Commit Graph

35682 Commits

Author SHA1 Message Date
Dmitri Goutnik f35fdab00d security/vuxml: Document Go vulnerabilities 2022-06-07 07:36:39 -05:00
Michael Gmelin ce57b8b969 security/py-fido2: Fix and extend FreeBSD support
This unbreaks FreeBSD support in general and adds support
for FreeBSD 13's optional hidraw(4) driver.

See https://github.com/Yubico/python-fido2/pull/139

PR:		264281
Approved by:	koobs (python, maintainer)
2022-06-07 13:51:57 +02:00
Ashish SHUKLA 58fb56f7a7 security/tailscale: Update to 1.26.0 2022-06-07 06:22:11 +00:00
Yuri Victorovich 4a1f591116 security/fizz: Update 2022.05.30.00 -> 2022.06.06.00 2022-06-06 17:38:46 -07:00
Dmitri Goutnik b16eb860cc */*: Repair after switching to versioned Go ports
- Add 1.17 to USES=go for ports that still need go117, remove GO_PORT;
- Add missing ${SETENV} ${MAKE_ENV} to repair BINARY_ALIAS;
- Remove explicit dependencies on lang/go.

PR:		264336
Reviewed by:	ygy jwb yuri mikael drtr0jan@yandex.ru decke mat
Differential Revision:	https://reviews.freebsd.org/D35346
2022-06-06 13:19:10 -05:00
Rene Ladan 1f1895b22b all: return trasz' ports to the pool after safekeeping his commit bit 2022-06-06 14:00:29 +02:00
Dima Panov c6fb53f94f security/botan2: update to 2.19.2 release (+)
* Since 2.19.2 Botan has dropped openssl provider, remove corresponding option
* Adopt
2022-06-05 23:52:23 +03:00
Craig Leres 6bcbed3a62 security/libu2f-host: Unbreak build with DOCS disabled
libu2f-host does not successfully configure unless gtk-doc is present
and enabled:

    ===>  Configuring for libu2f-host-1.1.10_1
    /bin/sh: /usr/local/bin/gtkdocize: not found
    ===>  Mk/Uses/autoreconf.mk: Error running gtkdocize
    *** Error code 1

So: always enable gtk-doc and build DOCS things just don't install
them.

PR:		264298
2022-06-05 13:47:54 -07:00
Matthias Andree d6873d2aeb security/vuxml: add e2fsprogs CVE-2022-1304 < 1.46.5_1
Security:	CVE-2022-1304
Security:	a58f3fde-e4e0-11ec-8340-2d623369b8b5
2022-06-05 17:22:52 +02:00
Matthias Andree 32877d0369 security/easy-rsa: fix EASYRSA override and locale
* remove our own wrapper, overriding the EASYRSA folder is no
  longer working since 3.1.0.

* patch EasyRSA to unset LC_ALL and override LC_TIME, to avoid
  date command failures

