1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-14 03:10:47 +00:00
Commit Graph

12351 Commits

Author SHA1 Message Date
Thomas Abthorpe
3ad800ee34 - Document apache -- Cross-site scripting vulnerability 2009-03-11 20:17:10 +00:00
Dennis Herrmann
f62d63aa2d - Update to 0.95
PR:	132501
Submitted by:	Alex Povolotsky <tarkhil@over.ru>
Approved by:	miwi (mentor)
2009-03-11 17:02:50 +00:00
Alex Dupre
467a455c8f Update to 0.11.7 release. 2009-03-10 11:55:54 +00:00
Martin Wilke
c041c07d22 SSH key-based authentication is tried-and-true, but it lacks a true
Public Key Infrastructure for key certification, revocation and
expiration.  Monkeysphere is a framework that uses the OpenPGP web of
trust for these PKI functions.  It can be used in both directions: for
users to get validated host keys, and for hosts to authenticate users.

WWW: http://web.monkeysphere.info/

PR:		ports/128406
Submitted by:	Daniel Kahn Gillmor <dkg at fifthhorseman.net>
2009-03-10 07:45:27 +00:00
Martin Wilke
4590ff95ef - Reset farrokhi@freebsd.org due to long period of inactivity.
Approved by:	portmgr (linimon)
2009-03-09 19:29:12 +00:00
Martin Wilke
9ec3f9e8e8 - Update to 1.3.4
- Take over maintainership
2009-03-09 18:01:32 +00:00
Stanislav Sedov
f5d05ea54d - Chase libusb20 rename in r189585.
- Mark sane-backends broken on current due to changes
  in USB stack.

Reviewed by:	thompsa (old version), miwi
Tested by:	miwi
2009-03-09 17:15:43 +00:00
Renato Botelho
c9a5174035 - Update to 20090309 2009-03-09 13:50:48 +00:00
Alex Dupre
0efe789c17 Update to 1.07 release. 2009-03-09 07:37:45 +00:00
Cy Schubert
de99785189 This file has been renamed to patch-install::install.cfg through a
repocopy.
2009-03-09 05:16:05 +00:00
Max Brazhnikov
4ac1397e9e Update KDE to 4.2.1.
multimedia/phonon port has been split into phonon itself, phonon-xine
and phono-gstreamer backends. After updating phonon port you have
to install at least one backend. phonon-xine backend is recommended
for KDE.
2009-03-09 00:55:48 +00:00
Gabor Pali
d467bfe788 - Update to 0.0.0.4
Approved by:	tabthorpe
2009-03-06 19:50:25 +00:00
Johan van Selst
ec2d095bd0 - Update bison to 2.4.1, see announcements for important changes:
http://lists.gnu.org/archive/html/bug-bison/2008-11/msg00000.html
  http://lists.gnu.org/archive/html/bug-bison/2008-12/msg00000.html
- Take over bison maintainership - as approved by portmgr (marcus)
- Add patches for ports to compile with new bison:
  Replace %{ .. %} with %code { .. } where required
  and accommodate stricter typing requirements
Thanks to pav for an exp-run on pointyhat

PR:		ports/131640
Approved by:	portmgr (pav)
2009-03-06 12:04:11 +00:00
Alex Dupre
c99d0d7337 Update to 5.2.9 release and re-add pcre extension. 2009-03-06 10:08:35 +00:00
Mario Sergio Fujikawa Ferreira
aeeae17fd6 - psyco only works on i386: make support conditional on that.
- Actually RUN_DEPENDS on devel/py-psyco if we are on the proper
  ARCH.
2009-03-06 02:14:30 +00:00
Mario Sergio Fujikawa Ferreira
86ec42a418 - Add PSYCO option to enable devel/py-psyco optimization support
- Be conservative and use psyco.profile() instead of psyco.full()
2009-03-06 00:55:59 +00:00
Dmitry Marakasov
fa8fe25c56 - Document pngcrush -- libpng Uninitialised Pointer Arrays Vulnerability
Reviewed by:	tabthorpe
2009-03-05 00:35:07 +00:00
David Thiel
328de440ef Update to 2.5.4, a security bugfix release. This resolves a problem
where an unauthorized client could download configuration and database
files from the server.

