Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/08/26 15:36:44

Modified files:
distrib/alpha/iso: Makefile
distrib/amd64/iso: Makefile
distrib/hppa/iso: Makefile
distrib/i386/iso: Makefile
distrib/macppc/iso: Makefile
distrib/sgi/iso: Makefile
distrib/sparc/iso: Makefile
distrib/sparc64/iso: Makefile
distrib/vax/iso: Makefile

Log message:
no more exposed etc set

Module name: src
Changes by: florian@cvs.openbsd.org 2014/08/26 15:44:29

Modified files:
sys/netinet6 : in6.c in6.h nd6_rtr.c

Log message:
Do not hand-roll all routers link local address.
pointed out & OK bluhm@

Module name: src
Changes by: jmc@cvs.openbsd.org 2014/08/26 15:48:08

Modified files:
share/man/man8 : ssl.8

Log message:
sort SEE ALSO;

Module name: src
Changes by: jmc@cvs.openbsd.org 2014/08/26 15:50:38

Modified files:
usr.bin/htpasswd: htpasswd.1

Log message:
fix SEE ALSO;

Module name: ports
Changes by: ajacoutot@cvs.openbsd.org 2014/08/26 15:31:03

Modified files:
www/webkit : Makefile distinfo
www/webkit/patches: patch-Source_WTF_wtf_Platform_h
patch-Source_WTF_wtf_dtoa_utils_h

Log message:
Update to webkit-2.4.5.

ok landry@

Module name: ports
Changes by: ajacoutot@cvs.openbsd.org 2014/08/26 15:41:43

Modified files:
sysutils/salt : Makefile
sysutils/salt/patches: patch-salt_modules_useradd_py

Log message:
All patches have been pushed upstream.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/26 16:39:09

Modified files:
usr.sbin/rcctl : rcctl.sh

Log message:
Simplify the function add_flags().
Do not validate input twice, scrap needless array, and avoid needless
expensive function calls to svc_get_flags(), svc_default_enabled_flags(),
_rc_parse_conf(), and resolve code duplication. No functional change.
Feedback and OK ajacoutot@.

Module name: www
Changes by: brad@cvs.openbsd.org 2014/08/26 17:28:19

Modified files:
faq : current.html

Log message:
Also remove the rc.d script for BIND.

From Jiri B

Module name: ports
Changes by: zhuk@cvs.openbsd.org 2014/08/26 17:01:52

Added files:
devel/kdevplatform/patches:
patch-plugins_filetemplates_CMakeLists_txt

Log message:
Fix missing UI files dependencies when building test program. Pure build
file dependency patch, so no bump needed.

Found by ajacoutot@ in a bulk build.

Module name: ports
Changes by: zhuk@cvs.openbsd.org 2014/08/26 17:08:45

Modified files:
x11/kde4/libs : Tag: OPENBSD_5_5 Makefile
Added files:
x11/kde4/libs/patches: Tag: OPENBSD_5_5
patch-kdecore_auth_backends_polkit-1_Polkit1Backend_cpp

Log message:
Security fix for kdelibs 4.11 branch, CVE-2014-5033:

The KAuth framework uses polkit-1 API which tries to authenticate using the
requestors PID. This is prone to PID reuse race conditions.

More details here: <a href="http://www.kde.org/info/security/advisory-20140730-1.txt" rel="nofollow">http://www.kde.org/info/security/advisory-20140730-1.txt</a>

okay jca@, "I trust you" naddy@

Module name: ports
Changes by: zhuk@cvs.openbsd.org 2014/08/26 17:14:27

Modified files:
x11/kde4/libs : Makefile
Added files:
x11/kde4/libs/patches:
patch-kdecore_auth_backends_polkit-1_Polkit1Backend_cpp

Log message:
Security fix for kdelibs 4.13 branch, CVE-2014-5033:

The KAuth framework uses polkit-1 API which tries to authenticate using the
requestors PID. This is prone to PID reuse race conditions.

