Pullup ticket #4393 - requested by ryoon
lang/sun-jdk7: security update
lang/sun-jre7: security update

Revisions pulled up:
- lang/sun-jdk7/distinfo                                        1.15
- lang/sun-jre7/Makefile.common                                 1.6
- lang/sun-jre7/distinfo                                        1.17

---
   Module Name:	pkgsrc
   Committed By:	ryoon
   Date:		Wed Apr 30 23:12:48 UTC 2014

   Modified Files:
   	pkgsrc/lang/sun-jdk7: distinfo
   	pkgsrc/lang/sun-jre7: Makefile.common distinfo

   Log Message:
   Update to 7.0.55

   Changelog:
   JavaFX Release Notes
   JavaFX is now part of JDK. JDK 7u55 release includes JavaFX version 2.2.55.

   New Features and Changes
   The frequency of some security dialogs has been reduced on systems that run the same RIA multiple times.
   See 8029649.

   Using "*" in Caller-Allowable-Codebase Attribute.

   If a stand-alone asterisk (*), or asterisk as part of a top level domain such as (*.org), is specified as the value for the Caller-Allowable-Codebase attribute, then calls from JavaScript code to the RIA will show a security warning. An option to remember the choice is also provided, and if the user selects the option to remember the choice to run the RIA, no further warning messages are shown for the same RIA, when run with JavaScript from the same source.

   For more information, see JAR File Manifest Attributes for Security documentation.

   See 8033707.

   Disabling Sponsor Offers in the Java Installer

   During the installation of Java, users may be presented with the option of downloading and installing sponsor offers, such as browser add-ons, or security software. With 7u55 and later releases of Java, sponsor offers can be bypassed entirely by using "SPONSORS=0" as an option, when installing Java via the command line:

       Manually download the 32bit online installer for 7u55 to your local machine.
       Click the Windows Start Button/Menu. From the available Menu choices, select the 'Search box' and enter the text "command" in it.
       A list of matches will appear. Select  'Command Prompt' from the available Programs list.
       Navigate to the folder containing the downloaded installer, e.g.:
       cd c:\Users\<username>\Downloads
       To start the installation, in the Command Prompt window type:
       jre-7u55-windows-i586-iftw.exe SPONSORS=0

   The option to disable sponsors will persist across all future updates and re-installs of Java.

   Note that sponsor offers, and therefore this functionality, is only applicable to online 32bit JRE installers and Auto Update mechanisms for the Windows operating system.

   Bug Fixes
   Bug Id  	Category 	Sub-Category 	Description
   JDK-7190349 	client-libs 	2d 	[macosx] Text (Label) is incorrectly drawn with a rotated g2d
   JDK-8013569 	client-libs 	2d 	[macosx] JLabel preferred size incorrect on retina displays with non-default font size
   JDK-6571600 	client-libs 	java.awt 	JNI use results in UnsatisfiedLinkError looking for libmawt.so
   JDK-8025588 	client-libs 	java.awt 	[macosx] Frozen AppKit thread in 7u40
   JDK-5049299 	core-libs 	java.lang 	(process) Use posix_spawn, not fork, on S10 to avoid swap exhaustion
   JDK-8020191 	core-libs 	java.lang 	System.getProperty( " os.name " ) returns " Windows NT (unknown) " on Windows 8.1
   JDK-8030822 	core-libs 	java.time 	(tz) Support tzdata2013i
   JDK-8019853 	core-libs 	java.util.logging 	Break logging and AWT circular dependency
   JDK-8026474 	deploy 	deployment_toolkit 	deployJava.js versioncheck doesn't work in IE11
   JDK-8028691 	deploy 	plugin 	loading browser proxy via config script should not trigger JAR download
   JDK-8029649 	deploy 	plugin 	Reduce dialog frequency when app is run multiple times
   JDK-8033705 	deploy 	plugin 	Array out of bounds exception in PluginMain.performSSVValidation
   JDK-8033779 	deploy 	plugin 	JRE 7u51 Plugin Failing to Run Older JRE Version < 1.6.0
   JDK-8029922 	deploy 	webstart 	32-bit only Java Web Start apps fail to run on 32- and 64-bit JRE configs
   JDK-8031579 	deploy 	webstart 	Spurious Missing Manifest Permissions Attribute Warning When Launching versioned Java Web Start app
   JDK-8024830 	hotspot 	compiler 	SEGV in org.apache.lucene.codecs.compressing.CompressingTermVectorsReader.get
   JDK-8035618 	other-libs 	corba:rmi-iiop 	Four api/org_omg/CORBA TCK tests fail under plugin only
Pullup ticket #4394 - requested by wen
www/mediawiki: security update

Revisions pulled up:
- www/mediawiki/Makefile                                        1.39
- www/mediawiki/distinfo                                        1.28

---
   Module Name:    pkgsrc
   Committed By:   wen
   Date:           Thu May  1 16:10:05 UTC 2014

   Modified Files:
           pkgsrc/www/mediawiki: Makefile distinfo

   Log Message:
   Update to 1.22.6

   Upstream changes:
   MediaWiki 1.22.6[edit | edit source]
   This is a security release of the MediaWiki 1.22 branch.

   Changes since 1.22.5[edit | edit source]
   (bug 63251) SECURITY: Escape sortKey in pageInfo.
   MediaWiki 1.22.5[edit | edit source]
   This is a security and maintenance release of the MediaWiki 1.22 branch.

   Changes since 1.22.4[edit | edit source]
   (bug 62497) SECURITY: Add CSRF token on Special:ChangePassword.
   (bug 62467) Set a title for the context during import on the cli.
   Fix custom local MediaWiki:Helppage values.
   mediawiki.js: Fix documentation breakage.
   (bug 58153) Make MySQLi work with non standard port.
   (bug 53887) Reintroduced a link to help pages in the default sidebar,
   that any sysop can customize by editing MediaWiki:Sidebar locally. The
   link now points to a mediawiki.org page which is guaranteed to exist.
   Nothing needs to be done on your end, but remember to adjust
   MediaWiki:Sidebar for the needs of your wikis. Everyone can help with
   the shared documentation by translating:
   https://www.mediawiki.org/wiki/Special:Translate/agg-Help_pages .
   (bug 53888) Corrected a regression in 1.22 which introduced red links
   on the login page. If you previously installed 1.22.x and have created
   a local page to make the red link blue, write its title as in
   MediaWiki:helplogin-url if you didn't already. Otherwise, you don't
   need to do anything, but you can translate the help page at
   https://www.mediawiki.org/wiki/Help:Logging_in
Pullup ticket #4395 - requested by gdt
archivers/libarchive: build fix

Revisions pulled up:
- archivers/libarchive/files/libarchive/archive_read_support_format_iso9660.c 1.5

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Mon Apr  7 18:40:05 UTC 2014

   Modified Files:
           pkgsrc/archivers/libarchive/files/libarchive:
               archive_read_support_format_iso9660.c

   Log Message:
   Non-void function must return a value
Pullup tickets #4393, #4394 and #4395.