1
0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-16 07:58:04 +00:00
Commit Graph

5922 Commits

Author SHA1 Message Date
Jacques Vidrine
28bec85248 Note BMP decoder flaws in Mozilla/Firefox/Thunderbird.
Approved by:	portmgr
2004-09-28 14:31:41 +00:00
Jacques Vidrine
216d6ce8d1 Note stack buffer overflow in Mozilla mail.
Approved by:	portmgr
2004-09-28 14:28:03 +00:00
Jacques Vidrine
311d5d5ef7 Document Mozilla/Firefox/Thunderbird heap buffer overflows.
Approved by:	portmgr
2004-09-28 14:22:34 +00:00
Jacques Vidrine
4a5c4d0cdb Correct the package name for phpMyAdmin.
Reported by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
Approved by:	portmgr
2004-09-28 13:36:53 +00:00
Kris Kennaway
c3bbf8ee3b Correct another typo. :-(
Spotted by:	eik
Approved by:	portmgr (self)
XL pointy hat to: self
2004-09-28 02:07:03 +00:00
Kris Kennaway
c1481d696e Correct typo in previous
Approved by:	portmgr (self)
Pointy hat to:	self
2004-09-28 01:42:41 +00:00
Kris Kennaway
02b58eff4a Now builds on amd64
Approved by:	portmgr (self)
2004-09-27 23:44:03 +00:00
Jacques Vidrine
64a5200854 Add CERT Vulnerability Note references to xpm entry.
Approved by:	portmgr
2004-09-27 15:15:21 +00:00
Jacques Vidrine
49af9c28f0 Note two older vulnerabilities in PHP.
Submitted by:	Jon Passki <cykyc@yahoo.com>
Approved by:	portmgr
2004-09-27 02:57:31 +00:00
Jacques Vidrine
32bd453eb6 Note subversion information disclosure vulnerability.
Submitted by:	lev
Approved by:	portmgr
2004-09-26 18:17:36 +00:00
Jacques Vidrine
d2894c398c Add missing PORTEPOCH in a mozilla entry.
Correct package name in an apache entry.

Reported by:	Dan Langille <dan@langille.org>
Approved by:	portmgr
2004-09-26 18:04:52 +00:00
Kris Kennaway
82f9e5ad55 BROKEN on 5.x: Does not compile
Approved by:    portmgr (self)
2004-09-26 03:11:57 +00:00
Kris Kennaway
ca09d17d22 BROKEN: Does not build
Approved by:	portmgr (self)
2004-09-26 02:52:32 +00:00
Kris Kennaway
149b3e7f85 BROKEN on 5.x: Does not compile
Approved by:    portmgr (self)
2004-09-26 02:43:13 +00:00
Jacques Vidrine
c41b8c1e2b Forgot to add <modified> element for last commit.
Approved by:	portmgr
2004-09-25 00:59:48 +00:00
Jacques Vidrine
9f43a46e43 Add missing PORTEPOCH on one of the mozilla entries.
Noticed by:	Dan Langille <dan@langille.org>
Approved by:	portmgr
2004-09-25 00:58:58 +00:00
Jacques Vidrine
0fb3c87dfe Document vulnerabilities in lha.
Reviewed by:	dinoex
Approved by:	portmgr
2004-09-23 15:07:39 +00:00
Jacques Vidrine
8ed099096a Lately it seems I like to use dashes in topics... but I should at
least be consistent with how many.  s/---/--/

Approved by:	portmgr
2004-09-23 14:16:16 +00:00
Jacques Vidrine
e7c6d5e304 Document mysql buffer overflow.
Reported by:	ale
Approved by:	portmgr
2004-09-23 14:10:58 +00:00
Brian Feldman
a3963f0f8c Update to pam_alreadyloggedin-0.3 to unbreak. There should be no
visible changes.

This work was done by Jeremie Le Hen; thanks!

Submitted by:	Jeremie Le Hen <jeremie@le-hen.org>
Approved by:	portmgr
2004-09-22 17:42:45 +00:00
Jacques Vidrine
458849a587 Document Mozilla security icon spoofing vulnerability.
Approved by:	portmgr
2004-09-22 16:39:58 +00:00
Jacques Vidrine
d1b0ba75fb Document Mozilla vulnerability involving NULL bytes in FTP URLs.
Also, correct s/firebird/firefox/ in a previously documented issue.

