Commit Graph

582 Commits

Author SHA1 Message Date
db
6f3ec9a5ae update to 1.23 which contains some bug fixes and remove VERSION variable
ok maintainer nikolay@ mbalmer@ (db@)
2005-03-10 11:01:51 +00:00
db
84ff3fce88 Update to version 1.14. Fixes GLSA 200410-31.
ok maintainer nikolay@ mbalmer@ (db@)
2005-03-10 10:55:04 +00:00
naddy
7eb0d68e96 SECURITY:
Fix multiple security vulnerabilities:
- buffer overflows (CAN-2005-0160)
- directory traversal problem (CAN-2005-0161)

From: Ulf Harnhammar <Ulf.Harnhammar.9485@student.uu.se>
2005-02-22 15:13:09 +00:00
sturm
eee6c98fc2 use FULLDISTDIR in systrace policy, noticed by rohee@ 2005-02-21 21:59:44 +00:00
alek
6eff9fa47e Add WANTLIB marker 2005-02-19 22:18:31 +00:00
espie
f8396e705a zap shit 2005-02-19 12:32:22 +00:00
espie
755b352f5c reimport, fuck. 2005-02-19 12:31:30 +00:00
espie
80055dd85f +zipios 2005-02-19 11:31:52 +00:00
espie
5ece631328 zipios archiver library, port mostly taken from FreeBSD, almost mandatory
for wesnoth.
2005-02-19 11:29:14 +00:00
naddy
382d846391 SECURITY:
cpio used a 0 umask when creating files using the -O (archive) or
-F options, which created the files with mode 0666 and allowed local
users to read or overwrite those files. (CAN-1999-1572)
2005-02-11 23:28:34 +00:00
sturm
3a51ccb48b add $OpenBSD$ tag 2005-02-09 20:36:29 +00:00
naddy
5400bfd4d1 Fix command line parsing; from GNU CVS. 2005-01-30 14:56:57 +00:00
naddy
4ea670fd4b Now that @info transparently picks up all .info-* files, don't go through
extra steps to rebuild with --no-split.
2005-01-27 02:09:52 +00:00
espie
ad2bf27658 @#$$@ autoconf
io.h we get is not win32, but another package libio.
protect against that.
2005-01-15 15:22:01 +00:00
naddy
69777e8169 SIZE 2005-01-05 15:40:35 +00:00
naddy
1e90401cd6 Update to 1.15.1.
- Compressed archives are now recognized automatically.
- Numerous bug fixes.
2005-01-01 23:47:43 +00:00
espie
7b41b9b734 rename to par1 to avoid conflict 2004-12-30 00:47:10 +00:00
robert
db26b06979 fix WRKDIST 2004-12-04 15:45:41 +00:00
robert
acdf132e4d SECURITY:
fix a buffer overflow; bump PKGNAME;
When zip performs recursive folder compression, it does not check
for the length of resulting path. If the path is too long, a buffer overflow
occurs leading to stack corruption and segmentation fault;
CAN-2004-1010
2004-12-04 15:36:36 +00:00
espie
056bf5d790 Mark all system libs in WANTLIB, result of running newlib-depends-check 2004-11-21 12:50:32 +00:00
naddy
6f514cd779 update to 3.43; from Steve Shockley <steve.shockley@shockley.net> 2004-11-17 19:13:59 +00:00
brad
e64e11c3e1 remove workaround for sparc64. 2004-11-14 21:33:11 +00:00
naddy
ef7d87a249 update to 1.21; from kevlo@ 2004-11-11 17:14:15 +00:00
alek
9285bdc4ed Use @sysctl
ok espie@
2004-11-09 14:48:25 +00:00
naddy
733078d97e update to 1.04 and new maintainer; from kevlo@ 2004-11-08 19:41:43 +00:00
robert
a44a74380c SECURITY:
upgrade to 1.1;
A directory-traversal issue exists in cabextract
that could overwrite any file on the system when extracting
a malicious cab file.

