Number of commits found: 53

Update to 2012-01-25a to fix a CSRF vulnerability.

Noticed by:     eadler

Update to 2012-01-25 `Angua' release.

Fix typo in pkg-message.

Submitted by:   Tech Nossomy <technossomy mail.com>

Update to 2011-05-25a.

Security:       0b535cd0-9b90-11e0-800a-00215c6a37bb

Update to 20110525.

Remove the deleted.files before proceeding to install.

Noticed by:     tinderbox via erwin
Feature safe:   yes

Forced commit to note that previous change was
to update to 20101107a to fix multiple ACL escalation
vulnerabilities.

Feature safe:   yes

Add dokuwiki multiple ACL escalation vulnerabilities.

Feature safe:   yes

Add php-openssl as dependency, which is needed for installing/updating
plugins via web UI.

PR:             ports/154023
Submitted by:   Jason Taylor <jason infinitebubble.com>
Feature safe:   yes

 - Update to 2010-11-07 release.
 - Add a patch to improve diff generation in Unicode case [1]
   which is used in the FreeBSD China wiki installation for
   a while.

Submitted by:   MQ [1]

Update to 20091225c.  This version fixed a CSRF vulnerability in ACL
manager.

Security:       http://bugs.splitbrain.org/index.php?do=details&task_id=1853

Fix a minor information leak issue which will expose directories outside
the wiki root (not their contents though).

This commit actually upgraded the port to 2009-12-25b by adding the patch
file.

For details please consult:
        http://bugs.splitbrain.org/index.php?do=details&task_id=1847

Sponsored by:   iXsystems, Inc.

Update to 2009-12-25 "Lemming":

 * This release needs PHP5.1.2!
 * many Editor improvements
    o automatic list indention
    o better headline system
    o link wizard template authors need to provide CSS
  * compatibility fixes for IE8 and Chrome
  * PHP 5.3 compatibility fixes
  * row span support in tables
  * downloadable code blocks
  * fulltext search improvements
  * added filename search in media manager
  * new dformat function plugin and template authors should replace
    strftime calls with this function

(Only the first 15 lines of the commit message are shown above )

Reinstate maintainer at his request.

Temporarily reassign ports maintained by chris@officialunix.com back to
the pool for the duration of his upcoming move.

Requested by:   maintainer

- Pass maintainer to submitter.

PR:             ports/138957
Submitted by:   Chris Petrik <chris@officialunix.com>
Feature safe:   yes

Reset chinsan@FreeBSD.org due to numerous maintainer-timeouts and no
response to email.

Hat:            portmgr

Apply a vendor security fix (2009-02-14b) for a local file disclosure
vulnerability.

Security:       4f838b74-50a1-11de-b01f-001c2514716c
With hat:       ports-security

- Update to 2009-02-14

PR:             ports/132078
Submitted by:   Beat Gätzi (beat@)

- fix the path of PHP.
- Bump portrevision.

Noticed by:     Christian Marg <marg at rz.tu-clausthal.de>

- Update to 2008-05-05.

PR:             ports/123527
Submitted by:   Beat Gatzi <beat at chruetertee.ch>
Approved by:    maintainer

- Unbreak www/dokuwiki by fixing the missed before-patched files.

Noticed by:     sat
Approved by:    rafan (mentor)

- Fix an XSS vulnerability.
  http://bugs.splitbrain.org/index.php?do=details&task_id=1195

Approved by:    rafan (mentor)

- Update to 2007-06-26

- The changes in this release are as follows:
  This release adds rendering plugins, OpenSearch, a spam revert
  manager, and support for managers (semi-admins). Several smaller and
  bigger bugs were fixed, and many other improvements made.

Approved by:    rafan (mentor)

- Welcome X.org 7.2 \o/.
- Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}.
- Bump PORTREVISION for ports intalling files in ${X11BASE}.

