Commit graph

702 commits

Author SHA1 Message Date
Dag-Erling Smørgrav
81cebc96ac Recognize absolute master directories. 2004-10-25 12:01:23 +00:00
Michael Nottebrock
d7892a1f84 Add entries for vulnerabilites in imported xpdf code in kdegraphics
and koffice.
2004-10-24 14:46:52 +00:00
Oliver Eikemeier
3039b528dd - fix reinstall target
- fix bug in distfile:group handling
- fix bug in DISTDIR handling
- add code to better handle refetching of rerolled distfiles
- .PHONY -> .EXEC
2004-10-24 11:18:04 +00:00
Dag-Erling Smørgrav
f15952d8a2 Don't croak on port names that contain metacharacters. 2004-10-22 13:50:12 +00:00
Joe Marcus Clarke
b6eaadffb1 Fix the build on older versions of FreeBSD.
Reported by:	W.D. <WD@US-Webmasters.com>
2004-10-18 19:12:19 +00:00
Dag-Erling Smørgrav
6a8714c9fd Improve handling of installed ports whose origin can't be determined. 2004-10-13 19:53:36 +00:00
Adam Weinberger
2e3bce44a0 Enable bpm to grok the new INDEX format with extra fields.
Submitted by:	maintainer
2004-10-12 20:12:51 +00:00
Joe Marcus Clarke
5d94d62196 Support .ifndef and !defined when doing OPTIONS checking. 2004-10-12 19:40:05 +00:00
Thierry Thomas
9958c57947 Add an entry for a XSS vulnerability fixed in IMP-3.2.6. 2004-10-12 05:25:06 +00:00
Joe Marcus Clarke
26f28bbd81 * Update to 2.6.8
* Check PLIST_FILES for shared libraries, and make sure
  INSTALLS_SHLIB is defined [1]
* Check DATADIR and MAN3PREFIX macros [2]
* Check OPTIONS [3]

PR:		71405 [2]
		71468 [3]
Requested by:	michael johnson <ahze@ahze.net> [1]
Submitted by:	leeym [2] [3]
2004-10-12 04:33:46 +00:00
Pav Lucistnik
70198d1581 - Fix potential endless loop when a port changes his name depending on option
- Fix plist

PR:		ports/72074
Submitted by:	Michael C. Shultz <ringworm@inbox.lv> (maintainer)
2004-10-11 23:27:23 +00:00
Kris Kennaway
1acc6df893 BROKEN on 5.x: Does not compile
Approved by:    portmgr (self)
2004-09-26 02:08:38 +00:00
Kris Kennaway
3462fa1f72 BROKEN on 5.x: Does not compile
Approved by:    portmgr (self)
2004-09-17 23:02:58 +00:00
Christian Brueffer
488bd7efe4 Typo-fix in a comment
Approved by:	portmgr (krion)
2004-09-09 13:15:25 +00:00
Oliver Eikemeier
c821b0e337 - star-devel: privilege escalation
- multi-gnome-terminal: information leak
- usermin: remote shell command injection and insecure installation
- mpg123: layer 2 decoder buffer overflow

Approved by:	portmgr (implicit)
2004-09-08 21:57:10 +00:00
Oliver Eikemeier
1ea7e0e900 - XSS vulnerability in phpGroupWare wiki module
- add some references

Approved by:	portmgr (implicit)
2004-09-07 10:44:11 +00:00
Oliver Eikemeier
a093965a26 multiple vulnerabilities in LHA 2004-09-03 22:30:35 +00:00
Oliver Eikemeier
903db11a21 grrrr... left the test case intact 2004-09-03 21:36:18 +00:00
Oliver Eikemeier
e8a6142888 - update to version 0.5.9
(first attempts to check the base system for vulnerabilities)
2004-09-03 20:30:54 +00:00
Oliver Eikemeier
3648da397a - add some references
- extend ImageMagick entry
- squid ntlm authentication helper DoS
- multiple vpopmail vulnerabilities
- first attempts to check the base system for vulnerabilities:
  + cvs server code
  + zlib DoS
- BSD license portaudit.xml
2004-09-03 20:27:26 +00:00
Joe Marcus Clarke
cf8b7fbebf Update to 2.6.7
* Switch the direct use of ``echo'' check to suggest ${ECHO_CMD} or
  ${ECHO_MSG} instead of ${ECHO} [1]
* Tighten the check for improper GConf schema handling so that we only look
  in the GConf schemas directory [2]
* Correct some grammar mistakes [3]
* Avoid erroneous "direct use of command" warnings [4]

PR:		71159 [4]
Submitted by:	gerald [1]
		pav [3]
		eik [4]
Reported by:	pav [2]
2004-09-01 04:13:32 +00:00
Adam Weinberger
b53f2958fe The recently comitted BPM port fails to handle the new INDEX file
format, which has had several fields added to it.  In addition, it
reacts badly when parse errors occur on the INDEX file, resulting in
double free()s.  The patch works around both of these problems
until the next formal release.

