Commit graph

19891 commits

Author SHA1 Message Date
Adam Weinberger
35650d71bf Add devel/liballium and security/obfsclient.
liballium attempts to reduce the amount of boilerplate code required to
implement pluggable transports for Tor in C or C++.

WWW: https://github.com/yawning/liballium

obfsclient is a C++11 Tor-managed pluggable transport client
implementation of the following protocols:

obfs2 - The Twobfuscator
obfs3 - The Threebfuscator
ScrambleSuit - Experimental

WWW: https://github.com/yawning/obfsclient

PR:		187926, 187927
Submitted by:	fk@fabiankeil.de
2014-08-23 14:43:06 +00:00
John Marino
f0ab4465c8 security/xzid: suppress broken and unnecesary missing target check
Line 606 of the vendor Makefile has a malformed error message that comes
up if the makefile is given no target.  For reasons I don't understand,
the gmake on FreeBSD tolerates it and the same exact gmake on DragonFly
catches it.  Just amend the sed command the remove the line completely
as it's never executed in the ports framework.
2014-08-23 13:13:26 +00:00
Olli Hauer
0b09f5bfe6 - update to 6.4.7
- add CPE entry
- sort pkg-plist

Changelog (entries related to the command line tools)

Nmap 6.47 [2014-08-20]

o Integrated all of your IPv4 OS fingerprint submissions since June 2013
  (2700+ of them). Added 366 fingerprints, bringing the new total to 4485.
  Additions include Linux 3.10 - 3.14, iOS 7, OpenBSD 5.4 - 5.5, FreeBSD 9.2,
  OS X 10.9, Android 4.3, and more. Many existing fingerprints were improved.
  Highlights: http://seclists.org/nmap-dev/2014/q3/325 [Daniel Miller]

o Removed the External Entity Declaration from the DOCTYPE in Nmap's XML. This
  was added in 6.45, and resulted in trouble for Nmap XML parsers without
  network access, as well as increased traffic to Nmap's servers. The doctype
  is now:
  <!DOCTYPE nmaprun>

o [Ncat] Fixed SOCKS5 username/password authentication. The password length was
  being written in the wrong place, so authentication could not succeed.
  Reported with patch by Pierluigi Vittori.

o Avoid formatting NULL as "%s" when running nmap --iflist. GNU libc converts
  this to the string "(null)", but it caused segfault on Solaris. [Daniel Miller]

o Handle ICMP admin-prohibited messages when doing service version detection.
  Crash reported by Nathan Stocks was: Unexpected error in NSE_TYPE_READ
  callback.  Error code: 101 (Network is unreachable) [David Fifield]

o [NSE] Fix a bug causing http.head to not honor redirects. [Patrik Karlsson]

MFH:		2014Q3
2014-08-23 12:29:46 +00:00
Kubilay Kocak
20048033a6 security/suricata: Update to 2.0.3, Modernize
Now that libprelude is safe from EXPIRE and has been staged [1], and devel/libhtp
now *actually* links against libiconv even though autoconf detection was fine
[2] ... Have fun!

- Update to 2.0.3
- Switch libhtp to the upstream version port (devel/libhtp)
- Use USES=libtool
- Use OPTIONS helpers and other OPTIONS_* goodies
- Sort USE(S)* section
- Deprecate USE_AUTOTOOLS (USES instead)
- Deprecate AUTOMAKE_ARGS, ACLOCAL_ARGS (no longer necessary)
- Update COMMENT
- Add m4 macro for checking compiler flags and add relevent
  check to configure.ac. Our GCC doesn't like
  -Wno-error=unused-result and upstreams configure bits arent as
  portable as they could be.

[1] http://svnweb.freebsd.org/changeset/ports/365562
[2] http://svnweb.freebsd.org/changeset/ports/364955

Requested by:	many
2014-08-23 12:08:16 +00:00
Antoine Brodin
61fe45862f Remove double slash to pass check-plist 2014-08-22 19:14:15 +00:00
Alex Kozlov
e64a6842cb - Update to 2014.65 2014-08-22 14:16:56 +00:00
Ryan Steinmetz
0104243f3d New port: security/p5-Crypt-RHash:
Crypt::Rhash module is an object-oriented interface to the LibRHash library,
allowing simultaneous calculation of several hash functions for a file or a
text message.

