UPDATE: Samba - roll in some security fixes

2014-01-27 Thread Brad Smith
Here is a diff to roll in some security fixes for Samba. CVE-2013-4408 / CVE-2012-6150 -- DCE-RPC fragment length field is incorrectly checked, pam_winbind login without require_membership_of restrictions. CVE-2013-4475 / CVE-2013-4476 -- ACLs are not checked on opening an alternate data stream o

Re: [Makefile patch] add libass to graphics/ffmpeg

2014-01-27 Thread Brad Smith
On 22/01/14 10:22 PM, Josh Grosse wrote: The following minor proposed patch adds --enable-libass to ffmpeg. Tested on i386 and it appears to integrate well with the Xenocara fontconfig. I sent this to $MAINTAINER brad@ at his comstyle address on Friday and as I've had no reply, I assume he's be

coreutils: fix gstdbuf and vax

2014-01-27 Thread Jérémie Courrèges-Anglas
stdbuf works by preloading libstdbuf.so, but the latter gets renamed as glibstdbuf.so. Also, shared object preloading won't work on static-only archs, ie. vax. The configure script checks for __ELF__ but this doesn't help since the vax switched to ELF. So here are two crude fixes. ok? Index: M

update: fossil-1.28

2014-01-27 Thread James Turner
The following diff updates fossil to 1.28. This version ships with a runtime check for sqlite 3.8.2 however with this release 3.8.0 should be enough so I've relaxed the check for this release. 1.29 will require atleast 3.8.2 so our in-tree sqlite will need updating soon. Tested on amd64. Addition

Re: i386 build failures

2014-01-27 Thread Matthias Kilian
On Mon, Jan 27, 2014 at 12:51:07PM +, Stuart Henderson wrote: > PIE?: > devel/hs-type-level, devel/hs-vector Not sure about this. but why does it work on amd64? The patches in lang/ghc for PIE don't look arch-dependent. Ciao, Kili

[PATCH] print/lyx: Add a .desktop file

2014-01-27 Thread Donovan Watteau
Hi, The following diff adds a .desktop file for LyX (taken from Debian). There's also a small line length fix for DESCR. Index: Makefile === RCS file: /cvs/ports/print/lyx/Makefile,v retrieving revision 1.67 diff -u -p -r1.67 Makefil

Re: mozilla-dicts vs hunspell

2014-01-27 Thread Martynas Venckus
On 1/27/14, Jiri B wrote: > Hi, > > some mozilla-dicts are quite old, they are kept on > Stuart's mirror and other OS/distros use hunspell/myspell > "site" for getting dicts and naming the packages. > > I checked pkgsrc and they have dicts as hunspell-$lang, > getting them from OO.org site (thus n

Re: i386 build failures

2014-01-27 Thread David Coppa
> Da: "Stuart Henderson" > Data: 27/gen/2014 13.51 > Oggetto: i386 build failures > A: "ports" > www/chromium: intermittent (dependency issue?) > In file included from ../../chrome/browser/ui/webui/policy_ui.cc:20: > ../../chrome/browser/policy/cloud/cloud_policy_client.h:18:10: fatal error: >

Re: i386 build failures

2014-01-27 Thread David Coppa
On Mon, Jan 27, 2014 at 1:51 PM, Stuart Henderson wrote: > www/chromium: intermittent (dependency issue?) > In file included from ../../chrome/browser/ui/webui/policy_ui.cc:20: > ../../chrome/browser/policy/cloud/cloud_policy_client.h:18:10: fatal error: > 'chrome/browser/policy/proto/cloud/devi

[UPDATE] wget-1.15

2014-01-27 Thread David Coppa
Hi! This diff updates GNU Wget to version 1.15. Changes: ** Add support for --method. ** Add support for file names longer than MAX_FILE. ** Support FTP listing for the FTP Server on Windows Server 2008 R2. ** Fix a regression when -c and --content-disposition are used together. ** Support

Re: i386 build failures

2014-01-27 Thread Antoine Jacoutot
> modes: > emulators/fedora/base, emulators/fedora/cups I'll take care of these. -- Antoine

i386 build failures

2014-01-27 Thread Stuart Henderson
Here's a quick list of failures in the last i386 bulk build. network header changes: shells/nsh, devel/py-openbsd modes: emulators/fedora/base, emulators/fedora/cups PIE: multimedia/avidemux, games/openarena, games/megaglest/base PIE?: devel/hs-type-level, devel/hs-vector www/chromium: intermi

Re: libgcrypt broken on arm

2014-01-27 Thread Guenther Niess
On 27.01.2014 02:00, Brad Smith wrote: > On 26/01/14 6:52 PM, Pascal Stumpf wrote: >> On Sun, 26 Jan 2014 21:38:04 +0100, Guenther Niess wrote: >>> I'm trying to build libgcrypt on a armv7 pandaboard, but it seems to be >>> broken. >>> >> >> Indeed, thanks for the report. Any oks for this patch (t

Re: Problems with kde4 in the 1/21 and 1/24 package snapshots

2014-01-27 Thread Remco
Remco wrote: > Vadim Zhukov wrote: > >> 26.01.2014 12:34 "STeve Andre'" >> ???: >>> >>> On 01/26/14 03:21, Vadim Zhukov wrote: 26.01.2014 11:55 "STeve Andre'" >> ???: > > I'm still learning about KDE4 so perhaps this is my fault, but >

Re: [squid] ...rejecting '[127.0.0.1]:5330' as a name server...