* bump PORTREVISION=2

see comment #7 ff. of
PR:		264415
2022-06-05 14:57:25 +02:00
Rene Ladan c6c95a820e cleanup: Remove expired ports:
2022-06-05 security/keepassx-devel: KeePassX had been stopped development/maintenance, please consider using security/keepassxc instead
2022-06-05 12:13:38 +02:00
Matthias Fechner 5b96f905af security/vuxml: Document gitlab vulnerabilities 2022-06-04 21:47:56 +02:00
Nuno Teixeira a20899cc85 security/gopass: Update to 1.14.3
ChangeLog: https://github.com/gopasspw/gopass/blob/master/CHANGELOG.md
2022-06-04 19:45:33 +01:00
Yuri Victorovich ec51bc679e security/fizz: Update 2022.04.11.00 -> 2022.05.30.00 2022-06-03 23:48:33 -07:00
Jan Beich 429f3de9bd security/nettle: unbreak on aarch64 after c328d3ca85
/usr/bin/cc -I. -isystem /usr/local/include -DHAVE_CONFIG_H -O2 -pipe  -I/usr/include -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing  -ggdb3 -Wall -W -Wno-sign-compare   -Wmissing-prototypes -Wmissing-declarations -Wstrict-prototypes   -Wpointer-arith -Wbad-function-cast -Wnested-externs -fpic -MT chacha-4core.o -MD -MP -MF chacha-4core.o.d -c chacha-4core.s
chacha-4core.s:125:23: error: invalid operand for instruction
        add             v24.4s, v24.4s, v160.4s
                                        ^
chacha-4core.s:126:7: error: invalid operand for instruction
        add             v163.4s, v163.4s, v164.4s
                        ^
chacha-4core.s:129:7: error: invalid operand for instruction
        eor             v162.16b, v162.16b, v24.16b
                        ^
chacha-4core.s:130:7: error: invalid operand for instruction
        eor             v166.16b, v166.16b, v163.16b
                        ^
chacha-4core.s:133:8: error: invalid operand for instruction
        rev32   v162.8h, v162.8h
                ^
chacha-4core.s:134:8: error: invalid operand for instruction
        rev32   v166.8h, v166.8h
                ^
chacha-4core.s:138:7: error: invalid operand for instruction
        add             v161.4s, v161.4s, v162.4s
                        ^
chacha-4core.s:139:7: error: invalid operand for instruction
        add             v165.4s, v165.4s, v166.4s
                        ^
chacha-4core.s:142:15: error: invalid operand for instruction
        eor             v6.16b, v160.16b, v161.16b
                                ^
chacha-4core.s:143:15: error: invalid operand for instruction
        eor             v7.16b, v164.16b, v165.16b
                                ^
chacha-4core.s:146:7: error: invalid operand for instruction
        ushr    v160.4s, v6.4s, #20
                ^
chacha-4core.s:147:7: error: invalid operand for instruction
        ushr    v164.4s, v7.4s, #20
                ^
chacha-4core.s:150:7: error: invalid operand for instruction
        sli             v160.4s, v6.4s, #12
                        ^
chacha-4core.s:151:7: error: invalid operand for instruction
        sli             v164.4s, v7.4s, #12
                        ^
chacha-4core.s:155:23: error: invalid operand for instruction
        add             v24.4s, v24.4s, v160.4s
                                        ^
chacha-4core.s:156:7: error: invalid operand for instruction
        add             v163.4s, v163.4s, v164.4s
                        ^
chacha-4core.s:159:7: error: invalid operand for instruction
        eor             v162.16b, v162.16b, v24.16b
                        ^
chacha-4core.s:160:7: error: invalid operand for instruction
        eor             v166.16b, v166.16b, v163.16b
                        ^
chacha-4core.s:163:18: error: vector register expected
        tbl             v162.16b, {v162.16b}, v8.16b
                                   ^
chacha-4core.s:163:26: error: unknown token in expression
        tbl             v162.16b, {v162.16b}, v8.16b
                                           ^
chacha-4core.s:163:26: error: invalid operand
        tbl             v162.16b, {v162.16b}, v8.16b
                                           ^
chacha-4core.s:164:18: error: vector register expected
        tbl             v166.16b, {v166.16b}, v8.16b
                                   ^
chacha-4core.s:164:26: error: unknown token in expression
        tbl             v166.16b, {v166.16b}, v8.16b
                                           ^
chacha-4core.s:164:26: error: invalid operand
        tbl             v166.16b, {v166.16b}, v8.16b
                                           ^
chacha-4core.s:168:7: error: invalid operand for instruction
        add             v161.4s, v161.4s, v162.4s
                        ^
chacha-4core.s:169:7: error: invalid operand for instruction
        add             v165.4s, v165.4s, v166.4s
                        ^
chacha-4core.s:172:15: error: invalid operand for instruction
        eor             v6.16b, v160.16b, v161.16b
                                ^
chacha-4core.s:173:15: error: invalid operand for instruction
        eor             v7.16b, v164.16b, v165.16b
                                ^
chacha-4core.s:176:7: error: invalid operand for instruction
        ushr    v160.4s, v6.4s, #25
                ^
chacha-4core.s:177:7: error: invalid operand for instruction
        ushr    v164.4s, v7.4s, #25
                ^