Approved by:	portmgr
2004-09-22 16:16:30 +00:00
Jacques Vidrine
dfaa8e2391 Document Mozilla automatic file upload vulnerability.
Approved by:	portmgr
2004-09-22 15:59:56 +00:00
Jacques Vidrine
03eeeb2a99 Document mozilla certificate import denial-of-service vulnerability.
Approved by:	portmgr
2004-09-22 15:44:03 +00:00
Jacques Vidrine
3fbdc7e460 Note a file name disclosure issue in rssh.
Reported by:	leeym
Approved by:	portmgr
2004-09-21 22:04:54 +00:00
Yen-Ming Lee
04a4a7825c - replace "@dirrm ..." with "@unexec rmdir ..."
(p5-IO-INET6 will install files in SITE_PERL/PERL_ARCH/auto/IO/Socket/INET6)

PR:		70640
Submitted by:	leeym
Approved by:	portmgr (marcus)
2004-09-21 17:48:17 +00:00
Jacques Vidrine
14a4d02444 Add entry describe GNU Radius denial-of-service vulnerability.
Approved by:	portmgr
2004-09-20 20:13:11 +00:00
Jacques Vidrine
424b8857eb Add sudoedit vulnerability.
Approved by:	portmgr
2004-09-20 20:06:44 +00:00
Jacques Vidrine
8dba5f120c In latest CVS entry, remove the reference to the exploit. It does
not apply to any of these vulnerabilities, but to the previous CVS
vulnerability (CAN-2004-0396).

Approved by:	portmgr
2004-09-19 23:36:42 +00:00
Jacques Vidrine
9d5b3878ff Oh yeah, add affected FreeBSD versions for CVS issues.
Approved by:	portmgr
2004-09-19 23:32:05 +00:00
Jacques Vidrine
e368c4afbc Update CVS entry with some details.
Approved by:	portmgr
2004-09-19 23:23:49 +00:00
Tom Rhodes
fec8ed41a8 Add an entry for the mod_proxy buffer overflow existant in apache13.
Approved by:	portmgr
2004-09-19 17:38:14 +00:00
Michael Haro
100f75dcb3 Update to 1.6.8p1
Submitted by:	many people
Approved by:	portsmgr (marcus)
2004-09-19 05:31:33 +00:00
Yen-Ming Lee
5a33db37d4 - unbreak this port on 5.x
PR:		71853
Submitted by:	leeym
Approved by:	portmgr (marcus)
2004-09-19 02:09:40 +00:00
Kris Kennaway
fe54d2a7c7 BROKEN on 5.x: Does not compile
Approved by:    portmgr (self)
2004-09-18 17:49:31 +00:00
Jacques Vidrine
9ddf840a99 Note some fixes for XPM image decoding vulnerabilities.
Submitted by:	lesi

Add references to Chris Evans's advisories while I'm at it.

Approved by:	portmgr
2004-09-18 15:42:01 +00:00
Kris Kennaway
3462fa1f72 BROKEN on 5.x: Does not compile
Approved by:    portmgr (self)
2004-09-17 23:02:58 +00:00
Kris Kennaway
9145ddd119 BROKEN: Broken pkg-plist
Approved by:	portmgr (self)
2004-09-17 22:48:49 +00:00
Joe Marcus Clarke
8b4f48243b Update to gdk-pixbuf vulnerability to reflect the fixed version of gtk20.
Approved by:	portmgr( implicit)
2004-09-17 02:12:17 +00:00
Jacques Vidrine
60cc4c9b88 Note that a patched version of webmin 1.150 is now available, thanks
to olengi@.

Submitted by:	olengi

Add a paragraph introducing the Webmin blockquote while I'm here.

Approved by:	portmgr
2004-09-15 19:54:22 +00:00
Jacques Vidrine
c452a8108d Note gdk-pixbuf image decoding issues.
Approved by:	portmgr
2004-09-15 18:05:16 +00:00
Jacques Vidrine
b224c97825 clement@ has patched Apache 2.
Approved by:	portmgr
2004-09-15 17:39:47 +00:00
Jacques Vidrine
7221c06938 Note CUPS printer queue browser denial-of-service.
Approved by:	portmgr
2004-09-15 16:31:55 +00:00
Jacques Vidrine
7c6d4ff4c1 Note Apache 2 IPv6 address parsing bug.
Approved by:	portmgr
2004-09-15 15:57:52 +00:00
Jacques Vidrine
bd41501817 Note new libXpm vulnerabilities.
Approved by:	portmgr
2004-09-15 15:16:36 +00:00
Jacques Vidrine
292bb8eb48 I appear to have deleted a line at the last minute. Restore it.
Approved by:	portmgr
2004-09-15 14:47:35 +00:00
Jacques Vidrine
e72405df64 Add mod_dav denial-of-service issue.
Approved by:	portmgr
2004-09-15 14:45:03 +00:00
Jacques Vidrine
a0b763e198 Oops, forgot to note that the previous issue affects only the Apache 2.x
series.

