head 1.4; access; symbols pkgsrc-2013Q2:1.4.0.26 pkgsrc-2013Q2-base:1.4 pkgsrc-2012Q4:1.4.0.24 pkgsrc-2012Q4-base:1.4 pkgsrc-2011Q4:1.4.0.22 pkgsrc-2011Q4-base:1.4 pkgsrc-2011Q2:1.4.0.20 pkgsrc-2011Q2-base:1.4 pkgsrc-2009Q4:1.4.0.18 pkgsrc-2009Q4-base:1.4 pkgsrc-2008Q4:1.4.0.16 pkgsrc-2008Q4-base:1.4 pkgsrc-2008Q3:1.4.0.14 pkgsrc-2008Q3-base:1.4 cube-native-xorg:1.4.0.12 cube-native-xorg-base:1.4 pkgsrc-2008Q2:1.4.0.10 pkgsrc-2008Q2-base:1.4 pkgsrc-2008Q1:1.4.0.8 pkgsrc-2008Q1-base:1.4 pkgsrc-2007Q4:1.4.0.6 pkgsrc-2007Q4-base:1.4 pkgsrc-2007Q3:1.4.0.4 pkgsrc-2007Q3-base:1.4 pkgsrc-2007Q2:1.4.0.2 pkgsrc-2007Q2-base:1.4 pkgsrc-2007Q1:1.3.0.6 pkgsrc-2007Q1-base:1.3 pkgsrc-2006Q4:1.3.0.4 pkgsrc-2006Q4-base:1.3 pkgsrc-2006Q3:1.3.0.2 pkgsrc-2006Q3-base:1.3 pkgsrc-2006Q2:1.2.0.6 pkgsrc-2006Q2-base:1.2 pkgsrc-2006Q1:1.2.0.4 pkgsrc-2006Q1-base:1.2 pkgsrc-2005Q4:1.2.0.2; locks; strict; comment @# @; 1.4 date 2007.05.05.21.35.06; author adrianp; state dead; branches; next 1.3; 1.3 date 2006.08.10.23.01.39; author adrianp; state Exp; branches; next 1.2; 1.2 date 2006.03.06.15.57.58; author cube; state Exp; branches 1.2.2.1 1.2.6.1; next 1.1; 1.1 date 2006.03.03.07.11.34; author cube; state Exp; branches; next ; 1.2.2.1 date 2006.03.06.15.57.58; author salo; state dead; branches; next 1.2.2.2; 1.2.2.2 date 2006.03.16.12.37.12; author salo; state Exp; branches; next ; 1.2.6.1 date 2006.08.16.07.17.41; author salo; state Exp; branches; next ; desc @@ 1.4 log @Remove PEAR from the default PHP install @ text @$NetBSD: patch-ao,v 1.3 2006/08/10 23:01:39 adrianp Exp $ --- pear/Makefile.frag.orig 2006-05-07 17:33:41.000000000 +0100 +++ pear/Makefile.frag @@@@ -6,7 +6,7 @@@@ peardir=$(PEAR_INSTALLDIR) PEAR_INSTALL_FLAGS = -n -dshort_open_tag=0 -dopen_basedir= -dsafe_mode=0 -dmemory_limit=-1 install-pear-packages: $(top_builddir)/sapi/cli/php - @@$(top_builddir)/sapi/cli/php $(PEAR_INSTALL_FLAGS) $(srcdir)/install-pear.php -d "$(peardir)" -b "$(bindir)" $(srcdir)/packages/*.tar + @@$(top_builddir)/sapi/cli/php $(PEAR_INSTALL_FLAGS) $(srcdir)/install-pear.php -d "$(peardir)" -b "$(bindir)" --force $(srcdir)/packages/*.tar install-pear: @@echo "Installing PEAR environment: $(INSTALL_ROOT)$(peardir)/" @ 1.3 log @Update to 4.4.3 All PHP 4.x users are encouraged to upgrade to this release as soon as possible. The security issues resolved include the following: * Disallow certain characters in session names. * Fixed a buffer overflow inside the wordwrap() function. * Prevent jumps to parent directory via the 2nd parameter of the tempnam() function. * Improved safe_mode check for the error_log() function. * Fixed cross-site scripting inside the phpinfo() function. The release also includes about 20 bug fixes and an upgraded PCRE library (version 6.6). For a full list of changes in PHP 4.4.3, see the ChangeLog: http://www.php.net/ChangeLog-4.php#4.4.3 This also contains a fix for CVE-2006-4020 (SA21403) @ text @d1 1 a1 1 $NetBSD$ @ 1.2 log @Increase memory limit when installing PEAR packages. This allows the installation to go through on NetBSD/sparc64 (well, at least mine). Failure reported by Joel Carnat. @ text @d1 1 a1 1 $NetBSD: patch-ao,v 1.1 2006/03/03 07:11:34 cube Exp $ d3 1 a3 1 --- pear/Makefile.frag.orig 2005-11-05 19:19:23.000000000 +0100 d5 2 a6 6 @@@@ -3,10 +3,10 @@@@ peardir=$(PEAR_INSTALLDIR) # Skip all php.ini files altogether -PEAR_INSTALL_FLAGS = -n -dshort_open_tag=0 -dsafe_mode=0 +PEAR_INSTALL_FLAGS = -n -dshort_open_tag=0 -dsafe_mode=0 -dmemory_limit=16M @ 1.2.2.1 log @file patch-ao was added on branch pkgsrc-2005Q4 on 2006-03-06 15:57:58 +0000 @ text @d1 17 @ 1.2.2.2 log @Add missing patches for #1223 @ text @a0 17 $NetBSD: patch-ao,v 1.2.2.1 2006/03/16 12:37:12 salo Exp $ --- pear/Makefile.frag.orig 2005-11-05 19:19:23.000000000 +0100 +++ pear/Makefile.frag @@@@ -3,10 +3,10 @@@@ peardir=$(PEAR_INSTALLDIR) # Skip all php.ini files altogether -PEAR_INSTALL_FLAGS = -n -dshort_open_tag=0 -dsafe_mode=0 +PEAR_INSTALL_FLAGS = -n -dshort_open_tag=0 -dsafe_mode=0 -dmemory_limit=16M install-pear-packages: $(top_builddir)/sapi/cli/php - @@$(top_builddir)/sapi/cli/php $(PEAR_INSTALL_FLAGS) $(srcdir)/install-pear.php -d "$(peardir)" -b "$(bindir)" $(srcdir)/packages/*.tar + @@$(top_builddir)/sapi/cli/php $(PEAR_INSTALL_FLAGS) $(srcdir)/install-pear.php -d "$(peardir)" -b "$(bindir)" --force $(srcdir)/packages/*.tar install-pear: @@echo "Installing PEAR environment: $(INSTALL_ROOT)$(peardir)/" @ 1.2.6.1 log @Pullup ticket 1790 - requested by adrianp security update for php4 Revisions pulled up: - pkgsrc/www/php4/Makefile 1.70 - pkgsrc/www/php4/Makefile.common 1.53 - pkgsrc/www/php4/distinfo 1.56 - pkgsrc/www/php4/files/pear.sh 1.3 - pkgsrc/www/php4/patches/patch-ao 1.3 - pkgsrc/www/php4/patches/patch-aq removed - pkgsrc/www/php4/patches/patch-ar removed - pkgsrc/www/php4/patches/patch-as removed - pkgsrc/www/php4/patches/patch-au removed - pkgsrc/www/php4/patches/patch-av removed - pkgsrc/www/php4/patches/patch-aw 1.1 Module Name: pkgsrc Committed By: adrianp Date: Thu Aug 10 23:01:40 UTC 2006 Modified Files: pkgsrc/www/php4: Makefile Makefile.common distinfo pkgsrc/www/php4/files: pear.sh pkgsrc/www/php4/patches: patch-ao Added Files: pkgsrc/www/php4/patches: patch-aw Removed Files: pkgsrc/www/php4/patches: patch-aq patch-ar patch-as patch-au patch-av Log Message: Update to 4.4.3 All PHP 4.x users are encouraged to upgrade to this release as soon as possible. The security issues resolved include the following: * Disallow certain characters in session names. * Fixed a buffer overflow inside the wordwrap() function. * Prevent jumps to parent directory via the 2nd parameter of the tempnam() function. * Improved safe_mode check for the error_log() function. * Fixed cross-site scripting inside the phpinfo() function. The release also includes about 20 bug fixes and an upgraded PCRE library (version 6.6). For a full list of changes in PHP 4.4.3, see the ChangeLog: http://www.php.net/ChangeLog-4.php#4.4.3 This also contains a fix for CVE-2006-4020 (SA21403) @ text @d1 1 a1 1 $NetBSD: patch-ao,v 1.3 2006/08/10 23:01:39 adrianp Exp $ d3 1 a3 1 --- pear/Makefile.frag.orig 2006-05-07 17:33:41.000000000 +0100 d5 6 a10 2 @@@@ -6,7 +6,7 @@@@ peardir=$(PEAR_INSTALLDIR) PEAR_INSTALL_FLAGS = -n -dshort_open_tag=0 -dopen_basedir= -dsafe_mode=0 -dmemory_limit=-1 @ 1.1 log @Update to version 4.4.2. Ok'd by jdolecek@@. This is a bug fix release, which addresses some security problems too. The major points that this release corrects are: * Prevent header injection by limiting each header to a single line. * Possible XSS inside error reporting functionality. * Missing safe_mode/open_basedir checks into cURL extension. * Apache 2 regression with sub-request handling on non-Linux systems. * key() and current() regression related to references. This release also fixes about 30 other defects. @ text @d1 1 a1 1 $NetBSD$ d5 6 a10 2 @@@@ -6,7 +6,7 @@@@ peardir=$(PEAR_INSTALLDIR) PEAR_INSTALL_FLAGS = -n -dshort_open_tag=0 -dsafe_mode=0 @