21:22 kwm 

Update freetype to 2.5.2.

Remove patch to add -I/usr/local/include in freetype-config --cflags. If
ports need extra headers they should look for them, and not get them via
a side-effect.

Freetype had a header resuffle in 2.5.1, patch ports to use the new header
style.

Thanks go to bdrewery for the two exp-runs and rakuco for helping me with
some troublesome cmake ports.

PR:		ports/184587

 

19:53 bapt 

Add NO_STAGE all over the place in preparation for the staging support (cat:
lang)

 

21:30 rm 

- update backports patch to 20130717
- extend deprecation period for 6 months
- bump PORTREVISION

Changes:
- CVE-2013-4113, exif_read_data fix, compilation warning, libxml2 >2.9 support
- timezonedb 2013.4 (2013d)

PR:		181449
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:	Alex Keda <admin@lissyara.su>

 

22:35 ak 

- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)

 

16:26 sunpoet 

- Update to 7.31.0
- Bump PORTREVISION for ftp/curl shlib change
- Add TEST_DEPENDS
- Convert to new options framework
- Adjust options:
  - Add COOKIES
  - Add CYASSL, NSS, POLARSSL, THREADED_RESOLVER, TLS_SRP [1]
  - Add GSSAPI and SPNEGO [2]
  - Remove KERBEROS4
  - Rename LIBIDN to IDN
  - Remove TRACKMEMORY [1]
- Sort option handler
- Add SLAVEDIRS: ftp/curl-hiphop
- Cosmetic change
- Cleanup Makefile header
- While I'm here, fix typo (PORTREVSION) in x11-wm/ede/Makefile

Changes:	http://curl.haxx.se/changes.html
PR:		ports/172325 (-exp run), ports/177369 (based on) [1]
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp> [1], hrs (via email) [2]
Exp run by:	miwi

 

13:45 bapt 

Convert to new options framework

 

08:17 miwi 

- Update backports patch to 20121114
- Bump PORTREVISION

security fixes:
- CVE-2013-1635
- CVE-2013-1643

PR:		177203
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:	maintainer

 

22:48 flo 

Fix installation of ports that rely on cp -n for installing files. r245960
changed cp to exit with a non-zero exit code if the file exists and is not
overwritten thus causing ports to fail installing when e.g. trying to cp
.default -> .conf files that already exist.

We just ignore the error and continue, as we used to.

Reported by:	jaset
Approved by:	portmgr (bapt)

 

06:01 miwi 

- Trim header

 

06:00 miwi 

- Extend support for 6 months.

PR:		176149
Submitted by:	Alex Keda <admin@lissyara.su>

 

19:11 mm 

Update PCRE to 8.32
Introduces the UTF-32 library pcre32
Bump PORTREVISION in dependent ports

 

15:42 flo 

- Update backports patch to 20121114
- Bump PORTREVISION

Changes:
- CVE-2006-7243
PHP before 5.3.4 accepts the \0 character in a pathname, which might allow
context-dependent attackers to bypass intended access restrictions by placing a
safe file extension after this character, as demonstrated by .php\0.jpg at the
end of the argument to the file_exists function

Secuity 3761df02-0f9c-11e0-becc-0022156e8794 fixed by check in fopen functions
for strlen(filename) != filename_len

- CVE-2012-4388
The sapi_header_op function in main/SAPI.c does not properly determine a pointer
during checks for %0D sequences (aka carriage return characters), which allows
remote attackers to bypass an HTTP response-splitting protection mechanism via a
crafted URL, this vulnerability exists because of an incorrect fix for
CVE-2011-1398.

- Timezone database updated to version 2012.9 (2012i)

PR:		ports/173685
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:	maintainer
Feature safe:	yes

 

03:02 bdrewery 

- Update php52 backports patch to 20120911
- Add and update relevant vuxml entries

Changes:
  - CVE-2011-1398 - The sapi_header_op function in main/SAPI.c in PHP
    before 5.3.11 does not properly handle %0D sequences
  - CVE-2012-0789 - Memory leak in the timezone functionality in PHP
    before 5.3.9 allows remote attackers to cause a denial of service
    (memory consumption) by triggering many strtotime function calls,
    which are not properly handled by the php_date_parse_tzfile cache.
  - CVE-2012-3365 - The SQLite functionality in PHP before 5.3.15 allows
    remote attackers to bypass the open_basedir protection mechanism via
     unspecified vectors
  - Timezone database updated to version 2012.5 (2012e) (from 2011.13 (2011m))
  - Minor improvements (CVE-2012-2688, compilation issues with old GCC)

PR:		ports/171583
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:	Alex Keda <admin@lissyara.su> (maintainer)

 

14:29 ohauer 

- remove www/apache20 and devel/apr0
- s/USE_APACHE= 20+/USE_APACHE= 22+/
- unify s/YES/yes/
- cleanup APACHE_VERSION <= 22 usage
- add entry to MOVED

with hat apache@

04:14 rm 

- update backports patch to 20120721
- bump PORTREVISION

PR:		170063
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert at gmail dot com>
Approved by:	Alex Keda <admin at lissyara dot su> (maintainer)

23:00 rm 

- update backports patch to 20120526
- bump PORTREVISION

PR:             169272
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert at gmail dot com>
Approved by:    Alex Keda <admin at lissyara dot su> (maintainer)

07:36 ale 

Fix conflicts and remove unsupported/unused extensions.

