aboutsummaryrefslogtreecommitdiff
path: root/security
Commit message (Collapse)AuthorAgeFilesLines
* MFH: r417973Raphael Kubo da Costa2016-07-032-2/+2
| | | | | | | | | | | | | | | | | Bump PORTREVISION in security/pinentry and pinentry-qt4 after r415872. r415872 changed the binary name that security/pinentry-qt4 installs without bumping PORTREVISION in the affected ports, so if security/pinentry gets rebuilt after this change but security/pinentry-qt4 is not the pinentry symlink will be broken. Similarly, if one builds security/pinentry-qt{4,5} without updating security/pinentry, the pinentry symlink will also be broken. PR: 209556 Approved by: ports-secteam (feld) Notes: svn path=/branches/2016Q3/; revision=417990
* Document haproxy vulnerabilityMark Felder2016-06-301-0/+29
| | | | | | | Security: CVE-2016-5360 Notes: svn path=/head/; revision=417856
* Document libtorrent-rasterbar vulnerabilityMark Felder2016-06-301-0/+28
| | | | | | | Security: CVE-2016-5301 Notes: svn path=/head/; revision=417850
* Modify dnsmasq vuxml entryMark Felder2016-06-301-1/+5
| | | | | | | | The vulnerable version range was not matching correctly for the devel port. Notes: svn path=/head/; revision=417849
* Document expat2 vulnerabilityMark Felder2016-06-301-0/+29
| | | | | | | Security: CVE-2016-4472 Notes: svn path=/head/; revision=417845
* Document dnsmasq vulnerabilityMark Felder2016-06-301-0/+30
| | | | | | | Security: CVE-2015-8899 Notes: svn path=/head/; revision=417844
* Document python vulnerabilityMark Felder2016-06-301-0/+30
| | | | | | | | PR: 210541 Security: CVE-2016-5699 Notes: svn path=/head/; revision=417843
* Document openssl vulnerabilityMark Felder2016-06-301-0/+32
| | | | | | | | PR: 210550 Security: CVE-2016-2177 Notes: svn path=/head/; revision=417842
* - Update to 0.7.1Wen Heping2016-06-309-356/+6
| | | | | | | | PR: 210514 Submitted by: yuri@rawbw.com Notes: svn path=/head/; revision=417815
* security/letskencrypt: Update to 0.1.7Bernard Spil2016-06-292-8/+5
| | | | | | | | - Update to 0.1.7 - Move from USE_OPENSSL to USES=ssl Notes: svn path=/head/; revision=417795
* - Update to 20160628Danilo Egea Gondolfo2016-06-292-6/+6
| | | | | | | - Change USE_OPENSSL by USES=ssl Notes: svn path=/head/; revision=417788
* Remove all usage of OPENSSL_PORT from ports, this is deprecated, andMathieu Arnold2016-06-291-2/+7
| | | | | | | | | always was a user defined variable. Sponsored by: Absolight Notes: svn path=/head/; revision=417767
* Update to 2.3.0.Tijl Coosemans2016-06-292-3/+4
| | | | Notes: svn path=/head/; revision=417763
* Update to 1.3.17.Tijl Coosemans2016-06-292-3/+4
| | | | Notes: svn path=/head/; revision=417762
* security/p5-Crypt-LE: Add RUN_DEPENDS security/p5-Crypt-PKCS10Kurt Jaeger2016-06-281-0/+3
| | | | Notes: svn path=/head/; revision=417748
* security/p5-Crypt-OpenSSL-PKCS10: add missing DEPENDKurt Jaeger2016-06-281-0/+4
| | | | | | | - Crypt::OpenSSL::RSA was missing Notes: svn path=/head/; revision=417746
* New port: security/p5-Crypt-OpenSSL-PKCS10Kurt Jaeger2016-06-285-0/+28
| | | | | | | | | Perl extension to OpenSSL's PKCS10 API. WWW: http://search.cpan.org/dist/Crypt-OpenSSL-PKCS10/ Notes: svn path=/head/; revision=417745
* New port: security/p5-Crypt-LEKurt Jaeger2016-06-285-0/+39
| | | | | | | | | | | | | | | | Crypt::LE provides the functionality necessary to use Let's Encrypt API and generate free SSL certificates for your domains. It can also be used to generate RSA keys and Certificate Signing Requests or to revoke previously issued certificates. Crypt::LE is shipped with a self-sufficient client for obtaining SSL certificates - le.pl. The client supports 'http' and 'dns' domain verification out of the box. WWW: http://search.cpan.org/dist/Crypt-LE/ Notes: svn path=/head/; revision=417741
* security/openvpn-devel: 201607 -> 201623Kurt Jaeger2016-06-282-13/+11
| | | | | | | | | | | | | | | | Port Changes: - password-save option is always on now, no longer optional - LibreSSL has been renamed mbed TLS Upstream Changes: - Implement --push-remove option to remove options pushed by server - Use mbedTLS 2.x now, instead of PolarSSL 1.x PR: 210259 Submitted by: ecrist@secure-computing.net (maintainer) Notes: svn path=/head/; revision=417735
