Commit graph

22040 commits

Author SHA1 Message Date
Ryan Steinmetz
e5c19fce71 - Update variable name in previous commit
- Bump PORTREVISION
2015-10-19 13:42:11 +00:00
Ryan Steinmetz
622c375809 - Add additional instances variable for puppet/chef/cfengine/etc use
- Bump PORTREVISION
2015-10-19 13:30:28 +00:00
Jimmy Olgeni
1ff7395d51 Upgrade security/elixir-comeonin to version 1.3.0. 2015-10-19 08:14:23 +00:00
Cy Schubert
ba44c33bf8 Bump PORTREVISION. 2015-10-19 07:29:08 +00:00
Cy Schubert
f43d2cea80 Fix READLINE option.
Add support for libedit (LIBEDIT option).
Both command line editing options now supported by RADIO button.

Fix typo in gssapi: bootstrap.
2015-10-19 07:17:47 +00:00
Cy Schubert
86da5965d8 Fix READLINE option.
Add support for libedit (LIBEDIT option).
Both command line editing options now supported by RADIO button.
2015-10-19 07:13:33 +00:00
Guido Falsi
2f90775268 - Update to 1.3.2
- Add QT4 and QT5 options, to choose toolkit.

PR:		203804
Submitted by:	Ports Fury
2015-10-18 13:41:15 +00:00
Romain Tartière
d4119bd942 Remove security/yubikey-personalization (duplicate of security/ykpers)
PR:		203835
Submitted by:	cmt@burggraben.net
2015-10-18 09:55:55 +00:00
Kubilay Kocak
8b7f69106a security/py-cryptography: Update to 1.0.2
- Update to 1.0.2
- Strip shared libraries
- Add patch to support building with LibreSSL
- Remove ALPN patch (upstreamed)

Changes:

  https://github.com/pyca/cryptography/blob/1.0.2/CHANGELOG.rst

PR:		203819
Submitted by:	Ralf van der Enden <tremere cainites net>
2015-10-18 03:13:53 +00:00
Sunpoet Po-Chuan Hsieh
d791a4add6 - Document Salt multiple vulnerabilities 2015-10-17 18:16:56 +00:00
Sunpoet Po-Chuan Hsieh
b8dd7bfcf0 - Update to 1.4.0
- Add LICENSE
- Add NO_ARCH
- Fix indent

Changes:	http://pear.php.net/package/Crypt_GPG/download/
2015-10-17 18:10:31 +00:00
Sunpoet Po-Chuan Hsieh
5943262277 - Add LICENSE_FILE
- Use USES=localbase
2015-10-17 18:08:22 +00:00
Romain Tartière
f35d4877c1 The YubiKey Personalization Tool is a Qt based Cross-Platform utility designed
to facilitate re-configuration of YubiKeys on Windows, Linux and Mac platforms.
The tool provides a same simple step-by-step approach to make configuration of
YubiKeys easy to follow and understand, while still being powerful enough to
exploit all functionality both of the YubiKey 1 and YubiKey 2 generation of
keys. The tool provides the same functionality and user interface on Windows,
Linux and Mac platforms.

The Cross-Platform YubiKey Personalization Tool provides the following main
functions:
  - Programming the YubiKey in "Yubico OTP" mode;
  - Programming the YubiKey in "OATH-HOTP" mode;
  - Programming the YubiKey in "Static Password" mode;
  - Programming the YubiKey in "Challenge-Response" mode;
  - Programming the NDEF feature of the YubiKey NEO;
  - Testing the challenge-response functionality of a YubiKey;
  - Deleting the configuration of a YubiKey;
  - Checking type and firmware version of the YubiKey.

WWW: https://github.com/Yubico/yubikey-personalization-gui
2015-10-17 12:59:34 +00:00
Romain Tartière
4e001bf384 The YubiKey Personalization package contains a library and command line tool
used to personalize (i.e., set a AES key) YubiKeys.

