db
6f3ec9a5ae
update to 1.23 which contains some bug fixes and remove VERSION variable
...
ok maintainer nikolay@ mbalmer@ (db@)
2005-03-10 11:01:51 +00:00
db
84ff3fce88
Update to version 1.14. Fixes GLSA 200410-31.
...
ok maintainer nikolay@ mbalmer@ (db@)
2005-03-10 10:55:04 +00:00
naddy
7eb0d68e96
SECURITY:
...
Fix multiple security vulnerabilities:
- buffer overflows (CAN-2005-0160)
- directory traversal problem (CAN-2005-0161)
From: Ulf Harnhammar <Ulf.Harnhammar.9485@student.uu.se>
2005-02-22 15:13:09 +00:00
sturm
eee6c98fc2
use FULLDISTDIR in systrace policy, noticed by rohee@
2005-02-21 21:59:44 +00:00
alek
6eff9fa47e
Add WANTLIB marker
2005-02-19 22:18:31 +00:00
espie
f8396e705a
zap shit
2005-02-19 12:32:22 +00:00
espie
755b352f5c
reimport, fuck.
2005-02-19 12:31:30 +00:00
espie
80055dd85f
+zipios
2005-02-19 11:31:52 +00:00
espie
5ece631328
zipios archiver library, port mostly taken from FreeBSD, almost mandatory
...
for wesnoth.
2005-02-19 11:29:14 +00:00
naddy
382d846391
SECURITY:
...
cpio used a 0 umask when creating files using the -O (archive) or
-F options, which created the files with mode 0666 and allowed local
users to read or overwrite those files. (CAN-1999-1572)
2005-02-11 23:28:34 +00:00
sturm
3a51ccb48b
add $OpenBSD$ tag
2005-02-09 20:36:29 +00:00
naddy
5400bfd4d1
Fix command line parsing; from GNU CVS.
2005-01-30 14:56:57 +00:00
naddy
4ea670fd4b
Now that @info transparently picks up all .info-* files, don't go through
...
extra steps to rebuild with --no-split.
2005-01-27 02:09:52 +00:00
espie
ad2bf27658
@#$$@ autoconf
...
io.h we get is not win32, but another package libio.
protect against that.
2005-01-15 15:22:01 +00:00
naddy
69777e8169
SIZE
2005-01-05 15:40:35 +00:00
naddy
1e90401cd6
Update to 1.15.1.
...
- Compressed archives are now recognized automatically.
- Numerous bug fixes.
2005-01-01 23:47:43 +00:00
espie
7b41b9b734
rename to par1 to avoid conflict
2004-12-30 00:47:10 +00:00
robert
db26b06979
fix WRKDIST
2004-12-04 15:45:41 +00:00
robert
acdf132e4d
SECURITY:
...
fix a buffer overflow; bump PKGNAME;
When zip performs recursive folder compression, it does not check
for the length of resulting path. If the path is too long, a buffer overflow
occurs leading to stack corruption and segmentation fault;
CAN-2004-1010
2004-12-04 15:36:36 +00:00
espie
056bf5d790
Mark all system libs in WANTLIB, result of running newlib-depends-check
2004-11-21 12:50:32 +00:00
naddy
6f514cd779
update to 3.43; from Steve Shockley <steve.shockley@shockley.net>
2004-11-17 19:13:59 +00:00
brad
e64e11c3e1
remove workaround for sparc64.
2004-11-14 21:33:11 +00:00
naddy
ef7d87a249
update to 1.21; from kevlo@
2004-11-11 17:14:15 +00:00
alek
9285bdc4ed
Use @sysctl
...
ok espie@
2004-11-09 14:48:25 +00:00
naddy
733078d97e
update to 1.04 and new maintainer; from kevlo@
2004-11-08 19:41:43 +00:00
robert
a44a74380c
SECURITY:
...
upgrade to 1.1;
A directory-traversal issue exists in cabextract
that could overwrite any file on the system when extracting
a malicious cab file.
from maintainer; the issue has also been reported by matthieu@
2004-10-23 15:54:42 +00:00
naddy
c1e2668e51
Kill INSTALL/DEINSTALL. Don't bother advertising srmt.
...
Don't install a sample srmt.conf. Those very few people who want to play
with this can figure it out on their own.
2004-10-08 16:44:43 +00:00
sturm
054d7e9610
another syscall
2004-10-03 14:31:37 +00:00
naddy
f25ca6486a
Don't bother advertising GNU rmt.
2004-09-23 16:49:56 +00:00
danh
6f868014f5
changed /usr/local -> $LOCALBASE
...
From: Aleksander Piotrowski <aleksander.piotrowski@nic.com.pl>
2004-09-22 14:17:22 +00:00
pvalchev
a4e1e24ad5
remove David Lebel from maintainer position per his request.
2004-09-15 00:06:58 +00:00
espie
c9d1d25390
kill extraneous comment that are now detected correctly by update-plist.
...
kill an extra %%SHARED%% that should not exist.
2004-09-14 23:12:43 +00:00
espie
1df44bf54d
new plists
2004-08-10 07:27:48 +00:00
espie
79fe9efdfd
switch to new style PLISTS, using @lib, ditching DYNLIBDIR.