* Convert USE_PHP*=yes into USES=php*Mathieu Arnold2016-06-2811-46/+15
| | | | | | | | | | | PR: 210529 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D6936 Notes: svn path=/head/; revision=417719
* USEify USES=php.Mathieu Arnold2016-06-284-4/+4
| | | | | | | | | | | | | | | | | | | | | | | The following variables have been folded into arguments: - USE_PHPIZE -> USES=php:phpize - USE_PHPEXT -> USES=php:ext - USE_ZENDEXT -> USES=php:zend - USE_PHP_BUILD -> USES=php:build - WANT_PHP_CLI -> USES=php:cli - WANT_PHP_CGI -> USES=php:cgi - WANT_PHP_MOD -> USES=php:mod - WANT_PHP_WEB -> USES=php:web - WANT_PHP_EMB -> USES=php:embed PR: 210529 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D6936 Notes: svn path=/head/; revision=417717
* - PORTEPOCH != PORTVERSIONRyan Steinmetz2016-06-281-0/+1
| | | | Notes: svn path=/head/; revision=417710
* - Update to 2.029Philippe Audeoud2016-06-282-4/+4
| | | | Notes: svn path=/head/; revision=417705
* Reset ports maintained by horia@racoviceanu.com.Raphael Kubo da Costa2016-06-282-2/+2
| | | | | | | | | | | | | | | | The last change submitted or approved by Horia in Bugzilla dates back to September 2015. Since then, all commits to his ports were landed by others after the maintainer timeout period expired (see r383744, r405055, r405057, r400461 and r414655, for example). Horia did show interest in coming back after I sent a private email a few months ago, but since nothing has changed it is better to reassign his ports back to the heap. Differential Revision: https://reviews.freebsd.org/D5980 Notes: svn path=/head/; revision=417703
* - Pass maintainership to submitterWen Heping2016-06-281-1/+1
| | | | | | | | PR: 210646 Submitted by: yuri@rawbw.com Notes: svn path=/head/; revision=417691
* - Pass maintainership to submitterWen Heping2016-06-281-1/+1
| | | | | | | | PR: 210646 Submitted by: yuri@rawbw.com Notes: svn path=/head/; revision=417690
* Reset ports maintained by bf@ until he has time again to work on them.Rene Ladan2016-06-272-2/+2
| | | | | | | | | PR: 210474 Submitted by: jbeich With hat: portmgr-secretary Notes: svn path=/head/; revision=417685
* security/doas: 5.9p1 -> 5.9p2Kurt Jaeger2016-06-272-5/+7
| | | | | | | | | | | | | | | - fixed a bug where, when the user authenticates successfully as root, only the user's effective user id (euid) becomes zero (0). This leads to file permission errors when performing upgrades or other file-oriented operations. - introduced gmake as a dependency as it is needed to process upstream's makefile. PR: 210596 Submitted by: jsmith@resonatingmedia.com (maintainer) Notes: svn path=/head/; revision=417675
* Insert tab. No functional change.Hajimu UMEMOTO2016-06-271-1/+1
| | | | Notes: svn path=/head/; revision=417668
* Replace bsd.openssl.mk with USES=sslMathieu Arnold2016-06-272-3/+3
| | | | | | | | | | | | | | | Add a qa hint about needing, or not, USES=ssl. Fix ports doing silly things, like including bsd.openssl.mk directly. PR: 210322 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D6866 Notes: svn path=/head/; revision=417651
* Add new port -- YubiKey PIV ManagerHajimu UMEMOTO2016-06-277-0/+74
| | | | | | | Tool for configuring your PIV-enabled YubiKey. Notes: svn path=/head/; revision=417646
* - Update to 5.33Ryan Steinmetz2016-06-273-4/+6
| | | | Notes: svn path=/head/; revision=417625
* Document remote denial of service via FileUpload component in TomcatJason Unovitch2016-06-261-0/+38
| | | | | | | | | | | PR: 209669 [1] Reported by: Geoffroy Desvernay <dgeo@centrale-marseille.fr> [1] Reported by: Roger Marquis <marquis@roble.com> Security: CVE-2016-3092 Security: https://vuxml.FreeBSD.org/freebsd/cbceeb49-3bc7-11e6-8e82-002590263bf5.html Notes: svn path=/head/; revision=417596
* - Update to 1.11.1Sunpoet Po-Chuan Hsieh2016-06-262-3/+4
| | | | | | | Changes: https://github.com/capistrano/sshkit/blob/master/CHANGELOG.md Notes: svn path=/head/; revision=417582
* - Update to 2.2.0Sunpoet Po-Chuan Hsieh2016-06-262-4/+4
| | | | | | | | Changes: https://github.com/google/oauth2client/releases https://github.com/google/oauth2client/blob/master/CHANGELOG.md Notes: svn path=/head/; revision=417572
