[pkgsrc/trunk]: pkgsrc/www/privoxy update to 3.0.18

[drochner <drochner%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/0a0206c70c41
branches:  trunk
changeset: 596521:0a0206c70c41
user:      drochner <drochner%pkgsrc.org@localhost>
date:      Wed Dec 07 16:13:51 2011 +0000

description:
update to 3.0.18
many fixes and improvements - see the ChangeLog file
one marked as security relevant:
If the redirect URL contains characters RFC 3986 doesn't permit,
they are (re)encoded. Not doing this makes Privoxy versions from
3.0.5 to 3.0.17 susceptible to HTTP response splitting (CWE-113)
attacks if the +fast-redirects{check-decoded-url} action is used.

diffstat:

 www/privoxy/Makefile         |   4 ++--
 www/privoxy/distinfo         |  12 ++++++------
 www/privoxy/patches/patch-ab |  14 +++++++-------
 www/privoxy/patches/patch-ac |  10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diffs (118 lines):

diff -r b4835ed0148f -r 0a0206c70c41 www/privoxy/Makefile
--- a/www/privoxy/Makefile      Wed Dec 07 16:13:18 2011 +0000
+++ b/www/privoxy/Makefile      Wed Dec 07 16:13:51 2011 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.44 2011/04/26 21:23:26 mjl Exp $
+# $NetBSD: Makefile,v 1.45 2011/12/07 16:13:51 drochner Exp $
 #
 
 DISTNAME=      ${PKGNAME_NOREV}-stable-src
-PKGNAME=       privoxy-3.0.17
+PKGNAME=       privoxy-3.0.18
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=ijbswa/}
 
diff -r b4835ed0148f -r 0a0206c70c41 www/privoxy/distinfo
--- a/www/privoxy/distinfo      Wed Dec 07 16:13:18 2011 +0000
+++ b/www/privoxy/distinfo      Wed Dec 07 16:13:51 2011 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.17 2011/05/05 16:54:55 gdt Exp $
+$NetBSD: distinfo,v 1.18 2011/12/07 16:13:51 drochner Exp $
 
-SHA1 (privoxy-3.0.17-stable-src.tar.gz) = cadef2eb8ec182278e092322d3d56f225cb69c93
-RMD160 (privoxy-3.0.17-stable-src.tar.gz) = 8e4acc60ca7e7be20a92e1aece92eecedd4d1997
-Size (privoxy-3.0.17-stable-src.tar.gz) = 1670102 bytes
+SHA1 (privoxy-3.0.18-stable-src.tar.gz) = ffc797c478f8acac4e4894f4a9cb8a400c87c67c
+RMD160 (privoxy-3.0.18-stable-src.tar.gz) = 5c5e5ac43b5b4e746ee0df0c9794bbfaa426d5f8
+Size (privoxy-3.0.18-stable-src.tar.gz) = 1720020 bytes
 SHA1 (patch-aa) = c263d2a4b9522a33613f82ab2bc18d5c2b554b21
-SHA1 (patch-ab) = ad56c9dfee23fc29c1422292c30b386e742befe4
-SHA1 (patch-ac) = e39ffe694462b952c5ad66ac577a0acbee0a1d9f
+SHA1 (patch-ab) = 6ab77caae5e6ac2b67c4c795af38db4da1310c61
+SHA1 (patch-ac) = 6b0f5c2b32108cf4366a9f7feaad8a5be634e2e9
 SHA1 (patch-ag) = 631b73e17d2f825ae6c2fa2d832db98e166030ba
diff -r b4835ed0148f -r 0a0206c70c41 www/privoxy/patches/patch-ab
--- a/www/privoxy/patches/patch-ab      Wed Dec 07 16:13:18 2011 +0000
+++ b/www/privoxy/patches/patch-ab      Wed Dec 07 16:13:51 2011 +0000
@@ -1,4 +1,4 @@
-$NetBSD: patch-ab,v 1.7 2011/05/05 16:54:55 gdt Exp $
+$NetBSD: patch-ab,v 1.8 2011/12/07 16:13:51 drochner Exp $
 
 Multiple changes.
 
@@ -15,9 +15,9 @@
    Not pushed upstream; it's not clear that upstream supports DESTDIR
    at all.
 
