summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1351-2552/+2704
2013-02-06Note security/openssl update to 1.0.1d.jperkin2-4/+3
XXX: commit-changes-entry cannot handle multiple TODO matches.
2013-02-06Update OpenSSL to 1.0.1d. Changes are far too numerous to list, the main ↵jperkin13-168/+250
one being that we can now take advantage of AES-NI support in modern processors to significantly increase performance. Miscellaneous pkgsrc changes: - Remove unnecessary warning message on Solaris. - Fix RPATH for libgost.so. - MD2 support is optional, enabled by default for compatability.
2013-02-06Updated net/trafshow to 5.2.3nb2jperkin1-1/+2
2013-02-06Avoid socket buffering on Solaris, a blank screen is not all that useful.jperkin3-3/+40
Bump PKGREVISION.
2013-02-06Updated net/tcpdump to 4.3.0jperkin1-1/+2
2013-02-06Update net/tcpdump to 4.3.0. Changes since 4.1.1:jperkin3-16/+13
Summary for 4.3.0 tcpdump release fixes for forces: SPARSE data (per RFC 5810) some more test cases added updates to documentation on -l, -U and -w flags. Fix printing of BGP optional headers. Tried to include DLT_PFSYNC support, failed due to headers required. added TIPC support. Fix LLDP Network Policy bit definitions. fixes for IGMPv3's Max Response Time: it is in units of 0.1 second. SIGUSR1 can be used rather than SIGINFO for stats permit -n flag to affect print-ip for protocol numbers ND_OPT_ADVINTERVAL is in milliseconds, not seconds Teach PPPoE parser about RFC 4638 Summary for 4.2.1 tcpdump release Only build the Babel printer if IPv6 is enabled. Support Babel on port 6696 as well as 6697. Include ppi.h in release tarball. Include all the test files in the release tarball, and don't "include" test files that no longer exist. Don't assume we have <rpc/rpc.h> - check for it. Support "-T carp" as a way of dissecting IP protocol 112 as CARP rather than VRRP. Support Hilscher NetAnalyzer link-layer header format. Constify some pointers and fix compiler warnings. Get rid of never-true test. Fix an unintended fall-through in a case statement in the ARP printer. Fix several cases where sizeof(sizeof(XXX)) was used when just sizeof(XXX) was intended. Make stricter sanity checks in the ES-IS printer. Get rid of some GCCisms that caused builds to fai with compilers that don't support them. Fix typo in man page. Added length checks to Babel printer. Summary for 4.2.+ merged 802.15.4 decoder from Dmitry Eremin-Solenikov <dbaryshkov at gmail dot com> updates to forces for new port numbers Use "-H", not "-h", for the 802.11s option. (-h always help) Better ICMPv6 checksum handling. add support for the RPKI/Router Protocol, per -ietf-sidr-rpki-rtr-12 get rid of uuencoded pcap test files, git can do binary. sFlow changes for 64-bit counters. fixes for PPI packet header handling and printing. Add DCB Exchange protocol (DCBX) version 1.01. Babel dissector, from Juliusz Chroboczek and Grégoire Henry. improvements to radiotap for rate values > 127. Many improvements to ForCES decode, including fix SCTP TML port updated RPL type code to RPL-17 draft Improve printout of DHCPv6 options. added support and test case for QinQ (802.1q VLAN) packets Handle DLT_IEEE802_15_4_NOFCS like DLT_IEEE802_15_4. Build fixes for Sparc and other machines with alignment restrictions. Merged changes from Debian package. PGM: Add ACK decoding and add PGMCC DATA and FEEDBACK options. Build fixes for OSX (Snow Leopard and others) Add support for IEEE 802.15.4 packets Summary for 4.1.2 tcpdump release If -U is specified, flush the file after creating it, so it's not zero-length Fix TCP flags output description, and some typoes, in the man page Add a -h flag, and only attempt to recognize 802.11s mesh headers if it's set When printing the link-layer type list, send *all* output to stderr Include the CFLAGS setting when configure was run in the compiler flags
2013-02-06PKGREVISION bumps for net/libpcap update.jperkin76-117/+153
2013-02-06Updated net/libpcap to 1.3.0jperkin1-1/+2
2013-02-06Update libpcap to 1.3.0. Main pkgsrc change is support for Solaris 11/illumos.jperkin9-78/+208
