Subject: CVS commit: [pkgsrc-2006Q1] pkgsrc/security/base
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 06/07/2006 00:14:26
Module Name:	pkgsrc
Committed By:	salo
Date:		Wed Jun  7 00:14:26 UTC 2006

Modified Files:
	pkgsrc/security/base [pkgsrc-2006Q1]: Makefile PLIST distinfo
	pkgsrc/security/base/patches [pkgsrc-2006Q1]: patch-aa

Log Message:
Pullup ticket 1689 - requested by adrianp
security update for base

Revisions pulled up:
- pkgsrc/security/base/Makefile			1.8, 1.10
- pkgsrc/security/base/PLIST			1.3, 1.4
- pkgsrc/security/base/distinfo			1.3, 1.4
- pkgsrc/security/base/patches/patch-aa		1.2

   Module Name:		pkgsrc
   Committed By:	adrianp
   Date:		Fri May 12 22:31:38 UTC 2006

   Modified Files:
   	pkgsrc/security/base: Makefile PLIST distinfo
   	pkgsrc/security/base/patches: patch-aa

   Log Message:
   Update to BASE 1.2.4
   > Changes:
   >     - Fixed issue with PostGRES and schema in base_db.inc.php -- Kevin J and Nikns
   >     - Fixed bug 1284695 Error in SQL with PostgreSQL -- Kevin J and Nikns
   >     - Fixed issues displaying PortScans -- Nikns
   >     - Fixed sig_class (bug 1407325) and sig_priority filter bug -- Nikns and Max Valdez (garaged)
   >     - Fixed bug 1408387 Archive move and Email summary issues -- Nikns
   >     - Fixed bug when, after setup, archive database wasn't used -- Nikns
   >     - Fixed PostgreSQL archive database support -- Nikns
   >     - Fixed bug 1313261 Unable to use actions in base_stat_sensor.php -- Nikns
   >     - Fixed bug 1371532 First of month timestamp issue -- Nikns
   >     - Fixed bug 1406945 Lost alert order when switching between payload display -- Nikns
   >     - Fixed bug 1413712 base_conf.php file path issue under MS Windows -- garaged
   >     - Fixed search by signature name -- Nikns
   >     - Converted sql/create_base_tbls_mssql_extra.sql to CRLF line terminators -- Nikns
   >     - Fixed broken auth system for MSSQL -- Nikns
   >     - Changed MSSQL schema for table acid_event, sig_name now has type VARCHAR instead of TEXT -- Nikns
   >     - Fixed bug 1307250 broken base_stat_alerts.php with MSSQL -- Nikns
   >     - Fixed bug 1413594 Force to use alert database for auth system stuff -- Nikns
   >     - Setup fix, on error form values are remembered, default language is English -- garaged
   >     - Uppercased name 'Archive' in base_main.php (in sync with base_hdr1.php) -- Nikns
   >     - Fixed support for actions in base_stat_class.php -- Nikns
   >     - Fixed bug 1418660 Broken search by IP criteria -- Nikns
   >     - Added checkboxes and fixed support for actions in base_stat_iplink.php -- Nikns
   >     - Implemented RFE 1123382 support for actions in base_stat_uaddr.php -- Nikns
   >     - Implemented support for actions in base_stat_ports.php -- Nikns
   >     - Fixed bug 1422575 when empty email sent even if action unsuccessful -- Nikns
   >     - Fixed bug 1424033 Unable to Graph Alert Detection Time -- Nikns
   >     - Fixed bug 1426089 Score removed from email address -- Nikns
   >     - Fixed bug 1210542 and 1288402 Packet display mode issues -- Nikns
   >     - Detect archiving duplicates with select queries instead of catching db conflict error -- Nikns
   >     - Fixed bug 1430686 Update alert cache for archived alert right after it is coppied to archive db -- Nikns
   >     - Implemented archiving support for schema 107 -- Nikns
   >     - Added sig_gid (signature generator id) to snort signature reference url for schema 107 -- Nikns
   >     - session_start() on base_conf.php avoiding repetition, easier to handle with debug output -- garaged
   >     - debug_mode needs to be off on login (index.php:45 ) -- garaged
   >     - Fixed bug 1275536 Unable to download binary payload in Internet Explorer when using SSL -- Nikns
   >     - Implemented archiving support for FLoP extended database schema -- Nikns
   >     - Implemented rebuild of packet in pcap format for FLoP extended database -- Nikns
   >     - Added display of MAC addresses in base_query_alert.php for FLoP extended database -- Nikns
   >     - Fixed BASE authentication bypass in standalone mode for base_maintenance.php -- Nikns
   >     - Added HTTP response codes on authentication failure in base_maintenance.php for standalone mode -- Nikns
   >     - Fixed bug 1341286 Show IP header length in bytes, not words -- Juergen Leising
   >     - In plain display mode several sequential non-ASCII payload characters join together displaying their count -- Nikns
   >     - Changed input type of the password field in useradmin -- Kevin Johnson
---
   Module Name:		pkgsrc
   Committed By:	adrianp
   Date:		Tue Jun  6 19:41:43 UTC 2006

