep, spotted by nigel@ (shadchin@) quirks ~ Makefile ~ files/Quirks.pm > remove clients for discontinued Microsoft Messenger service > noticed by Frederic Cambus (naddy@) zeal + distinfo + Makefile + pkg/PLIST + pkg/DESCR > New import: > Import devel/zeal - Simple offline API documentation browser ~ Makefile > - start COMMENT with lowercase letter > - remove unneeded DISTNAME > - set NO_TEST (jasper@) == fonts ============================================================= 05/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/fonts fonts ~ Makefile > Add a centered_tilde flavour to terminus-font, suggested by Michael Reed, > feedback from naddy and patrick keshishian, ok LEVAI Daniel (maintainer). > (sthen@) terminus-font ~ Makefile ~ pkg/DESCR > Add a centered_tilde flavour to terminus-font, suggested by Michael Reed, > feedback from naddy and patrick keshishian, ok LEVAI Daniel (maintainer). > (sthen@) == games ============================================================= 06/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/games jag ~ Makefile + patches/patch-displaywrapper_cpp > Unbreak run-time (fix use-after-free when talking with XRandr). > Initial report from Roman Yakovlev. (zhuk@) warzone2100 ~ Makefile ~ distinfo ~ pkg/PLIST + patches/patch-src_Makefile_in > bugfix update to warzone2100-3.1.5 > remove gettext module and enable SEPARATE_BUILD while here (kirby@) == graphics ========================================================== 07/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/graphics ImageMagick ~ Makefile ~ distinfo > Update to ImageMagick 6.9.3-8. While there, set PORTROACH marker to try > and do something slightly more useful (the naming scheme doesn't work > very well with portroach, but hopefully pointing at /download/ rather > than letting it use /download/releases/ will mean it only picks up > changes to the minor release of the current version). (sthen@) feh ~ Makefile ~ distinfo ~ patches/patch-man_feh_pre > Update to feh-2.15.2 (dcoppa@) gdk-pixbuf2 ~ Makefile ~ distinfo ~ pkg/PLIST > Update to gdk-pixbuf-2.34.0. (ajacoutot@) geeqie ~ Makefile ~ distinfo ~ pkg/PLIST > Update to geeqie-1.2.3. (ajacoutot@) inkscape ~ Makefile + patches/patch-src_ui_clipboard_cpp > Fix build with glib2 >=2.48.0. > Drop the gettext module while here. (ajacoutot@) p5-Imager ~ Makefile ~ distinfo > Update graphics/p5-Imager to 1.005 > Fixes build with perl 5.22 > OK sthen@ (afresh1@) rawstudio ~ Makefile + patches/patch-src_Makefile_in > don't use -O4, from mmcc (sthen@) == infrastructure ==================================================== 08/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/infrastructure bin ~ portcheck > Print warning when SHARED_ONLY being set in a port. (zhuk@) db ~ user.list > Reserve user for net/syncthing. (edd@) ~ user.list > Reserve _mailmanq for upcoming changes to mail/mailman. (okan@) man ~ man1/dpb.1 > tweak phrasing; from mmcc@ (naddy@) == java ============================================================== 09/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/java jna ~ Makefile ~ distinfo ~ files/jna.clj > update to jna-4.2.2 (jasper@) == lang ============================================================== 10/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/lang node ~ Makefile ~ distinfo ~ pkg/PLIST > Update node to the latest. > Full changelog here: > https://github.com/nodejs/node/blob/v4.4.3/CHANGELOG.md > OK giovanni (abieber@) php ~ Makefile.inc ~ 5.4/Makefile ~ 5.5/Makefile ~ 5.6/Makefile ~ 7.0/Makefile ~ files/DESCR-bz2 ~ files/DESCR-imap ~ files/DESCR-mssql ~ files/DESCR-sybase_ct ~ files/php.conf > Don't hardcode 'php5' in config file and DESCRs, there is php7 now. > Reported and initial diff from Frank Groeneveld, revised by me, ok robert@ > (sthen@) ~ Makefile.inc > fix regex, from nigel@ (sthen@) pypy ~ Makefile ~ distinfo ~ patches/patch-lib_pypy__tkinter_tklib_build_py ~ pkg/PLIST + pkg/patch-rpython_rlib_rvmprof_src_vmprof_config_h + pkg/patch-rpython_rlib_rvmprof_src_vmprof_getpc_h > lang/pypy: Update to 5.0.1. > Reads OK, sthen@ (edd@) vala ~ Makefile ~ distinfo ~ pkg/PLIST > update to vala-0.32.0 (jasper@) == mail ============================================================== 11/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/mail mail ~ Makefile > mailman no longer requires a FLAVOR for each mail/web server (okan@) fdm ~ Makefile + patches/patch-fetch-mbox_c TAGGED OPENBSD_5_9 > mail/fdm: Apply mbox parser fix to 5.9-stable. > Prevents mails containing '>From' lines in the text body from being > split. Fix from upstream. > OK jasper@ (edd@) libetpan ~ Makefile + patches/patch-src_data-types_mailstream_ssl_c > Bring back a commit from upstream so not only TLSv1 is allowed but also > TLSv1.2 (issue reported by vgross@) > While bumping, add myself as maintainer as the only user for libetpan > is claws-mail which I already maintain (prodded by landry@) > ok jca@ sthen@ vgross@ (danj@) lumail ~ patches/patch-src_bindings_cc > Unbreak with glib2 >=2.48.0. (ajacoutot@) mailman - patches/patch-configure ~ Makefile ~ distinfo ~ patches/patch-Mailman_Defaults_py_in ~ pkg/DESCR ~ pkg/PLIST ~ pkg/README + patches/patch-src_common_c + patches/patch-src_common_h > - Update to 2.1.21. > - gc configure patch since it hasn't been required since introducing > --without-permcheck in configure, despite the comment in Makefile. > - Some of Defaults.py are now upstream defaults. > Remove FLAVORs: > - Rewrite src/common.c:check_caller() for the cgi/mail wrapper to now > look at the defined group membership instead, _mailmanq (a new group). > This allows the administrator to switch mail servers and web servers > without requiring a FLAVOR for each combination; but rather, by simply > adding the cgi/mail user to the _mailmanq group. This is a diversion > from upstream, but will be proposed. At least sthen@ and dlg@ agree to > go in this general direction. (okan@) razor-agents ~ Makefile ~ patches/patch-Makefile_PL > Allow razor-agents to build with perl 5.22 > Submitted upstream https://github.com/toddr/Razor2-Client-Agent/pull/1 > OK sthen@ (afresh1@) roundcubemail - patches/patch-INSTALL ~ Makefile ~ distinfo ~ pkg/PLIST > update to roundcubemail-1.1.5 (sthen@) zarafa ~ Makefile.inc ~ zarafa/distinfo ~ zarafa/patches/patch-ECtools_fsck_zarafa-fsck_cpp ~ zarafa/patches/patch-ECtools_monitor_zarafa-monitor_cpp ~ zarafa/patches/patch-Makefile_in ~ zarafa/patches/patch-caldav_CalDAV_cpp ~ zarafa/patches/patch-common_ECChannel_cpp ~ zarafa/patches/patch-common_ECLogger_cpp ~ zarafa/patches/patch-common_charset_localeutil_cpp ~ zarafa/patches/patch-common_charset_localeutil_h ~ zarafa/patches/patch-common_include_zarafa_ECLogger_h ~ zarafa/patches/patch-common_include_zarafa_charset_traits_h ~ zarafa/patches/patch-common_include_zarafa_platform_h ~ zarafa/patches/patch-common_include_zarafa_platform_linux_h ~ zarafa/patches/patch-common_platform_cpp ~ zarafa/patches/patch-common_platform_linux_cpp ~ zarafa/patches/patch-common_ustringutil_cpp ~ zarafa/patches/patch-configure_ac ~ zarafa/patches/patch-doc_Makefile_in ~ zarafa/patches/patch-doc_manual_xml ~ zarafa/patches/patch-gateway_Gateway_cpp ~ zarafa/patches/patch-inetmapi_Makefile_in ~ zarafa/patches/patch-installer_linux_server_cfg ~ zarafa/patches/patch-installer_userscripts_users_common_sh ~ zarafa/patches/patch-m4lcommon_CommonUtil_cpp ~ zarafa/patches/patch-m4lcommon_include_zarafa_mapi_ptr_mapi_memory_ptr_h ~ zarafa/patches/patch-m4lcommon_include_zarafa_mapi_ptr_mapi_object_ptr_h ~ zarafa/patches/patch-php-ext_main_cpp ~ zarafa/patches/patch-provider_client_ECChangeAdvisor_cpp ~ zarafa/patches/patch-provider_client_ECNotifyMaster_cpp ~ zarafa/patches/patch-provider_client_WSTransport_cpp ~ zarafa/patches/patch-provider_contacts_Makefile_in ~ zarafa/patches/patch-provider_libserver_ECDatabaseUtils_cpp ~ zarafa/patches/patch-provider_libserver_ECSessionGroup_cpp ~ zarafa/patches/patch-provider_libserver_ECSession_cpp ~ zarafa/patches/patch-provider_libserver_StreamUtil_cpp ~ zarafa/patches/patch-provider_plugins_ldappasswords_cpp ~ zarafa/patches/patch-provider_server_ECServer_cpp ~ zarafa/patches/patch-provider_server_ECSoapServerConnection_cpp ~ zarafa/patches/patch-provider_server_ECThreadManager_cpp ~ zarafa/patches/patch-provider_server_Makefile_in ~ zarafa/patches/patch-spooler_DAgent_cpp ~ zarafa/patches/patch-spooler_Spooler_cpp ~ zarafa/pkg/PLIST-main > update to 7.2.3 (robert@) == math ============================================================== 12/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/math ntl ~ Makefile > Disable native option. > from Michael McConville, thanks ! (benoit@) octave ~ Makefile ~ distinfo ~ patches/patch-configure ~ pkg/PLIST > maintenance update to 4.0.1 (steven@) + patches/patch-doc_interpreter_Makefile_in + patches/patch-doc_liboctave_Makefile_in > unbreak by completely disabling building of info files. > pointed out by sthen and naddy (steven@) ~ Makefile ~ distinfo ~ patches/patch-configure > update to 4.0.2 (steven@) ~ Makefile > use texinfo from ports for math/octave, somewhere in the Makefiles it's > trying to regenerate the files (at least for naddy and myself, but not > steven!), despite the fact that the tarball contains pregenerated ones, > and this doesn't work with the old version of texinfo from base. (sthen@) == misc ============================================================== 13/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/misc bible-kjv ~ Makefile TAGGED OPENBSD_5_9 > replacement master site since the distfile was removed from the original > master > site and ftp.openbsd.org did not cache a copy either (naddy@) gtk3mm-documentation ~ Makefile ~ distinfo > Update to gtk3mm-documentation-3.20.0. (ajacoutot@) hwdata ~ Makefile ~ distinfo > Update to hwdata-0.288. (ajacoutot@) == net =============================================================== 14/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net net ~ Makefile > Link net/syncthing. (edd@) ~ Makefile > remove clients for discontinued Microsoft Messenger service > noticed by Frederic Cambus (naddy@) amsn - Makefile - distinfo - patches/patch-Makefile_in - patches/patch-amsn-remote - patches/patch-amsn-remote-CLI - patches/patch-configure - pkg/DESCR - pkg/PLIST > remove clients for discontinued Microsoft Messenger service > noticed by Frederic Cambus (naddy@) dhcpcd ~ Makefile + patches/patch-dhcp6_c > Fix dhcpcd regression in 6.10.2: "If sla is 0, just copy the prefix and > don't > set a blackhole route if end prefix is the same as the delegated prefix." > Fix from upstream, diff from LÃVAI Dániel. (sthen@) - patches/patch-dhcp6_c ~ Makefile ~ distinfo > update to dhcpcd-6.10.3 (sthen@) glib2-networking ~ Makefile ~ distinfo ~ pkg/PLIST > Update to