summaryrefslogtreecommitdiff
path: root/security
Commit message (Collapse)AuthorAgeFilesLines
* MFH: r445992Kurt Jaeger2017-08-301-0/+2
| | | | | | | | | | | | security/softether: Add conflict with softether-devel PR: 219136 Submitted by: Franco Fichtner <franco@opnsense.org> Approved by: net@arrishq.net (maintainer) Approved by: portmgr (blanket approval) Notes: svn path=/branches/2017Q3/; revision=448959
* MFH: r445423 r447458Mark Felder2017-08-174-12/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | security/py-{acme,certbot}: Update to 0.16.0 Common: - Update PORTVERSION and distinfo checksum (0.16.0) Changelog: https://github.com/certbot/certbot/blob/master/CHANGELOG.md#0160---2017-07-05 Reviewed by: koobs (maintainer, py-certbot) Approved by: koobs (maintainer, py-certbot) Differential Revision: https://reviews.freebsd.org/D11517 security/py-certbot: Relax Python version-spec, support Python 3.x certbot has supported Python 3 (3.3+) since the 0.14.0 release [1]. Update the USES=python:<version-spec> to match, allowing Python 3 builds. [2] Update acme (security/py-acme) RUN_DEPENDS entry to use PORTVERSION not PKGVERSION (that includes PORTEPOCH/PORTREVISION) which caused the dependency to be incorrectly reported as unsatisfied if either was defined. Further, since *_DEPENDS version-specifiers compare against installed package versions, only a version that includes PORTEPOCH and/or PORTREVISION is available, so use >= not ==. [3] While I'm here, enable 'concurrent' to automatically produce version-suffixed files. [1] https://github.com/certbot/certbot/issues/4507 PR: 220469 221043 [3] Submitted by: Kamigishi Rei <spambox haruhiism net> [2] Reported by: amdmi3 [3] Approved by: ports-secteam (with hat) Notes: svn path=/branches/2017Q3/; revision=448093
* MFH: r447784Bryan Drewery2017-08-112-1/+27
| | | | | | | | | | | | | | | | | | - Fix sudo sending a 2nd SIGINFO on ^T to processes, which is already handled by the kernel sending it to the entire controlling terminal's process group. - This fixes ^T with 'sudo poudriere ...' showing a status log twice. - This is intended to be upstreamed. Approved by: garga (maintainer) Tested by: swills, bdrewery Reviewed/Discussed with: kib Reported by: kwm, swills, bapt, dim, kib, many others Approved by: portmgr (implicit) Notes: svn path=/branches/2017Q3/; revision=447785
* MFH: r446857Mark Felder2017-08-034-8/+8
| | | | | | | | | | | | | security/nss: update to 3.32 Changes: https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes Changes: https://hg.mozilla.org/projects/nss/shortlog/NSS_3_32_RTM ABI: https://abi-laboratory.pro/tracker/timeline/nss/ Approved by: port-secteam (with hat) Notes: svn path=/branches/2017Q3/; revision=447225
* MFH: r447018Carlos J. Puga Medina2017-08-011-0/+1
| | | | | | | | | | | | | - Fix the command line munging for jitterbase PR: 220937 Reported by: O. Hartmann <ohartmann@walstatt.org> Obtained from: https://dev.gnupg.org/rCac39522ab08fcd2483edc223334c6ab9d19e91f3 Approved by: ports-secteam (blanket) Notes: svn path=/branches/2017Q3/; revision=447019
* MFH: r446350Carlos J. Puga Medina2017-07-232-72/+0
| | | | | | | | | | | - Remove unnecessary extra-patch-aarch64 (applied upstream) Reported by: Shawn Webb <shawn.webb@hardenedbsd.org> via email Approved by: ports-secteam (blanket) Notes: svn path=/branches/2017Q3/; revision=446495
* MFH: r446306Carlos J. Puga Medina2017-07-233-7/+7