Full changes since 2.5.2:

 - email logging has been rewritten for enhanced functionality. It's
   now possible to filter messages different for each recipient, and
   regular expressions can be used now for filtering

 - new option SetMailPort allows to set a custom SMTP port

 - in the configuration file, option values can now be set by evaluating
   shell commands: Key = $( command )

 - PortCheckInterface now allows a list as value

 - new option SetConnectionTimeout allows to configure the client/server
   connection timeout

 - new option SetThrottle allows to configure throughput throttling for
   the database download to the client
2009-03-04 22:47:27 +00:00
Pav Lucistnik
88f0513cf1 - Mark BROKEN: unsatisfiable dependency
Reported by:	pointyhat
2009-03-04 18:43:01 +00:00
Mathieu Arnold
e148d75be8 Update to 0.005 2009-03-04 17:36:12 +00:00
Peter Pentchev
bbc81a3bc4 Document the cURL redirection security bypass - CVE-2009-0037.
I'll update the ftp/curl port itself ASAP.

PR:		132299
Reported by:	Mark Foster <mark@foster.cc> (the PR),
		Daniel Bond <db@danielbond.org> (e-mail)
2009-03-04 15:30:27 +00:00
Jun Kuriyama
6cc6fe0d88 Upgrade to 2.0.11 (minor fixes). 2009-03-04 14:27:11 +00:00
Renato Botelho
2ba0554cf6 - Update to 20090304 2009-03-04 12:09:30 +00:00
Christian S.J. Peron
52af32c4e3 Add rc file for termlog.
PR:		129571
Submitted by:	Alex Keda
Approved by:	wxs
2009-03-03 14:53:31 +00:00
Joe Marcus Clarke
0b0ebb3eaa Make the HKP interface mandatory.
PR:		130503
2009-03-03 04:05:46 +00:00
Martin Wilke
921d171a35 - Remove a typo 2009-03-02 20:00:17 +00:00
Martin Wilke
45ba55420e - Fix build with OpenSSL from ports
PR:		132097
Submitted by:	Matt Dawson <matt@chronos.org.uk>
Thanks to:	dinoex@
2009-03-02 18:55:39 +00:00
Renato Botelho
737682e54c - Update to 20090302 2009-03-02 11:31:02 +00:00
Roman Bogorodskiy
70945c220e Uodate to 2.7.6. 2009-03-01 18:15:52 +00:00
Mark Linimon
f19d54a496 Attempt to fix port after usb2 import.
Submitted by:	ed
2009-03-01 00:37:19 +00:00
Marcelo Araujo
97e4f50b50 - Update to 0.0.25.
- Update MASTER_SITES.

Reported by:	miwi (portscout)
2009-02-27 22:07:51 +00:00
Marcelo Araujo
702f52b2a5 - Update MASTER_SITES.
- Take maintainership.
2009-02-27 22:06:35 +00:00
Thomas Abthorpe
c5fdb9237c - Pass maintainership to submitter
Submitted by:	Sofian Brabez via private email
2009-02-27 20:45:20 +00:00
Martin Wilke
d24dd7a392 - Update to 1.4.0
PR:		131945
Submitted by:	Petr Rehor <prehor@gmail.com> (maintainer)
2009-02-27 12:45:09 +00:00
Johan van Selst
b97b749e21 - Update to 1.1.2
- Add keyanalyze scripts
2009-02-26 19:10:22 +00:00
Mathieu Arnold
15ff46dc0f Update to 1.23 2009-02-26 13:57:17 +00:00
Cy Schubert
05c8385dc5 Remove extraneous file from upgrade.
PR:		132118
2009-02-26 13:23:43 +00:00
Renato Botelho
259eb0de22 - Update to 20090226 to align witth 0.95rc1
- Remove USE_GMAKE, it's not needed
- Remove libgmp dependency, it's using libtommath instead
- Some cosmetic changes to align with clamav port and pacify portlint
- libs version bumped .5 -> .6, it'll fail as dependency of some ports for now
2009-02-26 12:50:39 +00:00
Renato Botelho
7089b30c68 - Update to 0.4.3
PR:		ports/132063
Submitted by:	maintainer
2009-02-25 14:55:39 +00:00
Gabor Kovesdan
7cfccf3344 - Fix config file path
- Fix reload target in the rc script
- Bump PORTREVISION

