Commit Graph

9155 Commits

Author SHA1 Message Date
jasper
b16bb3ff33 - update to py-zmq-13.0.0 2013-03-08 10:34:18 +00:00
jasper
0669819342 - update to zeromq-3.2.2 2013-03-08 10:33:28 +00:00
ajacoutot
3cf1c9a29b +whatweb 2013-03-08 09:59:16 +00:00
ajacoutot
96aa0e67af Import whatweb-0.4.7.
WhatWeb identifies websites. It's goal is to answer the question, "What
is that Website?". WhatWeb recognises web technologies including content
management systems (CMS), blogging platforms, statistic/analytics
packages, JavaScript libraries, web servers, and embedded devices.
WhatWeb has over 900 plugins, each to recognise something different.
WhatWeb also identifies version numbers, email addresses, account ID's,
web framework modules, SQL errors, and more.

ok jasper@
2013-03-08 09:58:40 +00:00
jasper
c7a5d72a18 - update to gssdp-0.14.2 2013-03-08 07:09:34 +00:00
djm
128e83da3c drop MAINTAINERship of my ports. I simply don't have time to give them
the attention they deserve
2013-03-08 02:04:37 +00:00
brad
3e2964487a Update to Pidgin 2.10.7. Fixes 3 security issues and some crashing bugs,
as well as other bug fixes. CVE-2013-0271, CVE-2013-0272, CVE-2013-0273,
CVE-2013-0274

ok sthen@
2013-03-08 01:03:09 +00:00
brad
0eb57b6b43 Update to isc-dhcp 4.2.5.
ok sthen@
2013-03-07 18:59:35 +00:00
fgsch
5cd3fb91a8 Update to ngircd 20.2. Changes at http://ngircd.barton.de/doc/ChangeLog.
This includes the security fix committed before release that went in p1.
2013-03-07 15:40:01 +00:00
zhuk
b474d241d2 Change @sample for archives directory as its place was changed somewhere
around 1.5.0.

okay sthen@ (MAINTAINER)
2013-03-06 18:34:58 +00:00
jasper
012cae3de1 SECURITY UPDATE to telepathy-gabble 0.16.5, addresses
CVE-2013-1769: remotely-triggered NULL pointer dereference in telepathy-gabble
2013-03-04 18:49:29 +00:00
ajacoutot
3c1fa65ec8 Explicitely set path to javaPathHelper; we do not want to rely whether
LOCALBASE/bin is in the PATH or not and this is consistent with what
other java rc scripts do.

prodded by Marc Peters
2013-03-04 15:56:13 +00:00
ajacoutot
e66659d6a1 Repair rc script which could never have worked... 2013-03-04 15:48:41 +00:00
sthen
cafc85969f update to openconnect 4.08, rolling in a security fix which we previously
had as a patch, plus a couple of additional bug fixes.
2013-03-04 15:39:31 +00:00
lteo
a7574859bb Update oinkmaster.conf to use HTTPS for the sample snort.org URLs to
protect the oinkcode from being exposed.  Also update the Snort version
in the URLs to 2.9.4.0 to match the current version of our Snort port.

Tweak the regexp that oinkmaster uses to validate HTTPS URLs so that it
won't treat a bad URL that starts with httpsssss:// as valid (this
regexp tweak was jointly worked on by me and maintainer).

regexp feedback zhuk@
OK Markus Lude (maintainer), earlier version OK sthen@
2013-03-04 04:30:35 +00:00
lteo
defa405c2c Update pkg/README to change the Snort ruleset download URL from HTTP to
HTTPS to protect the oinkcode from being exposed (suggested by David
Hill).

Also add a note that registered users without a paid subscription are
only allowed to download the official Snort ruleset once every 15
minutes (suggested by Adam Jeanguenat).  This restriction is not obvious
on the snort.org site, so I think this note would be helpful to users.

OK Markus Lude (maintainer), sthen@
2013-03-04 04:23:18 +00:00
sthen
fa9d5a00a1 update to a more recent OUI list 2013-03-03 21:28:15 +00:00
sthen
bfc6ee6ff9 - fix an off-by-one in iperf triggering a segfault with (insanely) high
bandwidths, seen when investigating some bug where a too-high bandwidth
was reported.

