1. 16 Nov, 2011 6 commits
  2. 15 Nov, 2011 8 commits
  3. 14 Nov, 2011 2 commits
  4. 13 Nov, 2011 11 commits
  5. 12 Nov, 2011 2 commits
  6. 11 Nov, 2011 10 commits
    • Natanael Copa's avatar
      ==== snapshot 111111 ==== · 3465946f
      Natanael Copa authored
      3465946f
    • Timo Teräs's avatar
      main/libc0.9.32: improve the stack unwinding fix · 6f8933ee
      Timo Teräs authored
      should now work with all syscalls
      6f8933ee
    • Natanael Copa's avatar
      main/ldns: build drill and example tools · 55d08e35
      Natanael Copa authored
      55d08e35
    • Natanael Copa's avatar
      4dafb4f1
    • Natanael Copa's avatar
      main/midori: upgrade to 0.4.2 · 8d8a87cb
      Natanael Copa authored
      8d8a87cb
    • Natanael Copa's avatar
      main/nmap: upgrade to 5.51.5 · ca56b0a6
      Natanael Copa authored
      ca56b0a6
    • Natanael Copa's avatar
      main/tcl: upgrade to 8.5.11 · cda0b3e1
      Natanael Copa authored
      cda0b3e1
    • Natanael Copa's avatar
      main/git: upgrade to 1.7.7.3 · f2381061
      Natanael Copa authored
      f2381061
    • Timo Teräs's avatar
      main/net-snmp: add some snmpd MIB implementation fixes · ac22212e
      Timo Teräs authored
        * IP-MIB::ipNetToPhysicalPhysAddress is fixed to display
          data properly even after first time
        * swinst patch prevents a crash during snmpwalk in
          default install
      ac22212e
    • Timo Teräs's avatar
      main/openjdk6: security upgrade icedtea6 to 1.10.4 · 0389c081
      Timo Teräs authored
      ref #802
      
      icedtea6 1.10.4 includes patches for the following security issues:
       CVE-2011-3547: InputStream skip() information leak
       CVE-2011-3548: mutable static AWTKeyStroke.ctor
       CVE-2011-3551: Java2D TransformHelper integer overflow
       CVE-2011-3552: excessive default UDP socket limit under SecurityManager
       CVE-2011-3553: JAX-WS stack-traces information leak
       CVE-2011-3544: missing SecurityManager checks in scripting engine
       CVE-2011-3521: IIOP deserialization code execution
       CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
       CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
       CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer
       CVE-2011-3556: RMI DGC server remote code execution
       CVE-2011-3557: RMI registry privileged code execution
       CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
       CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer
      
      icedtea6 1.10.2 security patches (since upgrading from icedtea6 1.10.1):
       CVE-2011-0872: (so) non-blocking sockets with TCP urgent disabled get still selected for read ops (win)
       CVE-2011-0865: Vulnerability in deserialization
       CVE-2011-0815: Heap overflow vulnerability in FileDialog.show()
       CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D code
       CVE-2011-0867: NetworkInterface.toString can reveal bindings
       CVE-2011-0869: Vulnerability in SAAJ
       CVE-2011-0870: Vulnerability in SAAJ
       CVE-2011-0868: Crash in Java 2D transforming an image with scale close to zero
       CVE-2011-0871: ImageIcon creates Component with null acc
       CVE-2011-0864: JSR rewriting can overflow memory address size variables
      0389c081
  7. 10 Nov, 2011 1 commit