Received: from mail.netbsd.org (mail.netbsd.org [204.152.190.11]) by www.NetBSD.org (Postfix) with ESMTP id 6918863C4ED for ; Mon, 21 Dec 2009 00:41:46 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 0) id E778163B21A; Mon, 21 Dec 2009 00:41:45 +0000 (UTC) Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd]) by mail.netbsd.org (Postfix) with ESMTP id DE20263B102 for ; Mon, 21 Dec 2009 00:41:43 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id C2B17175DD; Mon, 21 Dec 2009 00:41:43 +0000 (UTC) MIME-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: binary Content-Type: text/plain Date: Mon, 21 Dec 2009 00:41:43 +0000 From: Tonnerre Lombard Subject: CVS commit: pkgsrc/net/proftpd To: pkgsrc-changes@NetBSD.org Reply-To: tonnerre@netbsd.org X-Mailer: log_accum Message-Id: <20091221004143.C2B17175DD@cvs.netbsd.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: list Module Name: pkgsrc Committed By: tonnerre Date: Mon Dec 21 00:41:43 UTC 2009 Modified Files: pkgsrc/net/proftpd: Makefile PLIST distinfo Log Message: Upgrade proftpd to version 1.3.2c. Changes since version 1.3.2: * Added Taiwan translation. * Added a workaround in mod_tls to deal with the vulnerability found in SSL/TLS protocol during renegotiation (CVE-2009-3555). Good descriptions of this vulnerability can be found here: http://extendedsubset.com/?p=8 http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html The workaround implemented in mod_tls (Bug#3324) is one of the suggested mitigation approaches: the server now refuses all client-initiated SSL/TLS session renegotiations. * Bug and regression fixes. * Added French, Bulgarian, Korean translations. * Various bug and regression fixes. To generate a diff of this commit: cvs rdiff -u -r1.56 -r1.57 pkgsrc/net/proftpd/Makefile cvs rdiff -u -r1.19 -r1.20 pkgsrc/net/proftpd/PLIST cvs rdiff -u -r1.30 -r1.31 pkgsrc/net/proftpd/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.