07:39 itetcu 

- Updating the Osiris integrity checking system to 4.2.1. This version includes
the format string exploit fixes that were also in the patch in 4.2.0_1 (hence
removed).
- Also updating master site to the new official one.

PR:             ports/100952
Submitted by:   David Thiel (maintainer)

07:51 itetcu 

Patching osiris in response to CVE-2006-3120.

"Ulf Harnhammar and Max Vozeler from the Debian Security Audit Project
have found several format string security bugs in osiris, a network-wide
system integrity monitor control interface. A remote attacker could
exploit them and cause a denial of service or execute arbitrary code."

PR:             ports/100793
Submitted by:   David Thiel (maintainer)
Security:       CVE-2006-3120