Import sfw build 141 Bugs Fixed ---------- 6927149 unpack-archive can not handle filenames with spaces 6934489 Update PostgreSQL 8.4 to 8.4.4 6934490 Update PostgreSQL 8.3 to 8.3.11 6934491 Update PostgreSQL 8.2 to 8.2.17 6947722 Upgrade CURL to 7.20.1 6951179 lcms update does not get along with ss12u1 6951444 Wireshark update to version 1.2.8

Import sfw build 140 Bugs Fixed ---------- 6890057 upgrade squid to 2.7 stable9 6922616 gnuplot doesn't find default font for png plots 6929417 Upgrade nmap to 5.21 6939380 SFW delivered SMF manifests should be relocated to /lib/svc/manifest 6942427 pkgtemplate.pl needs updated copyright 6950179 Update fetchmail to version 6.3.17 (CVE-2010-1167)

Import sfw build 139 Bugs Fixed ---------- 6839908 dlopen(pkcs11_kernel) and calling C_Initialize makes pkcs11 engine enter infinite loop 6937593 Upgrade LCMS to 1.19 6944247 getifaddrs in 137 breaks sfw build

Import sfw build 138 Bugs Fixed ---------- 6631906 Removal of MySQL 4.0 6784591 SUNWgnu-gettext does not include autopoint 6785384 SUNWgnu-gettext does not include autoconf m4 files 6832369 Midnight Commander should be updated 6910724 fips doesn't build with ss12u1 6921536 Samba man pages contain \m[...] statements unsupported by nroff 6935576 Apache 2.0 and 2.2 vulnerable for CVE-2010-0434 6936032 Apache 2.2 vulnerable for CVE-2010-0408 6937352 upgrade httpd to 2.2.15 to maintain component currency 6938334 webmin upgrade forgot to update the version in the package description 6938859 Update fetchmail to version 6.3.15 6939353 need to update default package copyright again 6940666 drools interfaces should go 6941312 need to undo partial backout of 6877587 6941841 Update fetchmail to version 6.3.16 6941964 /usr/share/mc/extfs.d/s3+ requires /usr/bin/i86/isapython2.4 which is found in SUNWPython

Import sfw build 137 Bugs Fixed ---------- 6926835 Wireshark cannot open files typed into the location bar 6930214 CVE-2010-0624: Heap-based buffer overflow in GNU Tar 6933424 Various sfw manual pages need to be adjusted to use the new OpenSolaris package names. 6937764 upgrade OpenSSL to 0.9.8n (and fix CVE-2010-0740)

Import sfw build 136 Bugs Fixed ---------- 6514945 webmin still refers to xmemfs usr/sfw/lib/webmin/mount/solaris-lib.pl 6633684 [nvb78] Webmin is not integrated with apache2.2 6641988 [nvb79] Webmin interface for mysql badly configured 6780832 Add SASL support to mutt 6796795 copy text from mutt in gnome-terminal to other application is adding spaces 6799158 Update SER to link the MySQL 5.1 instead of the MySQL 4.0 6804425 Mutt doesn't have header cache support 6809910 Webmin 1.170 (Solaris 10): newaliases is not called when clicking Delete on sendmail/edit_alias.cgi 6828622 libnet Makefile invokes gcc directly, it should use $(CC) instead. 6903750 mutt fails to read MH-style mail dirs 6909860 /usr/man/man4/ipmiconsole.conf.4 refer to nonexistent man/man5 man pages in osol_129 and osol_132 6914573 webmin bundled with Solaris vulnerable to three separate XSS vulnerab ilities 6920693 trousers should use newer software 6922082 CVE-2010-0393 - CUPS lppasswd utility vulnerability 6924985 CVE-2010-0302: incomplete fix for CUPS CR#6900557(CVE-2009-3553) 6927042 memleaks in libtspi 6930830 upgrade OpenSSL to 0.9.8m (and fix CVE-2009-3555) 6932600 completion failure with zfs destroy, some problems with _dladm 6933290 After pkg image-update and reboot, tomcat service falls into maintenance 6933533 PSARC/2009/232 implementation breaks nmap 6933649 webmin contains Sun's branding, which should be removed 6934512 Envelope is not redrawn in compose mode after return from the message edit

