[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc-2013Q3 2013-12-29T21:21:48Z 2013-12-29T21:21:48Z tron tron@pkgsrc.org 2013-12-29T21:21:48Z urn:sha1:922b22d5ddbd62f1ddf988562dff32ebbab076e4 2013-12-29T21:21:36Z tron tron@pkgsrc.org 2013-12-29T21:21:36Z urn:sha1:beb9fa93254a0bb90c97ac60c844a78e54c86ec5 security/py-denyhosts: security patch Revisions pulled up: - security/py-denyhosts/Makefile 1.9 - security/py-denyhosts/distinfo 1.4-1.5 - security/py-denyhosts/patches/patch-af 1.2 --- Module Name: pkgsrc Committed By: pettai Date: Thu Dec 26 23:30:41 UTC 2013 Modified Files: pkgsrc/security/py-denyhosts: Makefile distinfo pkgsrc/security/py-denyhosts/patches: patch-af Log Message: Fix for CVE-2013-6890 --- Module Name: pkgsrc Committed By: pettai Date: Sun Dec 29 20:27:55 UTC 2013 Modified Files: pkgsrc/security/py-denyhosts: distinfo Log Message: Fixed broken checksum 2013-12-20T10:03:35Z spz spz@pkgsrc.org 2013-12-20T10:03:35Z urn:sha1:dd8113cd964b455bb5bcd2922c26162ba6afee69 2013-12-20T08:45:43Z spz spz@pkgsrc.org 2013-12-20T08:45:43Z urn:sha1:857a15d84134c402ae1862b10f759e9e997fd5a3 graphics/gd: build fix for e.g. arm Revisions pulled up: - graphics/gd/distinfo 1.34-1.35 - graphics/gd/patches/patch-src_gd__bmp.c 1.1-1.2 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: dholland Date: Mon Nov 11 20:38:16 UTC 2013 Modified Files: pkgsrc/graphics/gd: distinfo Added Files: pkgsrc/graphics/gd/patches: patch-src_gd__bmp.c Log Message: Don't use ceill(); it isn't needed here and causes problems. See PR 48334. Technically this change should bump PKGREVISION (as it changes the binary package ever so slightly for platforms where the ceill() didn't cause a build failure) but I'm going to let it slide. To generate a diff of this commit: cvs rdiff -u -r1.33 -r1.34 pkgsrc/graphics/gd/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/graphics/gd/patches/patch-src_gd__bmp.c ------------------------------------------------------------------- Module Name: pkgsrc Committed By: dholland Date: Mon Nov 11 21:34:40 UTC 2013 Modified Files: pkgsrc/graphics/gd: distinfo pkgsrc/graphics/gd/patches: patch-src_gd__bmp.c Log Message: Add upstream report URL per PR 48334. To generate a diff of this commit: cvs rdiff -u -r1.34 -r1.35 pkgsrc/graphics/gd/distinfo cvs rdiff -u -r1.1 -r1.2 pkgsrc/graphics/gd/patches/patch-src_gd__bmp.c 2013-12-20T08:34:50Z spz spz@pkgsrc.org 2013-12-20T08:34:50Z urn:sha1:47ba96e5bf281dcde411f22b195e8b2eea13cf4a net/wireshark: security update Revisions pulled up: - net/wireshark/DESCR 1.4 - net/wireshark/Makefile 1.112 - net/wireshark/distinfo 1.71 - net/wireshark/patches/patch-aa 1.13 - net/wireshark/patches/patch-ab 1.4 - net/wireshark/patches/patch-ac 1.2 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: tron Date: Wed Dec 18 11:52:26 UTC 2013 Modified Files: pkgsrc/net/wireshark: DESCR Makefile distinfo pkgsrc/net/wireshark/patches: patch-aa patch-ab patch-ac Log Message: Update "wireshark" package to version 1.10.4. Changes since version 1.10.3: - Bug Fixes The following vulnerabilities have been fixed. * wnpa-sec-2013-66 The SIP dissector could go into an infinite loop. Discovered by Alain Botti. (Bug 9388) Versions affected: 1.10.0 to 1.10.3, 1.8.0 to 1.8.11 CVE-2013-7112 * wnpa-sec-2013-67 The BSSGP dissector could crash. Discovered by Laurent Butti. (Bug 9488) Versions affected: 1.10.0 to 1.10.3 CVE-2013-7113 * wnpa-sec-2013-68 The NTLMSSP v2 dissector could crash. Discovered by Garming Sam. Versions affected: 1.10.0 to 1.10.3, 1.8.0 to 1.8.11 CVE-2013-7114 The following bugs have been fixed: * "On-the-wire" packet lengths are limited