Commit Graph

25496 Commits

Author SHA1 Message Date
espie
e8eb322ef3 remove hidden dependency on tcl.
okay pvalchev@
2004-08-17 22:36:02 +00:00
pvalchev
fb1323e187 adjust 2004-08-17 21:03:44 +00:00
espie
1e029183fd fixes for recent libtool changes. Blasted libtool is harder to fool...
okay naddy@
2004-08-17 19:33:09 +00:00
naddy
c9a0ed3f02 only pick up gnutls in ssl flavor 2004-08-17 19:21:17 +00:00
robert
19bf64c2d4 SECURITY:
Andres Salomon noticed a problem in the CGI session management of Ruby.
CGI::Session's FileStore implementations store session information insecurely.
They simply create files, ignoring permission issues. The added patch fixes
this issue.

ok pvalchev@
2004-08-17 16:03:10 +00:00
pvalchev
cd93ac7b32 INSTALL_PROGRAM was being overridden by bsd.port.mk, use custom INSTALL_EMACS
which is defined as INSTALL_SCRIPT from the makefile, as a hack to disable
stripping on the emacs binary.  discussed with marc, espie and others
2004-08-16 23:34:02 +00:00
naddy
31435c916e fix dependencies 2004-08-16 21:26:01 +00:00
naddy
63cad061c9 add missing Tcl/Tk dependency; ok sturm@ 2004-08-16 21:12:37 +00:00
robert
6179e2c072 gnome-libs should conflict with libgtop, but it shouldn't with
libgtop's gnome flavor

ok naddy@
2004-08-16 15:27:47 +00:00
espie
eb2052e928 fix out of bounds access.
thx tdeval@ for mmap malloc.
okay naddy@
2004-08-16 14:58:48 +00:00
sturm
295bf31885 ensure correct case in DISTNAME created from case insensitive FLAVOR
ok naddy
2004-08-15 22:31:53 +00:00
pvalchev
f56ee305f9 conflict w/ mjpegtools that someone forgot to register 2004-08-15 14:39:39 +00:00
brad
2ebf19d869 add a BUILD_DEPENDS on p5-XML-Parser
From: Thomas Delaet <thomas at delaet dot org>
2004-08-15 01:25:38 +00:00
naddy
b70c06e601 We've grown dladdr(3), adapt. From: Kurt Miller <truk@optonline.net> 2004-08-14 21:50:38 +00:00
pvalchev
e51fff2577 mark broken: distfile continually changing, cannot keep correct checksum; ok naddy robert 2004-08-14 20:24:46 +00:00
naddy
a380627149 Mark as BROKEN. Kernel internals have changed, the system interface needs
to be rewritten.  ok pvalchev@
2004-08-14 20:22:06 +00:00
brad
b0ed136e82 XChat's Socks-5 proxy code is vulnerable to a remote exploit. To
successfully exploit the code, you would need to enable socks5
traversal (default off) and connect to the attacker's own custom
proxy server.

If you never intend to use a Socks5 proxy, you are not affected at
all by this issue.

http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html

ok pvalchev@
2004-08-14 19:16:44 +00:00
naddy
25a514f29c SECURITY:
There is a path-sanitizing bug that affects daemon mode in all
recent rsync versions (including 2.6.2) but only if chroot is
disabled.  It does NOT affect the normal send/receive filenames
that specify what files should be transferred.  It does affect
certain option paths that cause auxiliary files to be read or
written.
http://rsync.samba.org/#security_aug04
2004-08-14 18:41:17 +00:00
brad
cb3487157b fix 3 security issues.
http://www.kde.org/info/security/advisory-20040811-1.txt
http://www.kde.org/info/security/advisory-20040811-2.txt
http://www.kde.org/info/security/advisory-20040811-3.txt

ok naddy@
2004-08-14 18:03:47 +00:00
brad
036acaf2ff sync libtool patches to fix amd64 C++ linking issues among other things.
ok naddy@
2004-08-14 18:00:22 +00:00
naddy
afb50014bc add missing dependency 2004-08-14 12:53:47 +00:00
sturm
8dc011d997 remove .o files from package lists, especially as the one in PLIST
prevents lablgtk to package correctly on non-native archs

ok pval@
2004-08-14 11:14:14 +00:00
naddy
6009b0f454 crash in 3DNow! code path, so just disable 3DNow! detection for now 2004-08-14 01:16:01 +00:00
pvalchev
c508632507 sync 2004-08-14 01:15:50 +00:00
pvalchev
8a4cf0f3b3 sync 2004-08-14 00:52:37 +00:00
robert
7fe936de9c SECURITY:
Gaim contains several remote overflows related to the MSN-protocol
parsing functions that may allow remote code execution.
The added patch fixes these issues.

