26724 Commits

Author SHA1 Message Date
Alexey Dokuchaev
a247b2f47d Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files that are not actually manual pages (part 2).
2018-01-11 14:18:01 +00:00
Tijl Coosemans
b6d26a5ea8 Patch configure directly so USE_AUTOTOOLS can be removed. 2018-01-11 13:35:59 +00:00
Tijl Coosemans
af968163c5 Patch configure directly so USE_AUTOTOOLS can be removed. 2018-01-11 13:17:16 +00:00
Alex Dupre
ca908d3af2 Fix build on FreeBSD 10. 2018-01-11 11:02:01 +00:00
Steve Wills
f5f4861525 security/boringssl: update to new snapshot 2018-01-10 19:44:08 +00:00
Steve Wills
11c3c39f51 security/2fa: Update to 1.1.0
PR:		224934
Submitted by:	Dmitri Goutnik <dg@syrec.org> (maintainer)
2018-01-10 19:02:56 +00:00
Alex Dupre
21c95ce266 trezord (short for TREZOR Daemon), or TREZOR Bridge, is a small piece of
software, used for websites, to talk with TREZOR devices.

WWW: https://github.com/trezor/trezord
2018-01-10 17:12:45 +00:00
Steve Wills
431042928f security/rubygem-six: update to 0.2.1 2018-01-10 16:03:51 +00:00
Alexey Dokuchaev
2c0789eb84 Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files which are not actually manual pages.
2018-01-10 15:08:51 +00:00
Ryan Steinmetz
46bfba1a91 - Add support for RSA soft token via libstoken [1]
- Make GSSAPI optional (still on by default, as before)

PR:		208946 [1]
Requested by:	timp87@gmail.com [1]
2018-01-10 14:01:49 +00:00
Dmitry Marakasov
d18f8f5af7 - Fix build on mips by disabling unknown warning flag
MFH:		2018Q1
Approved by:	portmgr blanket
2018-01-10 12:35:02 +00:00
Dmitry Marakasov
85ff7141a3 - Don't try to use lib32 directory, fixes build on mips
- While here, tiny whitespace fix

MFH:		2018Q1
Approved by:	portmgr blanket
2018-01-10 12:02:42 +00:00
Kirill Ponomarev
6f080eb9e0 Use ${COPYTREE_SHARE} instead of ${CP}
Reported by:	mat
2018-01-10 07:55:18 +00:00
Kirill Ponomarev
5ab137d6d2 - Remove explicit -march=native declaration.
- Mark ONLY_FOR_ARCHS=amd64 (it is temporary only until I'm ready
  with proper configure and Makefiles to set
  ARCH_FOR_p448=arch_ref64 ARCH_FOR_p25519=arch_ref64 for aarch64
  instead of arch_x86_64 and arch_32 for i386)
- Manually install headers (until we've proper build system in
  upstream as well)
2018-01-10 07:39:30 +00:00
Danilo G. Baio
61096b1472 security/libargon2: Update to 20171227
Changes:	https://github.com/P-H-C/phc-winner-argon2/blob/20171227/CHANGELOG.md

PR:		225022
Submitted by:	Christopher Hall <hsw@bitmark.com> (maintainer)
2018-01-09 23:18:28 +00:00
Jung-uk Kim
ddbb074f9a Document the latest Flash Player vulnerability.
https://helpx.adobe.com/security/products/flash-player/apsb18-01.html
2018-01-09 21:25:14 +00:00
Luca Pizzamiglio
afde71aeec security/pecl-mcrypt: Add port
This PHP extension works only with PHP 7.2
It provides an extension deprecated in the last version of PHP

Sponsored by:	trivago N.V.
2018-01-09 16:54:30 +00:00
Mathieu Arnold
bb5196a149 Remove support for variables that have been deprecated for a while.
variables                  deprecation       revision
WITHOUT_NLS                2013-12-13        r336337
WITH_/WITHOUT_             2014-02-24        r345870
NOPORT(DOC|EXAMPLE)S       2014-04-19        r351587
WITH_BDB_VER               2016-05-02        r414444
OVERRIDE_LINUX_BASE_PORT   2016-09-05        r421387
WITH_OPENSSL_(BASE|PORT)   2016-06-16        r416965

While there, add an ERROR variable that works like DEV_ERROR, but for
user facing errors, and move NOPORTDOCS,
NOPORTEXAMPLES and WITHOUT_NLS to it.

