11299 Commits

Author SHA1 Message Date
sthen
d46cd7c56f update to BIND 9.10.2 2015-03-14 21:01:54 +00:00
bcallah
abfad3854b Update to 1.7 -- mostly bugfixes. 2015-03-14 20:58:56 +00:00
naddy
2235cd4981 switch from "-static" to "${STATIC}, i.e., build static PIE executables
on most archs
2015-03-14 20:52:46 +00:00
jca
7158fc4492 Mark as broken for 5.7
The current samba4 version is affected by several security flaws, so
let's warn future -stable users. (NB: samba4 is not linked to the build
anyway)

ok naddy@ Ian McWilliam (MAINTAINER)
2015-02-27 17:32:52 +00:00
jca
61d1768e72 SECURITY update for CVE-2015-0240
talloc free on uninitialized stack pointer in netlogon server could lead
to remote-code execution.

  https://www.samba.org/samba/security/CVE-2015-0240
  https://bugzilla.samba.org/show_bug.cgi?id=11077

ok sthen@ naddy@ Ian McWilliam (MAINTAINER)
2015-02-25 01:37:49 +00:00
schwarze
fa903a01ac fix the worst syntax and semantic errors to make the manual usable,
drop USE_GROFF, and bump; issues reported by and OK naddy@
2015-02-21 00:01:20 +00:00
naddy
6e8200ef68 fix typo in mdoc macro name and drop USE_GROFF 2015-02-20 16:55:36 +00:00
sthen
ebab207e7e update to BIND 9.10.2P2
On servers configured to perform DNSSEC validation using managed
   trust anchors (i.e., keys configured explicitly via managed-keys, or
   implicitly via dnssec-validation auto; or dnssec-lookaside auto;),
   revoking a trust anchor and sending a new untrusted replacement could
   cause named to crash with an assertion failure.  This could occur in
   the event of a botched key rollover, or potentially as a result of a
   deliberate attack if the attacker was in position to monitor the
   victim's DNS traffic.  This flaw was discovered by Jan-Piet Mens, and
   is disclosed in [CVE-2015-1349] [RT #38344] (**)
2015-02-18 22:49:44 +00:00
sthen
7d91c091ac drop Roman Kravchuk as maintainer per his request. 2015-02-18 12:51:31 +00:00
dcoppa
4682a5d4cd zap useless lines 2015-02-18 11:08:35 +00:00
sthen
e56d2db445 Adjust the "meta" rc-scripts (these are used in ports with multiple daemons
which should all be started/stopped together), previously "restart" would
restart each sub-daemon in turn, but actually it should stop all daemons
and only then start them again. Additionally, as suggested by ajacoutot,
stop the procedure and return an error if stopping one of the rc scripts
failed.  ok ajacoutot@ rpe@
2015-02-17 22:08:36 +00:00
naddy
15f8863012 A dot or a single quote introduces a roff(7) macro; fix text lines
beginning with such a character.  Drop USE_GROFF.
ok and delousing schwarze@
2015-02-17 19:47:01 +00:00
sthen
5d96081a97 Add a patch from OpenConnect upstream; "If we get an AC_PKT_DISCONN
message with no payload, just skip printing the disconnect reason."
Fixes printing junk and possibly crashing if the server goes away.

Tweak DESCR, mention the open-source server ocserv (port for this is
ready but holding in openbsd-wip until we're done with 5.7).

(Readers might be interested to note that 7.04 is probably the last
version of OpenConnect to only support Cisco's SSL-VPN protocol; the
next version will almost certainly add client support for Juniper's
protocol).
2015-02-17 12:13:57 +00:00
naddy
6bb8d0674b Drop USE_GROFF from ports where the formatting differences are acceptable
or mandoc provides the more useful output.
2015-02-16 22:57:07 +00:00
sthen
be1a24796d igmpproxy has an rc script; change the "add to rc.local" doco, spotted by weerd@ 2015-02-16 22:53:55 +00:00
jasper
401025b3b4 update to farstream-0.2.7 2015-02-15 13:54:57 +00:00
naddy
7b175cbf8c Drop USE_GROFF since groff and mandoc produce identical output. 2015-02-15 13:05:11 +00:00
sthen
61e9d1fe85 Add a missing net/bpf.h inclusion, activating code that handles the conflicting
DLT_* values on various OS. Specifically, fixes things so DLT_LOOP packets are
handled by the correct dissector and displayed as IP rather than raw packets.
2015-02-14 00:14:31 +00:00
sthen
7163d175e8 update to wireshark 1.12.3
take maintainer so i notice updates in portscout
2015-02-13 22:29:09 +00:00
sthen
007dea6078 use --libs to specify the path to find libldns; this is no longer auto
detected (possibly as a result of installperl r1.31 / hints/openbsd.sh r1.57)

unbreaks use of Net::LDNS noticed as a runtime failure of zonemaster-cli
2015-02-13 13:43:07 +00:00
brad
715514daa8 Use srand_deterministic() as Pidgin expects deterministic results
which fixes the nick colours in multiuser chat rooms changing between
restarts of Pidgin.

