103072 Commits

Author SHA1 Message Date
jasper
dedb24eaad fixup another 2015-07-18 21:15:15 +00:00
jasper
acae6d02ec fixup maintainer address 2015-07-18 21:14:07 +00:00
ajacoutot
f7e015ccb5 sudo(8) -> su(1) 2015-07-18 21:13:41 +00:00
jasper
a1d748d08d use sed -i 2015-07-18 21:11:18 +00:00
ajacoutot
e73e585bb1 Stop mentioning sudo(8). 2015-07-18 21:08:28 +00:00
jeremy
e07f7c31e7 Remove MODRUBY_ICONV_DEPENDS. ruby 1.8 specific ports can hard code
the dependency, more modern ports don't need it.

OK ajacoutot@
2015-07-18 21:07:40 +00:00
ajacoutot
a70e72cca7 Stop mentioning sudo(8). 2015-07-18 21:05:38 +00:00
sthen
682738c92b guard SSLv3_client_method with OPENSSL_NO_SSL3 2015-07-18 21:00:13 +00:00
ajacoutot
ba741b313c sudo(8) -> su(1) 2015-07-18 20:59:06 +00:00
sthen
52dc481d6e guard SSLv3_*_method with OPENSSL_NO_SSL3, same as php 5.6 does
(if you use SSL/TLS in php, you really should be using 5.6+)
(...if you use php at all,   "                           " )
2015-07-18 20:54:19 +00:00
sthen
78402cc18f Security fixes for qemu, from brad:
CVE-2015-3456  fdc: force the fifo access to be in bounds of the allocated buffer

During processing of certain commands such as FD_CMD_READ_ID and
FD_CMD_DRIVE_SPECIFICATION_COMMAND the fifo memory access could
get out of bounds leading to memory corruption with values coming
from the guest.

Fix this by making sure that the index is always bounded by the
allocated memory.


CVE-2015-3209  pcnet: force the buffer access to be in bounds during tx

4096 is the maximum length per TMD and it is also currently the size of
the relay buffer pcnet driver uses for sending the packet data to QEMU
for further processing. With packet spanning multiple TMDs it can
happen that the overall packet size will be bigger than sizeof(buffer),
which results in memory corruption.

Fix this by only allowing to queue maximum sizeof(buffer) bytes.
2015-07-18 20:36:56 +00:00
kili
a5ff4aafe5 register hs-snap* removal 2015-07-18 20:35:45 +00:00
ajacoutot
61f4b89958 sudo(8) -> su(1) 2015-07-18 20:33:07 +00:00
kili
ed53040aa6 Remove hs-snap & friends to also get rid of some then unused
dependencies (which will follow tomorrow). It's better to build and
update frameworks like snap with cabal (from the cabal-install
package) and eventually to keep only those hs-ports which are
required for end user tools like darcs, xmonad, hpodder etc.

ok aja@ dcoppa@
2015-07-18 20:32:38 +00:00
kili
04398b8c30 Unhook hs-snap & friends. 2015-07-18 20:32:04 +00:00
jasper
19d48864db drop gsed dependency by fixing up the patch 2015-07-18 20:25:15 +00:00
ajacoutot
29220c7b68 Re-instate gsed dependency for now. 2015-07-18 20:12:55 +00:00
jasper
d6d634de47 use sed -i 2015-07-18 20:12:46 +00:00
ajacoutot
09eb14f688 Don't own /var/www/htdocs/, it's part of mtree.
Don't ship the empty example logs directory.
2015-07-18 20:01:13 +00:00
jca
dccc7ed28f guard SSLv3 methods
ok sthen@ and Roman Kravchuk (maintainer)

