Commit graph

22089 commits

Author SHA1 Message Date
Sean Bruno
343a083fb9 Enable the building and installation of the .a version of the library
for static linking.  This affects emulators/qemu-user-static primarily
but will help anyone trying to statically link their applications.

Reviewed by:	tijl cpm@fbsd.es (Maintainer)
2015-10-29 14:30:24 +00:00
Roman Bogorodskiy
62a14d310a security/libgpg-error: enable static lib
Enable static lib as it's needed by QEMU for static
linking (qemu-user-static) and bump PORTREVISION.

Submitted by:	sbruno
2015-10-29 14:29:06 +00:00
Renato Botelho
9c90e69933 - Add a new option, SWANCTL, to install swanctll utility
- When VICI option is selected, install libvici.h to include directory,
  it's useful when you need to build a custom code linked to libvici
- Pass path to USE_LDCONFIG otherwise libraries will not be visible

PR:		204098
Approved by:	maintainer
Obtained from:	pfSense
Sponsored by:	Rubicon Communications (Netgate)
2015-10-29 12:42:30 +00:00
Antoine Brodin
e44b020d61 Update to 2.5
Announce:	http://www.volatilityfoundation.org/#!25/c1f29
2015-10-29 12:14:38 +00:00
Jason Unovitch
23503a93fa Document additional CVE assigned for the last Wordpress update
Security:	CVE-2015-7989
Security:	https://vuxml.FreeBSD.org/freebsd/f4ce64c2-5bd4-11e5-9040-3c970e169bc2.html
2015-10-29 01:51:05 +00:00
Mark Felder
d5bb164515 Document information disclosure in net/openafs
Security:	CVE-2015-7762
Security:	CVE-2015-7763
2015-10-28 20:59:22 +00:00
Pawel Pekala
33eb4d6ebb Framework to connect any number of virtual machines to the
tor anonymity network.

WWW: https://github.com/yurivict/vm-to-tor

PR:		200333
Submitted by:	Yuri Victorovich <yuri@rawbw.com>
2015-10-28 20:30:13 +00:00
Renato Botelho
48f7ab060b - Add a new option (VICI) to build VICI management protocol
- Change SMP option description to show users it's deprecated

PR:		204090
Approved by:	maintainer
2015-10-28 14:27:28 +00:00
Niclas Zeising
8bcc103ea0 Add entry for x11/xscreensaver for a lock bypass vulnerability 2015-10-27 20:53:54 +00:00
Dmitry Marakasov
c78fd04ab5 - Fix shebangs
- Add NO_ARCH

Approved by:	portmgr blanket
2015-10-27 18:52:44 +00:00
Sunpoet Po-Chuan Hsieh
d929b71224 - Update to 1.8.4
Changes:	http://lists.gnupg.org/pipermail/gnupg-announce/2015q3/000375.html
PR:		204003
Submitted by:	Carlos J Puga Medina <cpm@fbsd.es> (maintainer)
2015-10-27 15:54:54 +00:00
Sunpoet Po-Chuan Hsieh
28e56989fe - Update to 0.22
Changes:	http://search.cpan.org/dist/Unix-Passwd-File/Changes
2015-10-27 15:51:58 +00:00
Sunpoet Po-Chuan Hsieh
c0425b4793 - Add LICENSE_FILE 2015-10-27 15:50:06 +00:00
Sunpoet Po-Chuan Hsieh
949aa01893 - Update to 1.055
Changes:	http://search.cpan.org/dist/Net-SSLGlue/Changes
2015-10-27 15:49:42 +00:00
Mathieu Arnold
91f933b2cb Document lldpd security vunlnerability.
PR:		204044
Submitted by:	maintainer
Sponsored by:	Absolight
2015-10-27 13:44:07 +00:00
Renato Botelho
1f33e7ef35 strongSwan can be beuit using 3 different printf hooks: builtin, glibc
(compatible with FreeBSD's libc) and vstr (devel/vstr). Since it's not
selected any of them on CONFIGURE_ARGS, it uses auto, and end up using
glibc.

pfSense users reported memory leaks on strongSwan [2] [3] and a it was
reported to upstream [1].

