11:59 mva 

- Convert USE_ICONV=yes to USES=iconv
- Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig while here

Reviewed by:	zeising

 

14:20 bapt 

Finish converting the whole ports tree to USES=pkgconfig

 

20:00 timur 

Mark port deprecated

 

09:17 timur 

Adjust samba sites so that they can be used by other ports that fetch from the
same origin.

Feature safe:	yes

 

05:40 bapt 

new devel/pkgconf added to replace devel/pkg-config. new version of pkg-config
are no more self hosting so we are stuck with 0.25 version while pkgconf provide
the same set of features as 0.27 and a compatible frontend. A symlink to
pkg-config has been added for convenience and compatibility

This also introduces a new macro to use pkgconf in your ports:
USE_PKGCONFIG

it can take the following arguments:
 - yes (meaning build only dep)
 - build (meaning build only dep)
 - run (meaning run only dep)
 - both (meaning run and build dep)

From now USE_GNOME= pkgconfig is deprecated in favour of USE_PKGCONFIG
The old gnome macro has been modified to use pkgconf but still the sameway: run
and build dep to avoid large breakage.

While here fix some ports relying on pkg-config but not specifying it, fix some
ports broken because testing wrong .pc files, and fix ports using pkg-config
--version to determine pkg-config version instead of
pkg-config --modversion pkg-config like recommanded by pkg-config

With Hat:	portmgr
Exp-runs by:	bapt (pointhat-west), beat (pointyhat)

18:48 delphij 

Security update to address Samba incorrect permission checks vulnerability
(CVE-2012-2111):

 - Update net/samba34 to 3.4.17
 - Update net/samba35 to 3.5.15
 - Update net/samba36 to 3.6.5

Security:       0fa15e08-92ec-11e1-a94a-00215c6a37bb
Approved by:    maintainer

09:16 dougb 

The samba rc.d script uses some clever tricks to start (up to) 3 different
services using the same script. As a result it resets rcvar several times
in order to process the options for each service.

The changes I made on 2012/01/14 to facilitate the removal of set_rc_var()
from HEAD were effective in the case where the WINBIND option was off (the
case that I tested) because that causes the related portions of the rc.d
script to be removed completely on install. However, if installed from a
package, or installed using the the default OPTIONS, WINBIND is on, which
caused the last known rcvar to be winbind_enable.

Since the common case seems to be for users to use samba_enable (which
only enables smb_and nmb_ by default) the fact that rcvar=winbind_enable,
but that knob is off, caused the startup script to trip on a totally
unrelated portion of rc.subr.

So the fix is to move processing of the winbind_ stuff first, which leaves
the last known rcvar as smb_enable. Since running nmb without smb is a
very unlikely scenario, this should be safe for the common case, as well
as safe if the user enables winbind_.

Apologies all around for not catching this sooner, and thanks to the users
who reported the problem and stuck with me while I debugged it.

Bump PORTREVISION since this fix is needed for the common case, as
configured for the package.

22:33 delphij 

Security update to address root credential remote code execution issue
(CVE-2012-1182):

 - Update samba36 to 3.6.4;
 - Update samba35 to 3.5.14;
 - Update samba34 to 3.4.16;

All samba users are advised to update.

Security:       baf37cd2-8351-11e1-894e-00215c6a37bb
With hat:       secteam@

22:26 amdmi3 

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

01:51 timur 

Bump port version to 3.4.14, closing security issues CVE-2011-0719,
CVE-2011-2522 and CVE-2011-2694

Security:       CVE-2011-0719
Security:       CVE-2011-2522
Security:       CVE-2011-2694

01:32 delphij 

Chase after net/openldap24-server update.

Reminded by:    miwi

11:19 uqs 

Collect the return values of both smbd and nmbd and return with exit status of
either of them if one is failing.

PR:             ports/151173
Submitted by:   uqs
Approved by:    maintainer timeout (3 months)
Feature safe:   yes

07:34 ade 

Sync to new bsd.autotools.mk

11:52 ade 

Punt autoconf267->autoconf268

10:39 mm 

- Update to 3.4.9 (fixes CVE-2010-3069, the only change to 3.4.8)

PR:             ports/150583
Approved by:    maintainer (timeout)

18:35 ade 

Autotools update.   Read ports/UPDATING 20100915 for details.

Approved by:    portmgr (for Mk/bsd.port.mk part)
Tested by:      Multiple -exp runs

04:24 timur 

Bump samba34 port to the 3.4.8 version.

Major enhancements in Samba 3.4.8 include:

   o Fix Winbind reconnection to it's own domain (bug #7295).
   o Fix an uninitialized variable read in smbd (bug #7254).
   o Fix smbd crash with CUPS printers and no [printers] share defined
     (bug #7297).
   o Fix NULL pointer dereference in smbd (bug #7229).

03:02 timur 

Added creation of the rundir for pid files - thanks to spil.oss@gmail.com
for pointing it out.

13:27 timur 

Fix missing dependency from pkg-config and compilation problems with
installed samba3-libsmbclient.

01:08 timur 

New 3.4.x branch of the Samba server. New features, new bugs :)