Import sfw build 138 Bugs Fixed ---------- 6631906 Removal of MySQL 4.0 6784591 SUNWgnu-gettext does not include autopoint 6785384 SUNWgnu-gettext does not include autoconf m4 files 6832369 Midnight Commander should be updated 6910724 fips doesn't build with ss12u1 6921536 Samba man pages contain \m[...] statements unsupported by nroff 6935576 Apache 2.0 and 2.2 vulnerable for CVE-2010-0434 6936032 Apache 2.2 vulnerable for CVE-2010-0408 6937352 upgrade httpd to 2.2.15 to maintain component currency 6938334 webmin upgrade forgot to update the version in the package description 6938859 Update fetchmail to version 6.3.15 6939353 need to update default package copyright again 6940666 drools interfaces should go 6941312 need to undo partial backout of 6877587 6941841 Update fetchmail to version 6.3.16 6941964 /usr/share/mc/extfs.d/s3+ requires /usr/bin/i86/isapython2.4 which is found in SUNWPython

Import sfw build 137 Bugs Fixed ---------- 6926835 Wireshark cannot open files typed into the location bar 6930214 CVE-2010-0624: Heap-based buffer overflow in GNU Tar 6933424 Various sfw manual pages need to be adjusted to use the new OpenSolaris package names. 6937764 upgrade OpenSSL to 0.9.8n (and fix CVE-2010-0740)

Import sfw build 136 Bugs Fixed ---------- 6514945 webmin still refers to xmemfs usr/sfw/lib/webmin/mount/solaris-lib.pl 6633684 [nvb78] Webmin is not integrated with apache2.2 6641988 [nvb79] Webmin interface for mysql badly configured 6780832 Add SASL support to mutt 6796795 copy text from mutt in gnome-terminal to other application is adding spaces 6799158 Update SER to link the MySQL 5.1 instead of the MySQL 4.0 6804425 Mutt doesn't have header cache support 6809910 Webmin 1.170 (Solaris 10): newaliases is not called when clicking Delete on sendmail/edit_alias.cgi 6828622 libnet Makefile invokes gcc directly, it should use $(CC) instead. 6903750 mutt fails to read MH-style mail dirs 6909860 /usr/man/man4/ipmiconsole.conf.4 refer to nonexistent man/man5 man pages in osol_129 and osol_132 6914573 webmin bundled with Solaris vulnerable to three separate XSS vulnerab ilities 6920693 trousers should use newer software 6922082 CVE-2010-0393 - CUPS lppasswd utility vulnerability 6924985 CVE-2010-0302: incomplete fix for CUPS CR#6900557(CVE-2009-3553) 6927042 memleaks in libtspi 6930830 upgrade OpenSSL to 0.9.8m (and fix CVE-2009-3555) 6932600 completion failure with zfs destroy, some problems with _dladm 6933290 After pkg image-update and reboot, tomcat service falls into maintenance 6933533 PSARC/2009/232 implementation breaks nmap 6933649 webmin contains Sun's branding, which should be removed 6934512 Envelope is not redrawn in compose mode after return from the message edit

Import sfw build 135 Bugs Fixed ---------- 6760685 No MOTD (message of the day) when using zsh, /etc/zprofile is needed 6916058 BIND 9.6.1-P3 6918313 [OSOL B131] Crash of Mysql server SSL connection security problem (5.1.30)(x86 only) 6923497 new gnu patch doesn't like dom4j 6924198 Update fetchmail to version 6.3.14 6924379 zsh 4.3.10 6924496 audit_pkg no longer needed in OpenSolaris world 6924503 enable "new-style" zsh completion by default

Import sfw build 134 Bugs Fixed ---------- 6760685 No MOTD (message of the day) when using zsh, /etc/zprofile is needed 6916058 BIND 9.6.1-P3 6918313 [OSOL B131] Crash of Mysql server SSL connection security problem (5.1.30)(x86 only) 6923497 new gnu patch doesn't like dom4j 6924198 Update fetchmail to version 6.3.14 6924379 zsh 4.3.10 6924496 audit_pkg no longer needed in OpenSolaris world 6924503 enable "new-style" zsh completion by default