   Modified Files:
   	pkgsrc/security/base: Makefile PLIST

   Log Message:
   Update to 1.2.5
   > - 6/4/2006 1.2.5 (sarah)
   > - Added base64 encoding support for MAC addresses presented on the screen for FLoP extended database -- Juergen Leising
   > - Added base64 encoding support for rebuild of packet in pcap format for FLoP extended database -- Juergen Leising
   > - Fixed issue with Oracle and schema version in base_db.inc.php -- Nikns
   > - Fixed bug when alerts with sig references would fail to archive causing duplicates error -- Nikns
   > - Added base64 encoding support for ICMP payload additional table in base_qry_alert.php -- Juergen Leising
   > - Added check for PHP Logging Level against E_NOTICES in setup/index.php -- Nikns
   > - Fixed bug when certain preprocessor alerts would not be cached (for example arpspoof) -- Nikns
   > - Added setup/setup_db.inc.php with CreateBASEAG() to resolve redundancy in setup and base_db_setup.php -- Nikns
   > - Removed unnecessary and broken search index stuff from Create BASE AG, since schemas are already with them  -- Nikns
   > - Added XSSPrintSafe() (array safe htmlspecilchars() function) and made filterSql() use ADOdb qmagic() -- Nikns
   > - Changed input type of the password field to actually be password in setup3.php -- Nikns
   > - Filtered all unfiltred (mainly auth system stuff) $_POST and $_GET variables using filterSql() -- Nikns
   > - Santized all $_SERVER variables to be protected against XSS attacks -- Nikns
   > - Added "Clear Data Tables" option in base_maintenance.php and "Repair Tables" option to execute CreateBASEAG() -- Nikns
   > - Make use of FLoP's event reference. Signature name of alert which trigered "Tagged Packet" alert is shown too -- Nikns
   > - Updated chinese.lang.php -- Johnson Chiang
   > - Fixed Time error in searches -- Jeff Kell
   > - Fixed refresh issue with ~ directories -- Kevin Johnson
   > - Fixed cookie stored data and authentication scheme to correct Nikns' report on session forge issue -- GaRaGeD
   > - Updated link to the Nessus plug in DB -- Jonathan W Miner
   > - Fixed display after deleting alerts -- Bruce Briggs
   > - Fixed Bug #1466392 - Back button doesn't work after refresh. -- Juergen Leising
   > - Patches from jhart@spoofed.org to add missing ICMP and TCP type and codes - GaRaGeD
   > - add support for ICMP redirect decoding. - Jon Hart
   > - add decoding support for ICMP source quench and ICMP parameter problem - Jon Hart
   > - split up "flags" into DF and MF, much like tcp flags are currently handled - Jon Hart
---
   Module Name:		pkgsrc
   Committed By:	adrianp
   Date:		Tue Jun  6 20:09:50 UTC 2006

   Modified Files:
   	pkgsrc/security/base: distinfo

   Log Message:
   Update distinfo missed in the update to 1.2.5


To generate a diff of this commit:
cvs rdiff -r1.7 -r1.7.2.1 pkgsrc/security/base/Makefile
cvs rdiff -r1.2 -r1.2.2.1 pkgsrc/security/base/PLIST \
    pkgsrc/security/base/distinfo
cvs rdiff -r1.1.1.1 -r1.1.1.1.2.1 pkgsrc/security/base/patches/patch-aa

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.