Import sfw build 135 Bugs Fixed ---------- 6760685 No MOTD (message of the day) when using zsh, /etc/zprofile is needed 6916058 BIND 9.6.1-P3 6918313 [OSOL B131] Crash of Mysql server SSL connection security problem (5.1.30)(x86 only) 6923497 new gnu patch doesn't like dom4j 6924198 Update fetchmail to version 6.3.14 6924379 zsh 4.3.10 6924496 audit_pkg no longer needed in OpenSolaris world 6924503 enable "new-style" zsh completion by default

Import sfw build 134 Bugs Fixed ---------- 6760685 No MOTD (message of the day) when using zsh, /etc/zprofile is needed 6916058 BIND 9.6.1-P3 6918313 [OSOL B131] Crash of Mysql server SSL connection security problem (5.1.30)(x86 only) 6923497 new gnu patch doesn't like dom4j 6924198 Update fetchmail to version 6.3.14 6924379 zsh 4.3.10 6924496 audit_pkg no longer needed in OpenSolaris world 6924503 enable "new-style" zsh completion by default

Import sfw build 133 Bugs Fixed ---------- 6462216 tomcat fails to build with java 1.6 6766826 SUNWopenldapr becomes inconsistent after a reboot 6900262 OpenSSL PKCS#11 engine files are not cstyle clean again 6902029 DoS vulnerability in ntpd NTP mode 7 (MODE_PRIVATE) handling [CVE-2009-3563] 6908571 77.5% snv_129 openssl-rsa1024-ncp_engine-verifys performance regression sparc 6909632 PKCS#11 engine should use CK_(TRUE|FALSE) instead of TRUE/FALSE 6910922 Apache 1.3 JServ module removal 6912691 don't need to reference /usr/openwin so much anymore 6912906 Apache 1.3 init.d script shouldn't refer to Tomcat 6913689 Several sfw packages no longer need to depend on SUNWmlib and SUNWmlibl 6917046 upgrade ncftp to 3.2.3 6918442 when /usr/bin/patch becomes gnu patch in opensolaris 131, it upsets a few things 6919344 SUNWgnu-readline consumers have undefined tgetent symbol 6919686 Tomcat vulnerable for CVE-2009-2901, CVE-2009-2902 and CVE-2009-2693 6920566 SUNWgnupg license is incorrect for gpgme 6920613 Apache Tomcat 6.0.24 stable 6920817 Wireshark update to version 1.2.6 6920889 make OpenSSL fips and non-fips builds run in parallel 6921161 SUNWusbccid should have gone away with SUNWocf

Import sfw build 132 Bugs Fixed ---------- 6802880 Add NTLM support to fetchmail 6825333 Update fetchmail to version 6.3.13 6857014 Update MySQL in Nevada to version 5.1.37 6857426 Desire to have gnuplot in Solaris WOS 6892501 Bad build of mysql: reproducible segfault on SUNWmysql, not found in mysql.com-released versions 6895305 Package SUNWswig delivers python scripts with wrong interpreters path 6906268 CVE-2009-4029 - race condition vulnerability in automake 6910076 mc should use slang from proto area instead of installed system 6911348 back port pdo race bug for opensolaris 6911349 deliver nsapi extension within php for opensolaris 6911952 logilab-common and logilab-astng do not build correctly in OpenSolaris 6912082 Update check-deps.pl to version 2009-12-18 6914260 update default copyright to 2010 6915019 SFW build issues with python2.6 as the default 6915404 back port nsapi optimization patch for opensolaris 6915651 Regression in libexpat may break XML parser