aboutsummaryrefslogtreecommitdiff
path: root/security
Commit message (Collapse)AuthorAgeFilesLines
* Even if opensc 0.12.x will drop signer plugin, update it to use libassuan2.Alex Dupre2010-06-282-2/+104
| | | | | | | | | PR: ports/148164 Submitted by: lioux Feature safe: yes Notes: svn path=/head/; revision=257094
* - Document moodle -- multiple vulnerabilitiesWen Heping2010-06-281-0/+24
| | | | | | | | Reviewed by: delphij@, miwi@ Feature safe: yes Notes: svn path=/head/; revision=257084
* Document mDNSResponder -- corrupted stack crash when parsing bad resolv.confRene Ladan2010-06-271-0/+31
| | | | | | | | | | | | | This only happens on a system where one has a system where resolv.conf is writable by an untrusted user or where mdnsd is setuid and can be tricked into opening an alternate resolv.conf. PR: ports/147007 Submitted by: jmallett@ Approved by: tabthorpe (mentor) Feature safe: yes Notes: svn path=/head/; revision=257077
* Bump PORTREVISION for latest gettext update. (I'm not sure anyone still needsStefan Walter2010-06-271-0/+1
| | | | | | | | | | | | it, but it doesn't really hurt, either.) PR: 147295 Submitted by: Grzegorz Blach <magik@roorback.net> Approved by: maintainer timeout (>3 weeks) Feature safe: yes Notes: svn path=/head/; revision=257062
* - The EOL was announced in 2006 and has a lot of security issues.Marcelo Araujo2010-06-2622-687/+0
| | | | | | | Feature safe: yes Notes: svn path=/head/; revision=257031
* Document opera -- Data URIs can be used to allow cross-site scripting.Shaun Amott2010-06-251-0/+33
| | | | | | | | | | Assume opera-devel is vulnerable too, although snapshots aren't mentioned in the advisory, and it's months out of date. Feature safe: yes Notes: svn path=/head/; revision=256993
* Update to 5.2j.Xin LI2010-06-253-6/+6
| | | | | | | | | Submitted by: Gerard Seibert <gerard seibercom net> (maintainer) PR: ports/147840 Feature safe: yes Notes: svn path=/head/; revision=256965
* Fix race condition in sqlite3 backend (Bug#564011).Alex Dupre2010-06-252-5/+98
| | | | | | | | Approved by: mezz Feature safe: yes Notes: svn path=/head/; revision=256957
* Respect the LOCALBASE in a patch to find sqlite3 correct.Jeremy Messenger2010-06-241-1/+1
| | | | | | | | | PR: ports/146197 Submitted by: Anonymous <swell.k@gmail.com> Feature safe: yes Notes: svn path=/head/; revision=256919
* Update to 20100624Renato Botelho2010-06-242-5/+6
| | | | | | | Feature safe: yes Notes: svn path=/head/; revision=256916
* - Cancelled movemail symlink vulnerability (doesnt affect our ports)Niels Heinen2010-06-241-61/+36
| | | | | | | | | | | - Added entry for multiple vulnerabilities in cacti 0.8.7f - Updated ziproxy entry to satisfy "make tidy" Approved by: itetcu (mentor, implicit) Feature safe: yes Notes: svn path=/head/; revision=256907
* Updated to version 1.41bNiels Heinen2010-06-242-4/+4
| | | | | | | | Approved by: itetcu (mentor, implicit), maintainer (implicit) Feature safe: yes Notes: svn path=/head/; revision=256903
* RF -> RG Conversion (Part II)Philip M. Gollucci2010-06-231-1/+1
| | | | | | | | | | | | | PR: ports/147844 Submitted by: pgollucci (myself) Reviewed by: portmgr (flz) Discussed with: portmgr (pav) Tested by: make checksum Feature safe: yes Notes: svn path=/head/; revision=256881
* - Document mozilla -- multiple vulnerabilitiesBeat Gaetzi2010-06-231-0/+66
| | | | | | | | Feature safe: yes Approved by: delphij Notes: svn path=/head/; revision=256868
* Update to 3.28.David Thiel2010-06-222-5/+4
| | | | | | | | | PR: ports/148008 Submitted by: ehaupt@ Feature safe: yes Notes: svn path=/head/; revision=256846
* - Update security/gpgme to version 1.3.0.Doug Barton2010-06-227-77/+521