Summary for 1.3.0 libpcap release Handle DLT_PFSYNC in {FreeBSD, other *BSD+Mac OS X, other}. Linux: Don't fail if netfilter isn't enabled in the kernel. Add new link-layer type for NFC Forum LLCP. Put the CANUSB stuff into EXTRA_DIST, so it shows up in the release tarball. Add LINKTYPE_NG40/DLT_NG40. Add DLT_MPEG_2_TS/LINKTYPE_MPEG_2_TS for MPEG-2 transport streams. [PATCH] Fix AIX-3.5 crash with read failure during stress AIX fixes. Introduce --disable-shared configure option. Added initial support for canusb devices. Include the pcap(3PCAP) additions as 1.2.1 changes. many updates to documentation: pcap.3pcap.in Improve 'inbound'/'outbound' capture filters under Linux. Note the cleanup of handling of new DLT_/LINKTYPE_ values. On Lion, don't build for PPC. For mac80211 devices we need to clean up monitor mode on exit. Summary for 1.2.1 libpcap release Update README file. Fix typoes in README.linux file. Clean up some compiler warnings. Fix Linux compile problems and tests for ethtool.h. Treat Debian/kFreeBSD and GNU/Hurd as systems with GNU toolchains. Support 802.1 QinQ as a form of VLAN in filters. Treat "carp" as equivalent to "vrrp" in filters. Fix code generated for "ip6 protochain". Add some new link-layer header types. Support capturing NetFilter log messages on Linux. Clean up some error messages. Turn off monitor mode on exit for mac80211 interfaces on Linux. Fix problems turning monitor mode on for non-mac80211 interfaces on Linux. Properly fail if /sys/class/net or /proc/net/dev exist but can't be opened. Fail if pcap_activate() is called on an already-activated pcap_t, and add a test program for that. Fix filtering in pcap-ng files. Don't build for PowerPC on Mac OS X Lion. Simplify handling of new DLT_/LINKTYPE_ values. Expand pcap(3PCAP) man page. Summary for 1.2 libpcap release All of the changes listed below for 1.1.1 and 1.1.2. Changes to error handling for pcap_findalldevs(). Fix the calculation of the frame size in memory-mapped captures. Add a link-layer header type for STANAG 5066 D_PDUs. Add a link-layer type for a variant of 3GPP TS 27.010. Noted real nature of LINKTYPE_ARCNET. Add a link-layer type for DVB-CI. Fix configure-script discovery of VLAN acceleration support. see http://netoptimizer.blogspot.com/2010/09/tcpdump-vs-vlan-tags.html Linux, HP-UX, AIX, NetBSD and OpenBSD compilation/conflict fixes. Protect against including AIX 5.x's <net/bpf.h> having been included. Add DLT_DBUS, for raw D-Bus messages. Treat either EPERM or EACCES as "no soup for you". Changes to permissions on DLPI systems. Add DLT_IEEE802_15_4_NOFCS for 802.15.4 interfaces.
2013-02-06Remove unneccessary firefox line.ryoon1-2/+1
2013-02-06Note update ot devel/ruby-railties, devel/ruby-railties31 andtaca1-1/+4
devel/ruby-railties32 packages: devel/ruby-railties 3.0.20nb1 devel/ruby-railties31 3.1.10nb1 devel/ruby-railties32 3.2.11nb1
2013-02-06Allow depending to more newer version of ruby-thor package.taca3-6/+12
Bump PKGREVISION.
2013-02-06Note update of www/contao211 package to 2.11.9.taca1-1/+2
2013-02-06Update contao211 to 2.11.9.taca2-5/+6
This relase contains fix for CVE-2012-6112(TinyMCE), too. Version 2.11.9 (2013-02-05) --------------------------- ### Fixed Support numeric front end dates in the form generator (see #5238). ### Fixed Support whitespace characters when parsing simple tokens (see #5323). ### Fixed Allow to run multiple TinyMCE instances with different configurations on the same page (thanks to Andreas Schempp) (see #4453). ### Fixed Correctly trigger the "saveNewPassword" hook (see #5247). ### Fixed Consider the `save_callback` of the password field in `tl_user` when a back end user is forced to change his password (see #5138). ### Fixed Do not group standalone lightbox elements on HTML5 pages (see #3742). ### Fixed Anonymize IP addresses in `Form::processFormData()` (see #5255). ### Fixed Replaced the 1200 pixel limit when resizing images with the values defined in the system settings (see #5268). ### Fixed Make sure there is an array in `Controller::generateMargin()` (see #5217). ### Fixed More robust input validation in the back end filter menu and no more absolute paths in error messages printed to the screen (thanks to aulmn) (see #4971). ### Fixed Unset non-existing fields when restoring versions (see #5219).
2013-02-06Note update of devel/ruby-rdoc package to 3.12.1.taca1-1/+2
2013-02-06Update ruby-rdoc to 3.12.1.taca3-7/+10
=== 3.12.1 / 2013-02-05 * Bug fixes * Fixed an XSS exploit in darkfish.js. This could lead to cookie disclosure to third parties. See CVE-2013-0256[rdoc-ref:CVE-2013-0256.rdoc] for full details including a patch you can apply to generated RDoc documentation. * Ensured that rd parser files are generated before checking the manifest.
