Commit Graph

9166 Commits

Author SHA1 Message Date
sthen
81889f628d update to Net::CIDR 0.17, from dhill 2013-03-09 15:29:38 +00:00
benoit
cd4f196404 - update py-snmp to 4.2.4
- update PLIST and PERMIT_*
2013-03-09 15:24:13 +00:00
ajacoutot
21b01e35bb Update to twirssi-2.5.1. 2013-03-08 13:38:25 +00:00
jasper
d086e4408d sync 2013-03-08 12:07:42 +00:00
jasper
3f6874770c import erl-rabbit_common
This is a stripped down distribution of the rabbitmq-server code
required by the rabbitmq-erlang-client for use as a rebar dep.

ok aja@
2013-03-08 12:05:16 +00:00
jasper
c1cba10b63 tweak DESCR, no bump as it's not yet hooked up. 2013-03-08 12:04:49 +00:00
jasper
4d6ffe8552 import erl-mini_s3
erl-mini_s3, is a simple s3 client API for Erlang.

ok aja@
2013-03-08 12:03:56 +00:00
jasper
9183da971c import erl-ibrowse
erl-ibrowse is a HTTP client written in Erlang. Featuring:

- RFC2616 compliant
- Supports GET, POST, OPTIONS, HEAD, PUT, DELETE, TRACE, MKCOL,
  PROPFIND, PROPPATCH, LOCK, UNLOCK, MOVE and COPY
- Understands HTTP/0.9, HTTP/1.0 and HTTP/1.1
- Understands chunked encoding
- Can generate requests using Chunked Transfer-Encoding
- Pools of connections to each webserver
- Pipelining support
- Download to file
- Asynchronous requests. Responses are streamed to a process
- and much more

ok aja@
2013-03-08 12:03:28 +00:00
jasper
38940380b1 import erl-gen_bunny
erl-gen_bunny is a RabbitMQ client library for erlang whose primary goal is
to be easy to use. Especially for simple publisher and consumer
applications.

ok aja@
2013-03-08 12:03:04 +00:00
jasper
ed581d9905 import erl-amqp_client
This is a stripped down distribution of the rabbitmq-erlang-client for
use as a rebar dep.

ok aja@
2013-03-08 12:02:38 +00:00
jasper
a105e3db29 - install vnstat.cgi
ok pea@ (MAINTAINER)
2013-03-08 10:37:03 +00:00
jasper
b16bb3ff33 - update to py-zmq-13.0.0 2013-03-08 10:34:18 +00:00
jasper
0669819342 - update to zeromq-3.2.2 2013-03-08 10:33:28 +00:00
ajacoutot
3cf1c9a29b +whatweb 2013-03-08 09:59:16 +00:00
ajacoutot
96aa0e67af Import whatweb-0.4.7.
WhatWeb identifies websites. It's goal is to answer the question, "What
is that Website?". WhatWeb recognises web technologies including content
management systems (CMS), blogging platforms, statistic/analytics
packages, JavaScript libraries, web servers, and embedded devices.
WhatWeb has over 900 plugins, each to recognise something different.
WhatWeb also identifies version numbers, email addresses, account ID's,
web framework modules, SQL errors, and more.

ok jasper@
2013-03-08 09:58:40 +00:00
jasper
c7a5d72a18 - update to gssdp-0.14.2 2013-03-08 07:09:34 +00:00
djm
128e83da3c drop MAINTAINERship of my ports. I simply don't have time to give them
the attention they deserve
2013-03-08 02:04:37 +00:00
brad
3e2964487a Update to Pidgin 2.10.7. Fixes 3 security issues and some crashing bugs,
as well as other bug fixes. CVE-2013-0271, CVE-2013-0272, CVE-2013-0273,
CVE-2013-0274

ok sthen@
2013-03-08 01:03:09 +00:00
brad
0eb57b6b43 Update to isc-dhcp 4.2.5.
ok sthen@
2013-03-07 18:59:35 +00:00
fgsch
5cd3fb91a8 Update to ngircd 20.2. Changes at http://ngircd.barton.de/doc/ChangeLog.
This includes the security fix committed before release that went in p1.
2013-03-07 15:40:01 +00:00
zhuk
b474d241d2 Change @sample for archives directory as its place was changed somewhere
around 1.5.0.

okay sthen@ (MAINTAINER)
2013-03-06 18:34:58 +00:00
jasper
012cae3de1 SECURITY UPDATE to telepathy-gabble 0.16.5, addresses
CVE-2013-1769: remotely-triggered NULL pointer dereference in telepathy-gabble
2013-03-04 18:49:29 +00:00
ajacoutot
3c1fa65ec8 Explicitely set path to javaPathHelper; we do not want to rely whether
LOCALBASE/bin is in the PATH or not and this is consistent with what
other java rc scripts do.

prodded by Marc Peters
2013-03-04 15:56:13 +00:00
ajacoutot
e66659d6a1 Repair rc script which could never have worked... 2013-03-04 15:48:41 +00:00
sthen
cafc85969f update to openconnect 4.08, rolling in a security fix which we previously
had as a patch, plus a couple of additional bug fixes.
2013-03-04 15:39:31 +00:00
lteo
a7574859bb Update oinkmaster.conf to use HTTPS for the sample snort.org URLs to
protect the oinkcode from being exposed.  Also update the Snort version
in the URLs to 2.9.4.0 to match the current version of our Snort port.

