summaryrefslogtreecommitdiff
path: root/chat
AgeCommit message (Collapse)AuthorFilesLines
2005-08-12Update to 1.5.0 from maintainer, Matthew Luckie, via PR #30974.reed6-135/+8
"this release of gaim has a few security fixes which mirror the effects of patch-ae patch-af patch-ag" ChangeLog says: version 1.5.0 (8/11/2005): * Ability to set IRC quit message (Lalo Martins) * OSCAR file transfers now work for 2 users behind the same NAT (Jonathan Clark) * Yahoo! buddy requests to add you to their buddy list now prompt for authorization * Added a /clear command for conversations/chats * Fixed ICQ encoding for messages with offline ICQ users (Ilya Konstantinov, SF Bug #1179452) * Default Yahoo! chat roomlist locale to 'us'
2005-08-10Remove the abuse of buildlink that was pkg-config/buildlink3.mk. Thatjlam11-32/+22
file's sole purpose was to provide a dependency on pkg-config and set some environment variables. Instead, turn pkg-config into a "tool" in the tools framework, where the pkg-config wrapper automatically adds PKG_CONFIG_LIBDIR to the environment before invoking the real pkg-config. For all package Makefiles that included pkg-config/buildlink3.mk, remove that inclusion and replace it with USE_TOOLS+=pkg-config.
2005-08-10Security fixes for CAN-2005-2102 and CAN-2005-2103.salo5-5/+111
- An error in the handling of away messages can be exploited to cause a heap-based buffer overflow by sending a specially crafted away message to a user logged into AIM or ICQ. Successful exploitation allows execution of arbitrary code. - An error in the handling of file transfers can be exploited to crash the application by attempting to upload a file with a non-UTF8 filename to a user logged into AIM or ICQ. Patches from RedHat.
2005-08-08Fix the package configuration of the following packages so that theyjlam3-3/+16
will install Perl modules into the "vendor" directories: chat/vicq math/udunits databases/rrdtool mbone/beacon devel/p5-subversion Bump their PKGREVISIONs.
2005-08-06Bump the PKGREVISIONs of all (638) packages that hardcode the locationsjlam12-24/+24
of Perl files to deal with the perl-5.8.7 update that moved all pkgsrc-installed Perl files into the "vendor" directories.
2005-08-05One more hack to make it actually work.. (the configure tests are overlysalo2-6/+18
complex and stupid..).
2005-08-05Linking with libssl requires libcrypto on systems where libssl doesn'tsalo2-4/+4
implicitly add it (e.g., netbsd-2).
2005-08-05Security fix for CAN-2005-2370salo4-4/+26
"Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2 and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message." Bump PKGREVISION, patch from Gaim CVS.
2005-08-05backout previous, it's nb2, not rc3.. *sigh*salo1-2/+2
2005-08-05the last security update was for rc3, not rc2. (hi adam!)salo1-2/+2
2005-08-03Update to 2.0s9.xtraeme2-6/+6
The jabberd project team is pleased to announce the release of jabberd 2.0s9. This is a security release. There is a buffer overflow that could be used to perform a DoS attack and possible code execution. It is *HIGHLY* recommended that you upgrade! ChangeLog: * fixed only one user is loaded correctly for each router acl * fixed s2s segfault under particular connection timeout conditions * fixed id is being case sensitive * fixed Users cannot login after a long period of server inactivity * fixed handling of stream errors * fixed version attribute reply in stream * fixed c2s glibc abort and mysql option flags * fixed sx io mem leak * fixed Incorrect SASL error message defined in sx/sasl.c * fixed 3 buffer overflows in jid.c * fixed second log-in in with similar resource breaks routing for first login
2005-08-02update bitlbee to 0.92tonio3-14/+11
Main changelog entries are: Security: - Fixed a bug in http_encode that might have caused buffer overflows (although not likely to be exploitable) when trying to encode strings with non-ASCII characters. - Newline stripping added to prevent newline-in-friendlyname attacks. (Which allowed remote people to make BitlBee send raw custom IRC lines.) Bugs: - Many crashes - Yahoo! cleanup code to avoid 100% CPU time usage - fixes for ICQ and MSN approved by wiz@
2005-07-30Added a patch to fix void* arithmetic.rillig2-1/+53
2005-07-30Added a patch that avoids conditional lvalues. Needed for IRIX 6.5.rillig2-1/+17
2005-07-29honour LDFLAGS and LIBS.grant4-2/+55
2005-07-27update to 2.0.2:gdt5-72/+9
3 May 2005: - Released 2.0.2 - Fix to co-exist more nicely with other encrypting gaim plugins. 1 Mar 2005: - Initial autoconfiscation, thanks to Greg Troxel <gdt@ir.bbn.com>.