More details here: <a href="http://www.kde.org/info/security/advisory-20140730-1.txt" rel="nofollow">http://www.kde.org/info/security/advisory-20140730-1.txt</a>

Module name: ports
Changes by: zhuk@cvs.openbsd.org 2014/08/26 17:17:20

ports/x11/kde4/krfb/patches

Update of /cvs/ports/x11/kde4/krfb/patches
In directory cvs.openbsd.org:/tmp/cvs-serv9896/patches

Log Message:
Directory /cvs/ports/x11/kde4/krfb/patches added to the repository

Module name: ports
Changes by: zhuk@cvs.openbsd.org 2014/08/26 17:22:02

Modified files:
x11/kde4/krfb : Makefile
Added files:
x11/kde4/krfb/patches: patch-libvncserver_lzoconf_h
patch-libvncserver_lzodefs_h
patch-libvncserver_minilzo_c
patch-libvncserver_minilzo_h

Log message:
Security fix for krfb 4.13 branch, CVE-2014-4607:

krfb embeds libvncserver which embeds liblzo2, it contains various flaws
that result in integer overflow problems.

This commit actually updates bundled lzo library, as suggested by upstream.

Module name: ports
Changes by: zhuk@cvs.openbsd.org 2014/08/26 17:27:42

Modified files:
x11/kde4/krfb : Tag: OPENBSD_5_5 Makefile
Added files:
x11/kde4/krfb/patches: Tag: OPENBSD_5_5
patch-libvncserver_lzoconf_h
patch-libvncserver_lzodefs_h
patch-libvncserver_minilzo_c
patch-libvncserver_minilzo_h

Log message:
Security fix for krfb 4.11 branch, CVE-2014-4607:

krfb embeds libvncserver which embeds liblzo2, it contains various flaws
that result in integer overflow problems.

This commit actually updates bundled lzo library, as suggested by upstream.

testing and okay jca@, "I trust you" naddy@

Module name: src
Changes by: dlg@cvs.openbsd.org 2014/08/26 17:55:28

Modified files:
sys/dev/pci : if_vmx.c

Log message:
dont base the mru on the mtu. unconditionally make it what the
hardware can do (9k). implement the rxr ioctl while here.

ok jsg@

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/26 18:06:08

Modified files:
usr.bin/mandoc : Makefile apropos.1 cgi.c main.c mandoc.1
mansearch.c mansearch.h
Added files:
usr.bin/mandoc : man.1
Removed files:
usr.bin/mandoc : apropos.c

Log message:
Add an implementation of man(1) into the /usr/bin/mandoc binary and
provide a unified set of command line options for mandoc(1), man(1),
apropos(1), and whatis(1), each option doing the same for all four.
Not adding any completely new options, only extending exiting ones
from one tool to the others. New options are:
* apropos &amp; whatis -acfkw (in the past, these were man(1) only)
* apropos &amp; whatis -a -IOTW (in the past, mandoc(1) only)
* mandoc -ac (in the past, man(1) only)
* man -IOTW (in the past, mandoc(1) only)

Before we can decide whether or not we want to replace src/usr.bin/man
with this implementation, considerable bugfixing, testing, and
performance measurements are needed, which i'd rather do in the tree
than outside. Note that these bugs only affect the new man(1) mode,
existing mandoc(1), apropos(1), and whatis(1) is fine.

The new functionality in mandoc(1), apropos(1), and whatis(1)
is fully enabled. To play with the new man(1), you can try:
# mv /usr/bin/man /usr/bin/oman
# ln -s /usr/bin/mandoc /usr/bin/man

Positive feedback about the general direction from sthen@ and jmc@,
and deraadt@ is not against it.

Module name: src
Changes by: dlg@cvs.openbsd.org 2014/08/26 18:22:26

Modified files:
sys/sys : pool.h
sys/kern : subr_pool.c

Log message:
deprecate the "item offset" handling. nothing uses it, so we can
cut it out of the code to simplify things.

ok mikeb@

Module name: ports
Changes by: gsoares@cvs.openbsd.org 2014/08/26 19:36:16

Modified files:
sysutils/ggrep : Makefile distinfo
sysutils/ggrep/pkg: PLIST

Log message:
update to 2.20
OK naddy@(maintainer)

Module name: src
Changes by: brad@cvs.openbsd.org 2014/08/26 20:10:24

Modified files:
sys/arch/sgi/hpc: if_sq.c

Log message:
Remove redundant setting of if_mtu which ether_ifattach() already
takes care of.

ok dlg@

Module name: ports
Changes by: kirby@cvs.openbsd.org 2014/08/26 23:07:37

Removed files:
geo/qlandkarte : Makefile distinfo
geo/qlandkarte/patches: patch-common_in
patch-src_CCentralResources_cpp
patch-src_CGarminRoute_h
patch-src_CProjEckII_cpp
patch-src_CProjMercDynamic_cpp
patch-src_CProjMerc_cpp
patch-src_CProjUTM_cpp
patch-src_GeoMath_h
patch-src_IProjection_h
patch-src_src_pro
geo/qlandkarte/pkg: DESCR PFRAG.shared PLIST

Log message:
Remove. It was terminated upstream a long time ago.
Use qlandkartegt instead.
OK landry@ and sebastia@. Maintainer mail bounces.