Reported by:	Florian Smeets <flo@kasimir.com>,
		Arjo Hooimeijer <arjo.hooimeijer@xs4all.nl>,
		Michael Scheidell <scheidell@secnap.net>
2009-02-24 15:36:43 +00:00
Sergey Skvortsov
54bc7f8f3f Don't use PERL_VER (it will be deleted soon), use PERL_VERSION instead. 2009-02-24 13:31:53 +00:00
Tim Bishop
9ca855365f Mark broken for now - this version is no longer receiving updates. The
port needs updating, but in the mean time best not to let people think
this version is OK to use.
2009-02-24 12:23:15 +00:00
Sergey Skvortsov
b489dbc274 Add missing dependency on p5-MIME-Base64. 2009-02-24 09:20:37 +00:00
Joe Marcus Clarke
3262b5369b Bump the modified date for the previous Firefox change.
Requested by:	miwi
2009-02-23 20:48:17 +00:00
Joe Marcus Clarke
7cf62abcff Correct the Firefox 2.0 version for the recent Firefox vulnerabilities. 2009-02-23 20:41:47 +00:00
Martin Matuska
24bf28eff1 - Change default Tcl/Tk version to 8.5
- Bump PORTVERSION of ports affected

Tested by:	pointyhat (pav)
2009-02-23 14:46:37 +00:00
Renato Botelho
94718789e8 - Update to 20090223 2009-02-23 13:24:00 +00:00
Dirk Meyer
5269bfb809 - fix shared lib path
Force libssl.so to loads the match libcrypto.so.
The old fix was not working with 0.9.7

This should help ports linking to openssl from ports in FreeBSD 7.1 and above.
2009-02-23 13:03:10 +00:00
Dirk Meyer
c8a2a27107 - cleanup beta 2009-02-23 12:58:23 +00:00
Gabor Kovesdan
f7269e7194 - Update to 0.10
PR:		ports/131928
Submitted by:	Edmondas Girkantas <eg@fbsd.lt>
2009-02-23 11:54:14 +00:00
Gabor Kovesdan
54139a71e7 - Fix SQL logging problem [1]
- Remove old dependency [1]
- Add a warning when memdisk is used, because it is unsafe [2]
- Fix on Perl 5.8.9 [3]
- Bump PORTREVISION

PR:		ports/130835 [1], ports/131633 [2]
Submitted by:	Michael Scheidell <scheidell@secnap.net> [1][2]
2009-02-23 11:53:09 +00:00
Munechika SUMIKAWA
81e2940bcc Fix rcf_get_remotebyaddr() condition.
This fixes not worked simultaneously ikev1 and ikev2.

From:		Dmitry <dmitry2006@yandex.ru>
PR:		ports/131976
Obtained from:	http://www.racoon2.wide.ad.jp/cvsweb/racoon2/lib/cfsetup.c.diff?r1=1.102&r2=1.103
2009-02-23 03:16:29 +00:00
Marcus Alves Grando
1060ab3514 - Add CVE entries for last lighttpd security issue.
Reported by:	Eygene Ryabinkin <rea-fbsd___codelabs.ru>
2009-02-23 00:53:22 +00:00
Cy Schubert
42de3a6f7c Update 2.4.0.1 --> 2.4.1.2 2009-02-21 00:16:16 +00:00
Martin Wilke
d0d8a780e9 - Update to 4.10
PR:		131834
Submitted by:	Ports Fury
2009-02-21 00:10:00 +00:00
Doug Barton
84209c8d7f Update to version 1.1.8. Submitter takes over maintainership.
PR:		ports/131108
Submitted by:	Jason E. Hale <bsdkaffee@gmail.com>
2009-02-20 22:51:49 +00:00
Renato Botelho
fef9a301e7 - Update to 20090220 2009-02-20 14:16:24 +00:00
Renato Botelho
c7fe4923f2 - Update to 20090219 2009-02-19 12:49:21 +00:00
Dmitry Marakasov
961c9eef2f - Chase security/libprelude shlib version bump
PR:		131286, 131585 (partial)
Submitted by:	Vladimir Korkodinov <viper at perm dot raid dot ru>
2009-02-18 23:39:00 +00:00
Dmitry Marakasov
cf4bfa7c04 - Update to 0.9.14.2
PR:		131288
Submitted by:	Vladimir Korkodinov <viper at perm dot raid dot ru>
Approved by:	Robin Gruyters <r dot gruyters at snow dot nl> (maintainer)
2009-02-18 23:36:28 +00:00
Dmitry Marakasov
e5b51fd3ed - Update to 0.9.14
PR:		131287
Submitted by:	Vladimir Korkodinov <viper at perm dot raid dot ru>
Approved by:	Robin Gruyters <r dot gruyters at snow dot nl> (maintainer)
2009-02-18 23:36:25 +00:00
Dmitry Marakasov
8eb12c2455 - Update to 0.9.21.2
PR:		131286
Submitted by:	Vladimir Korkodinov <viper at perm dot raid dot ru>
Approved by:	Robin Gruyters <r dot gruyters at snow dot nl> (maintainer)
2009-02-18 23:36:22 +00:00
Greg Larkin
549cd8c770 - Update to 1.7.5
- Added UPDATING entry about incompatibility between 1.7.4 and 1.7.5
- Added vuln.xml entry for local file inclusion vulnerability in <1.7.5
- Added maintainer mode target in ZF Makefile to speed up fixups of
  pkg-plist output from genplist