Approved by:	portmgr
2004-09-15 14:20:52 +00:00
Jacques Vidrine
f31f7c6968 Add Apache 2 vulnerability concerning environmental variables in
configuration files.

Approved by:	portmgr
2004-09-15 14:18:17 +00:00
Jacques Vidrine
4d393363a1 Repair three <freebsdpr> elements. The content of these elements
must be e.g. "ports/46613", not just "46613".

Reported by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
Approved by:	portmgr
2004-09-15 13:52:30 +00:00
Jacques Vidrine
11a0441d5f Note that some versions of OpenOffice have been corrected.
Approved by:	portmgr
2004-09-15 03:03:25 +00:00
Tom Rhodes
b70e547986 Fix botched date entry and correct iDefense URL.
Approved by:	portmgr
2004-09-14 03:38:59 +00:00
Tom Rhodes
10302975e5 Really add Samba 3 vulnerability.
Remove incorrect URL in mpg123 entry.

Approved by:	portmgr
URL noticed:	nectar
2004-09-14 03:19:10 +00:00
Tom Rhodes
e5ae40dcbb Correct version. Note my last commit here was for mpg123 instead of
samba3.

Noticed by:	nectar
Approved by:	portmgr
2004-09-14 03:01:07 +00:00
Jacques Vidrine
b7753bb9ec - There is a WITHOUT_X11 version of ImageMagick that needs to be
taken into account.
- Fix transposed characters in `isakmpd'.

Noticed by:	Dan Langille <dan@langille.org>

- Add CVE name reference for ImageMagick.
- Add webmin temporary file handling issue.
- Add OpenOffice temporary file handling issue.
- Widen the `KDE frame injection' issue to cover Mozilla, Firebird,
  Netscape, and Opera as well
- Add Mozilla/Firebird/Netscape SOAPParameter vulnerability
- Add Mozilla/Thunderbird/Netscape POP client vulnerability

Approved by:	portmgr
2004-09-14 02:21:06 +00:00
Tom Rhodes
0d4514375a Update for recent Samba3 vulnerabilities.
Approved by:	portmgr
2004-09-14 02:02:25 +00:00
Sergei Kolobov
d6383a553b - Update to 1.0.20, fixing GnuTLS certificate chain verification DoS
vulnerability (portaudit ID: 84ab58cf-e4ac-11d8-9b0a-000347a4fa7d),
  described in the following advisories:
  - http://www.hornik.sk/SA/SA-20040802.txt
  - http://secunia.com/advisories/12156

PR:		ports/71502
Submitted by:	Koop Mast <kwm@rainbow-runner.nl>
Approved by:	portmgr (eik, marcus)
2004-09-10 08:15:53 +00:00
Christian Brueffer
488bd7efe4 Typo-fix in a comment
Approved by:	portmgr (krion)
2004-09-09 13:15:25 +00:00
Oliver Eikemeier
c821b0e337 - star-devel: privilege escalation
- multi-gnome-terminal: information leak
- usermin: remote shell command injection and insecure installation
- mpg123: layer 2 decoder buffer overflow

Approved by:	portmgr (implicit)
2004-09-08 21:57:10 +00:00
Oliver Eikemeier
1ea7e0e900 - XSS vulnerability in phpGroupWare wiki module
- add some references

Approved by:	portmgr (implicit)
2004-09-07 10:44:11 +00:00
Tilman Keskinoz
cbe931a9c6 managed to break this just in time for the ports freeze.
Submitted by:   lofi, eik
Approved by:    portmgr (eik)
2004-09-04 06:28:15 +00:00
Oliver Eikemeier
a093965a26 multiple vulnerabilities in LHA 2004-09-03 22:30:35 +00:00
Tilman Keskinoz
b06683882c Nuke the gnupg sigchecking code. There are bugs and I don't have the time
to work on this now.

