Commit graph

1121 commits

Author SHA1 Message Date
Michael Landin
d4f2fd3ae5 o Whoops - forgot to reset PORT_REVISION 2005-04-13 15:35:02 +00:00
Michael Landin
2996e017a2 o Update to -> 0.2 2005-04-13 15:23:36 +00:00
Joe Marcus Clarke
faca8eda4c Update to 2.7.1
* Check to make sure only characters [-.a-zA-Z0-9_] appear in file names [1]
* Check for proper quoting of IGNORE and BROKEN [1]
* Check to see if README.html is being committed [1]
* Check for uses of .elseif [2]

Submitted by:	krion [1]
Suggested by:	bsdcrank <bsdcrank@squbes.com> [2]
2005-04-13 03:20:56 +00:00
Simon L. B. Nielsen
2a6230f941 Fix and document insecure temporary file handling in portupgrade.
Security:	CAN-2005-0610
Security:	http://vuxml.FreeBSD.org/22f00553-a09d-11d9-a788-0001020eed82.html
Approved by:	erwin (mentor), maintainer timeout
OK'ed by:	portmgr
Reviewed by:	nectar
2005-04-12 08:24:48 +00:00
David E. O'Brien
c3d8037aeb At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.
2005-04-12 03:26:56 +00:00
David E. O'Brien
f2fc2d60ae Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
2005-04-11 08:04:41 +00:00
Joe Marcus Clarke
f3ce536e69 Update to 2.7.0.
* Add a check to make sure a WWW is defined in pkg-descr (this is a nice
  thing to have) [1]
* Add a slew of Java-related checks (see
  http://wikitest.freebsd.org/moin.cgi/JavaPortlint for more details) [2]
* Add @mode to the list of plist directives to warn about [3]

PR:		78126 [1]
		78947 [3]
Requested by:	hq [2]
Submitted by:	leeym [1]
		Renato Botelho <renato@galle.com.br> [3]
2005-04-02 09:01:47 +00:00
Hiroki Sato
de74f15a2c Use ${INDEXFILE} for a filename of INDEX in /usr/ports.
PR:		ports/79036, ports/79154
Approved by:	portmgr(kiron)
2005-03-25 06:03:22 +00:00
Joe Marcus Clarke
84c9520ce2 Sync with the latest CVS HEAD snapshot. 2005-03-21 18:19:13 +00:00
Colin Percival
aba5157424 Upgrade to version 0.9.1 to fix some bugs which broke portsnap on
RELENG_4.

Approved by:	pav
2005-03-20 20:40:51 +00:00
Kirill Ponomarev
76536093d3 Fix md5 sum. 2005-03-20 09:39:23 +00:00
Kirill Ponomarev
4fcee63076 Update portsnap to version 0.9. This brings the following changes:
* SHA-256 has replaced SHA-1 as a hash function used for verifying
   integrity of the ports tree.
 * The RSA signature verification is now performed using OpenSSL
   rather than "borrowing" code from FreeBSD Update.
 * In addition to distributing the ports tree, portsnap now also
   produces up-to-date INDEX, INDEX-4, and INDEX-5 files.
 * When fetching a series of patches, portsnap now prints a simple
   progress indicator.

PR:		ports/79044
Submitted by:	maintainer
2005-03-20 09:38:26 +00:00
Volker Stolz
eb3f578f10 Add patch to work on systems newer than 500036
PR:		ports/74916
Submitted by:	Joel Diaz
Approved by:	maintainer
2005-03-16 13:20:55 +00:00
Michael Johnson
82cf811b85 - Update to 0.2.9_3
1) Added check for really old ports in PMGRrAddDependencies that
aborts portmanager and provides suggestion on how to update manually.
This is to fix a seg fault when @comment DEPORIGIN: is missing in
a port's +CONTENTS file

2) Incorporated  Alistair Sutton's <alistair.sutton@gmail.com>
code that adds interactive update option "portmanager -ui".

3) Slowly switching licience from GNU to BSD in the sources

PR:		ports/78839
Submitted by:	Maintainer
2005-03-14 19:40:12 +00:00
Joe Marcus Clarke
b3458f652e Bump PORTREVISION to chase the glib20 shared lib version change. 2005-03-12 10:54:27 +00:00
Florent Thoumie
75b0eb08ab - Update to 0.2.9_2.
PR:		ports/78387
Submitted by:	Michael C. Shultz <ringworm01@gmail.com> (maintainer)
Approved by:	pav (mentor)
2005-03-04 09:29:37 +00:00
Florent Thoumie
70f960066f - Update to 0.2.9_1.
PR:		ports/78341
Submitted by:	Michael C. Shultz <ringworm01@gmail.com> (maintainer)
Approved by:	pav (mentor)
2005-03-03 08:51:59 +00:00
Michael Johnson
184408fa32 - Update to 0.2.9
PR:		ports/78167
Submitted by:	maintainer
2005-03-01 08:47:15 +00:00
Joe Marcus Clarke
20c25ba083 Update pkg-descr since HEAD != 5.X anymore. 2005-02-26 22:16:49 +00:00
Joe Marcus Clarke
ceadb96d87 Update to today's snapshot of pkg_install. 2005-02-26 22:06:42 +00:00
Yen-Ming Lee
0a474baf90 sysutils/portmanager update to 0.2.8
1) Incorporated Florent Thoumie's <flz@xbsd.org> suggestion
of adding pkg-message so pkg users may also see it.

2) added handling of ports that conflict with ports that
are being upgraded, inspired by "Brian John" <brianjohn at fusemail.com>

3) Added percent done message to xterm title bar as requested by
<mark.magiera at gmail.com>

4) port is repackaged because too many changes to configure.ac
for a patch to be feasable

PR:		77942
Submitted by:	Michael C. Shultz <ringworm01 at gmail.com>
2005-02-24 01:29:14 +00:00
Anton Berezin
0b84c7f1f9 Update to 1.4.
PR:		77836
Submitted by:	maintainer
2005-02-21 09:41:35 +00:00
Pav Lucistnik
6dce447d47 - Update to 0.2.7
PR:		ports/77785
Submitted by:	Michael C. Shultz <ringworm01@gmail.com> (maintainer)
2005-02-20 17:19:28 +00:00
Pav Lucistnik
8f081bfd6a - Fix path mangling when running make all-depends-list
- Change email address from Verizon to gmail so I may hear from my european
  friends

PR:		ports/77575
Submitted by:	Michael C. Shultz <ringworm01@gmail.com> (maintainer)
2005-02-17 09:51:16 +00:00
Pav Lucistnik
77fae9bdea - Update to 0.2.6_5
1) Some code clean up using valgrind

  2) Added flushing of stdout/stderr so messages are
  not lost when redirecting portmanager output to a file

PR:		ports/77525
Submitted by:	Michael C. Shultz <reso3w83@verizon.net> (maintainer)
2005-02-14 23:21:39 +00:00
Joe Marcus Clarke
45483a9867 Update to 2.6.11
* Do not warn on direct command use if the command is preceeded by "--" [1]
* Add a check for ports installing charset.alias or locale.alias.  In most
  cases these ports should depend on libiconv or gettext, and not install
  their own copies of these files [2]

PR:		77410 [2]
Requested by:	gerald [1]
Submitted by:	leeym [2]
2005-02-14 08:20:48 +00:00
Pav Lucistnik
a476bf2a13 - Update to 0.2.6_4:
* Finally found and fixed the bug haunting portmanager for the past few
    revisions. Portmanager now "flushes" after droping new records into it's
    data bases :)
  * Improvement of database code to handle wider variety of strings/character
    codes merged from another project that uses libMG.

PR:		ports/77409
Submitted by:	Michael C. Shultz <reso3w83@verizon.net> (maintainer)
2005-02-12 21:20:29 +00:00
Pav Lucistnik
eebd2a448b - Fix bug where configuration file would not get read
PR:		ports/77319
Submitted by:	Michael C. Shultz <reso3w83@verizon.net> (maintainer)
2005-02-10 00:01:41 +00:00
Pav Lucistnik
cb19f0f02c - Update to 0.2.6_2:
There may be a bug in edge cases where a port name originates from multiple
  usr/ports directories. Patch allows printing of useful information if this
  happens and hopefully traps the bug with assert statements.

PR:		ports/77276
Submitted by:	Michael C. Shultz <reso3w83@verizon.net> (maintainer)
2005-02-09 12:48:10 +00:00
Yen-Ming Lee
c2ca6ebc4d - disable CONFIGURE_ARGS temporarily (requested by maintainer)
Submitted by:	maintainer
2005-02-08 07:50:47 +00:00
Yen-Ming Lee
ca3a9cca86 update portmanager to ver 0.2.6
1) Fixed bug where ports were being updated for old dependencies
when they did not require it.

2) Added -sl option:  show leaf ports (ports with no other ports
depending on them)

3) Added -slid option:  interactivly delete leaf ports

PR:		77238
Submitted by:	Michael C. Shultz <reso3w83 at verizon.net>
2005-02-08 06:27:38 +00:00
Oliver Eikemeier
f1e8399d35 Catch up with latest bsd.port.mk changes 2005-02-03 04:01:34 +00:00
Sergey Matveychuk
f31423123b - Update to 0.2.5
1) Add handling of identical portnames from differing origins in port tree
2) Minor bug fix involving portmanager's handling of missing dependencies

PR:		ports/76872
Submitted by:	maintainer
2005-01-31 11:46:42 +00:00
Pav Lucistnik
f5cc0595c6 - Fixes stupid bug introduced in 0.2.4_1 where portmanager overwrites its own
config file the first time it is run after being installed.

PR:		ports/76779
Submitted by:	Michael C. Shultz <reso3w83@verizon.net> (maintainer)
2005-01-28 23:19:55 +00:00
Sergey Matveychuk
9a2a055778 - handle looping by limiting to no more than 2 occurances
- fix compiler error on sparc64-6-latest
- other minor fixes

PR:		ports/76739
Submitted by:	maintainer
2005-01-27 16:23:31 +00:00
Tilman Keskinoz
8aee08d2a5 Update to 1.3
PR:		76655
Submitted by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
2005-01-25 18:45:31 +00:00
Sergey Matveychuk
9f3d099422 - update to 0.2.4:
1) added -ip "ignore port" command line option and the same for pm-020.conf
2) if a port fails to build, port manager now instead of failing, adds it to ignore.db then continues

PR:		ports/76529
Submitted by:	maintainer
2005-01-21 15:35:48 +00:00
Pav Lucistnik
5d26311188 - Update to 0.2.3
PR:		ports/76453
Submitted by:	Michael C. Shultz <reso3w83@verizon.net> (maintainer)
2005-01-19 13:26:56 +00:00
Pav Lucistnik
ccc7f54206 - Update to 1.2
PR:		ports/76404
Submitted by:	Renato Botelho <renato@galle.com.br>
Approved by:	Matthew Seaman <m.seaman@infracaninophile.co.uk> (maintainer)
2005-01-19 13:03:15 +00:00
Colin Percival
3d918f98ba In light of recent tests, update the description of portsnap to note
that it is far more bandwidth-efficient than CVSup in cases where the
ports tree is being updated every few days.