- patch configure to not remove the -g flag from CFLAGS

ok lteo@
2013-03-03 12:29:44 +00:00
landry
ac405c56be Properly disable gtk-doc, otherwise it's picked as a hidden dep during
build.
2013-03-03 08:12:05 +00:00
ajacoutot
e53b100ce1 Hook up ifstat,snmp. 2013-03-02 14:16:43 +00:00
ajacoutot
dc30cd8f37 Update to h323plus-1.25.0. 2013-03-02 14:06:24 +00:00
ajacoutot
1349c92183 Update to opal-3.10.10. 2013-03-02 14:05:59 +00:00
ajacoutot
3a07071d40 Update to ocsync-0.70.4. 2013-03-02 14:01:42 +00:00
sthen
7315927d04 zap -no-pie stuff no longer needed for static bins. 2013-03-02 12:42:33 +00:00
sthen
c59262b392 icinga-web 1.8.2 2013-03-02 12:41:55 +00:00
jasper
79684e7f37 - update to apache-activemq-5.8.0 2013-03-02 12:31:35 +00:00
jasper
4bf2fc7c44 - add missing build dependency, spotted by several
ok aja@
2013-03-02 12:21:10 +00:00
fgsch
5321f2a662 SECURITY UPDATE: fix remote DoS.
aja@ sthen@ ok
2013-02-15 09:54:36 +00:00
jasper
e7663d3def add CVE id that was just issued.
ok sthen@
2013-02-12 21:39:47 +00:00
sthen
74672a6f9d Cherrypick OpenConnect fix; use a dynamically allocated buffer rather than
a fixed stack buffer when constructing HTTP requests. Prevents an overflow
if a malicious VPN gateway sends a very long hostname/path (for redirects)
or cookie list. (There is a newer release of OpenConnect which includes
this fix, but also some bigger code changes, so that will wait until we
are done with 5.3 release).  ok aja@ jasper@
2013-02-11 21:16:33 +00:00
bluhm
5b5611e8ac update p5-Net-Inspect to 0.27
OK jasper@ naddy@
2013-02-11 21:07:38 +00:00
ajacoutot
9949e8d7c4 Use chsh(1) at @exec-add / @unexec-delete time to set the correct shell
for the uucp user.

idea from miod@
ok jasper@ sthen@
2013-02-09 15:17:46 +00:00
sthen
f5a323c546 Don't use ${FLAVOR:L}, we only support lower-case flavours now.
OK ajacoutot@ espie@
2013-02-09 14:49:50 +00:00
naddy
dbc1294a3d include the built-in manual, as intended 2013-02-08 16:45:25 +00:00
jasper
d3be0ce8b6 Security fix for CVE-2013-0249, smtp_state_authdigest_resp()
buffer overflow vulnerability.

Backported from upstream git.

ok naddy@ (MAINTAINER)
2013-02-08 16:27:12 +00:00
ajacoutot
e03c56c9c5 MODGCC4_VERSION default to 4.6 now. 2013-02-07 19:13:49 +00:00
bluhm
ff7a18eb62 update p5-Net-Inspect to 0.26 2013-02-06 23:18:19 +00:00
ajacoutot
e953a008f8 Quiet gconftool-2:
gconf_ping() will try to shutdown gconfd, but since installing pkg is
done as root, there is not gconfd nor dbus that can be started when
DISPLAY isn't set and an annoying warning is issued.

discussed with espie@
2013-02-06 14:23:06 +00:00
jasper
1f21a8e5ce sync 2013-02-05 15:09:26 +00:00
jasper
b5f048c3e6 import apache-activemq 5.7.0
Apache ActiveMQ is the most popular and powerful open source
messaging and Integration Patterns server.  Apache ActiveMQ is fast,
supports many Cross Language Clients and Protocols, comes with easy to
use Enterprise Integration Patterns and many advanced features while
fully supporting JMS 1.1 and J2EE 1.4.

rc.d help and ok aja@
2013-02-05 15:08:45 +00:00
sthen
23ca7d6c7d bump; make sure static binaries get updated 2013-02-05 14:49:29 +00:00
ajacoutot
cf54f2a184 Set the full path to gtar and do not hardcode /usr/local. 2013-02-05 10:39:29 +00:00
jasper
bed7df512a - update to stomp-1.2.8 2013-02-05 10:31:57 +00:00
bcallah
92e85ce86e Update my email on these ports to my openbsd email.
ok jasper@
2013-02-04 15:36:35 +00:00
nigel
68f2f4ba8b Add dependency on bison and patch not to create unused ps nad ps files.
Ok sthen@
2013-02-03 23:07:02 +00:00
todd
977640c32f bitlbee has otr and libpurple flavors, lets actually build them; ok okan@ 2013-02-01 22:16:29 +00:00
kili
01a60713d6 Update to 0.7.5.3, including a fix for CVE-2013-0722.
Fix wrong use of mutexes and some wrong error checking
related to pthreads. (The patch for this had been sent
upstream)

Hack around the abuse of NS_IN6ADDRSZ and NS_INT16S probably
found on certain systems (see Makefile for an explanation).

ok sthen@
2013-02-01 22:10:18 +00:00
naddy
df0c9e45b7 recognize 5.3 2013-02-01 17:15:01 +00:00
brad
46848914ad Rename dprintf macro/function to debugprintf so as to not conflict with
POSIX function name.

ok sthen@
2013-02-01 09:48:38 +00:00
brad
3f8bdb2f69 Update to Samba 3.6.12. Fixes two security issues with SWAT. CVE-2013-0213, CVE-2013-0214 2013-01-30 23:22:05 +00:00