Commit graph

22104 commits

Author SHA1 Message Date
Ryan Steinmetz
b5e8d74067 - Update to 5.26b1 (5.25 contains a build breaking bug, 5.26b1 resolves this) 2015-11-03 12:31:59 +00:00
Renato Botelho
5ebc099a79 - Update security/sudo to 1.8.15
- Remove patch-plugins__sudoers__Makefile.in, unnecessary on stagedir days
- Remove patch-plugins__sudoers__audit.c, sudo_gettext.h is already included
  by sudoers.h
- Rework patch-plugins__sudoers__sudoers.in to replace pkg_* utilities by
  pkg on message
2015-11-03 09:44:23 +00:00
Cy Schubert
b9d5e43fe0 As of r399238, when the heimdal port option was selected, this port did
not build properly. Prior to r399238, even if the heimdal port was
installed, the base krb5 libraries and include files were used. This is
because ports/security/heimdal places its libraries in
${LOCALBASE}/lib/heimdal and include files in ${LOCALBASE}/include/heimdal,
which this port does not look for (unless told to do so... by this commit).

Discovered by:	marino
2015-11-03 04:55:58 +00:00
Kubilay Kocak
a8fe7b23c5 security/py-cryptography: Add missing run-time dependencies
Add py-idna and conditionally (For Python < 3.3) py-ipaddress to
RUN_DEPENDS

While I'm here:

- Update minimum versions requirement for py-cffi
- Update test target since the framework supports TEST_DEPENDS et al.

Noticed by:	brnrd
2015-11-02 16:39:53 +00:00
Philippe Audeoud
b89bb2ad80 - Update to 0.020 2015-11-02 14:29:32 +00:00
Kurt Jaeger
9085b33fdc security/softether: fix USES
PR:		204184
Submitted by:	marino
Approved by:	maintainer (implicit)
2015-11-02 14:11:09 +00:00
Kurt Jaeger
4811858357 security/softether: fixes
- iconv build
- build with No-SSLv3
- MAKE_JOBS_UNSAFE=yes unconditionally

PR:		203688, 204184
Submitted by:	net@arrishq.net (maintainer)
2015-11-02 11:59:59 +00:00
Jimmy Olgeni
0fb5922be2 Upgrade security/elixir-comeonin to version 1.3.1. 2015-11-02 08:39:46 +00:00
Jason Unovitch
7f715d5501 Document multiple vulnerabilities fixed in CodeIgniter
PR:		203403
Security:	https://vuxml.FreeBSD.org/freebsd/bdd57272-803c-11e5-ab94-002590263bf5.html
2015-11-01 02:10:37 +00:00
Antoine Brodin
3f67b68ab7 Update to 2.1.0.12 2015-10-31 21:46:50 +00:00
Olli Hauer
fa64224f89 - update patches to match latest git rev (v0.7.2)
- add ca_root_nss as direct runtime dependency
- use new option target to install docs

Download URL has changed from s3.amazonaws to snort.org!
Please adjust your pulledpork.conf

MFH:		2015Q4
2015-10-31 13:08:49 +00:00
Cy Schubert
72f9f8117a Fix Kerberos selection option and USES. 2015-10-31 05:58:27 +00:00
Sunpoet Po-Chuan Hsieh
bb2b83b72f - Convert to new options helper
- Convert to new options target helper

Approved by:	portmgr (blanket)
2015-10-30 11:26:47 +00:00
Sunpoet Po-Chuan Hsieh
16a0be9b6f - Fix gemspec for rubygem-ruby-saml 1.1.0 update
- Bump PORTREVISION for package change
2015-10-30 11:26:24 +00:00
Sunpoet Po-Chuan Hsieh
e8abe935a2 - Update to 1.1.0
- Add LICENSE

Changes:	https://github.com/onelogin/ruby-saml/blob/master/changelog.md
2015-10-30 11:26:20 +00:00
Sean Bruno
343a083fb9 Enable the building and installation of the .a version of the library
for static linking.  This affects emulators/qemu-user-static primarily
but will help anyone trying to statically link their applications.