Approved by:	pav
2005-01-16 01:24:26 +00:00
Thierry Thomas
3b1b7922ee Document Horde's XSS vulnerabilities.
Approved by:	portmgr (krion).
2005-01-05 10:51:21 +00:00
Dag-Erling Smørgrav
8a8dea62ac Before performing any work, unset a number of environment variables which
may adversely affect the port build.  See the man page for details.
2004-12-30 17:45:43 +00:00
Sergey Matveychuk
d056068bbf - update to 0.2.2
1) Made MGmDbArrayFree and MGmDbArray source in /libMG/src/libMG.h
      more readable. Fixed a few bad mallocs in MGmDbArrayFree as well.
   2) As per suggestions from John E Hein <jhein@timing.com> in
      libPMGR/src/libPMGR.h removed hard coded paths and changed so
      ports infrastructure files are accessed by using
      $PORTSDIR & $PKG_DBDIR environment vars and fixed hard coded
      path references in /portmanager/portmanager.c
   3) In pmupgrade.c added an abort if error during clean in an attempt
      to halt looping when a port conflict occurs, this is untested so
      temporary for now.
   4) libPMGR/src/PMGRrMakeDescribe.c fixed hard coded paths
   5) pmupgrade.c fixed hard coded paths
   6) pmupgrade.c Major cleanup of code, seperated upgrade routine into
      upgrade, checkForOldDepencies, and PMGRrDoUpgrade routines.
   7) fixed portmanager seg faulting when it self updates.  (thanks to
      "Noah" <admin2@enabled.com> for reporting
   8) Added "HINTS AND TIPS" section to portmanager(1) man page.

PR:             ports/75596
Submitted by:   maintainer
2004-12-29 15:41:05 +00:00
Sergey Matveychuk
0ea5790b7e - Upgrade to 0.6
* Search port by "make search" (works on FreeBSD 5.3 as well)
  * Bugfix: missing default server support on -o

PR:		ports/75611
Submitted by:	maintainer
2004-12-29 15:36:38 +00:00
Akinori MUSHA
bb4bc64746 Oops, I forgot to commit Makefile..
--

Fix the startup script for 4.x.

Submitted by:	Nicole Thurner <thurners -at- t-online.de>
2004-12-28 17:52:08 +00:00
Akinori MUSHA
61a77c177d Fix the startup script for 4.x.
Submitted by:	<Nicole Thurner <thurners -at- t-online.de>
2004-12-28 15:18:02 +00:00
Pav Lucistnik
7ae8f44fb5 pkg_rmleaves finds packages that are not requested by any other installed
package and lets you decide (in a beauty dialog interface) for each one
if you want to keep it or delete it.

This is similar to pkg_cutleaves, but it does not require any dependencies
and is done in visual, dialog(1) interface instead of command line.

PR:		ports/75517
Submitted by:	Timothy Redaelli <drizzt@gufi.org>
2004-12-28 02:51:31 +00:00
Sergey Matveychuk
b2e4ca9047 - Update to 0.2.1
- Change maintainer email
- Removed all html docs and replaced with man page
- Add WITH_DEBUG knob
- Cleaned up a few compile warnings

PR:		ports/75413
Submitted by:	Michael C. Shultz (maintainer)
2004-12-26 20:30:38 +00:00
Akinori MUSHA
d90395ae3d Update to 20041226.
Reverse the condition to check if custom MAKE_ARGS is specified.

Submitted by:	Max Laier <max@love2party.net>

D'oh!
2004-12-25 21:17:06 +00:00
Akinori MUSHA
cbda76514e Update to 20041225.
- Fix the startup script. (s/echo //)

- When INDEX is not found, try "make fetchindex" first, then try
  "make index".
2004-12-25 16:01:39 +00:00
Akinori MUSHA
5d77d5fc37 Fix the startup script.
I think I've been too long away from my ports work...

PR:		ports/75468
Submitted by:	Michael <mkuhn.nw 'at' web.de>
2004-12-25 15:45:26 +00:00
Akinori MUSHA
05bc902eec Update to 20041224.
portsdb(1):
- Add a -F flag, which calls make fetchindex internally to
  update the ports index file.

portupgrade(1):
- Make -fP properly reinstall an installed package using a binary
  package.

- Do not use a binary package when custom MAKE_ARGS or -m option is
  defined, unless -PP is specified.

portsclean(1):
- -L: Make sure that a library does not shadow itself.

misc.:
- RcNG'ify the startup script.

- Do not use Object#class which is obsolete in Ruby >=1.8.
2004-12-23 20:18:12 +00:00
Joe Marcus Clarke
1ecef33045 Don't check for DISTVERSION as apart of %makevars since it will be set
internally when PORTVERSION is set.  Instead, just scour the Makefile to
see if both PORTVERSION and DISTVERSION are defined.

Reported by:	krion
2004-12-17 17:25:32 +00:00
Joe Marcus Clarke
bd01e6b8f2 * Update to 2.6.10
* Add support for the new DISTVERSION macro

Submitted by:	lioux (plus some additional checks)
2004-12-17 03:46:50 +00:00
Colin Percival
af2e077589 Update to version 0.3.1 in order to fix a bug which breaks `portsnap
extract`.

Bug noticed by:	Dru Lavigne
With hats:	pointy, maintainer
2004-12-09 02:45:44 +00:00
Erwin Lansing
82ebb547ea Update to version 0.3. This has the following changes:
1. The working directory and ports directory can be specified
in the portsnap.conf configuration file.
2. Parts of the ports tree (down to the level of individual ports)
can be extracted (e.g., "portsnap extract security/freebsd-update").

This also adds an empty file, $PREFIX/portsnap/.package.this.directory,
which (as the name suggests) ensures that $PREFIX/portsnap/ will be
generated when a package is installed using pkg_add.

PR:		74835
Submitted by:	maintainer
2004-12-08 07:50:13 +00:00
Colin Percival
8ec0adb10b Add whitespace around parentheses in .if logic, in order to unbreak
port and INDEX builds on old (5.1 & 4.7?) releases.

PR:		ports/74192
Reported by:	Joe Horn
Approved by:	mat
With hat:	maintainer
2004-11-24 14:19:22 +00:00
Joe Marcus Clarke
d9da40e963 Update to 2.6.9.
* Ignore comments when checking for absolute pathname usage
* Check DISTNAME for uses of PORTREVISION and PORTEPOCH [1]
* Make sure to quote meta-characters in PORTNAME before using it as a
  regular expression [1]
* Fix bug when matching OPTIONS in ".if defined(WITH_OPT1) &&
  defined(WITHOUT_OPT2)" [2]
* Update OMF checks to account for the new INSTALLS_OMF macro
* Update GConf checks to account for the new GCONF_SCHEMAS macro

PR:		73536 [2]
Submitted by:	mat [1]
		leeym [2]
2004-11-22 18:28:40 +00:00
OKAZAKI Tetsurou
5880e801ca Add p5-FreeBSD-Portindex 1.1, incremental FreeBSD ports INDEX file
generation.

PR:		ports/73612
Submitted by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
2004-11-21 11:14:49 +00:00
Dag-Erling Smørgrav
f7f1b3ae26 Use the bzipped index to speed up downloading. 2004-11-20 22:03:26 +00:00
Dag-Erling Smørgrav
87f852c6a8 Finally fix the master-has-a-master issue.
Now that INDEX is no longer in CVS, don't append .www to the name when
downloading it.
2004-11-13 13:28:41 +00:00
Hiroki Sato
9cd5a912dc Add sysutils/portbrowser, a free, easy to use GUI frontend implementation
for the BSD ports system.
2004-11-08 03:18:14 +00:00
Joe Marcus Clarke
46a4d69571 Bump PORTREVISIONS for all ports that depend on atk or pango to ease in the
big upgrade.
2004-11-07 22:37:47 +00:00
Pav Lucistnik
4197d228a4 - Make freebsd-sha1 dependency conditional on OSVERSION
- Remove hardcoded /usr/local

PR:		ports/73625
Submitted by:	cperciva (maintainer)
2004-11-06 19:49:36 +00:00
Sergey Matveychuk
eda87cdd99 Fix portmanager seg faults when an installed port's +CONTENTS file
has no "@comment ORIGIN:" in it.

PR:		ports/73292
Submitted by:	maintainer
2004-11-01 21:51:16 +00:00
Michael Nottebrock
7dc5e40d44 Add portsnap: Provides secure snapshots of the ports directory.
PR: ports/73323
Submitted by: Colin Percival <cperciva@daemonology.net>
2004-10-31 18:12:17 +00:00
Dag-Erling Smørgrav
e4758bf61f Switch to ssh for anoncvs so it works again.
Recognize globs in port names.
Bump version to 2.8.0.
2004-10-31 15:54:48 +00:00
Jacques Vidrine
9cfb8ca626 Create a VuXML entry for Horde XSS help window vulnerability to replace
the portaudit-db entry.
2004-10-27 12:25:06 +00:00
Thierry Thomas
6833f56de3 Add an entry for a vulnerability fixed in horde-2.2.7. 2004-10-26 19:37:44 +00:00
Dag-Erling Smørgrav
81cebc96ac Recognize absolute master directories. 2004-10-25 12:01:23 +00:00
Michael Nottebrock
d7892a1f84 Add entries for vulnerabilites in imported xpdf code in kdegraphics
and koffice.
2004-10-24 14:46:52 +00:00
Oliver Eikemeier
3039b528dd - fix reinstall target
- fix bug in distfile:group handling
- fix bug in DISTDIR handling
- add code to better handle refetching of rerolled distfiles
- .PHONY -> .EXEC
2004-10-24 11:18:04 +00:00
Dag-Erling Smørgrav
f15952d8a2 Don't croak on port names that contain metacharacters. 2004-10-22 13:50:12 +00:00
Joe Marcus Clarke
b6eaadffb1 Fix the build on older versions of FreeBSD.
Reported by:	W.D. <WD@US-Webmasters.com>
2004-10-18 19:12:19 +00:00
Dag-Erling Smørgrav
6a8714c9fd Improve handling of installed ports whose origin can't be determined. 2004-10-13 19:53:36 +00:00
Adam Weinberger
2e3bce44a0 Enable bpm to grok the new INDEX format with extra fields.
Submitted by:	maintainer
2004-10-12 20:12:51 +00:00
Joe Marcus Clarke
5d94d62196 Support .ifndef and !defined when doing OPTIONS checking. 2004-10-12 19:40:05 +00:00
Thierry Thomas
9958c57947 Add an entry for a XSS vulnerability fixed in IMP-3.2.6. 2004-10-12 05:25:06 +00:00
Joe Marcus Clarke
26f28bbd81 * Update to 2.6.8
* Check PLIST_FILES for shared libraries, and make sure
  INSTALLS_SHLIB is defined [1]
* Check DATADIR and MAN3PREFIX macros [2]
* Check OPTIONS [3]

PR:		71405 [2]
		71468 [3]
Requested by:	michael johnson <ahze@ahze.net> [1]
Submitted by:	leeym [2] [3]
2004-10-12 04:33:46 +00:00
Pav Lucistnik
70198d1581 - Fix potential endless loop when a port changes his name depending on option
- Fix plist

PR:		ports/72074
Submitted by:	Michael C. Shultz <ringworm@inbox.lv> (maintainer)
2004-10-11 23:27:23 +00:00
Kris Kennaway
1acc6df893 BROKEN on 5.x: Does not compile
Approved by:    portmgr (self)
2004-09-26 02:08:38 +00:00
Kris Kennaway
3462fa1f72 BROKEN on 5.x: Does not compile
Approved by:    portmgr (self)
2004-09-17 23:02:58 +00:00
Christian Brueffer
488bd7efe4 Typo-fix in a comment
Approved by:	portmgr (krion)
2004-09-09 13:15:25 +00:00
Oliver Eikemeier
c821b0e337 - star-devel: privilege escalation
- multi-gnome-terminal: information leak
- usermin: remote shell command injection and insecure installation
- mpg123: layer 2 decoder buffer overflow

Approved by:	portmgr (implicit)
2004-09-08 21:57:10 +00:00
Oliver Eikemeier
1ea7e0e900 - XSS vulnerability in phpGroupWare wiki module
- add some references

Approved by:	portmgr (implicit)
2004-09-07 10:44:11 +00:00
Oliver Eikemeier
a093965a26 multiple vulnerabilities in LHA 2004-09-03 22:30:35 +00:00
Oliver Eikemeier
903db11a21 grrrr... left the test case intact 2004-09-03 21:36:18 +00:00
Oliver Eikemeier
e8a6142888 - update to version 0.5.9
(first attempts to check the base system for vulnerabilities)
2004-09-03 20:30:54 +00:00
Oliver Eikemeier
3648da397a - add some references
- extend ImageMagick entry
- squid ntlm authentication helper DoS
- multiple vpopmail vulnerabilities
- first attempts to check the base system for vulnerabilities:
  + cvs server code
  + zlib DoS
- BSD license portaudit.xml
2004-09-03 20:27:26 +00:00
Joe Marcus Clarke
cf8b7fbebf Update to 2.6.7
* Switch the direct use of ``echo'' check to suggest ${ECHO_CMD} or
  ${ECHO_MSG} instead of ${ECHO} [1]
* Tighten the check for improper GConf schema handling so that we only look
  in the GConf schemas directory [2]
* Correct some grammar mistakes [3]
* Avoid erroneous "direct use of command" warnings [4]

PR:		71159 [4]
Submitted by:	gerald [1]
		pav [3]
		eik [4]
Reported by:	pav [2]
2004-09-01 04:13:32 +00:00
Adam Weinberger
b53f2958fe The recently comitted BPM port fails to handle the new INDEX file
format, which has had several fields added to it.  In addition, it
reacts badly when parse errors occur on the INDEX file, resulting in
double free()s.  The patch works around both of these problems
until the next formal release.