2005-07-27update to 2.0.2:gdt2-6/+6
* src/privkey.c (otrl_privkey_hash_to_human): Avoid writing a NUL one byte past the end of the buffer
2005-07-27Reset MAINTAINER -- he stopped working on pkgsrc.wiz1-2/+2
2005-07-21Change path from devel/pkgconfig to devel/pkg-config.wiz11-22/+22
No PKGREVISION bump since pkg-config is only a BUILD_DEPENDS.
2005-07-21devel/pkgconfig/buildlink3.mk should not be included in bl3.mk files by default.wiz1-2/+1
Packages that need it should add it themselves, it is only a build time dependency.
2005-07-20Changes 0.4.1:adam3-12/+12
* Fixed: memory leak * Fixed compatibility with Qt3 * Fixed library detection with threads in libgadu and Mac OS X
2005-07-20Changes:adam3-9/+9
* Security bug fix
2005-07-19depends should be ../../<category>/<pkg>grant2-4/+4
2005-07-17fix checksum for lastdillo1-2/+2
2005-07-17Accept ENOTCONN as indicating socket is not ready for write (needed for ↵dillo3-3/+17
upcoming irssi-icq). Bump PKGREVISION.
2005-07-16Remove some unnecessarily strong dependencies on perl that resultedjlam1-2/+2
from including perl5/buildlink3.mk. These packages just need the Perl interpreter, and can just add "perl" to USE_TOOLS instead.
2005-07-16Bump to nb1 for security issueadrianp3-2/+41
Patch via debian
2005-07-16Get rid of USE_PERL5. The new way to express needing the Perl executablejlam6-16/+12
around at either build-time or at run-time is: USE_TOOLS+= perl # build-time USE_TOOLS+= perl:run # run-time Also remove some places where perl5/buildlink3.mk was being included by a package Makefile, but all that the package wanted was the Perl executable.
2005-07-14Note addition of p5-POE-Component-IRC and p5-POE-Filter-IRCDadrianp1-1/+3
2005-07-14POE::Component::IRC is a POE component (who'd have guessed?) which acts as anadrianp4-0/+36
easily controllable IRC client for your other POE components and sessions. You create an IRC component and tell it what events your session cares about and where to connect to, and it sends back interesting IRC events when they happen. You make the client do things by sending it events.
2005-07-14POE::Filter::IRCD provides a convenient way of parsing and creating IRCadrianp4-0/+29
protocol lines.
2005-07-13Turn PERL5_PACKLIST into a relative path instead of an absolute path.jlam8-19/+19
These paths are now relative to PERL5_PACKLIST_DIR, which currently defaults to ${PERL5_SITEARCH}. There is no change to the binary packages.
2005-07-13Changes:adam5-27/+27
* Important security-related bug-fixes
2005-07-12use ${NOLOGIN}, not hardcoded /sbin/nologin.grant1-2/+2
2005-07-09this pkg uses X, so include x11.buildlink3.mk to ensure that thegrant1-1/+2
correct X distribution is used. fixes build problem observed on Linux.
2005-07-08update gaim to 1.4.0. update provided by maintainer in PR pkg/30693.grant3-8/+8
changes since 1.3.1: * Fix system log start times for some protocols * SILC compiles with newer SILC toolkit versions (Pekka Riikonen) * Fixed a bug where buddy icon cache files were left in the icon cache directory after they were no longer in use. * Attempt to detect the file type of a buddy icon when saving. * Additional Yahoo! boot protection (Peter Lawler) * A few Yahoo! memory leaks plugged (Peter Lawler) * Fixed handling of the new Yahoo! profile page. (Joshua Honeycutt, Peter Lawler) * Fixed localized Yahoo! room lists. Please refer to the Yahoo! section of the Gaim FAQ for details. (Peter Lawler) * Enabled sending files to ICQ users using ICQ 5.02 and newer (Jonathan Clark)
2005-07-01define BSD_COMP on Solaris as this package expects to use thegrant1-1/+4
BSD-style non-blocking IO interface. fixes build on Solaris.
2005-07-01don't pass -Xc on Solaris if not building with gcc.grant2-1/+16
passing -Xc to sunpro defines __STDC__=1 and the build fails in ircsig.c because <signal.h> only declares sigaction if __STD__=0. fixes build on Solaris w/ sunpro.
