2006-08-03 16:49:14 by Greg Troxel | Files touched by this commit (1) |
Log message:
When using idea option, change license from fee-based-commercial-use
to idea-license, and also set RESTRICTED and NO_*_CDROM.
(Note that this doesn't change what happens if the idea option is unused.)
|
2006-08-02 12:37:34 by Matthias Drochner | Files touched by this commit (4) | |
Log message:
update to 1.4.5
security update, recommended by gnupg.org
(fixes CVE-2006-3746)
changes:
* More DSA2 tweaks.
* Fixed a problem uploading certain keys to the smart card.
* Fixed 2 more possible memory allocation attacks.
* Added Norwegian translation.
|
2006-07-27 20:48:04 by Johnny C. Lam | Files touched by this commit (32) |
Log message:
Rename "SITES_* to "SITES.*" for file-specific lists of sites \
from which
to fetch the file. This completes the renaming described in revision
1.1799 of bsd.pkg.mk.
|
2006-07-08 23:37:02 by Mark Davies | Files touched by this commit (1) |
Log message:
Don't try and use assembler when building 64bit on Solaris. It gets it
wrong for both amd64 and sparc.
Fixes PR pkg/32648 and possibly PR pkg/33030.
|
2006-07-08 23:29:24 by Mark Davies | Files touched by this commit (2) |
Log message:
Solaris grep doesn't deal well with the binary output of tar when testing
if tar supports "ustar" so feed through strings before grep.
Fixes PR pkg/33776.
|
2006-07-03 23:15:14 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
Update to 1.4.4:
Noteworthy changes in version 1.4.4 (2006-06-25)
------------------------------------------------
* User IDs are now capped at 2048 byte. This avoids a memory
allocation attack (see CVE-2006-3082).
[was already fixed in pkgsrc]
* Added support for the SHA-224 hash. Like the SHA-384 hash, it
is mainly useful when DSS (the US Digital Signature Standard)
compatibility is desired.
* Added support for the latest update to DSA keys and signatures.
This allows for larger keys than 1024 bits and hashes other than
SHA-1 and RIPEMD/160. Note that not all OpenPGP implementations
can handle these new keys and signatures yet. See
"--enable-dsa2" in the manual for more information.
|
2006-06-24 16:20:29 by Lubomir Sedlacik | Files touched by this commit (3) |
Log message:
Security fix for CVE-2006-3082:
"parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions,
allows remote attackers to cause a denial of service (gpg crash) and
possibly overwrite memory via a message packet with a large length,
which could lead to an integer overflow, as demonstrated using the
--no-armor option."
Patch from GnuPG CVS repository.
Bump PKGREVISION.
|
2006-05-31 20:22:26 by Geert Hendrickx | Files touched by this commit (49) |
Log message:
The databases/openldap package has been split in -client and -server component
packages. Convert LDAP-based applications to depend on openldap-client, and
bump PKGREVISION for those that depend on it by default.
|
2006-04-17 09:07:54 by Johnny C. Lam | Files touched by this commit (528) |
Log message:
Strip ${PKGLOCALEDIR} from PLISTs of packages that already obey
PKGLOCALEDIR and which install their locale files directly under
${PREFIX}/${PKGLOCALEDIR} and sort the PLIST file entries. From now
on, pkgsrc/mk/plist/plist-locale.awk will automatically handle
transforming the PLIST to refer to the correct locale directory.
|
2006-04-13 20:23:45 by Johnny C. Lam | Files touched by this commit (292) |
Log message:
BUILD_USE_MSGFMT and USE_MSGFMT_PLURALS are obsolete. Replace with
USE_TOOLS+=msgfmt.
|