PR:		ports/71213
Submitted by:	maintainer
2004-09-01 01:40:34 +00:00
Mark Linimon
76161f4953 Minor bug fix and pkg-plist correction.
PR:		ports/71138
Submitted by:	Michael C. Shultz <ringworm at inbox dot lv> (maintainer)
2004-08-31 05:28:33 +00:00
Oliver Eikemeier
bf0beda828 samba printer change notification request DoS 2004-08-30 23:43:44 +00:00
Oliver Eikemeier
41570a3aad add some references, add ru-gaim 2004-08-30 10:58:47 +00:00
Oliver Eikemeier
5f3eb07822 multiple vulnerabilities in gaim 2004-08-30 10:57:42 +00:00
Oliver Eikemeier
14664616fe security bug in rscsi client code
Submitted by:	marius
2004-08-30 10:07:22 +00:00
Mark Linimon
3468faaa0b Fix RUN_DEPENDS.
PR:		ports/70107
Submitted by:	Yen-Ming Lee <leeym at utopia dot leeym dot com>
Approved by:	maintainer timeout (3 weeks)
2004-08-29 01:27:05 +00:00
Jacques Vidrine
8961228139 Document NSS SSLv2 server buffer overflow (already referenced in
portaudit.txt).
2004-08-27 15:29:58 +00:00
Jacques Vidrine
b95b3a3535 Document ripMIME decoding bug (already referenced in portaudit.txt). 2004-08-27 14:43:07 +00:00
Oliver Eikemeier
4262ad369c Argh. Duplicate entry for "Scorched 3D server chat box format string vulnerabilty" 2004-08-27 10:34:05 +00:00
Oliver Eikemeier
e601056789 Mozilla / NSS S/MIME DoS vulnerability & Scorched 3D server chat box format string vulnerability 2004-08-27 10:31:21 +00:00
Jacques Vidrine
975dd4bd17 Note sanitize_path bug in rsync (already referenced in portaudit.txt). 2004-08-26 22:10:50 +00:00
Jacques Vidrine
c57e57ac31 Document buffer overflows in SoX (already referenced in portaudit.txt). 2004-08-26 20:34:41 +00:00
Jacques Vidrine
80e7374bc1 Document cookie bug in Konqueror (already referenced in portaudit.txt). 2004-08-26 20:15:22 +00:00
Jacques Vidrine
e139e5a754 Remove libxine issue which is now documented in the FreeBSD VuXML
document.

Reminded by:	eik
2004-08-25 13:58:01 +00:00
Oliver Eikemeier
26458d785a nss library SSL remote buffer overflow 2004-08-25 13:10:29 +00:00
Oliver Eikemeier
bea9f10345 multiple buffer overflows in xv 2004-08-25 11:07:08 +00:00
Dag-Erling Smørgrav
59ec3b081b Watch out for undefined values when resolving port origins. This makes
-I / -s work properly when some of the installed ports have since been
deleted from the ports tree.

Submitted by:	Thomas-Martin Seck <tmseck@netcologne.de>
2004-08-25 09:45:22 +00:00
Adam Weinberger
36223833b7 Fix path to INDEX file on 5.x.
Submitted by:	nork
2004-08-24 19:21:12 +00:00
Adam Weinberger
7e42812033 Fix build on current in some situations.
Submitted by:	krion
2004-08-24 14:18:53 +00:00
Adam Weinberger
44b3983a8b I am pleased to announce a new GTK+-2 interface to our ports tree!
BSD Ports Manipuator (BPM) is a graphical ports collection manager for
FreeBSD.  It has a GTK+ 2.0 interface and allows you to add, remove, or
upgrade software packages on your system without requiring you to use a
command-line. In addition, it can display details about available,
installed, and out-of-date ports, as well as allowing you to search
based on port descriptions.

BPM uses the existing ports collection structure, allowing it to build
ports from source and integrate seamlessly with other tools.

This project started out as a clone of Ports Manager.app for
DarwinPorts.

WWW: http://www.meowfishies.com/bpm.rhtml

Submitted by:	sethk@meowfishies.com
2004-08-24 04:21:59 +00:00
Oliver Eikemeier
13a24db696 Konqueror cross-domain cookie injection 2004-08-23 23:28:36 +00:00
Oliver Eikemeier
a744df8d30 handle some duplicates 2004-08-23 23:12:02 +00:00
Oliver Eikemeier
b88b1935d9 fix "too many open files" error when using the -r flag
Noted by:	nectar
2004-08-23 17:39:12 +00:00
Oliver Eikemeier
da80a04ac6 a2ps: Possible execution of shell commands as local user. 2004-08-21 10:45:26 +00:00
Sergey Matveychuk
8965349d14 Update to 0.2.0
PR:		ports/70701
Submitted by:	maintainer
Patches from:	Gudin Franci
2004-08-20 16:58:57 +00:00
Oliver Eikemeier
61e848dda0 correct topic of eda0ade6-f281-11d8-81b0-000347a4fa7d 2004-08-20 08:31:09 +00:00
Oliver Eikemeier
e510a55afd QT 3.x BMP (and possibly other graphics formats) heap-based overflow 2004-08-20 08:28:33 +00:00
Oliver Eikemeier
aeb091ef05 potential security flaws in mod_ssl 2004-08-18 20:01:44 +00:00
Oliver Eikemeier
21e5e83c57 move a800386e-ef7e-11d8-81b0-000347a4fa7d to xml 2004-08-17 07:56:37 +00:00
Oliver Eikemeier
539307be33 ruby CGI::Session insecure file creation 2004-08-16 12:23:39 +00:00
Oliver Eikemeier
01977fcaea Don't check the base system when PACKAGE_BUILDING 2004-08-16 02:24:06 +00:00
Oliver Eikemeier
ba24268c8f multiple phpGroupWare vulnerabilities 2004-08-15 23:44:59 +00:00
Oliver Eikemeier
137b94aa13 phpGedView, jftpgw 2004-08-15 17:22:09 +00:00
Oliver Eikemeier
153f0ae562 Remove -a from the default fetch(1) flags, so that the daily security
report is not delayed when the distribution site is down.

Submitted by:	kuriyama
2004-08-15 12:26:16 +00:00
Oliver Eikemeier
48af6951c8 apply xlist not to the own files 2004-08-13 17:51:46 +00:00
Oliver Eikemeier
40f8b91153 fix man page nits,
modify the vulnerability report depending on -q/-v (experimental)

PR:		69935, 68942
Submitted by:	Chris Pepper <pepper@reppep.com>, Johan Karlsson <k@numeri.campus.luth.se>
2004-08-13 17:07:05 +00:00
Oliver Eikemeier
9665fd1a09 update to 20040811: fix compilation with GCC 3.4 2004-08-13 17:01:01 +00:00
Oliver Eikemeier
ea84ffa8c6 fix some vuxml duplicates, add sympa unauthorized list creation 2004-08-13 16:48:12 +00:00
Michael Nottebrock
57447419e7 Add another entry for kdelibs3 due to another missed patch. 2004-08-12 21:32:15 +00:00
Michael Nottebrock
3f9cf344ae Correct entries for recent kde vuln's and add new entry for kdelibs
(3.2.3_3 didn't have all patches).
2004-08-12 21:17:31 +00:00
Oliver Eikemeier
a49bbe0700 fix security hole in non-chroot rsync daemon.
<http://www.freebsd.org/ports/portaudit/2689f4cb-ec4c-11d8-9440-000347a4fa7d.html>
2004-08-12 10:45:27 +00:00
Oliver Eikemeier
9fcf94529c 9fb5bb32-d6fa-11d8-b479-02e0185c0b53 is a duplicate of 40800696-c3b0-11d8-864c-02e0185c0b53 2004-08-12 00:08:05 +00:00
Oliver Eikemeier
ab808db926 f72ccf7c-e607-11d8-9b0a-000347a4fa7d is a duplicate of 6f955451-ba54-11d8-b88c-000d610a3b12, move references 2004-08-11 22:57:51 +00:00
Michael Nottebrock
461f3c5adb Factor out all but one of the build switches of the KDE main module ports
into separate ports. The OPTIONS will remain as of yet and trigger dependencies
now, for easy transition.

Update KOffice to version 1.3.2.

Add patches to fix a number of issues, including:

- fix kxkb on Xorg
- fix kdemultimedia WITH_MPEGLIB (now mpeglib_artsplug) compilation on gcc 3.4.2
  with optimizations greater than -O

Add security related patches and entries to portaudit.txt.
2004-08-11 01:27:37 +00:00
Oliver Eikemeier
0826a8f01d libine "vcd:" input source buffer overflow 2004-08-10 08:50:27 +00:00
Sergey Matveychuk
99854e3fcc Update to 0.1.9
This version corrects bus faults introduced in ver 0.1.8.
Also corrects two pkg-plist errors.

PR:		ports/70239
Submitted by:	maintainer
2004-08-10 05:34:34 +00:00
Oliver Eikemeier
9b87366d7a SpamAssassin DoS & cfengine authentication heap corruption 2004-08-10 00:56:37 +00:00
Sergey Matveychuk
9c2f4f169f Update to 0.1.8.
Fully PREFIX compliant now.
Complete run on CURRENT.

PR:		ports/70190
Submitted by:	maintainer
2004-08-09 08:23:07 +00:00
Thierry Thomas
577a6350ba Upgrade to 0.1.7.
PR:		ports/70136
Submitted by:	maintainer.
2004-08-08 15:03:20 +00:00
Thierry Thomas
5127aad1ed Version 0.5 release.
- Bugfix: sometimes the ports version was wrong;
- A default cvs server can be set;
- Port revision is added to port version number.

PR:		70162
Submitted by:	maintainer.
2004-08-08 14:15:54 +00:00
Oliver Eikemeier
97a39effba CVStrac arbitrary remote code execution 2004-08-07 09:09:26 +00:00
Sergei Kolobov
511d523c92 - Update to 0.63 (see NEWS for list of changes)
- Make devel/newfile dependency optional under WITH_NEWFILE knob:
  "port create" command is only useful to some porttools users, not all
2004-08-06 22:28:42 +00:00
Oliver Eikemeier
4192752964 fold entry 7eded4b8-e6fe-11d8-b12f-0a001f31891a into 2de14f7a-dad9-11d8-b59a-00061bc2ad93 2004-08-06 12:37:01 +00:00
Dirk Meyer
3e4de141f0 putty local command execution 2004-08-06 05:41:01 +00:00
Oliver Eikemeier
e9051fdc9c move abe47a5a-e23c-11d8-9b0a-000347a4fa7d to vuxml, add mozilla to the list of vulnerable ports 2004-08-05 23:35:33 +00:00
Norikatsu Shigemura
828d4f6cc8 o Security Update to 2.2.10-ja-1.0.
o rcNG-ify obtained from net/samba3.

