Commit Graph

30290 Commits

Author SHA1 Message Date
Tobias Kortkamp
317628a4cc security/signify: Add OpenBSD 6.7 key
- Drop old OpenBSD 6.4 key
2019-10-14 09:59:48 +00:00
Pietro Cerutti
717469bc37 security/libtomcrypt: lib-depend on libtommath
PR:		241232
Submitted by:	samm@os2.kiev.ua
Differential Revision:	https://reviews.freebsd.org/D22015
2019-10-14 09:29:44 +00:00
Tobias Kortkamp
4682cc80a2 security/cargo-audit: Update to v0.10.0
Changes:	https://github.com/RustSec/cargo-audit/blob/v0.10.0/CHANGES.md
2019-10-14 06:35:41 +00:00
Yuri Victorovich
882a402d76 security/zeronet: Update 0.6.5-25 -> 0.7.1
ZeroNet now supports python3.
ZeroNet is nothing less than the alternative model of the internet, where websites are hosted by users.
2019-10-14 05:46:10 +00:00
Piotr Kubaj
ee73f901c0 security/fragroute: fix build on GCC architectures
Use newer compiler:
fragtest.c:102: warning: implicit declaration of function 'TAILQ_END'

Approved by:	mentors (implicit approval)
2019-10-13 18:39:11 +00:00
Oleksii Samorukov
fe4dcede88 Replace my personal email address to the samm@freebsd.org
Approved by:    krion (mentor)
Differential Revision:  https://reviews.freebsd.org/D22013
2019-10-13 18:16:38 +00:00
Rodrigo Osorio
2018f7d460 New ports security/libscep and security/p5-Crypt-LibSCEP
libscep is a client side implementation of the Simple Certificate
Enrollment Protocol (SCEP) library.

p5-Crypt-LibSCEP is a perl module using the libscep library
to generate and read messages for the Simple Certificate Enrollment
Protocol (SCEP) in perl applications.

PR:		241195
Submitted by:	Sergei Vyshenski <svysh.fbsd@gmail.com>
2019-10-13 16:02:00 +00:00
Roman Bogorodskiy
ce2f22cb52 security/p11-kit: update to 0.23.18.1 2019-10-13 04:14:45 +00:00
Dmitri Goutnik
f3f4d1ddfd security/botan2: Update to 2.12.0
Changes:	https://botan.randombit.net/news.html#version-2-12-0-2019-10-07

Also bump PORTREVISION of dependent ports.

PR:		241217
Submitted by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D22000
2019-10-12 22:00:01 +00:00
Tobias Kortkamp
c27b1d8bb2 security/rkhunter: Update to 1.4.6
Some files can be updated when running rkhunter.  Do not track them
in the plist.

Changes:	https://sourceforge.net/p/rkhunter/rkh_code/ci/version-1.4.6/tree/files/CHANGELOG
PR:		227837
Submitted by:	lukasz@wasikowski.net (maintainer)
2019-10-12 07:37:02 +00:00
Steve Wills
2eddb3f657 security/sslsplit: update to 0.5.5 2019-10-11 21:32:06 +00:00
Kurt Jaeger
d2f70543be security/vuxml: mongodb vulnerabilities
- CVE-2019-2386, CVE-2019-2389, CVE-2019-2390

PR:		239717
Submitted by:	Ronald Klop <ronald-lists@klop.ws>
2019-10-11 17:36:37 +00:00
Mark Linimon
c445708a8a Commit necessary but insufficient changes to try to make this port
build on GCC-based systems:

  cc1plus: error: unrecognized command line option "-march=native"
  cc1plus: error: unrecognized command line option "-std=gnu++11"

However, this still leaves us with:

  /wrkdirs/usr/ports/security/tfhe/work/tfhe-1.0.1-14-g3319e2c/src/libtfhe/fft_processors/nayuki/fft-x8664-avx.s: Assembler messages:
  /wrkdirs/usr/ports/security/tfhe/work/tfhe-1.0.1-14-g3319e2c/src/libtfhe/fft_processors/nayuki/fft-x8664-avx.s:61: Error: unrecognized opcode: `pushq'

Approved by:	portmgr (tier-2 blanket)
2019-10-11 06:32:15 +00:00
Yuri Victorovich
baeab6868c New port: security/tfhe: Fast Fully Homomorphic Encryption (FHE) library over the Torus 2019-10-11 03:38:09 +00:00
Cy Schubert
1ed1b76553 Update to the latest MIT krb5 commit on github. 2019-10-10 20:15:37 +00:00
Eugene Grosbein
ad7221c383 security/ipsec-tools: unbreak racoon_create_dirs
Specifying required_dirs and creating it at prestart stage does not work
because required_dirs is checked before running prestart these days.
So it fails to start for mfs-based /var even if racoon_create_dirs=YES

Unbreak this by replacing "required_dirs" and "mkdir -p"
in the racoon_prestart with "install -d" that returns error in case
of failure and does nothing if the directory already exists.