| | | | | | | | | | | | | | | | | | | security/libgcrypt: update to 1.8.0 - Update libgcrypt to 1.8.0 - Update libgpg-error version required to 1.25 - Bump library version in pkg-plist Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q3/000410.html Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.8/1.8.0/d9ddd/abi_compat_report.html PR: 220858 Exp-run by: antoine Approved by: ports-secteam (feld) Notes: svn path=/branches/2017Q3/; revision=446494
* MFH: r446260Adam Weinberger2017-07-222-5/+4
| | | | | | | | | | | Update to 1.4.22. Security: CVE-2017-7526 Approved by: ports-secteam (miwi) Notes: svn path=/branches/2017Q3/; revision=446404
* MFH: r446193Olivier Cochard2017-07-203-81/+4
| | | | | | | | | | | | | Update strongswan to 5.5.3 PR: 220823 Submitted by: strongswan@Nanoteq.com (maintainer) Reported by: i.dani@outlook.com Approved by: ports-secteam Notes: svn path=/branches/2017Q3/; revision=446295
* MFH: r446078 r446079Danilo G. Baio2017-07-184-11/+28
| | | | | | | | | | | | | | | | | | | | | | security/softhsm2: Update to 2.3.0, Fix build with SQLITE3 storage backend Disable support for GOST if openssl-devel is used Add option SQLITE (optional) to fix build with SQLITE3 storage backend [1] While here: Add LICENSE_FILE Add USES= ssl (Q/A warning) PR: 220744 PR: 218701 [1] Submitted by: jaap@NLnetLabs.nl (maintainer) Submitted by: sergey@akhmatov.ru [1] Approved by: ports-secteam (junovitch), garga (mentor) Differential Revision: https://reviews.freebsd.org/D11607 Notes: svn path=/branches/2017Q3/; revision=446138
* MFH: r445719Carlos J. Puga Medina2017-07-146-6/+81
| | | | | | | | | | | | | | | | | security/keepassxc: update to 2.2.0 - Add YUBIKEY option because keepassxc has added support for YubiKey 2FA - Update pkg-descr to reflect the new added changes Changelog: https://github.com/keepassxreboot/keepassxc/blob/develop/CHANGELOG PR: 220585 Submitted by: Andrew Romanenko <melanhit@gmail.com> (maintainer) Approved by: ports-secteam (junovitch) Notes: svn path=/branches/2017Q3/; revision=445742
* MFH: r445581Fukang Chen2017-07-132-6/+12
| | | | | | | | | | | | | | | | | | | | | security/py-pyptlib: Fix checksum mismatch, remove BROKEN - Switch MASTER_SITE to CHEESESHOP - Add NO_ARCH - Add LICENSE_FILE - Sort USE_PYTHON - Add regression test PR: 220669 Reviewed by: koobs Approved by: koobs (ports) Approved by: portmgr (blanket) Differential Revision: https://reviews.freebsd.org/D11562 Approved by: junovitch Notes: svn path=/branches/2017Q3/; revision=445632
* MFH: r445141Antoine Brodin2017-07-065-9/+9
| | | | | | | Update to 3.6.3 Notes: svn path=/branches/2017Q3/; revision=445142
* MFH: r445028Carlos J. Puga Medina2017-07-063-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | security/libgcrypt: update to 1.7.8 - Update libgcrypt to 1.7.8 - Bump library version in pkg-plist Noteworthy changes in version 1.7.8 * Bug fixes: - Mitigate a flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster". For details see <https://eprint.iacr.org/2017/627>. [CVE-2017-7526] Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.7/1.7.8/95cc7/abi_compat_report.html PR: 220382 Exp-run by: antoine Security: https://www.vuxml.org/freebsd/ed3bf433-5d92-11e7-aa14-e8e0b747a45a.html Approved by: ports-secteam (junovitch) Notes: svn path=/branches/2017Q3/; revision=445135
* MFH: r445053Tobias Kortkamp2017-07-061-2/+10