From Steven McDonald <steven at steven-mcdonald dot id dot au>

ok sthen@
2015-02-11 08:11:45 +00:00
sebastia
79f9d0d655 * add proper python shebang to rabbitmqadmin plugin command line tool,
* unbreak rabbitmqctl eval '' and friends, the patch to rabbitmqctl
   that existed to run the code seems to be superfluous, and broke that

OK jasper@
2015-02-10 17:53:51 +00:00
dcoppa
9d21b02b8c Merge fixes from upstream:
update default blocklist url
(upstream git commit fbc2cfe4ed7046bf88ed123b504bbbee2376bf79)

BT/DHT: update public router addresses
(upstream git commit ea463573d490d1c44c57ec87b63d3d5d08489e96)

fix buffer overflows in DNS resolution
(upstream git commit 1e7341ef879a0f42e304bdd24f3339245214b58a)
2015-02-10 11:50:09 +00:00
sthen
44c52ca039 update to pear-Net-SMTP-1.6.2 2015-02-10 11:34:50 +00:00
jasper
5fb70ccf8a install missing headers.lua as spotted by tedu@ 2015-02-10 08:44:32 +00:00
rpe
249b5547a3 - Use rcctl(8) in commandline examples.
- Add a section how to setup icinga-cgi with httpd(8) and slowcgi(8).

OK sthen@
2015-02-07 22:39:04 +00:00
jasper
978abb2ee0 update to ruby-msgpack-0.5.11 2015-02-07 14:39:52 +00:00
sthen
e9400759bc Update to icinga2-2.2.4. Change rc script to use "icinga2 daemon" and rc_bg to
force running in the background; it was previously using "icinga2 daemon -d",
but since 2.2.2 this has been hanging on OpenBSD.

Disable vfork as was done upstream on MacOS (to stop a hang there) in the
hope it may also stop a runtime hang seen occasionally here.

There are still some odd things going on and I don't think this is production-
ready on OpenBSD yet, so the warning in DESCR-main remains, but I think this
is not worse than 2.2.1.
2015-02-06 22:53:27 +00:00
giovanni
a107b153e2 Update to 2.82
adds some tld.
ok sthen@
2015-02-06 15:12:35 +00:00
sthen
e0c200b1d4 update to nagios 4.0.8, ok rpe@
- tweak www-chroot handling to avoid separate patch files

- mark as ONLY_FOR_ARCHS=${LP64_ARCHS} due to many format string issues
with 64-bit time_t (build with -Wformat so amd64 users get to see them)
2015-02-05 22:58:24 +00:00
sthen
b77811cc27 update to UniFi 3.2.10 (lots of fixes)
also package the shell API
2015-02-05 11:10:18 +00:00
benoit
457fad62e8 Update to p5-Net-Domain-TLD-1.73. 2015-02-05 07:36:23 +00:00
jca
e769be4eba Repair conflict between -main and -docs, introduced in previous.
The intended diff had this conflict resolved, but I ended up committing
the previous diff...  Problem spotted by Markus Lude.
2015-02-05 02:04:00 +00:00
sthen
58dfc8201e fix the remaining 63 time_t problems in Icinga idomod.c, and a typo in patch-cgi_cgiutils_c 2015-02-04 21:19:23 +00:00
dcoppa
2384e25d09 Fix typos in the manual page 2015-02-04 15:41:14 +00:00
dcoppa
0a7cd0fb6f - Fix HOMEPAGE
- Do not subscribe to sample podcasts by default

- Use full command line switches for curl, for clarity purposes
  (stolen from https://github.com/ypid/hpodder/)
2015-02-04 13:39:51 +00:00
jasper
d3f03cad30 - update to apache-activemq-5.10.1, lots of bugfixes and improvements
* https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12326456
2015-02-04 12:27:44 +00:00
jca
f7a904b485 Move the ldap files from the -docs to the -main samba package.
Requested by Marcus Merighi, patch by Ian McWilliam (MAINTAINER),
input from sthen@ and tweaks by me.

ok sthen@
2015-02-04 11:50:21 +00:00
sthen
0591485581 previous change ("Disable json stats in bind") resulted in losing a couple
of symbols from libdns; bump SHARED_LIBS version and REVISION.
2015-01-30 15:15:42 +00:00
dcoppa
2005edfdc6 Merge some fixes from upstream repo:
Fix always-true conditional

Remove unneeded conversion from CMD4Hash

Fix a shadow warning
2015-01-29 14:46:28 +00:00
ajacoutot
2df9c8cac8 Update to libnice-0.1.10. 2015-01-29 07:02:24 +00:00
sthen
2836736702 bump following libbind update; should be unnecessary but belt-and-braces 2015-01-26 22:42:25 +00:00
sthen
cae4632615 avoid _res symbol conflict; from Alexander Lobodzinski 2015-01-26 22:42:04 +00:00
steven
ceea4d12ad update to 3.0.8
link dynamically with libft

test and ok landry@
2015-01-26 13:13:58 +00:00
steven
f58e71406e update to 3.0.8
test and ok landry@
2015-01-26 13:12:17 +00:00
sthen
6356a35e7e update to OpenConnect 7.04 and tweak DESCR. 2015-01-26 10:59:21 +00:00
sthen
3551061450 OpenConnect has hidden deps on pcsc-lite and oath-toolkit-pskc 2015-01-26 10:43:26 +00:00
ajacoutot
c8aa1f307a Rodrigo Mosconi took maintainer a while ago but I forgot to commit it. 2015-01-25 09:36:55 +00:00
ajacoutot
4d948eae83 +netatalk3 2015-01-25 09:34:44 +00:00
ajacoutot
8277640682 Import netatalk-3.1.7.
Netatalk is an OpenSource software package, that can be used to turn a
*NIX machine into an extremely high-performance and reliable file server
for Macintosh computers.
<...>

Sharing the same name as net/netatalk but with a different pkgspec so
users can choose which one to install.
Successfully tested as an Apple Time Machine backup device.

input and ok sthen@, jasper@
2015-01-25 09:33:53 +00:00