6345 Commits

Author SHA1 Message Date
sthen
e3fbe4b0cf update certbot/py-acme to 1.3.0, switch unique dependencies to py3 only 2020-03-04 14:33:28 +00:00
tb
f130b64fd3 Restrict byte-code compilation to SCRIPTS_DIR.
Fixes build failure with installed libproxy as seen by sthen.
2020-03-02 08:21:58 +00:00
semarie
614c7c9d0e small devel/cargo cleanup
keep MODCARGO_CRATE for libc separated from the big list, and properly document it.
2020-03-02 07:20:23 +00:00
kmos
7115c3f085 Update security/py-oauthlib 2.1.0 -> 3.1.0
Drop python2 FLAVOR

From Johan Huldtgren (maintainer)
2020-02-29 19:34:27 +00:00
tb
dc8f403959 +py-tlsfuzzer,python3 2020-02-29 07:59:50 +00:00
tb
5422cb77c9 import py-tlsfuzzer
ok kmos

Fuzzer and test suite for TLS implementations (SSLv2-TLSv1.3).  Provides
ready-to-use scripts testing for many vulnerabilities (ROBOT, DROWN, etc.)
and general standards conformity (RFC 5246, RFC 7627, RFC 7905, etc.)
Early alpha version - no API stability guarantees.
2020-02-29 07:57:47 +00:00
kurt
66975f6f4e Fix build on arm64. okay landry@ 2020-02-28 16:04:29 +00:00
jca
8777c2964a Update to libassuan-2.5.3
from Alex Naumov
2020-02-23 22:59:22 +00:00
tb
f705fd1691 Add missing RDEP on py-six.
ok benoit (maintainer)
2020-02-23 18:00:27 +00:00
jasper
3ae4a4eda2 update to py-cryptodome-3.9.7 2020-02-23 13:31:06 +00:00
benoit
56090d95e1 Update to p5-Crypt-Rijndael-1.14. 2020-02-22 21:43:55 +00:00
benoit
160c41b040 Update to p5-Crypt-OpenSSL-Bignum-0.09. 2020-02-22 21:06:28 +00:00
bket
4a4ec36bd6 Update to mbedtls-2.16.5
This release fixes a potential memory overread when performing an ECDSA
signature operation. Release notes:
https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.5-and-2.7.14-released.
2020-02-22 06:38:12 +00:00
jca
4b482501ba Update to zaproxy-2.9.0
Release notes:
https://www.zaproxy.org/docs/desktop/releases/2.8.0/
https://www.zaproxy.org/docs/desktop/releases/2.9.0/