* - Update to 1.058Sunpoet Po-Chuan Hsieh2016-06-262-3/+4
| | | | | | | Changes: http://search.cpan.org/dist/Net-SSLGlue/Changes Notes: svn path=/head/; revision=417562
* Document Wordpress vulnerabilities fixed in 4.5.3Jason Unovitch2016-06-251-0/+58
| | | | | | | | | | | | | | | | | | PR: 210480 [1] PR: 210581 Reported by: Mihail Timofeev <9267096@gmail.com> [1] Security: CVE-2016-5832 Security: CVE-2016-5833 Security: CVE-2016-5834 Security: CVE-2016-5835 Security: CVE-2016-5836 Security: CVE-2016-5837 Security: CVE-2016-5838 Security: CVE-2016-5839 Security: https://vuxml.FreeBSD.org/freebsd/bfcc23b6-3b27-11e6-8e82-002590263bf5.html Notes: svn path=/head/; revision=417499
* Docment security issues fixed in PHP 7.0.8, 5.6.23, and 5.5.37Jason Unovitch2016-06-251-0/+114
| | | | | | | | | | | | | | | | | | | | PR: 210491 PR: 210502 Reported by: Vladimir Krstulja <vlad-fbsd@acheronmedia.com> Reported by: Philip Jocks <freebsdbugs@filis.org> Security: CVE-2015-8874 Security: CVE-2016-5766 Security: CVE-2016-5767 Security: CVE-2016-5768 Security: CVE-2016-5769 Security: CVE-2016-5770 Security: CVE-2016-5771 Security: CVE-2016-5772 Security: CVE-2016-5773 Security: https://vuxml.FreeBSD.org/freebsd/66d77c58-3b1d-11e6-8e82-002590263bf5.html Notes: svn path=/head/; revision=417490
* Fix filename in distinfo.Ollivier Robert2016-06-251-3/+3
| | | | | | | | PR: 210553 Submitted by: t@tobik.me Notes: svn path=/head/; revision=417463
* Add new port -- Yubico PIV toolHajimu UMEMOTO2016-06-254-0/+53
| | | | | | | | | | | | The Yubico PIV tool is used for interacting with the Privilege and Identification Card (PIV) application on a YubiKey. With it you may generate keys on the device, importing keys and certificates, and create certificate requests, and other operations. A shared library and a command-line tool is included. Notes: svn path=/head/; revision=417460
* Hook doas to the buildAntoine Brodin2016-06-251-0/+1
| | | | Notes: svn path=/head/; revision=417457
* Change PORTREVISION to something sensible as upstream did not change.Ollivier Robert2016-06-241-1/+1
| | | | | | | Reported by: mat Notes: svn path=/head/; revision=417452
* security/py-certbot: Complete renaming from letsencryptBernard Spil2016-06-242-2/+2
| | | | | | | | | - Rename relevant occurences in pkg-descr and pkg-message PR: 210508 Notes: svn path=/head/; revision=417447
* Missed the fact that ${ETCDIR} includes the port's name.Ollivier Robert2016-06-241-0/+1
| | | | | | | Submitted by: @mordin_ on Twitter. Notes: svn path=/head/; revision=417446
* Update to commit 720db72 to fix a security issue.Ollivier Robert2016-06-244-26/+4
| | | | | | | Reported by: Bryan Steele (@canadianbryan on Twitter) Notes: svn path=/head/; revision=417445
* security/nss: update to 3.25Jan Beich2016-06-244-6/+6
| | | | | | | Changes: https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.25_release_notes Notes: svn path=/head/; revision=417431
* New port: security/doasOllivier Robert2016-06-246-0/+69
| | | | | | | | | | | | | | | | | | | | | The doas program allows users to run commands as another user (usually root). The doas program was written by the OpenBSD team to provide a lightweight, simplified (and more secure) alternative to the sudo command. Original upstream (OpenBSD) source: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/doas/ FreeBSD version: https://github.com/slicer69/doas NOTE: I added the two patch files to workaround issues mentioned in the PR about hardcoding of /usr/local. PR: 210473 Submitted by: jsmith@resonatingmedia.com Modified by: jrm@ftfl.ca (see PR) and me (roberto) Notes: svn path=/head/; revision=417407
* Update to 2.5Grzegorz Blach2016-06-232-5/+6
| | | | Notes: svn path=/head/; revision=417392
* Fix vuxmlMark Felder2016-06-231-1/+1
| | | | | | | | | I didn't validate after updating "foo reports:" line Pointyhat: me Notes: svn path=/head/; revision=417391
* Document libarchive vulnerabilitiesMark Felder2016-06-231-0/+41
| | | | | | | | | | | PR: 210493 Security: CVE-2015-8934 Security: CVE-2016-4300 Security: CVE-2016-4301 Security: CVE-2016-4302 Notes: svn path=/head/; revision=417384
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-03 01:06:41 +0000