aboutsummaryrefslogtreecommitdiff
path: root/security
Commit message (Collapse)AuthorAgeFilesLines
* MFH: r445141Antoine Brodin2017-07-065-9/+9
| | | | | | | Update to 3.6.3 Notes: svn path=/branches/2017Q3/; revision=445142
* MFH: r445028Carlos J. Puga Medina2017-07-063-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | security/libgcrypt: update to 1.7.8 - Update libgcrypt to 1.7.8 - Bump library version in pkg-plist Noteworthy changes in version 1.7.8 * Bug fixes: - Mitigate a flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster". For details see <https://eprint.iacr.org/2017/627>. [CVE-2017-7526] Changes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html Binary compatibility report: https://abi-laboratory.pro/tracker/compat_report/libgcrypt/1.7.7/1.7.8/95cc7/abi_compat_report.html PR: 220382 Exp-run by: antoine Security: https://www.vuxml.org/freebsd/ed3bf433-5d92-11e7-aa14-e8e0b747a45a.html Approved by: ports-secteam (junovitch) Notes: svn path=/branches/2017Q3/; revision=445135
* MFH: r445053Tobias Kortkamp2017-07-061-2/+10
| | | | | | | | | | | | | | | | | | | Only use enable-ec_nistp_64_gcc_128 on amd64 since it requires a 64-bit little-endian architecture and fix the build on !amd64 ecp_nistp224.c:43:9: error: unknown type name '__uint128_t' typedef __uint128_t uint128_t; /* nonstandard; implemented by gcc on 64-bit ^ PR: 220403 Reported by: dewayne@heuristicsystems.com.au Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D11436 Approved by: ports-secteam (blanket) Notes: svn path=/branches/2017Q3/; revision=445128
* MFH: r444987Jason Unovitch2017-07-062-5/+108
| | | | | | | | | | | | | | | | Updated to 2017.75 Changelog: https://matt.ucc.asn.au/dropbear/CHANGES PR: 220158 Submitted by: Piotr Kubaj <pkubaj@anongoth.pl> (maintainer) Reviewed by: lifanov (mentor) Approved by: ports-secteam (with hat), lifanov (mentor) Security: http://www.vuxml.org/freebsd/60931f98-55a7-11e7-8514-589cfc0654e1.html Differential Revision: https://reviews.freebsd.org/D11400 Notes: svn path=/branches/2017Q3/; revision=445122
* MFH: r444912 security/zeronet: Limit to Python 2.7Kubilay Kocak2017-07-031-1/+3
| | | | | | | | | | | | | | | | Zeronet doesn't support Python 3 [1]. Limit to compatible version(s) (2.7) accordingly. [1] https://github.com/HelloZeroNet/ZeroNet/issues/149 PR: 220302 Reported by: Peter Zuidema <peter icebear net> Submitted by: Yuri Victorovich <yuri rawbw com> (maintainer) Approved by: ports-secteam (blanket) Notes: svn path=/branches/2017Q3/; revision=444913
* Update to 1.2.1Sunpoet Po-Chuan Hsieh2017-06-303-14/+9
| | | | | | | | | Changes: https://github.com/lastpass/lastpass-cli/releases PR: 220362 Submitted by: Thomas Hurst <tom@hur.st> (maintainer) Notes: svn path=/head/; revision=444808
* Update to 0.31Sunpoet Po-Chuan Hsieh2017-06-302-6/+4
| | | | | | | | | - Remove BROKEN_SSL=openssl-devel Changes: http://search.cpan.org/dist/POE-Filter-SSL/Changes Notes: svn path=/head/; revision=444804
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-301-5/+4
| | | | | | | | | | | | | - While I'm here: - Add NO_ARCH - Remove IPV6 option: which is no-op now - Convert to options target helper - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444803
* New port: security/testssl.shTobias Kortkamp2017-06-305-0/+115
