Commit graph

17 commits

Author SHA1 Message Date
tez
66000508b3 Patch for CVE-2015-8107 from http://seclists.org/oss-sec/2015/q4/284 2017-04-25 22:19:20 +00:00
agc
03010d7bd0 Add SHA512 digests for distfiles for print category
Problems found locating distfiles:
	Package acroread7: missing distfile AdobeReader_enu-7.0.9-1.i386.tar.gz
	Package acroread8: missing distfile AdobeReader_enu-8.1.7-1.sparc.tar.gz
	Package cups-filters: missing distfile cups-filters-1.1.0.tar.xz
	Package dvidvi: missing distfile dvidvi-1.0.tar.gz
	Package lgrind: missing distfile lgrind.tar.bz2

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.
2015-11-04 01:01:30 +00:00
tez
aba0303532 Add fix for CVE-2014-0466 from
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742902
2014-04-08 19:32:11 +00:00
drochner
b94064a003 add patch from Fedora to fix insecure /tmp file use (CVE-2001-1593)
bump PKGREV
2014-02-05 17:20:31 +00:00
marino
ba9186b5ab print/a2ps: Fix mempcpy for DragonFly
a2ps is inconsistent with it's use of mempcpy.  For lib/path-concat.c and
lib/strftime.c, it's looking for "mempcpy", but for src/regex.c it is
looking for __mempcpy.

DragonFly has mempcpy in string.h, so just patch the problematic
lib/path-concat.c to stop it from being redefined.  HAVE_MEMPCPY isn't
defined correctly and if it were it would break at regex.c.  The string.h
header and mempcpy definition are mutually exclusive in strftime.c file
so this one didn't need a patch.
2012-03-23 18:44:23 +00:00
tron
68fc0eb63e Fix two problem under Mac OS X:
1.) stpcpy() is a macro under at least Mac OS 10.6. Avoid build failures
    by not defining a dodgy prototype for it.
2.) Don't strip installed binaries to allow the dynamic linker to find
    symbols required by the shared library but defined by the application.
    This fixes PR pkg/41827 by Christopher M. Fuhrman.

Bump package revision as the package built fine under Mac OS 10.5 before
but didn't work.
2010-10-28 23:21:52 +00:00
wiz
32be612128 Update to 4.14. Security problems cited below were already fixed
in pkgsrc.

Version 4.14	    Dec 29, 2007
 * New Maintainer.
 * No UTF-8 support yet ;-<  Basically this is a maintenance release.
 * License:
   - Now GNU a2ps is licensed under GPLv3 or later.
   - Removed or replaced non-free/license-wise vague files (see
     ChangeLog for detail.)
 * Build:
   - Now can be built with the modern GNU Autotools.
   - Now can be built with gcc 3.4 or later.
 * Predefined delegations:
   - Add html2ps delegation if netscape don't run.
   - Now the configure script check if netscape support remote-command.
   - Now works with modern GV(PostScript and PDF viewer).  Tested with
     3.6.2.
 * Options:
   - Better description on the default output and the -d option.
 * Encodings:
   - CP1251.
 * Bug Fixes:
   - `input buffer overflow, can't enlarge buffer because scanner uses REJECT'
     This should no longer happen.
   - Now works on IA64, PowerPC and AMD64.
   - Fixed wrong default values for deskjet printers.
   - Quote arguments to file(1).
   - Fixed several security issues (CVE-2004-1377).
   - PS generated by a2ps is now compatible with Adobe Distiller for Mac OS X.
 * Style sheets:
   - specc.ssh, thanks to Hideaki Yokota
   - csharp.ssh, thanks to Karen Christenson
   - nasm.ssh & pic16f84.ssh, thanks to Aleksandar Veselinovic
   - small.ssh, thanks Christophe Continente
   - matlab4.ssh & matlab.ssh, thanks to Joakim Lubeck
   - stratego.ssh, thanks to Nicolas Tisserand
   - rd.ssh, s.ssh and st.ssh, thanks to Torsten Hothorn et.al.
   - ruby.ssh, thanks to Noritsugu Nakamura.
   - php.ssh, thanks to Hartmut Holzgraefe
   - udiff.ssh: Improved highlighting for diffs.
   - perl.ssh: Improved.
   - Some rules of sheets.map are improved
 * Contributions:
   - pdiff: Now pdiff can accept standard input.
 * Prologues:
   - Added diffcolor.pro for diffs
 * Documentation:
   - Revised.
 * Translation:
   - Japanese translation thanks to Yasuyuki Furukawa.
   - Revised Dutch translation, thanks to Benno Schlenberg.
   - Revised French translation.
 * Many other fixes, but the log is rather spotty ;-<
 * Part of works done at the Codefest Asia 2007 in ITB Bandung, Indonesia.
2008-11-10 18:00:34 +00:00
minskim
31c0194218 Remove a conflicting declaration of malloc(); include stdlib.h instead. 2006-06-07 21:06:49 +00:00
salo
1c0b66e6e0 Security fix for CAN-2004-1377:
"The fixps and psmandup scripts in a2ps allow local users to overwrite
 arbitrary files via a symlink attack on temporary files."

Patches from Gentoo with few minor issues corrected.
2005-06-09 14:53:49 +00:00
agc
d81d19f8e0 Add RMD160 digests. 2005-02-24 12:51:41 +00:00
wiz
0adb116c8a Apply patch from Rudolf Polzer against CAN-2004-1170.
See http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1026.html
Bump PKGREVISION.
2004-12-20 15:02:34 +00:00
jmmv
47d632a01f Make this package install its configuration files in the examples directory
and copy them to the right place using PKG_SYSCONFDIR. Bump PKGREVISION to
1 because this change.

Approved by wiz.

This closes PR 18992.
2002-11-26 11:02:05 +00:00
tron
4502810bd4 Fix fuzz in patch detected by "gpatch" under Solaris. 2001-09-09 12:24:45 +00:00
wiz
4f2b4c4dcf Don't install .elc files, no matter if emacs is installed or not.
Noted in recent bulk build.
2001-07-22 17:18:04 +00:00
wiz
9b3737905c Update to 4.13b. Major changes since 4.12:
pdf, simplex, display output options; ISO 8859-13 encoding support;
euro glyph support; many new style sheets (autoconf, awk, cpp, maple,
ocaml, sed, shell, and others); regexp changed to be perl/egrep like, not
emacs-style (UPDATE YOUR STYLESHEETS!).
2001-05-22 13:11:37 +00:00
agc
1c989c3883 Move to sha1 digests, where appropriate and possible, and add distfile
sizes.
2001-04-20 12:41:48 +00:00
agc
9e8d6c8b8d + move the distfile digest/checksum value from files/md5 to distinfo
+ move the patch digest/checksum values from files/patch-sum to distinfo
2001-04-17 11:33:31 +00:00