glib2-networking-2.48.0. (ajacoutot@) icinga ~ web2/Makefile ~ web2/distinfo ~ web2/pkg/PLIST > update to Icinga Web 2 2.3.1 (sthen@) ~ core2/Makefile ~ core2/distinfo > update to icinga2-2.4.7 (sthen@) icmpinfo ~ Makefile ~ pkg/DESCR > use a better DESCR in net/icmpinfo, from mmcc (sthen@) libproxy ~ Makefile + patches/patch-libproxy_modules_ignore_ip_cpp > Add a patch to prevent a null pointer dereference in net/libproxy under > Gnome > Qt5 started to use libproxy and this exposed a crashing bug on OpenBSD > when using Qt5 applications on Gnome 3. > Here's a sample backtrace: > https://gist.github.com/mulander/c03997ae7e3fe4e30af0d4f2ce2965f0 > The issue is caused by an unguarded dereference of ign_ip. > Other parts of the code properly expect that sockaddr_from_string > might return null and guard against it. > Adding a proper guard prevents a segfault both in OpenBSD > www/otter-browser and devel/zeal. > Issue reported upstream in: > https://github.com/libproxy/libproxy/issues/24 > OK zhuk@ aja@ (awolk@) librenms ~ Makefile ~ distinfo ~ patches/patch-daily_sh ~ patches/patch-includes_definitions_inc_php ~ patches/patch-includes_polling_core_inc_php ~ pkg/PLIST > update to librenms-201604 (sthen@) ~ Makefile > add missing SUBST_VARS (sthen@) pebrot - Makefile - distinfo - pkg/DESCR - pkg/PLIST > remove clients for discontinued Microsoft Messenger service > noticed by Frederic Cambus (naddy@) py-boto3 ~ Makefile ~ distinfo ~ pkg/PLIST > Update to py-boto3-1.3.1. (ajacoutot@) py-botocore ~ Makefile ~ distinfo > Update to py-botocore-1.4.11. (ajacoutot@) ~ Makefile ~ distinfo ~ pkg/PLIST > Update to py-botocore-1.4.12. (ajacoutot@) ~ Makefile ~ distinfo > Update to py-botocore-1.4.13. (ajacoutot@) py-msgpack ~ Makefile ~ distinfo > Update to py-msgpack 0.4.7 and take maintainer. (shadchin@) rrdtool - patches/patch-src_rrd_daemon_c ~ Makefile ~ distinfo ~ patches/patch-bindings_Makefile_in ~ patches/patch-configure ~ patches/patch-doc_Makefile_in ~ patches/patch-examples_Makefile_in ~ patches/patch-examples_rrdcached_Makefile_in ~ patches/patch-src_Makefile_in ~ pkg/PLIST-main > update to rrdtool-1.6.0, librrd_th is removed, > the main library is now meant to be thread-safe (sthen@) samba - patches/patch-buildtools_wafadmin_Tools_ccroot_py - patches/patch-buildtools_wafadmin_Tools_gcc_py - patches/patch-buildtools_wafadmin_Tools_gxx_py - patches/patch-buildtools_wafsamba_samba_bundled_py - patches/patch-lib_ntdb_wscript - patches/patch-lib_replace_replace_h - patches/patch-lib_testtools_testtools_tests_test_compat_py - patches/patch-source3_lib_sysquotas_nfs_c - patches/patch-source3_utils_status_c - patches/patch-wscript ~ Makefile ~ distinfo ~ patches/patch-buildtools_wafsamba_samba_autoconf_py ~ patches/patch-buildtools_wafsamba_samba_conftests_py ~ patches/patch-buildtools_wafsamba_samba_install_py ~ patches/patch-buildtools_wafsamba_wafsamba_py ~ patches/patch-lib_ldb_wscript ~ patches/patch-lib_replace_wscript ~ patches/patch-python_samba_provision___init___py ~ patches/patch-source3_wscript ~ patches/patch-source4_scripting_bin_samba_upgradedns ~ pkg/DESCR-util ~ pkg/PLIST-docs ~ pkg/PLIST-ldb ~ pkg/PLIST-main ~ pkg/PLIST-util ~ pkg/samba_ad_dc.rc TAGGED OPENBSD_5_9 > Backport SECURITY update to samba-4.3.8 > ok sthen@ > Fixes for: > CVE-2015-7560 (Incorrect ACL get/set allowed on symlink path) > CVE-2016-0771 (Out-of-bounds read in internal DNS server) > CVE-2015-5370 (Multiple errors in DCE-RPC code) > CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP) > CVE-2016-2111 (NETLOGON Spoofing Vulnerability) > CVE-2016-2112 (LDAP client and server