PR:		ports/70034
Submitted by:	NAKAJI Hiroyuki <nakaji@jp.freebsd.org> (maintainer)
2004-08-05 16:45:52 +00:00
Oliver Eikemeier
6e03db2897 add Opera "location" object write access vulnerability 2004-08-05 15:36:32 +00:00
Oliver Eikemeier
34ec825973 move f9e3e60b-e650-11d8-9b0a-000347a4fa7d to vuxml, add mozilla to the list of vulnerable ports 2004-08-05 14:27:36 +00:00
Dirk Meyer
13fef83a69 back out last commit 2004-08-05 04:33:45 +00:00
Dirk Meyer
3e024e4469 putty local command execution 2004-08-05 04:31:41 +00:00
Oliver Eikemeier
44cc23b9f5 libPNG stack-based buffer overflow and other code concerns 2004-08-04 20:14:27 +00:00
Oliver Eikemeier
d2a2dca401 Acrobat Reader handling of malformed uuencoded pdf files 2004-08-04 11:43:15 +00:00
Oliver Eikemeier
c7b1c1500e Squid NTLM authentication helper overflow 2004-08-04 11:18:53 +00:00
Oliver Eikemeier
bbf3f18c40 ripMIME attachment extraction bypass 2004-08-04 11:10:43 +00:00
Joe Marcus Clarke
7dc9739e78 Update to a snapshot of CVS from today to fix the build with GCC 3.4.
Reported by:	pointyhat
Obtained from:	FreeBSD CVS
2004-08-02 20:41:15 +00:00
Oliver Eikemeier
85c0ee5920 GnuTLS certificate chain verification DoS 2004-08-02 17:54:10 +00:00
Sergey Matveychuk
3f5ee407b0 Add portmanager 0.1.3, freeBSD port management software. 2004-07-31 17:18:26 +00:00
Oliver Eikemeier
75d727f1ba phpMyAdmin configuration manipulation and code injection 2004-07-31 15:00:41 +00:00
Thierry Thomas
a7078ee1b7 Register a vulnerability in mail/imp3.
This vulnerability only exists when using the Internet Explorer to
access IMP and only when using the inline MIME viewer for HTML messages.
2004-07-30 17:28:06 +00:00
Oliver Eikemeier
28dfde096c Mozilla Firefox certificate spoofing 2004-07-30 15:28:22 +00:00
Oliver Eikemeier
249e0ee82b DansGuardian banned extension filter bypass vulnerability 2004-07-30 10:00:44 +00:00
Oliver Eikemeier
0ba870a58c add a reference to the SoX buffer overflow entry 2004-07-29 08:15:20 +00:00
Oliver Eikemeier
f6e55182ee SoX buffer overflows when handling .WAV files 2004-07-28 20:33:37 +00:00
Oliver Eikemeier
a62b98fbed LCDProc buffer overflow/format string vulnerabilities 2004-07-28 09:34:18 +00:00
Oliver Eikemeier
b050b96032 pavuk digest auth buffer overflow 2004-07-27 10:40:29 +00:00
Oliver Eikemeier
bf05dd3ccd add Nessus "adduser" race condition and Dropbear DSS verification bug 2004-07-27 10:30:43 +00:00
Oliver Eikemeier
5e008424e7 New option -r: restrict listed entries to selected references.
Useful for testing new entries.
2004-07-24 13:34:52 +00:00
Oliver Eikemeier
d003f0073d sync with latest b.p.m 2004-07-24 08:58:50 +00:00
Oliver Eikemeier
a3912db64c l2tpd BSS-based buffer overflow 2004-07-22 19:08:09 +00:00
Oliver Eikemeier
3026d705e1 phpBB cross site scripting vulnerabilities 2004-07-22 13:29:20 +00:00
Oliver Eikemeier
9d8e1dc1ce add subversion-perl, subversion-python 2004-07-20 15:48:58 +00:00
Oliver Eikemeier
aa0d0d585f subversion access control bypass 2004-07-20 10:30:55 +00:00
Oliver Eikemeier
219179b3ae mod_ssl format string vulnerability 2004-07-18 10:49:58 +00:00
Oliver Eikemeier
618d6d0383 create /var/db/options when it doesn't exist 2004-07-17 15:52:46 +00:00
Oliver Eikemeier
6ab61bf311 - synchronize with recent changes in bsd.port.mk
- work in progress: optionsng, cleanroom installation
2004-07-17 14:24:59 +00:00
Volker Stolz
9f09203bcf Add missing RUN_DEPENDS on devel/newfile
PR:		ports/59956
Submitted by:	Nicola Vitale
Approved by:	maintainer timeout
2004-07-16 16:23:17 +00:00
Oliver Eikemeier
8f4bafac8c Roundup directory traversal 2004-07-16 07:39:24 +00:00
Oliver Eikemeier
2cbfca83a7 wv library datetime field buffer overflow 2004-07-14 06:56:16 +00:00
Oliver Eikemeier
69227d213a multiple vulnerabilities in Bugzilla 2004-07-13 23:47:33 +00:00
Oliver Eikemeier
76de274928 check for a working tr(1). 2004-07-13 19:36:15 +00:00
Akinori MUSHA
463ee95f1c Add a patch to read the index file via sort(1) instead of reading
directly to avoid core dump.
2004-07-12 16:12:47 +00:00
Oliver Eikemeier
d09272bb2f correct vulnerable version of linux-png and add a reference 2004-07-11 12:09:03 +00:00
Oliver Eikemeier
53eb6314b5 libpng row buffer overflow 2004-07-11 11:18:58 +00:00
Oliver Eikemeier
070d49a73b typo in 'make master-sites-all' 2004-07-10 11:54:57 +00:00
Oliver Eikemeier
04ded1874e add some references 2004-07-09 14:51:16 +00:00
Oliver Eikemeier
4db3287849 FWIIW, enable the use of
make DISABLE_SIZE=yes checkdistsites
to check for corrupted files on sites that don't support SIZE
(the files are unfetchable from these sites anyway)
2004-07-08 23:30:04 +00:00
Oliver Eikemeier
5f1e2eed8c move e5e2883d-ceb9-11d8-8898-000d6111a684 to vuln.xml 2004-07-08 14:24:07 +00:00
Oliver Eikemeier
512239b93f add targets master-sites-all, master-sites, patch-sites-all, patch-sites
which print a sorted list of the respective sites (used e.g. by FreshPorts)
2004-07-07 14:51:17 +00:00
Oliver Eikemeier
e41c0a0867 fix a warning when GeoIP can't find the country for a site 2004-07-07 14:48:44 +00:00
Oliver Eikemeier
ffacc93b14 eliminate some verbatim uses of mktemp and sort
PR:		62298
2004-07-07 09:55:56 +00:00
Akinori MUSHA
be40c29b61 Fix a bug with -P when there are more than one binary package file for
a package to install or upgrade.

PR:		ports/68598
Submitted by:	Victor Prylipko <vic@liniya.ru>
Bug traced by:	Andrew Bliznak <andrew@ort.lviv.net>
2004-07-06 19:32:53 +00:00
Oliver Eikemeier
83eeebbaf9 add some references 2004-07-06 14:52:44 +00:00
Oliver Eikemeier
193ffbdfe8 Add devel/portmk, a place where bsd.port.mk development can happen. 2004-07-06 12:41:03 +00:00
Oliver Eikemeier
2fd042326d MySQL versions < 4.1 seem to be unaffected
Reported by:	Alexander Vasenin <blacksir@number.ru>
2004-07-06 07:17:53 +00:00
Joe Marcus Clarke
2e3ec09d45 Update to today's pkg_install from HEAD. 2004-07-06 00:17:35 +00:00
Oliver Eikemeier
3c0632af2c add MySQL server authentication bypass / buffer overflow 2004-07-05 19:45:32 +00:00
Oliver Eikemeier
1a7801a6e9 Mark 4aec9d58-ce7b-11d8-858d-000d610a3b12 as a duplicate of the
already existing c63936c1-caed-11d8-8898-000d6111a684.
2004-07-05 15:30:35 +00:00
Dag-Erling Smørgrav
80b65796e7 Perform plist substitution for -L.
Fix bug in origin determination.
2004-07-05 11:48:35 +00:00
Tom Rhodes
5538ca7e08 Move phpnuke vulnerabilities to VuXML. 2004-07-03 06:48:34 +00:00
Kris Kennaway
b408925a50 Use full path to portsdb instead of assuming ${LOCALBASE}/sbin is in PATH 2004-07-02 08:13:07 +00:00
Akinori MUSHA
46edc73a84 Apply a patch to avoid "undefined method `each' for nil:NilClass"
error when such configuration variable as MAKE_ARGS, typically
BEFORE_DEINSTALL is not defined.

Reported by:	krion, Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
2004-07-02 04:23:19 +00:00
Oliver Eikemeier
172c204547 move "phpMyAdmin code injection" to vuxml 2004-07-02 00:48:55 +00:00
Oliver Eikemeier
580eeeff30 Test OSVERSION instead of pkg_info -P to enable cross-version builds
Requested by:	kris
2004-07-02 00:31:18 +00:00
Oliver Eikemeier
6de9071e46 phpMyAdmin code injection 2004-07-01 19:03:36 +00:00
Oliver Eikemeier
2e23771c68 - update to version 0.5
*** NOTE ***

The preferences file format has changed, as have the periodic.conf(5) names.
Normally the default settings should be adequate, except when you need to
configure a proxy. Use $PREFIX/etc/portaudit.conf.sample as an example.

- moved portaudit to sbin
- clean up, merging stuff into the portaudit script
- better return codes and errors to stderr
- -f can check stdin now
- dropped ports tree auditing
- merged the periodic(8) scripts into one
- run daily auditing as `nobody'
2004-07-01 10:59:48 +00:00
Akinori MUSHA
8f484b7d54 Update to 20040701. New distfile.
portupgrade:
  - Make -PP/--use-packages-only work better, just as I originally
    intended.  Now packages are correctly identified using
    pkg_info(1), "LATEST_LINK" files are also properly detected.
    Related informational messages have also been improved.

    It turned out that the LATEST_LINK/NO_LATEST_LINK detection was
    broken long ago and hasn't been working for long.

pkg_fetch(1):
  - Properly rename a "latest link" file with a full package name with
    version part.

pkgtools.conf(5):
  - Improve and unify the method for pattern matching in MAKE_ARGS,
    BEFOREBUILD, BEFOREDEINSTALL and AFTERINSTALL variables.