...
Replace two INSTALL scripts with @sample.
Reorder plists to match auto-generation, add comments for files that
don't get installed.
2004-08-06 14:37:27 +00:00
espie
e370816909
four more common locale dirs.
2004-08-05 16:14:48 +00:00
espie
e5bc7ec5a1
man3p part of fake.mtree now.
2004-08-04 16:36:11 +00:00
espie
2df369f14f
pass things through new make-plist
2004-08-04 16:22:59 +00:00
espie
b3c0cfb759
manpages markers.
...
use SHARED_ONLY to discard PFRAG.shared.
2004-08-03 11:30:01 +00:00
espie
e990387db0
switch to new style MODULES
2004-08-03 09:24:50 +00:00
naddy
69bf66944f
correctly set MODGNU_CONFIG_GUESS_DIRS
2004-07-31 15:36:46 +00:00
espie
d51143282a
switch to using dir/ and @info.
...
a few more tweaks done by the automatic update mode of make update-plist.
2004-07-24 14:20:48 +00:00
danh
1ff7ada6a4
better formatting
2004-07-12 11:56:51 +00:00
jolan
6aa2e39493
+par1cmdline
2004-07-03 23:46:33 +00:00
jolan
deb728da1c
command line implementation of the PAR v1.0 specificaton
2004-07-03 23:45:37 +00:00
pvalchev
7b50393e7b
Use -O0 to compile on hppa, workarounds a compiler bug which lead to
...
crashes, hangs, and other odd behaviour during extraction.
2004-06-27 23:29:55 +00:00
jolan
483e3852ca
update to 0.4
2004-06-27 23:06:47 +00:00
xsa
93568351bb
set BUILD_DEPENDS= ${RUN_DEPENDS} not the opposite .. for obvious
...
reasons... okay pvalchev@.
2004-06-26 07:35:05 +00:00
sturm
6e70f8f153
keep the dash in the PKGNAME, noticed by Jacob Meuser
2004-06-25 14:04:08 +00:00
sturm
3c67f35287
update to unzip 5.51
2004-06-24 21:35:14 +00:00
sturm
4341d246db
special bsdos systrace policy
2004-06-24 19:20:17 +00:00
naddy
d01a6d3906
update to 1.14
2004-05-15 12:57:34 +00:00
lebel
d85068ea88
gcpio -Hustar will create archives with broken timestamps.
...
For details, fix, etc see
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=238177
from naddy@
2004-05-11 13:20:29 +00:00
naddy
5395838bbc
SECURITY:
...
Buffer overflow and directory traversal fixes; from Ulf Harnhammar.
2004-05-06 23:07:57 +00:00
naddy
bcb59cf546
Update to 1.13.94:
...
- Added support for POSIX.1-2001 and ustar archive formats.
- Various option cleanups.
- New message translations.
- Bug fixes.
Switch to .bz2 distfile since we already depend on bzip2 anyway.
2004-04-22 02:56:10 +00:00
xsa
430863579e
update to 1.08; okay kevlo@.
2004-04-12 10:17:00 +00:00
naddy
9e1ffe3396
- regen patches
...
- don't allow argument to overflow buffer (via BugTraq)
2004-04-10 20:28:00 +00:00
jolan
a1e29d63de
master_site moved
2004-04-09 06:27:58 +00:00
brad
764c258b0b
remove another sparc64/2.95 workaround.
2004-04-06 06:33:29 +00:00
naddy
f16b99d84d
The sparc64 compiler is gcc3 now; don't require the gcc3 module.
2004-02-25 02:35:15 +00:00
naddy
6e6637bac6
home page/master site moved; from Robert Nagy <thuglife@bsd.hu>
2004-02-24 22:12:07 +00:00
naddy
520efe1fdd
drop workarounds for gcc2.95/sparc64 bugs
2004-02-23 00:33:34 +00:00
kevlo
667e64be40
update to 1.33
2004-02-16 05:31:44 +00:00
sturm
6c2f312e1e
update to unrar 3.30 proper and point to the correct license file in
...
DESCR
from thuglife at bsd.hu (Robert Nagy)
2004-02-11 17:46:02 +00:00
kevlo
e7f0b7d4d6
use mkstemp().
2004-02-06 08:29:24 +00:00
sturm
4e13d5dcd5
mark arch independent
2004-02-03 07:28:12 +00:00
jolan
d93c99e6e0
+par2cmdline
2004-01-23 05:25:49 +00:00
jolan
92fa84a4cd
import 0.3
2004-01-23 05:20:48 +00:00
sturm
0d86c31cea
update to unrar 3.30 beta 4
...
from thuglife at bsd dot hu (Robert Nagy)
2004-01-17 18:44:18 +00:00
naddy
6807d1bedd
Don't attempt to build perl ports that load dynamic modules
...
on architectures that support static linking only.
2004-01-17 15:58:06 +00:00
jolan
31011a55aa
fix double free crash
2004-01-01 01:29:20 +00:00
naddy
17170de520
overhaul
2003-12-31 19:37:56 +00:00
naddy
32cd14b304
overhaul p5-Compress-* plists
2003-12-31 15:11:09 +00:00
espie
267a6b74c9
ISO C++ bitches if the order of declarations is incorrect.
