the fix for the following vulnerability: https://www.isc.org/node/373
Description:
Return values from OpenSSL library functions EVP_VerifyFinal()
and DSA_do_verify() were not checked properly.
Impact:
It is theoretically possible to spoof answers returned from
zones using the DNSKEY algorithms DSA (3) and NSEC3DSA (6).
In short, if you're not using DNSSEC to verify signatures you have
nothing to worry about.
While I'm here, address the issues raised in the PR by adding a knob
to disable building with OpenSSL altogether (which eliminates DNSSEC
capability), and fix the configure arguments to better deal with the
situation where the user has ssl bits in both the base and LOCALBASE.
PR: ports/126297
Submitted by: Ronald F.Guilmette <rfg@tristatelogic.com>
interacting with a PostgreSQL database. It supports version 3.0
of the protocol--the current primary version of protocol. The
package also provides a basic protocol transaction class. This
class keeps the state of the protocol in an interrupt safe manner,
and validates the integrity of the communication as messages are
received.
In general, you probably will never use this package directly,
unless you are writing a driver.
WWW: http://python.projects.postgresql.org/
PR: ports/130252
Submitted by: Wen Heping <wenheping at gmail.com>
Excessively long self-test runs in lzo2 (a different port) were figured
(thanks, naddy@) to be caused by "J" in /etc/malloc.conf, so we set
MALLOC_OPTIONS=jz to avoid that.
PR: 130153
Submitted by: Matthias Andree <matthias.andree@gmx.de> (maintainer)
evolution contacts' birthdays. It puts an icon on notification area which will
blink when there is any of your contacts' birthday today. You can also check if
there is any of your contacs' birhday on next days.
WWW: http://gbirthday.sourceforge.net/
PR: ports/130091
Submitted by: Alexander Logvinov <ports at logvinov.com>
of your machine. This module was tested on Irix, OpenBSD,
FreeBSD, NetBSD, Solaris, Linux, OSX, Win32, and Cygwin.
WWW: http://search.cpan.org/dist/Sys-HostIP/
PR: ports/130267
Submitted by: Murilo Opsfelder <mopsfelder at gmail.com>
for those of you who do not use the HTML generating features of CGI.pm
This module provides an object-oriented interface for retrieving information
provided by the Common Gateway Interface, as well as url-encoding and
decoding values, and parsing CGI parameters.
WWW: http://search.cpan.org/dist/CGI-Utils/
PR: ports/130185
Submitted by: Murilo Opsfelder <mopsfelder at gmail.com>