    This should fix some cases where it looks like MAKE_ARGS entries
    are ignored.
2004-07-01 04:05:16 +00:00
Oliver Eikemeier
9bf7f5a9d0 - SSLtelnet remote format string vulnerability
(guys, this is a public list)

- add some references
2004-06-30 23:39:00 +00:00
Oliver Eikemeier
ccceaf623b update to 20040629: sync with -CURRENT 2004-06-30 10:31:45 +00:00
Oliver Eikemeier
f83bfb08cc add MIT Kerberos 5 krb5_aname_to_localname() buffer overflow 2004-06-29 10:33:03 +00:00
Oliver Eikemeier
cbfa0839a2 add isakmpd security association deletion vulnerability 2004-06-29 10:21:53 +00:00
Oliver Eikemeier
0f651b2743 add Apache input header folding DoS vulnerability 2004-06-28 22:09:24 +00:00
Oliver Eikemeier
0c0041370a xine-lib RTSP handling vulnerabilities 2004-06-28 09:55:46 +00:00
Tom Rhodes
4e1d155d33 Move MoinMoin entry to VuXML. 2004-06-28 03:58:47 +00:00
Oliver Eikemeier
8a65d874ab diversify url conversion 2004-06-28 01:16:35 +00:00
Joe Marcus Clarke
35c8dae828 Update to 2.6.6
* Fix a typo in the libtool archive hint [1]
* Check for ports that have a poorly specified CONFLICTS line as well as ports
  that conflict with themselves [2]
* Check for proper handling of gconf schemas
* Check for explicit listing of %gconf keys in the plist

Spotted by:	lofi [1]
Submitted by:	eik [2]
2004-06-27 20:58:47 +00:00
Oliver Eikemeier
9c7b32a018 add portaudit2vuxml.pl to easy the migration of entries to VuXML 2004-06-26 00:40:17 +00:00
Tom Rhodes
2da36a743f Add an entry for recent isc-dhcp3-server buffer overflows.
Remove the one in portaudit.txt.
2004-06-25 20:01:28 +00:00
Tom Rhodes
e28b04324b Move giFT-FastTrack to VuXML. 2004-06-25 17:18:57 +00:00
Oliver Eikemeier
44285aa4ba giFT-FastTrack remote DoS 2004-06-25 13:34:38 +00:00
Michael Landin
a9c369d7ef Add patch with bugfixes.
- Fix chmod behavior
	- Ignore irrelevant directories
	- Index creation speedup

Bump PORTREVISION.

Submitted by:		Radim Kolar <hsn@netmag.cz>
2004-06-25 13:11:30 +00:00
Oliver Eikemeier
627e20be53 Update to 0.2.2
- correct some URLs
2004-06-25 12:39:35 +00:00
Oliver Eikemeier
a77dbe0db0 correct rlpr version 2004-06-25 12:37:32 +00:00
Oliver Eikemeier
6a45552c43 Pure-FTPd DoS when the max number of connection is reached 2004-06-25 10:31:30 +00:00
Tom Rhodes
974bc49c9d Move the Gallery entry to VuXML. 2004-06-25 01:35:17 +00:00
Oliver Eikemeier
41c24e6c48 update to version 0.4.1
Use
  portaudit [packagename ...]
to check if package is listed as vulnerable
2004-06-25 01:21:20 +00:00
Oliver Eikemeier
979289bd12 rlpr local and remote exploitable buffer overflow (CAN-2004-0393, CAN-2004-0454) 2004-06-24 14:52:26 +00:00
Oliver Eikemeier
f78eb5764e CAN-2004-0451: format string vulnerabilities in sup 2004-06-24 11:23:32 +00:00
Oliver Eikemeier
7fdc9f0a99 Security flaw in rssh 2004-06-24 11:01:56 +00:00
Oliver Eikemeier
96ddfca118 Icecast remote DoS vulnerability 2004-06-24 10:45:20 +00:00
Oliver Eikemeier
8d9c87c405 Add pkg-req file which was forgotten in the last commit. 2004-06-23 16:02:23 +00:00
Oliver Eikemeier
f5b10d70f9 Update to version 0.4, with a new `-f' option.
To check which of the current ports have known vulnerabilities, do

  portaudit -f /usr/ports/INDEX

This port requires pkg_install(-devel)>=20040623
2004-06-23 16:01:38 +00:00
Oliver Eikemeier
358542a875 update to version 20040623, which has a new `filter mode' for pkg_version -T.
If you want to know which ports match '{,??-}apache{,-*}<2.*', do

  /usr/local/sbin/pkg_version -T - '{,??-}apache{,-*}<2.*' < /usr/ports/INDEX | awk -F\| '{print$1}'
2004-06-23 15:55:44 +00:00
Oliver Eikemeier
bf6d0ee746 it seems like isc-dhcp3-{client,devel} are unaffected 2004-06-23 12:11:34 +00:00
Oliver Eikemeier
d8f20aab80 reword gallery entry
add multiple isc-dhcp3 vulnerabilities
2004-06-23 11:56:52 +00:00
Oliver Eikemeier
a1cb510643 Update of port which supports FreeBSD-5 alike INDEX-5 file parsing
PR:		68212
Submitted by:	Anselm Garbe <anselmg@t-online.de> (maintainer)
2004-06-22 22:33:38 +00:00
Oliver Eikemeier
dc9ea0fae4 Sqwebmail 4.0.4 XSS vulnerability 2004-06-22 09:41:14 +00:00
Akinori MUSHA
957f9e448a Oops, the previous patch was bogus. Sorry. 2004-06-22 04:09:43 +00:00
Michael Nottebrock
fffa7a8da4 Upgrade to version 0.4
PR: ports/68175
Submitted by: Heiner Eichmann <h.eichmann@gmx.de>
2004-06-21 20:24:05 +00:00
Oliver Eikemeier
c60724f5cd Roundup remote file disclosure vulnerability 2004-06-21 18:27:02 +00:00
Akinori MUSHA
67b44cc4ca Support the new, extended INDEX format. 2004-06-21 17:38:48 +00:00
Oliver Eikemeier
9dec4894a1 make expiry date customizable via daily_status_portaudit_expiry 2004-06-21 16:04:27 +00:00
Oliver Eikemeier
d9017ab9ff mailman allows 3rd parties to retrieve member passwords (CAN-2004-0412)w 2004-06-21 15:29:53 +00:00
Oliver Eikemeier
fc1f0d94bc super format string vulnerability 2004-06-21 14:44:44 +00:00
Oliver Eikemeier
5e081dab71 Scorched 3D server chat box format string vulnerability 2004-06-21 09:21:05 +00:00
Oliver Eikemeier
da23cae179 BNBT Authorization Header DoS 2004-06-21 08:46:20 +00:00
Thierry Thomas
f705e2b990 - The previous commit included ruby18-raspell-0.1, which is not affected.
- Add a separate entry for linux-aspell.

Reported by:	Oliver Eikemeier.
2004-06-20 16:56:48 +00:00
Thierry Thomas
6fcb668607 Security: fix a buffer overflow in word-list-compress:
- <http://marc.theaimsgroup.com/?l=bugtraq&m=108761564006503&w=2>
	- <http://nettwerked.mg2.org/advisories/wlc>

Since I'm there, switch from libtool 1.3 to 1.5, to cope with
PR ports/63944.

Obtained from:	Robert Nagy <robert@openbsd.org>.
2004-06-20 09:04:32 +00:00
Oliver Eikemeier
017af34e32 ircd-hybrid-7 low-bandwidth DoS 2004-06-20 07:26:27 +00:00
Oliver Eikemeier
cfaf552880 Fetch the database from http://www.FreeBSD.org/ports/ first.
Thanks to:	kuriyama
2004-06-18 08:07:29 +00:00
Oliver Eikemeier
99a5cf7b63 make BASEURL customizable 2004-06-18 07:42:06 +00:00
Oliver Eikemeier
5f0c117b40 add subversion-perl, subversion-python 2004-06-18 06:33:31 +00:00
Oliver Eikemeier
a0b53a8c5e added racoon certificate validation bug 2004-06-17 08:02:23 +00:00
Oliver Eikemeier
d3c49ee1e5 update to 0.2
- add the ability to specify multiple URLs
2004-06-17 07:13:37 +00:00
Oliver Eikemeier
30afb3b9fd add moinmoin, phpnuke and webmin vulnerabilities 2004-06-17 06:35:51 +00:00
Oliver Eikemeier
f005b4280b SquirrelMail has a localized japanese version 2004-06-16 07:52:45 +00:00
Oliver Eikemeier
832beb11b5 Add SquirrelMail XSS vulnerability 2004-06-16 07:46:18 +00:00
Joe Marcus Clarke
c1b62aafb1 Update to 2.6.5.
* Fix a bug introduced in the "use strict" conversion, and don't check patch
  files for trailing blank lines
* Add a check to make sure pkg-config files are installed into the correct
  location [1]
* Fix some nearby spacing nits

Requested by:	pav [1]
2004-06-15 06:26:49 +00:00
Oliver Eikemeier
39ef4085be typo 2004-06-14 17:13:49 +00:00
Oliver Eikemeier
10e0fc75b2 Point all vulnerabilities to the base URL, so that entries
look a little more official.

Pointed out by:	Matthew George <mdg@secureworks.net>
2004-06-14 16:57:08 +00:00
Oliver Eikemeier
ce219b23dc update to 0.1.1, supporting some of the VuXML 1.1 features 2004-06-14 08:04:41 +00:00
Oliver Eikemeier
fb939dfac3 reword some descriptions 2004-06-14 07:01:13 +00:00
Thierry Thomas
a89c49c5de Change URLs for a better reference about IMP & Chora vulnerabilities.
Requested by:	eik (bis).
2004-06-13 13:04:22 +00:00
Thierry Thomas
5bd2ec8846 Add an entry for Chora and IMP.
Requested by:	eik
2004-06-13 10:16:30 +00:00
Oliver Eikemeier
244200695e Added CAN-2004-0488, CAN-2004-0492, DBMail vulnerability, smtpproxy vulnerability,
CAN-2004-0413 (subversion)
2004-06-13 08:26:12 +00:00
Oliver Eikemeier
53ec7442a9 portaudit-db generates a portaudit database from a current
ports tree. It also features a file `database/portaudit.txt'
where UUIDs for vulnerabilities can be allocated quickly
before they are moved to the VuXML database.

Call `packaudit' after upgrading your ports tree.
2004-06-12 22:43:44 +00:00
Joe Marcus Clarke
3dc11612ee Fix a bug where the wrong path to pkg_add could result when doing recursive
pkg_adds.

Reported by:	kris
2004-06-12 22:17:51 +00:00
Oliver Eikemeier
bf2ddf8871 accidentally packaged a wrong distribution file
Noted by:	Randy Pratt <rpratt1950@earthlink.net>
2004-06-12 08:45:05 +00:00
Oliver Eikemeier
03c46206b1 fix a problem with adding packages recursively under certain conditions
Noted by:	kris
Fix from:	marcus
2004-06-12 01:13:35 +00:00
Kris Kennaway
564ffbc957 Fix package build by using explicit paths in RUN_DEPENDS 2004-06-09 03:20:54 +00:00
Pav Lucistnik
44000a1a4f - Add dependency on portupgrade
PR:		ports/67662, pending/67679
Submitted by:	Stefan Walter <sw@gegenunendlich.de>
Approved by:	maintainer
2004-06-07 19:19:45 +00:00
Joe Marcus Clarke
b9675a58cf Update to 2.6.4.
* Remove check for SIZE and MD5 in distinfo since this was a rush job, and
  missed some common cases. [1]
* Re-enable use strict, and fix portlint to obey it

Requested by:	eik [1]
2004-06-06 17:04:28 +00:00
Joe Marcus Clarke
0bc1fe6be6 Update to 2.6.3.
* Add a generic check for deprecated macros (e.g. the recent autotools batch),
  and add USE_MESA to the set [1]
* Only use USE_LIBTOOL_VER for checking .la file installation [1]
* Add a check for USE_LIBLTDL and warn about directly using a libltdl
  dependency [1]
* Check distinfo to make sure each file in DISTFILES has SIZE and MD5 entries
  if NO_SIZE and NO_CHECKSUM are not defined

Submitted by:	krion and tobez [1]
2004-06-06 01:06:33 +00:00
Will Andrews
204ac3822b Update to 0.7.
PR:		67595
Submitted by:	Stefan Walter <sw@gegenunendlich.de>
Approved by:	maintainer
2004-06-05 17:36:33 +00:00
Joe Marcus Clarke
d69ede6402 Update to the latest CVS HEAD snapshot (as of today). Also, make sure we
use .tgz packages by default on systems that do not support .tbz packages.
Thanks to eik for pointing this little problem out.
2004-05-30 23:33:32 +00:00
Joe Marcus Clarke
53262e188e Update to 2.6.2.
* Do not complain about SIZE if NO_SIZE is set [1]
* Allow ``%%PORTDOCS%%@unexec rmdir %D/%%DOCSDIR%% 2>/dev/null || true'' in
  pkg-plist when using PORTDOCS
* Be a little smarter about complaining when .la files are seen in the plist.
  Also, point users to the GNOME site for elimintating .la files altogether [2]
* Super-scrub PKGNAME and PORTVERSION for illegal characters [3]
* Check for port versions that go backwards [3]

PR:		66891 [2]
Submitted by:	krion [1]
		leeym [2] (based on)
		eik [3]
2004-05-30 19:57:49 +00:00
Akinori MUSHA
4d9be12a2c Update to 20040529.
overall:
  - Update Copyright years.
  - Apply massive message improvement. (I hope..)

pkgtools.conf(5):
  - pkg_site_mirror(): Use pointyhat.FreeBSD.org instead of bento and
    beta.

portupgrade(1):
  - Indicate some pieces of information on what is going on in the
    process title.

portversion(1):
  - Make a generated script (with -c) accept additional arguments for
    portupgrade(1).
2004-05-29 04:12:20 +00:00
Mark Linimon
0f906db68c Add two new metaports comprising a set of tools to work with the Ports
Collection.  One is targeted to the audience of people who wish to
install ports from source and then maintain their system; the other,
more specialized, is intended for ports authors.