Security:	cf495fd4-fdcd-11dd-9a86-0050568452ac
Security:	http://framework.zend.com/issues/browse/ZF-5748
Security:	http://weierophinney.net/matthew/archives/206-Zend-Framework-1.7.5-Released-Important-Note-Regarding-Zend_View.html
2009-02-18 18:06:37 +00:00
Renato Botelho
8fcc043b78 - Fix instalation of clamav-milter.conf when MILTER option is disabled
- Bump PORTREVISION

Reported by:	QAT
2009-02-18 12:52:33 +00:00
Renato Botelho
1e933b6086 - Update to 20090218
- All clamav-milter command line parameters were moved to clamav-milter.conf,
  modify startup script acordingly
- Remove pidfile from clamd startup script since this can be changed in
  clamav-clamd.conf
2009-02-18 11:41:57 +00:00
Philippe Audeoud
aae2119c20 - Document dia -- remote command execution vulnerability
Reviewed by:	miwi
2009-02-17 21:10:46 +00:00
Stefan Walter
46b5629991 Chase master site/project homepage.
Noticed by:	pav/pointyhat
2009-02-16 10:45:44 +00:00
Martin Wilke
94ffbbfaac - Fix ARC2 Buffer Overflow
- Bump PORTREVISION

Obtained from:	pycrypto git
Security:	http://www.vuxml.org/freebsd/5a021595-fba9-11dd-86f3-0030843d3802.html
2009-02-15 21:51:27 +00:00
Martin Wilke
5a76589457 - Document pycrypto -- ARC2 module buffer overflow
PR:		based on 131689
Submitted by:	Mark Foster <mark@foster.cc>
2009-02-15 21:45:24 +00:00
Joe Marcus Clarke
8a59b410de Update the latest firefox vulnerability ranges. 2009-02-15 18:23:19 +00:00
Dirk Meyer
0a78365e08 - add LICENSE: 2009-02-15 16:44:55 +00:00
Stanislav Sedov
62e183d1db - Fix pkg-plist.
- Ensure correct permissions on installed files.
- Set maintainer to ruby@.
2009-02-15 14:19:31 +00:00
Jun Kuriyama
62afe5b355 Minor whitespace nits. 2009-02-15 13:29:57 +00:00
Martin Wilke
62a2e96d35 - Update previous entry
* remove duplicate bid entry
   * add more referens
   * fix whitespaces
2009-02-15 13:08:19 +00:00
Dag-Erling Smørgrav
ff2d9848e9 Document Varnish 2.0 DoS.
PR:		ports/131690
Submitted by:	Mark Foster <mark@foster.cc>
2009-02-15 11:06:47 +00:00
Martin Wilke
07bce0b646 - Fix category after repocopy 2009-02-14 23:32:14 +00:00
Martin Wilke
e7a6e4981b - Connect security/py-pyclamd to the build 2009-02-14 23:31:21 +00:00
Martin Wilke
d41a2604eb - Fix fetch
Reported by:	pavbot
2009-02-14 22:41:32 +00:00
Sergey Skvortsov
8ad56e9eba Update to 0.3.4
Changes:	http://www.keepassx.org/changelog
PR:		ports/131383
Submitted by:	pgollucci
2009-02-14 22:39:33 +00:00
Martin Wilke
977b0fd4d5 - Updae to 0.3.2
- Switch to RUBYGEM_AUTOPLIST

PR:		131639
Submitted by:	Daniel Roethlisberger <daniel@roe.ch> (maintainer)
2009-02-14 19:15:30 +00:00
Stanislav Sedov
bf22ae96a7 - Fix plist after ruby update by generating it dynamically. 2009-02-14 01:11:37 +00:00
Gabor Kovesdan
a6ec929c8d HotSSH is an interface to Secure Shell, for GNOME and OpenSSH. It
intends to be a better experience than simply invoking "ssh" from an
existing terminal window.