| | | | | | | | | | | | | | | | | | | Only use enable-ec_nistp_64_gcc_128 on amd64 since it requires a 64-bit little-endian architecture and fix the build on !amd64 ecp_nistp224.c:43:9: error: unknown type name '__uint128_t' typedef __uint128_t uint128_t; /* nonstandard; implemented by gcc on 64-bit ^ PR: 220403 Reported by: dewayne@heuristicsystems.com.au Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D11436 Approved by: ports-secteam (blanket) Notes: svn path=/branches/2017Q3/; revision=445128
* MFH: r444987Jason Unovitch2017-07-062-5/+108
| | | | | | | | | | | | | | | | Updated to 2017.75 Changelog: https://matt.ucc.asn.au/dropbear/CHANGES PR: 220158 Submitted by: Piotr Kubaj <pkubaj@anongoth.pl> (maintainer) Reviewed by: lifanov (mentor) Approved by: ports-secteam (with hat), lifanov (mentor) Security: http://www.vuxml.org/freebsd/60931f98-55a7-11e7-8514-589cfc0654e1.html Differential Revision: https://reviews.freebsd.org/D11400 Notes: svn path=/branches/2017Q3/; revision=445122
* MFH: r444912 security/zeronet: Limit to Python 2.7Kubilay Kocak2017-07-031-1/+3
| | | | | | | | | | | | | | | | Zeronet doesn't support Python 3 [1]. Limit to compatible version(s) (2.7) accordingly. [1] https://github.com/HelloZeroNet/ZeroNet/issues/149 PR: 220302 Reported by: Peter Zuidema <peter icebear net> Submitted by: Yuri Victorovich <yuri rawbw com> (maintainer) Approved by: ports-secteam (blanket) Notes: svn path=/branches/2017Q3/; revision=444913
* Update to 1.2.1Sunpoet Po-Chuan Hsieh2017-06-303-14/+9
| | | | | | | | | Changes: https://github.com/lastpass/lastpass-cli/releases PR: 220362 Submitted by: Thomas Hurst <tom@hur.st> (maintainer) Notes: svn path=/head/; revision=444808
* Update to 0.31Sunpoet Po-Chuan Hsieh2017-06-302-6/+4
| | | | | | | | | - Remove BROKEN_SSL=openssl-devel Changes: http://search.cpan.org/dist/POE-Filter-SSL/Changes Notes: svn path=/head/; revision=444804
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-301-5/+4
| | | | | | | | | | | | | - While I'm here: - Add NO_ARCH - Remove IPV6 option: which is no-op now - Convert to options target helper - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444803
* New port: security/testssl.shTobias Kortkamp2017-06-305-0/+115
| | | | | | | | | | | | | | | | | | | | | | | | testssl.sh is a command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Key features: - Clear output: you can tell easily whether anything is good or bad - Flexibility: You can test any SSL/TLS enabled and STARTTLS service, not only webservers at port 443 - Toolbox: Several command line options help you to run YOUR test and configure YOUR output - Reliability: features are tested thoroughly - Verbosity: If a particular check cannot be performed because of a missing capability on your client side, you'll get a warning - Privacy: It's only you who sees the result, not a third party WWW: https://github.com/drwetter/testssl.sh Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D11406 Notes: svn path=/head/; revision=444763
* Update to 4.1.2Sunpoet Po-Chuan Hsieh2017-06-302-4/+4
| | | | | | | | Changes: https://github.com/google/oauth2client/releases https://github.com/google/oauth2client/blob/master/CHANGELOG.md Notes: svn path=/head/; revision=444722
* - Document libgcrypt side-channel attack on RSA secret keysCarlos J. Puga Medina2017-06-301-0/+26
| | | | | | | Security: CVE-2017-7526 Notes: svn path=/head/; revision=444715
* Document GitLab vulnerabilitiesTorsten Zuehlsdorff2017-06-301-0/+66
| | | | Notes: svn path=/head/; revision=444714
