61 Commits

Author SHA1 Message Date
Steve Wills
9c4b1d6b56 security/dropbear: fix CBC option
PR:		232143
Reported by:	dewayne@heuristicsystems.com.au
Approved by:	Piotr Kubaj <pkubaj@anongoth.pl> (maintainer)
2018-11-09 19:42:12 +00:00
Steve Wills
664f456b1a security/dropbear: mark CBC option broken
PR:		226339
Approved by:	Piotr Kubaj <pkubaj@anongoth.pl> (maintainer)
2018-07-27 21:01:49 +00:00
Joseph Mingrone
d9ad0ff6ae security/dropbear: Update to version 2018.76
PR:		226339
Submitted by:	pkubaj@anongoth.pl (maintainer)
Differential Revision:	https://reviews.freebsd.org/D14829
2018-03-27 18:50:24 +00:00
Richard Gallamore
af7511ccd2 Updated to 2017.75
Changelog:	https://matt.ucc.asn.au/dropbear/CHANGES

PR:		220158
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl> (maintainer)
Reviewed by:	lifanov (mentor)
Approved by:	lifanov (mentor)
MFH:		2017Q3
Security:	http://www.vuxml.org/freebsd/60931f98-55a7-11e7-8514-589cfc0654e1.html
Differential Revision:	https://reviews.freebsd.org/D11400
2017-07-03 19:32:12 +00:00
Pawel Pekala
8b9fbdfc25 - Update to version 2016.74
- Add license information

Changelog:
- Security: Message printout was vulnerable to format string injection.

  If specific usernames including "%" symbols can be created on a system
  (validated by getpwnam()) then an attacker could run arbitrary code as root
  when connecting to Dropbear server.

  A dbclient user who can control username or host arguments could potentially
  run arbitrary code as the dbclient user. This could be a problem if scripts
  or webpages pass untrusted input to the dbclient program.

- Security: dropbearconvert import of OpenSSH keys could run arbitrary code as
  the local dropbearconvert user when parsing malicious key files

- Security: dbclient could run arbitrary code as the local dbclient user if
  particular -m or -c arguments are provided. This could be an issue where
  dbclient is used in scripts.

- Security: dbclient or dropbear server could expose process memory to the
  running user if compiled with DEBUG_TRACE and running with -v

PR:		211298
Submitted by:	Piotr Kubaj (maintainer)
MFH:		2016Q3
2016-08-01 17:43:19 +00:00
Lars Engels
056a9c360b Update to 2016.73
PR:		208962
Submitted by:	maintainer
Sponsored by:	Essen Linuxhotel Hackathon 2016
2016-04-24 09:24:04 +00:00
Dmitry Marakasov
f2a5d793e7 - Add CPE information
PR:		208327
Submitted by:	shun.fbsd.pr@dropcut.net
Approved by:	portmgr blanket
2016-03-29 18:51:15 +00:00
Mark Felder
769c99f075 security/dropbear: Update to 2016.72
PR:		207903
MFH:		2016Q1
Security:	CVE-2016-3116
2016-03-14 14:09:07 +00:00
Pietro Cerutti
34d59bf4fb security/dropbear: support extra arguments in rc.conf
PR:		206211
Submitted by:	gahr
Approved by:	pkubaj@anongoth.pl (maintainer)
2016-01-15 09:18:53 +00:00
Martin Wilke
852c6208d4 - Update to 2015.71
- Update maintainer mail

PR:		206000
Submitted by:	maintainer
2016-01-09 09:07:27 +00:00
Alex Kozlov
93d153234f - Pass maintainership to submitter
Submitted by:	Piotr Kubaj <pkubaj@riseup.net>
2015-10-11 12:02:38 +00:00
Alex Kozlov
6d78fb007a - Update to 2015.68 [1]
- Drop maintainership

PR:	203694 [1]
Submitted by:	pkubaj@riseup.net
2015-10-11 11:42:27 +00:00
Alex Kozlov
9a319c5bd6 - Update to 2015.67 2015-03-27 10:43:50 +00:00
Alex Kozlov
1a27fc9ebd - Convert to pkg-plist 2014-12-21 21:39:05 +00:00
Antoine Brodin
91bdec7a48 Put back empty dir in plist 2014-12-21 17:44:25 +00:00
Baptiste Daroussin
bb1e2d4d90 cleanup plist 2014-12-20 19:37:44 +00:00
Alex Kozlov
be82c889dc - Update to 2014.66 2014-10-24 10:45:19 +00:00
Alex Kozlov
467b3df7dd - Remove obsolete @dirrm(try)
- Convert PLIST_DIRSTRY to PLIST_DIRS
2014-09-25 11:35:43 +00:00
Alex Kozlov
e64a6842cb - Update to 2014.65 2014-08-22 14:16:56 +00:00
Alex Kozlov
2cda469ea9 - Update to 2014.63 2014-05-20 07:06:09 +00:00
Alex Kozlov
5d6a8e4ab8 - Add/update license when possible
- Modernize ports Makefiles
- Update MASTER_SITES/distfile for converters/chmview
2014-05-20 06:06:35 +00:00
Alex Kozlov
8cd7bd6786 - Update to 2013.62 2014-01-24 06:35:29 +00:00
Alex Kozlov
9a026d6caf - Update to 2013.60 2013-10-17 11:25:35 +00:00
Alex Kozlov
3357cbbfa8 - Update to 2013.59 2013-10-14 08:56:37 +00:00
Alex Kozlov
89969bc189 - Support STAGEDIR
- Convert to USES=gmake
- Convert to options helpers
- Reformat pkg-descr
2013-09-25 20:02:05 +00:00
Baptiste Daroussin
a65ed2e51b Add NO_STAGE all over the place in preparation for the staging support (cat: security) 2013-09-20 22:55:24 +00:00
Alex Kozlov
5919ccf4e7 - Update to 2013.58
Feature safe:	yes
2013-04-21 07:36:54 +00:00
Alex Kozlov
5233271cef - Update to 2013.57
Feature safe: yes
2013-04-17 02:58:23 +00:00
Alex Kozlov
537e77b7a4 - Install manpages [1]
- Convert Makefile headers to new style
- Remove indefinite article from COMMENT

PR:	ports/176198 (based on) [1]
Submitted by:	Brett Wynkoop <bsdbugs@wynn.com>
2013-02-17 08:43:16 +00:00
Alex Kozlov
61ccb75449 - Convert to optionsNG
- Pet portlint
- Remove pkg-plist from security/dropbear

Approved by:	eadler (mentor)
2012-06-25 04:15:50 +00:00
Alex Kozlov
286e4ef4d4 Update to 2012.55
- fix arbitrary code execution (CVE-2012-0920)

Approved by:	eadler (mentor)
2012-03-04 21:20:55 +00:00
Alex Kozlov
7ca108f3bd Update maintainer email in my ports
Approved by:	eadler (mentor)
2012-03-02 23:43:45 +00:00
Doug Barton
83eb2c3700 In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
2012-01-14 08:57:23 +00:00
Michael Scheidell
6a0dd346dd - Fix compile if WITH_STATIC is enabled [1]
- Also pr ports/163593, which is a duplicate of this one. root@42.org [2]

PR:		ports/163217
Submitted by:	Mattia Rossi <mrossi@swin.edu.au> [1], root@42.org [2]
Approved by:	spam@rm-rf.kiev.ua (maintainer), gabor (mentor)
2011-12-27 23:10:11 +00:00
Dmitry Marakasov
6f6fbe4bdf - Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
2011-09-23 22:26:39 +00:00
Dennis Herrmann
6027ef72b1 - Update to 0.53.1
PR:		ports/158027
Submitted by:	Alex Kozlov <spam@rm-rf.kiev.ua> (maintainer)
2011-06-20 12:57:56 +00:00
Doug Barton
1d6b4b3f91 Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#
2010-03-27 00:15:24 +00:00
Ed Schouten
7b8eedc6c1 Remove an unneeded inclusion of <utmp.h>.
Submitted by:	Alex Kozlov <spam rm-rf kiev ua>
2010-01-20 09:24:24 +00:00
Martin Wilke
5ab3b9bfd3 - Update to 0.52
PR:		129961
Submitted by:	Alex Kozlov <spam@rm-rf.kiev.ua> (maintainer)
2008-12-26 22:16:27 +00:00
Rong-En Fan
19829718f0 - Update to 0.51
- Use @dirrmtry

PR:		ports/123355
Submitted by:	Alex Kozlov <spam at rm-rf.kiev.ua> (maintainer)
2008-05-05 06:52:58 +00:00
Martin Wilke
3e4ed01146 - Remove unneeded dependency from gtk12/gtk20 [1]
- Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG
- Remove X11BASE support in favor of LOCALBASE or PREFIX
- Use USE_LDCONFIG instead of INSTALLS_SHLIB
- Remove unneeded USE_GCC 3.4+

Thanks to all Helpers:
	Dmitry Marakasov, Chess Griffin, beech@, dinoex, rafan, gahr,
	ehaupt, nox, itetcu, flz, pav

PR:		116263
Tested on:	pointyhat
Approved by:	portmgr (pav)
2008-04-19 17:56:05 +00:00
Ion-Mihai Tetcu
f5d8fad0b1 - Update security/dropbear to 0.50.
-Drop deprecated WANT_* knob.

PR:		ports/115475
Submitted by:	Alex Kozlov (maintainer)
2007-08-14 13:52:32 +00:00
Rong-En Fan
1f411f39e9 - Use new world rc script
PR:		ports/111361
Approved by:	Alex Kozlov (maintainer)
Tested by:	Alex Kozlov, rafan
2007-04-16 19:33:06 +00:00
Clement Laforet
6193fa9f61 - Pass maintainership to Alex Kozlov. 2007-03-23 08:41:18 +00:00
Clement Laforet
96e764fe75 - Update to 0.49
- OPTIONify
- Fix some documentation
- drop maintainership

PR:             ports/108785
Submitted by:   Alex Kozlov<spam@rm-rf.kiev.ua>
2007-03-18 17:51:18 +00:00
Clement Laforet
68796a33f7 - Update to 0.48.1 2006-11-03 11:15:46 +00:00
Edwin Groothuis
28dd10dcb4 Remove USE_REINPLACE from all categories starting with S 2006-05-13 04:15:53 +00:00
Clement Laforet
65c39bb10f - Update to 0.47
- SECURITY: fix for buffer allocation error in server code, could potentially
  allow authenticated users to gain elevated privileges.

PR:		ports/90531
Submitted by:	Gea-Suan Lin <gslin@gslin.org>
2005-12-19 09:20:32 +00:00
Clement Laforet
8d580866e5 - Update to 0.46 2005-07-10 19:52:15 +00:00
Clement Laforet
3ac53dcf6e - Update to 0.44 2005-01-08 16:49:03 +00:00