PR:             66417
Submitted by:   Lupe Christoph <lupe@lupe-christoph.de>
2004-09-03 21:37:40 +00:00
Oliver Eikemeier
903db11a21 grrrr... left the test case intact 2004-09-03 21:36:18 +00:00
Oliver Eikemeier
e8a6142888 - update to version 0.5.9
(first attempts to check the base system for vulnerabilities)
2004-09-03 20:30:54 +00:00
Oliver Eikemeier
3648da397a - add some references
- extend ImageMagick entry
- squid ntlm authentication helper DoS
- multiple vpopmail vulnerabilities
- first attempts to check the base system for vulnerabilities:
  + cvs server code
  + zlib DoS
- BSD license portaudit.xml
2004-09-03 20:27:26 +00:00
Oliver Eikemeier
b56cdf6aa7 Fix build when using ccache
PR:		71343
Submitted by:	Michael Johnson <ahze@ahze.net>
2004-09-03 18:17:29 +00:00
David E. O'Brien
4af4cbed98 Update to 3.23.0. This release of super fixes a potential root exploit:
http://xforce.iss.net/xforce/xfdb/16458

PR:		71328
Submitted by:	Piet Delport <pjd@point45.com>
2004-09-03 17:55:00 +00:00
Volker Stolz
bd9c2e0d46 Add CONFLICTS with openvpn-devel
PR:		ports/71337
Submitted by:	maintainer
2004-09-03 16:17:04 +00:00
Cheng-Lung Sung
9b82b2ec71 - update to 0.19.
Approved by:	vanilla (co-mentor)
2004-09-03 01:26:51 +00:00
Joe Marcus Clarke
484da7d4c1 Implement a "mgrate" facility that lets one migrate/overwrite the LDAP
userPassword field of the user being authenticated.  The PAM and LDAP
usernames must be the same.  This makes "pam_ldap migrate" similar to
"pam_smbpass migrate".  This has been submitted to PADL in
http://bugzilla.padl.com/show_bug.cgi?id=178. [1]

Allow pam_ldap to change user passwords under certain circumstances.  This
has been submitted to PADL in
http://bugzilla.padl.com/show_bug.cgi?id=177. [2]

All of this is documented further at
http://www.iem.pw.edu.pl/~wielebap/ldap/pam_ldap/pam_ldap_doc.pdf.

PR:		71289 [1]
		71287 [2]
Submitted by:	Pawel Wieleba <wielebap@iem.pw.edu.pl>
2004-09-02 19:25:41 +00:00
Peter Pentchev
51f2c79e0a Fix the bus error on startup in -CURRENT and 5.x-BETA. It turns out
that the OpenSSL ENGINE code is, well, somewhat less than stellar,
especially in combo with malloc's 'j' option.  Even without it, though,
there are some problems that I don't have time to look into right now.

So, disable the OpenSSL ENGINE activation on FreeBSD 5.x, unless
the WITH_STUNNEL_SSL_ENGINE knob is turned on.  Also, while I'm here,
fix the CONFIGURE_TARGET so the GNU configure script does not complain
quite so loudly.  Bump PORTREVISION for the functionality change
(well, I guess you could say "not working" -> "working" is a functionality
change ;)
2004-09-02 15:46:15 +00:00
Volker Stolz
c964784809 - Update to 20040826 snapshot
- Fix fetching
- Fix -pthread/-lc_r issue for good
   (courtesy of bsd.autotools.mk, who'd have guessed...)

PR:		ports/71168
Submitted by:	Rob Evers (maintainer), me
2004-09-02 15:24:16 +00:00
Jacques Vidrine
495d7e1142 Adjust the affected version for imlib now that the 2nd instance of BMP
loader has been corrected.
2004-09-02 12:02:29 +00:00
Pav Lucistnik
047ed8a84a - Update to 0.44
PR:		ports/71249
Submitted by:	Luiz Eduardo Roncato Cordeiro <cordeiro@nic.br> (maintainer)
2004-09-02 11:42:23 +00:00
James E. Housley
18a0119f7e Update to DAT 4389 2004-09-01 20:33:43 +00:00
Cy Schubert
cc39dd6cdd Fix MIT krb5 Security Advisory 2004-002: double-free vulnerabilities
in KDC and libraries

