Received: by mail.netbsd.org (Postfix, from userid 605) id 097BE84D78; Tue, 12 Nov 2019 18:39:48 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 8738884CE8 for ; Tue, 12 Nov 2019 18:39:47 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id y8MitfixqrxC for ; Tue, 12 Nov 2019 18:39:47 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 0328184C2B for ; Tue, 12 Nov 2019 18:39:47 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id F0E61FA95; Tue, 12 Nov 2019 18:39:46 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1573583986241860" MIME-Version: 1.0 Date: Tue, 12 Nov 2019 18:39:46 +0000 From: "Niclas Rosenvik" Subject: CVS commit: pkgsrc/www/mini_httpd To: pkgsrc-changes@NetBSD.org Reply-To: nros@netbsd.org X-Mailer: log_accum Message-Id: <20191112183946.F0E61FA95@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1573583986241860 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: nros Date: Tue Nov 12 18:39:46 UTC 2019 Modified Files: pkgsrc/www/mini_httpd: Makefile distinfo Log Message: Update mini_httpd to version 1.30 pkgsrc changes: added -lsendfile to SunOS build to make it work. Release notes: New in version 1.30: Enlarged request read buffer to 50KB. Fix security bug that let remote users read arbitrary files. (CVE-2018-18778) New in version 1.29: Allow CGI to handle HTTP methods besides GET/HEAD/POST. New in version 1.28: Fix to buffer overrun bug in htpasswd. Reported by Alessio Santoru as CVE-2017-17663. Some fixes to keep connections from getting stuck forever in FIN_WAIT_2 state. To generate a diff of this commit: cvs rdiff -u -r1.28 -r1.29 pkgsrc/www/mini_httpd/Makefile cvs rdiff -u -r1.11 -r1.12 pkgsrc/www/mini_httpd/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1573583986241860 Content-Disposition: inline Content-Length: 2245 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/mini_httpd/Makefile diff -u pkgsrc/www/mini_httpd/Makefile:1.28 pkgsrc/www/mini_httpd/Makefile:1.29 --- pkgsrc/www/mini_httpd/Makefile:1.28 Fri Sep 29 07:57:38 2017 +++ pkgsrc/www/mini_httpd/Makefile Tue Nov 12 18:39:46 2019 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.28 2017/09/29 07:57:38 wen Exp $ +# $NetBSD: Makefile,v 1.29 2019/11/12 18:39:46 nros Exp $ -DISTNAME= mini_httpd-1.27 +DISTNAME= mini_httpd-1.30 CATEGORIES= www MASTER_SITES= http://www.acme.com/software/mini_httpd/ @@ -17,7 +17,7 @@ MAKE_ENV+= PKG_LDFLAGS=${LDFLAGS:Q} MAKE_ENV+= PKG_LIBS=${LIBS:Q} MAKE_ENV.NetBSD+= CRYPT_LIB=-lcrypt -MAKE_ENV.SunOS+= SYSV_LIBS="-lnsl -lsocket" +MAKE_ENV.SunOS+= SYSV_LIBS="-lnsl -lsocket -lsendfile" SUBST_CLASSES= htpasswd SUBST_MESSAGE.htpasswd= Fix name of (m)htpasswd in manual pages. Index: pkgsrc/www/mini_httpd/distinfo diff -u pkgsrc/www/mini_httpd/distinfo:1.11 pkgsrc/www/mini_httpd/distinfo:1.12 --- pkgsrc/www/mini_httpd/distinfo:1.11 Fri Sep 29 07:57:38 2017 +++ pkgsrc/www/mini_httpd/distinfo Tue Nov 12 18:39:46 2019 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.11 2017/09/29 07:57:38 wen Exp $ +$NetBSD: distinfo,v 1.12 2019/11/12 18:39:46 nros Exp $ -SHA1 (mini_httpd-1.27/mini_httpd-1.27.tar.gz) = 6c9dc710e027dfecdb7e5ff5c3aeeb183eeb4c4a -RMD160 (mini_httpd-1.27/mini_httpd-1.27.tar.gz) = 7acea463e1461b9cd72d2c3a240d67bcafd14990 -SHA512 (mini_httpd-1.27/mini_httpd-1.27.tar.gz) = a7374374d70eb6e531225bf944d80158c7a1870f0e9d3ab720f83706f722eaeac3a891f06c3d6ac2189e1d368504db0ce512440a1d09be109f804c8a0c7901e1 -Size (mini_httpd-1.27/mini_httpd-1.27.tar.gz) = 43473 bytes +SHA1 (mini_httpd-1.30/mini_httpd-1.30.tar.gz) = 42b3862ce728f948440378de3b26fd29199febe4 +RMD160 (mini_httpd-1.30/mini_httpd-1.30.tar.gz) = 77f767f90c1061a136c65a4faf456091e9464cc0 +SHA512 (mini_httpd-1.30/mini_httpd-1.30.tar.gz) = c7464bbd6f9b18ad15f662978ca68fab7db1eea5247d2598134869f098c273b745c7bb0ef9a2841acefb94a369937111858aa84028ed08e9b07d9c6fc257a04c +Size (mini_httpd-1.30/mini_httpd-1.30.tar.gz) = 43889 bytes SHA1 (patch-aa) = 9156d0f4a7d8b727db34bdf8b7691509f51f9e31 SHA1 (patch-ab) = bf0f1cc373c0b7da4c4f4f4f0001ba357c16510a SHA1 (patch-ac) = c0587f2efa9a349cf739eafdeb2ee54f1fa44629 --_----------=_1573583986241860--