Reported by:	Cybil Courraud <freebsd@cyb.fr>
2019-10-10 13:15:13 +00:00
Baptiste Daroussin
f7014bb06a pinentry-gnome3 does not need at all gtk2 2019-10-10 12:17:15 +00:00
Dmitri Goutnik
6f50cea246 New port: security/aws-vault
AWS Vault is a tool to securely store and access AWS credentials in a
development environment.

AWS Vault stores IAM credentials in your operating system's secure keystore and
then generates temporary credentials from those to expose to your shell and
applications. It's designed to be complementary to the AWS CLI tools, and is
aware of your profiles and configuration in ~/.aws/config.

WWW: https://github.com/99designs/aws-vault

Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D21955
2019-10-09 16:06:07 +00:00
Dmitri Goutnik
ccdb8b07fc security/lego: Update to 3.1.0
Changes:	https://github.com/go-acme/lego/releases/tag/v3.1.0

PR:		241155
Submitted by:	Matthew Horan <matt@matthoran.com> (maintainer)
Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D21957
2019-10-09 16:01:35 +00:00
Vinícius Zavam
a5393b578b security/vuxml: add CVE-2011-2767 [www/mod_perl2]
https://nvd.nist.gov/vuln/detail/CVE-2011-2767
2019-10-09 12:31:58 +00:00
Baptiste Daroussin
ef71a0d8c9 Drop the ipv6 virtual category for s* category as it is not relevant anymore 2019-10-09 12:20:31 +00:00
Tobias Kortkamp
b2c888dcd7 security/cargo-audit: Update to v0.9.3
- Disable tests for now.  They require network access.

Changes:	https://github.com/RustSec/cargo-audit/blob/v0.9.3/CHANGES.md
2019-10-09 03:57:24 +00:00
Bernhard Froehlich
81dcaa966f security/wazuh-agent: Update to 3.10.2 and remove irrelevant dependency on curl
PR:		241016
Submitted by:	Michael Muenz <m.muenz@gmail.com> (maintainer)
2019-10-08 13:57:15 +00:00
Dan Langille
39e6e28394 Update CyberChef from 9.7.6 to 9.7.7
Whats new:
Added several more file signatures:
AutoCAD Drawing
OGG Video
lzop compressed
TCP Packet
UDP Packet
Compiled HTML
Windows Password
Bitlocker recovery key
Certificate
PGP pubring
PGP secring
PGP Safe
Task Scheduler
Windows Shortcut (lnk)

PR:		241127
Submitted by:	thomas@bsdunix.ch
2019-10-08 12:05:12 +00:00
Yuri Victorovich
2b14c8f33f security/py-txtorcon: Update 19.0.0 -> 19.1.0
Reported by:	portscout
2019-10-08 06:25:10 +00:00
Yuri Victorovich
87d8ad6eb6 security/mkp224o: Update 1.3.0 -> 1.4.0
Reported by:	portscout
2019-10-08 06:22:37 +00:00
Yuri Victorovich
a16f547b13 security/cowrie: Update 1.6.0 -> 1.9.7
Reported by:	portscout
2019-10-08 06:20:17 +00:00
Piotr Kubaj
33b6a35bf2 security/p5-Net-SinFP: unbreak on powerpc*
Builds fine on powerpc64.

Also confirmed by: https://seclists.org/pen-test/2006/Dec/234

The commit that locked it only to LE architectures happened just a few months earlier in r172915.

Approved by:	mentors (implicit approval)
2019-10-07 18:28:06 +00:00
Steve Wills
61d0efb555 security/maltrail: Update to 0.15
PR:		241008
Submitted by:	Michael Muenz <m.muenz@gmail.com> (maintainer)
2019-10-07 17:19:45 +00:00
Yuri Victorovich
770dedf000 security/tor-devel: Update 0.4.2.1-alpha -> 0.4.2.2-alpha
Reported by:	upstream notification
2019-10-07 15:27:34 +00:00
Steve Wills
213e6333aa security/samhain: update to 4.3.3
PR:		241044
Submitted by:	Nikola Kolev <koue@chaosophia.net> (maintainer)
2019-10-07 15:25:35 +00:00
Steve Wills
a214877d35 security/protonvpn-cli: fixes issue with certs and issue with countries
PR:		241103
Submitted by:	Lorenzo Salvadore <phascolarctos@protonmail.ch> (maintainer)
2019-10-07 14:48:42 +00:00
Koichiro Iwao
dcc33ddea7 security/stoken: Unbreak
it is actually not broken. Builds fine without any modifications.
Marking as BROKEN was MFH'ed, so MFH unbreak again.

PR:		240940
Reported by:	Rubin Simons <rubin@xs4all.nl>
Approved by:	samm@os2.kiev.ua (maintainer)
MFH:		2019Q4
2019-10-07 07:52:02 +00:00
Emanuel Haupt
2ac26590d3 Update to 0.19 2019-10-06 19:42:06 +00:00
Pedro F. Giffuni
c937a4ccc9 rename most cases of jakarta- to apache-
The Apache Softare Foundation used to maintain an umbrella project named
Jakarta but it was retired on 2011. This name now conflicts with the new
name for Java EE under the Eclipse Foundation.