| | | | | | | | | | | | | | | | | | | | | | | | testssl.sh is a command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Key features: - Clear output: you can tell easily whether anything is good or bad - Flexibility: You can test any SSL/TLS enabled and STARTTLS service, not only webservers at port 443 - Toolbox: Several command line options help you to run YOUR test and configure YOUR output - Reliability: features are tested thoroughly - Verbosity: If a particular check cannot be performed because of a missing capability on your client side, you'll get a warning - Privacy: It's only you who sees the result, not a third party WWW: https://github.com/drwetter/testssl.sh Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D11406 Notes: svn path=/head/; revision=444763
* Update to 4.1.2Sunpoet Po-Chuan Hsieh2017-06-302-4/+4
| | | | | | | | Changes: https://github.com/google/oauth2client/releases https://github.com/google/oauth2client/blob/master/CHANGELOG.md Notes: svn path=/head/; revision=444722
* - Document libgcrypt side-channel attack on RSA secret keysCarlos J. Puga Medina2017-06-301-0/+26
| | | | | | | Security: CVE-2017-7526 Notes: svn path=/head/; revision=444715
* Document GitLab vulnerabilitiesTorsten Zuehlsdorff2017-06-301-0/+66
| | | | Notes: svn path=/head/; revision=444714
* - Update to 0.3.1.4-alphaDmitry Marakasov2017-06-302-4/+4
| | | | | | | | | PR: 220372 Submitted by: yuri@rawbw.com (maintainer) Security: CVE-2017-0377 Notes: svn path=/head/; revision=444709
* - Update to 0.3.0.9Dmitry Marakasov2017-06-302-6/+5
| | | | | | | | | PR: 220373 Submitted by: yuri@rawbw.com (maintainer) Security: CVE-2017-0377 Notes: svn path=/head/; revision=444708
* - Document tor security regressionDmitry Marakasov2017-06-301-0/+36
| | | | | | | Security: CVE-2017-0377 Notes: svn path=/head/; revision=444707
* security/vuxml: Correct apache22 versionBernard Spil2017-06-301-1/+1
| | | | | | | | | - vulns fixed in unreleased 2.2.33 Reported by: filis (irc) Notes: svn path=/head/; revision=444699
* Fix testSteve Wills2017-06-291-3/+1
| | | | | | | Reported by: mat Notes: svn path=/head/; revision=444690
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-291-1/+2
| | | | | | | | | | - While I'm here, add NO_ARCH - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444682
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-291-2/+6
| | | | | | | | | | | | - While I'm here: - Add LICENSE - Add NO_ARCH - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444681
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-291-2/+2
| | | | | | | | | - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444680
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-291-8/+6
| | | | | | | | | - Add LICENSE_FILE - Add NO_ARCH - Bump PORTREVISION for dependency change Notes: svn path=/head/; revision=444679
* security/boringssl: create portSteve Wills2017-06-298-0/+146
| | | | | | | | | Fork of OpenSSL that is designed to meet Google's needs WWW: https://github.com/google/boringssl Notes: svn path=/head/; revision=444652
* Update yara and py-yara to 3.6.2Antoine Brodin2017-06-296-20/+9
| | | | Notes: svn path=/head/; revision=444646
* - Update security/polarssl13 to 1.3.20.Tijl Coosemans2017-06-295-9/+9
| | | | | | | | | | - Update security/mbedtls to 2.5.1. PR: 220345 Submitted by: takefu@airport.fm Notes: svn path=/head/; revision=444627
* Set DEPRECATED and EXPIRATION_DATE for ports which were only createdTorsten Zuehlsdorff2017-06-281-0/+3
| | | | | | | for www/gitlab. With the update to GitLab 9.0 they are no longer needed. Notes: svn path=/head/; revision=444557
* security/pecl-ssh2: Update to 1.1.1Danilo G. Baio2017-06-272-4/+4
