Import sfw build 140 Bugs Fixed ---------- 6890057 upgrade squid to 2.7 stable9 6922616 gnuplot doesn't find default font for png plots 6929417 Upgrade nmap to 5.21 6939380 SFW delivered SMF manifests should be relocated to /lib/svc/manifest 6942427 pkgtemplate.pl needs updated copyright 6950179 Update fetchmail to version 6.3.17 (CVE-2010-1167)

Import sfw build 139 Bugs Fixed ---------- 6839908 dlopen(pkcs11_kernel) and calling C_Initialize makes pkcs11 engine enter infinite loop 6937593 Upgrade LCMS to 1.19 6944247 getifaddrs in 137 breaks sfw build

Import sfw build 138 Bugs Fixed ---------- 6631906 Removal of MySQL 4.0 6784591 SUNWgnu-gettext does not include autopoint 6785384 SUNWgnu-gettext does not include autoconf m4 files 6832369 Midnight Commander should be updated 6910724 fips doesn't build with ss12u1 6921536 Samba man pages contain \m[...] statements unsupported by nroff 6935576 Apache 2.0 and 2.2 vulnerable for CVE-2010-0434 6936032 Apache 2.2 vulnerable for CVE-2010-0408 6937352 upgrade httpd to 2.2.15 to maintain component currency 6938334 webmin upgrade forgot to update the version in the package description 6938859 Update fetchmail to version 6.3.15 6939353 need to update default package copyright again 6940666 drools interfaces should go 6941312 need to undo partial backout of 6877587 6941841 Update fetchmail to version 6.3.16 6941964 /usr/share/mc/extfs.d/s3+ requires /usr/bin/i86/isapython2.4 which is found in SUNWPython

Import sfw build 137 Bugs Fixed ---------- 6926835 Wireshark cannot open files typed into the location bar 6930214 CVE-2010-0624: Heap-based buffer overflow in GNU Tar 6933424 Various sfw manual pages need to be adjusted to use the new OpenSolaris package names. 6937764 upgrade OpenSSL to 0.9.8n (and fix CVE-2010-0740)

Import sfw build 136 Bugs Fixed ---------- 6514945 webmin still refers to xmemfs usr/sfw/lib/webmin/mount/solaris-lib.pl 6633684 [nvb78] Webmin is not integrated with apache2.2 6641988 [nvb79] Webmin interface for mysql badly configured 6780832 Add SASL support to mutt 6796795 copy text from mutt in gnome-terminal to other application is adding spaces 6799158 Update SER to link the MySQL 5.1 instead of the MySQL 4.0 6804425 Mutt doesn't have header cache support 6809910 Webmin 1.170 (Solaris 10): newaliases is not called when clicking Delete on sendmail/edit_alias.cgi 6828622 libnet Makefile invokes gcc directly, it should use $(CC) instead. 6903750 mutt fails to read MH-style mail dirs 6909860 /usr/man/man4/ipmiconsole.conf.4 refer to nonexistent man/man5 man pages in osol_129 and osol_132 6914573 webmin bundled with Solaris vulnerable to three separate XSS vulnerab ilities 6920693 trousers should use newer software 6922082 CVE-2010-0393 - CUPS lppasswd utility vulnerability 6924985 CVE-2010-0302: incomplete fix for CUPS CR#6900557(CVE-2009-3553) 6927042 memleaks in libtspi 6930830 upgrade OpenSSL to 0.9.8m (and fix CVE-2009-3555) 6932600 completion failure with zfs destroy, some problems with _dladm 6933290 After pkg image-update and reboot, tomcat service falls into maintenance 6933533 PSARC/2009/232 implementation breaks nmap 6933649 webmin contains Sun's branding, which should be removed 6934512 Envelope is not redrawn in compose mode after return from the message edit

Import sfw build 135 Bugs Fixed ---------- 6760685 No MOTD (message of the day) when using zsh, /etc/zprofile is needed 6916058 BIND 9.6.1-P3 6918313 [OSOL B131] Crash of Mysql server SSL connection security problem (5.1.30)(x86 only) 6923497 new gnu patch doesn't like dom4j 6924198 Update fetchmail to version 6.3.14 6924379 zsh 4.3.10 6924496 audit_pkg no longer needed in OpenSolaris world 6924503 enable "new-style" zsh completion by default

Import sfw build 134 Bugs Fixed ---------- 6760685 No MOTD (message of the day) when using zsh, /etc/zprofile is needed 6916058 BIND 9.6.1-P3 6918313 [OSOL B131] Crash of Mysql server SSL connection security problem (5.1.30)(x86 only) 6923497 new gnu patch doesn't like dom4j 6924198 Update fetchmail to version 6.3.14 6924379 zsh 4.3.10 6924496 audit_pkg no longer needed in OpenSolaris world 6924503 enable "new-style" zsh completion by default