2014-01-27 Thread Stuart Henderson
On 2014/01/27 03:51, Jiri B wrote: > On Mon, Jan 27, 2014 at 08:41:29AM +1300, Kenneth Westerback wrote: > > On 27 January 2014 08:32, Jiri B wrote: > > > On Mon, Jan 27, 2014 at 08:09:20AM +1300, Kenneth Westerback wrote: > > >> Dhclient will not generate such syntax in resolved.conf so I assume

security/sshguard improvements

2014-01-27 Thread Kirill Bychkov
Hi. This patch drops USE_GROFF and switches from MESSAGE to README. Regen distinfo while here. OK to commit? Index: Makefile === RCS file: /cvs/ports/security/sshguard/Makefile,v retrieving revision 1.6 diff -u -p -u -p -r1.6 Makefile

sysutils/acupsd modes

2014-01-27 Thread Kirill Bychkov
Hi. This patch corrects file's modes and switches from hardcoded /var to ${VARBASE}. OK? Index: Makefile === RCS file: /cvs/ports/sysutils/apcupsd/Makefile,v retrieving revision 1.21 diff -u -p -r1.21 Makefile --- Makefile24 Jan 20

Re: NEW: sysutils/kyua

2014-01-27 Thread Alexandr Shadchin
On Sat, Jan 25, 2014 at 5:12 AM, Jérémie Courrèges-Anglas wrote: > > Hi, > > so, after a bit more polishing: > - disable the use of doxygen; only lutok installs the doxygen output, > which had already been properly generated upstream. > - more precise license markers. > - ${CONFIGURE_SHARED} fo

Update: phantomjs 1.9.6

2014-01-27 Thread Francisco de Borja Lopez Rio
Attached is a patch to update the phantomjs port to the latest stable release. Built fine the package here both in amd64 and i386 (but I didn't try dpb though). Regards. -- "Do nothing which is of no use." - Miyamoto Musashi -

Re: libgcrypt broken on arm

2014-01-27 Thread David Coppa
On Mon, Jan 27, 2014 at 11:44 AM, Pascal Stumpf wrote: > On Mon, 27 Jan 2014 11:40:58 +0100, Guenther Niess wrote: >> On 27.01.2014 02:00, Brad Smith wrote: >> > On 26/01/14 6:52 PM, Pascal Stumpf wrote: >> >> On Sun, 26 Jan 2014 21:38:04 +0100, Guenther Niess wrote: >> >>> I'm trying to build lib

Re: libgcrypt broken on arm

2014-01-27 Thread Pascal Stumpf
On Mon, 27 Jan 2014 11:40:58 +0100, Guenther Niess wrote: > On 27.01.2014 02:00, Brad Smith wrote: > > On 26/01/14 6:52 PM, Pascal Stumpf wrote: > >> On Sun, 26 Jan 2014 21:38:04 +0100, Guenther Niess wrote: > >>> I'm trying to build libgcrypt on a armv7 pandaboard, but it seems to be > >>> broken.

Re: kde4 oddity, recorded in .xsession-errors

2014-01-27 Thread Vadim Zhukov
2014-01-27 STeve Andre' : >My .xsession file is growing at roughly two lines a second with this: > > konsole(15589) OpenBSDProcessInfo::readProcArgs: sysctl() call failed with > code 35 My bad, looks like I've lost a patch for this problem somewhere between 4.10 and 4.11. Thanks for the report

kde4 oddity, recorded in .xsession-errors

2014-01-27 Thread STeve Andre'
My .xsession file is growing at roughly two lines a second with this: konsole(15589) OpenBSDProcessInfo::readProcArgs: sysctl() call failed with code 35 --STeve Andre'

mozilla-dicts vs hunspell

2014-01-27 Thread Jiri B
Hi, some mozilla-dicts are quite old, they are kept on Stuart's mirror and other OS/distros use hunspell/myspell "site" for getting dicts and naming the packages. I checked pkgsrc and they have dicts as hunspell-$lang, getting them from OO.org site (thus no need for mirror), some of dicts are new

Re: Problems with kde4 in the 1/21 and 1/24 package snapshots

2014-01-27 Thread STeve Andre'
Thanks to Remco for this. As I write this I am in kde4, with stuff working as before. Time to test more... --STeve Andre' On 01/26/14 09:46, Vadim Zhukov wrote: 26.01.2014 17:43 пользователь "Remco" написал: Vadim Zhukov wrote: 26.01.2014 12:34 "STeve Andre'" ???: On 01

Re: [squid] ...rejecting '[127.0.0.1]:5330' as a name server...

2014-01-27 Thread Jiri B
On Mon, Jan 27, 2014 at 08:41:29AM +1300, Kenneth Westerback wrote: > On 27 January 2014 08:32, Jiri B wrote: > > On Mon, Jan 27, 2014 at 08:09:20AM +1300, Kenneth Westerback wrote: > >> Dhclient will not generate such syntax in resolved.conf so I assume you are > >> doing so via resolv.conf.tail