from maintainer; the issue has also been reported by matthieu@
2004-10-23 15:54:42 +00:00
naddy
c1e2668e51 Kill INSTALL/DEINSTALL. Don't bother advertising srmt.
Don't install a sample srmt.conf.  Those very few people who want to play
with this can figure it out on their own.
2004-10-08 16:44:43 +00:00
sturm
054d7e9610 another syscall 2004-10-03 14:31:37 +00:00
naddy
f25ca6486a Don't bother advertising GNU rmt. 2004-09-23 16:49:56 +00:00
danh
6f868014f5 changed /usr/local -> $LOCALBASE
From: Aleksander Piotrowski <aleksander.piotrowski@nic.com.pl>
2004-09-22 14:17:22 +00:00
pvalchev
a4e1e24ad5 remove David Lebel from maintainer position per his request. 2004-09-15 00:06:58 +00:00
espie
c9d1d25390 kill extraneous comment that are now detected correctly by update-plist.
kill an extra %%SHARED%% that should not exist.
2004-09-14 23:12:43 +00:00
espie
1df44bf54d new plists 2004-08-10 07:27:48 +00:00
espie
79fe9efdfd switch to new style PLISTS, using @lib, ditching DYNLIBDIR.
Replace two INSTALL scripts with @sample.
Reorder plists to match auto-generation, add comments for files that
don't get installed.
2004-08-06 14:37:27 +00:00
espie
e370816909 four more common locale dirs. 2004-08-05 16:14:48 +00:00
espie
e5bc7ec5a1 man3p part of fake.mtree now. 2004-08-04 16:36:11 +00:00
espie
2df369f14f pass things through new make-plist 2004-08-04 16:22:59 +00:00
espie
b3c0cfb759 manpages markers.
use SHARED_ONLY to discard PFRAG.shared.
2004-08-03 11:30:01 +00:00
espie
e990387db0 switch to new style MODULES 2004-08-03 09:24:50 +00:00
naddy
69bf66944f correctly set MODGNU_CONFIG_GUESS_DIRS 2004-07-31 15:36:46 +00:00
espie
d51143282a switch to using dir/ and @info.
a few more tweaks done by the automatic update mode of make update-plist.
2004-07-24 14:20:48 +00:00
danh
1ff7ada6a4 better formatting 2004-07-12 11:56:51 +00:00
jolan
6aa2e39493 +par1cmdline 2004-07-03 23:46:33 +00:00
jolan
deb728da1c command line implementation of the PAR v1.0 specificaton 2004-07-03 23:45:37 +00:00
pvalchev
7b50393e7b Use -O0 to compile on hppa, workarounds a compiler bug which lead to
crashes, hangs, and other odd behaviour during extraction.
2004-06-27 23:29:55 +00:00
jolan
483e3852ca update to 0.4 2004-06-27 23:06:47 +00:00
xsa
93568351bb set BUILD_DEPENDS= ${RUN_DEPENDS} not the opposite .. for obvious
reasons... okay pvalchev@.
2004-06-26 07:35:05 +00:00
sturm
6e70f8f153 keep the dash in the PKGNAME, noticed by Jacob Meuser 2004-06-25 14:04:08 +00:00
sturm
3c67f35287 update to unzip 5.51 2004-06-24 21:35:14 +00:00
sturm
4341d246db special bsdos systrace policy 2004-06-24 19:20:17 +00:00
naddy
d01a6d3906 update to 1.14 2004-05-15 12:57:34 +00:00
lebel
d85068ea88 gcpio -Hustar will create archives with broken timestamps.
For details, fix, etc see
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=238177

from naddy@
2004-05-11 13:20:29 +00:00
naddy
5395838bbc SECURITY:
Buffer overflow and directory traversal fixes; from Ulf Harnhammar.
2004-05-06 23:07:57 +00:00
naddy
bcb59cf546 Update to 1.13.94:
- Added support for POSIX.1-2001 and ustar archive formats.
- Various option cleanups.
- New message translations.
- Bug fixes.

Switch to .bz2 distfile since we already depend on bzip2 anyway.
2004-04-22 02:56:10 +00:00
xsa
430863579e update to 1.08; okay kevlo@. 2004-04-12 10:17:00 +00:00
naddy
9e1ffe3396 - regen patches
- don't allow argument to overflow buffer (via BugTraq)
2004-04-10 20:28:00 +00:00
jolan
a1e29d63de master_site moved 2004-04-09 06:27:58 +00:00
brad
764c258b0b remove another sparc64/2.95 workaround. 2004-04-06 06:33:29 +00:00
naddy
f16b99d84d The sparc64 compiler is gcc3 now; don't require the gcc3 module. 2004-02-25 02:35:15 +00:00
naddy
6e6637bac6 home page/master site moved; from Robert Nagy <thuglife@bsd.hu> 2004-02-24 22:12:07 +00:00
naddy
520efe1fdd drop workarounds for gcc2.95/sparc64 bugs 2004-02-23 00:33:34 +00:00
kevlo
667e64be40 update to 1.33 2004-02-16 05:31:44 +00:00
sturm
6c2f312e1e update to unrar 3.30 proper and point to the correct license file in
DESCR