Reviewed by:	tijl cpm@fbsd.es (Maintainer)
2015-10-29 14:30:24 +00:00
Roman Bogorodskiy
62a14d310a security/libgpg-error: enable static lib
Enable static lib as it's needed by QEMU for static
linking (qemu-user-static) and bump PORTREVISION.

Submitted by:	sbruno
2015-10-29 14:29:06 +00:00
Renato Botelho
9c90e69933 - Add a new option, SWANCTL, to install swanctll utility
- When VICI option is selected, install libvici.h to include directory,
  it's useful when you need to build a custom code linked to libvici
- Pass path to USE_LDCONFIG otherwise libraries will not be visible

PR:		204098
Approved by:	maintainer
Obtained from:	pfSense
Sponsored by:	Rubicon Communications (Netgate)
2015-10-29 12:42:30 +00:00
Antoine Brodin
e44b020d61 Update to 2.5
Announce:	http://www.volatilityfoundation.org/#!25/c1f29
2015-10-29 12:14:38 +00:00
Jason Unovitch
23503a93fa Document additional CVE assigned for the last Wordpress update
Security:	CVE-2015-7989
Security:	https://vuxml.FreeBSD.org/freebsd/f4ce64c2-5bd4-11e5-9040-3c970e169bc2.html
2015-10-29 01:51:05 +00:00
Mark Felder
d5bb164515 Document information disclosure in net/openafs
Security:	CVE-2015-7762
Security:	CVE-2015-7763
2015-10-28 20:59:22 +00:00
Pawel Pekala
33eb4d6ebb Framework to connect any number of virtual machines to the
tor anonymity network.

WWW: https://github.com/yurivict/vm-to-tor

PR:		200333
Submitted by:	Yuri Victorovich <yuri@rawbw.com>
2015-10-28 20:30:13 +00:00
Renato Botelho
48f7ab060b - Add a new option (VICI) to build VICI management protocol
- Change SMP option description to show users it's deprecated

PR:		204090
Approved by:	maintainer
2015-10-28 14:27:28 +00:00
Niclas Zeising
8bcc103ea0 Add entry for x11/xscreensaver for a lock bypass vulnerability 2015-10-27 20:53:54 +00:00
Dmitry Marakasov
c78fd04ab5 - Fix shebangs
- Add NO_ARCH

Approved by:	portmgr blanket
2015-10-27 18:52:44 +00:00
Sunpoet Po-Chuan Hsieh
d929b71224 - Update to 1.8.4
Changes:	http://lists.gnupg.org/pipermail/gnupg-announce/2015q3/000375.html
PR:		204003
Submitted by:	Carlos J Puga Medina <cpm@fbsd.es> (maintainer)
2015-10-27 15:54:54 +00:00
Sunpoet Po-Chuan Hsieh
28e56989fe - Update to 0.22
Changes:	http://search.cpan.org/dist/Unix-Passwd-File/Changes
2015-10-27 15:51:58 +00:00
Sunpoet Po-Chuan Hsieh
c0425b4793 - Add LICENSE_FILE 2015-10-27 15:50:06 +00:00
Sunpoet Po-Chuan Hsieh
949aa01893 - Update to 1.055
Changes:	http://search.cpan.org/dist/Net-SSLGlue/Changes
2015-10-27 15:49:42 +00:00
Mathieu Arnold
91f933b2cb Document lldpd security vunlnerability.
PR:		204044
Submitted by:	maintainer
Sponsored by:	Absolight
2015-10-27 13:44:07 +00:00
Renato Botelho
1f33e7ef35 strongSwan can be beuit using 3 different printf hooks: builtin, glibc
(compatible with FreeBSD's libc) and vstr (devel/vstr). Since it's not
selected any of them on CONFIGURE_ARGS, it uses auto, and end up using
glibc.

pfSense users reported memory leaks on strongSwan [2] [3] and a it was
reported to upstream [1].

