cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Public git conversion mirror of OpenBSD's official cvs ports repository. Pull requests not accepted - send diffs to the ports@ mailing list.
81,303 Commits 1 Branch 0 Tags 554 MiB
Makefile 61%
PHP 18.9%
Perl 6.5%
C 4.6%
HTML 2.3%
Other 6.4%
195eaac041
Go to file
sthen 195eaac041 SECURITY update; py-Django 1.4.5 
https://www.djangoproject.com/weblog/2013/feb/19/security/

- Host header poisoning: an attacker could cause Django to generate
and display URLs that link to arbitrary domains.

- Formset denial-of-service: an attacker can abuse Django's tracking
of the number of forms in a formset to cause a denial-of-service attack.

- XML attacks: Django's serialization framework was vulnerable to
attacks via XML entity expansion and external references.

- Data leakage via admin history log: Django's admin interface could
expose supposedly-hidden information via its history log.
2013-03-02 12:47:49 +00:00
archivers bump; make sure static binaries get updated 2013-02-05 14:49:29 +00:00
astro mark conflict: astro/jday, net/netatalk 2013-01-09 23:06:24 +00:00
audio Fix bulk builds (at least for sthen@) until the real issue gets resolved. 2013-02-06 20:47:41 +00:00
base fix manifest 2013-02-04 11:42:33 +00:00
benchmarks update maintainer's email address. 2012-11-23 10:59:11 +00:00
biology whitespace 2012-10-23 09:39:51 +00:00
books zap space 2012-10-29 11:29:51 +00:00
cad Update to xcircuit-3.7.48. 2013-02-07 22:49:22 +00:00
chinese resurrect USE_X11, only for the few ports that require xenocara components 2012-10-29 15:19:02 +00:00
comms Quiet gconftool-2: 2013-02-06 14:23:06 +00:00
converters Update to json 1.7.7, fixing CVE-2013-0269. 2013-02-12 15:32:51 +00:00
databases for ports built from source, bump the MODJAVA_VER from 1.5 to 1.6. 2013-03-02 12:45:19 +00:00
devel for ports built from source, bump the MODJAVA_VER from 1.5 to 1.6. 2013-03-02 12:45:19 +00:00
editors provide upgrade paths from emacs22 and emacs23 to emacs24; 2013-02-11 07:43:06 +00:00
education Upstream re-rolled the tarball with some changes: 2013-01-19 23:45:40 +00:00
emulators oops, wrong tree, add a REVISION bump 2013-02-24 14:44:45 +00:00
fonts Don't use ${FLAVOR:L}, we only support lower-case flavours now. 2013-02-09 14:49:50 +00:00
games Make alephone scenarios BUILD_DEPENDS on alephone. It's not technically 2013-03-02 12:38:46 +00:00
geo for ports built from source, bump the MODJAVA_VER from 1.5 to 1.6. 2013-03-02 12:45:19 +00:00
graphics - update to clutter-gst-2.0.2. 2013-03-02 12:32:11 +00:00
infrastructure with live debug help from phessler@ : don't register lib signatures from dead 2013-02-22 19:58:12 +00:00
inputmethods Fix path to immodules.cache for gtk+3. 2013-01-23 18:05:57 +00:00
japanese Don't use ${FLAVOR:L}, we only support lower-case flavours now. 2013-02-09 14:49:50 +00:00
java for ports built from source, bump the MODJAVA_VER from 1.5 to 1.6. 2013-03-02 12:45:19 +00:00
korean fix build after introduction of grantpt(3) 2012-12-07 19:05:25 +00:00
lang - update HOMEPAGE 2013-03-02 12:42:39 +00:00
mail SECURITY update to isync 1.0.6 2013-03-02 12:39:56 +00:00
math Don't use ${FLAVOR:L}, we only support lower-case flavours now. 2013-02-09 14:49:50 +00:00
meta +mupen64plus 2013-01-25 19:02:57 +00:00
misc Don't use ${FLAVOR:L}, we only support lower-case flavours now. 2013-02-09 14:49:50 +00:00
multimedia force opus support to be disabled for now (hidden dep); to be enabled 2013-02-24 14:47:52 +00:00
net zap -no-pie stuff no longer needed for static bins. 2013-03-02 12:42:33 +00:00
news missing LIB_DEPENDS/wantlib 2012-12-21 13:01:32 +00:00
plan9 Don't use ${FLAVOR:L}, we only support lower-case flavours now. 2013-02-09 14:49:50 +00:00
print Ensure that cups/gdevcups.c is compiled with the same flags as 2013-02-15 12:40:00 +00:00
productivity add RUN_DEPENDS on php-curl; while it's sort-of-optional dep, it's light and 2013-02-24 16:31:54 +00:00
security Remove an annoying warning at pkg_add/delete time due to an empty manpage. 2013-02-21 15:55:32 +00:00
shells update to 1.0 2013-02-12 16:23:33 +00:00
sysutils - fix MASTER_SITES 2013-03-02 12:21:26 +00:00
telephony Don't use ${FLAVOR:L}, we only support lower-case flavours now. 2013-02-09 14:49:50 +00:00
textproc - update py-pygments to 1.6 2013-03-02 12:30:10 +00:00
www SECURITY update; py-Django 1.4.5 2013-03-02 12:47:49 +00:00
x11 disable -Werror which breaks at least hppa/mips64/sparc64 2013-03-02 12:42:03 +00:00
.cvsignore add openbsd-wip (the repository on github). 2011-11-01 12:36:30 +00:00
INDEX sync, 7893 2013-02-25 19:14:32 +00:00
Makefile stupid thing I should have done years ago: grab bsd.own.mk (and /etc/mk.conf) 2013-01-06 16:14:10 +00:00
README wee little additions 2011-11-15 18:33:16 +00:00

README 

Documentation for the ports tree: ports(7), packages(7), mirroring-ports(7),
library-specs(7), bsd.port.mk(5), bsd.port.arch.mk(5), port-modules(5).

dpb(1) (manpage under ${PORTSDIR}/man) for bulk builds.

See also the OpenBSD Porter's Handbook http://www.openbsd.org/faq/ports/

$OpenBSD: README,v 1.20 2011/11/15 18:33:16 espie Exp $