Rename most of the packages to be more consistent. Some other packages remain
but they will require intervention by their corresponding maintainers.

Approved by:	thierry (mentor), makc
Differential Revision:	https://reviews.freebsd.org/D21902
2019-10-06 19:08:14 +00:00
Cy Schubert
89756135c3 Take PORTEPOCH into account.
PR:		241066
Reported by:	tobik
2019-10-06 05:52:58 +00:00
Cy Schubert
f83872158c Document two new Xpdf vulnerabilities: CVE-2019-16927 and CVE-2019-9877.
PR:		241066
Security:	https://nvd.nist.gov/vuln/detail/CVE-2019-16927
Security:	https://nvd.nist.gov/vuln/detail/CVE-2019-9877
Security:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9877
Security:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16927
2019-10-06 01:48:49 +00:00
Mark Linimon
d98ef0df5f Rework the TLS 1.3 support in ISA-L to move the nonce work out of the
seal routine and into the encrypt routine. Also obtain the nd.seqno in
the TLS 1.2 case from the TLS record itself, as if we change to use a
random starting value, this will prevent things from breaking due to
the value on the wire being different from the passed in seqno.

Submitted by:u		jhb
Approved by:u		gallatin
Differential Revision:	D21857
2019-10-06 01:42:14 +00:00
Muhammad Moinur Rahman
14eec490ef security/suricata5: Update version 5.0.0-beta1=>5.0.0-rc1
- Remove HYPERSCAN as OPTIOINS_DEFAULT

PR:		240794
Reported by:	franco@opnsense.org
Relnotes:	https://suricata-ids.org/2019/09/24/please-help-us-test-suricata-5-0-0-rc1/
2019-10-05 21:31:55 +00:00
Tobias Kortkamp
5c2cb6d576 security/barnyard2: Cleanup
- Drop nop WANT_PGSQL_VER
- Spell TCL_DESC correctly (there is no OPTIONS_DESC)
- No need to include bsd.port.options.mk in this port
2019-10-05 10:51:34 +00:00
Jan Beich
fbea4307e8 devel/google{test,mock}: update to 1.10.0
- Drop static library
- Drop gtest-config and gmock-config
- Drop GTEST_LIB_CHECK autoconf macro
- Drop gmock_doctory.py as it's too old
- Expose tests via option

Changes:	https://github.com/google/googletest/compare/release-1.8.1...release-1.10.0
Reported by:	GitHub (watch releases)
PR:		239654
Differential Revision:	https://reviews.freebsd.org/D19430
2019-10-05 00:42:20 +00:00
Larry Rosenman
3072368868 security/1password-client: update to 0.6.2.
Release Notes:
https://app-updates.agilebits.com/product_history/CLI
2019-10-04 21:25:09 +00:00
Rene Ladan
ebf97e4ba1 Remove expired ports:
2019-10-01 security/softhsm: End-of-life announced, update to softhsm2 ASAP.
2019-10-03 net/asterisk15: Asterisk 15.x will reach EOL on 2019-10-03. Please migrate to net/asterisk16
2019-10-04 19:03:22 +00:00
Emanuel Haupt
74b80b2a2e Release maintainership. 2019-10-04 12:43:41 +00:00
Jan Beich
4bbb4133b2 devel/icu: update to 65.1
Changes:	http://site.icu-project.org/download/65
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
2019-10-03 20:35:29 +00:00
Sunpoet Po-Chuan Hsieh
202f2ee62f Document unbound vulnerability 2019-10-03 19:28:42 +00:00
Sunpoet Po-Chuan Hsieh
7e3e1c862a Update to 0.39.0
Changes:	https://github.com/certbot/certbot/blob/master/CHANGELOG.md
2019-10-03 19:28:18 +00:00
Greg Lewis
4bf0670960 Remove references to EoL'ed Java versions
* Java 9 and 10 are EoL'ed upstream and the ports for them are scheduled
  for deletion, so switch the version specification here to 11+.

PR:		241022
Approved by:	netchild@
Sponsored by:	The FreeBSD Foundation
2019-10-03 17:22:17 +00:00
Kurt Jaeger
ca71e73be3 New port: security/protonvpn-cli
protonvpn-cli is an user-friendly command-line tool for accessing the
swiss-based privacy-focused ProtonVPN VPN service.
You need a ProtonVPN account to use it: you can create one at
https://protonvpn.com. Free accounts are available, although with
limited features: only 3 countries (Netherlands, USA, Japan) are
available with the free plan.
It can also easily add an extra layer of privacy by activating Tor
(needs payed plan).

No manual page is provided with protonvpn-cli, but you can get help
on usage by running protonvpn-cli -h.

Warning: although user is asked about enabling a killswitch or not, no
killswitch is available at the moment.

WWW: https://protonvpn.com

PR:		240841
Submitted by:	Lorenzo Salvadore <phascolarctos@protonmail.ch>
2019-10-03 09:24:29 +00:00
Bernard Spil
b4aec1a638 security/libressl-devel: Update to 3.0.1 2019-10-03 07:41:15 +00:00