This is Crypt::CBC, a Perl-only implementation of the cryptographic
cipher block chaining mode (CBC). In combination with a block cipher
such as DES or IDEA, you can encrypt and decrypt messages of
arbitrarily long length. The encrypted messages are compatible with
the encryption format used by the OpenSSL package.
security/p5-Crypt-CBC: update to 3.07
Major changes:
* Fix CVE-2025-2814 by using Crypt::URandom
* Fixed bug involving manually-specified key not being used in some
circumstances
* Fix decryption of ciphertext created with 'header' => 'randomiv'
* Fixed bug in which manually-specified key and -pkdf=>"none" was not having
effect
Full changelog: https://metacpan.org/dist/Crypt-CBC/changes
Security: CVE-2025-2814
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
Change the way Perl modules are installed, update the default Perl to 5.18.
Before, we had:
site_perl : lib/perl5/site_perl/5.18
site_perl/perl_arch : lib/perl5/site_perl/5.18/mach
perl_man3 : lib/perl5/5.18/man/man3
Now we have:
site_perl : lib/perl5/site_perl
site_arch : lib/perl5/site_perl/mach/5.18
perl_man3 : lib/perl5/site_perl/man/man3
Modules without any .so will be installed at the same place regardless of the
(Only the first 15 lines of the commit message are shown above )
- update from v2.15 to v2.17
Approved by: tobez (implicit)
2.17 Mon Jan 9 18:22:51 EST 2006
-IMPORTANT NOTE: Versions of this module prior to 2.17 were incorrectly
using 8 byte IVs when generating the old-style RandomIV style header
(as opposed to the new-style random salt header). This affects data
encrypted using the Rijndael algorithm, which has a 16 byte blocksize,
and is a significant security issue.
The bug has been corrected in versions 2.17 and higher by making it
impossible to use 16-byte block ciphers with RandomIV headers. You may
still read legacy encrypted data by explicitly passing the
-insecure_legacy_decrypt option to Crypt::CBC->new().
(Only the first 15 lines of the commit message are shown above )
conditionalize dependencies on modules included in perl 5.8
Make dependencies on modules included in the perl 5.8
distribution conditional on the perl version installed.
While I'm here, remove SITE_PERL and MAN(3)PREFIX.
PR: ports/50589
Submitted by: Erwin Lansing <erwin@lansing.dk>
Lots and lots of cleanups. Teach p5-* in general about PKGNAMEPREFIX. Add
some missing/wrong dependencies. Show how to respect CC/CFLAGS. Many
miscellaneous modifications. I used more excessive hacks to force p5-Jcode
and p5-WWW-Search to respect CC/CFLAGS.