2005-06-26Fix /exec on sparc64. Applied upstream quite a while ago. Bump PKGREVISION.snj3-3/+17
2005-06-25Update chat/bnc to version 2.9.4zuntum4-53/+19
Changes: 2.9.4 (1) SSL support can now be used incoming. (2) Added three new configuration entries to handle new features: listenex [--ssl][--limit <maxusers>][--localhost <hostname>] <port> privatekey <filename> publickey <filename> 2.9.3 (1) SECURITY FIX: FD_SETSIZE overflow DOS (2) SSL support can now be used if configured with --with-ssl SSL connection is done by passing -s ex. /quote conn -s ircs.server Note: this is only partially secure since SSL is only supported outgoing. 2.9.2 (1) Added flush to logging (2) General code changes to fix compiling on some compilers (3) Fixed problems binding to listening address 2.9.1 (1) SECURITY FIX: password check, was only letting incorrect passwords in (2) Fixed IP binding on listen 2.9.0 (1) Added trailing newlines to log records (2) Added extra error handling on accepting connections (3) Fixed buffer overflow in getnickuserhost (reported by Leon Juranic) (4) Added extra check for gethostbyname2 (5) Made password check more thorough (6) Fixed ipv6 dns resolving to random ipv4 2.8.9 (1) Fixed backspace security flaw (reported by Yak) (2) Fixed compile errors related to compound statements (3) Rewrote logic of /vip command (4) Rewrote docked session listing code 2.8.8 (1) Added support for setting a specific IP to listen on (listen <[host:]port> [maxusers]) (2) Enhanced bncsetup to use new conf format and new question to handle specific host entering. (3) Changed the Makefile to list libraries last, some crypt libraries predefined their own main function which prevented compiling. (4) Reorganized the connection code to fix a bug where a user gets disconnected while connecting to an irc server. (5) Socket length was not being set before accept. (Thanks chris) (6) Removed old hack code for systems that do not support snprintf. (7) Increased error checking in recv code. (8) Better parsing of messages (9) Server buffers always cleared when connecting to a new server. (10) Initial IPv6 support. Added -6 option to the CONN command (i.e. CONN -6 irc.ipv6.org) which is only necessary on ambigious addresses or when connecting via dns. (11) Listen host can be specified in conf as an ipv6 address by putting the address in []'s (i.e. LISTEN [2000:610:0:23::]:6669) Requested by Peter Avalos <pavalos@theshell.com> in private e-mail.
2005-06-21Only some platforms build the dynamically-loadable modules. On others,jlam3-61/+75
the modules are statically-linked into the ircservices executable. This fixes the installation of chat/ircservices on platforms where dlopen() doesn't obey its "mode" argument, e.g. RTLD_NOW. Unfortunately, NetBSD/amd64 currently falls into this category (port-amd64/30570), but this will also fix installation on any a.out NetBSD or OpenBSD platform. Approved for commit during the deep freeze by <agc>.
2005-06-19"inet6" option support is determined in bsd.prefs.mk, don't add it tosalo2-4/+4
PKG_SUGGESTED_OPTIONS.
2005-06-19Updated to version 1.0salo5-52/+45
Changes: 1.0: ==== Only minor bugfixes were made to the previous version. - Fixed channel public key list saving on backup router on JOIN command reply. - New optimized logging. 0.9.21: ======= A small bugfix release. - Added default limit how many channels one client can join (50). - Added missing getopt.[ch]. - Fixed compilation with pkg-config files 0.9.20: ======= A bugfix release to the SILC Server. In addition of various bugfixes, this version now also includes new math library that from now on will be included in all SILC distributions. - Added more liberal channel names from the previous more stricter identifier string change. - Added SERVICE command to server, though services aren't supported yet. - Fixed MOTD command to send empty reply if motd does not exist. - Fixed LIST command. - Fixed query to stop if client goes away. - Added pkg-config check to the configure. - Several other bugfixes were made.
2005-06-18Fix previous: correct path of config file.hira2-5/+5
2005-06-18Use PKG_SYSCONFDIR framework. Bump PKGREVISION.hira5-16/+43
This closes PR pkg/30546.
2005-06-16Create directories before installing files into them.jlam15-15/+44
2005-06-14Added a patch needed for ISO C90 compilers. This fixes the bulk build onrillig2-1/+18
NetBSD 1.6.2.
2005-06-12Remove libyahoo and gtkyahoo.jmmv15-315/+1
The project was declared dead on February 27th 2003, although the last version dates from August 14th 2001. Not to mention that the program does not work any more due to all the changes in Yahoo's authentication mechanisms in the meantime.
2005-06-10Add missing file.salo2-2/+4
From MAINTAINER, Matthew Luckie via PR pkg/30494
2005-06-10Update to version 1.3.1salo2-6/+6
Changes: - security fixes for DoS issues: http://gaim.sourceforge.net/security/index.php?id=18 http://gaim.sourceforge.net/security/index.php?id=19 - Fix Yahoo! privacy bug - Fix Jabber Get Info crash on busted servers - The file transfer details section now also displays the full path to the local file sent/received. - Yahoo! has the following new "/" commands: /join, /buzz - Updated our gaim.desktop file, thanks to all our terrific - translators for sending in translations of the changes - Improvements to how Gaim handles new message notification
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-11 14:04:04 +0000