Import sfw build 133 Bugs Fixed ---------- 6462216 tomcat fails to build with java 1.6 6766826 SUNWopenldapr becomes inconsistent after a reboot 6900262 OpenSSL PKCS#11 engine files are not cstyle clean again 6902029 DoS vulnerability in ntpd NTP mode 7 (MODE_PRIVATE) handling [CVE-2009-3563] 6908571 77.5% snv_129 openssl-rsa1024-ncp_engine-verifys performance regression sparc 6909632 PKCS#11 engine should use CK_(TRUE|FALSE) instead of TRUE/FALSE 6910922 Apache 1.3 JServ module removal 6912691 don't need to reference /usr/openwin so much anymore 6912906 Apache 1.3 init.d script shouldn't refer to Tomcat 6913689 Several sfw packages no longer need to depend on SUNWmlib and SUNWmlibl 6917046 upgrade ncftp to 3.2.3 6918442 when /usr/bin/patch becomes gnu patch in opensolaris 131, it upsets a few things 6919344 SUNWgnu-readline consumers have undefined tgetent symbol 6919686 Tomcat vulnerable for CVE-2009-2901, CVE-2009-2902 and CVE-2009-2693 6920566 SUNWgnupg license is incorrect for gpgme 6920613 Apache Tomcat 6.0.24 stable 6920817 Wireshark update to version 1.2.6 6920889 make OpenSSL fips and non-fips builds run in parallel 6921161 SUNWusbccid should have gone away with SUNWocf

Import sfw build 132 Bugs Fixed ---------- 6802880 Add NTLM support to fetchmail 6825333 Update fetchmail to version 6.3.13 6857014 Update MySQL in Nevada to version 5.1.37 6857426 Desire to have gnuplot in Solaris WOS 6892501 Bad build of mysql: reproducible segfault on SUNWmysql, not found in mysql.com-released versions 6895305 Package SUNWswig delivers python scripts with wrong interpreters path 6906268 CVE-2009-4029 - race condition vulnerability in automake 6910076 mc should use slang from proto area instead of installed system 6911348 back port pdo race bug for opensolaris 6911349 deliver nsapi extension within php for opensolaris 6911952 logilab-common and logilab-astng do not build correctly in OpenSolaris 6912082 Update check-deps.pl to version 2009-12-18 6914260 update default copyright to 2010 6915019 SFW build issues with python2.6 as the default 6915404 back port nsapi optimization patch for opensolaris 6915651 Regression in libexpat may break XML parser

Import sfw build 131 Bugs Fixed ---------- 6818295 [nvb110] Mysql server core dump when running tests 'execution_constants' 6826438 Update S-Lang to version 2.2.2 6865279 guile-config configures with guile 6886529 fixed rrset-order is not enabled in BIND 9.6.1 as was the intention. 6891703 Tor should use newer release 6891913 deliver httpd conf file for PHP integration via FastCGI when mod_php can't be used 6893187 CVE-2009-2820 Web Interface of CUPS 1.4.1 is susceptible to Cross-Site Scripting and CRLF injection 6899209 Compile zend_execute.c with -W2,-Ainline:inc=100 for performance gains. 6900557 CVE-2009-3553 cupsd crash due to a pointer use-after-free flaw 6902877 [nvb127] subselect test generates crash of the server. 6902912 DNS Cache Poisoning 6903940 [nvb127] zlib extension not delivered 6905246 CUPS upgrade to 1.4.2 6905928 PostgreSQL 8.2, 8.3 Makefiles need some love 6907454 apache22 fcgid fails to load, daemon starts, stops and restarts ad nauseum 6908140 gpgconf and gpgme-config report incorrect pathnames 6908543 sfw updates expose new package dependencies 6908980 bad links for /usr/postgres/8.3/share/locale(s) in osol_128a for SUNWpostgr-83-libs 6909121 SFW METADATA files need updates for SUPPORT data 6909137 cups 1.4.2 does not deliver dbus notifier 6909139 Update PostgreSQL to 8.3.9 6909140 Update PostgreSQL to 8.2.15 6909141 Update PostgreSQL to 8.4.2 6909592 print/service-selector races with manifest-import 6910254 upgrade php to 5.2.12 6910945 Tomcat shouldn't give 404 when SUNWtcat-examples is not installed 6911455 gpgconf still reports wrong directory for libexec 6911767 back port 6.0 php dtrace to track object creation in php 5.2 6911775 Wireshark update to version 1.2.5 6912139 seek return value can be -1 within zlib streams 6912354 core dump while running ldap_next_reference functions 6912643 add libproxy support to 64-bit libneon 6913465 opensolaris b130 PHP problems with session_start();

