Commit graph

5424 commits

Author SHA1 Message Date
Tom Rhodes
fdaf161be5 Add xorg-clients due to xdm socket vuln. 2004-06-28 21:20:00 +00:00
Oliver Eikemeier
0c0041370a xine-lib RTSP handling vulnerabilities 2004-06-28 09:55:46 +00:00
Kirill Ponomarev
83a1c6f3e7 Update to version 0.1.1 2004-06-28 07:58:12 +00:00
Kirill Ponomarev
9a2a3ec918 Chase libraries for new devel/libidn version 2004-06-28 06:36:20 +00:00
Tom Rhodes
4e1d155d33 Move MoinMoin entry to VuXML. 2004-06-28 03:58:47 +00:00
Oliver Eikemeier
8a65d874ab diversify url conversion 2004-06-28 01:16:35 +00:00
Oliver Eikemeier
931f6012c4 reference cleanup 2004-06-27 19:26:14 +00:00
Lars Thegler
cce566565c Add p5-Digest-MD5-M4p 0.01,
Perl interface to a variant of the MD5 algorithm.

Approved by:	erwin (implicit)
2004-06-27 15:34:51 +00:00
Joe Marcus Clarke
a6290246c8 Update to 2.27.
PR:		68355
Submitted by:	maintainer
2004-06-27 06:02:45 +00:00
Pav Lucistnik
92000dedbc - Update to 1.0
PR:		ports/68326
Submitted by:	Toni Viemero <toni.viemero@iki.fi>
2004-06-26 18:47:37 +00:00
Pav Lucistnik
1429ec9f8e - Reset bouncing maintainer's address:
... while talking to bonobo.corebsd.or.id.:
>>> DATA
<<< 554 <jim@corebsd.or.id>: Relay access denied
554 5.0.0 Service unavailable
<<< 554 Error: no valid recipients
2004-06-26 18:32:07 +00:00
James E. Housley
6ec433030a *******************IMPORTANT*******************
4370 Emergency Dat release due to:

BACKDOOR-AXJ.GEN

**********************************************
2004-06-26 10:51:24 +00:00
Mario Sergio Fujikawa Ferreira
04e5859dd6 New port pam_pGina version 1.1.3: Daemon for allowing a pGina plugin
to authenticate against Unix PAM
2004-06-26 02:37:46 +00:00
Tom Rhodes
7840118a80 Fix the previous entry; it had an incorrect port range. 2004-06-26 00:45:07 +00:00
Oliver Eikemeier
9c7b32a018 add portaudit2vuxml.pl to easy the migration of entries to VuXML 2004-06-26 00:40:17 +00:00
Tom Rhodes
2da36a743f Add an entry for recent isc-dhcp3-server buffer overflows.
Remove the one in portaudit.txt.
2004-06-25 20:01:28 +00:00
Tom Rhodes
e28b04324b Move giFT-FastTrack to VuXML. 2004-06-25 17:18:57 +00:00
Oliver Eikemeier
44285aa4ba giFT-FastTrack remote DoS 2004-06-25 13:34:38 +00:00
Oliver Eikemeier
627e20be53 Update to 0.2.2
- correct some URLs
2004-06-25 12:39:35 +00:00
Oliver Eikemeier
a77dbe0db0 correct rlpr version 2004-06-25 12:37:32 +00:00
Volker Stolz
65c9f5036b Add dazuko 2.0.2, a common interface for 3rd party file access control.
PR:		ports/63624
Submitted by:	Rob Evers <rob@debank.tv>
2004-06-25 11:10:58 +00:00
Oliver Eikemeier
6a45552c43 Pure-FTPd DoS when the max number of connection is reached 2004-06-25 10:31:30 +00:00
Kirill Ponomarev
cf79dd62e8 Update to version 20040624
PR:		ports/68292
Submitted by:	maintainer
2004-06-25 07:29:39 +00:00
Tom Rhodes
0cd7fc1d86 Fix an older entry which ends with "buffer overflows vuxml".
Fill in a date on my previous entry.
2004-06-25 02:04:07 +00:00
Tom Rhodes
974bc49c9d Move the Gallery entry to VuXML. 2004-06-25 01:35:17 +00:00
Oliver Eikemeier
41c24e6c48 update to version 0.4.1
Use
  portaudit [packagename ...]
to check if package is listed as vulnerable
2004-06-25 01:21:20 +00:00
Oliver Eikemeier
a1abb3f3f0 www/sitecopy uses the included libneon version 0.24.0 2004-06-25 00:36:11 +00:00
Mark Linimon
c63fff12ad Per distfile survey, chase mastersite.
PR:		ports/67116
Submitted by:	Roman Neuhauser <neuhauser at chello dot cz>
Approved by:	maintainer timeout (4 weeks)
2004-06-24 19:01:57 +00:00
James E. Housley
59befd7e36 *******************IMPORTANT*******************
4369 Emergency Dat release due to:

Incorrect identification of W32/GAOBOT.WORM.GEN.E

**********************************************
2004-06-24 18:16:01 +00:00
Oliver Eikemeier
979289bd12 rlpr local and remote exploitable buffer overflow (CAN-2004-0393, CAN-2004-0454) 2004-06-24 14:52:26 +00:00
Tilman Keskinoz
75fd8dc9ab Update to 0.6.3
- added new look for some functions
        - key, request and certificate can be generated in one step
        - code cleanup
        - bug fixes

PR:		68267
Submitted by:	Janos Mohacsi
2004-06-24 14:30:53 +00:00
Munechika SUMIKAWA
2ee0b81eed Upgrade to 20040617a.
Submitted by:	ivi@dhs.net.ru
2004-06-24 13:22:39 +00:00
Oliver Eikemeier
f78eb5764e CAN-2004-0451: format string vulnerabilities in sup 2004-06-24 11:23:32 +00:00
Oliver Eikemeier
7fdc9f0a99 Security flaw in rssh 2004-06-24 11:01:56 +00:00
Oliver Eikemeier
96ddfca118 Icecast remote DoS vulnerability 2004-06-24 10:45:20 +00:00
James E. Housley
91b3b3be36 Update to 4368 2004-06-23 18:06:42 +00:00
Oliver Eikemeier
8d9c87c405 Add pkg-req file which was forgotten in the last commit. 2004-06-23 16:02:23 +00:00
Oliver Eikemeier
f5b10d70f9 Update to version 0.4, with a new `-f' option.
To check which of the current ports have known vulnerabilities, do

  portaudit -f /usr/ports/INDEX

This port requires pkg_install(-devel)>=20040623
2004-06-23 16:01:38 +00:00
Oliver Eikemeier
bf6d0ee746 it seems like isc-dhcp3-{client,devel} are unaffected 2004-06-23 12:11:34 +00:00
Oliver Eikemeier
d8f20aab80 reword gallery entry
add multiple isc-dhcp3 vulnerabilities
2004-06-23 11:56:52 +00:00
Alexander Langer
582ce2fbb0 Fix checksum, so unbreak and don't schedule this for removal.
There's a small problem with the ftp-mirrors with the mindterm-ssh.html
file.  My and other mirrors of ftp.FreeBSD.org have a different filesize
of this file than the original ftp.FreeBSD.org file (1085 vs. 1106 bytes).
This is only in amount of whitespace, diff -b shows no difference at all.
(It's not a tab problem, I manually couldn't find the difference btw)

This is also why I never could reproduce the checksum mismatch on bento, as
I never fetch from ftp.FreeBSD.org but a local mirror.  Neither could
other people who just asked me why this port is marked broken and scheduled
for removal.

The distinfo file will now use the filesize from the master FTP server.
Thanks to the SIZE data, "make fetch" will try different mirrors until
it'll find one with the correct size and thus the correct checksum.
So hopefully this will fix this port for the future.
2004-06-23 10:27:25 +00:00
Michael Nottebrock
e8a3b06aef Remove inclusion of Makefile.kde from all remaining ports not maintained
by kde@