| | | | | | | | | | | | | | | | | | | | | | - No shlib bump. - This version works with libassuan 2.x and is needed to fix the build of security/gpa due to dependency conflicts. - Add LICENSE PR: ports/148061 - Fix the build of security/gpa with libassuan 2.x - Patch for server.c taken from gpa svn. - Add LICENSE while here. PR: ports/148062 Submitted by: Jason E. Hale <bsdkaffee@gmail.com> (maintainer) Feature safe: yes Notes: svn path=/head/; revision=256845
* - Update to version 3.3.1, now with Qt4 GUI instead of Gtk+2!Alexey Dokuchaev2010-06-225-76/+40
| | | | | | | | | | | | | - Introduce OPTIONS (enable GUI, but disable graph rendering since `x11-toolkits/qwt5' is built with Qt Designer plugin by default, which pulls rather heavy `devel/qt4-designer' dependency) - Remove now-inaccurate pkg-message; please consult README instead - Get rid of pkg-plist and simplify port overall Feature safe: yes Notes: svn path=/head/; revision=256824
* Update to 20100201Rene Ladan2010-06-222-6/+4
| | | | | | | | | | PR: ports/147863 Submitted by: maintainer Approved by: tabthorpe (mentor) Feature safe: yes Notes: svn path=/head/; revision=256819
* - Update to version 1.7.6Alexey Dokuchaev2010-06-223-10/+13
| | | | | | | | | - Use ${ECHO_CMD} instead of ${ECHO} directly Feature safe: yes Notes: svn path=/head/; revision=256811
* - Update to 5.2iMartin Wilke2010-06-204-41/+32
| | | | | | | | | PR: 147778 Submitted by: Gerard Seibert <gerard@seibercom.net> (maintainer) Feature safe: yes Notes: svn path=/head/; revision=256749
* Reset jmelo@FreeBSD.org due to many months of inactivity and no responseMark Linimon2010-06-192-2/+2
| | | | | | | | | | to PRs. Hat: portmgr Feature safe: yes Notes: svn path=/head/; revision=256687
* - Unbreak with fixed pkg-plistGreg Larkin2010-06-192-6/+3
| | | | | | | | | | PR: ports/147130 Submitted by: Damian Gerow <dgerow at afflictions dot org> Approved by: maintainer timeout (skv - 3 weeks) Feature safe: yes Notes: svn path=/head/; revision=256685
* vuln 4e8344a3-ca52-11de-8ee8-00215c6a37bb has been fixed withXin LI2010-06-181-2/+2
| | | | | | | | | php4-gd-4.4.9_4. Requested by: Michael Gmelin <mg bindone de> Notes: svn path=/head/; revision=256638
* Update to version 2.0.15, which has the following changes:Doug Barton2010-06-172-13/+10
| | | | | | | | | | | | | | | | * New command --passwd for GPG. * Fixes a regression in 2.0.14 which prevented unprotection of new or changed gpg-agent passphrases. * Make use of libassuan 2.0 which is available as a DSO. For the port: * Since libassuan is now a shared lib, move it LIB_DEPENDS * Remove now-spurious CONFLICTS Approved by: maintainer Notes: svn path=/head/; revision=256631
* Upgrade to version 1.1.0, which has the following changes:Doug Barton2010-06-172-8/+19
| | | | | | | | | | | | | | | | | | * Fixed a resource problem with LDAP CRLs. * Fixed a bad EOF detection with HTTP CRLs. * Made "dirmngr-client --url --load-crl URL" work. * New option --ignore-cert-extension. * Make use of libassuan 2.0 which is available as a DSO. For the port: * Add the verify target to check the PGP signature of the distfile * Since libassuan is now a shared lib, move it LIB_DEPENDS * The infrastructure for disabling NLS was already present, so add an OPTION Approved by: maintainer Notes: svn path=/head/; revision=256630
* Update to week 24 snapshotJosh Paetzel2010-06-162-5/+6
| | | | | | | | | PR: 147850 Submitted by: Eric F Crist <ecrist@secure-computing.net> Approved by: itetcu@ (mentor) Notes: svn path=/head/; revision=256611
* Fix typo in previous revision.Erwin Lansing2010-06-161-1/+1
| | | | Notes: svn path=/head/; revision=256598
* - Cleanup, FormatingMartin Wilke2010-06-161-12/+11
| | | | Notes: svn path=/head/; revision=256597
* add CVE-2009-2347 tiffDirk Meyer2010-06-161-0/+36
| | | | Notes: svn path=/head/; revision=256591
* Document linux-flashplugin -- multiple vulnerabilities.Juergen Lock2010-06-151-0/+66
| | | | | | | Reviewed by: tmclaugh Notes: svn path=/head/; revision=256562
* - Adopt unmaintained ports.Ashish SHUKLA2010-06-1430-30/+30
