Commit graph

30224 commits

Author SHA1 Message Date
Dmitri Goutnik
67c4b925b7 Go ports: cleanup, finish transition to USES=go started with r505321 (cat. misc-shells)
- Remove custom build/install targets left in place after r505321
- Switch to the new GO_TARGET tuple syntax introduced in r512001
- Switch to go:modules when upstream already uses them

Reviewed by:	tobik
Approved by:	araujo (mentor), portmgr (adamw)
Differential Revision:	https://reviews.freebsd.org/D21743
2019-09-29 22:31:57 +00:00
Vsevolod Stakhov
4a0577120c Fix misprint 2019-09-29 13:09:04 +00:00
TAKATSU Tomonari
7ff63de2dd - Update to 0.6.21 2019-09-29 10:38:35 +00:00
Vsevolod Stakhov
61454ad8a4 Document RCE in Exim: CVE-2019-16928 2019-09-29 08:26:15 +00:00
Mark Linimon
834e1d8c35 Kernel module containing a KTLS software backend for AES-GCM connections
using Intel's ISA-L crypto library.

Only for amd64 and only for very recent -CURRENT.

Submitted by:		jhb
Reviewed by:		gallatin
Differential Revision:	D21446
2019-09-29 01:09:57 +00:00
Dan Langille
ca1933b905 Update to 2.8.3
Letsencrypt CA recent changed the CDN provider, which resulted in hanging
issues. Any downstream package should update. This is important.

re: https://github.com/Neilpang/acme.sh/releases/tag/2.8.3

Submitted by:	Ken (via private email)
2019-09-28 17:14:06 +00:00
Dmitri Goutnik
21e0993aaa security/vuxml: Add entry for lang/go and lang/go-devel CVE-2019-16276
Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D21802
2019-09-28 11:51:00 +00:00
Tobias Kortkamp
7bc1258e28 Document databases/mantis vulnerabilities 2019-09-27 19:30:17 +00:00
Renato Botelho
e7f57a44b6 security/suricata: Restore GEOIP option
GeoIP option works with libmaxminddb since 4.1.5.  Add GEOIP option back.

PR:		240835
Approved by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Sponsored by:	Rubicon Communications, LLC (Netgate)
2019-09-27 11:44:19 +00:00
Tobias Kortkamp
71548e5989 security/cargo-audit: Update to v0.9.1
Changes:	https://github.com/RustSec/cargo-audit/blob/v0.9.1/CHANGES.md
2019-09-27 11:12:54 +00:00
Dmitry Marakasov
cb049e5656 - Update WWW
Approved by:	portmgr blanket
2019-09-27 09:38:27 +00:00
Tobias Kortkamp
deaa22d85c lang/rust: Update to 1.38.0
- Force rebuild all consumers to catch regressions early

Thanks to Mikaël Urankar for providing updated bootstraps for
aarch64, armv6, armv7, powerpc64.

Changes:	https://blog.rust-lang.org/2019/09/26/Rust-1.38.0.html
Tested by:	jbeich, mikael.urankar@gmail.com, tobik
With hat:	rust
Differential Revision:	https://reviews.freebsd.org/D21778
2019-09-27 09:35:20 +00:00
Emanuel Haupt
c16cbc3500 Update to 0.11.5 2019-09-27 06:18:32 +00:00
Sunpoet Po-Chuan Hsieh
8ab8cf7c19 Update to 4.5.0
Changes:	https://github.com/keybase/client/releases
2019-09-26 18:13:15 +00:00
Antoine Brodin
51a6f315e3 Mark BROKEN: fails to build
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:223:28: error: use of undeclared identifier 'DAQ_PKT_FLAG_REAL_ADDRESSES'
    if ((raw.pkth->flags & DAQ_PKT_FLAG_REAL_ADDRESSES) and codec.ip_layer_cnt == 1)
                           ^
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:227:33: error: no member named 'real_sIP' in '_daq_pkt_hdr'
        real_src.set(&raw.pkth->real_sIP,
                      ~~~~~~~~  ^
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:228:33: error: use of undeclared identifier 'DAQ_PKT_FLAG_REAL_SIP_V6'
            ((raw.pkth->flags & DAQ_PKT_FLAG_REAL_SIP_V6) ? AF_INET6 : AF_INET));
                                ^
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:229:33: error: no member named 'real_dIP' in '_daq_pkt_hdr'
        real_dst.set(&raw.pkth->real_dIP,
                      ~~~~~~~~  ^
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:230:33: error: use of undeclared identifier 'DAQ_PKT_FLAG_REAL_DIP_V6'
            ((raw.pkth->flags & DAQ_PKT_FLAG_REAL_DIP_V6) ? AF_INET6 : AF_INET));
                                ^