PR:		ports/71213
Submitted by:	maintainer
2004-09-01 01:40:34 +00:00
Mark Linimon
76161f4953 Minor bug fix and pkg-plist correction.
PR:		ports/71138
Submitted by:	Michael C. Shultz <ringworm at inbox dot lv> (maintainer)
2004-08-31 05:28:33 +00:00
Oliver Eikemeier
bf0beda828 samba printer change notification request DoS 2004-08-30 23:43:44 +00:00
Oliver Eikemeier
41570a3aad add some references, add ru-gaim 2004-08-30 10:58:47 +00:00
Oliver Eikemeier
5f3eb07822 multiple vulnerabilities in gaim 2004-08-30 10:57:42 +00:00
Oliver Eikemeier
14664616fe security bug in rscsi client code
Submitted by:	marius
2004-08-30 10:07:22 +00:00
Mark Linimon
3468faaa0b Fix RUN_DEPENDS.
PR:		ports/70107
Submitted by:	Yen-Ming Lee <leeym at utopia dot leeym dot com>
Approved by:	maintainer timeout (3 weeks)
2004-08-29 01:27:05 +00:00
Jacques Vidrine
8961228139 Document NSS SSLv2 server buffer overflow (already referenced in
portaudit.txt).
2004-08-27 15:29:58 +00:00
Jacques Vidrine
b95b3a3535 Document ripMIME decoding bug (already referenced in portaudit.txt). 2004-08-27 14:43:07 +00:00
Oliver Eikemeier
4262ad369c Argh. Duplicate entry for "Scorched 3D server chat box format string vulnerabilty" 2004-08-27 10:34:05 +00:00
Oliver Eikemeier
e601056789 Mozilla / NSS S/MIME DoS vulnerability & Scorched 3D server chat box format string vulnerability 2004-08-27 10:31:21 +00:00
Jacques Vidrine
975dd4bd17 Note sanitize_path bug in rsync (already referenced in portaudit.txt). 2004-08-26 22:10:50 +00:00
Jacques Vidrine
c57e57ac31 Document buffer overflows in SoX (already referenced in portaudit.txt). 2004-08-26 20:34:41 +00:00
Jacques Vidrine
80e7374bc1 Document cookie bug in Konqueror (already referenced in portaudit.txt). 2004-08-26 20:15:22 +00:00
Jacques Vidrine
e139e5a754 Remove libxine issue which is now documented in the FreeBSD VuXML
document.

Reminded by:	eik
2004-08-25 13:58:01 +00:00
Oliver Eikemeier
26458d785a nss library SSL remote buffer overflow 2004-08-25 13:10:29 +00:00
Oliver Eikemeier
bea9f10345 multiple buffer overflows in xv 2004-08-25 11:07:08 +00:00
Dag-Erling Smørgrav
59ec3b081b Watch out for undefined values when resolving port origins. This makes
-I / -s work properly when some of the installed ports have since been
deleted from the ports tree.

Submitted by:	Thomas-Martin Seck <tmseck@netcologne.de>
2004-08-25 09:45:22 +00:00
Adam Weinberger
36223833b7 Fix path to INDEX file on 5.x.
Submitted by:	nork
2004-08-24 19:21:12 +00:00
Adam Weinberger
7e42812033 Fix build on current in some situations.
Submitted by:	krion
2004-08-24 14:18:53 +00:00
Adam Weinberger
44b3983a8b I am pleased to announce a new GTK+-2 interface to our ports tree!
BSD Ports Manipuator (BPM) is a graphical ports collection manager for
FreeBSD.  It has a GTK+ 2.0 interface and allows you to add, remove, or
upgrade software packages on your system without requiring you to use a
command-line. In addition, it can display details about available,
installed, and out-of-date ports, as well as allowing you to search
based on port descriptions.

BPM uses the existing ports collection structure, allowing it to build
ports from source and integrate seamlessly with other tools.

This project started out as a clone of Ports Manager.app for
DarwinPorts.

WWW: http://www.meowfishies.com/bpm.rhtml

Submitted by:	sethk@meowfishies.com
2004-08-24 04:21:59 +00:00
Oliver Eikemeier
13a24db696 Konqueror cross-domain cookie injection 2004-08-23 23:28:36 +00:00
Oliver Eikemeier
a744df8d30 handle some duplicates 2004-08-23 23:12:02 +00:00
Oliver Eikemeier
b88b1935d9 fix "too many open files" error when using the -r flag
Noted by:	nectar
2004-08-23 17:39:12 +00:00
Oliver Eikemeier
da80a04ac6 a2ps: Possible execution of shell commands as local user. 2004-08-21 10:45:26 +00:00
Sergey Matveychuk
8965349d14 Update to 0.2.0
PR:		ports/70701
Submitted by:	maintainer
Patches from:	Gudin Franci
2004-08-20 16:58:57 +00:00
Oliver Eikemeier
61e848dda0 correct topic of eda0ade6-f281-11d8-81b0-000347a4fa7d 2004-08-20 08:31:09 +00:00
Oliver Eikemeier
e510a55afd QT 3.x BMP (and possibly other graphics formats) heap-based overflow 2004-08-20 08:28:33 +00:00
Oliver Eikemeier
aeb091ef05 potential security flaws in mod_ssl 2004-08-18 20:01:44 +00:00