chacha-4core.s:180:7: error: invalid operand for instruction
        sli             v160.4s, v6.4s, #7
                        ^
chacha-4core.s:181:7: error: invalid operand for instruction
        sli             v164.4s, v7.4s, #7
                        ^
chacha-4core.s:186:23: error: invalid operand for instruction
        add             v24.4s, v24.4s, v160.4s
                                        ^
chacha-4core.s:187:7: error: invalid operand for instruction
        add             v163.4s, v163.4s, v164.4s
                        ^
chacha-4core.s:190:7: error: invalid operand for instruction
        eor             v162.16b, v162.16b, v24.16b
                        ^
chacha-4core.s:191:7: error: invalid operand for instruction
        eor             v166.16b, v166.16b, v163.16b
                        ^
chacha-4core.s:194:8: error: invalid operand for instruction
        rev32   v162.8h, v162.8h
                ^
chacha-4core.s:195:8: error: invalid operand for instruction
        rev32   v166.8h, v166.8h
                ^
chacha-4core.s:199:7: error: invalid operand for instruction
        add             v161.4s, v161.4s, v162.4s
                        ^
chacha-4core.s:200:7: error: invalid operand for instruction
        add             v165.4s, v165.4s, v166.4s
                        ^
chacha-4core.s:203:15: error: invalid operand for instruction
        eor             v6.16b, v160.16b, v161.16b
                                ^
chacha-4core.s:204:15: error: invalid operand for instruction
        eor             v7.16b, v164.16b, v165.16b
                                ^
chacha-4core.s:207:7: error: invalid operand for instruction
        ushr    v160.4s, v6.4s, #20
                ^
chacha-4core.s:208:7: error: invalid operand for instruction
        ushr    v164.4s, v7.4s, #20
                ^
chacha-4core.s:211:7: error: invalid operand for instruction
        sli             v160.4s, v6.4s, #12
                        ^
chacha-4core.s:212:7: error: invalid operand for instruction
        sli             v164.4s, v7.4s, #12
                        ^
chacha-4core.s:216:23: error: invalid operand for instruction
        add             v24.4s, v24.4s, v160.4s
                                        ^
chacha-4core.s:217:7: error: invalid operand for instruction
        add             v163.4s, v163.4s, v164.4s
                        ^
chacha-4core.s:220:7: error: invalid operand for instruction
        eor             v162.16b, v162.16b, v24.16b
                        ^
chacha-4core.s:221:7: error: invalid operand for instruction
        eor             v166.16b, v166.16b, v163.16b
                        ^
chacha-4core.s:224:18: error: vector register expected
        tbl             v162.16b, {v162.16b}, v8.16b
                                   ^
chacha-4core.s:224:26: error: unknown token in expression
        tbl             v162.16b, {v162.16b}, v8.16b
                                           ^
chacha-4core.s:224:26: error: invalid operand
        tbl             v162.16b, {v162.16b}, v8.16b
                                           ^
chacha-4core.s:225:18: error: vector register expected
        tbl             v166.16b, {v166.16b}, v8.16b
                                   ^
chacha-4core.s:225:26: error: unknown token in expression
        tbl             v166.16b, {v166.16b}, v8.16b
                                           ^
chacha-4core.s:225:26: error: invalid operand
        tbl             v166.16b, {v166.16b}, v8.16b
                                           ^
chacha-4core.s:229:7: error: invalid operand for instruction
        add             v161.4s, v161.4s, v162.4s
                        ^
chacha-4core.s:230:7: error: invalid operand for instruction
        add             v165.4s, v165.4s, v166.4s
                        ^
chacha-4core.s:233:15: error: invalid operand for instruction
        eor             v6.16b, v160.16b, v161.16b
                                ^
chacha-4core.s:234:15: error: invalid operand for instruction
        eor             v7.16b, v164.16b, v165.16b
                                ^
chacha-4core.s:237:7: error: invalid operand for instruction
        ushr    v160.4s, v6.4s, #25
                ^
chacha-4core.s:238:7: error: invalid operand for instruction
        ushr    v164.4s, v7.4s, #25
                ^
chacha-4core.s:241:7: error: invalid operand for instruction
        sli             v160.4s, v6.4s, #7
                        ^
chacha-4core.s:242:7: error: invalid operand for instruction
        sli             v164.4s, v7.4s, #7
                        ^
2022-06-04 00:54:01 +00:00
Jan Beich c3c38a46b0 security/py-zxcvbn: convert to USE_PYTHON=pytest 2022-06-04 00:34:53 +00:00
Po-Chuan Hsieh 9b2e4e9f1e security/p5-Dancer2-Plugin-Passphrase: Update to 3.4.1
Changes:	https://metacpan.org/dist/Dancer2-Plugin-Passphrase/changes
2022-06-04 07:36:48 +08:00
Po-Chuan Hsieh 87dfd0d561 security/rubygem-acme-client: Update to 2.0.11
Changes:	https://github.com/unixcharles/acme-client/blob/master/CHANGELOG.md
2022-06-04 07:36:43 +08:00
Po-Chuan Hsieh c328d3ca85 security/nettle: Update to 3.8
- Remove ELFv2 patch since upstream adds configure test for ELFV2_ABI [1]