Heads-up by:	nectar
2004-09-01 19:55:26 +00:00
Jacques Vidrine
41715309cf The recent commit to the krb5 port brought the version to 1.3.4_1 but
did not correct one of the existing vulnerabilities.  Update the
affected range to compensate.
2004-09-01 17:12:54 +00:00
Cy Schubert
e832541095 Fix MITKRB5-SA-2004-003: ASN.1 decoder denial-of-service.
Heads-up by:	nectar
2004-09-01 15:01:20 +00:00
Cheng-Lung Sung
2505b8d5d9 - update to 0.7
- From ChangeLog
  - Added support for ESMTP [Andreas Steinmetz]
  - Fixed crash when too many connections established
  - Announce ourselves as 'clamsmtp' in EHLO/HELO responses which fixes 'loopback'
    problems with certain versions of Postfix 1.x
  - Better IO performance under heavy load
  - Fixed most warnings when compiled with -Wall
  - Fixed other minor bugs

Approved by:	vanilla (co-mentor)
2004-09-01 07:50:15 +00:00
Jacques Vidrine
89b2700d8f Note recent MIT Kerberos 5 vulnerabilities. 2004-08-31 20:52:16 +00:00
Oliver Eikemeier
effb39360a - update to version 3.70 (birthday edition, try the verbose mode) 2004-08-31 20:41:10 +00:00
Jacques Vidrine
8c4941762e Document imlib2 BMP decoder bug. 2004-08-31 14:55:48 +00:00
Jacques Vidrine
1fe2edf2aa Document BMP decoder bugs in imlib1 and ImageMagick. 2004-08-31 14:34:03 +00:00
Sergey A. Osokin
5faadcb814 Update to 1.2.6.
Utilize DOCSDIR and DATADIR macros.

Approved by:	kuriyama (maintainer)
2004-08-31 10:04:09 +00:00
Joe Marcus Clarke
db28ba066d Update to 1.7.1. 2004-08-31 05:42:05 +00:00
Oliver Eikemeier
bf0beda828 samba printer change notification request DoS 2004-08-30 23:43:44 +00:00
Joe Marcus Clarke
0a9e867ba5 Update to 0.3.3.
PR:		71156
Submitted by:	maintainer
2004-08-30 22:17:06 +00:00
Michael Nottebrock
b4c31bafd8 Update to KDE 3.3 2004-08-30 19:55:42 +00:00
Jacques Vidrine
adbf56f38a Correct bogus date in mysql entry. (It should be YYYY-MM-DD, not
DD-MM-YYYY.)

Reported by:	robert@openbsd.org
2004-08-30 14:23:47 +00:00
Jacques Vidrine
db4d56095d Add more references (particularly CVE names) for issues affecting
SpamAssassin, tnftpd, ruby, mysql.

Place text taken from another source inside <blockquote cite="...">
for ruby issue.
2004-08-30 14:21:49 +00:00
Volker Stolz
f642e63f72 Fix location of pkg-config data.
PR:		ports/69149
Submitted by:	Konstantin Oznobihin
Approved by:	maintainer timeout
2004-08-30 13:07:58 +00:00
Oliver Eikemeier
79af66fae9 correct/add some references 2004-08-30 11:08:58 +00:00
Oliver Eikemeier
41570a3aad add some references, add ru-gaim 2004-08-30 10:58:47 +00:00
Oliver Eikemeier
5f3eb07822 multiple vulnerabilities in gaim 2004-08-30 10:57:42 +00:00
James E. Housley
191abc148e I have been having a problem since the update to use update.ini instead
of readme.txt of flipping between two version of DAT.  'update_dat' now
compares the current value with the new one, before updating.
2004-08-30 10:16:41 +00:00
Oliver Eikemeier
14664616fe security bug in rscsi client code
Submitted by:	marius
2004-08-30 10:07:22 +00:00
Joe Marcus Clarke
96a89f6d9c Update to 2.30.
PR:		71092
Submitted by:	maintainer
2004-08-30 04:32:42 +00:00
Pav Lucistnik
818d69239d - Update to 1.1.7
PR:		ports/71119
Submitted by:	bugghy <bugghy@rootshell.be> (maintainer)
2004-08-29 22:05:48 +00:00
Mark Linimon
ab7b596363 Remove -P option from tar. This patch has already been incorporated
into the upstream sources.

