Personal patches
Go to file
Kai Knoblich 49d8789e48 MFH: r494837
shells/rssh: Apply fixes for basename(3) handling and some security issues

basename(3) has been changed to be POSIX compliant in r308264. This implies
that it can possibly write to the passed string. shells/rssh passes a const
string, so it always crashes on invocation with FreeBSD 12 and later. The
new patches remedy this issue. [1] [2]

During further tests and research came to light that there were also
recently discovered security issues with the parsing of rsync/scp command
line arguments and insufficient sanitization of environment variables when
using rysnc.

The corresponding fixes have been incorporated to the new patches and the
already existing patch for the RSYNC option has been tightened for the
argument parsing. Please note that with this patch the scp option "-3" can
no longer be used. [3]

Furthermore, another patch was applied to make this port a bit more secure.
That patch handles a buffer allocation issue for an error message. [4]

PR:		235121
Submitted by:	topical@gmx.net (first version) [1], Jason Harris (maintainer) [2]
Approved by:	tcberner (mentor)
Obtained from:	Debian [3] [4]
Security:	d193aa9f-3f8c-11e9-9a24-6805ca0b38e8
Differential Revision:	https://reviews.freebsd.org/D19474

Approved by:	ports-secteam (riggs), mentors implicit
2019-03-07 14:59:36 +00:00
accessibility Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
arabic Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
archivers MFH: r489553 2019-01-08 23:13:34 +00:00
astro Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
audio MFH: r493719 2019-02-23 17:35:07 +00:00
base
benchmarks Change cmake default behaviour to outsource. 2018-12-25 20:25:39 +00:00
biology biology/diamond: Update to version 0.9.24 2018-12-31 19:00:00 +00:00
cad cad/z88: update 13.0 -> 15 2018-12-31 13:33:55 +00:00
chinese MFH: r490846 2019-01-21 11:04:14 +00:00
comms MFH: r489481 2019-01-11 05:54:25 +00:00
converters MFH: r489390 2019-01-06 09:00:07 +00:00
databases databases/mariadb103-server: Fix patch failing in 2019Q1 2019-03-04 10:14:06 +00:00
deskutils deskutils/py-autokey: fix missing dependencies, cleanup 2018-12-31 20:19:50 +00:00
devel MFH: r489694 2019-03-07 12:19:57 +00:00
dns MFH: r493563 r493564 2019-02-22 08:54:04 +00:00
editors MFH: r491339 2019-01-27 13:55:07 +00:00
emulators MFH: r494859 2019-03-07 00:49:51 +00:00
finance finance/cointop: Update to 1.1.1 2018-12-31 19:25:00 +00:00
french MFH: r489864 2019-01-10 15:21:07 +00:00
ftp MFH: r492389 2019-02-09 23:08:09 +00:00
games MFH: r493371 2019-02-19 16:14:04 +00:00
german MFH: r489864 2019-01-10 15:21:07 +00:00
graphics MFH: r491056 r492863 2019-03-05 22:00:40 +00:00
hebrew Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
hungarian Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
irc MFH: r489674 2019-01-11 05:59:58 +00:00
japanese MFH: r492045 2019-02-03 10:53:43 +00:00
java MFH: r489072 2019-01-02 09:48:07 +00:00
Keywords
korean Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
lang MFH: r492424 2019-02-08 11:29:01 +00:00
mail MFH: r494671 2019-03-05 04:06:00 +00:00
math MFH: r489729 2019-01-08 18:05:51 +00:00
misc MFH: r494787 2019-03-06 11:45:30 +00:00
Mk MFH: r493367 2019-02-19 13:22:37 +00:00
multimedia MFH: r494455 2019-03-02 21:34:42 +00:00
net MFH: r494931 2019-03-07 13:39:36 +00:00
net-im MFH: r489686 r494706 2019-03-05 19:44:52 +00:00
net-mgmt MFH: r494688 2019-03-05 09:39:27 +00:00
net-p2p net-p2p/jackett: Update to 0.10.566 2018-12-31 19:41:56 +00:00
news
palm Remove expired ports: 2018-12-21 13:19:02 +00:00
polish Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
ports-mgmt Remove expired ports: 2018-12-30 23:30:55 +00:00
portuguese Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
print MFH: r494191 2019-02-28 21:41:11 +00:00
russian Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
science MFH: r491966 2019-02-02 17:55:19 +00:00
security MFH: r494185 2019-03-01 20:11:47 +00:00
shells MFH: r494837 2019-03-07 14:59:36 +00:00
sysutils MFH: r494786 2019-03-06 11:27:39 +00:00
Templates
textproc MFH: r491723 2019-02-01 19:47:16 +00:00
Tools Revert flavour support. 2018-12-17 15:09:13 +00:00
ukrainian Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
vietnamese
www MFH: r494854 2019-03-07 07:47:52 +00:00
x11 MFH: r489713 2019-02-18 17:07:57 +00:00
x11-clocks Remove KDE4, part 5 2018-12-31 17:55:45 +00:00
x11-drivers xf86-input-libinput: Update to 0.28.0 2018-12-31 00:28:53 +00:00
x11-fm MFH: r489145 2019-01-03 09:49:19 +00:00
x11-fonts New port: x11-fonts/tamzen 2018-12-25 09:14:06 +00:00
x11-servers MFH: r489754 2019-01-09 17:52:03 +00:00
x11-themes MFH: r489100 2019-01-03 09:45:55 +00:00
x11-toolkits Remove expired ports: 2018-12-31 13:37:58 +00:00
x11-wm Update KDE Plasma Desktop to 5.14.4 2018-12-31 06:38:42 +00:00
.arcconfig
.gitattributes
.gitauthors .gitauthors: Update Enji Cooper's (ngie) entry 2018-12-23 23:22:54 +00:00
.gitignore
.gitmessage
CHANGES Happy 2019 2019-01-01 00:47:10 +00:00
CONTRIBUTING.md Add a CONTRIBUTING file so github pull requests explain the proper submission 2014-03-15 13:37:33 +00:00
COPYRIGHT Happy 2019 2019-01-01 00:47:10 +00:00
GIDs
LEGAL Remove expired ports: 2018-12-31 13:37:58 +00:00
Makefile
MOVED Remove some more KDE4 ports and hopefully fix INDEX again 2018-12-31 18:39:25 +00:00
README
UIDs
UPDATING - Whitespace fixes 2018-12-30 13:50:04 +00:00

This is the FreeBSD Ports Collection.  For an easy to use
WEB-based interface to it, please see:

	https://www.FreeBSD.org/ports

For general information on the Ports Collection, please see the
FreeBSD Handbook ports section which is available from:

	https://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/ports.html
		for the latest official version
	or:
	The ports(7) manual page (man ports).

These will explain how to use ports and packages.

If you would like to search for a port, you can do so easily by
saying (in /usr/ports):


	make search name="<name>"
	or:
	make search key="<keyword>"

which will generate a list of all ports matching <name> or <keyword>.
make search also supports wildcards, such as:

	make search name="gtk*"

For information about contributing to FreeBSD ports, please see the Porter's
Handbook, available at:

	https://www.FreeBSD.org/doc/en_US.ISO8859-1/books/porters-handbook/

NOTE:  This tree will GROW significantly in size during normal usage!
The distribution tar files can and do accumulate in /usr/ports/distfiles,
and the individual ports will also use up lots of space in their work
subdirectories unless you remember to "make clean" after you're done
building a given port.  /usr/ports/distfiles can also be periodically
cleaned without ill-effect.