Resulting hash digest can be obtained in hexadecimal, BASE32, BASE64, raw
binary format or as a magnet link.

WWW: http://search.cpan.org/dist/Crypt-RHash/

PR:		192899
Submitted by:	proler@gmail.com
2014-08-22 12:50:05 +00:00
Dmitry Marakasov
13ab9a72d8 - Switch dns/unbound to USES=libtool, drop .la files
- Bump dependent ports as .so version has changed
- While here, add LICENSE_FILE to dns/getdns

Approved by:	portmgr blanket
2014-08-22 09:06:34 +00:00
Matthias Andree
1bf8aa3914 Fix up missed or botched PORTREVISION bumps from r365599.
Apparently Tools/scripts/bump-revision.sh isn't too robust...

PR:		192690
2014-08-22 06:56:48 +00:00
Matthias Andree
b50a4b0708 Berkeley DB cleanup, remove versions 4.0 ... 4.7.
- Mk/bsd.database.mk rewrite, new default to db5.
- db6 is eligible by default only if installed on the system.
- Bump PORTREVISION of all ports that directly depend on BerkeleyDB or
  where USE_BDB is found in the port's directory
- Patch a few ports such that they will pick up or work with newer
  versions.
- Add UPDATING entry
- Drive-by format fix for pks
- Drop BerkeleyDB option from mail/popular for now, requires more work.
- Exp-run logs linked from the PR below.
- Ports that do not build (IGNORE, BROKEN, etc.) have pro-forma changes
  for new Berkeley DB, but are untested.

NOTE: please read UPDATING and the Wiki page before proceeding!

Announcement:	http://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-August/000090.html
Wiki reference:	https://wiki.freebsd.org/Ports/BerkeleyDBCleanup
PR:		192690
Approved by:	portmgr (implicit, PORTREVISION bump on unstaged ports)
2014-08-21 22:50:29 +00:00
Ryan Steinmetz
b91a107bb8 - Document buffer overrun in sysutils/file 2014-08-21 19:46:21 +00:00
Li-Wen Hsu
61faa6c3bc Add missing <package> tag 2014-08-21 17:13:16 +00:00
Li-Wen Hsu
b4c5d1d593 Document Django 2014-08-20 vulnerabilty
Reviewed by:	koobs
2014-08-21 17:09:58 +00:00
Kubilay Kocak
411d41c623 security/libprelude: Take MAINTAINER'ship, STAGE & Modernize
- Take Maintainership
- Enable STAGE support
- Tweak MASTER_SITES https -> http (portlint)
- Add LICENSE and LICENSE_FILE
- Deprecate USE_AUTOTOOLS for libtool (-> USES)
- Sort USES and OPTIONS
- Use OPTIONS helpers as much as possible for now [1]
- Add --enable-static to CONFIGURE_ARGS to retain the static lib
- Assign and Use ETCDIR rather than hardcoding
- Use the install-strip install target
- Update pkg-plist, use @sample and other goodies

While I'm here, bump dependent ports since our SHLIB major version has
changed

[1] https://reviews.freebsd.org/D665

Approved by: portmgr (implicit, bump unstaged port)
2014-08-21 14:58:55 +00:00
John Marino
a7006440bc security/tinyca: Reset maintainer
Multiple PRs on this PR have timed out, and the maintainer has a current
history of timing out on all his ports.  Reset this one too.
2014-08-21 13:52:23 +00:00
John Marino
01b7b1059a Security/denyhosts: Limit to python 2.x and reset maintainer
The maintainer has not been responsive and multiple PRs have timed out.
Convert USE_PYTHON=yes to USES=python:2 as this application will not
run on Python 3.x

PR:		187408
Submitted by:	corsmith (gmail)
Approved by:	maintainer timeout
2014-08-21 13:34:25 +00:00
John Marino
7aafea7e71 Stage security/cvm and assign maintainership to submitter
PR:		192875
Submitted by:	uffe
tweaks by:	marino
2014-08-21 11:02:31 +00:00
Adam Weinberger
03c8980bdc Stage. 2014-08-20 23:05:18 +00:00
Adam Weinberger
8635dfdec2 Stage. 2014-08-20 22:50:35 +00:00
Antoine Brodin
f1a2e00aa2 Update to 20140818 2014-08-20 19:38:57 +00:00
John Marino
20049eb7c6 security/razorback-officeCat: Chase json-c update (Unbreak)
This port is i386 only (due to dependency on wine, so the ONLY_FOR_ARCH
definition is actually unnecessary) so I can't test it.  It's also
unstaged.  However, the standard json-c patches apply, so just assume
that officeCat needs them.  If I'm wrong, the port will probably be
pruned in a week anyway.