Cleanup bsd.sanity.mk a bit.

Fix fallout.

PR:		224613
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D13490
2018-01-09 07:40:55 +00:00
Danilo G. Baio
625cafb5d0 security/vuxml: Document vulnerability in www/awstats
Security:	CVE-2017-1000501

PR:		225007
Reported by:	Vidar Karlsen <vidar@karlsen.tech>
2018-01-08 23:03:54 +00:00
Kirill Ponomarev
14be0111ee Add security/libdecaf
Implementation of elliptic curve cryptography using the Montgomery
and Edwards curves Curve25519, Ed25519, Ed448-Goldilocks and
Curve448, using the Decaf / Ristretto encoding.

Approved by:	mat (mentor)
2018-01-08 17:11:27 +00:00
Mark Felder
2645043bdf A small, self-contained API server written in Ruby and Sinatra to
provide a private backend for the open-source Bitwarden apps.

WWW: https://github.com/jcs/bitwarden-ruby
2018-01-08 17:00:31 +00:00
Mark Felder
43666ff0f3 A Ruby implementation of the Password-Based Key-Derivation Function v2
WWW: https://github.com/emerose/pbkdf2-ruby
2018-01-08 16:51:12 +00:00
Kirill Ponomarev
4ec78a610c Bump PORTREVISION on *-sbcl ports after lang/sbcl upgrade. 2018-01-08 14:44:54 +00:00
Wen Heping
0d1b8e3775 - Update to 4.2.4
PR:		224991
Submitted by:	koue@chaosophia.net(maintainer)
2018-01-08 13:56:35 +00:00
Kurt Jaeger
dd4d2a5cd1 security/softhsm2: fix install of p11-kit .module file
- See also
  https://github.com/opendnssec/SoftHSMv2/issues/230

PR:		212518
Submitted by:	jaap@NLnetLabs.nl (maintainer)
Reported by:	dwmw2@infradead.org
Tested by:	w.schwarzenfeld@utanet.at
2018-01-08 13:32:53 +00:00
Muhammad Moinur Rahman
56b58607a0 security/munge: Fix patch file
Reported by:	antoine
2018-01-07 23:32:12 +00:00
Muhammad Moinur Rahman
7186c3a2c0 security/munge: Update version 0.5.12=>0.5.13
- Fix GH_TAGNAME: use tag name instead of hash [1]
- Fix indent [1]

PR:		224707 [1]
Submitted by:	sunpoet [1]
Relnotes:	https://github.com/dun/munge/releases
2018-01-07 19:51:40 +00:00
Sunpoet Po-Chuan Hsieh
7541ae37f0 Sort SUBDIRs 2018-01-07 15:53:22 +00:00
Sunpoet Po-Chuan Hsieh
c77faabd9a Strip shared library in post-install:
- Sort PLIST
2018-01-07 12:13:11 +00:00
Raphael Kubo da Costa
f6ceca6350 Update Qt5 ports to 5.9.3.
This took quite a lot of time because Qt's own build system underwent
several changes in 5.8.0 that took a while to adapt to.

And, of course, qt5-webengine is a behemoth that we need to patch like crazy
due to its bundling of Chromium. In fact, most of the Chromium patches in
qt5-webengine have been imported with no changes from www/chromium@433510
("www/chromium: update to 56.0.2924.87").

New port: accessibility/qt5-speech

Bigger changes to Qt5 ports we had to make:
- Qt now allows using a configure.json file to define configuration options
  and specify configuration checks that can be done when qmake is invoked.
  However, configure.json checks done in a subdirectory only propagates to
  subdirectories, and checks elsewhere will fail if all .pro files are being
  parsed at once (i.e. qmake -recursive), so several ports had to switch to
  USES=qmake:norecursive along with manual additional qmake invocations in
  subdirectories in order to work. It's been mentioned in a few places such
  as Qt's bug tracker that qmake's recursive mode is pretty much deprecated,
  so we might switch to non-recursive mode by default in the future.