Add a single option and let user choose which printf hook to use, and
change default to use builtin. Bump PORTREVISION due to default change

[1] https://wiki.strongswan.org/issues/1106
[2] https://forum.pfsense.org/index.php?topic=96767.0
[3] https://redmine.pfsense.org/issues/5149

PR:		204051
Approved by:	maintainer
Obtained from:	pfSense
MFH:		2015Q4
Sponsored by:	Rubicon Communications (Netgate)
2015-10-27 13:27:17 +00:00
Thomas Zander
30bf7ffd51 Update to upstream version 0.3.8
PR:		204022
Submitted by:	christer.edwards@gmail.com (maintainer)
2015-10-26 18:44:23 +00:00
Mark Felder
320c35ac14 Update range for libressl vulnerability
Range was entered incorrectly as <2.2.3

Security:	e75a96df-73ca-11e5-9b45-b499baebfeaf
2015-10-26 13:45:27 +00:00
Steve Wills
bcbd6e9e1e security/py-python-gnupg: create port
The gnupg module allows Python programs to make use of the functionality
provided by the GNU Privacy Guard (abbreviated GPG or GnuPG). Using this
module, Python programs can encrypt and decrypt data, digitally sign documents
and verify digital signatures, manage (generate, list and delete) encryption
keys, using proven Public Key Infrastructure (PKI) encryption technology based
on OpenPGP.

WWW: http://packages.python.org/python-gnupg/index.html

PR:		199551
Submitted by:	Christer Edwards <christer.edwards@gmail.com>
2015-10-26 01:20:21 +00:00
Jason Unovitch
d8c079f57d security/webfwlog: update 1.00 -> 1.01 [1]
- While here add trailing slash to WWW:

PR:		203955 [1]
Submitted by:	Torsten Zuhlsdorff <ports@toco-domains.de>
Approved by:	zeus@ix.netcom.com (maintainer)
2015-10-25 20:11:51 +00:00
Joe Marcus Clarke
99d9c2bd22 Add an entry for wireshark-1.12.8 for CVE-2015-7830. 2015-10-25 17:37:12 +00:00
Jason Unovitch
76779cc5bd Document the recent remote site takeover via SQL injection vuln in Joomla
While here, document all missing Joomla security vulnerabilities since the
last entry in March 2014

Security:	CVE-2014-6631
Security:	CVE-2014-6632
Security:	CVE-2014-7228
Security:	CVE-2014-7229
Security:	CVE-2015-5397
Security:	CVE-2015-5608
Security:	CVE-2015-6939
Security:	CVE-2015-7297
Security:	CVE-2015-7857
Security:	CVE-2015-7858
Security:	CVE-2015-7859
Security:	CVE-2015-7899
Security:	https://vuxml.FreeBSD.org/freebsd/0ebc6e78-7ac6-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/03e54e42-7ac6-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/f8c37915-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/ec2d1cfd-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/deaba148-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/cec4d01a-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/beb3d5fc-7ac5-11e5-b35a-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/adbb32d9-7ac5-11e5-b35a-002590263bf5.html
2015-10-25 03:26:58 +00:00
Thomas Zander
a8d0d986c6 Un-break build on systems where cxx does not support c++11
PR:		203992
Submitted by:	eric@camachat.org (maintainer)
2015-10-24 13:10:50 +00:00
Matthias Andree
70092ef822 Handle OpenSSL/PolarSSL options in the right way,
such that it is maintainable if we add more SSL libs in the future.

To fix fall-out from r399858 and r399982.
2015-10-24 11:18:04 +00:00
Jason Unovitch
f919e6acd7 Document redirect vulnerability in the drupal7 overlay module
PR:		203977
Security:	CVE-2015-7943
Security:	https://vuxml.FreeBSD.org/freebsd/75f39413-7a00-11e5-a2a1-002590263bf5.html
2015-10-24 03:55:25 +00:00
Danilo Egea Gondolfo
75f6a10389 - New port: security/s2n
s2n is a C99 implementation of the TLS/SSL protocols that
is designed to be simple, small, fast, and with security as
a priority. It is released and licensed under the Apache Software License 2.0.