15:18 rm 

- apply BACKPORTS patch unconditionally and remove BACKPORTS option
- update backports patch to latest version (20120504)
- align pathnames in slave ports
- bump PORTREVISION

The only drawback of this change is that now for building of every slave
port (php extension) we extracting full php52 source tree.

Apologies that it took that long.

PR:             164849
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert at gmail dot com>
Approved by:    Alex Keda <admin at lissyara dot su>
Security:       60de13d5-95f0-11e1-806a-001143cd36d8

09:02 rm 

- extend DEPRECATION_DATE till year 2013.

This was discussed on freebsd-ports@ (linimon).

12:44 mm 

Bump pcre library dependency due to 8.30 update
Add (vendor) patch for deprecated pcre_info()

17:27 lwhsu 

- CVE-2011-4566 fix in 20120117 security patchset

PR:             ports/164286
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)
Security:       d3921810-3c80-11e1-97e8-00215c6a37bb

18:26 rm 

Update to lastest security patchset 20120103: added max_input_vars directive
(default "1000") to prevent attacks based on hash collisions (from PHP 5.4 RC4)

PR:             163782
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert at gmail dot com>
Approved by:    maintainer

16:47 ohauer 

- change required APACHE version from 13+ to 20+
  (prepare to remove www/apache13)

- no PORTREVISION bump since apache22 is the default

with hat apache@

15:58 miwi 

- Update to lastest security patchset: 20111030
- Move removal date to 2012-03-01
- Bump PORTREVISION

PR:             162165
Submitted by:   Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by:    maintainer

17:53 delphij 

 - security fixes for CVE-2011-2202, CVE-2011-1938, CVE-2011-1148,
   CVE-2011-0708, CVE-2011-1092, CVE-2011-0421 vulnerabilities
 - option BACKPORTS in port config for enable port patches (enabled
   by default)
 - bump PORTREVISION

Submitted by:   Svyatoslav Lempert <svyatoslav.lempert gmail.com>
PR:             ports/160805
Approved by:    maintainer

09:24 dougb 

Mark FORBIDDEN the remaining ports that are vulnerable for more than
2 weeks according to portaudit (ranging from 23 days to 7 years).
The maintainers were notified by mail that this action would be taken
on 2011-09-03. (Ports for which maintainers responded have been/will be
dealt with separately.)

Also mark DEPRECATED ports that rely on the FORBIDDEN ports, and a few
ports that rely on those DEPRECATED ports.

22:26 amdmi3 

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

17:27 ohauer 

 - bump PORTREVISION from ports if USE_APACHE=13+ or 20+ is defined

19:51 jlaffaye 

Add an option to link against libthr

PR:             ports/158423
Submitted by:   Frank Wall <fw@moov.de>
Approved by:    Alex Keda <admin@lissyara.su> (maintainer), bapt (mentor,
implicit)

18:56 mm 

Update to 5.2.17

Approved by:    Alex Keda <admin@lissyara.su> (maintainer, private e-mail)

12:56 mm 

- Update suhosin patch
- Portrevision bump not required

PR:             ports/153579
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)

20:05 ade 

Sync to final (for now) bsd.autotools.mk

11:30 mm 

- Update to 5.2.16

PR:             ports/153246
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)

22:24 mm 

- Add patch that fixes PHP bug #53516 (open_basedir not working)

PR:             ports/152981
Submitted by:   Alex Keda <admin@lissyara.su>

12:38 mm 

- Update to 5.2.15

PR:             ports/152981
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)

07:34 ade 

Sync to new bsd.autotools.mk

11:52 ade 

Punt autoconf267->autoconf268

18:35 ade 

Autotools update.   Read ports/UPDATING 20100915 for details.

Approved by:    portmgr (for Mk/bsd.port.mk part)
Tested by:      Multiple -exp runs

08:56 mm 

Update php52 to 5.2.14

PR:             ports/148951
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)

15:39 mm 

Update libevent to 1.4.14b

PR:             ports/147723
Approved by:    maintainer (timeout)

10:12 mm 

- Add optional support for PHP-FPM (FastCGI process manager)
- Add sample configuration file and rc script for PHP-FPM

PR:             ports/147688
Approved by:    Alex Keda <admin@lissyara.su> (maintainer)

19:52 miwi 

- Disable ZTS for Apache MPM-ITK for Zend Optimizer

PR:             147075
Submitted by:   Kuzma Bukin <kuzma.bukin@gmail.com>
Approved by:    maintainer

02:01 ade 

Bounce PORTREVISION for gettext-related ports.  Have fun, ya'll.

05:46 dinoex 

- update to 5.2.13
Sumbitted by:   Alex Keda (maintainer)

05:02 dinoex 

- fix name of apache module
Submitted by:   Alex Keda

15:03 dinoex 

PHP, which stands for "PHP: Hypertext Preprocessor" is a widely-used Open
Source general-purpose scripting language that is especially suited for
Web development and can be embedded into HTML.  Its syntax draws upon C,
Java, and Perl, and is easy to learn.  The main goal of the language is to
allow web developers to write dynamically generated webpages quickly, but
you can do much more with PHP.

WWW: http://www.php.net/
PR:             145772
Submitted by:   Alex Keda