| | | | | | | | | | | | | | | | | | | | | Changelog: - Version 1.1.1 is same as 1.1 except this release contains this changelog - Fixed bug #72988 (Libor M.) - Fixed bug #73198 (Langemeijer) - Fixed php_url_parse issue (Remi Collet) - fix Invalid write of size 1 (Remi Collet) - Fixed bug #73819 (Mitch Hagstrand) - Fixed bug #73410 (Mitch Hagstrand) - Travis CI (Mitch Hagstrand) - Various other fixes on PHP 7 code and code cleanup (Mitch Hagstrand, Libor M., Anatol Belski) Approved by: garga (mentor) Differential Revision: https://reviews.freebsd.org/D11375 Notes: svn path=/head/; revision=444527
* Fix the way ${PREFIX}/etc/sudoers.d is handled removing the workaround added inRenato Botelho2017-06-272-3/+2
| | | | | | | | | | | r260609 and using @dir PR: 220234 Submitted by: Jose Luis Duran <jlduran@gmail.com> Sponsored by: Rubicon Communications (Netgate) Notes: svn path=/head/; revision=444464
* Update devel/readline to 7.0 patch 3Sunpoet Po-Chuan Hsieh2017-06-2714-10/+14
| | | | | | | | | | | | | | - Bump PORTREVISION for shlib change Changes: https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html Differential Revision: https://reviews.freebsd.org/D11172 PR: 219947 Exp-run by: antoine Notes: svn path=/head/; revision=444463
* Horde package update:Martin Matuska2017-06-274-8/+8
| | | | | | | | | | | | | | | | | | security/pear-Horde_Auth 2.2.1 -> 2.2.2 devel/pear-Horde_Cli 2.2.3 -> 2.2.4 devel/pear-Horde_Core 2.29.0 -> 2.29.1 security/pear-Horde_Crypt 2.7.8 -> 2.7.9 dns/pear-Horde_Idna 1.1.0 -> 1.1.1 graphics/pear-Horde_Image 2.5.0 -> 2.5.1 mail/pear-Horde_Imap_Client 2.29.12 -> 2.29.13 textproc/pear-Horde_JavascriptMinify 1.1.3 -> 1.1.4 mail/pear-Horde_ListHeaders 1.2.4 -> 1.2.5 mail/pear-Horde_Mail 2.6.3 -> 2.6.4 mail/pear-Horde_Smtp 1.9.4 -> 1.9.5 devel/horde-whups 3.0.9 -> 3.0.10 Notes: svn path=/head/; revision=444450
* Sort ARCHS. While here, pet portlint.Mark Linimon2017-06-271-1/+1
| | | | | | | Approved by: portmgr (tier-2 blanket) Notes: svn path=/head/; revision=444437
* Sort ARCHS. Pet portlint.Mark Linimon2017-06-261-1/+1
| | | | | | | Approved by: portmgr (tier-2 blanket) Notes: svn path=/head/; revision=444433
* Update to 2.3.0Carlo Strub2017-06-262-4/+4
| | | | Notes: svn path=/head/; revision=444413
* * Updated to 0.5.6Richard Gallamore2017-06-263-5/+13
| | | | | | | | | | | | | Changelog: https://github.com/HelloZeroNet/ZeroNet/releases/tag/v0.5.6 PR: 220123 Submitted by: Yuri Victorovich <yuri@rawbw.com> (maintainer) Reviewed by: lifanov (mentor), matthew (mentor) Approved by: lifanov (mentor), matthew (mentor) Differential Revision: https://reviews.freebsd.org/D11357 Notes: svn path=/head/; revision=444378
* security/py-{acme,certbot}: fix missing dependency on py-mockCarlos J. Puga Medina2017-06-264-0/+38
| | | | | | | | | | | | | | | | Common: - Move py-mock requirement to dev_extras in setup.py - Bump PORTREVISION PR: 220274 Submitted by: cpm Reported by: Randy Westlund <rwestlun@gmail.com> Approved by: koobs (maintainer, py-certbot) MFH: 2017Q2 Notes: svn path=/head/; revision=444364
* Remove Perl core modulesSunpoet Po-Chuan Hsieh2017-06-261-7/+8
| | | | | | | | | | | | | | - While I'm here: - Remove MASTER_SITES - Add missing OPTIONS_DEFINE=DOCS - Fix indent - Convert to options target helper - Bump PORTREVISION for dependency change With hat: perl Notes: svn path=/head/; revision=444344
* - Update to 10.4.0Wen Heping2017-06-262-4/+4
| | | | | | | | PR: 220269 Submitted by: douglas@douglasthrift.net(maintainer) Notes: svn path=/head/; revision=444330