2003-12-29 12:48:21 +00:00
naddy
2276d3b230
remove WWW lines
2003-12-15 21:42:08 +00:00
naddy
cbdc3f441f
@dirrm for shared directories
2003-12-15 15:49:08 +00:00
kevlo
142532fb73
update to 1.31
2003-10-31 02:56:55 +00:00
jolan
7475c2231d
make these fetch again.
2003-10-29 05:04:25 +00:00
sturm
5b293eeb3d
(void *)NULL
2003-10-26 17:22:24 +00:00
sturm
fc66c490ad
deal with kern.emul.{bsdos,svr4} sysctl
...
noticed by Alex de Joode
2003-10-18 18:20:40 +00:00
sturm
319d78b5ce
remove maintainer Sebastian Stark per his request on ports@
...
new maintainers:
- databases/gq Marc Balmer
- sysutils/login_ldap Peter Werner
- sysutils/pstree Sam Smith
2003-09-23 15:29:41 +00:00
naddy
8630bbd1eb
use @extra
2003-08-22 19:29:37 +00:00
brad
a937c7a5d3
Improvement on the existing directory traversal patch, fixes the case
...
where the path component includes a quoted slash.
2003-08-17 23:48:40 +00:00
jolan
e05af7b2d3
make this respect ${PREFIX}/${SYSCONFDIR}, from Xavier Santolaria
...
while here, also sync w/update-{patches,plist}
2003-08-02 01:41:43 +00:00
naddy
0f60204feb
remove MANx and MANLANG cruft
2003-07-16 19:24:24 +00:00
kevlo
ca1275f901
- upgrade to version 1.03
...
- take over maintainership
Ok'd by maintainer
2003-07-16 08:42:46 +00:00
kevlo
ee937c0598
upgrade to 1.22
2003-07-16 03:22:14 +00:00
brad
87f03a9eb8
Another directory traversal issue in unzip 5.50 and earlier. Similar to
...
the first except this issue is triggered by prefixing the .. sequence with
certain non-printable characters which are filtered out resulting in just
the .. sequence.
2003-07-02 16:03:59 +00:00
jolan
12e8cc8408
allow optimization on sparc64 again. tested by naddy, sturm, & myself.
2003-06-23 03:30:24 +00:00
jolan
9741ec99eb
+lxsplit
2003-06-23 00:42:15 +00:00
jolan
f75138777b
import of lxsplit-1.0pre
...
lxsplit is a utility that facilitates join and split operations on
files. It basically performs the same functions as cat(1) and
split(1), but has useful features such as warning if all parts aren't
available for a join operation.
ok naddy@
2003-06-23 00:40:57 +00:00
naddy
180d5ecbce
maintenance update to 1.01; ok danh@
2003-06-06 18:55:36 +00:00
jolan
bc0bf07f72
- more consistency for permit values
...
- adjust some permit lines per discussion on ports@
ok naddy@
2003-06-04 22:16:22 +00:00
margarida
7f3a36ffd4
Add WWW: ${HOMEPAGE}.
2003-06-01 19:24:36 +00:00
jolan
673d69c62c
p5-Compress-LZO # GNU GPL -> GPL
...
p5-Archive-Tar
p5-Archive-Zip
p5-Compress-Zlib
p5-IO-Zlib
----------------
All these use the same license:
"This program is free software; you can redistribute it and/or
modify it under the same terms as Perl itself."
Perl is GPL, so I am marking these # GPL
2003-05-24 02:55:16 +00:00
jolan
aed7b6d5b0
lzo -- # GPL
...
lzop -- # GNU GPL -> # GPL
macutil -- sync w/# None style
nulib -- # Restrictive
rar -- # Restrictive
ucl -- # GPL
unace -- # Copyrighted but freely distributable.
That's all the author states. Is this acceptable as a
license?
-- Drop MAINTAINER per his request
unarj -- # Restrictive
PERMIT_*_CDROM=No
"If you wish to distribute a modified version of UNARJ
you MUST indicate that it is a modified version both in
the program and source code."
unrar -- # Restrictive
unzip -- # Conditional
It is freely re-distributable with conditions which we meet.
This could use another pair of eyes to confirm.
zip -- # Conditional
Same thing as unzip.
zoo -- # Conditional
Different author/license but same idea as zip/unzip.
2003-05-24 02:40:42 +00:00
jolan
4156720cd4
# Restrictive
2003-05-24 01:43:01 +00:00
jolan
c19dced2a8
# GPL
2003-05-24 01:33:19 +00:00
jolan
17304ff40e
# GPL/LGPL
2003-05-24 01:29:15 +00:00
jolan
72164e333a
bzip is patented, revert change w/comment per brad@'s suggestion
2003-05-24 01:14:50 +00:00
jolan
6466f3b0d6
- nuke first MASTER_SITE, it doesn't exist anymore
...
- PERMIT_*=No, there's no license
2003-05-24 01:09:59 +00:00