Module name: ports
Changes by: kirby@cvs.openbsd.org 2014/08/26 23:09:24

Modified files:
geo : Makefile

Log message:
-qlandkarte

Module name: src
Changes by: dlg@cvs.openbsd.org 2014/08/26 23:54:15

Modified files:
sys/dev/ic : gem.c

Log message:
rxr ioctl handling.

Module name: src
Changes by: sebastia@cvs.openbsd.org 2014/08/27 00:51:35

Modified files:
usr.sbin/user : user.c

Log message:
Add missing capability to handle new $2b version of blowfish password
encryption for usermod and friends.

OK millert@, seems reasonable for now tedu@

Module name: ports
Changes by: ajacoutot@cvs.openbsd.org 2014/08/27 00:46:49

Modified files:
www/nginx : Makefile
www/nginx/pkg : PLIST
Removed files:
www/nginx/pkg : README

Log message:
Drop out-dated README.

ok robert@

http://undeadly.org/cgi?action=article&sid=20140827065755

Contributed by [jj](http://www.inet6.se) on Wed Aug 27 06:41:46 2014 (GMT)
from the dawn of the living tedu dept.

With [this](http://marc.info/?l=openbsd-cvs&m=140908174910713&w=2) commit, Robert Nagy (robert@) removed [nginx(8)](http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-5.5/man8/nginx.8) from base:


> Log message:
remove nginx from the base system in favor of OpenBSD's own httpd(8)


Nginx fans will of course find it in [ports](http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/www/nginx/), and people that just want to run a simple web server should read up on the new [httpd(8)](http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/httpd.8).

Module name: src
Changes by: blambert@cvs.openbsd.org 2014/08/27 01:33:55

src/regress/sys/kern/setuid

Update of /cvs/src/regress/sys/kern/setuid
In directory cvs.openbsd.org:/tmp/cvs-serv3959/setuid

Log Message:
Directory /cvs/src/regress/sys/kern/setuid added to the repository

Module name: src
Changes by: blambert@cvs.openbsd.org 2014/08/27 01:36:14

Added files:
regress/sys/kern/setuid: Makefile setegid.c seteuid.c setgid.c
setgid_child.c setgid_exec_inherit.c
setgid_none.c setresgid.c
setresgid_effective_exec.c
setresgid_real_exec.c
setresgid_saved_exec.c setresuid.c
setresuid_effective_exec.c
setresuid_real_exec.c
setresuid_saved_exec.c setuid.c
setuid_child.c setuid_exec_inherit.c
setuid_none.c setuid_real_exec.c
sgidexec.c sgidexec_inherit.c
sgidexec_none.c suidexec.c
suidexec_inherit.c suidexec_none.c
setuid_regress.h

Log message:
Regression tests for setuid-and-friends.

Thanks to djm@ for good suggestions.

Module name: ports
Changes by: ajacoutot@cvs.openbsd.org 2014/08/27 00:58:00

Modified files:
comms/mgetty+sendfax: Makefile
comms/mgetty+sendfax/files: new_voice
mail/courier-imap: Makefile
mail/mutt : Makefile
mail/sympa : Makefile
mail/sympa/patches: patch-src_lib_confdef_pm
security/stunnel: Makefile
security/tinyca: Makefile
security/tinyca/patches: patch-tinyca2
www/owncloud : Makefile
www/owncloud/pkg: README
www/phpldapadmin: Makefile
Removed files:
mail/mutt/patches: patch-smime_keys_pl
security/stunnel/patches: patch-tools_Makefile_in
www/phpldapadmin/patches: patch-lib_emuhash_functions_php

Log message:
Cope with openssl(1) move from /usr/sbin to /usr/bin

ok landry@

Module name: ports
Changes by: chrisz@cvs.openbsd.org 2014/08/27 01:47:47

Modified files:
devel/ocaml-camomile: Makefile distinfo
devel/ocaml-camomile/pkg: PFRAG.native PLIST
Added files:
devel/ocaml-camomile/patches: patch-Camomile_Makefile_in
Removed files:
devel/ocaml-camomile/patches: patch-Makefile_in

Log message:
Upgrade ocaml-camomile to 0.8.5.