WWW: https://github.com/awslabs/s2n
2015-10-23 22:48:34 +00:00
Matthew Seaman
1cf82dbf08 Record phpMyAdmin -- content spoofing vulnerability. 2015-10-23 20:39:41 +00:00
Thomas Zander
6f1821384b Update to upstream version 2.4.1, add BROKER OPTION
PR:		203849
Submitted by:	leres@ee.lbl.gov (maintainer)
2015-10-23 19:04:50 +00:00
Dmitry Marakasov
d0e4a5817f - Add NO_ARCH
- Drop @dirrm* from plist

Approved by:	portmgr blanket
2015-10-23 18:36:52 +00:00
Thomas Zander
8e02189b35 Adopt broccoli version numbering, update to 1.97
The gist from maintainer's explanation of the situation:
Upon creation of the port, the version number of the bro
distribution broccoli was packaged with was used. But it
makes more sense to use broccoli's actual version number.

PR:		203848
Submitted by:	leres@ee.lbl.gov (maintainer)
2015-10-23 18:12:26 +00:00
Xin LI
08f34c37a2 Add CVE references to the NTP entry. 2015-10-23 11:59:59 +00:00
Jason Unovitch
fc111cf1ce Document Mediawiki security vulnerabilities for 1.25.3, 1.24.4, and 1.23.11
Security:	https://vuxml.FreeBSD.org/freebsd/b973a763-7936-11e5-a2a1-002590263bf5.html
2015-10-23 03:43:36 +00:00
Martin Matuska
f927ae941d Horde package update:
comms/pear-Horde_ActiveSync 2.29.2 -> 2.30.0
devel/pear-Horde_Core 2.22.0 -> 2.22.1
devel/pear-Horde_Nls 2.0.5 -> 2.1.0
devel/pear-Horde_Notification 2.0.2 -> 2.0.3
textproc/pear-Horde_Pdf 2.0.5 -> 2.0.6
devel/pear-Horde_Queue 1.1.2 -> 1.1.3
security/pear-Horde_Secret 2.0.4 -> 2.0.5
www/pear-Horde_SessionHandler 2.2.4 -> 2.2.5
devel/pear-Horde_Token 2.0.6 -> 2.0.7
devel/horde-content 2.0.4 -> 2.0.5
ftp/horde-gollem 3.0.5 -> 3.0.6
www/horde-base 5.2.7 -> 5.2.8
mail/horde-imp 6.2.10 -> 6.2.11
mail/horde-ingo 3.2.6 -> 3.2.7
deskutils/horde-kronolith 4.2.9 -> 4.2.11
deskutils/horde-mnemo 4.2.7 -> 4.2.8
deskutils/horde-nag 4.2.5 -> 4.2.6
www/horde-passwd 5.0.3 -> 5.0.4
www/horde-trean 1.1.2 -> 1.1.3
mail/horde-turba 4.2.8 -> 4.2.10
mail/horde-webmail 5.2.10 -> 5.2.11
deskutils/horde-groupware 5.2.10 -> 5.2.11
2015-10-22 16:00:30 +00:00
Mathieu Arnold
89d49eb53f Fix build without POLARSSL.
Pointy hat to:	mat
Sponsored by:	Absolight
2015-10-22 14:07:10 +00:00
Kubilay Kocak
ce8374460e security/suricata: Update to 2.0.9
- Update PORTVERSION and distinfo checksum (2.0.9)

Changes:

  https://github.com/inliniac/suricata/blob/suricata-2.0.9/ChangeLog

While I'm here,

- Standardize the length of pkg-message separators and add spaces
  between them and the text body. <idea> It would be cool if the ports
  framework could wrap these pkg-message's in standard formatting for
  all ports automagically</idea>

Requested by:	Martin Olsson (via email)
2015-10-22 11:56:31 +00:00
Cy Schubert
898655c0cb Document October 2015 NTP Security Vulnerability Announcement (Medium) 2015-10-22 03:03:30 +00:00
Dan Langille
395599811e - Update to 2.9.7.6
Reviewed by: zi (maintainer)
Differential Revision: https://reviews.freebsd.org/D3963
2015-10-21 17:59:38 +00:00
Mathieu Arnold
4cb8340ae5 Update to 2.0-beta2.
- Bump PORTEPOCH as version goes backwards
- Remove unneeded variables
- Pet portlint

PR:		203913
Submitted by:	maintainer
Sponsored by:	Absolight
2015-10-21 14:16:25 +00:00
Mathieu Arnold
4597301bdf Update to 201541. [1]
Convert to options helpers.