* - Update to 0.3.1.4-alphaDmitry Marakasov2017-06-302-4/+4
| | | | | | | | | PR: 220372 Submitted by: yuri@rawbw.com (maintainer) Security: CVE-2017-0377 Notes: svn path=/head/; revision=444709
* - Update to 0.3.0.9Dmitry Marakasov2017-06-302-6/+5
| | | | | | | | | PR: 220373 Submitted by: yuri@rawbw.com (maintainer) Security: CVE-2017-0377 Notes: svn path=/head/; revision=444708
* - Document tor security regressionDmitry Marakasov2017-06-301-0/+36
| | | | | | | Security: CVE-2017-0377 Notes: svn path=/head/; revision=444707
* security/vuxml: Correct apache22 versionBernard Spil2017-06-301-1/+1
| | | | | | | | | - vulns fixed in unreleased 2.2.33 Reported by: filis (irc) Notes: svn path=/head/; revision=444699
* Fix testSteve Wills2017-06-291-3/+1
| | | | | | | Reported by: mat Notes: svn path=/head/; revision=444690
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-291-1/+2
| | | | | | | | | | - While I'm here, add NO_ARCH - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444682
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-291-2/+6
| | | | | | | | | | | | - While I'm here: - Add LICENSE - Add NO_ARCH - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444681
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-291-2/+2
| | | | | | | | | - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444680
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-291-8/+6
| | | | | | | | | - Add LICENSE_FILE - Add NO_ARCH - Bump PORTREVISION for dependency change Notes: svn path=/head/; revision=444679
* security/boringssl: create portSteve Wills2017-06-298-0/+146
| | | | | | | | | Fork of OpenSSL that is designed to meet Google's needs WWW: https://github.com/google/boringssl Notes: svn path=/head/; revision=444652
* Update yara and py-yara to 3.6.2Antoine Brodin2017-06-296-20/+9
| | | | Notes: svn path=/head/; revision=444646
* - Update security/polarssl13 to 1.3.20.Tijl Coosemans2017-06-295-9/+9
| | | | | | | | | | - Update security/mbedtls to 2.5.1. PR: 220345 Submitted by: takefu@airport.fm Notes: svn path=/head/; revision=444627
* Set DEPRECATED and EXPIRATION_DATE for ports which were only createdTorsten Zuehlsdorff2017-06-281-0/+3
| | | | | | | for www/gitlab. With the update to GitLab 9.0 they are no longer needed. Notes: svn path=/head/; revision=444557
* security/pecl-ssh2: Update to 1.1.1Danilo G. Baio2017-06-272-4/+4
| | | | | | | | | | | | | | | | | | | | | Changelog: - Version 1.1.1 is same as 1.1 except this release contains this changelog - Fixed bug #72988 (Libor M.) - Fixed bug #73198 (Langemeijer) - Fixed php_url_parse issue (Remi Collet) - fix Invalid write of size 1 (Remi Collet) - Fixed bug #73819 (Mitch Hagstrand) - Fixed bug #73410 (Mitch Hagstrand) - Travis CI (Mitch Hagstrand) - Various other fixes on PHP 7 code and code cleanup (Mitch Hagstrand, Libor M., Anatol Belski) Approved by: garga (mentor) Differential Revision: https://reviews.freebsd.org/D11375 Notes: svn path=/head/; revision=444527
* Fix the way ${PREFIX}/etc/sudoers.d is handled removing the workaround added inRenato Botelho2017-06-272-3/+2
| | | | | | | | | | | r260609 and using @dir PR: 220234 Submitted by: Jose Luis Duran <jlduran@gmail.com> Sponsored by: Rubicon Communications (Netgate) Notes: svn path=/head/; revision=444464
* Update devel/readline to 7.0 patch 3Sunpoet Po-Chuan Hsieh2017-06-2714-10/+14