Reported by:	pkg-fallout
2019-09-26 17:42:25 +00:00
Muhammad Moinur Rahman
ff3f155f75 security/sslproxy: Fix build 2019-09-26 12:31:47 +00:00
Alexander Leidinger
858ee439b8 Update to bugfix release 3.08.01. 2019-09-26 08:46:14 +00:00
Li-Wen Hsu
46e2305ac6 Document Jenkins Security Advisory 2019-09-25
Sponsored by:	The FreeBSD Foundation
2019-09-25 23:07:20 +00:00
Renato Botelho
78d66afea9 security/suricata: Update to 4.1.5
PR:		240793
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
MFH:		2019Q3
Security:	CVE-2019-16410 CVE-2019-16411
Sponsored by:	Rubicon Communications, LLC (Netgate)
2019-09-25 22:09:02 +00:00
Sunpoet Po-Chuan Hsieh
5f14673390 Update to 1.3.4
Changes:	https://github.com/mattbrictson/airbrussh/releases
2019-09-25 20:43:33 +00:00
Sunpoet Po-Chuan Hsieh
640ea22477 Update to 4.4.2
Changes:	https://github.com/keybase/client/releases
2019-09-25 20:40:33 +00:00
TAKATSU Tomonari
db21531e8e - Update to 1.4.1 2019-09-25 07:25:09 +00:00
TAKATSU Tomonari
87e982aa0f - Add new port: security/R-cran-askpass
Cross-platform utilities for prompting the user for credentials or
  a passphrase, for example to authenticate with a server or read a
  protected key. Includes native programs for MacOS and Windows, hence
  no 'tcltk' is required. Password entry can be invoked in two different
  ways: directly from R via the askpass() function, or indirectly as
  password-entry back-end for 'ssh-agent' or 'git-credential' via the
  SSH_ASKPASS and GIT_ASKPASS environment variables. Thereby the user
  can be prompted for credentials or a passphrase if needed when R
  calls out to git or ssh.

  WWW: https://cran.r-project.org/web/packages/askpass/
2019-09-25 06:36:57 +00:00
Muhammad Moinur Rahman
a2859321fa security/sslproxy: Update version 0.6.0=>0.7.0 2019-09-24 20:59:59 +00:00
Steve Wills
a0f9b06dbf security/doas: Update to 6.2
PR:		240305
Submitted by:	jsmith@resonatingmedia.com (maintainer)
2019-09-24 18:05:01 +00:00
Steve Wills
b1c34a2767 security/strongswan: update to 5.8.1
PR:		240316
Submitted by:	Jose Luis Duran <jlduran@gmail.com>
Approved by:	strongswan@Nanoteq.com (maintainer)
2019-09-24 18:03:14 +00:00
Christian Weisgerber
804ef6e40e Run regression tests with bash since some test scripts unfortunately
rely on bash features.

PR:		240686
Reviewed by:	jbeich
2019-09-24 13:45:08 +00:00
Luca Pizzamiglio
4e4beee32a security/pecl-mcrypt: udpate to 1.0.3
Apparently only a fix for Windows, but updating anyway

Sponsored by:	trivago N.V.
2019-09-24 13:38:54 +00:00
Michael Gmelin
08ac904ee5 Update to 0.7.1
PR:		240774
Approved by:	koobs (python, maintainer)
2019-09-24 02:34:30 +00:00
Li-Wen Hsu
b609c33b77 - Update the default TCTI config string to point to /dev/tpm
Submitted by:	maintainer
Differential Revision:	https://reviews.freebsd.org/D21770
2019-09-23 20:24:12 +00:00
Tobias C. Berner
028f181cc7 KDE Frameworks: update to 5.62.0
Changelog:
	https://kde.org/announcements/kde-frameworks-5.62.0.php

Exp-run by:	antoine
PR:		240720
2019-09-23 19:04:17 +00:00
Tijl Coosemans
8ab7f05f3f Add linux-c6-openssl to CVE-2019-1559 entry.
Security:	https://access.redhat.com/errata/RHSA-2019:2471
2019-09-23 09:01:54 +00:00
Tijl Coosemans
8485123d38 Update to 1.0.1e-58.el6_10.
MFH:		2019Q3
Security:	https://access.redhat.com/errata/RHSA-2019:2471
Security:	CVE-2019-1559
2019-09-23 08:59:04 +00:00
Piotr Kubaj
04c09fcd8d security/gpgme: add USES=compiler:c11
Needed to fix build on GCC architectures.