don't enforce integrity) > CVE-2016-2113 (Missing TLS certificate validation) > CVE-2016-2114 ("server signing = mandatory" not enforced) > CVE-2016-2115 (SMB IPC traffic is not integrity protected) > CVE-2016-2118 (SAMR and LSA man in the middle attacks possible) > CVE-2016-2118 is http://badlock.org/ (jca@) + patches/patch-source3_client_smbspool_krb5_wrapper_c + patches/patch-source4_torture_local_nss_tests_c TAGGED OPENBSD_5_9 > Missed in previous. (jca@) - patches/patch-examples_libsmbclient_teststat2_c - patches/patch-examples_libsmbclient_teststat_c - patches/patch-examples_libsmbclient_testutime_c ~ Makefile ~ distinfo ~ patches/patch-buildtools_wafsamba_samba_autoconf_py ~ patches/patch-buildtools_wafsamba_samba_conftests_py ~ patches/patch-buildtools_wafsamba_samba_install_py ~ patches/patch-buildtools_wafsamba_symbols_py ~ patches/patch-buildtools_wafsamba_wafsamba_py ~ patches/patch-buildtools_wafsamba_wscript ~ patches/patch-lib_ldb_wscript ~ patches/patch-lib_replace_wscript ~ patches/patch-python_samba_provision___init___py ~ patches/patch-source3_wscript ~ patches/patch-source4_heimdal_build_wscript_build ~ pkg/PLIST-ldb ~ pkg/PLIST-main TAGGED OPENBSD_5_9 > Update to samba-4.4.2 > Tests by Vijay Sankar and Ian, ok Ian > This release contains the security fixes introduced by 4.4.2, plus the > new features and improvements from 4.4.0: > https://www.samba.org/samba/history/samba-4.4.0.html (jca@) sslh ~ Makefile ~ distinfo ~ patches/patch-Makefile ~ patches/patch-basic_cfg ~ patches/patch-example_cfg ~ patches/patch-sslh_pod > Update to sslh 1.18, from MAINTAINER Bjorn Ketelaars (landry@) syncthing + Makefile + distinfo + pkg/DESCR + pkg/PLIST + pkg/README + pkg/syncthing.rc > New import: > Import net/syncthing. A file synchroniser. ~ Makefile ~ pkg/PLIST ~ pkg/syncthing.rc > net/syncthing: fix a few bits. > pexp not needed in rc script, @extraunexec in PLIST, fix manuals. > Noticed by ajacoutot@, input sthen@, OK ajacoutot@. Thanks. (edd@) wireshark ~ Makefile ~ distinfo > update to wireshark-2.0.3, many fixes (sthen@) == news ============================================================== 15/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/news pan ~ Makefile ~ distinfo ~ patches/patch-pan_gui_gui_cc ~ pkg/PLIST > Update to 0.140. > ok ajacoutot@ (pea@) ~ Makefile ~ pkg/PLIST > Bring gtkspell3 support back now that it's supported. > Drop unused post-configure. > Regen PLIST+WANTLIB. > ok pea@ (maintainer) (ajacoutot@) ~ Makefile > Bump after changes. > Ok aja@ (nigel@) == plan9 ============================================================= 16/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/plan9 plan9port ~ Makefile ~ distinfo > update to latest git commit (gsoares@) == print ============================================================= 17/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/print texlive ~ base/Makefile ~ base/pkg/PLIST > print/texlive: dynamically link potrace. > Also remove a bogus comment and update a broken conflict marker while we > are in > here. > Looks OK kili@, thanks (edd@) == productivity ====================================================== 18/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/productivity glabels ~ Makefile ~ distinfo ~ pkg/PLIST > Update to glabels-3.4.0. (ajacoutot@) == security ========================================================== 19/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security ccid ~ Makefile ~ distinfo ~ patches/patch-src_Makefile_in > Bugfixing update to ccid-1.4.23 (dcoppa@) lastpass-cli ~ Makefile ~ distinfo ~ patches/patch-upload-queue_c > Update to lastpass-cli 0.9.0, from MAINTAINER Bjorn Ketelaars (landry@) libgcrypt ~ Makefile ~ distinfo ~ patches/patch-mpi_longlong_h ~ patches/patch-src_secmem_c ~ pkg/PLIST + patches/patch-cipher_crc-intel-pclmul_c > Update to libgcrypt-1.7.0. (ajacoutot@) libsodium ~ Makefile ~ distinfo > update to libsodium-1.0.10 to quieten portroach, no functional changes > (sthen@) oletools ~ Makefile ~ distinfo > update oletools to 0.46. (rpointel@) py-oauthlib ~ Makefile ~ distinfo ~ pkg/PLIST + pkg/patch-tests_oauth1_rfc5849_test_client_py + pkg/patch-tests_oauth1_rfc5849_test_signatures_py > update to py-oauthlib-1.1.0, from maintainer Johan Huldtgren (sthen@) stunnel ~ Makefile ~ distinfo ~ patches/patch-src_ctx_c ~ patches/patch-src_options_c ~ patches/patch-src_verify_c > update to 5.31 > OK kili@ (gsoares@) == shells ============================================================ 20/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/shells shells ~ Makefile > +yash (naddy@) yash + Makefile + distinfo + pkg/DESCR + pkg/PLIST + patches/patch-variable_c > New import: > Import yash 2.41. == sysutils ========================================================== 21/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/sysutils awscli ~ Makefile ~ distinfo > Update to awscli-1.10.20. (ajacoutot@) ~ Makefile ~ distinfo > Update to awscli-1.10.21. (ajacoutot@) ~ Makefile ~ distinfo > Update to awscli-1.10.22. (ajacoutot@) collectd ~ Makefile ~ patches/patch-configure > handle rrdtool lib change that I missed in collectd when I looked at > sqlports results (thanks nigel for pointing out), sync other wantlib > while there. (sthen@) colortree ~ Makefile + patches/patch-tree_c > use pledge in colortree; from steve latif, updated by David Dahlberg > (maintainer). (sthen@) - patches/patch-tree_c ~ Makefile > backout previous, semarie found problems (sthen@) d-feet ~ Makefile ~ distinfo ~ pkg/PLIST > Update to d-feet-0.3.11. (ajacoutot@) google-cloud-sdk ~ Makefile ~ distinfo ~ pkg/PLIST > Update to google-cloud-sdk-105.0.0. (ajacoutot@) ~ Makefile ~ distinfo ~ patch-lib_googlecloudsdk_core_docker_docker_py ~ pkg/PLIST > Update to google-cloud-sdk-106.0.0. (ajacoutot@) logstash ~ forwarder/Makefile > Do not strip lang/go binaries in sysutils/logstash/forwarder > The Go compiler doesn't output all the expected segments and > upstream is officially against stripping Go binaries. It's also > known to cause crashesh and other runtime issues. > The warnings were initially spotted by Fritjof Bornebusch thanks! > OK czarkoff@ (awolk@) pstree ~ Makefile ~ patches/patch-pstree_c > pledge sysutils/pstree > initial patch from steve latif > ok sthen@ (semarie@) sysclean ~ Makefile ~ distinfo ~ pkg/DESCR > update sysutils/sysclean to 1.3 > ok landry@ (semarie@) ~ Makefile ~ distinfo ~ pkg/DESCR > update sysutils/sysclean to 1.4 > ok sthen@ (semarie@) ~ Makefile ~ distinfo > update sysutils/sysclean to 1.5 > ok jung@ (semarie@) == telephony ========================================================= 22/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/telephony asterisk ~ Makefile ~ distinfo > update to asterisk-13.8.2 (sthen@) siproxd ~ Makefile ~ distinfo ~ patches/patch-doc_siproxd_conf_example ~ patches/patch-src_Makefile_in ~ pkg/PLIST > Update to 0.8.2. > Major changes: > - support dealing with anonymous calls > - support for SIP Trunks > - various interoperability issues have been resolved > (Snom phones no longer require the "broken registrar" setting) > New plugins: > stripheader, codecfilter, siptrunk, fix_DTAG, fix_fbox_anoncall > In the port, don't build