Changes:	https://git.lysator.liu.se/nettle/nettle/-/blob/master/NEWS
Reference:	https://git.lysator.liu.se/nettle/nettle/-/commit/c7cf19390dcb0e9792fc23b0c935c1fe5e4f91e1 [1]
2022-06-04 07:36:30 +08:00
Sergey A. Osokin e7ac1ef89b security/boringssl: update to the recent commit 2022-06-03 19:17:57 -04:00
Daniel Engberg c8b9f347e3 security/mkp224o: Use upstream release archive
PR:		264407
2022-06-03 11:23:36 -07:00
Craig Leres d1628eb541 security/zeek: Update to 4.0.7
https://github.com/zeek/zeek/releases/tag/v4.0.7

Security fixes since 4.0.6:

 - Fix potential hang in the DNS analyzer when receiving a
   specially-crafted packet. Due to the possibility of this happening
   with packets received from the network, this is a potential DoS
   vulnerability.

Other changes:

 - Fix issue with broken libpcaps that return repeat packets, most
   notably the version provided with Myricom hardware.

Reported by:	Tim Wojtulewicz
2022-06-03 10:34:06 -07:00
Craig Leres c9acdf933e security/vuxml: Mark zeek < 4.0.7 as vulnerable as per:
https://github.com/zeek/zeek/releases/tag/v4.0.7

 - Fix potential hang in the DNS analyzer when receiving a
   specially-crafted packet. Due to the possibility of this happening
   with packets received from the network, this is a potential DoS
   vulnerability.

Reported by:	Tim Wojtulewicz
2022-06-03 10:32:46 -07:00
Po-Chuan Hsieh a8ae447d4a security/py-fido2: Convert to USE_PYTHON=unittest 2022-06-04 00:58:05 +08:00
Po-Chuan Hsieh 172c515a03 security/py-libnacl: Convert to USE_PYTHON=unittest 2022-06-04 00:57:51 +08:00
Po-Chuan Hsieh 17a787b746 security/py-asyncssh: Convert to USE_PYTHON=unittest 2022-06-04 00:57:49 +08:00
Po-Chuan Hsieh 584ab29309 security/py-signedjson: Convert to USE_PYTHON=pytest 2022-06-04 00:57:37 +08:00
Po-Chuan Hsieh 77bbfeee4c security/py-ecdsa: Convert to USE_PYTHON=pytest 2022-06-04 00:57:34 +08:00
Po-Chuan Hsieh dc62ba31ef security/py-cryptography: Convert to USE_PYTHON=pytest 2022-06-04 00:57:31 +08:00
Po-Chuan Hsieh f9f5efa8e0 security/py-argon2-cffi: Convert to USE_PYTHON=pytest 2022-06-04 00:57:29 +08:00
Jason W. Bacon 06b803fa98 security/globalprotect-openconnect: Update to 1.4.6
Fix regression in 1.4.5

Changes:        https://github.com/yuezk/GlobalProtect-openconnect/tags
Reported by:    portscout
2022-06-03 09:11:11 -05:00
Po-Chuan Hsieh b558b94535 security/py-tuf: Fix build with setuptools 61.0.0+
With hat:	python
2022-06-03 21:59:17 +08:00
Po-Chuan Hsieh 6efcbee003 security/suricata: Fix build with setuptools 58.0.0+
- Bump PORTREVISION for package change