Add a single option and let user choose which printf hook to use, and
change default to use builtin. Bump PORTREVISION due to default change

[1] https://wiki.strongswan.org/issues/1106
[2] https://forum.pfsense.org/index.php?topic=96767.0
[3] https://redmine.pfsense.org/issues/5149

PR:		204051
Approved by:	maintainer
Obtained from:	pfSense
MFH:		2015Q4
Sponsored by:	Rubicon Communications (Netgate)
2015-10-27 13:27:17 +00:00
Thomas Zander
30bf7ffd51 Update to upstream version 0.3.8
PR:		204022
Submitted by:	christer.edwards@gmail.com (maintainer)
2015-10-26 18:44:23 +00:00
Mark Felder
320c35ac14 Update range for libressl vulnerability
Range was entered incorrectly as <2.2.3

Security:	e75a96df-73ca-11e5-9b45-b499baebfeaf
2015-10-26 13:45:27 +00:00
Steve Wills
bcbd6e9e1e security/py-python-gnupg: create port
The gnupg module allows Python programs to make use of the functionality
provided by the GNU Privacy Guard (abbreviated GPG or GnuPG). Using this
module, Python programs can encrypt and decrypt data, digitally sign documents
and verify digital signatures, manage (generate, list and delete) encryption
keys, using proven Public Key Infrastructure (PKI) encryption technology based
on OpenPGP.

WWW: http://packages.python.org/python-gnupg/index.html

PR:		199551
Submitted by:	Christer Edwards <christer.edwards@gmail.com>
2015-10-26 01:20:21 +00:00
Jason Unovitch
d8c079f57d security/webfwlog: update 1.00 -> 1.01 [1]
- While here add trailing slash to WWW:

PR:		203955 [1]
Submitted by:	Torsten Zuhlsdorff <ports@toco-domains.de>
Approved by:	zeus@ix.netcom.com (maintainer)
2015-10-25 20:11:51 +00:00
Joe Marcus Clarke
99d9c2bd22 Add an entry for wireshark-1.12.8 for CVE-2015-7830. 2015-10-25 17:37:12 +00:00
Jason Unovitch
76779cc5bd Document the recent remote site takeover via SQL injection vuln in Joomla
While here, document all missing Joomla security vulnerabilities since the
last entry in March 2014

Security:	CVE-2014-6631
Security:	CVE-2014-6632
Security:	CVE-2014-7228
Security:	CVE-2014-7229
Security:	CVE-2015-5397
Security:	CVE-2015-5608
Security:	CVE-2015-6939
Security:	CVE-2015-7297
Security:	CVE-2015-7857
Security:	CVE-2015-7858
Security:	CVE-2015-7859
Security:	CVE-2015-7899
Security:	https://vuxml.FreeBSD.org/freebsd/0ebc6e78-7ac6-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/03e54e42-7ac6-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/f8c37915-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/ec2d1cfd-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/deaba148-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/cec4d01a-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/beb3d5fc-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/adbb32d9-7ac5-11e5-b35a-002590263bf5.html
2015-10-25 03:26:58 +00:00
Thomas Zander
a8d0d986c6 Un-break build on systems where cxx does not support c++11
PR:		203992
Submitted by:	eric@camachat.org (maintainer)
2015-10-24 13:10:50 +00:00
Matthias Andree
70092ef822 Handle OpenSSL/PolarSSL options in the right way,
such that it is maintainable if we add more SSL libs in the future.

To fix fall-out from r399858 and r399982.
2015-10-24 11:18:04 +00:00
Jason Unovitch
f919e6acd7 Document redirect vulnerability in the drupal7 overlay module
PR:		203977
Security:	CVE-2015-7943
Security:	https://vuxml.FreeBSD.org/freebsd/75f39413-7a00-11e5-a2a1-002590263bf5.html
2015-10-24 03:55:25 +00:00
Danilo Egea Gondolfo
75f6a10389 - New port: security/s2n
s2n is a C99 implementation of the TLS/SSL protocols that
is designed to be simple, small, fast, and with security as
a priority. It is released and licensed under the Apache Software License 2.0.