These might be good candidates for a "start here" reference for those
new to the ports collection and port maintenance.  They might also serve
to introduce more people to fastest-cvsup, pkg_cutleaves, libchk, and
porttools, which IMHO would be A Good Thing.

PR:		ports/65161
2004-05-26 23:28:15 +00:00
Dag-Erling Smørgrav
216225e187 Try to fetch an up-to-date index from http://www.freebsd.org/ports/. 2004-05-24 13:10:16 +00:00
Oliver Eikemeier
d3c2c38d25 update to version 20040517, which parses 10alpha3 as 10.a3.
Special strings parsed that way are pl, alpha, beta, pre and rc.

Affected ports:
- databases/sybtcl	sybtcl-3.0rc2
- graphics/linux-bmrt	linux-bmrt-2.6beta
- net/py-ldap2		py23-ldap2-2.0.0pre21
2004-05-18 10:06:28 +00:00
Kirill Ponomarev
f155e79a5d - Update to 20040517
(add parameter '-L': treat exclude file as a list of files
  that *should* be installed and report deviations from that
  list; patch sent by Bob Van Valzah <Bob@VanValzah.Com>)

PR:		ports/66734
Submitted by:	maintainer
2004-05-17 14:15:38 +00:00
Oliver Eikemeier
4c54050fe3 Make 4a < 4a0 in order to improve consistency with missing version numbers
and compatibility with other port tools
2004-05-13 01:19:43 +00:00
Oliver Eikemeier
7096855136 Update to 20040511
- fix a glitch when [!...] is used in patterns
2004-05-12 07:27:19 +00:00
Oliver Eikemeier
1a30c92355 disable on bento because the dynamical
port version triggers a consistency check.
2004-05-11 01:27:53 +00:00
Dag-Erling Smørgrav
4c4e66fc37 Use 'make checksum' instead of 'make fetch'. 2004-05-10 11:11:16 +00:00
Oliver Eikemeier
0ab2bbfdf9 - fix package extensions for 4.x
- add support for 4.10-release

Now
  /usr/local/sbin/pkg_add -r openldap21-client
should work on all FreeBSD versions

- FWIIW, fix pkg_sign -t sha1 (PR 66354)
2004-05-08 15:47:55 +00:00
Mathieu Arnold
3dc797a22f Update to 20040414,
- Add the ability to handle portnames with + sign

PR:		65329
Submitted by:	maintainer
2004-05-04 15:33:14 +00:00
Oliver Eikemeier
f7a4c786af enable the use of csh-style {...} choices in glob patterns, e.g.
/usr/local/sbin/pkg_info 'openldap-{client,server}-*'
2004-05-01 11:41:43 +00:00
Joe Marcus Clarke
ce673392c8 Update to 2.6.1.
* Add a check to see if PLIST_{FILES,DIRS} is defined and pkg-plist exists.
  If so, print an error [1]
* Add a check for direct usage of iconv.\d+ and intl.\d+ instead of USE_ICONV
  and USE_GETTEXT [1]
* If %%DOCSDIR%% is used in the plist, make sure @dirrm %%DOCSDIR%% is also
  present [1]
* Don't flag a missing distinfo as FATAL [2]

Submitted by:	krion [1]
		eik [2]
2004-05-01 02:25:00 +00:00
Oliver Eikemeier
8336aa8d65 Fix usage of pkg_create
PR:		66081
Submitted by:	Toni Viemero <toni.viemero@iki.fi>
2004-04-29 14:09:08 +00:00
Oliver Eikemeier
24850630c2 add an `-S' option to pkg_create, mostly
useful for clean room package creation (PR 66032)
2004-04-29 09:23:38 +00:00
Kirill Ponomarev
ea264ff932 - Update to version 0.2
PR:		ports/65666
Submitted by:	maintainer
2004-04-17 19:26:58 +00:00
Joe Marcus Clarke
83dea9ea8f * Update to today's -CURRENT snapshot
* Add local patches to cause pkg_add to spawn itself correctly when installing
  dependent packages.  Previously, it would always spawn /usr/sbin/pkg_add.
2004-04-16 18:20:14 +00:00
Oliver Eikemeier
9fff147f62 Introduce '*' as the lowest possible version number, so that
>=2.* <3.*
matches all 2.X versions, even alpha.

Fix a malformed conditional, noted by linimon.
2004-04-16 01:24:46 +00:00
Kris Kennaway
f27a7a1531 Add missing @dirrm 2004-04-13 22:44:40 +00:00
Dag-Erling Smørgrav
5c23c7a662 Don't require additional command line arguments when -I is specified. 2004-04-11 21:54:48 +00:00
Dag-Erling Smørgrav
3cd8af21a2 Cosmetic: sort the status report, wrap a long line. 2004-04-05 13:27:21 +00:00
Sergei Kolobov
acd22963db - Update pkg-descr to reflect reality
PR:		ports/64884
Submitted by:	mike johnson <ahze@ahze.net>
2004-04-05 09:33:17 +00:00
Joe Marcus Clarke
731798cdcf Chase the glib20 update, and bump all affected ports' PORTREVISIONs. 2004-04-05 03:31:02 +00:00
Dag-Erling Smørgrav
53901eee90 Rework the dependency discovery and update code, as well as the handling
of installed ports and status (up-to-date / out-of-date) reporting.  This
should make porteasy slightly more consistent, and up to 25% faster.
2004-04-02 16:08:17 +00:00
Oliver Eikemeier
10813956a8 update to 0.3.1:
- use passive ftp by default, don't retry on failure [1]
- add a -C flag, portlint style
- don't keep databases that are tool old [2]

Requested by:	hubs [1]
Noticed by:	Nicolas Rachinsky <nicolas@rachinsky.de> [2]
2004-03-31 22:52:01 +00:00
Dag-Erling Smørgrav
9373bb2029 Use the two-argument version of mkdir() for backward compatibility.
PR:		ports/64984
Submitted by:	Jurij Ivliev <yury@esterdev.com>
2004-03-31 11:53:57 +00:00
Trevor Johnson
8232e82f85 SIZEify (maintainer timeout) 2004-03-31 03:12:58 +00:00
Dag-Erling Smørgrav
0547b0e198 Add support for MOVED. 2004-03-29 15:14:23 +00:00
Akinori MUSHA
1b5b1d26d5 Fix a stupid bug introduced by the last update, which destroyed
pkgnames and caused portupgrade to fail.

Reported by:	Palle Girgensohn <girgen@pingpong.net>
2004-03-28 22:40:25 +00:00
Joe Marcus Clarke
6ab42818d7 Update to 2.6.0
* Add some additional checks for USE_* variables included too late [1]
* Add a check for SIZE in distinfo [2]
* Fix a small style nit [2]
* Warn is USE_SIZE is used in a port's Makefile
* Check to see if a port supports WITHOUT_NLS if USE_GETTEXT is defined [3]

Submitted by:	eik [1]
		krion [2]
Requested by:	kris [3]
2004-03-26 20:43:13 +00:00
Akinori MUSHA
3161161d7d Update to 20040325.
- Ignore padded 0's in version comparison.

  This fixes a bug 2.00 being wrongly regarded as equal to 2.0.2.

- Show a summary of how many packages were upgraded, ignored, skipped
  and failed after listing results.

  Requested by: netchild
2004-03-24 21:54:25 +00:00
Joe Marcus Clarke
31441bb2d6 Update to 2.5.9.
* Add code for formal master/slave checking rules as defined in ports/64393 [1]:

  1. A port is a slave port if and only if MASTERDIR != .CURDIR
  2. Slave ports should define MASTERDIR using one of the following lines:

    MASTERDIR=	${.CURDIR}/../../<category>/<port>
    MASTERDIR=	${.CURDIR}/../<port>

  3. Non-slave ports shouldn't define MASTERDIR at all
  4. The last line of a slave port's Makefile has to be

    .include "${MASTERDIR}/Makefile"

  5. The last line of a non-slave ports Makefile must be one of:

    .include <bsd.port.mk>
    .include <bsd.port.post.mk>

  6. slave ports may not include bsd.port(.pre).mk

* Check to make sure MACHINE_ARCH is not defined and make sure it is never
  tested directly [2]
* Fix some grammar nits [3]

PR:		64420 [1]
Submitted by:	eik [1]
		krion [3]
Requested by:	kris [2]
2004-03-21 08:24:41 +00:00
Michael Landin
d07ec18b9e - SIZEify.
Submitted by:		trevor
2004-03-18 09:56:10 +00:00
Trevor Johnson
e1177f5c54 Add size data.
Approved by:	maintainers
2004-03-18 02:27:55 +00:00
Oliver Eikemeier
1832c23a94 Update to 0.3.
Since we are using the official VuXML database
the auditing should be pretty complete.

- mention web page
- add more mirrors, disabling .ru mirror (too much lag)
- allow combined options in portaudit shell script
- add sample configuration file
- use absolute paths for binaries, to ease use in crontab scripts [1]
- correct type in man page [2]

PR:		64005 [2]
Submitted by:	Tomasz Pilat <poncki@axelspringer.com.pl> [1]
		Nathan Dove <njdove@wafer.sandia.gov> [2]
2004-03-11 11:11:59 +00:00
Joe Marcus Clarke
26b0d5c789 Update to 2.5.8.
* Add dirname and egrep direct command use checks
* Add a missing '?' in checking for text after bsd.port(.post)?.mk [1]
* Add a check to make sure OPTIONS is set before bsd.port.pre.mk

Submitted by:	eik [1]
2004-03-10 06:33:00 +00:00
Dag-Erling Smørgrav
c9b5d11453 Make the variable definition syntax more like make(1)'s, and update the
documentation accordingly, fixing some markup bugs in the process.
2004-03-02 17:00:45 +00:00
Joe Marcus Clarke
2f289f6fdb Update to 02/29/2004's CVS HEAD snapshot of the pkg_install code to fix some
problems with adding certain packages (e.g. docbook-xsl).
2004-02-29 23:32:51 +00:00
Oliver Eikemeier
598dedc510 grammar
Submitted by:	will, nectar
2004-02-25 14:12:03 +00:00
Oliver Eikemeier
16af0c01c0 add a security contact 2004-02-25 12:47:13 +00:00
Oliver Eikemeier
6cd6202ef7 - bugfix: awk in -CURRENT accepts no regexes in RS, causing the database
update to fail

- add an install & deinstall message

Submitted by:	nectar & Ion-Mihai Tetcu <itetcu@apropo.ro>
2004-02-25 09:46:26 +00:00
Oliver Eikemeier
dd190f52fe update to 0.2:
- new command line tool
- new man page
- reworked database update code, incorporating feedback from
  Max Khon <fjoe>, Radim Kolar <hsn@netmag.cz> (PR 63066) and
  Ion-Mihai Tetcu <itetcu@apropo.ro> (PR 62655)
2004-02-21 21:19:41 +00:00
Oliver Eikemeier
82977d8f6c update to 20040216:
- enables the use of `+' in version numbers:
  1.0.1+2003.09.16 > 1.0+2003.09.16
2004-02-19 12:39:52 +00:00
Oliver Eikemeier
5ef80c7ef0 Disable auditfile.txt until we decide on a database format,
two databases cause more confusion than it is worth.

portaudit uses ports/security/vuxml/vuln.xml in the meantime,
please commit your changes there and send feedback wich format
you prefer.