With hat:	python
2022-06-03 21:59:11 +08:00
Po-Chuan Hsieh 1bbb9cd44e security/sssd: Fix build with setuptools 58.0.0+
With hat:	python
2022-06-03 21:59:11 +08:00
Po-Chuan Hsieh 34ab151325 security/py-gpgme: Fix build with setuptools 58.0.0+
- Bump PORTREVISION for package change

With hat:	python
2022-06-03 21:59:10 +08:00
Po-Chuan Hsieh dd8d9df3c8 security/p5-Text-Password-Pronounceable: Add NO_ARCH 2022-06-03 17:00:59 +08:00
Po-Chuan Hsieh 0a8fd62bc1 security/p5-Dancer2-Plugin-Passphrase: Update to 3.4.0
Changes:	https://metacpan.org/dist/Dancer2-Plugin-Passphrase/changes
2022-06-03 17:00:58 +08:00
Po-Chuan Hsieh 699f62d696 Mk/Uses/perl5.mk: Remove outdated P5_POD_PARSER
lang/perl5.30 has been removed in b3fb5d8b3c.
2022-06-03 17:00:55 +08:00
Po-Chuan Hsieh 4c03037974 security/py-certifi: Update to 2022.5.18.1
Changes:	https://github.com/certifi/python-certifi/commits/master
2022-06-03 17:00:42 +08:00
Po-Chuan Hsieh be041e53dc security/py-authlib: Update to 1.0.1
- Remove CLIENT option

Changes:	https://github.com/lepture/authlib/releases
2022-06-03 17:00:41 +08:00
Po-Chuan Hsieh 9ba3a72c61 security/p5-IO-Async-SSL: Update to 0.23
Changes:	https://metacpan.org/dist/IO-Async-SSL/changes
2022-06-03 17:00:32 +08:00
Muhammad Moinur Rahman b9651d58b1 security/snort3: Update version 3.1.30.0=>3.1.31.0
- Pet portclippy/portfmt

Relnotes: https://github.com/snort3/snort3/releases/tag/3.1.31.0
2022-06-03 00:48:11 -05:00
Stefan Eßer b446537bb3 security/cvechecker: unbreak after import of dns/acme-dns
The import of dns/acme-dns in commit b30a7af70d seems to have
contained unrelated patch files that were added to this port.

Revert the part of commit b30a7af70d that affected this port
to make it build again.

Reported by:	pkg-fallout
2022-06-03 07:27:59 +02:00
Matthias Andree 0a0dd568d8 security/easy-rsa: fix confusion of vars file
...and no longer package it as @sample. It is per-PKI, and easyrsa init-pki
will copy vars.example from the distribution, and create a PKI-local copy
named vars.  Should fix grembo@'s bug report [1]

add a new pkg-message file to explain this.

while here, add a convenience hardlink easy-rsa to the easyrsa wrapper,
to have an executable matching the package name.

PR:		264415
Reported by:	grembo@ (Michael Gmelin)
2022-06-02 23:29:43 +02:00
Dirk Meyer 3a13fb289e security/tinc-devel: rc script support network argument
PR: 264345
2022-06-02 19:42:43 +02:00
Yuri Victorovich da25f85064 security/liboqs: Update 0.7.1 -> 0.7.2
0.7.2 is on a development branch.
Updated to dev branch to see if the aarch64 failure is gone.
2022-06-02 09:26:09 -07:00
Ganael LAPLANCHE 3dc1f88bfc security/vlock: Fix caca saver module load
While here, fix lib depends for CACASAVER option.
2022-06-02 12:22:30 +02:00
Björn König b3a2477de7 security/strongswan: add CTR plugin option
PR:		264354
Approved by:	Francois ten Krooden (maintainer)
2022-06-02 00:03:17 +02:00
Yuri Victorovich afbabe97a7 security/mkp224o: Update 1.5.0 -> 1.6.0
Reported by:	portscout
2022-06-01 10:56:01 -07:00
Guido Falsi 6b06e5e511 security/courier-authlib: Update to 0.71.5 2022-06-01 15:49:21 +02:00