[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2008Q1 2008-05-23T10:25:50Z 2008-05-23T10:25:50Z rtr rtr 2008-05-23T10:25:50Z urn:sha1:e64a22e859d6c57a32ad7fb4fc1a168908f4783e libid3tag: fix end of string check revisions pulled up: - pkgsrc/audio/libid3tag/Makefile 1.22 - pkgsrc/audio/libid3tag/distinfo 1.4,1.5 - pkgsrc/audio/libid3tag/patches/patch-ab 1.1,1.2 Module Name: pkgsrc Committed By: simonb Date: Tue May 20 13:31:39 UTC 2008 Modified Files: pkgsrc/audio/libid3tag: Makefile distinfo Added Files: pkgsrc/audio/libid3tag/patches: patch-ab Log Message: Check for end-of-string when parsing a stringlist field. Problem and fix originally reported by Kentaro Oda to the mad-dev mailing list. See http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2008-2109 for some more info. ------------------------------------------------------------------------ Module Name: pkgsrc Committed By: tron Date: Wed May 21 09:42:13 UTC 2008 Modified Files: pkgsrc/audio/libid3tag: distinfo pkgsrc/audio/libid3tag/patches: patch-ab Log Message: Fix broken URL and correct incorrect patch checksum. 2008-05-22T13:54:10Z ghen ghen 2008-05-22T13:54:10Z urn:sha1:94bdf025dd5182adb5353bb5a280394b3ef71e66 security fixes for libvorbis - pkgsrc/audio/libvorbis/Makefile 1.47 - pkgsrc/audio/libvorbis/distinfo 1.15 - pkgsrc/audio/libvorbis/patches/patch-aa 1.3 - pkgsrc/audio/libvorbis/patches/patch-ab 1.3 Module Name: pkgsrc Committed By: drochner Date: Wed May 14 16:36:18 UTC 2008 Modified Files: pkgsrc/audio/libvorbis: Makefile distinfo Added Files: pkgsrc/audio/libvorbis/patches: patch-aa patch-ab Log Message: pull some patches from upstream CVS to fix integer overflows / buffer overflows (CVE-2008-1419, CVE-2008-1420, CVE-2008-1423), bump PKGREVISION 2008-05-15T10:05:42Z rtr rtr 2008-05-15T10:05:42Z urn:sha1:750617995c9b1c5e666aa454cb1bd55b218a475a mt-daapd: security updates for dos vulnerabilities revisions pulled up: - pkgsrc/audio/mt-daapd/Makefile - pkgsrc/audio/mt-daapd/distinfo - pkgsrc/audio/mt-daapd/patches/patch-ac Module Name: pkgsrc Committed By: adrianp Date: Wed May 14 21:12:12 UTC 2008 Modified Files: pkgsrc/audio/mt-daapd: Makefile distinfo pkgsrc/audio/mt-daapd/patches: patch-ac Log Message: 0.2.4.2 Small bug fixes for port order on mdns advertisement on intel macs, playlists based on bitrate. Primarly, though, this release is to apply fix for CVE-2008-1771. Thanks to Nico Golde for bringing it to light. 0.2.4.1 Security updates for two DOS and one format string vulnerability. 2008-04-30T10:41:52Z rtr rtr 2008-04-30T10:41:52Z urn:sha1:4524e23b0cde6a9c76df4551518f3911d1ab0f18 speex: update package to address security issue revisions pulled up: - pkgsrc/audio/speex/Makefile 1.26 - pkgsrc/audio/speex/distinfo 1.11 - pkgsrc/audio/speex/patches/patch-ac 1.1 Module Name: pkgsrc Committed By: wiz Date: Tue Apr 29 20:22:43 UTC 2008 Modified Files: pkgsrc/audio/speex: Makefile distinfo Added Files: pkgsrc/audio/speex/patches: patch-ac Log Message: Add patch from upstream against CVE-2008-1686. Bump PKGREVISION. 2008-04-30T09:23:27Z rtr rtr 2008-04-30T09:23:27Z urn:sha1:ca9cad7c51d50811ab20afecf62c5533e0652f87 vorbis-tools: resolves security issue revisions pulled up: - pkgsrc/audio/vorbis-tools/Makefile 1.50 - pkgsrc/audio/vorbis-tools/distinfo 1.21 - pkgsrc/audio/vorbis-tools/patches/patch-ad 1.3 Module Name: pkgsrc Committed By: wiz Date: Tue Apr 29 05:51:10 UTC 2008 Modified Files: pkgsrc/audio/vorbis-tools: Makefile distinfo Added Files: pkgsrc/audio/vorbis-tools/patches: patch-ad Log Message: Add upstream patch fixing http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1686 Bump PKGREVISION. 2008-04-03T11:03:21Z joerg joerg 2008-04-03T11:03:21Z urn:sha1:677dbe6ea32124b13e034d4c64c8389c5f1b9e1f 2008-03-27T14:24:36Z bjs bjs 2008-03-27T14:24:36Z urn:sha1:6b10c5d92a3743f1b1ce8660948be234a1304629 with this package. While here, correct ncurses/ncursesw options to provide the right arguments to configure. Changes since 1.9.1: 2008-03-16 -- Herrie 2.0: * Added: Brasilian Portuguese translation - Eros Carvalho * Fixed: Make vfs.lockup.chroot expand ~/ and ~user/ * Changed: Maintainer email address * Removed: Debian package infrastructure, per maintainer's request. 2008-02-12 -- Herrie 1.9.3: * Added: Support for Debian GNU/kFreeBSD * Added: Debian package infrastructure * Fixed: Shut down the application when we lose TTY input * Added: Chinese translation - Ji ZhengYu 2008-01-19 -- Herrie 1.9.2: * Removed: Native Windows support - it was incomplete anyway * Improved: Manpage reorganized to make more sense - Marcela Tiznado * Added: Finnish translation - Jorma Karvonen * Added: Danish translation - Joe Hansen * Improved: GUI scrolling performance when dealing with big playlists * Added: Switch to scroll pages up and down when selection goes out of sight 2008-03-20T15:58:47Z drochner drochner 2008-03-20T15:58:47Z urn:sha1:4381dae4853061e216e6b3f6be9bd7076879ffb5 bump PKGREVISION 2008-03-17T22:28:13Z jlam jlam 2008-03-17T22:28:13Z urn:sha1:9f49c6e73ccf6244bc6c03ca1625d26a54700209 by the pkgsrc infrastructure. 2008-03-17T02:33:17Z bjs bjs 2008-03-17T02:33:17Z urn:sha1:7dee28c3b0d8a5f7bd1747454a9f01bac4114653