2013-02-06Note update of Ruby 1.9.3-p385 related pacakges:taca1-1/+9
lang/ruby193-base 1.9.3p385 databases/ruby-gdbm 1.9.3p385nb2 devel/ruby-curses 1.9.3p385 devel/ruby-fiddle 1.9.3p385 devel/ruby-readline 1.9.3p385nb2 x11/ruby-tk 1.9.3p385nb1 lang/ruby193 1.9.3p385 devel/ruby-mode 1.9.3p385
2013-02-06Update ruby193 pacakges to 1.9.3p385.taca5-59/+59
This release includes a security fix about bundled RDoc. Full changes are too may to write here, please refer ChangeLog.
2013-02-06Recommend "Command Line Tools for Xcode" as mentioned inschmonz2-5/+9
<URL:http://kennethreitz.org/experiments/xcode-gcc-and-homebrew>.
2013-02-06+ mysql-5.5.30.taca1-1/+2
2013-02-06Fix LDFLAGS parsing bug on SunOS (upstream PR submitted).fhajny2-1/+17
2013-02-06Disable man pages by default.wiz1-1/+2
2013-02-06Updated mail/sendmail-cidrexpand to 8.14.6jnemeth1-1/+2
2013-02-06- reset PKGREVISION for update to sendmail 8.14.6jnemeth1-3/+2
- appease pkglint
2013-02-06Updated mail/sendmail-qtool to 8.14.6jnemeth1-1/+2
2013-02-06- reset PKGREVISION for update to sendmail 8.14.6jnemeth1-4/+3
- appease pkglint
2013-02-06Updated mail/libmilter to 8.14.6jnemeth2-3/+3
2013-02-06Updated mail/sendmail to 8.14.6jnemeth2-3/+3
2013-02-06Updated www/libmicrohttpd to 0.9.25wiz1-1/+2
2013-02-06Update to 0.9.25:wiz2-6/+6
Fri Feb 1 10:19:44 CET 2013 Handle case where POST data contains "key=" without value at the end and is not new-line terminated by invoking the callback with the "key" during MHD_destroy_post_processor (#2733). -CG Wed Jan 30 13:09:30 CET 2013 Adding more 'const' to allow keeping of reason phrases in ROM. (see mailinglist). -CG/MV Tue Jan 29 21:27:56 CET 2013 Make code work with PlibC 0.1.7 (which removed plibc_init_utf8). Only relevant for W32. Fixes #2734. -CG Sat Jan 26 21:26:48 CET 2013 Fixing regression introduced Jan 6 (test on data_size instead of total_size. -CG Fri Jan 11 23:21:55 CET 2013 Also return MHD_YES from MHD_destroy_post_processor if we did not get '\r\n' in the upload. -CG Sun Jan 6 21:10:13 CET 2013 Enable use of "MHD_create_response_from_callback" with body size of zero. -CG
2013-02-06Update to sendmail 8.14.6: this is a general bug fix release.jnemeth3-8/+7
- will look at making recently requested changes in a subsequent commit 8.14.6/8.14.6 2012/12/23 Fix a regression introduced in 8.14.5: if a server offers two AUTH lines, the MTA would not read them after STARTTLS has been used and hence SMTP AUTH for the client side would fail. Problem noted by Lena. Do not cache hostnames internally in a non case sensitive way as that may cause addresses to change from lower case to upper case or vice versa. These header modifications can cause problems with milters that rely on receiving headers in the same way as they are being sent out such as a DKIM signing milter. If MaxQueueChildren is set then it was possible that new queue runners could not be started anymore because an internal counter was subject to a race condition. If a milter decreases the timeout it waits for a communication with the MTA, the MTA might experience a write() timeout. In some situations, the resulting error might have been ignored. Problem noted by Werner Wiethege. Note: decreasing the communication timeout in a milter should not be done without considering the potential problems. smfi_setsymlist() now properly sets the list of macros for the milter which invoked it, instead of a global list for all milters. Problem reported by David Shrimpton of the University of Queensland. If Timeout.resolver.retrans is set to a value larger than 20, then resolver.retry was temporarily set to 0 for gethostbyaddr() lookups. Now it is set to 1 instead. Patch from Peter. If sendmail could not lock the statistics file due to a system error, and sendmail later sends a DSN for a mail that triggered such an error, then sendmail tried to access memory that was freed before (causing a crash on some systems). Problem reported by Ryan Stone. Do not log negative values for size= nor pri= to avoid confusing log parsers, instead limit the values to LONG_MAX. Account for an API change in newer versions of Cyrus-SASL. Patch from Hajimu UMEMOTO from FreeBSD. Do not try to resolve link-local addresses for IPv4 (just as it is done for IPv6). Patch from John Beck of Oracle. Improve logging of client and server STARTTLS connection failures that may be due to incompatible cipher lists by including the reason for the failure in a single log line. Suggested by James Carey of Boeing. Portability: Add support for Darwin 11.x and 12.x (Mac OS X 10.7 and 10.8). Add support for SunOS 5.12 (aka Solaris 12). Patch from John Beck of Oracle.