Approved by: maintainer timeout
2004-06-22 19:42:06 +00:00
Oliver Eikemeier
dc9ea0fae4 Sqwebmail 4.0.4 XSS vulnerability 2004-06-22 09:41:14 +00:00
Oliver Eikemeier
b25dd491d8 I believe that linux-png-1.2.2 still contains the vulnerability.
Add some references that support this opinion.
2004-06-21 22:03:48 +00:00
Kris Kennaway
3c088f1b9a Set an expiry date of 2004-08-20 for these BROKEN/IGNORE/FORBIDDEN
ports.  They will be removed on or after that date if they are still
broken and no fix has been submitted to GNATS.
2004-06-21 21:27:46 +00:00
Pav Lucistnik
79b6ff939d - Extend png entry to cover it's linux-png variant
Requested by:	eik
2004-06-21 20:04:18 +00:00
Pav Lucistnik
00f5bfe7b2 - Update to 1.8.9
PR:		ports/68173
Submitted by:	David Thiel <lx@redundancy.redundancy.org> (maintainer)
2004-06-21 19:09:14 +00:00
Oliver Eikemeier
c60724f5cd Roundup remote file disclosure vulnerability 2004-06-21 18:27:02 +00:00
Oliver Eikemeier
9dec4894a1 make expiry date customizable via daily_status_portaudit_expiry 2004-06-21 16:04:27 +00:00
Oliver Eikemeier
d9017ab9ff mailman allows 3rd parties to retrieve member passwords (CAN-2004-0412)w 2004-06-21 15:29:53 +00:00
Oliver Eikemeier
fc1f0d94bc super format string vulnerability 2004-06-21 14:44:44 +00:00
Oliver Eikemeier
5e081dab71 Scorched 3D server chat box format string vulnerability 2004-06-21 09:21:05 +00:00
Oliver Eikemeier
da23cae179 BNBT Authorization Header DoS 2004-06-21 08:46:20 +00:00
Kris Kennaway
3d77c50054 s/BROKEN/IGNORE/ to prevent package build 2004-06-21 06:24:32 +00:00
Kris Kennaway
d624b78dc6 s/BROKEN/IGNORE/ to prevent package build on 4.x 2004-06-21 04:55:38 +00:00
Kris Kennaway
bbdac6a841 Remove expired ports, plus the three ports that depended on them. 2004-06-20 23:40:39 +00:00
Thierry Thomas
f705e2b990 - The previous commit included ruby18-raspell-0.1, which is not affected.
- Add a separate entry for linux-aspell.

Reported by:	Oliver Eikemeier.
2004-06-20 16:56:48 +00:00
Thierry Thomas
6fcb668607 Security: fix a buffer overflow in word-list-compress:
- <http://marc.theaimsgroup.com/?l=bugtraq&m=108761564006503&w=2>
	- <http://nettwerked.mg2.org/advisories/wlc>

Since I'm there, switch from libtool 1.3 to 1.5, to cope with
PR ports/63944.

Obtained from:	Robert Nagy <robert@openbsd.org>.
2004-06-20 09:04:32 +00:00
Oliver Eikemeier
017af34e32 ircd-hybrid-7 low-bandwidth DoS 2004-06-20 07:26:27 +00:00
Kris Kennaway
5482972741 BROKEN on !i386: Does not compile 2004-06-19 09:33:57 +00:00
Kris Kennaway
29814c80cf BROKEN on 5.x: Does not compile 2004-06-19 07:47:01 +00:00
Kris Kennaway
d96ff80dcf BROKEN: Does not compile on FreeBSD >= 5.x 2004-06-19 07:46:01 +00:00
Kirill Ponomarev
f001e05084 Update to 20040618
PR:		ports/68075
Submitted by:	maintainer
2004-06-18 12:18:23 +00:00
Erwin Lansing
0440ccd1b1 Update to 2.12 2004-06-18 08:48:36 +00:00
Oliver Eikemeier
cfaf552880 Fetch the database from http://www.FreeBSD.org/ports/ first.
Thanks to:	kuriyama
2004-06-18 08:07:29 +00:00
Oliver Eikemeier
99a5cf7b63 make BASEURL customizable 2004-06-18 07:42:06 +00:00
Oliver Eikemeier
5f0c117b40 add subversion-perl, subversion-python 2004-06-18 06:33:31 +00:00
Kirill Ponomarev
b614a41f0f Update to 20040617
PR:		ports/68056
Submitted by:	maintainer
2004-06-17 18:53:54 +00:00
Oliver Eikemeier
52667c5a80 - update to 3.51-TEST3
- fix bug when ranges cross interface boundaries [1]

Notified by:	Alex Povolotsky <tarkhil@webmail.sub.ru>, Mike Benjamin <mikeb@mikeb.org> [1]
2004-06-17 11:56:03 +00:00
Peter Pentchev
f213c223ee BROKEN -> IGNORE, since this is a runtime error and the port itself builds
just fine.

Suggested by:	kris
2004-06-17 09:35:23 +00:00
Peter Pentchev
725994087e Use DOCSDIR. 2004-06-17 09:34:50 +00:00
Oliver Eikemeier
a0b53a8c5e added racoon certificate validation bug 2004-06-17 08:02:23 +00:00
Oliver Eikemeier
d3c49ee1e5 update to 0.2
- add the ability to specify multiple URLs
2004-06-17 07:13:37 +00:00
Oliver Eikemeier
30afb3b9fd add moinmoin, phpnuke and webmin vulnerabilities 2004-06-17 06:35:51 +00:00
James E. Housley
3df7e2ed2f Update to DAT 4367 2004-06-16 18:05:54 +00:00
Kirill Ponomarev
d5ae769327 Respect PREFIX
PR:		ports/68008
Submitted by:	Kevin Way <kevin.way@overtone.org>
2004-06-16 15:26:41 +00:00
Oliver Eikemeier
f005b4280b SquirrelMail has a localized japanese version 2004-06-16 07:52:45 +00:00
Oliver Eikemeier
832beb11b5 Add SquirrelMail XSS vulnerability 2004-06-16 07:46:18 +00:00
Erwin Lansing
9b0425a6b1 Update to 1.17
PR:		67985
Submitted by:	maintainer
2004-06-15 21:13:02 +00:00
Michael Nottebrock
3d25e1f5df Don't try to extract a signature file. 2004-06-15 12:16:09 +00:00
Oliver Eikemeier
4af7c839c8 update to 0.73
use freshclam pid file

PR:		67962
Submitted by:	Rob Evers <rob@debank.tv> (maintainer)
2004-06-15 10:04:48 +00:00
Max Khon
6f2d6e9303 Midnight Commander security vulnerabilities
CAN-2004-0226, CAN-2004-0231, CAN-2004-0232

fixed in mc-4.6.0_10.
2004-06-14 21:05:15 +00:00
Oliver Eikemeier
39ef4085be typo 2004-06-14 17:13:49 +00:00
Oliver Eikemeier
10e0fc75b2 Point all vulnerabilities to the base URL, so that entries
look a little more official.

Pointed out by:	Matthew George <mdg@secureworks.net>
2004-06-14 16:57:08 +00:00
James E. Housley
37bff1b3d3 *******************IMPORTANT*******************
4366 Emergency Dat release due to:

W32/ZAFI.B@MM

**********************************************
2004-06-14 12:06:31 +00:00
Oliver Eikemeier
ce219b23dc update to 0.1.1, supporting some of the VuXML 1.1 features 2004-06-14 08:04:41 +00:00
Oliver Eikemeier
fb939dfac3 reword some descriptions 2004-06-14 07:01:13 +00:00
Thierry Thomas
a89c49c5de Change URLs for a better reference about IMP & Chora vulnerabilities.
Requested by:	eik (bis).
2004-06-13 13:04:22 +00:00
Thierry Thomas
5bd2ec8846 Add an entry for Chora and IMP.
Requested by:	eik
2004-06-13 10:16:30 +00:00
Oliver Eikemeier
244200695e Added CAN-2004-0488, CAN-2004-0492, DBMail vulnerability, smtpproxy vulnerability,
CAN-2004-0413 (subversion)
2004-06-13 08:26:12 +00:00
Erwin Lansing
80b687460d Update to 1.16
PR:		67895
Submitted by:	maintainer
2004-06-13 07:19:57 +00:00
Oliver Eikemeier
53ec7442a9 portaudit-db generates a portaudit database from a current
ports tree. It also features a file `database/portaudit.txt'
where UUIDs for vulnerabilities can be allocated quickly
before they are moved to the VuXML database.

Call `packaudit' after upgrading your ports tree.
2004-06-12 22:43:44 +00:00
Tilman Keskinoz
deb33b1a27 Add EXTRACT_ONLY
Noticed by:	bsdtar
2004-06-12 14:12:17 +00:00
Oliver Eikemeier
3494bc20ee add a $FreeBSD$ tag 2004-06-12 12:22:23 +00:00
Cy Schubert
80b9496636 Update KRB5 1.3.3 --> 1.3.4 2004-06-11 23:08:57 +00:00
Pav Lucistnik
dc742d4a4e - Update to 20040610
PR:		ports/67792
Submitted by:	Rob Evers <rob@debank.tv> (maintainer)
2004-06-11 20:04:30 +00:00
Hajimu UMEMOTO
53ea9fc8f1 correct the path to match the path where the HTML docs are installed.
PR:		ports/67836
Submitted by:	Linh Pham <question+freebsdpr@closedsrc.org>
2004-06-11 18:13:39 +00:00
Peter Pentchev
66b2cb218c Mark broken on -CURRENT until I figure out why stunnel doesn't like
-CURRENT's OpenSSL.

Reported by:	dougb
2004-06-11 16:37:56 +00:00
Hajimu UMEMOTO
b244688d9b use command_args' instead of overriding flags'. 2004-06-11 15:54:34 +00:00
Kirill Ponomarev
0f3063f3fc - Update to version 0.0.7
PR:		ports/67831
Submitted by:	maintainer
2004-06-11 14:55:01 +00:00