Approved by:	mentors (implicit approval)
2019-09-22 16:33:25 +00:00
Dan Langille
0b29a92f6d Update CyberChef to 9.7.1
re: https://github.com/gchq/CyberChef/releases/tag/v9.7.1

PR:		240743
Submitted by:	thomas@bsdunix.ch
2019-09-22 11:43:31 +00:00
Antoine Brodin
2de6d0986d Ignore with php 7.4
Reported by:	pkg-fallout
2019-09-22 07:14:00 +00:00
Antoine Brodin
01b8e1ec14 Fix INDEX 2019-09-21 20:17:19 +00:00
Torsten Zuehlsdorff
8d075dffd5 Delete security/php74-hash
The hash module is now part of the PHP core. It can't be disabled or enabled anymore.
Therefore we remove this port.

Sponsored by:	PHP Upgrade Service
2019-09-21 20:08:59 +00:00
Kurt Jaeger
9dd19244b1 security/clamsmtp: Unbreak by switching to new master site
PR:		240731
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
2019-09-21 18:56:20 +00:00
Piotr Kubaj
65c9395530 security/arirang: fix build on GCC architectures
Add USES=compiler:c11, base GCC can't build this port.

Only add -L${OPENSSLLIB} when OpenSSL not from base is used to avoid linking to base libstdc++.

Approved by:	linimon (mentor)
Differential Revision:	https://reviews.freebsd.org/D21719
2019-09-21 15:21:11 +00:00
Piotr Kubaj
fccc4a7d49 security/steghide: fix build on GCC architectures
Add -Wno-static-float-init only when clang is used. Also add USES=localbase.

Approved by:	linimon (mentor)
Differential Revision:	https://reviews.freebsd.org/D21407
2019-09-21 15:04:38 +00:00
Tijl Coosemans
457a88291a Fix pkg-plist.
Reported by:	olgeni
2019-09-21 12:30:30 +00:00
Tijl Coosemans
e4c0bd396a Update to CentOS 7.7.1908.
Put libdrm into a separate port so it can be kept at the CentOS 7.6 version.
The new version fails to detect graphics hardware on FreeBSD.
2019-09-21 08:56:20 +00:00
Torsten Zuehlsdorff
8bd2d80422 lang/php74: Remove obsolete patches
All these patches are no longer needed. Their existence break the ports,
so now commit their deletion.

Sponsored by:	PHP Update Service
2019-09-20 20:04:28 +00:00
Jan Beich
3f1915711d Switch default devel/llvm* to 90
PR:		239682
Reviewed by:	tobik
Differential Revision:	https://reviews.freebsd.org/D21172
2019-09-20 19:58:36 +00:00
Cy Schubert
e5e1f87e52 Update to the latest MIT krb5 github commmit. 2019-09-20 19:39:22 +00:00
Antoine Brodin
1bd27d12de Attempt to unbreak INDEX 2019-09-20 17:06:15 +00:00
Kurt Jaeger
27178fbe07 security/vuxml: add CVEs for net/kea
PR:		240399
Submitted by:	Andrey Pevnev <apevnev@me.com>
2019-09-20 15:56:44 +00:00
Torsten Zuehlsdorff
7aca2531e2 Welcome PHP 7.4 RC 1 in the ports-tree.
There are many greater changes including:
- New module ffi
- Remove interbase module
- Remove recode module
- Remove wddx module
- Many modules changes the build switches
- Many modules changes the config format, so patches needed to be recreated

Special thanks to tobik and ale for their support.

Reviewed by:	tobik, ale, joneum
Sponsored by:	PHP Update Service
Differential Revision:	https://reviews.freebsd.org/D21349
2019-09-20 12:21:11 +00:00
Jason E. Hale
2a5ef47085 Update security/*gpgme* to 1.13.1 2019-09-20 11:36:30 +00:00