PR:		203823 [1]
Submitted by:	maintainer
Sponsored by:	Absolight
2015-10-21 14:16:18 +00:00
Tijl Coosemans
fd89eecc7a Update to 4.1.8 2015-10-21 11:53:36 +00:00
Cy Schubert
fa0fbc575d Add sonames and minor versioned library names.
PR:             203882
2015-10-21 06:59:10 +00:00
Kubilay Kocak
d9484b7997 security/py-cryptography: Add enum43 to RUN_DEPENDS
Refactor *_DEPENDS to match setup.py's less than obvious dependencies

cffi is both a build/run dependency, the rest are only run dependencies.

This was causing a build failure for net-im/papyon:

  ImportError: No module named enum

Reported by:	kwm, pkg-fallout
Assisted by:	antoine
2015-10-20 15:14:08 +00:00
Mathieu Arnold
ca0156916b Use options helpers.
Sponsored by:	Absolight
2015-10-20 15:03:44 +00:00
Jason Unovitch
379ee526f4 Document multiple XSS vulnerabilities fixed in CodeIgniter
PR:		203403
Security:	https://vuxml.FreeBSD.org/freebsd/95602550-76cf-11e5-a2a1-002590263bf5.html
2015-10-20 02:33:47 +00:00
Sunpoet Po-Chuan Hsieh
2743e8d9cf - Add NO_ARCH
- While I'm here, use "yes" instead of "YES"

Approved by:	portmgr (blanket)
2015-10-19 20:22:29 +00:00
Sunpoet Po-Chuan Hsieh
5b9e9cd2dc - Use USES=localbase
- Pet portlint: fix diff header of patch files
2015-10-19 20:21:10 +00:00
Renato Botelho
b5f8054f06 Add new VuXML entry for git arbitrary code execution bug on versions before
2.6.1
2015-10-19 17:04:02 +00:00
Dmitry Marakasov
67971bd0fb Improve shebangfix framework
- Support multiple values in *_OLD_CMD, i.e. we can now fix both "/usr/bin/python" and "/usr/bin/env python" at the same time
- Default *_OLD_CMD values are now always appended, so you don't need to specify them in individual ports
- Add lua support (depends on USES=lua)
- Add more default values, such as "/usr/bin/env foo" for python, perl, bash, ruby and lua
- Shebangfix now matches whole words, e.g. we will no longer (erroneously) replace "/usr/bin/perl5.005" with "${perl_CMD}5.005" (but "/usr/bin/perl -tt" is still (correctly) replaced with "${perl_CMD} -tt")

Note that *_OLD_CMD items containing spaces must now be quoted (e.g. perl_OLD_CMD=/bin/perl /usr/bin/perl "/usr/bin/env perl")

Update shebangfix usage according to new rules in many ports:

- Remove *_OLD_CMD for patterns now replaced by default
- Quote custom *_OLD_CMD which contain spaces

Fix shebangfix usage in many ports (irrelevant to infrastructure change):

- Remove redundant SHEBANG_LANG (no need to duplicate default langs)
- Remove redundant *_CMD (such as python_CMD=${LOCALBASE}/bin/python${PYTHON_VER} when USES=python is present)
- Never use *_OLD_CMD in REINPLACE_CMD matchers, these should always look for exact string

Approved by:	portmgr (bapt)
Differential Revision:	D3756
2015-10-19 14:50:52 +00:00
Antoine Brodin
b49bc725a0 Finish removing yubikey-personalization 2015-10-19 13:59:03 +00:00
Ryan Steinmetz
e5c19fce71 - Update variable name in previous commit
- Bump PORTREVISION
2015-10-19 13:42:11 +00:00