PR:		ports/70806
Submitted by:	SANETO Takanori <sanewo at ba2 dot so-net dot ne dot jp>
2004-08-29 03:43:57 +00:00
Michael Haro
4a12a31aa1 Add opieprint
output postscript with 100 OPIE passwords credit card sized
2004-08-29 00:45:49 +00:00
Mark Linimon
47e6eb7c9d Patch the default installation locations to be FreeBSD-friendly. Bump
portrevision.  Users should take care when upgrading.

PR:		ports/70424
Submitted by:	Jean Milanez Melo <jmelo at freebsdbrasil dot com dot br> (maintainer)
2004-08-28 05:08:45 +00:00
Mark Linimon
f68a79c9c7 Add WWW line. 2004-08-28 02:11:25 +00:00
Jacques Vidrine
8961228139 Document NSS SSLv2 server buffer overflow (already referenced in
portaudit.txt).
2004-08-27 15:29:58 +00:00
Jacques Vidrine
b95b3a3535 Document ripMIME decoding bug (already referenced in portaudit.txt). 2004-08-27 14:43:07 +00:00
Mathieu Arnold
501234ca29 Update to 0.41
PR:		70258
Submitted by:	skv
Approved by:	maintainer timeout
2004-08-27 11:38:20 +00:00
Oliver Eikemeier
4262ad369c Argh. Duplicate entry for "Scorched 3D server chat box format string vulnerabilty" 2004-08-27 10:34:05 +00:00
Oliver Eikemeier
e601056789 Mozilla / NSS S/MIME DoS vulnerability & Scorched 3D server chat box format string vulnerability 2004-08-27 10:31:21 +00:00
Joe Marcus Clarke
a186944a5d Remove <modified/> from the gnomevfs vulnerability since it was the same
as <entry/> and it needed to be last anyway.

Suggested by:	nectar
2004-08-27 04:29:58 +00:00
Joe Marcus Clarke
796712194a Update the gnomevfs entry to reflect the fixed versions. 2004-08-27 01:48:56 +00:00
Tom Rhodes
e019238ccd Add entry for moinmoin ACL bypass. 2004-08-26 22:30:07 +00:00
Jacques Vidrine
975dd4bd17 Note sanitize_path bug in rsync (already referenced in portaudit.txt). 2004-08-26 22:10:50 +00:00
Jacques Vidrine
40c28912b1 Unsafe URI handling in gnome-vfs, MidnightCommander. 2004-08-26 21:12:28 +00:00
Jacques Vidrine
c57e57ac31 Document buffer overflows in SoX (already referenced in portaudit.txt). 2004-08-26 20:34:41 +00:00
Jacques Vidrine
80e7374bc1 Document cookie bug in Konqueror (already referenced in portaudit.txt). 2004-08-26 20:15:22 +00:00
Sergey Matveychuk
43de0f79ec Update to 2.1.1
PR:		ports/70933
Submitted by:	maintainer
2004-08-26 18:52:06 +00:00
Sergey Matveychuk
4739c97485 The tarball was rerolled because of security fix.
PR:		ports/70978
Submitted by:	Omer Faruk Sen <ofsen@enderunix.org>
2004-08-26 18:06:31 +00:00
Pav Lucistnik
0906666c80 - Update to 0.6.6
PR:		ports/70941
Submitted by:	Janos Mohacsi <janos.mohacsi@bsd.hu> (maintainer)
2004-08-26 17:38:18 +00:00
Sergey Matveychuk
921a291ada Add missed file in pkg-plist 2004-08-26 17:08:54 +00:00
Sergey Matveychuk
a304bc69dd Update to 2.1.2
make portlint happy

PR:		ports/70951
Submitted by:	maintainer
2004-08-26 17:07:27 +00:00
Oliver Eikemeier
0cc72c3698 support building nmap-3.59a5 WITH_PRERELEASE=yes 2004-08-26 10:28:04 +00:00
Cheng-Lung Sung
248851deac - Update to 1.4.0
- Change MASTER_SITES
- fixed build error in 5.x (compare to ports/69194)

PR:		ports/70444
Approved by:	vanilla (co-mentor)
2004-08-26 10:07:01 +00:00
Cheng-Lung Sung
8b1f3b3b82 I forgot to change filename, which md5 info is correct for 0.6.
Approved by:	vanilla (co-mentor)
2004-08-26 04:21:05 +00:00
James E. Housley
a2b1992515 Update to DAT 4388 2004-08-25 19:33:52 +00:00
Volker Stolz
daacf0d83b Update to 20040825
PR:		ports/70947
Submitted by:	Tim Bishop (maintainer)
2004-08-25 16:21:41 +00:00
Hiroki Sato
c65c583e56 - Fix "make validate" problem when textproc/xhtml-basic is
installed by adding an SGML declaration and DTDDECL.
- Remove the --catalogs option for xmllint(1) in validate.sh.