---- GNUmakefile.in.orig        2010-02-20 12:53:30.000000000 +0000
+--- GNUmakefile.in.orig        2011-09-06 18:45:28.000000000 +0000
 +++ GNUmakefile.in
-@@ -85,7 +85,7 @@ INSTALL    = @INSTALL@
+@@ -86,7 +86,7 @@ INSTALL    = @INSTALL@
  # Binaries
  BIN_MODE       = 0755
  # Support files, docs, etc.
@@ -26,7 +26,7 @@
  # Directory
  DIR_MODE   = 0755
  # Files daemon writes to.
-@@ -788,16 +788,6 @@ install-strip:
+@@ -808,16 +808,6 @@ install-strip:
  # Perhaps the whole user/group validation should be done here, and simplified.
  PROGRAM_V = Privoxy $(VERSION) $(CODE_STATUS)
  install: CONF_DEST LOG_DEST PID_DEST check_doc GROUP_T
@@ -34,7 +34,7 @@
 -      @if [ -n "$(USER)" ]; then \
 -              $(ID) $(USER) >/dev/null || exit 1;\
 -      fi
--      @# Test for valid group. FIXME. USER does not have to belong to GROUP 
+-      @# Test for valid group. FIXME. USER does not have to belong to GROUP
 -      @# for file ownership purposes.
 -#     if [ -n "$(GROUP_T)" ] && [ -n "$(USER)" ] && ! $(GROUPS) $(USER) | $(GREP) "\<$(GROUP_T)\>" >/dev/null; then \
 -#             $(ECHO) Group $(GROUP_T) for User $(USER) is invalid && exit 1 ;\
@@ -43,7 +43,7 @@
        @$(ECHO) "Creating directories, and preparing $(PROGRAM_V) installation"
        $(CHMOD) $(DIR_MODE) $(MKDIR)
        @$(MKDIR) $(DESTDIR)$(SBIN_DEST) $(DESTDIR)$(prefix) $(DESTDIR)$(CONF_DEST) \
-@@ -865,48 +855,13 @@ install: CONF_DEST LOG_DEST PID_DEST che
+@@ -885,48 +875,13 @@ install: CONF_DEST LOG_DEST PID_DEST che
                $(INSTALL) $(INSTALL_T) $$i $(DESTDIR)$(CONF_DEST)/templates ;\
        done
  
@@ -93,7 +93,7 @@
                        $(ECHO) Installing $$i as $$i.new ;\
                        $(INSTALL) $$INSTALL_CONF $$i $(DESTDIR)$(CONF_DEST)/$$i.new || exit 1;\
                        NEW=1;\
-@@ -918,36 +873,6 @@ install: CONF_DEST LOG_DEST PID_DEST che
+@@ -938,36 +893,6 @@ install: CONF_DEST LOG_DEST PID_DEST che
                $(CHMOD) $(RWD_MODE) $(DESTDIR)$(CONF_DEST)/*.new || exit 1 ;\
                $(ECHO) "Warning: Older config files are preserved. Check new versions for changes!" ;\
        fi ;\
diff -r b4835ed0148f -r 0a0206c70c41 www/privoxy/patches/patch-ac
--- a/www/privoxy/patches/patch-ac      Wed Dec 07 16:13:18 2011 +0000
+++ b/www/privoxy/patches/patch-ac      Wed Dec 07 16:13:51 2011 +0000
@@ -1,8 +1,8 @@
-$NetBSD: patch-ac,v 1.1 2004/09/24 14:08:36 tv Exp $
+$NetBSD: patch-ac,v 1.2 2011/12/07 16:13:51 drochner Exp $
 
---- configure.in.orig  2004-01-30 04:26:03.000000000 -0500
+--- configure.in.orig  2011-11-13 16:53:45.000000000 +0000
 +++ configure.in
-@@ -563,29 +563,12 @@ if test "$EMXOS2" = yes; then
+@@ -164,29 +164,12 @@ if test "$EMXOS2" = yes; then
  
  else
  
@@ -32,10 +32,10 @@
          ],
          [
            if test $ID = no ; then
-@@ -602,27 +585,8 @@ else
+@@ -203,27 +186,8 @@ else
    AC_ARG_WITH(group,
          [  --with-group=privoxy         Set group for privoxy],
-         [ 
+         [
 -                if test "x$withval" != "xyes"; then
 -                  if test $BGROUPS = no ; then
 -                    AC_MSG_ERROR(There is no 'groups' program on this system)