[odc] Daily ports changes for 2006-03-19

ODC auto at squish.net
Mon Mar 20 07:18:07 GMT 2006


OpenBSD ports changes summary for 2006-03-19
============================================

INDEX                                   databases/py-psycopg
security/p5-Crypt-CBC                   x11/ion

== INDEX ============================================================= 01/04 ==

  http://www.openbsd.org/cgi-bin/cvsweb/ports/INDEX

INDEX


  > sync, 3402 unzels (pvalchev@)

== databases ========================================================= 02/04 ==

  http://www.openbsd.org/cgi-bin/cvsweb/ports/databases

py-psycopg

  ~ Makefile                              

  > Better RUN_DEPENDS
  > spotted by Lars Hansson <lars at unet.net.phalek@)

== security ========================================================== 03/04 ==

  http://www.openbsd.org/cgi-bin/cvsweb/ports/security

p5-Crypt-CBC

  ~ Makefile                              ~ distinfo

  > SECURITY update to Crypt::CBC 2.17
  > Versions of this module prior to 2.17 were incorrectly
  > using 8 byte IVs when generating the old-style RandomIV style header
  > (as opposed to the new-style random salt header). This affects data
  > encrypted using the Rijndael algorithm, which has a 16 byte blocksize,
  > and is a significant security issue.
  > The bug has been corrected in versions 2.17 and higher by making it
  > impossible to use 16-byte block ciphers with RandomIV headers. You may
  > still read legacy encrypted data by explicitly passing the
  > -insecure_legacy_decrypt option to Crypt::CBC->new(). (steven@)

== x11 =============================================================== 04/04 ==

  http://www.openbsd.org/cgi-bin/cvsweb/ports/x11

ion

  - patches/patch-etc_cfg_bindings_lua    - patches/patch-etc_cfg_menus_lua
  ~ Makefile                              ~ distinfo
  ~ patches/patch-etc_cfg_ion_lua         ~ pkg/PLIST
  + patches/patch-etc_cfg_ioncore_lua     

  > ion-3ds-20060317 (pedro@)

===============================================================================



More information about the odc mailing list