and also removes a few unneeded library links such as -lcurses.
- libfido2 package is broken with pkg-config and base ssl. Workaround this
by not using pkg-config for that library for now.
- Add USES=localbase to simplify some options
- Make crypt(3) MD5 password support optional but still on-by-default. The
default in FreeBSD changed in 10.0 but that does not mean
- Enable -Werror
- Remove some old baggage from the port build
o The zlib version check has not been needed for a while.
o sshd.8 has not had %%PREFIX%% or %$RC_SCRIPT_NAME%% since 2011
and is not worth more patches/complexity.
o The strnvis(3) problem noted in r311891 was fixed in OpenSSH 7.4.
o autoreconf is run so it makes no sense to patch configure for -ldes
o --with-md5-passwords is not needed as our crypt(3) supports it
natively. This is only relevant without PAM.
* Update certificate stores
* manpage fix (Karl)
* minor speedups for some vulnerability tests
* bash 5.1 fix
* Secure Client-Initiated Renegotiation false positive fix
* BREACH is now medium
* invalid JSON fix and other JSON improvements (David)
* Adding native Android 7 handshake instead of Chrome which has TLS 1.3 (Christoph)
* Header flag X-XSS-Protection is now labled as INFO
* No cyan colors in HHHTP header flags anymore, colons added
* Dockerfile improvments
Given its dependency on lang/python27, lets deprecate broccoli
itself to give ports that depend it a little warning.
(It looks like security/barnyard2 is the only one left.)
PR: 249760
Reported by: swills
Upstream confirms that support for the broccoli protocol will be
removed in a future version of zeek. And given that security/broccoli
requires python2 which will be deprecated at the end of December,
lets remove broccoli support from zeek now.
This fixes several security vulnerabilities and unexpires
the port because it moves to Python 3.
PR: 241347
Submitted by: lukas.slebodnik@intrak.sk (initial patch)
MFH: 2020Q4
Security: CVE-2018-16838
Security: CVE-2019-3811
* Allow Unicode file names on Windows almost everywhere. Note that
it is still not possible to use Unicode strings on the command
line. This change also fixes a regression in 2.2.22 related to
non-ascii file names. [#5098]
* Fix localized time printing on Windows. [#5073]
* gpg: New command --quick-revoke-sig. [#5093]
* gpg: Do not use weak digest algos if selected by recipient
preference during sign+encrypt. [4c181d51a6]
* gpg: Switch to AES256 for symmetric encryption in de-vs mode.
[166e779634]
* gpg: Silence weak digest warnings with --quiet. [#4893]
* gpg: Print new status line CANCELED_BY_USER for a cancel during
symmetric encryption. [f05d1772c4]
* gpg: Fix the encrypt+sign hash algo preference selection for
ECDSA. This is in particular needed for keys created from
existing smartcard based keys. [aeed0b93ff]
* agent: Fix secret key import of GnuPG 2.3 generated Ed25519 keys.
[#5114]
* agent: Keep some permissions of private-keys-v1.d. [#2312]
* dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
gnutls builds. [e4f3b74c91]
* dirmngr: Fix the pool keyserver case for a single host in the
pool. [72e04b03b1a7]
* scd: Fix the use case of verify_chv2 by CHECKPIN. [61aea64b3c]
* scd: Various improvements to the ccid-driver. [#4616,#5065]
* scd: Minor fixes for Yubikey [25bec16d0b]
* gpgconf: New option --show-versions.
* w32: Install gpg-check-pattern and example profiles. Install
Windows subsystem variant of gpgconf (gpgconf-w32).
* i18n: Complete overhaul and completion of the Italian translation.
Thanks to Denis Renzi.
* Require Libgcrypt 1.8 because 1.7 has long reached end-of-life.
Release-info: https://dev.gnupg.org/T5052
This differs slightly from base as it uses the current NetBSD
hook points.
This is off-by-default as it needs testing and has issues that may cause
crashes. One such issue is the use of private bl_create() symbol from
libblacklist. It is also unclear if the hook points are sufficient
or proper after the libssh refactoring in 8.x.
PR: 223628 (patch rewritten as it no longer applied)
have to install security/pinentry-gnome3 manually. This has been done to break
a dependency loop that was introduced in r553735 where security/gcr added a
build dependency on security/gnupg.
Before r553735:
security/gnupg -> security/pinentry -> security/pinentry-gnome3 -> security/gcr
After r553735:
security/gnupg -> security/pinentry -> security/pinentry-gnome3 -> security/gcr
-> security/gnupg
Now:
security/gnupg -> security/pinentry
security/pinentry-gnome3 -> security/gcr -> security/gnupg
A pkg-message has been added to remind users of the GNOME3 option to install the
required package manually and to deinstall it if no longer needed.
PR: 250945
Reported by: <sdalu@sdalu.com>
2020-11-15 archivers/py-pyliblzma: Uses deprecated version of python
2020-11-15 databases/postgis23: Upstream no longer maintained
2020-11-15 databases/py-htsql: Uses deprecated version of python
2020-11-15 devel/bzr-fastimport: Uses deprecated version of python
2020-11-15 devel/py-ToscaWidgets: Uses deprecated version of python
2020-11-15 devel/py-calendar: Uses deprecated version of python
2020-11-15 devel/py-distorm: Uses deprecated version of python
2020-11-15 devel/py-fabric1: Uses deprecated version of python
2020-11-15 devel/py-rcsparse: Uses deprecated version of python
2020-11-15 devel/pyrex: Uses deprecated version of python
2020-11-15 japanese/py-tegaki: Uses deprecated version of python
2020-11-15 math/py-networkx1: Obsolete, please use math/py-networkx instead
2020-11-15 misc/py-progressbar231: Uses deprecated version of python
2020-11-15 multimedia/py-kaa-imlib2: Uses deprecated version of python
2020-11-15 multimedia/py-kaa-metadata: Uses deprecated version of python
2020-11-15 net-im/libtelepathy: Uses deprecated version of python
2020-11-15 security/py-mcrypt: Uses deprecated version of python
2020-11-15 www/py-beautifulsoup32: Uses deprecated version of python
2020-11-15 www/py-evernote: Uses deprecated version of python
2020-04-01 www/py-meld3: EOLed upstream
2020-11-15 www/py-requestbuilder: Uses deprecated version of python
2020-11-15 x11-toolkits/py-SquareMap: Uses deprecated version of python
PyWebAuthn is a Python module which can be used to handle WebAuthn registration
and assertion. Currently, WebAuthn is supported in Firefox, Chrome, and Edge.
WWW: https://github.com/duo-labs/py_webauthn
Remove non-existing configure options --enable-debug and --with-pkgversion.
Remove option NATTF that changed --enable-natt=yes to --enable-natt=kernel
that is exactly same for FreeBSD releases since 8.0-RELEASE.
Thomas Zander
Mikael Urankar
Jesper Schmitz Mouridsen
Sunpoet Po-Chuan Hsieh
Yuri Victorovich
Bryan Drewery
Adam Weinberger
Dag-Erling Smørgrav
Craig Leres
Alex Dupre
Rene Ladan
Cy Schubert
Piotr Kubaj
Dima Panov
Li-Wen Hsu
Jason E. Hale
Dmitry Marakasov
Guido Falsi
Mark Linimon
Vanilla I. Shu
Kurt Jaeger
Jan Beich
Eugene Grosbein
Fukang Chen