Import sfw build 133 Bugs Fixed ---------- 6462216 tomcat fails to build with java 1.6 6766826 SUNWopenldapr becomes inconsistent after a reboot 6900262 OpenSSL PKCS#11 engine files are not cstyle clean again 6902029 DoS vulnerability in ntpd NTP mode 7 (MODE_PRIVATE) handling [CVE-2009-3563] 6908571 77.5% snv_129 openssl-rsa1024-ncp_engine-verifys performance regression sparc 6909632 PKCS#11 engine should use CK_(TRUE|FALSE) instead of TRUE/FALSE 6910922 Apache 1.3 JServ module removal 6912691 don't need to reference /usr/openwin so much anymore 6912906 Apache 1.3 init.d script shouldn't refer to Tomcat 6913689 Several sfw packages no longer need to depend on SUNWmlib and SUNWmlibl 6917046 upgrade ncftp to 3.2.3 6918442 when /usr/bin/patch becomes gnu patch in opensolaris 131, it upsets a few things 6919344 SUNWgnu-readline consumers have undefined tgetent symbol 6919686 Tomcat vulnerable for CVE-2009-2901, CVE-2009-2902 and CVE-2009-2693 6920566 SUNWgnupg license is incorrect for gpgme 6920613 Apache Tomcat 6.0.24 stable 6920817 Wireshark update to version 1.2.6 6920889 make OpenSSL fips and non-fips builds run in parallel 6921161 SUNWusbccid should have gone away with SUNWocf

Import sfw build 132 Bugs Fixed ---------- 6802880 Add NTLM support to fetchmail 6825333 Update fetchmail to version 6.3.13 6857014 Update MySQL in Nevada to version 5.1.37 6857426 Desire to have gnuplot in Solaris WOS 6892501 Bad build of mysql: reproducible segfault on SUNWmysql, not found in mysql.com-released versions 6895305 Package SUNWswig delivers python scripts with wrong interpreters path 6906268 CVE-2009-4029 - race condition vulnerability in automake 6910076 mc should use slang from proto area instead of installed system 6911348 back port pdo race bug for opensolaris 6911349 deliver nsapi extension within php for opensolaris 6911952 logilab-common and logilab-astng do not build correctly in OpenSolaris 6912082 Update check-deps.pl to version 2009-12-18 6914260 update default copyright to 2010 6915019 SFW build issues with python2.6 as the default 6915404 back port nsapi optimization patch for opensolaris 6915651 Regression in libexpat may break XML parser

Import sfw build 131 Bugs Fixed ---------- 6818295 [nvb110] Mysql server core dump when running tests 'execution_constants' 6826438 Update S-Lang to version 2.2.2 6865279 guile-config configures with guile 6886529 fixed rrset-order is not enabled in BIND 9.6.1 as was the intention. 6891703 Tor should use newer release 6891913 deliver httpd conf file for PHP integration via FastCGI when mod_php can't be used 6893187 CVE-2009-2820 Web Interface of CUPS 1.4.1 is susceptible to Cross-Site Scripting and CRLF injection 6899209 Compile zend_execute.c with -W2,-Ainline:inc=100 for performance gains. 6900557 CVE-2009-3553 cupsd crash due to a pointer use-after-free flaw 6902877 [nvb127] subselect test generates crash of the server. 6902912 DNS Cache Poisoning 6903940 [nvb127] zlib extension not delivered 6905246 CUPS upgrade to 1.4.2 6905928 PostgreSQL 8.2, 8.3 Makefiles need some love 6907454 apache22 fcgid fails to load, daemon starts, stops and restarts ad nauseum 6908140 gpgconf and gpgme-config report incorrect pathnames 6908543 sfw updates expose new package dependencies 6908980 bad links for /usr/postgres/8.3/share/locale(s) in osol_128a for SUNWpostgr-83-libs 6909121 SFW METADATA files need updates for SUPPORT data 6909137 cups 1.4.2 does not deliver dbus notifier 6909139 Update PostgreSQL to 8.3.9 6909140 Update PostgreSQL to 8.2.15 6909141 Update PostgreSQL to 8.4.2 6909592 print/service-selector races with manifest-import 6910254 upgrade php to 5.2.12 6910945 Tomcat shouldn't give 404 when SUNWtcat-examples is not installed 6911455 gpgconf still reports wrong directory for libexec 6911767 back port 6.0 php dtrace to track object creation in php 5.2 6911775 Wireshark update to version 1.2.5 6912139 seek return value can be -1 within zlib streams 6912354 core dump while running ldap_next_reference functions 6912643 add libproxy support to 64-bit libneon 6913465 opensolaris b130 PHP problems with session_start();