Currently we have to migrate gnats, mailman, monkey and some
apache versions.
2004-02-19 02:19:33 +00:00
Oliver Eikemeier
2ea4608d31 add bind, pine, samba 3.x 2004-02-17 12:28:13 +00:00
Oliver Eikemeier
2f1bc26f47 remove duplicate mutt entry, sorry. 2004-02-16 20:19:53 +00:00
Oliver Eikemeier
3fcca49ba6 add mutt and mailman 2004-02-16 19:14:24 +00:00
Oliver Eikemeier
f78667fc99 XFree86-Server font file buffer overflows 2004-02-16 18:41:05 +00:00
Oliver Eikemeier
c9d6de4408 add GNATS3 2004-02-16 15:02:04 +00:00
Oliver Eikemeier
dcb711e3ef require gaim version 0.75_6, since the vulnerability has been re-introduced
add libtool symlink vulnerability
2004-02-13 14:20:15 +00:00
Oliver Eikemeier
d873cb4b08 add fspd <= 2.8.1.3
PR:		62747
Submitted by:	Radim Kolar <hsn@netmag.cz>
2004-02-13 01:22:49 +00:00
Clement Laforet
88f171bfd3 Add mutt < 1.4.2 vulnerabilty. 2004-02-11 18:28:18 +00:00
Oliver Eikemeier
89e295c836 add an URL where at least somek kind of advisory for monkeyd can be found... 2004-02-11 11:54:29 +00:00
Clement Laforet
51242e4c41 Add entries for:
- www/apache13-ssl<1.3.29.1.53
	- www/monkey < 0.8.2
2004-02-11 00:07:28 +00:00
Oliver Eikemeier
14c08ca6ff add clamav<0.65_7
PR:		62586
2004-02-10 14:11:14 +00:00
Pav Lucistnik
b61b507ba1 Update to 20040207
- provide a dummy exclusion pattern if the exclude file exists but
  doesn't contain any patterns (Yen-Ming Lee <leeym@FreeBSD.org>)
- progress status display for interactive phase, too
- minor code cleanups, improved comments/docs

PR:		ports/62539
Submitted by:	Stefan Walter <sw@gegenunendlich.de> (author)
2004-02-08 22:25:19 +00:00
Akinori MUSHA
523f98163a Update to 20040208. (Just repacked to roll up recent patches) 2004-02-08 08:38:31 +00:00
Akinori MUSHA
ca2acc4c1c Fix a long-standing silly bug in uninstall_pkg(). 2004-02-08 08:18:30 +00:00
Akinori MUSHA
4bb4e26f2b Make portsdb -U use the canonical way to make a ports index file now
that make index has got fast enough.

Suggested by:	kris
2004-02-07 08:56:58 +00:00
Trevor Johnson
a049dd78cc Use PLIST_FILES (bento-tested, marcus-reviewed). 2004-02-06 13:12:53 +00:00
Trevor Johnson
3c175cb569 Use PLIST_FILES.
Reviewed by:	marcus
2004-02-05 20:38:07 +00:00
Joe Marcus Clarke
73f7c91b5d Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.
(Part 1)
2004-02-04 05:10:27 +00:00
Akinori MUSHA
2e991b1aa5 Add a patch to make portupgrade just use stdout/stderr redirection to
keep build logs rather than calling script(1) when stdin is not a tty.

I wonder if this works against the portupgrade-from-cron problem...
2004-01-31 17:15:13 +00:00
Sergei Kolobov
ee6478c3fc SIZE *DOES* MATTER. 2004-01-30 16:03:29 +00:00
Trevor Johnson
f15b845ebe SIZEify. 2004-01-29 16:13:06 +00:00
Oliver Eikemeier
c085c8d328 Speling 8P 2004-01-28 19:25:56 +00:00
Oliver Eikemeier
5ddd771fd6 Add some more examples (inn, apache) to test combined >= & < relations 2004-01-28 16:19:08 +00:00
Oliver Eikemeier
112248f85d tandart vulnerability test for port auditing systems
This is a package to test FreeBSD port auditing systems, e.g. portaudit
  and the upcoming VuXML based system. Even though it installs no files,
  it is listed in the portaudit database as vulnerable.

  Kind of a EICAR-STANDARD-ANTIVIRUS-TEST-FILE
2004-01-28 16:17:30 +00:00
Oliver Eikemeier
34522b5af1 portaudit provides a list of published security vulnerabilities
of FreeBSD ports and tools to check if installed ports are listed.

Since this is a prerelease version, it is mostly usable for
committers that want to contribute to the project, and can currently
not be relied upon as an extensive security auditing tool.
2004-01-27 19:24:52 +00:00
Oliver Eikemeier
51318f1756 - remove sourceforge from MASTER_SITES
- install in /usr/local by default
- conflict with sysutils/pkg_install
2004-01-27 17:36:08 +00:00
Oliver Eikemeier
a35e2bab14 Development version of the FreeBSD 5.x pkg_install suite of tools
to test new features

PR:		56961, 56989 and 57029
2004-01-26 00:07:11 +00:00
Clement Laforet
b6ffb8d2af - Use PLIST_FILES
PR:		61886
Submitted by:	Stefan Walter <sw@gegenunendlich.de> (maintainer)
2004-01-25 16:25:19 +00:00
Joe Marcus Clarke
08837877ea * Update to 2.5.7
* Fix some grammar nits in portlint.1
* Add some missing options to the summary in portlint.1
* Reorganize some option descriptions in portlint.1
* Add an ENVIRONMENT section describing PL_CVS_IGNORE and PORTSDIR in
  portlint.1
* Don't check the MAINTAINER field for direct command use [1]
* Add a new PL_CVS_IGNORE environment variable that allows users to filter
  out certain patterns from the CVS files check [2]
* Only warn about CATEGORY problems if the user is in PORTSDIR [3]
* Sync new command macros with recent bsd.port.mk changes
* Correct a regular expression problem when looking for direct command use [4]

PR:		61562 [1]
		61449 [2] [3]
Submitted by:	Sergey Matveychuk <sem@ciam.ru> [1]
		sergei [3]
		leeym [4]
2004-01-22 20:06:36 +00:00
Dag-Erling Smørgrav
e6e63e1d29 check out Tools along with Mk and Templates. also fix a minor typo. 2004-01-22 15:06:01 +00:00
Akinori MUSHA
38774b2ac7 Update to 20040113, a small maintenance release.
portsdb(1)
  - Follow ports intrastructure changes wrt build-time dependency --
    now portsdb -U properly picks EXTRACT_DEPENDS so they appear build-time
    dependency. (Thanks to schweikh)

misc.
  - Fix typos in documentation.  I seem to be unable to spell "pacakge"
    correctly, being a portmgr.  Or was it "pakcage" ?  Anyway, it was
    fortunate that I wasn't a packge manager.
2004-01-14 07:23:19 +00:00
Tom Hukins
86c7e0c397 Update to 0.04 which fixes some bugs (and provides tests to reduce the
risk of further bugs), and has cleaner code in a few places.
2004-01-14 00:04:07 +00:00
Joe Marcus Clarke
0038a81633 Update to 2.5.6.
* Check to make sure RCS tags begin with capital letters [1]
* Do not look direct command use in .for loops [2]

PR:		60947 [1]
Submitted by:	leeym [1]
		petef [2]
2004-01-07 06:42:55 +00:00
Joe Marcus Clarke
88454c9afc * Update to 2.5.5
* Fix up the usage text
* Ignore arguments passed to REINPLACE_CMD so portlint will not complain on
  things such as ${REINPLACE_CMD} -e 's,/usr/local,${PREFIX},g' [1]
* Only match libraries installed into lib when looking for .so's [2]
* Try to make the PKGCATEGORY check a little more forgiving to committers
  checking single ports [3]

PR:		60608 [1]
		60803 [2]
Submitted by:	leeym [1] [2] (based on)
		dougb [3]
2004-01-02 02:20:41 +00:00
Pav Lucistnik
5d240596fa Update to 20031231
Cosmetic update, no functional changes:
- exit automatically when there aren't any more packages to process
- send error messages to stderr
- ignore whitespace in user input, don't blindly get the first character

PR:		ports/60763
Submitted by:	Stefan Walter <sw@gegenunendlich.de> (maintainer)
2003-12-31 15:12:54 +00:00
Pav Lucistnik
c9f4bc9773 - Update to 20031227
- check for empty +REQUIRED_BY files, too (Yen-Ming Lee <leeym@leeym.com>)
- optionally run 'pkgdb -F' after each run (new parameter '-F')
- add info messages for progress status when deinstalling packages
- minor code cleanups, improvement of messages/comments
- remove the 'usage' text from the pkg-descr file

PR:		ports/60639
Submitted by:	Stefan Walter <sw@gegenunendlich.de> (author)
2003-12-27 23:08:05 +00:00
Joe Marcus Clarke
5ca680f076 Catch the pkg-descr up with reality. 2003-12-27 00:57:31 +00:00
Joe Marcus Clarke
e02168c9a6 * Update to 2.5.4
* Correct a typo (-n should be -N) [1]
* Don't check comments for direct command use [2]

Submitted by:	pav [1]
		Sascha Holzleiter <sascha@root-login.org> [2]
2003-12-27 00:45:20 +00:00
Mark Linimon
1573031918 Add sysutils/portdowngrade, a utility to help downgrade FreeBSD ports by
analyzing the history of commits to the port and presenting the user the
list of changes. By selecting one, the port can be set back to a previous
version easily.

WWW: http://sourceforge.net/projects/portdowngrade/
PR: ports/48257
Submitted by: Heiner Eichmann <h.eichmann@gmx.de>
2003-12-04 06:37:09 +00:00
Joe Marcus Clarke
debac8b327 Ack, I knew I forgot something. Add a new -C argument that enables pedantic
committer mode.  This is the identical to -A except it omits the new port
checks.

Requested by:	eik
2003-11-22 20:38:55 +00:00
Joe Marcus Clarke
c2d31c5361 Standardize all error messages to include the filename at least (and line
number where possible).  Bump version to 2.5.2.