Approved by:	nectar (maintainer)
PR:		ports/63035
2004-08-25 15:36:09 +00:00
Jacques Vidrine
e139e5a754 Remove libxine issue which is now documented in the FreeBSD VuXML
document.

Reminded by:	eik
2004-08-25 13:58:01 +00:00
Oliver Eikemeier
45e22ec8a2 update to 3.9.2. Fixes a remote exploitable buffer overflow:
<http://www.freebsd.org/ports/portaudit/207f8ff3-f697-11d8-81b0-000347a4fa7d.html>
2004-08-25 13:46:40 +00:00
Oliver Eikemeier
26458d785a nss library SSL remote buffer overflow 2004-08-25 13:10:29 +00:00
Oliver Eikemeier
bea9f10345 multiple buffer overflows in xv 2004-08-25 11:07:08 +00:00
Cheng-Lung Sung
8cead906a1 - update to 0.6
- Proper adding of customized header
- Fixes to documentation

Approved by:	vanilla (co-mentor)
2004-08-25 08:53:21 +00:00
Sergei Kolobov
c2833d3d91 - Removed now-unneeded patch 2004-08-24 15:37:58 +00:00
Sergei Kolobov
a20036650b - Update to 1.0 2004-08-24 15:35:41 +00:00
Oliver Eikemeier
13a24db696 Konqueror cross-domain cookie injection 2004-08-23 23:28:36 +00:00
Oliver Eikemeier
a744df8d30 handle some duplicates 2004-08-23 23:12:02 +00:00
Tom Rhodes
aada791269 Place port name in the description.
Suggested by:	eik
2004-08-23 19:18:08 +00:00
Oliver Eikemeier
b88b1935d9 fix "too many open files" error when using the -r flag
Noted by:	nectar
2004-08-23 17:39:12 +00:00
Jacques Vidrine
8385a21254 Add libxine vcd URL handling issue. 2004-08-23 16:08:13 +00:00
Jacques Vidrine
a56570d2e2 Add DoS in SpamAssassin. 2004-08-23 14:51:53 +00:00
Jacques Vidrine
2734d1f49c Add <modified> date for previous commit. 2004-08-23 13:06:44 +00:00
Jacques Vidrine
dd9bb9f494 fidogate-ds was also affected by the `write files as news' user''
issue.
2004-08-23 13:05:06 +00:00
Jacques Vidrine
d38f89856b Off-by-one error in courier-imap entry.
Noticed by:	oliver
2004-08-22 23:14:53 +00:00
Jacques Vidrine
b72e854616 Add a more useful reference for the Qt issue. 2004-08-22 22:58:19 +00:00
Jacques Vidrine
f366fc90fd Add Qt heap overflow issue. 2004-08-22 22:56:56 +00:00
Jacques Vidrine
c0435758f1 Add a security issue affected courier-imap when run with certain debug
flags.
2004-08-22 22:39:32 +00:00
Jacques Vidrine
9949a6a300 Add fidogate issue. 2004-08-22 22:28:54 +00:00
Jacques Vidrine
b5eaca8551 Add an issue covering a vulnerability in mysqlhotcopy.
Reported by:	robert@openbsd.org
2004-08-22 22:07:52 +00:00
Jacques Vidrine
e4638f3f8d Cancel a VuXML entry for an Apache vulnerability that does not affect
FreeBSD.

Reminded by:	recent conversations :-)
2004-08-22 21:44:40 +00:00
Tilman Keskinoz
eb479b9cc0 Fix CC, CFLAGS
PR:		70824
Submitted by:	Roman Bogorodskiy <bogorodskiy@inbox.ru>
2004-08-22 17:54:19 +00:00
Kris Kennaway
52be477e29 Revert previous commit, I lost the race with arved who fixed the port.
Pointy hat to:	kris
2004-08-22 15:25:35 +00:00