Tweak the regexp that oinkmaster uses to validate HTTPS URLs so that it
won't treat a bad URL that starts with httpsssss:// as valid (this
regexp tweak was jointly worked on by me and maintainer).

regexp feedback zhuk@
OK Markus Lude (maintainer), earlier version OK sthen@
2013-03-04 04:30:35 +00:00
lteo
defa405c2c Update pkg/README to change the Snort ruleset download URL from HTTP to
HTTPS to protect the oinkcode from being exposed (suggested by David
Hill).

Also add a note that registered users without a paid subscription are
only allowed to download the official Snort ruleset once every 15
minutes (suggested by Adam Jeanguenat).  This restriction is not obvious
on the snort.org site, so I think this note would be helpful to users.

OK Markus Lude (maintainer), sthen@
2013-03-04 04:23:18 +00:00
sthen
fa9d5a00a1 update to a more recent OUI list 2013-03-03 21:28:15 +00:00
sthen
bfc6ee6ff9 - fix an off-by-one in iperf triggering a segfault with (insanely) high
bandwidths, seen when investigating some bug where a too-high bandwidth
was reported.

- patch configure to not remove the -g flag from CFLAGS

ok lteo@
2013-03-03 12:29:44 +00:00
landry
ac405c56be Properly disable gtk-doc, otherwise it's picked as a hidden dep during
build.
2013-03-03 08:12:05 +00:00
ajacoutot
e53b100ce1 Hook up ifstat,snmp. 2013-03-02 14:16:43 +00:00
ajacoutot
dc30cd8f37 Update to h323plus-1.25.0. 2013-03-02 14:06:24 +00:00
ajacoutot
1349c92183 Update to opal-3.10.10. 2013-03-02 14:05:59 +00:00
ajacoutot
3a07071d40 Update to ocsync-0.70.4. 2013-03-02 14:01:42 +00:00
sthen
7315927d04 zap -no-pie stuff no longer needed for static bins. 2013-03-02 12:42:33 +00:00
sthen
c59262b392 icinga-web 1.8.2 2013-03-02 12:41:55 +00:00
jasper
79684e7f37 - update to apache-activemq-5.8.0 2013-03-02 12:31:35 +00:00
jasper
4bf2fc7c44 - add missing build dependency, spotted by several
ok aja@
2013-03-02 12:21:10 +00:00
fgsch
5321f2a662 SECURITY UPDATE: fix remote DoS.
aja@ sthen@ ok
2013-02-15 09:54:36 +00:00
jasper
e7663d3def add CVE id that was just issued.
ok sthen@
2013-02-12 21:39:47 +00:00
sthen
74672a6f9d Cherrypick OpenConnect fix; use a dynamically allocated buffer rather than
a fixed stack buffer when constructing HTTP requests. Prevents an overflow
if a malicious VPN gateway sends a very long hostname/path (for redirects)
or cookie list. (There is a newer release of OpenConnect which includes
this fix, but also some bigger code changes, so that will wait until we
are done with 5.3 release).  ok aja@ jasper@
2013-02-11 21:16:33 +00:00
bluhm
5b5611e8ac update p5-Net-Inspect to 0.27
OK jasper@ naddy@
2013-02-11 21:07:38 +00:00
ajacoutot
9949e8d7c4 Use chsh(1) at @exec-add / @unexec-delete time to set the correct shell
for the uucp user.

idea from miod@
ok jasper@ sthen@
2013-02-09 15:17:46 +00:00
sthen
f5a323c546 Don't use ${FLAVOR:L}, we only support lower-case flavours now.
OK ajacoutot@ espie@
2013-02-09 14:49:50 +00:00
naddy
dbc1294a3d include the built-in manual, as intended 2013-02-08 16:45:25 +00:00
jasper
d3be0ce8b6 Security fix for CVE-2013-0249, smtp_state_authdigest_resp()
buffer overflow vulnerability.

Backported from upstream git.

ok naddy@ (MAINTAINER)
2013-02-08 16:27:12 +00:00
ajacoutot
e03c56c9c5 MODGCC4_VERSION default to 4.6 now. 2013-02-07 19:13:49 +00:00
bluhm
ff7a18eb62 update p5-Net-Inspect to 0.26 2013-02-06 23:18:19 +00:00
ajacoutot
e953a008f8 Quiet gconftool-2:
gconf_ping() will try to shutdown gconfd, but since installing pkg is
done as root, there is not gconfd nor dbus that can be started when
DISPLAY isn't set and an annoying warning is issued.

discussed with espie@
2013-02-06 14:23:06 +00:00
jasper
1f21a8e5ce sync 2013-02-05 15:09:26 +00:00