   * Fast search-based interface for new connections
   * Also display and search of local (Avahi) SSH servers
   * Tabbed display with automatic session saving (Firefox style)
   * Status bar with information like latency to server and output of
     remote uptime
   * Close integration with OpenSSH features like connection sharing
     (near-instant new tabs)
   * NetworkManager integration to easily reconnect after a network
     change, great for laptops

WWW:	http://projects.gnome.org/hotssh/

PR:		ports/131133
Submitted by:	Ashish Shukla <wahjava at gmail.com>
2009-02-13 23:36:51 +00:00
Brooks Davis
7b81defd3b Upgrade to 1.4.3 which fixes all of the bugs I had patched around and more.
Prodded by:	Michael <postmaster at softsearch dot ru> (ages ago),
		portscout (via miwi)
2009-02-13 20:11:13 +00:00
Martin Wilke
18a92d6728 - Update to 0.2.0.34
PR:		131546
Submitted by:	bf <bf2006a@yahoo.com>
Security:	http://www.vuxml.org/freebsd/78f5606b-f9d1-11dd-b79c-0030843d3802.html
2009-02-13 14:41:30 +00:00
Martin Wilke
875e3ae77b - Updating to 0.2.1.12-alpha
PR:		131545
Submitted by:	bf <bf2006a@yahoo.com>
Approved by:	maintainer
Security:	http://www.vuxml.org/freebsd/78f5606b-f9d1-11dd-b79c-0030843d3802.html
2009-02-13 14:40:20 +00:00
Martin Wilke
e1bd1d93f0 - Document tor -- multiple vulnerabilites 2009-02-13 13:30:03 +00:00
Thomas Abthorpe
52098b4541 - Pass maintainership to submitter
Submitted by:	Daniel Roe via freebsd-ports@
2009-02-13 01:59:49 +00:00
Thomas Abthorpe
3db54de6b1 - Pass maintainership to submitter
Submitted by:	Glen Barber via freebsd-ports@
2009-02-13 01:49:12 +00:00
Martin Wilke
cc5531a88c - Update to 1.0.0 2009-02-12 22:30:49 +00:00
Roman Bogorodskiy
e8c2d39c09 Update to 2.7.5. 2009-02-12 18:50:48 +00:00
Roman Bogorodskiy
31ee2f68d5 Update to 2.6.4. 2009-02-12 18:47:25 +00:00
Martin Wilke
dde88a4d42 - Fix portaudit conflict with www/firefox and www/firefox3
- Mark www/firefox and www/linux-firefox FORBIDDEN

Discussion by:	simon/stas
With hat:	secteam
2009-02-11 19:15:07 +00:00
Martin Wilke
db7144e84d - Fix latest firefox entry 2009-02-11 16:52:36 +00:00
Martin Wilke
e87bb59e51 - Document firefox -- multiple vulnerabilities 2009-02-11 14:37:26 +00:00
Greg Larkin
3829910cac - document codeigniter -- arbitrary script execution in the new
Form Validationclass
2009-02-11 14:15:25 +00:00
Philippe Audeoud
b732b885ec - Document pyblosxom -- atom flavor multiple XML injection vulnerabilities
Reviewed by:	miwi
2009-02-11 13:36:14 +00:00
Martin Wilke
a5ffde8a8b - Document typo3 -- cross-site scripting and information disclosure 2009-02-11 10:15:25 +00:00
Maxim Sobolev
06fa2159e3 Fix an issue in the py-openssl package that can lead to
interpreter crash with the following error message:

Fatal Python error: ceval: tstate mix-up
Abort trap: 6 (core dumped)

Detailed explanation and analysis can be found here:

https://sourceforge.net/tracker2/?func=detail&aid=2543118&group_id=31249&atid=401760

Bump PORTREVISION.

Approved by:	MAINTAINER
2009-02-11 01:52:18 +00:00
Martin Wilke
b10bcbd712 - Update latest squid* entry
Add CVE-2009-0478

Submitted by:	jadawin
2009-02-10 20:53:22 +00:00
David Thiel
b125f259b2 Update to 1.5. 2009-02-10 16:36:55 +00:00