- escape shell namese99e060d34
tinc -- Buffer overflowentered 2018-10-09
Virtual Private Network (VPN) daemon
# pkg install tincinstalls 1.0.37 from latest; from quarterly (2026Q4) 1.0.37# cd /usr/ports/security/tinc && make install cleantinc, group tinc| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.0.37 | 1.0.37 | – |
| FreeBSD 15 | 1.0.37 | 1.0.37 | – |
| FreeBSD 14 | 1.0.37 | 1.0.37 | 1.0.37 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.0.37 | 1.0.37 | – |
| FreeBSD 14 | 1.0.37 | 1.0.37 | 1.0.37 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 1.0.37.| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2013-1428 | 6.5 | 2013-04-26 | VuXML · Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a d… |
- escape shell namese99e060d34
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.83eb2c3700- use /etc/rc.d/ipfilter quietresync PR: 163959 Submitted by: Nick Hibmad08b35d871
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav6f6fbe4bdf- update to 1.0.1699ea58b707
- update to 1.0.15 - remove duplicate LDFLAGS PR: 158292 Submitted by: Jin-Sih Lin7201f76960
- update to 1.0.1455e3ed41ef
- update tinc to build with lzo256182d975f
- LICENSE GPLv3cfbe99ab0b
- update to 1.0.1303a1333c70
- update to 1.0.123b13e66e59
- update to 1.0.112a8a0fa56c
- update to 1.0.10 - get rid of getttext3a3fa5384a
- add LICENSE:0a78365e08
- Update to 1.0.9aa893b636c
- fix reload and restart targets Submitted by:i igor <soft[at]antrax-energo.msk.ru>6f43108f08
- add tincd startup script Submitted by: igor <soft[at]antrax-energo.msk.ru>841046e4d5
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
- Remove CONFIGURE_TARGET hack in various bsd.*.mk
- USE_GNOME=gnometarget is now an no-op
Changes to individual ports, other than removing the CONFIGURE_TARGET hack:
= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
- comms/gnuradio
- science/abinit
- science/elmer-fem
- science/elmer-matc
- science/elmer-meshgen2d
- science/elmerfront
- science/elmerpost
= use x86_64 as ARCH
- devel/g-wrap
= other changes
- print/magicfilter
GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf
Total # of ports modified: 1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)
PR: 126524 (obsoletes 52917)
Submitted by: rafan
Tested on: two pointyhat 7-amd64 exp runs (by pav)
Approved by: portmgr (pav)741aa71483- Remove USE_GCC where it can be satisfied with base compiler on following FreeBSD versions: 5.3 and up, 6.x, 7.x, 8-CURRENTefa63f6ba4
Bump portrevision due to upgrade of devel/gettext. The affected ports are the ones with gettext as a run-dependency according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT in Makefile (29 of them). PR: ports/124340 Submitted by: edwin@ Approved by: portmgr (pav)090059a210
- take maintainershipb82d3d9d38
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script supports them. This is determined by running ``configure --help'' in do-configure target and set the shell variable _LATE_CONFIGURE_ARGS which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - PR: ports/111470 Approved by: portmgr Discussed with: stas (Mk/*), gerald (info related stuffs) Tested by: pointyhat exp runf935a609c5
- Update to 1.0.8 PR: 113747 Submitted by: Nils Vogels <nivo+kw+ports.bfa274@is-root.com>20be4043df
- Update to 1.0.7 PR: 108871 Submitted by: Martin Matuska <martin@matuska.org>bd1df1b959
Remove USE_REINPLACE from all categories starting with S28dd10dcb4
- Add SHA256d679262e6c
Drop maintainership, since I'm buried in the $REALLIFE stuff.6b4c016cab
- Backout latest commit, it needs a repocopy due to API change. Noticed by: Matthias Andree <matthias.andree@gmx.de>4f02559f47
- Bump lzo lib version. - Bump PORTREVISION.12a7f133fc
Update to 1.0.4d578809221
Fix WWW: line.42abae5ca6
Update to 1.0.313af6ab90a
Support WITHOUT_NLS6e262f48b3
Fix pidfile location PR: ports/68740 Submitted by: anholt94a6281fe9
- Fix MASTER_SITES PR: ports/67201 Submitted by: Roman Neuhauser <neuhauser@chello.cz>5e8d2728b1
- Remove USE_SIZE knob050450676e
Add USE_GETTEXT and bump PORTREVISION. Submitted by: trevor Tested by: bento186b8ba82f
- SIZEify5e147280ef
Now gettext 0.12.1 is gettext-old.78da40aa98
- Use LDFLAGSa13ac05dca
- Update to version 1.0.206d6d2eaae
- Fix extra " from last commit. pointy hat to me ... commited wrong work dir8318c98398
- don't clobber any given LDFLAGS resolves conflitcs with bsd.openssl.mk Approved by: krion97accc70e2
- Use LIBS in CONFIGURE_ENV Reported by: kris via bentod232206fe0
- Update to 1.0.1 - Take maintainership9e03f19df1
In OpenSSL 0.9.7, `OpenSSL_add_all_algorithms' is now a macro. This causes configure scripts that look for this function in libcrypto to lose. Use `OpenSSL_add_all_ciphers' instead (which is a function in both OpenSSL 0.9.6 and 0.9.7).581acb4611
De-pkg-comment.2c41b9e5f3
o Rollback PORTCOMMENT modifications while this feature's implementation is better studied o Turn PORTCOMMENT variable in Makefile back into pkg-comment files Approved by: kris (portmgr hat), portmgr, re (silence)f0a1969d34
Use PORTCOMMENT in the Makefile, and whack the pkg-comment. Approved by: patd9611f9375
build with only 1 info file PR: 42906 Submitted by: Ports Fury79f33bc538