- Uses/qmake.mk: Introduce QMAKE_CONFIGURE_ARGS. qmake now accepts
  arbitrary options such as '-foo' and '-no-bar' at the end of the
  command-line. They can be specified in QMAKE_CONFIGURE_ARGS.

- graphics/qt5-wayland: The port can only be built if graphics/mesa-libs is
  built with the WAYLAND option, so a corresponding option (off by default)
  was added to the port.

- misc/qt5-doc: Switch to a pre-built documentation tarball. The existing
  port was not working with Qt 5.9. Instead of trying to fix it, switch to
  what Gentoo does and fetch a tarball that already contains all
  documentation so that we do not have to build anything at all. The
  tarball's name and location in download.qt.io look a bit weird, but it
  seems to work fine.

- www/qt5-webengine: Use binutils from ports, Chromium's GN build system
  generates a build.ninja that uses ar(1) with the @file syntax that is not
  supported by BSD ar, so we need to use GNU ar from binutils.

- x11-toolkits/qt5-declarative-render2d: This port was merged into the main
  Qt Declarative repository upstream, and into x11-toolkits/qt5-quick in the
  ports tree.

Changes to other ports we had to make:
- biology/ugene: Drop a '#define point "."' that is not present in more
  recent versions of the port. Defining a macro with such a common name
  causes build issues with Qt 5.9, which uses |point| as an argument name in
  methods.

- cad/qelectrotech: Fix plist with Qt 5.9. Directories are no longer
  installed with `cp -f -R', but rather `qmake install qinstall', which does
  not install

    %%DATADIR%%/elements/10_electric/20_manufacturers_articles/bosch_rexroth/.directory

  That's a local file that should not even have been part of the tarball
  anyway.

- chinese/gcin-qt5: Add additional private Qt directories (which should not
  be used in the first place) to get the port to build with Qt 5.9.

- devel/qtcreator: Fix plist with Qt 5.9. Something changed in qdoc and some
  test classes no longer generate documentation files.

- security/keepassx-devel: Import a patch sent upstream almost a year ago to
  fix the build with Qt 5.9.

Thanks to antoine for the exp-run, and tcberner and Laurent Cimon
<laurent@nuxi.ca> for landing changes in our qt-5.9 branch.

PR:		224849
2018-01-06 21:30:31 +00:00
Danilo G. Baio
062af1d130 security/vuxml: Document multiple vulnerabilities in irc/irssi
Security:	CVE-2018-5205
Security:	CVE-2018-5206
Security:	CVE-2018-5207
Security:	CVE-2018-5208

PR:		224954
Reported by:	tj@mrsk.me (email)
Reported by:	David O'Rourke <dor.bsd@xm0.uk>
2018-01-06 20:43:51 +00:00
Yuri Victorovich
2c43c07183 Corrected shared library names that got the .abi3 suffix for python-36 and up after devel/py-cffi upgrade to 1.11.2
This is the followup for the r457997 commit that updated devel/py-cffi to 1.11.2.
As it turned out, the shared object names built by py-cffi has changed in python 36.
Dependent ports can choose between installing such shared object as part of their plist, or
generating them in the runtime and placing them into ~/.cache/{port-name}/ The former ones,
that include the shared objects in their plist, got affected.

4 of the ports were failing explicitly in their py36 flavor during the strip phase.
The other 6 were either missing strip entirely, or performed the strip operation without
using explicit shared object names. These 6 ports didn't trigger any build errors, and were
failing silently during the runtime, making the problem very hard to detect.

Precisely, .abi3 suffix is now added for the py36 flavor of relevant ports.