Approved by:	portmgr (implicit, NO_STAGE)
2014-08-20 18:45:02 +00:00
John Marino
062822415e security/razorback-swfScanner: Chase json-c update (Unbreak) 2014-08-20 18:27:19 +00:00
John Marino
0a958a791b security/razorback-pdfFox: Chase json-c update (Unbreak) 2014-08-20 18:23:05 +00:00
John Marino
74c625f4d8 security/razorback-fsWalk: Chase json-c update (Unbreak) 2014-08-20 18:18:52 +00:00
John Marino
23ad8a1aa9 security/razorback-fsMonitor: Chase json-c update (Unbreak) 2014-08-20 18:15:35 +00:00
John Marino
fe16fe9d1e security/razorback-dispatcher: Chase json-c update (Unbreak) 2014-08-20 18:11:00 +00:00
John Marino
e64d17b89c security/razorback-fileInject: Chase json-c update (Unbreak)
Approved by:	portmgr (implicit, NO_STAGE)
2014-08-20 18:06:05 +00:00
John Marino
c97b69598f security/razorback-archiveInflate: Chase json-c update (Unbreak) 2014-08-20 17:57:26 +00:00
John Marino
4c48040b0d security/razorback-scriptNugget: Chase json-c update (Unbreak) 2014-08-20 17:53:11 +00:00
John Marino
f4f6fc3d46 security/razorback-yaraNugget: Chase json-c update (Unbreak) 2014-08-20 17:49:16 +00:00
John Marino
c0a3d10da8 security/razorback-syslogNugget: Chase json-c update (Unbreak) 2014-08-20 17:45:07 +00:00
John Marino
2e1ad47c48 security/razorback-clamavNugget: Chase json-c update (Unbreak) 2014-08-20 17:32:02 +00:00
John Marino
c7ca00807b security/razorback-virusTotal: Chase json-c update (Unbreak) 2014-08-20 17:20:08 +00:00
John Marino
2b99feea32 security/razorback-masterNugget: Chase json-c update (Unbreak) 2014-08-20 17:04:00 +00:00
Adam Weinberger
16786c6c15 Fix build, broken in the json-c 0.12 upgrade. Given the nature of the errors there
are likely other ports that will fail in similar ways. (i.e. libjson.so->libjson-c.so,
and json/json.h -> json-c/json.h).

While here, use OPTIONS helpers to avoid unnecessary bsd.port.options.mk inclusion.
2014-08-20 14:30:58 +00:00
Ryan Steinmetz
6894743b40 - Update to 0.5 2014-08-20 08:02:30 +00:00
Tijl Coosemans
41c21bb925 Fix more missing -lintl
Tested by:	mat
2014-08-20 08:01:12 +00:00
Antoine Brodin
3e0a67c81e 2014-08-20 deskutils/horde3-hermes: EOL in April 2012
2014-08-20 deskutils/horde3-klutz: EOL in April 2012
2014-08-20 deskutils/horde3-kronolith: EOL in April 2012
2014-08-20 deskutils/horde3-mnemo: EOL in April 2012
2014-08-20 devel/horde3-chora: EOL in April 2012
2014-08-20 ftp/horde3-gollem: EOL in April 2012
2014-08-20 games/linux-steam: Unmaintained interactive port
2014-08-20 games/linux-ut2004-demo: Unmaintained restricted ancient demo
2014-08-20 mail/horde3-dimp: EOL in April 2012
2014-08-20 mail/horde3-forwards: EOL in April 2012
2014-08-20 mail/horde3-ingo: EOL in April 2012
2014-08-20 mail/horde3-mimp: EOL in April 2012
2014-08-20 mail/horde3-vacation: EOL in April 2012
2014-08-20 net-mgmt/horde3-nic: EOL in April 2012
2014-08-20 net-mgmt/nocol: Unmaintained interactive port
2014-08-20 net-mgmt/ourmon: Unmaintained interactive port
2014-08-20 net/wowzamediaserverpro: Unmaintained interactive port
2014-08-20 news/p5-NNML: Unmaintained interactive port
2014-08-20 print/dvips: Unmaintained interactive port
2014-08-20 print/xdvi: Unmaintained interactive port
2014-08-20 security/horde3-jeta: EOL in April 2012
2014-08-20 security/hunch: Likely unused interactive port
2014-08-20 www/horde3-ansel: EOL in April 2012
2014-08-20 www/horde3-meta: EOL in April 2012
2014-08-20 www/horde3-passwd: EOL in April 2012
2014-08-20 www/horde3-trean: EOL in April 2012
2014-08-20 www/wwwcount: Ancient interactive port
2014-08-20 x11-clocks/xalarm: Unmaintained interactive port
2014-08-20 06:30:29 +00:00
Michael Gmelin
efc161dffd Remove deletion of LC_MESSAGES directories that are owned by devel/gettext
Reviewed by:	bdrewery
Approved by:	bdrewery
2014-08-20 00:25:18 +00:00
Steve Wills
f64d997379 many ruby/rubygem ports: death of rubyforge.org
rubyforge.org shutdown on May 15, 2014. This commit accounts for that by doing
several things:

- Deprecate ruby that had only rubyforge.org as MASTER_SITES (and so are now
  only fetchable via our cache)
- Deprecate ports that depend on those
- Update the WWW pkg-descr line that points to rubyforge.org for rubygem ports
  (which are still fetchable from rubygems.org)

The next step will be to remove rubyforge.org from bsd.sites.mk, after these
deprecated ports are deleted.

Phabric:	D591
With hat:	ruby
Approved by:	portmgr (because of committing to unstaged graphics/mingplot port)
2014-08-19 15:35:35 +00:00
John Marino
6f463327e8 security/strongswan: Upgrade version 5.1.3 => 5.2.0
While here, including missing library files and use install-strip
target.  Maintainer added a crash fix patch while reviewing.

PR:		192366
Submitted by:	dewayne (heruristicssystems.com.au)
Approved by:	maintainer (strongswan nanoteq.com)
2014-08-19 13:40:30 +00:00
Tijl Coosemans
4439fe268d Add missing libintl link
Reported by:	mat
2014-08-19 12:41:45 +00:00
Thierry Thomas
ceb817f314 Upgrade to 0.4.15.
PR:		ports/192817
Submitted by:	/me
Approved by:	bdrewery
2014-08-18 21:58:23 +00:00
Florian Smeets
df03bac70c Record PHP 5.3 vulnerabilities 2014-08-18 21:11:32 +00:00
Antoine Brodin
1c6ed8eca3 Convert most NO_INSTALL_MANPAGES to USES=imake:noman
With hat:	portmgr
2014-08-18 19:13:18 +00:00
Dmitry Marakasov
9b5f85e3d1 - Switch devel/liboop to USES=libtool, drop .la files
- Fix glib2 detection by adding USES=pkgconfig
- Bump dependent ports as .so version has changed

Approved by:	portmgr blanket
2014-08-18 17:30:24 +00:00
Bryan Drewery
69f82727cf - Move RESETPREFIX to default PLIST_SUB
With hat:	portmgr
2014-08-18 16:43:24 +00:00
Thomas Zander
25b3f428f2 - Update to upstream release 3.11.0
- Fix pkg-plist for all permutations of OPTIONS

PR:		192615
Submitted by:	klm@uidzero.org (maintainer)
Approved by:	mentors (implicit)
2014-08-18 06:59:30 +00:00
Antoine Brodin
fe1a7c92d1 Mark BROKEN: Unfetchable
Reported by:	pkg-fallout
With hat:	portmgr
2014-08-17 23:04:20 +00:00
Matthew Seaman
e9714da8d4 Document the latest phpMyAdmin security advisories.
XSS in view operations page

and

Multiple XSS vulnerabilities in browse table, ENUM editor, monitor, query charts and table relations pages

Security:	fbb01289-2645-11e4-bc44-6805ca0b3d42
2014-08-17 19:48:04 +00:00