- Update to 2006-11-06

PR:             ports/105693
Submitted by:   Gustavo Fukao <gustavofukao _at_ gmail dot com>
Approved by:    delphij (mentor)

upgrade of www/dokuwiki to release 2006-03-09e, as it fixes a bunch of urgent
security bugs

PR:             ports/103982
Submitted by:   Tomas Verbaitis <tomasv_AT_megalogika dot lt>
Reviewed by:    chinsan
Approved by:    maintainer (chinsan)

Change the following ports to my FreeBSD.org email.
Approved by:    delphij (mentor)

archivers/pecl-bz2/Makefile
archivers/pecl-lzf/Makefile
archivers/pecl-rar/Makefile
audio/fapg/Makefile
audio/pecl-id3/Makefile
chinese/CJKUnifonts/Makefile
chinese/auto-tw-l10n/Makefile
chinese/dfsongsd/Makefile
chinese/fortunetw/Makefile
chinese/gcin/Makefile
chinese/joe/Makefile
chinese/joe2/Makefile

(Only the first 15 lines of the commit message are shown above )

- Fix security issue(Image resize DOS-Attack in fetch.php)
- bump PORTREVISION

PR:             ports/103798
Security:       http://bugs.splitbrain.org/?do=details&id=924

Pkg-plist fix
Add new WWW layout

PR:             ports/99255
Submitted by:   chinsan <chinsan.tw@gmail.com> (maintainer)
Approved by:    markus (co mentor)

- Make pkg-plist static
- Bump PORTREVISION due to plist changes
- Remove user-modified files conf/acl.auth.php, conf/users.auth.php, and
data/changes.log from the plist.  This results in data/changes.log being
reported as erroneously left behind.

PR:             ports/98863
Submitted by:   aaron
Reviewed by:    maintainer
Approved by:    maintainer, tobez (implicit)

- Bump PORTREVISION
- Update distinfo

Vendor's Announcement:
Hello again!

Just two days after the last security problem another flaw was discovered.
Luckily not as bad as the last one.

Andreas .kre Solberg discovered a security flaw which allows registered
users to view page content they usually have no access to. The problem is
in the way how a successful user profile change is handled.

This affects only installs which have Access Control Lists enabled (off by
default) and restricted the READ permission for certain pages even for

(Only the first 15 lines of the commit message are shown above )

Remove FORBIDDEN now that the port has been updated.

- Update distinfo
- Bump PORTREVISION
- Change default install location
- This is a major security fix and I would ask that portmgr@ immediately
rebuild and redistribute the port's package!

PR:             ports/98514
Submitted by:   aaron
Approved by:    secteam (simon)

Mark FORBIDDEN due to remote code execution:

Security:       http://www.hardened-php.net/advisory_042006.119.html

- Fix plist after recent php changes

Fix or remove obsolate or broken ways to depend on php.

- Update to 20060309

PR:             ports/95054
Submitted by:   Piet Delport <pjd@satori.za.net>
Approved by:    chinsan <chinsan.tw@gmail.com> (maintainer)

- Update to 20060305

PR:             ports/94257
Submitted by:   chinsan <chinsan.tw@gmail.com> (maintainer)

Chase libversion bumb to libMagick.so.9

PR:             ports/91270

- Update to 20051109
- Add SHA256

PR:             ports/88726
Submitted by:   maintainer

Update to 20051023
Change MASTER_SITES order

PR:             87869
Submitted by:   chinsan <chinsan.tw@gmail.com> (maintainer)

BROKEN: Unfetchable

- Update to 20050922
- Take maintainership

PR:             ports/86559
Submitted by:   chinsan <chinsan.tw@gmail.com>

- Update to 2005-09-19

PR:             ports/86371
Submitted by:   chinsan <chinsan.tw@gmail.com>

- drop maintainership

PR:             85803
Submitted by:   chinsan <chinsan.tw@gmail.com>

- Fix WITH_LANG knob

PR:             ports/83663
Submitted by:   chinsan <chinsan.tw@gmail.com> (maintainer)

- Update to 20050713

PR:             ports/83442
Submitted by:   chinsan <chinsan.tw@gmail.com> (maintainer)

- Update to 20050701

PR:             ports/83050
Submitted by:   chinsan <chinsan.tw@gmail.com> (maintainer)

- Take maintainership
- Add knobs WIKI_LANG and DOKUWIKIDIR

PR:             ports/81244
Submitted by:   chinsan <chinsan@mail2000.com.tw>

1: update to 20050507
2: make portlint happy.

PR:             ports/80746
Submitted by:   chinsan <chinsan@mail2000.com.tw>

- fix insufficient check on conf['uploadtypes']
- fix pkg-message

Submitted by:   Stephane Lentz <stephane.lentz@gmail.com> & chinsan
<chinsan@mail2000.com.tw>

Add dokuwiki, it's a simple and easy to use wiki.

Submitted by:   chinsan <chinsan@mail2000.com.tw>

Number of commits found: 53

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities