Commit graph

19 commits

Author SHA1 Message Date
he
11a4897507 Add fix for CVE-2015-5177, lifted from
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795429
Bump PKGREVISION.
2016-02-11 15:12:06 +00:00
agc
203292f73e Add SHA512 digests for distfiles for net category
Problems found with existing digests:
	Package haproxy distfile haproxy-1.5.14.tar.gz
	159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded]
	da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated]

Problems found locating distfiles:
	Package bsddip: missing distfile bsddip-1.02.tar.Z
	Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz
	Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2
	Package djbdns: missing distfile djbdns-cachestats.patch
	Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch
	Package gated: missing distfile gated-3-5-11.tar.gz
	Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz
	Package poink: missing distfile poink-1.6.tar.gz
	Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz
	Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch
	Package waste: missing distfile waste-source.tar.gz

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.
2015-11-04 00:34:51 +00:00
drochner
dc949b3d50 Try to fix a possible buffer overrun (CVE-2012-4428). Didn't find
a patch upstream nor anywhere else, hope this is correct. Someone
please review.
Being here, fix a memcpy() size bug on 64-bit systems.
bump PKGREV
2013-02-14 16:51:32 +00:00
drochner
6b794ded74 add a patch from upstream to avoid an endless loop in the extensions
parser on malicious packets (CVE-2010-3609)
2011-04-08 12:19:17 +00:00
adam
47d882d5e3 Fix configure on linux (patch-aa) 2007-04-12 17:03:46 +00:00
adam
996e41fd97 Do not force O3 optimisation 2007-04-03 13:25:16 +00:00
he
da654c9ea2 Make slpd reopen its log file on HUP (it does not use syslog - bah!).
The log file needs to be writable for user=daemon, since slpd setuid()s
to that user after starting up.

Put the extremely verbose and disk-filling logging of "Parse Erorr"
packets (is this an SLPv1 vs. SLPv2 protocol versioning issue gone
bad?!?) under DEBUG, which is not normally turned on in our builds.

Change HOMEPAGE, since Caldera appears to have seen fit to remove
the www.openslp.org DNS name and associated web server.  Instead point
to the SourceForge home page.

Bump package revision to 1.
2006-07-13 13:42:36 +00:00
adrianp
28583edea3 - Update to 1.2.1 - ok'ed jlam@
- This incorporates security fixes from SuSE to address the issues they found
From the ChangeLog:
> 02/04/2005 jcalcote@novell.com
> Incorporated various bug fixes from SuSE and others.
> Updated Autotools files for version 1.5+
2005-05-26 20:14:21 +00:00
agc
b12d62efb5 Add RMD160 digests. 2005-02-24 12:13:41 +00:00
jlam
da6af1cc4c Fix on NetBSD by adding some SLP* functions used by the shared lib that
weren't being added to the shared lib.  I just updated this package, so
ride the update and avoid the PKGREVISION bump.
2004-11-27 05:08:35 +00:00
jlam
6a8eb1ea55 Update net/openslp to 1.2.0. Changes from version 1.0.11 include:
* Support for SLP queries on multiple network interfaces
* Support for SLP query through a unicast
* DHCP code
* Added support for the net.slp.DAHeartBeat setting
* Make attribute compares case insensitive as per RFC 2608
* Added PID monitoring.  Now when the process that called SLPReg()
  (with SLP_REG_FLAG_WATCH_PID) dies the registration will automatically
  be deregistered.

patch-a[cdefg] fix compilation warnings and errors (all the world is not
Linux/i386).
2004-11-27 04:41:12 +00:00
adam
4b9c82ecaa Do not force -O3 optimisation any more 2004-04-28 11:48:54 +00:00
jlam
c866049339 Update net/openslp to 1.0.11. Changes from version 1.0.10 include:
* Fixed socket file descriptor leak.
* Fixed segv when processing unicast request (SrvTypeRqst or AttrRqst)
    with mismatched scopes causes error in SLPD.
* Allow strict aliasing.
2003-05-27 22:52:34 +00:00
jlam
a35d99ac4c Update net/openslp to 1.0.10. Changes from version 1.0.9a include:
* Fixed SA->DA registration logic that excluded some mortal registrations.
* Fixed aging problem that aged out static registrations.
* Fixed SLPDeReg().
* Fixed a segfault generated by a freed but unlinked SLPDSocket.
* Made net.slp.multicastIF actually work.
2002-12-19 20:33:21 +00:00
jlam
678a95a783 Update net/openslp to 1.0.9a. Changes from version 1.0.7 include:
* Added version and length sanity checks for incoming messages
* Fixed possible SEGV when logging DA traffic
* Added patch from Arun Barboza that makes attribute compares case insensitive
  as per RFC 2608
* Added patch from Garth Bushell that fixes an SLP url parsing problem.
* Added patch from Arun Barboza to handle '==' SLPv1 predicates.  This patch
  allows better interoperability with Novell SLP networks.
* Added fix from Arun Barboza to make V1 DAAdverts use the same encoding as
  the request
* Fixed a problem in SLPProcessMessage where errorcodes were not being returned
  resulting in attempts to send non-allocated sendbufs (i.e. SEGV).
* Fixed a problem where SLPReg() would hang if used against a DA or SA that
  prematurely dropped connections
* Force use of numeric IP addresses in all DAAdvert and SAAdvert messages.
* Fixed bug where idle connections to DAs were not being aged.
* Added code so that 'slptool -v' will return the path of the slp.conf file
  libslp.so is configured to use.
2002-09-16 21:00:56 +00:00
jlam
4eb73f83cc Update net/openslp to 1.0.7. Relevant changes from version 1.0.6 include:
* Applied patch from Juergen Kreileder that provides the net.slp.multicastIF
  slp.conf setting. net.slp.multicastIF is useful in setting up OpenSLP on
  multi-homed machines where it is desireable to configure which interface
  should send multicast traffic.

* Applied patch from Garth Bushell that fixes a problem where not enough
  memory was being allocated to hold an escaped string in SLPEscape().

* Changed slpd "daemonize" code to chdir() to "/" so that the PWD is not
  left unmountable.
2002-01-31 17:00:50 +00:00
jlam
11e44565d5 Update net/openslp to 1.0.6. This package now uses the general INSTALL
scripts and honors ${PKG_SYSCONFDIR}.  Changes from version 1.0.2 include:

* bug fixes
* set FRESH flag for registrations; OpenSLP ignores this flag, but other DA
  implementations like K&A SLP do not.
* Minor changes to the way that settings from /etc/slp.conf affect active and
  passive discovery.
* Changed declaration and definition for strncasecmp and strcasecmp so that
  there is only one place for them in slp_compare.c and slp_compare.h
* Honor scopes in SrvRqsts for the special "service:directory-agent" type
* Added code to use IP address in agent url for those operating systems where
  gethostname() does not return a fully qualified domain name (FQDN).
* Added code to log parse errors and dump bad messages to the log
* Fixed reconnect code to be able to interoperate with inefficient DAs that
  close the stream after each srvreg/srvack exchange.  The Mac OS/X DA is
  reported to have this problem
* Removed calls that (sort of) enforce service-url checking.  This is for the
  benefit of AFP's usage of SRVLOC.  Developers are now trusted not to
  register ambiguous service-urls.
2001-12-14 22:30:07 +00:00
jlam
2168996ed4 Update openslp to 1.0.2. Relevant changes from version 1.0.1 include:
* Fixed minor name resolution problem so that reverse lookups are not
  performed on hostnames supplied as are dotted IP addresses
* Fixed minor problem where DAs listed in net.slp.DAaddresses could not be
  found if multicast was not enabled.
* Fixed minor bugs in DA discovery code so that SLPFindScopes() returns more
  consistant results.
* Applied patch from Jim Meyer that fixes several predicate parsing
  irregularities
* Fixed minor KnownDAEcho problem that resulted in some DAs not getting
  registrations.
2001-09-14 02:56:25 +00:00
jlam
6c90001be1 Service Location Protocol is an IETF standards track protocol that provides
a framework to allow networking applications to discover the existence,
location, and configuration of networked services in enterprise networks.
The OpenSLP project is an effort to develop an open-source implementation of
Service Location Protocol suitable for commercial and non-commercial
application.
2001-08-18 03:18:43 +00:00