Pullup ticket #4432 - requested by obache
emulators/suse131_openssl: security update

Revisions pulled up:
- emulators/suse131_openssl/Makefile                            1.9
- emulators/suse131_openssl/distinfo                            1.9

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Jun  6 09:53:29 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_openssl: Makefile distinfo

   Log Message:
   Apply openSUSE-SU-2014:0764-1
   openSUSE Security Update: openssl: update to version 1.0.1h

   Description:

      The openssl library was updated to version 1.0.1h fixing various security
      issues and bugs:

      Security issues fixed:
      - CVE-2014-0224: Fix for SSL/TLS MITM flaw. An attacker using a carefully
        crafted handshake can force the use of weak keying material in OpenSSL
        SSL/TLS clients and servers.
      - CVE-2014-0221: Fix DTLS recursion flaw. By sending an invalid DTLS
        handshake to an OpenSSL DTLS client the code can be made to recurse
        eventually crashing in a DoS attack.
      - CVE-2014-0195: Fix DTLS invalid fragment vulnerability. A buffer
        overrun attack can be triggered by sending invalid DTLS fragments to an
         OpenSSL DTLS client or server. This is potentially exploitable to run
         arbitrary code on a vulnerable client or server.
      - CVE-2014-3470: Fix bug in TLS code where clients enable anonymous ECDH
        ciphersuites are subject to a denial of service attack.

   Bump PKGREVISION.
Pullup ticket #4432.
Pullup ticket #4435 - requested by tron
net/wireshark: security update

Revisions pulled up:
- net/wireshark/Makefile                                        1.123
- net/wireshark/distinfo                                        1.75

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Sat Jun 14 09:17:51 UTC 2014

   Modified Files:
   	pkgsrc/net/wireshark: Makefile distinfo

   Log Message:
   Update "wireshark" package to version 1.10.8. Changes since 1.10.7:
   - The following vulnerabilities have been fixed.
       * wnpa-sec-2014-07
         The frame metadissector could crash. (Bug 9999, Bug 10030)
         Versions affected: 1.10.0 to 1.10.7
         CVE-2014-4020
   = The following bugs have been fixed:
       * VoIP flow graph crash upon opening. (Bug 9179)
       * Tshark with "-F pcap" still generates a pcapng file. (Bug 9991)
       * IPv6 Next Header 0x3d recognized as SHIM6. (Bug 9995)
       * Failed to export pdml on large pcap. (Bug 10081)
       * TCAP: set a fence on info column after calling sub
         dissector (Bug 10091)
       * Dissector bug in JSON protocol. (Bug 10115)
       * GSM RLC MAC: do not skip too many lines of the CSN_DESCR
         when the field is missing (Bug 10120)
       * Wireshark PEEKREMOTE incorrectly decoding QoS data packets
         from Cisco Sniffer APs. (Bug 10139)
       * IEEE 802.11: fix dissection of HT Capabilities (Bug 10166)
   - Updated Protocol Support
     CIP, EtherNet/IP, GSM RLC MAC, IEEE 802.11, IPv6, and TCAP
   - New and Updated Capture File Support
     pcap-ng, and PEEKREMOTE


   To generate a diff of this commit:
   cvs rdiff -u -r1.122 -r1.123 pkgsrc/net/wireshark/Makefile
   cvs rdiff -u -r1.74 -r1.75 pkgsrc/net/wireshark/distinfo
pullup #4435