[odc] Daily ports changes for 2006-03-19
ODC
auto at squish.net
Mon Mar 20 07:18:07 GMT 2006
OpenBSD ports changes summary for 2006-03-19
============================================
INDEX databases/py-psycopg
security/p5-Crypt-CBC x11/ion
== INDEX ============================================================= 01/04 ==
http://www.openbsd.org/cgi-bin/cvsweb/ports/INDEX
INDEX
> sync, 3402 unzels (pvalchev@)
== databases ========================================================= 02/04 ==
http://www.openbsd.org/cgi-bin/cvsweb/ports/databases
py-psycopg
~ Makefile
> Better RUN_DEPENDS
> spotted by Lars Hansson <lars at unet.net.phalek@)
== security ========================================================== 03/04 ==
http://www.openbsd.org/cgi-bin/cvsweb/ports/security
p5-Crypt-CBC
~ Makefile ~ distinfo
> SECURITY update to Crypt::CBC 2.17
> Versions of this module prior to 2.17 were incorrectly
> using 8 byte IVs when generating the old-style RandomIV style header
> (as opposed to the new-style random salt header). This affects data
> encrypted using the Rijndael algorithm, which has a 16 byte blocksize,
> and is a significant security issue.
> The bug has been corrected in versions 2.17 and higher by making it
> impossible to use 16-byte block ciphers with RandomIV headers. You may
> still read legacy encrypted data by explicitly passing the
> -insecure_legacy_decrypt option to Crypt::CBC->new(). (steven@)
== x11 =============================================================== 04/04 ==
http://www.openbsd.org/cgi-bin/cvsweb/ports/x11
ion
- patches/patch-etc_cfg_bindings_lua - patches/patch-etc_cfg_menus_lua
~ Makefile ~ distinfo
~ patches/patch-etc_cfg_ion_lua ~ pkg/PLIST
+ patches/patch-etc_cfg_ioncore_lua
> ion-3ds-20060317 (pedro@)
===============================================================================
More information about the odc
mailing list