Here are the 10 ports that got affected and are now corrected:
databases/py-psycopg2cffi devel/py-pygit2 devel/py-xattr devel/py-pyopencl devel/py-atomiclong
multimedia/py-librtmp net/py-nnpy security/py-bcrypt security/py-cryptography security/py-pynacl

All of them got the * in the stripped shared object name, and a PORTREVISION bump.
2018-01-05 20:02:03 +00:00
Jan Beich
cfa075c4fa security/vuxml: mark firefox < 57.0.4 as vulnerable 2018-01-05 17:17:09 +00:00
Steve Wills
9402cc24d3 security/rubygem-rbnacl-libsodium: update to 1.0.16
PR:		224919
Approved by:	Matthias Fechner <idefix@fechner.net> (maintainer)
2018-01-05 13:32:48 +00:00
Steve Wills
f8d2de3f86 security/rubygem-rbnacl4: create port
4.x version required by gitlab

PR:		224931
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)
2018-01-05 13:22:23 +00:00
Dirk Meyer
c09e9e8067 - update to 1.0.33 2018-01-05 04:48:55 +00:00
Jan Beich
55dbc622c9 security/gnutls: revert r431494 per FreeBSD 11.0 EOL
PR:		216045
Approved by:	portmgr blanket
2018-01-05 02:58:09 +00:00
Steve Wills
cb5cbc5bd3 security/rubygem-rbnacl: update to 5.0.0 2018-01-05 00:50:27 +00:00
Richard Gallamore
5a330cba29 * Add modified date to for libevhtp vulnerable
Thank you dbaio for catching this.
2018-01-05 00:40:20 +00:00
Sunpoet Po-Chuan Hsieh
c9b4d6ae1a Mark DEPRECATED and set EXPIRATION_DATE to 2018-01-31 2018-01-04 20:11:53 +00:00
Sunpoet Po-Chuan Hsieh
8fd62fa75d Update to 2.0.16
Changes:	https://github.com/ueno/ruby-gpgme/blob/master/NEWS
2018-01-04 20:11:27 +00:00
Richard Gallamore
c622191024 * Revision bump for libevhtp
* Fix build errors for updated libevhtp

MFH:		2018Q1
2018-01-04 19:16:45 +00:00
Richard Gallamore
5235b5b994 * Add libevhtp to list of vulnerable ports.
Libevhtp prior to 1.2.14 uses oniguruma 5.9.2 and is
vulnerable if using the REGEX option, which is the
default.
2018-01-04 19:08:49 +00:00
Jochen Neumeister
784e67257c security/pecl-pam: Add patch to fix pecl-pam with PHP 7*
PR:		224843
Submitted by:	flo
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D13740
2018-01-03 20:01:08 +00:00
Sunpoet Po-Chuan Hsieh
97064443de Update devel/json-c to 0.13
- Add TEST_TARGET
- While I'm here, fix shebang for net/opensips
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/json-c/json-c/blob/master/ChangeLog
PR:		224675
Exp-run by:	antoine
2018-01-03 13:36:58 +00:00
Thomas Zander
a3cc859109 Update to upstream version 0.0.62
Detailed maintainer log:
- v0.0.62: Miscellaneous tweaks
- Updated Let's Encrypt agreement URL in example response file.
- Now builds for current Go 1.x version in Travis rather than Go 1.8.
- More error details are now available for challenge errors in the acmeapi
  package.
- Error when trying to prompt the user in non-interactive mode now advises
  user to remove --batch flag.

PR:		224627
Submitted by:	samm@os2.kiev.ua (maintainer)
MFH:		2018Q1
2018-01-02 16:44:21 +00:00
Mark Felder
93a8c0a938 security/pam-modules: Update to 2.2 2018-01-02 16:13:26 +00:00
Sunpoet Po-Chuan Hsieh
730d5c1f6e Update RUN_DEPENDS 2018-01-02 15:34:49 +00:00
Lars Engels
19729fb492 security/lynis:
Update to 2.5.8
2018-01-02 12:16:55 +00:00
Joseph Mingrone
deda31dd45 New port, www/rubygem-jwt2 copied from www/rubygem-jwt
This fixes a build issue with security/rubygem-webpush.
2018-01-02 02:57:04 +00:00