| | | | | | | Approved by: pgj, tabthorpe (mentors) Notes: svn path=/head/; revision=256525
* Check that at least one frontend is selectedMax Brazhnikov2010-06-141-1/+5
| | | | | | | Allow slave ports to override PORTREVISION Notes: svn path=/head/; revision=256523
* - Update to 1.2.6Pietro Cerutti2010-06-142-6/+9
| | | | | | | | PR: 147846 Submitted by: Sofian Brabez <sbrabez@gmail.com> (maintainer) Notes: svn path=/head/; revision=256515
* Add LICENSE information to my ports where the right answer is obviousDoug Barton2010-06-142-0/+4
| | | | Notes: svn path=/head/; revision=256505
* Fix port name on the LEFT side of the : for BUILD_DEPENDSDoug Barton2010-06-143-3/+3
| | | | | | | While I'm here update to the current version of libassuan-1 (1.0.5) Notes: svn path=/head/; revision=256500
* - Cleanup / Whitespace fixesMartin Wilke2010-06-141-15/+14
| | | | Notes: svn path=/head/; revision=256498
* Update security/libassuan to version 2.0.0, which is required by gnupg 2.0.15Doug Barton2010-06-1411-21/+73
| | | | | | | | | | | | | | | | | | Unfortunately version 2.0.0 is largely incompatible with version 1.x, so it is necessary to have a stopgap measure while ports that depend on libassuan can be updated. In conversation with the maintainers of the dependent ports it was originally considered ideal to prepare updates for the ports first, then upgrade everything to libassuan 2.x en masse. Since no action has arisen on that front, go with plan B: Copy security/libassuan to security/libassuan-1, and update the dependent ports accordingly. Because this is (intended to be) a _temporary_ measure, and because no updates for libassuan 1.x are anticipated, and because the hope is that it can be removed sooner rather than later, it's a copy instead of a repocopy. Notes: svn path=/head/; revision=256495
* Update to 3.7.1Wesley Shields2010-06-134-11/+10
| | | | | | | | PR: ports/147663 Submitted by: Marko Njezic <sf@maxempire.com> (maintainer) Notes: svn path=/head/; revision=256480
* Add LICENSE* informationMario Sergio Fujikawa Ferreira2010-06-131-0/+3
| | | | Notes: svn path=/head/; revision=256478
* Switch MAINTAINER line to FreeBSD address.Matthias Andree2010-06-131-1/+1
| | | | | | | Approved by: garga (mentor, implicit) Notes: svn path=/head/; revision=256473
* Remove empty package in previous revision.Erwin Lansing2010-06-121-4/+0
| | | | Notes: svn path=/head/; revision=256455
* - report FAX3 decoder buffer overrunDirk Meyer2010-06-121-0/+40
| | | | Notes: svn path=/head/; revision=256452
* Fix typo: s/WITHOUT_/NO/Alex Dupre2010-06-121-2/+2
| | | | Notes: svn path=/head/; revision=256442
* This port is useless with FreeBSD < 7.Alex Dupre2010-06-121-2/+6
| | | | Notes: svn path=/head/; revision=256434
* set UNIQUENAME, thus fix slave ports after switching to USE_LDCONFIG.Max Brazhnikov2010-06-111-0/+2
| | | | | | | Reported by: pointyhat Notes: svn path=/head/; revision=256415
* Fix the build on powerpc64. By adding CPU_ARCH detection.Koop Mast2010-06-112-1/+48
| | | | | | | | | | And by adding some G5-specific code in mpcpucache.c to detect cacheline sizes. PR: ports/147696 Submitted by: nwhitehorn@ Notes: svn path=/head/; revision=256407
* - ease fetchingDirk Meyer2010-06-111-5/+5
| | | | Notes: svn path=/head/; revision=256404
* - update dtls-heartbeats.patchDirk Meyer2010-06-111-3/+3
| | | | | | | | PR: 147787 Submitted by: Nagilum Notes: svn path=/head/; revision=256403
* - Update to 0.20 [1]Sergey Skvortsov2010-06-112-6/+7
| | | | | | | | | | | | - Fix BUILD_DEPENDS - Change maintainer to perl@ Changes: http://cpansearch.perl.org/src/APOCAL/POE-Component-SSLify-0.20/Changes PR: ports/147510 [1] Submitted by: Jase Thew <freebsd@beardz.net> [1] Notes: svn path=/head/; revision=256393
* - Change my maintainer address.Ashish SHUKLA2010-06-111-1/+1
| | | | | | | Approved by: pgj (mentor) Notes: svn path=/head/; revision=256386