from thuglife at bsd.hu (Robert Nagy)
2004-02-11 17:46:02 +00:00
kevlo
e7f0b7d4d6 use mkstemp(). 2004-02-06 08:29:24 +00:00
sturm
4e13d5dcd5 mark arch independent 2004-02-03 07:28:12 +00:00
jolan
d93c99e6e0 +par2cmdline 2004-01-23 05:25:49 +00:00
jolan
92fa84a4cd import 0.3 2004-01-23 05:20:48 +00:00
sturm
0d86c31cea update to unrar 3.30 beta 4
from thuglife at bsd dot hu (Robert Nagy)
2004-01-17 18:44:18 +00:00
naddy
6807d1bedd Don't attempt to build perl ports that load dynamic modules
on architectures that support static linking only.
2004-01-17 15:58:06 +00:00
jolan
31011a55aa fix double free crash 2004-01-01 01:29:20 +00:00
naddy
17170de520 overhaul 2003-12-31 19:37:56 +00:00
naddy
32cd14b304 overhaul p5-Compress-* plists 2003-12-31 15:11:09 +00:00
espie
267a6b74c9 ISO C++ bitches if the order of declarations is incorrect. 2003-12-29 12:48:21 +00:00
naddy
2276d3b230 remove WWW lines 2003-12-15 21:42:08 +00:00
naddy
cbdc3f441f @dirrm for shared directories 2003-12-15 15:49:08 +00:00
kevlo
142532fb73 update to 1.31 2003-10-31 02:56:55 +00:00
jolan
7475c2231d make these fetch again. 2003-10-29 05:04:25 +00:00
sturm
5b293eeb3d (void *)NULL 2003-10-26 17:22:24 +00:00
sturm
fc66c490ad deal with kern.emul.{bsdos,svr4} sysctl
noticed by Alex de Joode
2003-10-18 18:20:40 +00:00
sturm
319d78b5ce remove maintainer Sebastian Stark per his request on ports@
new maintainers:
- databases/gq Marc Balmer
- sysutils/login_ldap Peter Werner
- sysutils/pstree Sam Smith
2003-09-23 15:29:41 +00:00
naddy
8630bbd1eb use @extra 2003-08-22 19:29:37 +00:00
brad
a937c7a5d3 Improvement on the existing directory traversal patch, fixes the case
where the path component includes a quoted slash.
2003-08-17 23:48:40 +00:00
jolan
e05af7b2d3 make this respect ${PREFIX}/${SYSCONFDIR}, from Xavier Santolaria
while here, also sync w/update-{patches,plist}
2003-08-02 01:41:43 +00:00
naddy
0f60204feb remove MANx and MANLANG cruft 2003-07-16 19:24:24 +00:00
kevlo
ca1275f901 - upgrade to version 1.03
- take over maintainership

Ok'd by maintainer
2003-07-16 08:42:46 +00:00
kevlo
ee937c0598 upgrade to 1.22 2003-07-16 03:22:14 +00:00
brad
87f03a9eb8 Another directory traversal issue in unzip 5.50 and earlier. Similar to
the first except this issue is triggered by prefixing the .. sequence with
certain non-printable characters which are filtered out resulting in just
the .. sequence.
2003-07-02 16:03:59 +00:00
jolan
12e8cc8408 allow optimization on sparc64 again. tested by naddy, sturm, & myself. 2003-06-23 03:30:24 +00:00
jolan
9741ec99eb +lxsplit 2003-06-23 00:42:15 +00:00
jolan
f75138777b import of lxsplit-1.0pre
lxsplit is a utility that facilitates join and split operations on
files.  It basically performs the same functions as cat(1) and
split(1), but has useful features such as warning if all parts aren't
available for a join operation.

ok naddy@
2003-06-23 00:40:57 +00:00
naddy
180d5ecbce maintenance update to 1.01; ok danh@ 2003-06-06 18:55:36 +00:00
jolan
bc0bf07f72 - more consistency for permit values
- adjust some permit lines per discussion on ports@

ok naddy@
2003-06-04 22:16:22 +00:00
margarida
7f3a36ffd4 Add WWW: ${HOMEPAGE}. 2003-06-01 19:24:36 +00:00
jolan
673d69c62c p5-Compress-LZO # GNU GPL -> GPL
p5-Archive-Tar
p5-Archive-Zip
p5-Compress-Zlib
p5-IO-Zlib
----------------
All these use the same license:
"This program is free software; you can redistribute it and/or
 modify it under the same terms as Perl itself."

Perl is GPL, so I am marking these # GPL
2003-05-24 02:55:16 +00:00
jolan
aed7b6d5b0 lzo -- # GPL
lzop    -- # GNU GPL -> # GPL
macutil -- sync w/# None style
nulib   -- # Restrictive
rar     -- # Restrictive
ucl     -- # GPL
unace   -- # Copyrighted but freely distributable.
             That's all the author states.  Is this acceptable as a
             license?
        -- Drop MAINTAINER per his request
unarj   -- # Restrictive
           PERMIT_*_CDROM=No
             "If you wish to distribute a modified version of UNARJ
              you MUST indicate that it is a modified version both in
              the program and source code."
unrar  --  # Restrictive
unzip  --  # Conditional
             It is freely re-distributable with conditions which we meet.
             This could use another pair of eyes to confirm.
zip    --  # Conditional
             Same thing as unzip.
zoo    --  # Conditional
             Different author/license but same idea as zip/unzip.
2003-05-24 02:40:42 +00:00
jolan
4156720cd4 # Restrictive 2003-05-24 01:43:01 +00:00
jolan
c19dced2a8 # GPL 2003-05-24 01:33:19 +00:00
jolan
17304ff40e # GPL/LGPL 2003-05-24 01:29:15 +00:00
jolan
72164e333a bzip is patented, revert change w/comment per brad@'s suggestion 2003-05-24 01:14:50 +00:00
jolan
6466f3b0d6 - nuke first MASTER_SITE, it doesn't exist anymore
- PERMIT_*=No, there's no license
2003-05-24 01:09:59 +00:00