to 65535 bytes. (Bug 8808, ws-buglink:9390) * Tx MCS set is not interpreted properly in WLAN beacon frame. (Bug 8894) * VoIP Graph Analysis window - some calls are black. (Bug 8966) * Wireshark fails to decode single-line, multiple Contact: URIs in SIP responses. (Bug 9031) * epan/follow.c - Incorrect "bytes missing in capture file" in "check_fragments" due to an unsigned int wraparound?. (Bug 9112) * gsm_map doesn't decode MAPv3 reportSM-DeliveryStatus result. (Bug 9382) * Incorrect NFSv4 FATTR4_SECURITY_LABEL value. (Bug 9383) * Timestamp decoded for Gigamon trailer is not padded correctly. (Bug 9433) * SEL Fast Message Bug-fix for Signed 16-bit Integer Fast Meter Messages. (Bug 9435) * DNP3 Bug Fix for Analog Data Sign Bit Handling. (Bug 9442) * GSM SMS User Data header fill bits are wrong when using a 7 bits ASCII / IA5 encoding. (Bug 9478) * WCDMA RLC dissector cannot assemble PDUs with SNs skipped and wrap-arounded. (Bug 9505) * DTLS: fix buffer overflow in mac check. (Bug 9512) * Correct data length in SCSI_DATA_IN packets (within iSCSI). (Bug 9521) * GSM SMS UDH EMS control expects 4 octets instead of 3 with OPTIONAL 4th. (Bug 9550) * Fix "decode as ..." for packet-time.c. (Bug 9563) - Updated Protocol Support ANSI IS-637-A, BSSGP, DNP3, DVB-BAT, DVB-CI, GSM MAP, GSM SMS, IEEE 802.11, iSCSI, NFSv4, NTLMSSP v2, RLC, SEL FM, SIP, and Time To generate a diff of this commit: cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/wireshark/DESCR cvs rdiff -u -r1.111 -r1.112 pkgsrc/net/wireshark/Makefile cvs rdiff -u -r1.70 -r1.71 pkgsrc/net/wireshark/distinfo cvs rdiff -u -r1.12 -r1.13 pkgsrc/net/wireshark/patches/patch-aa cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/wireshark/patches/patch-ab cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/wireshark/patches/patch-ac 2013-12-18T10:02:55Z tron tron@pkgsrc.org 2013-12-18T10:02:55Z urn:sha1:6ddfdf5cf983aac261628779529dff64730eb532 2013-12-18T10:02:40Z tron tron@pkgsrc.org 2013-12-18T10:02:40Z urn:sha1:06f24cae4f3a1cfec5792e154e13687cb88822c4 devel/ruby-i18n: security update Revisions pulled up: - devel/ruby-i18n/Makefile 1.9 - devel/ruby-i18n/PLIST 1.5 - devel/ruby-i18n/distinfo 1.8 --- Module Name: pkgsrc Committed By: taca Date: Mon Dec 16 09:21:34 UTC 2013 Modified Files: pkgsrc/devel/ruby-i18n: Makefile PLIST distinfo Log Message: Update ruby-i18n to 0.6.9. This is security fix. * Add I18n::exists? method. * Add I18n.locale_available? method. * Delete unused files. * I18n::MissingTranslation exception escapes key names for its html_message, fixing CVE-2013-4492. * Use CGI.escapeHTML instead of CGI.escape_html for Ruby 1.8.7. * Fix an issue with setting I18n.config.enforce_available_locales. 2013-12-17T13:10:31Z tron tron@pkgsrc.org 2013-12-17T13:10:31Z urn:sha1:f28e2defd52261b26de4bbedbad320aee3edc43b 2013-12-17T13:10:12Z tron tron@pkgsrc.org 2013-12-17T13:10:12Z urn:sha1:8aa934914c7d6b6f5ae668fe4c9aa9c54b006420 www/typo3_45: security update Revisions pulled up: - www/typo3_45/Makefile 1.28-1.29 - www/typo3_45/PLIST 1.13 - www/typo3_45/distinfo 1.23-1.24 --- Module Name: pkgsrc Committed By: taca Date: Thu Dec 5 16:41:07 UTC 2013 Modified Files: pkgsrc/www/typo3_45: Makefile distinfo Log Message: Update typo345 to 4.5.31 (TYPO3 4.5.31). 