Import sfw build 130 Bugs Fixed ---------- 6716092 Package mod_proxy_html for webstack 6716096 Package mod_xml2enc for webstack 6842009 missing openssl links in /usr/lib 6854610 OpenSSL in the pkginfo NAME field is not helpful. 6854615 pconsole in the pkginfo NAME field is not helpful. 6864924 RFE: fishing for wireshark in ipnet 6871386 Update RubyGems in OpenSolaris to 1.3.3 or later (fix unref) 6884913 Solaris should deliver GnuPG 6887293 Sizelimit.pm does not work on Solaris 10 bundled Apache 6890260 upgrade vim to latest patchset 6893007 cups should include TX support 6893212 vim prints: assertion `static_gravity_supported' failed 6895945 APR cross-process mutex choice can lead to fatal errors in some httpd modules 6897508 meld delivers python2.4 compiled pyc files and version agnostic magic. 6897511 rdiff-backup delivers python2.4 modules and version agnostic magic. 6897514 nmap delivers python2.4 modules and version agnostic magic. 6897516 epydoc delivers python2.4 modules and version agnostic magic. 6898416 keeping -Bsymbolic keeps OpenSSL in SFW simpler 6898418 SUNWopenssl packages should include default dependencies 6900330 need to set CONFIG_SHELL when running configure 6900476 DESC string for libpcap has the wrong version 6902485 samba man pages can not be displayed by solaris nroff 6902632 EINTR regression with Solaris apr_pollset_poll() in APR 1.3.9 6903308 Avoid invoking setitimer when timeouts have been disabled 6903732 safe_address improvement for 32 bit php on Solaris 6905480 CVE-2009-3720, CVE-2009-3560 - Multiple vulnerabilities in libexpat 2.0.1 6907408 Wireshark update to version 1.2.4 6907611 tcpdump should print out the hook for ipobs packets 6907795 SUNWlibpcap needs to deliver pcap-bpf.h and pcap-namedb.h

Import sfw build 129 Bugs Fixed ---------- 6479874 OpenSSL should support RSA key by reference/hardware keystores 6732677 make check to trigger Solaris specific code automatic in the PKCS#11 engine 6744125 libpcap should be IPv6 capable 6745178 update libxml2 to 2.7.1 (or later) 6790767 default lighttpd.conf need to reflect opesolararis file locations 6801093 snmpd is core dumping on s10u6_07b 6808014 tcpdump to be included into SFW consolidation 6812193 lighttpd14 should take advantage of lua after snv_110 6832483 Python libxml not available for 2.5, 2.6 6841989 libpcap needs to be updated version 1.0.0 6849500 libxslt need to be updated within opensolaris 6863377 libpcap needs to be built to support BPF 6871383 Update Ruby in OpenSolaris to patch level 174 6871386 Update RubyGems in OpenSolaris to 1.3.3 or later 6871404 Update Lighttpd in OpenSolaris to v1.4.23 6875538 deliver mod_fcgid 2.3.4 6877619 remove redundant PHP DTrace extension 6879769 Lighttpd community recommends not to use multiple Lighttpd workers 6893914 split 3rd party extensions into its own packages 6896677 PKCS#11 engine's hw_pk11_err.h needs to be split 6898539 upgrade OpenSSL to 0.9.8l 6899783 tspi library can leak auth session handles 6900785 Tspi library prompts too many times for change auth 6901297 reserved_offset in APC should be true global (not a thread local) 6901646 Ruby DTrace probes not available to ruby programs run with the dtrace '- 6903738 CUPS 1.4 usb backend appears to be broken