2013-02-05pull in the patch for the ASF demuxer security flaw from vlc2, thedrochner3-3/+164
code is almost identical bump PKGREV thanks to Daniel Horecki for the hint
2013-02-05add patch from upstream to fix insuficcient validation of UTF-8 stringsdrochner4-2/+60
which is considered a security problem bump PKGREV for the affected header, didn't check yet where this header is compiled into (boost-1.53 is out, just added the patch for a possible pullup)
2013-02-05stellarium updatedrochner1-1/+2
2013-02-05update to 0.12.0drochner5-21/+72
from the announcement: This release brings some interesting new features: - New rendering engine (Now you can see shadows on planets surfaces). - New key-binding engine (Now all key-bindings can be edited). - Improvements to scripting engine. - Improvements to DSO - Improvements to search tool - Improved accuracy for archaeo-astronomical events There have also been a large number of bug fixes and GUI improvements. We are strongly recommended resetting all Stellarium settings if you upgrade your previous installation!
2013-02-05+ mysql-5.1.68, mysql-5.6.10, samba-4.0.3.taca1-2/+4
2013-02-05Note update of mail/postfix package to 2.8.14.taca1-1/+2
2013-02-05Update postfix to 2.8.14.taca2-7/+6
* The postconf(1) master.cf options parser didn't support "clusters" of daemon command-line option letters. * The local(8) delivery agent dereferenced a null pointer while delivering to null command (for example, "|" in a .forward file). Reported by Gilles Chehade. * A memory leak fix for tls_misc.c was documented but not included.
2013-02-05Note update of security/openssl package to 0.9.8y.taca1-1/+2
2013-02-05Update openssl to 0.9.8y.taca2-7/+6
Changes between 0.9.8x and 0.9.8y [5 Feb 2013] *) Make the decoding of SSLv3, TLS and DTLS CBC records constant time. This addresses the flaw in CBC record processing discovered by Nadhem Alfardan and Kenny Paterson. Details of this attack can be found at: http://www.isg.rhul.ac.uk/tls/ Thanks go to Nadhem Alfardan and Kenny Paterson of the Information Security Group at Royal Holloway, University of London (www.isg.rhul.ac.uk) for discovering this flaw and Adam Langley and Emilia Käsper for the initial patch. (CVE-2013-0169) [Emilia Käsper, Adam Langley, Ben Laurie, Andy Polyakov, Steve Henson] *) Return an error when checking OCSP signatures when key is NULL. This fixes a DoS attack. (CVE-2013-0166) [Steve Henson] *) Call OCSP Stapling callback after ciphersuite has been chosen, so the right response is stapled. Also change SSL_get_certificate() so it returns the certificate actually sent. See http://rt.openssl.org/Ticket/Display.html?id=2836. (This is a backport) [Rob Stradling <rob.stradling@comodo.com>] *) Fix possible deadlock when decoding public keys. [Steve Henson]
2013-02-05Updated x11/libdrm to 2.4.42wiz1-1/+2
2013-02-05Update to 2.4.42:wiz3-22/+6
Alex Deucher (2): radeon: add OLAND family radeon: add OLAND pci ids David Herrmann (1): man: fix manpage build instructions Jesse Barnes (1): intel: add more VLV PCI IDs Maarten Lankhorst (3): nouveau: use @PACKAGE_VERSION@ in libdrm_nouveau.pc libdrm: remove DISTCHECK_CONFIGURE_FLAGS configure.ac: bump version to 2.4.42 for release Michel Dänzer (1): radeon: Fix 1D tiling layout on SI. Thierry Reding (1): man: Fix typo and use $() for make expressions
2013-02-05Updated net/mikutter to 0.2.1.1127obache1-1/+2
2013-02-05Update mikutter to 0.2.1.1127.obache3-7/+8
* reduce memory usage with Ruby Gtk2 1.2.1 and later. * fix image preview from some sites.
2013-02-05Add revbump of xulrunner/firefox.ryoon1-1/+3
2013-02-05Ensure the correct DTrace ABI is used. Fixes Solaris 32-bit build.jperkin1-1/+6
2013-02-05Updated print/kpathsea to 6.1.0nb1wiz1-1/+2
2013-02-05Include correct header for putenv to avoidwiz3-2/+25
warning: reference to compatibility putenv(); include <stdlib.h> for correct reference Addresses PR 47534 by David A. Holland.
2013-02-05Mention samba30 and samba33 removals.wiz1-1/+3