Last minute change: as noted by sthen@ no REVISION bump is needed.
2015-07-18 19:59:48 +00:00
jca
7aa26c39d1 Register py-sslwrapper removal. 2015-07-18 19:57:02 +00:00
jca
9709c0b633 Kill py-sslwrapper. Broken since ages (RC5, SSLv2, etc).
ok ajacoutot@ sthen@
2015-07-18 19:55:13 +00:00
jasper
dfdcb0cfcb update to clutter-gst-3.0.8 2015-07-18 19:24:22 +00:00
ajacoutot
c81e6fa5da Unbreak sed(1) command. 2015-07-18 19:19:48 +00:00
jca
a5c80a1200 Replace SSLv3_client_method() with SSLv23_client_method() 2015-07-18 18:43:30 +00:00
jca
3acdfb8d63 guard sslv3 methods 2015-07-18 18:31:23 +00:00
bcallah
4ef1421479 Update to 1.5.7.18 2015-07-18 18:07:22 +00:00
jca
c50c12e22e 15 years later, SSLv23_client_method() ought to work 2015-07-18 17:13:49 +00:00
jca
4d7288922d Replace SSLv3_client_method() with SSLv23_client_method(). 2015-07-18 16:36:22 +00:00
sthen
0250c2981f guard SSLv3_method 2015-07-18 15:53:08 +00:00
jeremy
aa3fa6c794 Remove unnecessary dependency on ruby-json.
The json library is shipped with ruby 1.9+, and these ports support the
json library that comes with ruby.  While here, remove some
MODRUBY_ICONV_DEPENDS as those only are necessary on ruby 1.8.

OK jasper@
2015-07-18 15:46:11 +00:00
sthen
88a52fdf3e guard SSLv3_client_method() with #ifndef OPENSSL_NO_SSL3 2015-07-18 15:43:44 +00:00
sthen
576adabbab guard SSLv3_client_method() with #ifndef OPENSSL_NO_SSL3 2015-07-18 15:37:29 +00:00
sthen
de1d8796ea guard SSLv3_client_method() with #ifndef OPENSSL_NO_SSL3 2015-07-18 15:33:51 +00:00
ajacoutot
4220ee24ac sudo(8) -> su(1) 2015-07-18 15:32:47 +00:00
jasper
0bd434ad5a use sed -i 2015-07-18 15:31:16 +00:00
jasper
3012003bd6 wrap silly long line 2015-07-18 15:10:23 +00:00
dcoppa
06fda746ae Bugfixing update to redis-3.0.3 2015-07-18 15:08:47 +00:00
jasper
a09a73a4a3 use sed -i 2015-07-18 14:57:48 +00:00
jasper
92956bfd5f use sed -i 2015-07-18 14:40:46 +00:00
jasper
59559f29c0 use sed instead of perl 2015-07-18 14:33:49 +00:00
jasper
d2a4520ea8 use sed instead of perl 2015-07-18 14:33:25 +00:00
ajacoutot
85a7246cce Add a RUN_DEPENDS on security/sudo.
ok landry@ (maintainer)
2015-07-18 14:25:08 +00:00
jca
bf3eb6eaa1 Use devel/libtalloc instead of the bundled copy. 2015-07-18 13:33:08 +00:00
espie
ad8c61476a document the existence of _dpb, _pfetch, _pbuild. 2015-07-18 12:57:24 +00:00
kirby
e080e4ce23 update to apcupsd-3.14.13.
the most significatn change is added support of modbus upses.
2015-07-18 12:04:54 +00:00
zhuk
417a0b3a88 Allow ruby-mysql to be tested, using mariadb.port.mk.
Please note that "make test" will fail after fake stage. This is a lang/ruby
module issue being worked on.

okay jeremy@
2015-07-18 11:51:28 +00:00
kirby
17d115b1b8 update to goaccess-0.9.2.
changelog: https://raw.githubusercontent.com/allinurl/goaccess/master/ChangeLog
ok for previous diff from william@, second maintainer.
2015-07-18 11:09:38 +00:00
espie
be98f1e7a5 if _dpb exists, use it as a default unpriv_user 2015-07-18 08:35:37 +00:00
jca
38861b7a42 Remove empty patch. 2015-07-18 08:26:05 +00:00