WWW: https://github.com/awslabs/s2n
2015-10-23 22:48:34 +00:00
Matthew Seaman
1cf82dbf08 Record phpMyAdmin -- content spoofing vulnerability. 2015-10-23 20:39:41 +00:00
Thomas Zander
6f1821384b Update to upstream version 2.4.1, add BROKER OPTION
PR:		203849
Submitted by:	leres@ee.lbl.gov (maintainer)
2015-10-23 19:04:50 +00:00
Dmitry Marakasov
d0e4a5817f - Add NO_ARCH
- Drop @dirrm* from plist

Approved by:	portmgr blanket
2015-10-23 18:36:52 +00:00
Thomas Zander
8e02189b35 Adopt broccoli version numbering, update to 1.97
The gist from maintainer's explanation of the situation:
Upon creation of the port, the version number of the bro
distribution broccoli was packaged with was used. But it
makes more sense to use broccoli's actual version number.

PR:		203848
Submitted by:	leres@ee.lbl.gov (maintainer)
2015-10-23 18:12:26 +00:00
Xin LI
08f34c37a2 Add CVE references to the NTP entry. 2015-10-23 11:59:59 +00:00
Jason Unovitch
fc111cf1ce Document Mediawiki security vulnerabilities for 1.25.3, 1.24.4, and 1.23.11
Security:	https://vuxml.FreeBSD.org/freebsd/b973a763-7936-11e5-a2a1-002590263bf5.html
2015-10-23 03:43:36 +00:00
Martin Matuska
f927ae941d Horde package update:
comms/pear-Horde_ActiveSync 2.29.2 -> 2.30.0
devel/pear-Horde_Core 2.22.0 -> 2.22.1
devel/pear-Horde_Nls 2.0.5 -> 2.1.0
devel/pear-Horde_Notification 2.0.2 -> 2.0.3
textproc/pear-Horde_Pdf 2.0.5 -> 2.0.6
devel/pear-Horde_Queue 1.1.2 -> 1.1.3
security/pear-Horde_Secret 2.0.4 -> 2.0.5
www/pear-Horde_SessionHandler 2.2.4 -> 2.2.5
devel/pear-Horde_Token 2.0.6 -> 2.0.7
devel/horde-content 2.0.4 -> 2.0.5
ftp/horde-gollem 3.0.5 -> 3.0.6
www/horde-base 5.2.7 -> 5.2.8
mail/horde-imp 6.2.10 -> 6.2.11
mail/horde-ingo 3.2.6 -> 3.2.7
deskutils/horde-kronolith 4.2.9 -> 4.2.11
deskutils/horde-mnemo 4.2.7 -> 4.2.8
deskutils/horde-nag 4.2.5 -> 4.2.6
www/horde-passwd 5.0.3 -> 5.0.4
www/horde-trean 1.1.2 -> 1.1.3
mail/horde-turba 4.2.8 -> 4.2.10
mail/horde-webmail 5.2.10 -> 5.2.11
deskutils/horde-groupware 5.2.10 -> 5.2.11
2015-10-22 16:00:30 +00:00
Mathieu Arnold
89d49eb53f Fix build without POLARSSL.
Pointy hat to:	mat
Sponsored by:	Absolight
2015-10-22 14:07:10 +00:00
Kubilay Kocak
ce8374460e security/suricata: Update to 2.0.9
- Update PORTVERSION and distinfo checksum (2.0.9)

Changes:

  https://github.com/inliniac/suricata/blob/suricata-2.0.9/ChangeLog

While I'm here,

- Standardize the length of pkg-message separators and add spaces
  between them and the text body. <idea> It would be cool if the ports
  framework could wrap these pkg-message's in standard formatting for
  all ports automagically</idea>

Requested by:	Martin Olsson (via email)
2015-10-22 11:56:31 +00:00