WWW: https://github.com/Yubico/yubikey-personalization
2015-10-17 12:58:50 +00:00
Steve Wills
f880925a41 Document CVE-2015-7184 in firefox 2015-10-16 18:57:28 +00:00
Steve Wills
dcfa462ca6 security/quantis: fix build with OpenJDK8
PR:		203513
Approved by:	maintainer timeout (ale, >2 weeks)
2015-10-16 18:17:58 +00:00
Koop Mast
82f203006a Document flash 0-day, remove code execution.
Security:	CVE-2015-7645, CVE-2015-7647, CVE-2015-7648
2015-10-16 16:11:19 +00:00
Kubilay Kocak
91364fbc63 security/fwknop: Update to 2.6.7
* Update to 2.6.7
* Update and sort pkg-plist
* Group/sort sections
* Convert to OPTIONS helpers
* Use install-strip target so binaries/libraries are stripped

PR:		203168
Submitted by:	Sean Greven <sean.greven gmail com> (maintainer)
2015-10-16 12:25:21 +00:00
Peter Wemm
e4482bc1e2 Fix the vuxml build caused by a multitude of errors in r399425 (libressl). 2015-10-16 07:44:55 +00:00
Bernard Spil
3dba139b7a security/libressl: Fix memory leak and buffer overflow DoS vulnerability
* Update to 2.2.4 (fixing vulnerabilities)
  * Create vuxml entry

Differential Revision: https://reviews.freebsd.org/D3916
Submitted by:	Bernard Spil <brnrd@freebsd.org>
Reviewed by:	delphij
Approved by:	delphij (secteam)
MFC after:	2015Q4
Security:	e75a96df-73ca-11e5-9b45-b499baebfeaf
Security:	CVE-2015-5333, CVE-2015-5334
2015-10-16 07:13:03 +00:00
Bernard Spil
eac75ec131 security/libressl: Fix memory leak and buffer overflow DoS vulnerability
* Update to 2.2.4 (fixing vulnerabilities)
  * Create vuxml entry

Differential revision: https://reviews.freebsd.org/D3916
Submitted by:	Bernard Spil <brnrd@freebsd.org>
Reviewed by:	delphij (secteam)
Approved by:	delphij
MFC after:	2015Q4
Security:	CVE-2015-5333, CVE-2015-533
2015-10-16 07:08:40 +00:00
Dmitry Marakasov
bf3bcf82ea - Handle permissions in plist
- Unsilence install

Approved by:	portmgr blanket
2015-10-15 21:00:20 +00:00
Sunpoet Po-Chuan Hsieh
41b5b48741 - Add LICENSE_FILE
- Move LICENSE upward
- Add NO_ARCH

Approved by:	portmgr (blanket)
2015-10-15 20:18:56 +00:00
Sunpoet Po-Chuan Hsieh
edd8a382b7 - Update to 0.19
Changes:	http://search.cpan.org/dist/IO-Async-SSL/Changes
2015-10-15 20:17:32 +00:00
Tijl Coosemans
fe28aa632f Security update to 2.1.2
MFH:		2015Q4
Security:	07a1a76c-734b-11e5-ae81-14dae9d210b8
Security:	CVE-2015-5291
2015-10-15 15:26:33 +00:00
Tijl Coosemans
98688b18e1 Security update to 1.3.14
MFH:		2015Q4
Security:	07a1a76c-734b-11e5-ae81-14dae9d210b8
Security:	CVE-2015-5291
2015-10-15 15:25:32 +00:00
Mathieu Arnold
7f0f664d7e Drop 8 support.
With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3694
2015-10-15 14:55:14 +00:00
Mark Felder
b3175cfda7 security/polarssl: Update to 1.2.17
Changelog:	https://tls.mbed.org/tech-updates/releases/mbedtls-2.1.2-and-1.3.14-and-polarssl-1.2.17-released

Security:	07a1a76c-734b-11e5-ae81-14dae9d210b8
Security:	CVE-2015-5291
2015-10-15 14:51:05 +00:00
Mark Felder
1fdbc58c42 Document vulnerability in polarssl, polarssl13, and mbedtls
Security:	CVE-2015-5291
2015-10-15 14:48:51 +00:00
Lev A. Serebryakov
3535651a1b Update devel/subversion to 1.9.2.
PR:		203713
Submitted by:	Peter Wemm <peter@FreeBSD.org>
2015-10-15 10:43:15 +00:00
Jason Unovitch
086688b059 Document multiple vulnerabilities in the Magento platform
While here, update an older entry to reflect Magento was vulnerable

PR:		201709
Security:	https://vuxml.FreeBSD.org/freebsd/ea1d2530-72ce-11e5-a2a1-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/ec34d0c2-1799-11e2-b4ab-000c29033c32.html
Security:	CVE-2012-3363
2015-10-14 23:59:01 +00:00
Dmitry Marakasov
a311f3e214 - Drop 8.x support
- Add LICENSE