ok brad@, pvalchev@
2004-08-14 00:27:06 +00:00
pvalchev
8c30f51213 shrink by a lot 2004-08-14 00:23:35 +00:00
pvalchev
b06c4bcaef ignore files generated by check-plist 2004-08-14 00:23:00 +00:00
pvalchev
74efe665a3 sync 2004-08-13 23:48:48 +00:00
brad
2545045f21 Side-effect of BULK=Yes: WRKDIR gets wiped out before the depend cookie
is written.

So, we simply recreate WRKDIR manually.
This is a kluge, but it should do the trick.

From espie@

ok pvalchev@ espie@
2004-08-13 23:28:40 +00:00
pvalchev
7fade6547c bash2->bash; naddy 2004-08-13 21:00:29 +00:00
naddy
f37ba8b502 revert build fix that has turned into an error with our new errno 2004-08-13 19:40:01 +00:00
brad
3d21da809c This is ridiculous, I remove this port after no updates for 2 yrs because
the version in the ports tree had security issues. Then a couple weeks
later it is revived and then 2 security issues pop up just before release.
This pile of shit is being marked BROKEN and frankly I don't care if it
ever comes back.

ok pvalchev@
2004-08-13 19:25:42 +00:00
pvalchev
8bf7498f00 sync libtool patches, fixes programs that can't find their libs; maintainer Jacob Meuser 2004-08-13 08:09:23 +00:00
espie
3ebd827638 packages ARE conflicting, thanks to the examples files.
Proper fix would mean putting the examples in a separate package, but
it's too late in the cycle to do so.

okay pvalchev@
2004-08-13 08:08:34 +00:00
espie
2d48535d1e don't output pkgname if no problem to output.
okay pvalchev@
2004-08-13 07:45:22 +00:00
brad
94c571c2e0 PNG vulnerability fix.
http://www.imagemagick.org/www/Changelog.html

ok pvalchev@
2004-08-13 06:17:41 +00:00
brad
cf013a1bef sync libtool patches
ok pvalchev@
2004-08-13 06:16:38 +00:00
brad
a874c8dc54 Fixed a race condition in nessus-adduser for users who do not configure their TMPDIR variable.
http://www.nessus.org/nessus_2_0.html

ok pvalchev@
2004-08-13 06:14:57 +00:00
naddy
b49a901036 traverse circular queue in a way that actually terminates; ok maintainer 2004-08-13 00:18:24 +00:00
naddy
719e68a3d9 libintl requires libiconv, too 2004-08-12 22:46:45 +00:00
naddy
a7febe12f3 don't rely on inter-library dependency 2004-08-12 21:56:41 +00:00
naddy
218459b4e4 don't rely on inter-library dependency:
shoehorn -liconv into some homegrown gettext autoconf tests
2004-08-12 21:23:00 +00:00
espie
9560823362 set _MASTER_LOCK in the correct location.
fix postgresql locking *for good*.
okay pvalchev@
2004-08-12 19:02:45 +00:00
espie
b2fffcb71e script to check that all common dirs are properly tagged in every package
that should tag them (e.g., any package without a parent `dependency'
should have the dir marked).

okay pvalchev@
2004-08-12 18:58:34 +00:00
naddy
85d8270d56 Don't rely on inter-library dependency.
From: Aleksander.Piotrowski@nic.com.pl
ok robert@
2004-08-12 17:39:50 +00:00
jolan
8bcd005fb0 prevent doubly defined malloc, fixes build on ?gcc3 archs? (why does
this compile w/gcc2?)

ok pvalchev@
2004-08-12 17:22:23 +00:00
naddy
b9224c740f Don't rely on inter-library dependencies.
From: Aleksander.Piotrowski@nic.com.pl
2004-08-12 15:02:25 +00:00
claudio
836b70d63b Fix wmmon to show again the correct cpu usage. I rewrote most of the patch and
now wmmon uses sysctl to get all stats and is therefor no longer setgid kmem.
Tested by tdeval
OK pval
2004-08-12 09:33:10 +00:00
sturm
a11bab006f BUILD_DEPENDS on p5-XML-Parser
ok pval, maintainer
2004-08-12 06:23:22 +00:00