Use cpp instead of the not available cppo. Cpp needs the directives
without indent. Therefore remove the indent in post-extract.

OK jca@

Module name: src
Changes by: jmc@cvs.openbsd.org 2014/08/27 02:26:05

Modified files:
bin/ksh : c_sh.c

Log message:
promote "times" to posix special built-in;
ok guenther

Module name: ports
Changes by: chrisz@cvs.openbsd.org 2014/08/27 01:54:22

Modified files:
devel/ocaml-batteries: Makefile distinfo
devel/ocaml-batteries/patches: patch-src_batUnix_mliv
devel/ocaml-batteries/pkg: PFRAG.native PLIST
Added files:
devel/ocaml-batteries/patches: patch-Makefile
patch-build_prefilter_ml
patch-src_batPrintf_mliv
patch-src_batPrintf_mlv

Log message:
Update ocaml-batteries to 2.2.0.
Also include fixes from upstream to support OCaml 4.02

OK jca@

Module name: ports
Changes by: chrisz@cvs.openbsd.org 2014/08/27 02:05:17

Modified files:
devel/ocaml-react: Makefile distinfo
devel/ocaml-react/pkg: PLIST
devel/ocaml-lwt: Makefile distinfo
devel/ocaml-lwt/patches: patch-setup_ml
devel/ocaml-lambda-term: Makefile distinfo
devel/ocaml-lambda-term/pkg: PLIST
devel/ocaml-zed: Makefile distinfo
devel/ocaml-zed/pkg: PLIST
devel/utop : Makefile distinfo
Removed files:
devel/ocaml-lambda-term/patches: patch-_oasis patch-_tags
patch-myocamlbuild_ml
patch-setup_ml
patch-src_lTerm_unix_stubs_c

Log message:
Upgrade ocaml-react. Since it has a major api charge, all of its dependers
need an upgrade, too.

* react uses opam without findlib as build system. Therefore call
ocamlbuild directly. And roll a custom do-install.
* lwt will need camlp4.
* zed has moved to github.
* utop, too.
* lambda-term, too. Also will it need camlp4.

OK jca@

Module name: ports
Changes by: landry@cvs.openbsd.org 2014/08/27 02:28:29

Modified files:
geo/geos : Makefile
geo/geos/pkg : PLIST

Log message:
Fix packaging by using DOXYGEN_ENCODE_PATH_STRIP=${WRKSRC} in the env
when running doxygen. I hate you doxygen.
Didnt package so no bump.

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/08/27 03:51:53

Modified files:
usr.sbin/httpd : server.c

Log message:
Write all data before closing the server socket if the output buffer
is not empty. This fixes a bug of short responses that could happen
with large files or fcgi data on connections with a higher latency.

OK florian@

Module name: ports
Changes by: kirby@cvs.openbsd.org 2014/08/27 03:02:26

Modified files:
geo/qlandkartegt: Makefile

Log message:
- add @pkgpath for smooth updates from qlandkarte
- add rcs id in readme
- remove duplicated dependency
ok landry@

Module name: ports
Changes by: kirby@cvs.openbsd.org 2014/08/27 03:04:40

Modified files:
devel/quirks : Makefile

Log message:
qlandkarte =&gt; qlandkartegt

Module name: ports
Changes by: kirby@cvs.openbsd.org 2014/08/27 03:35:14

Modified files:
geo/qlandkartegt: Makefile
geo/qlandkartegt/pkg: PLIST README

Log message:
missed changes for pkg/*. spotted by zhuk@, thanks!
bump for safety

Module name: ports
Changes by: daniel@cvs.openbsd.org 2014/08/27 03:44:59

Modified files:
math/coq : Makefile distinfo
math/coq/patches: patch-test-suite-Makefile
Added files:
math/coq/patches: patch-kernel_univ_ml

Log message:
Update to 8.4pl4. Compilation problem with ocaml 4.02 noted by chrisz@;
fix taken from coq trunk.