| | | | | | | | | | | | | | - Bump PORTREVISION for shlib change Changes: https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html Differential Revision: https://reviews.freebsd.org/D11172 PR: 219947 Exp-run by: antoine Notes: svn path=/head/; revision=444463
* Horde package update:Martin Matuska2017-06-274-8/+8
| | | | | | | | | | | | | | | | | | security/pear-Horde_Auth 2.2.1 -> 2.2.2 devel/pear-Horde_Cli 2.2.3 -> 2.2.4 devel/pear-Horde_Core 2.29.0 -> 2.29.1 security/pear-Horde_Crypt 2.7.8 -> 2.7.9 dns/pear-Horde_Idna 1.1.0 -> 1.1.1 graphics/pear-Horde_Image 2.5.0 -> 2.5.1 mail/pear-Horde_Imap_Client 2.29.12 -> 2.29.13 textproc/pear-Horde_JavascriptMinify 1.1.3 -> 1.1.4 mail/pear-Horde_ListHeaders 1.2.4 -> 1.2.5 mail/pear-Horde_Mail 2.6.3 -> 2.6.4 mail/pear-Horde_Smtp 1.9.4 -> 1.9.5 devel/horde-whups 3.0.9 -> 3.0.10 Notes: svn path=/head/; revision=444450
* Sort ARCHS. While here, pet portlint.Mark Linimon2017-06-271-1/+1
| | | | | | | Approved by: portmgr (tier-2 blanket) Notes: svn path=/head/; revision=444437
* Sort ARCHS. Pet portlint.Mark Linimon2017-06-261-1/+1
| | | | | | | Approved by: portmgr (tier-2 blanket) Notes: svn path=/head/; revision=444433
* Update to 2.3.0Carlo Strub2017-06-262-4/+4
| | | | Notes: svn path=/head/; revision=444413
* * Updated to 0.5.6Richard Gallamore2017-06-263-5/+13
| | | | | | | | | | | | | Changelog: https://github.com/HelloZeroNet/ZeroNet/releases/tag/v0.5.6 PR: 220123 Submitted by: Yuri Victorovich <yuri@rawbw.com> (maintainer) Reviewed by: lifanov (mentor), matthew (mentor) Approved by: lifanov (mentor), matthew (mentor) Differential Revision: https://reviews.freebsd.org/D11357 Notes: svn path=/head/; revision=444378
* security/py-{acme,certbot}: fix missing dependency on py-mockCarlos J. Puga Medina2017-06-264-0/+38
| | | | | | | | | | | | | | | | Common: - Move py-mock requirement to dev_extras in setup.py - Bump PORTREVISION PR: 220274 Submitted by: cpm Reported by: Randy Westlund <rwestlun@gmail.com> Approved by: koobs (maintainer, py-certbot) MFH: 2017Q2 Notes: svn path=/head/; revision=444364
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-261-7/+8
| | | | | | | | | | | | | | - While I'm here: - Remove MASTER_SITES - Add missing OPTIONS_DEFINE=DOCS - Fix indent - Convert to options target helper - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444344
* - Update to 10.4.0Wen Heping2017-06-262-4/+4
| | | | | | | | PR: 220269 Submitted by: douglas@douglasthrift.net(maintainer) Notes: svn path=/head/; revision=444330
* Make ninja opt-out in cmake.mkTobias C. Berner2017-06-252-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Using ninja instead of make (1) can lead to significant speed ups while building. Therefore switch from having the ninja generator opt-in to having it opt-out. Previously cmake-ports that wanted to use ninja could set CMAKE_NINJA=yes now, ports that do not work with ninja can set cmake:<existing args>,noninja Note, that needing this should be an exception and most often points to a broken cmake of the port. The ports using cmake were modified * removed USES=gmake, if ninja is used * removed MAKE_ARGS, if ninja is used * added the cmake-argument noninja if necessary PR: 219629 PR: 213331 Exp-run by: antoine Reviewed by: rakuco Differential Revision: https://reviews.freebsd.org/D10748 Notes: svn path=/head/; revision=444324
* Update to 20170618Antoine Brodin2017-06-253-15/+4
| | | | Notes: svn path=/head/; revision=444260
generated by cgit v1.3 (git 2.53.0) at 2026-09-02 19:33:22 +0000