[pkgsrc/trunk]: pkgsrc/www/lighttpd Changes 1.4.34:

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/97c043de5846
branches:  trunk
changeset: 629556:97c043de5846
user:      adam <adam%pkgsrc.org@localhost>
date:      Thu Jan 23 13:20:12 2014 +0000

description:
Changes 1.4.34:
* [mod_auth] explicitly link ssl for SHA1 (fixes 2517)
* [mod_extforward] fix compilation without IPv6, (not) using undefined var (fixes 2515, thx mm)
* [ssl] fix SNI handling; only use key+cert from SNI specific config (fixes 2525, CVE-2013-4508)
* [doc] update ssl.cipher-list recommendation
* [stat-cache] FAM: fix use after free (CVE-2013-4560)
* [stat-cache] fix FAM cleanup/fdevent handling
* [core] check success of setuid,setgid,setgroups (CVE-2013-4559)
* [ssl] fix regression from CVE-2013-4508 (client-cert sessions were broken)
* maintain physical.basedir (the "acting" doc-root as prefix of physical.path) in more places
* [core] decode URL before rewrite, enabling it to work in $HTTP["url"] conditionals (fixes 2526)
* [auto* build] remove -no-undefined from linker flags, as we actually link modules with undefined symbols (fixes 2533)
* [mod_mysql_vhost] fix memory leak on config init (2530)
* [mod_webdav] fix fd leak found with parfait (fixes 2530, thx kukackajiri)

diffstat:

 www/lighttpd/Makefile                               |   4 ++--
 www/lighttpd/distinfo                               |  11 ++++++-----
 www/lighttpd/patches/patch-doc_config_lighttpd.conf |   3 ++-
 www/lighttpd/patches/patch-src_fdevent_poll.c       |  15 +++++++++++++++
 4 files changed, 25 insertions(+), 8 deletions(-)

diffs (60 lines):

diff -r 3c7703ead58b -r 97c043de5846 www/lighttpd/Makefile
--- a/www/lighttpd/Makefile     Thu Jan 23 12:24:08 2014 +0000
+++ b/www/lighttpd/Makefile     Thu Jan 23 13:20:12 2014 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.42 2013/10/29 19:54:11 adam Exp $
+# $NetBSD: Makefile,v 1.43 2014/01/23 13:20:12 adam Exp $
 
-DISTNAME=      lighttpd-1.4.33
+DISTNAME=      lighttpd-1.4.34
 CATEGORIES=    www
 MASTER_SITES=  http://download.lighttpd.net/lighttpd/releases-1.4.x/
 EXTRACT_SUFX=  .tar.xz
diff -r 3c7703ead58b -r 97c043de5846 www/lighttpd/distinfo
--- a/www/lighttpd/distinfo     Thu Jan 23 12:24:08 2014 +0000
+++ b/www/lighttpd/distinfo     Thu Jan 23 13:20:12 2014 +0000
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.25 2013/10/29 19:54:11 adam Exp $
+$NetBSD: distinfo,v 1.26 2014/01/23 13:20:12 adam Exp $
 
-SHA1 (lighttpd-1.4.33.tar.xz) = f309708105aadffba229a944d4c32423132119a5
-RMD160 (lighttpd-1.4.33.tar.xz) = 4b892ac678c9153e8200318f2bd71445190c1806
-Size (lighttpd-1.4.33.tar.xz) = 555248 bytes
-SHA1 (patch-doc_config_lighttpd.conf) = 1f5d884ec3cc9ee1ec18b51f0d25ca2a7aae0b8c
+SHA1 (lighttpd-1.4.34.tar.xz) = c1edd4ddbd24156c374594e27d63058ffe5dc726
+RMD160 (lighttpd-1.4.34.tar.xz) = 1454388519622068e9ca7579a09602c94b851eae
+Size (lighttpd-1.4.34.tar.xz) = 556080 bytes
+SHA1 (patch-doc_config_lighttpd.conf) = e8ae799f0915b83fda5ce8893fdbcab2eee9a512
+SHA1 (patch-src_fdevent_poll.c) = f5fe62f0b227d64dc717661a256567b4bd97f075
 SHA1 (patch-src_plugin.c) = 27b7a193c1f5867b5a1d2e2c5b289a0bf6368b39
diff -r 3c7703ead58b -r 97c043de5846 www/lighttpd/patches/patch-doc_config_lighttpd.conf
--- a/www/lighttpd/patches/patch-doc_config_lighttpd.conf       Thu Jan 23 12:24:08 2014 +0000
+++ b/www/lighttpd/patches/patch-doc_config_lighttpd.conf       Thu Jan 23 13:20:12 2014 +0000
@@ -1,6 +1,7 @@
-$NetBSD: patch-doc_config_lighttpd.conf,v 1.1 2012/08/01 11:25:22 fhajny Exp $
+$NetBSD: patch-doc_config_lighttpd.conf,v 1.2 2014/01/23 13:20:12 adam Exp $
 
 Sane defaults.
+
 --- doc/config/lighttpd.conf.orig      2010-07-11 17:01:32.000000000 +0000
 +++ doc/config/lighttpd.conf
 @@ -13,11 +13,11 @@
diff -r 3c7703ead58b -r 97c043de5846 www/lighttpd/patches/patch-src_fdevent_poll.c
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/www/lighttpd/patches/patch-src_fdevent_poll.c     Thu Jan 23 13:20:12 2014 +0000
@@ -0,0 +1,15 @@
+$NetBSD: patch-src_fdevent_poll.c,v 1.1 2014/01/23 13:20:12 adam Exp $
+
+Error fix.
+
+--- src/fdevent_poll.c.orig    2014-01-23 11:58:57.000000000 +0000
++++ src/fdevent_poll.c
+@@ -193,7 +193,7 @@ int fdevent_poll_init(fdevents *ev) {
+ int fdevent_poll_init(fdevents *ev) {
+       UNUSED(ev);
+ 
+-      log_error_write(srv, __FILE__, __LINE__,
++      log_error_write(ev->srv, __FILE__, __LINE__,
+               "s", "poll is not supported, try to set server.event-handler = \"select\"");
+ 
+       return -1;