The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious…
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can c…
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which …
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (2)
Show 2 fixed
VuXML entries whose affected range this version has left.
databases/pgbouncer: Unconditionally install man pages
This port had a couple of issues besided installing man pages as a
function of the DOCS option selection. It also was using <pre> and <post>
inclusions with <options>, _DEPENDS were in multiple places.
I regrouped the *_DEPENDS, I moved the options to just above the make
targets (their conventional location) and I utilized <option>_*_DEPENDS
as well after fixing the man pages.
PR: 192507
Reported by: dmitry2004 (yandex.ru)
Approved by: Just Fix It (maintainer in copy)
Only use libevent2
Remove libevent as libevent2 is providing a good compatibility interface as well
as providing better performances.
Remove custom patches from libevent2 and install libevent2 the regular way
Mark ports abusing private fields of the libevent1 API as broken
Import a patch from fedora to have honeyd working with libevent2
Remove most of the patches necessary to find the custom installation we used to
have for libevent2
With hat: portmgr
- Fix minor issue from previous commit by changing from SUB_LIST to PLIST_SUB
PR: 189787
Reported by: Mikhail Tatsenko <m.tsatsenko@gmail.com> (maintainer)
Pointyhat to: swills
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Fix a few "bad example" problems in the rc.d scripts that have been propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.
- Update pgbouncer to 1.2.3 - Add new UID and GID for pgbouncer - Improve handling of example configuration files - Add support for the reload rc command - Other minor enhancements
PR: ports/126454
Submitted by: mm
Approved by: skv (maintainer)