Reviewed by:	eik
2003-11-22 20:29:03 +00:00
Joe Marcus Clarke
22030dac05 * Check to make sure new ports do not contain PORTREVISION [1]
* Check to make sure new ports do not contain PORTEPOCH
* Throw a FATAL error if an additional file exists in the port directory but
  not in CVS [2]
* Throw a FATAL error if a file is in CVS but not in the port's directory [2]
* Throw a FATAL error if a file was deleted from CVS but still in the port's
  directory [2]
* Warn if a new file contains a non-empty RCS Id [2]
* Add a missing ``if ($verbose)'' [2]

Submitted by:	arved [1]
		eik [2]
2003-11-21 02:55:08 +00:00
Joe Marcus Clarke
4f21abd357 Remove EXAMPLESDIR.
Submitted by:	krion
2003-11-17 21:19:02 +00:00
Joe Marcus Clarke
1f93b36619 Update to 2.5.0.
* Add some linenumbers to the whole file search
* Hack the direct command use code some more
* Add a check for the deprecated USE_MESA
* Allow PKGCATEGORY not in CATEGORIES [1]
* Allow %B in pkg-plist, as it has a valid prefix [1]
* Allow simple rm -f, it needs no redirection [1]
* Add portlintgrep.pl, an example on how to use portlint to find certain
  portlint problems in the ports tree [2]

Submitted by:	dinoex [1]
		eik [2]
2003-11-17 20:17:46 +00:00
Pav Lucistnik
605bf1dfcf Update to 20031115
PR:		ports/59304
Submitted by:	Stefan Walter (maintainer)
Approved by:	marcus (backup mentor)
2003-11-16 18:50:53 +00:00
Joe Marcus Clarke
be2f66b2f4 * Update to 2.4.8
* Add a check to make sure the last line of a slave port's Makefile contains
  an appropriate MASTERDIR include directive [1]
* study() the $whole string to improve performance [1]
* Fix the search for direct command use
* Check for ports that may break INDEX [1]
* Check for GNOME ports that use pre-patch and gnomehack

Submitted by:	eik [1]
2003-11-15 22:12:00 +00:00
Joe Marcus Clarke
12a03d742d * Add support for the arabic category [1]
* Check for variables that are used too late [1]
* Rename some of the language variables.  Admittedly, this needs more work.
* Check for anything after bsd.port(.post).mk [1]
* Fix the language category search code
* Bump version to 2.4.7

Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com> [1]
2003-11-09 00:44:31 +00:00
Edwin Groothuis
db4f31d13e [Patch] pkg_tree additional switches
I found convinient some additional key to the pkg_tree utility,
    and I propose to include them. The patches can be placed in
    files directory.

PR:		ports/46810
Submitted by:	Vladimir I. Chukharev <chu@gpi.ru>
Approved by:	moi
2003-11-02 04:06:06 +00:00
Joe Marcus Clarke
5b8604bff3 Whoops. Flush out my CVS repo, and share some missing bug fixes with the
rest of the world.

* Fix the -V option in the manpage [1]
* Handle the case where parentheses may not exist around NOPORTDOCS [2]
* Bump version to 2.4.6

Submitted by:	mat [1]
Reported by:	kris [2]
2003-11-01 22:46:25 +00:00
Mark Linimon
5244564d32 Per distfile survey, chase change in mastersite. Informed maintainer. 2003-10-29 07:30:54 +00:00
Joe Marcus Clarke
694151221a Recognize .ifndef(NOPORTDOCS) as well as .if !defined(NOPORTDOCS).
Reported by:	kris
2003-10-27 01:58:39 +00:00
Joe Marcus Clarke
abada95d3c * Add some @unexec checking for plists [1]
* Check for the common typo, NOPORTSDOC [2]
* Make sure .CURDIR is the primary category [3]
* Check for USE_* macros that are user-settable [4]
* Try to be a little more intelligent when checking for macros that need to
  appear earlier
* Ignore make directives when checking for extra items in certain sections

PR:		55921 [1]
		57751 [2]
		58292 [3]
		58525 [4]
Submitted by:	edwin [1]
		Oliver Eikemeier <eikemeier@fillmore-labs.com> [2] [3] [4]
2003-10-26 21:27:30 +00:00
Mark Linimon
95367b4776 Remove obsolete mastersite per distfile survey. Google does not
show any alternative sites.
2003-10-26 05:17:48 +00:00
Ying-Chieh Liao
c634b4bb83 utilize SITE_PERL
PR:		58166
Submitted by:	Cheng-Lung Sung <clsung@dragon2.net>
2003-10-24 12:05:09 +00:00
Sergei Kolobov
b5ac288585 Change to my @FreeBSD.org address.
Approved by:	krion
2003-10-23 05:42:49 +00:00
Sergey A. Osokin
8c3d7e9ebc Update to 0.50:
- new unified interface via port(1) front-end
 - port submit command has been improved:
   - autodetects operation mode (new, change, update)
   - autodetects maintainership requests and resets
   - autodetects added/removed files
 - new commands: create, diff, fetch

Submitted by:	Sergei Kolobov <sergei@kolobov.com> (maintainer)
PR:		58324
2003-10-21 09:12:44 +00:00
Dag-Erling Smørgrav
4888ea6fbb If no CVS root was specified, but a (possibly out-of-date) ports tree
already exists, use the CVS root specified by $portsdir/CVS/Root.
2003-10-01 15:15:37 +00:00
Yen-Ming Lee
d85f8f76c8 add pkg_cutleaves-20030727
pkg_cutleaves finds installed 'leaf' packages, i.e. packages that
are not referenced by any other installed package, and lets you
decide for each one if you want to keep or deinstall it via pkg_deinstall(1).

PR:		54912
Submitted by:	Stefan Walter <sw@gegenunendlich.de>
2003-09-30 14:19:27 +00:00
Joe Marcus Clarke
736d942fe5 Fix compilation on systems <= 4.4.
PR:		56324
		56389
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-09-04 03:41:40 +00:00
Joe Marcus Clarke
eaa8644f1c Fix a bad copy-paste error.
Reported by:	FreshPorts
2003-09-02 02:07:22 +00:00
Joe Marcus Clarke
7e13ce1c3d * Remove a dependency on bzip2
* Roll our own deinstall code since we get into a sticky situation when we
  try to use the new code [1]

Reported by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-09-02 02:05:41 +00:00
Joe Marcus Clarke
e78db356ad Remove OpenSSL support in this port so that it does not depend on any other
port to be installed.  Note, the port still uses USE_BZIP2, but as soon
as the local mirrors update, I will remove this as well.

This prevents infinite loops on systems <= 4.6.

Discussed with:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-09-01 20:47:31 +00:00
Kirill Ponomarev
7a950ce21f - Update to 0.26 (fixes several minor bugs), see NEWS for
details

PR:		55970
Submitted by:	maintainer
2003-08-25 20:30:51 +00:00
Joe Marcus Clarke
dd5ea45c77 Update to 2.4.4.
* Add support for the Polish locale
* Try to add more intelligence to the direct command use code
* Fix up the wording about numbered info files [1]

Suggested by:	gerald [1]
2003-08-16 20:42:44 +00:00
Joe Marcus Clarke
12a8b0c085 Really fix the bug where portlint looks through COMMENT for direct command
usage.
2003-08-15 17:47:21 +00:00
Joe Marcus Clarke
0bd33bd673 * Add support for the new INFO macro
* Clean up some more Perl warnings
* Make sure all the MAN macros are printed in all uppercase
* Add perl, ruby, python, and the auto* tools to the list of direct
  commands [1]

PR:		55529 [1]
Submitted by:	Jens Rehsack <rehsack@liwing.de> [1]
2003-08-15 05:05:33 +00:00
Akinori MUSHA
f2bf983754 Update to 20030723. Consider this as a minor update.
- If pkg_* is found in $PREFIX/sbin, use them instead of ones in
  /usr/sbin. (regardless of the value of PATH)

- pkg_fetch(1): Some servers like bento transfer packages files
  uncompressed, so add a workaround for this.  They are automatically
  recompressed.

- Get -q to work properly again.

- As the MOVED file is getting bigger and bigger, do not cache all the
  entries in memory but look it up every time needed.

- Show how to specify multiple arguments in one MAKE_ARG entry.

  FreeBSD PR:	ports/54631
  Submitted by:	Bruce M Simpson <bms@spc.org>
2003-08-13 10:49:37 +00:00
Michael Landin
b8522e61c3 Project moved to sourceforge servers.
Use DOCSDIR in pkg-plist.
Distfile has been rerolled, no code changes - but archive type is now .zip,
and code rewritten with windows style /r/n - patch is fixing this issue.
Code tested with Python 2.2.x and 2.3 (Thanks marcus@)

Approved by:		roberto (mentor)
2003-08-11 14:50:31 +00:00
Michael Landin
022a7bfc03 Fix 'fecth distfile' problem.
Bump PORTREVESION, for previous commit.

Approved by:		roberto (mentor)
2003-08-08 13:45:19 +00:00
Michael Landin
54c4af6fc6 Add patch that enables portell to run correctly with Python 2.3
Approved by:		roberto (mentor)
Submitted by:		marcus
2003-08-06 14:13:20 +00:00
Joe Marcus Clarke
01a913ae61 Add pkg_install, a snapshot of the -CURRENT package installation framework
for use with older versions of FreeBSD.

PR:		54478
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-08-03 21:44:33 +00:00
Kirill Ponomarev
2bee5db542 - Update to 0.25: allows generating diffs
not only against CVS

PR:		55135
Submitted by:	maintainer
Approved by:	fjoe (mentor) (implicit)
2003-07-31 21:48:23 +00:00
Wolfram Schneider
0a333c0083 Checkout directory ports/Templates too, required for config.guess 2003-07-31 09:29:36 +00:00
Joe Marcus Clarke
18bbfe40c0 Update to 2.4.1.
* Document the -V option [1]
* Properly suggest ${STRIP_CMD} (not ${STRIP}) instead of strip [2]
* Correct the version string

PR:		54993 [1]
Submitted by:	Mark Linimon <linimon@lonesome.com> [1]
		gerald [2]
Pointy hat to:	me [2] (I should have used Gerald's patch as-is)
2003-07-28 20:23:32 +00:00
Kirill Ponomarev
d06e9d3dce - Update to 0.20
- Install files from port's Makefile
- Add manpages

PR:		54888
Submitted by:	Sergei Kolobov <sergei@kolobov.com>
Approved by:	fjoe (mentor) (implicit)
2003-07-26 23:14:52 +00:00
Sergey A. Osokin
b205ba845d Update to 0.16
Submitted by:	Sergei Kolobov <sergei@kolobov.com> (maintainer)
PR:		54698
2003-07-21 12:31:26 +00:00
Dag-Erling Smørgrav
89ea0bbd5d Add support for ports/Templates; bump version number and man page date. 2003-07-21 08:30:40 +00:00
Joe Marcus Clarke
bebd089421 Update to 2.4.0.
* Document the -A option in the usage
* Add my name to the list of AUTHORS
* Clean up some warnings produced by perl -cwT
* Check for the existence of pkg-comment and flag it as FATAL [1]
* Add OMF checking support similar to the info checking code
* Add support for {DOCS,EXAMPLES}DIR macros [2]
* Don't check commented out URLs in MASTER_SITES [3]
* Add file, find, strip, and xargs to the list of direct command names [4]
* Don't search for command names in COMMENT [5]
* Add SITE_PERL support [6]
* Add DISTFILE/MASTER_SITE grouping support [7]
* Check to make sure the MAINTAINER field contains a valid email address
* Add support for {EXTRACT,PATCH}_DEPENDS
* Add USE_GETOPT_LONG support [8]

PR:		48199 [1]
		53371 [2]
		43537 [3]
		54381 [6]
		39487, 44099, 48221 [7]
		54497 [8]
Submitted by:	Sergei Kolobov <sergei@kolobov.com> [2] [8]
		gerald [4] (file and strip)
		Oliver Eikemeier <eikemeier@fillmore-labs.com> [6]
Reported by:	kris and nork [5]
2003-07-20 00:31:20 +00:00
Joe Marcus Clarke
c69e3dca1a I'll take this. 2003-07-17 04:42:07 +00:00
Michael Haro
beabe4fb0b I don't have the time to maintain this port.
Whoever takes maintainership should email me as I have some stuff that
was in progress.
2003-07-17 04:36:05 +00:00