* Make ninja opt-out in cmake.mkTobias C. Berner2017-06-252-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Using ninja instead of make (1) can lead to significant speed ups while building. Therefore switch from having the ninja generator opt-in to having it opt-out. Previously cmake-ports that wanted to use ninja could set CMAKE_NINJA=yes now, ports that do not work with ninja can set cmake:<existing args>,noninja Note, that needing this should be an exception and most often points to a broken cmake of the port. The ports using cmake were modified * removed USES=gmake, if ninja is used * removed MAKE_ARGS, if ninja is used * added the cmake-argument noninja if necessary PR: 219629 PR: 213331 Exp-run by: antoine Reviewed by: rakuco Differential Revision: https://reviews.freebsd.org/D10748 Notes: svn path=/head/; revision=444324
* Update to 20170618Antoine Brodin2017-06-253-15/+4
| | | | Notes: svn path=/head/; revision=444260
* Begin deorbit burn of ia64. We have not attempted to build packages forMark Linimon2017-06-2511-21/+12
| | | | | | | | | | | it for many years. While here, alphabetize ARCHs, pet portlint, and modernize usages. Approved by: portmgr (tier-2 blanket) Notes: svn path=/head/; revision=444251
* Update to 4.14.28Antoine Brodin2017-06-242-4/+5
| | | | Notes: svn path=/head/; revision=444248
* Update to 0.1.4Antoine Brodin2017-06-242-4/+4
| | | | Notes: svn path=/head/; revision=444247
* Update to 0.1.9Antoine Brodin2017-06-242-4/+4
| | | | Notes: svn path=/head/; revision=444246
* Update to 2.1.9Antoine Brodin2017-06-242-4/+4
| | | | Notes: svn path=/head/; revision=444245
* Update to 3.15.0Antoine Brodin2017-06-243-7/+19
| | | | | | | | PR: 219904 Approved by: maintainer timeout (2 weeks) Notes: svn path=/head/; revision=444244
* Update to 2.0.3Antoine Brodin2017-06-242-4/+4
| | | | Notes: svn path=/head/; revision=444242
* security/py-{acme,certbot}: update to 0.15.0Carlos J. Puga Medina2017-06-248-129/+14
| | | | | | | | | | | | | | | | | Common: - Update PORTVERSION and distinfo checksum (0.15.0) - Update RUN/TEST dependencies - Remove unnecessary patches (applied upstream) Changes: https://github.com/certbot/certbot/blob/master/CHANGELOG.md#0150---2017-06-08 Reviewed by: koobs Approved by: koobs (maintainer, py-certbot) Differential Revision: https://reviews.freebsd.org/D10612 Notes: svn path=/head/; revision=444208
* Document Stack Clash vulnerability related to EximVsevolod Stakhov2017-06-211-0/+27
| | | | Notes: svn path=/head/; revision=444084
* Document pear-Horde_Image vulnerabilities.Martin Matuska2017-06-211-0/+57
| | | | | | | | Security: CVE-2017-9773 Security: CVE-2017-9774 Notes: svn path=/head/; revision=444077
* Update to latest versionJosh Paetzel2017-06-212-5/+5
| | | | | | | | PR: 220183 Submitted by: ecrist@secure-computing.net Notes: svn path=/head/; revision=444072
* OpenVPN security update to 2.4.3Matthias Andree2017-06-212-4/+4
| | | | | | | | | | | | | | | | | | | | OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In the process several vulnerabilities were found, some of which are remotely exploitable in certain circumstances. Compared to OpenVPN 2.4.2 there are several bugfixes and one major feature: support for building with OpenSSL 1.1. MFH: 2017Q3 (preapproved by Xin Li) Security: 9f65d382-56a4-11e7-83e3-080027ef73ec Security: CVE-2017-7508 Security: CVE-2017-7512 Security: CVE-2017-7520 Security: CVE-2017-7521 Security: CVE-2017-7522 Notes: svn path=/head/; revision=444043
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-15 18:38:11 +0000