2013-11-26 434ce71 [RELEASE] Release of TYPO3 4.5.31 (TYPO3 Release Team) 2013-11-19 396534e #53758 [BUGFIX] Table cache_imagesizes is defined twice (Michiel Roos) 2013-11-19 3f2ed1d #53750 [BUGFIX] Scheduler extension sql file is invalid (Michiel Roos) 2013-11-15 428baac #17493 [BUGFIX] Fix broken edit icons on cType HTML (Stefan Neufeind) 2013-11-11 6755f40 #37948 [BUGFIX] Correctly append additionalTreelistUpdateFields (Bart Dubelaar) 2013-11-11 082facd #31998 [BUGFIX] Faulty check for missing SMTP port (Stefan Neufeind) 2013-11-09 c581f33 #29179 [BUGFIX] Escape title, extension, description of scheduler tasks (Stefan Neufeind) 2013-11-09 7b08aa9 #53195 [BUGFIX] T3editor: Honour fileDenyPattern on saving included TS (Stefan Neufeind) 2013-11-04 d372f5f #38055 [BUGFIX] Remove declare(encoding=) (Josef Florian Glatz) 2013-10-28 5ae438c #53075 [BUGFIX] Cannot auto-load SC_* classes (Ernesto Baschny) 2013-10-22 b5d6e9f #50881 [TASK] Added missing core autoloaded files (Ernesto Baschny) 2013-10-13 5b072ff #52759 [BUGFIX] Object passed to date() (Philipp Gampe) 2013-10-12 6371e46 #52104 [BUGFIX] Wrong calculation of maximum value for checkbox fields (Nicole Cordes) 2013-10-12 78871e2 #37611 [BUGFIX] Select available page when changing WS (Thorsten Kahler) 2013-10-11 ce02c01 #36573 [BUGFIX] Add workspace overlay for fetched records. (Anja Leichsenring) 2013-10-11 d114ddb #37065 [BUGFIX] Don't show duplicates in workspace preview (Timo Webler) 2013-10-06 3289c39 #52045 [BUGFIX] EmConfUtility accesses non-arrays (Markus Klein) 2013-09-27 cd1e12b #52091,#51684 [BUGFIX] Check for string before using strlen (Markus Klein) 2013-09-26 c8d2033 #34886 [BUGFIX] CF FileBackend unlimited lifetime support (Dominique Feyer) 2013-09-18 ef6dc06 [BUGFIX] Fix cropping of transparent gifs with im6. (Felix Bu$(Q+m(Bnemann) 2013-09-12 70ce540 #51803 [TASK] Use a 401 header if login is not successful (Georg Ringer) --- Module Name: pkgsrc Committed By: taca Date: Tue Dec 10 15:18:33 UTC 2013 Modified Files: pkgsrc/www/typo3_45: Makefile PLIST distinfo Log Message: Update typo3_45 package to 4.5.32 (TYPO3 4.5.32). - Fix multiple vulnerabilities in TYPO3 CMS: http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ - Enable PHP_VERSIONS_ACCEPTED which was accidently commented out by previous commit. 2013-12-10 1956962 [RELEASE] Release of TYPO3 4.5.32 (TYPO3 Release Team) 2013-12-10 60576d1 #31206 [SECURITY] XSS in header link of all content elements (Anja Leichsenring) 2013-12-10 77dc1c4 #42772 [SECURITY] XSS in colorpicker wizard (Anja Leichsenring) 2013-12-10 52d3bff #45043 [SECURITY] Prevent editor controlled hmac content (Franz G. Jahn) 2013-12-10 cae8739 #20811 [SECURITY] XSS vulnerability in extension manager (Marcus Krause) 2013-12-10 ba92f0a #41714 [SECURITY] Information Disclosure in Wizards (Anja Leichsenring) 2013-12-10 63ff910 #54099 [SECURITY] Fix open redirection in openid extension (Anja Leichsenring) 2013-12-10 c4d1336 #48187 [SECURITY] feuser_adminLib.inc allows to set arbitrary fields (Steffen Ritter) 2013-12-10 5342284 #36768 [SECURITY] XSS in be_layout wizard (Anja Leichsenring) 2013-12-10 b360a1a #54074 [SECURITY] Remove possible XSS from ActionController Error output (Anja Leichsenring) 2013-12-10 78ee538 #54073 [SECURITY] Unsafe unserialize of GET parameter in Add-Wizard (Marcus Krause) 2013-12-08 5aa4ab2 #54282 [BUGFIX] Fix failing test (Anja Leichsenring) 2013-12-08 6add221 #54280 [BUGFIX] Fix failing test (Anja Leichsenring) 2013-12-02 0c3fa95 #54124 [BUGFIX] ClientUtility does not detect Internet Explorer 11 (Stefan Neufeind) 2013-12-02 d353ab0 #54120 Revert "[BUGFIX] Object passed to date()" (Markus Klein) 2013-11-29 309e93a #42651 [BUGFIX] ext:adodb Restrict connection wizard to admins (Christian Kuhn) 2013-11-26 1d95cad #25157,#45550 [BUGFIX] Distinguish unassigend columns and colPos 0 (Philipp Gampe) 2013-12-16T17:51:25Z tron tron@pkgsrc.org 2013-12-16T17:51:25Z urn:sha1:6abf77c8c66a883d73f6f5540b94c95ce66cdc68