Approved by:	portmgr blanket
2015-10-14 23:52:30 +00:00
Dmitry Marakasov
6000b270e0 - Add LICENSE_FILE
- Regenerate patches with `make makepatch`
2015-10-14 23:51:30 +00:00
Jan Beich
6286222db5 net/miniupnpc: improve TALOS-2015-0035 entry in VuXML
- Add "reserved" CVE link
- Adjust version range to include a few previous snapshots
  and different fix in /branches/2015Q4

PR:		203705
2015-10-14 19:02:28 +00:00
Kurt Jaeger
a1b9350920 security/binwalk: 2.0.1 -> 2.0.2 (or so)
- old version did not work
- current github head does work (tested)
- new from head sees itself as 2.1.0, but not yet released, so...

PR:		203774
Requested by:	emaste
2015-10-14 18:12:58 +00:00
Jan Beich
899edfd9f7 net/miniupnpc: reference TALOS-2015-0035 fix
It maybe easier to backport to the quaterly branch than the development
snapshot that caused fallout in most consumers.

PR:		203705
2015-10-14 17:05:18 +00:00
Mark Felder
7d0ce5c47b Document www/pear-twig remote code execution
Security:	CVE-2015-7809
2015-10-14 16:53:25 +00:00
Mark Felder
41d6fa567f Document assigned CVE for graphics/optipng
Security:	CVE-2015-7801
2015-10-14 16:47:15 +00:00
Mark Felder
52ef750fc0 net/miniupnpc: Document buffer overflow
PR:		203705
Security:	TALOS-2015-0035
2015-10-14 16:21:20 +00:00
Koop Mast
34794030bd Document latest flash vulnabilities.
Security:	CVE-2015-5569, CVE-2015-7625, CVE-2015-7626, CVE-2015-7627,
		CVE-2015-7628, CVE-2015-7629, CVE-2015-7630, CVE-2015-7631,
		CVE-2015-7632, CVE-2015-7633, CVE-2015-7634, CVE-2015-7643,
		CVE-2015-7644
2015-10-14 12:21:59 +00:00
Frederic Culot
1d0b9d3e31 - Reassign lippe@'s ports after his commit bit was taken in for safekeeping 2015-10-14 11:04:10 +00:00
Cy Schubert
1e0fd5f376 Replace HEIMDAL option with HEIMDAL_PORTS and HEIMDAL_BASE. 2015-10-14 03:46:52 +00:00
Cy Schubert
96f80c1899 Update 4.6 --> 4.7 2015-10-14 03:44:52 +00:00
Rene Ladan
46a3cede8a Forgot two vulnerabilities in the previous commit. 2015-10-13 19:31:43 +00:00
Rene Ladan
5a62cc722a Document new vulnerabilities in www/chromium < 46.0.2490.71
Obtained from:	http://googlechromereleases.blogspot.nl/2015/10/stable-channel-update.html
2015-10-13 19:28:44 +00:00
Kurt Jaeger
86cadbb07d security/py-acme: 0.0.b1 -> 0.0.0.dev20151008
Changes: For now, see
	https://github.com/letsencrypt/letsencrypt/commits/master

PR:		203405
2015-10-13 19:12:17 +00:00
Mark Felder
cb8c677412 security/sshgaurd: Update to 1.6.2
* Remove recommendation of using syslog pipes
* IPFW support has been rewritten and entries now are added to table 22

PR:		203452
2015-10-13 01:14:26 +00:00
Jason Unovitch
b22b3543a4 Add CVE assignment to r398701 Zend Framework 1 entry
PR:		203462
Security:	CVE-2015-7695
Security:	https://vuxml.FreeBSD.org/freebsd/d3324fdb-6bf0-11e5-bc5e-00505699053e.html
2015-10-12 14:19:25 +00:00
Jason Unovitch
f1813f99c1 Add CVE assignment to r398626 PHP entry
PR:		203541
Security:	CVE-2015-7804
Security: 	CVE-2015-7803
Security: 	https://vuxml.FreeBSD.org/freebsd/c1da8b75-6aef-11e5-9909-002590263bf5.html
2015-10-12 14:11:12 +00:00
John Marino
16f7d87a0d security/wpa_supplicant: Upgrade version 2.4 => 2.5 2015-10-11 22:52:59 +00:00