ok Yozo Toda (MAINTAINER) some time ago.
ok chrisz@

Module name: ports
Changes by: chrisz@cvs.openbsd.org 2014/08/27 03:45:39

Modified files:
net/mldonkey/stable: Makefile distinfo
Added files:
net/mldonkey/stable/patches: patch-src_utils_net_terminal_ml
Removed files:
net/mldonkey/stable/patches:
patch-src_daemon_common_commonMessages_ml
patch-src_daemon_driver_driverCommands_ml
patch-src_daemon_driver_driverControlers_ml
patch-src_utils_lib_gettext_ml4
patch-src_utils_lib_gettext_mli

Log message:
Update to 3.1.5.
Fix one "string literal in comment" for upcoming OCaml 4.02

OK dcoppa@

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/08/27 04:28:57

Modified files:
sbin/iked : Makefile dh.c dh.h iked.conf.5 ikev2.h parse.y
regress/sbin/iked/dh: Makefile dhtest.c
Added files:
sbin/iked : smult_curve25519_ref.c

Log message:
Add support for Curve25519 using the public domain code that is found
in OpenSSH. The "private use" DH group 1034 is based on the value
that was picked by strongswan recently.

OK mikeb@ markus@

Module name: src
Changes by: daniel@cvs.openbsd.org 2014/08/27 04:36:55

Modified files:
usr.sbin/mrouted: main.c

Log message:
c99 no longer allows implicit ints. make the declaration explicit.

ok henning@

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/08/27 04:46:53

Modified files:
lib/libressl : ressl.h ressl_config.c ressl_internal.h
ressl_server.c

Log message:
Add the API function ressl_config_set_ecdhcurve(config, name) to set a
non-standard ECDH curve by name or to disable it by passing NULL.

OK jsing@

Module name: ports
Changes by: ajacoutot@cvs.openbsd.org 2014/08/27 04:26:59

Modified files:
sysutils/salt : Makefile
Added files:
sysutils/salt/patches: patch-salt_modules_bsd_shadow_py
patch-salt_modules_disk_py
patch-salt_modules_groupadd_py

Log message:
Fix and implement OpenBSD support in the following modules:
bsd_shadow, disk, groupadd

Module name: ports
Changes by: ajacoutot@cvs.openbsd.org 2014/08/27 04:31:07

Modified files:
geo/qlandkartegt: Makefile
geo/qlandkartegt/pkg: README

Log message:
Apply README template.

Module name: ports
Changes by: ajacoutot@cvs.openbsd.org 2014/08/27 06:50:07

Modified files:
geo/qlandkartegt: Makefile
geo/qlandkartegt/pkg: PLIST
Removed files:
geo/qlandkartegt/pkg: README

Log message:
Drop useless and wrong README.

ok sebastia@ (maintainer)

&gt;
&gt; CVSROOT: /cvs
&gt; Module name: src
&gt; Changes by: daniel@cvs.openbsd.org 2014/08/27 04:36:55
&gt;
&gt; Modified files:
&gt; usr.sbin/mrouted: main.c
&gt;
&gt; Log message:
&gt; c99 no longer allows implicit ints. make the declaration explicit.
&gt;
&gt; ok henning@
&gt;

also ok kspillner@, millert@

Module name: src
Changes by: naddy@cvs.openbsd.org 2014/08/27 07:46:32

Modified files:
etc : newsyslog.conf

Log message:
Add httpd default log files to the rotation.
ok reyk@ (who suggested these lines a while ago)

Module name: src
Changes by: florian@cvs.openbsd.org 2014/08/27 08:04:16

Modified files:
distrib/miniroot: install.sh
etc/examples : sysctl.conf
etc : rc.conf
lib/libc/gen : sysctl.3
sbin/sysctl : sysctl.8
sys/netinet : icmp6.h
sys/netinet6 : icmp6.c in6_proto.c
usr.sbin/rtsold: rtsold.8 rtsold.c

Log message:
Nuke net.inet6.icmp6.rediraccept and allow redirects on interfaces
with autoconf enabled.
If one is doing SLAAC one does already trust link local icmp6 so the
policy for icmp6 redirects should be the same.
pointed out by &amp; OK bluhm@; OK henning@

Module name: src
Changes by: ajacoutot@cvs.openbsd.org 2014/08/27 08:13:17

Modified files:
usr.sbin/sysmerge: sysmerge.sh

Log message:
Simplify examples handling.

Module name: src
Changes by: ajacoutot@cvs.openbsd.org 2014/08/27 08:44:42

Modified files:
usr.sbin/sysmerge: sysmerge.sh

Log message:
One less option.