useless static versions of the modules in > the first place instead of deleting them later. > ok lteo@ (naddy@) == textproc ========================================================== 23/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/textproc textproc ~ Makefile > hook hs-scanner to the build (dcoppa@) ~ Makefile > Add textproc/lua-lustache & textproc/lua-markdown to the build (awolk@) ~ Makefile > +lua-yaml (jsg@) ~ Makefile > +py-numpydoc,python3 (shadchin@) hs-HaXml ~ Makefile > Update to hs-polyparse-1.12 (dcoppa@) hs-polyparse ~ Makefile ~ distinfo > Update to hs-polyparse-1.12 (dcoppa@) hs-scanner + Makefile + distinfo + pkg/DESCR + pkg/PLIST > New import: > Import hs-scanner, new dependency of an upcoming update to hedis-0.8.0. jq ~ Makefile + patches/patch-jv_parse_c > Fix off-by-one leading to heap buffer overflow in textproc/jq, > triggered by JSON-encoded numbers longer than 256 bytes. CVE-2015-8863 > (sthen@) lua-lustache + Makefile + distinfo + pkg/PLIST + pkg/DESCR > New import: > Import textproc/lua-lustache lua-markdown + Makefile + distinfo + pkg/PLIST + pkg/DESCR > New import: > Import textproc/lua-markdown lua-yaml + distinfo + Makefile + pkg/PLIST + pkg/DESCR > New import: > Import lyaml 6.0 pdfpc + patches/patch-src_classes_action_movie_vala > unbreak with newer valala (doesn't affect current vala) (jasper@) ~ patches/patch-src_classes_action_movie_vala > submitted upstream (jasper@) py-numpydoc ~ Makefile ~ distinfo ~ pkg/PLIST > Update to py-numpydoc 0.6.0. > Add python3 flavor and take maintainer. > ok ajacoutot@ (shadchin@) == www =============================================================== 24/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/www www ~ Makefile > +kcaldav (jturner@) c-icap ~ c-icap/Makefile ~ c-icap/distinfo ~ c-icap/patches/patch-c-icap_conf_in ~ c-icap/patches/patch-docs_man_c-icap_8_in ~ modules/Makefile ~ modules/distinfo > update to c-icap 0.4.3 (sthen@) chromium ~ Makefile ~ distinfo > update to 50.0.2661.86 (robert@) kcaldav + Makefile + distinfo + pkg/PLIST + pkg/DESCR + pkg/README + patches/patch-Makefile + patches/patch-kcaldav_sql + patches/patch-kcaldav_passwd_in_1 > New import: > Import ports/www/kcaldav. ok jung@ ~ Makefile ~ distinfo > Use EXTRACT_SUFX instead of hardcoding DISTFILES to the snapshot archive. > No bump since I just imported. (jturner@) ~ Makefile ~ pkg/README > Remove stray ' in README, bump for safety. Spotted by sthen@ (jturner@) kcgi ~ Makefile ~ distinfo > Update kcgi to 0.8.3 (jturner@) lynx ~ Makefile > Link lynx with bzlib, to avoid an attempt to exec() to handle bzip2- > compressed http transfers. From Frederic Cambus (maintainer). (sthen@) nginx ~ Makefile ~ pkg/DESCR > nginx isn't part of base anymore; remove mention of it being there. > ok sthen (tj@) ~ Makefile ~ distinfo > update to 1.9.15; from David CARLIER (robert@) squid ~ Makefile ~ distinfo > update to squid-3.5.17, fixing some buffer overflows and possible > disclosure of stack contents. when available, reports will be at > http://www.squid-cache.org/Advisories/SQUID-2016_5.txt > http://www.squid-cache.org/Advisories/SQUID-2016_6.txt (sthen@) ~ Makefile ~ distinfo TAGGED OPENBSD_5_9 > MFC squid update to 3.5.17, fixing buffer overflow in cachemgr.cgi > (http://www.squid-cache.org/Advisories/SQUID-2016_5.txt). > This update also fixes several security issues with ESI support, > however we don't build packages with this. > (http://www.squid-cache.org/Advisories/SQUID-2016_6.txt). (sthen@) vimb - patches/patch-config_mk - patches/patch-src_Makefile - patches/patch-src_config_def_h - patches/patch-tests_Makefile ~ Makefile ~ distinfo > Update www/vimb to 2.11 > New MAINTAINER set to Frederic Cambus > All existing patches are dropped as not needed > OK abieber@ (awolk@) webkit ~ Makefile > Unbreak non FLAVORed build. > reported by nigel@ (ajacoutot@) ~ Makefile > needs gettext-tools (naddy@) webkitgtk4 ~ Makefile ~ distinfo ~ patches/patch-CMakeLists_txt ~ patches/patch-Source_JavaScriptCore_CMakeLists_txt ~ patches/patch-Source_JavaScriptCore_dfg_DFGNode_h ~ patches/patch-Source_JavaScriptCore_heap_CopiedBlock_h ~ patches/patch-Source_JavaScriptCore_jit_ExecutableAllocator_h ~ patches/patch-Source_WTF_wtf_Platform_h ~ patches/patch-Source_cmake_OptionsCommon_cmake ~ pkg/PLIST + pkg/patch-Source_JavaScriptCore_assembler_MacroAssemblerX86Common_h + pkg/patch-Source_JavaScriptCore_heap_MachineStackMarker_cpp + pkg/patch-Source_JavaScriptCore_heap_MachineStackMarker_h + pkg/patch-Source_cmake_WebKitCommon_cmake > Update to webkitgtk4-2.12.1. > With help from robert@ (ajacoutot@) ~ Makefile > Add BDEP on devel/gettext-tools to webkitgtk4; needs xgettext (sthen@) == x11 =============================================================== 25/25 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/x11 gnome ~ gvfs/Makefile TAGGED OPENBSD_5_9 > Sync with recent net/samba update. (jca@) ~ at-spi2-core/Makefile ~ at-spi2-core/distinfo ~ at-spi2-core/pkg/PLIST TAGGED OPENBSD_5_9 > Update to at-spi2-core-2.20.1. (ajacoutot@) ~ at-spi2-atk/Makefile ~ at-spi2-atk/distinfo TAGGED OPENBSD_5_9 > Update to at-spi2-atk-2.20.1. (ajacoutot@) ~ themes-standard/Makefile ~ themes-standard/distinfo ~ themes-standard/pkg/PLIST TAGGED OPENBSD_5_9 > Update to gnome-themes-standard-3.20. (ajacoutot@) ~ yelp-xsl/Makefile ~ yelp-xsl/distinfo TAGGED OPENBSD_5_9 > Update to yelp-xsl-3.20.1. (ajacoutot@) ~ py-atspi/Makefile ~ py-atspi/distinfo TAGGED OPENBSD_5_9 > Update to py3-atspi-2.20.1. (ajacoutot@) ~ anjuta/Makefile ~ anjuta/patches/patch-configure ~ code-assistance/Makefile ~ libgda/Makefile + code-assistance/patches/patch-configure TAGGED OPENBSD_5_9 > unbreak after vala update to 0.32.0 (jasper@) ~ gvfs/Makefile TAGGED OPENBSD_5_9 > Sync WANTLIB after net/samba update (jca@) ~ gvfs/Makefile TAGGED OPENBSD_5_9 > net/samba doesn't bring libcom_err anymore; spotted by ajacoutot@ (jca@) gtk+3 ~ Makefile ~ distinfo ~ patches/patch-gtk_gtksettings_c ~ pkg/PLIST-main > Update to gtk+3-3.20.3. > This starts the work on updating GNOME to version 3.20.1. > Please note that gtk+3 theme format has changed with this release and only > Adwaita will work out-of-the box. This will be worked on within the next > couple of weeks. (ajacoutot@) gtk3mm ~ Makefile ~ distinfo ~ pkg/PLIST > Update to gtk3mm-3.20.1. (ajacoutot@) kde ~ base3/Makefile TAGGED OPENBSD_5_9 > Sync with recent net/samba update. (jca@) ~ base3/Makefile TAGGED OPENBSD_5_9 > Sync WANTLIB after net/samba update (jca@) + bindings3/patches/patch-kalyptus_kdocAstUtil_pm TAGGED OPENBSD_5_9 > add perl 5.22 fix, found lost in a tree (sthen@) ~ base3/Makefile TAGGED OPENBSD_5_9 > net/samba doesn't bring libcom_err anymore; spotted by ajacoutot@ (jca@) mlterm ~ Makefile ~ distinfo ~ patches/patch-configure_in ~ patches/patch-mkf_lib_Makefile_in ~ patches/patch-mlterm_Makefile_in ~ patches/patch-xwindow_x_screen_c ~ pkg/PLIST > Update to mlterm-3.7.0 (dcoppa@) type1inst ~ Makefile > use INSTALL_SCRIPT (naddy@) ===============================================================================
_______________________________________________ owc mailing list [email protected] http://www.squish.net/mailman/listinfo/owc