from Asher Pasha
2020-02-22 00:14:21 +00:00
sthen
a66954e910 add a note to DESCR pointing out some more actively-maintained ways to
do DNSSEC
2020-02-20 11:50:20 +00:00
sthen
5977fb9091 security/zkt tweaks:
- https homepage
- time_t printf
- fix stray semicolon in if
- stop using dnssec-keygen -r, it was removed after BIND 9.12.
I don't have a working setup to validate things so I'm not sure if this
is enough to fix with the current version of bind+tools in ports so more
work maybe needed, but at least it can't work without this.
2020-02-20 11:21:13 +00:00
sebastia
fdd5ba1187 simple update: 2.0.19 -> 2.0.20 2020-02-19 12:10:58 +00:00
pvk
b9366b84b1 Update opendnssec 2.1.5 -> 2.1.6
Announcement: https://www.opendnssec.org/2020/02/opendnssec-2-1-6/
2020-02-18 18:02:45 +00:00
gonzalo
b2c0dc0af0 Update for SQLMap to 1.4.2
OK benoit@
2020-02-18 12:41:03 +00:00
gonzalo
85cf515342 Update for Suricata to 5.0.2.
OK jasper@
2020-02-18 08:05:16 +00:00
kn
a13f815b94 Update angr and angrop to 8.20.1.7
Feedback and OK jasper
2020-02-15 18:36:18 +00:00
bluhm
79594944af update p5-IO-Socket-SSL to 2.067 2020-02-14 22:46:04 +00:00
jasper
3b1cb248e6 remove unused and outdated erlang libraries
ok aja@
2020-02-14 11:55:33 +00:00
landry
7433557b75 Update to nss 3.50.
See https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.50_release_notes
remove powerpc patch not needed anymore.
tested by cwen@ & tb@ on macppc and by jca@ on sparc64
2020-02-11 16:48:29 +00:00
sebastia
0766d56e27 Update 1.8.0 -> 1.8.1 2020-02-11 15:27:54 +00:00
jasper
3af2bf0e05 update to py-cryptodome-3.9.6 2020-02-10 18:19:58 +00:00
sebastia
5057373a83 Update 5.2.2 -> 5.3.0 2020-02-10 08:21:05 +00:00
abieber
c4a4c8c683 Bump ogvt to v1.0.1
- remove bits from my "testing" version (pubkey, SIGFILES, .asc ref in distinfo)
- whack DISTFILES (left over from initial hosting of tarball at sr.ht)
- add man page
2020-02-09 18:01:05 +00:00
abieber
55f6d1d4e8 +ogvt 2020-02-09 01:45:56 +00:00
abieber
bf3374daa2 Import ogvt aka OpenBSD Gnupg-signature Verification Tool.
OK kn@
2020-02-09 01:45:05 +00:00
ajacoutot
149174a32c Update to libgpg-error-1.37. 2020-02-08 12:16:37 +00:00
ajacoutot
a066690fa7 Update to gnutls-3.6.12. 2020-02-08 12:06:58 +00:00
ajacoutot
9aaa9f56b2 Update to p11-kit-0.23.20. 2020-02-08 12:05:50 +00:00
ajacoutot
609dac85ad Update to libtasn1-4.16.0. 2020-02-08 11:53:40 +00:00
cwen
e75953c747 opensc: fix the build on gcc archs by overriding `-Werror'
Backported from a pull request made to upstream, allowing port supplied
flags to be on top priority. Safety REVISION bump advised by kn@.

OK kn@ kmos@
2020-02-08 10:36:01 +00:00
sthen
05871d46e2 +cfssl 2020-02-07 16:57:26 +00:00
sthen
3369f2fa0c import security/cfssl, from Karlis Mikelsons with tweaks, ok'd a while ago
by abieber@

CFSSL is CloudFlare's PKI/TLS swiss army knife. It is both a command
line tool and an HTTP API server for signing, verifying, and bundling
TLS certificates.
2020-02-07 16:57:04 +00:00
sebastia
ae5bbdb15d Update to 2020-02-07 2020-02-07 09:36:06 +00:00
kirby
a1093f712b unhook -qt5 flavor for qtkeychain 2020-02-07 09:35:30 +00:00
rsadowski
68beee330c Set -qt5 flavor as default. All qt4 consumers are gone.
Tweak and OK kirby@
2020-02-07 07:13:40 +00:00
sthen
e82f672510 update to clamav-0.102.2, amongst others including a fix for a
possible DoS (out-of-bounds read -> crash) when using the credit card
data-loss-prevention feature.
2020-02-06 11:52:09 +00:00
kn
4dab7ffa2e Disable colors by default
"pcscd --debug" prints dark blue lines background, rendering them unreadable
on dark background.  The daemon has "-T" to enforce colored output, but no
switch to disable colors on TTYs.

Disable all detection logic such that "-T" is the only way to get colors.

OK sthen
2020-02-05 21:22:17 +00:00
sthen
33787ae545 update to certbot/py-acme 1.2.0 and actually drop maintainer this time 2020-02-05 19:43:09 +00:00
rpointel
df65b4b1a1 update oledump to 0.0.44. 2020-02-05 09:17:33 +00:00
sthen
a3e5de8f53 drop maintainer 2020-02-03 20:40:37 +00:00
juanfra
dedfa60fc7 Update to keybase 5.2.0. Change to release tarball and OK abieber@ (MAINTAINER). 2020-02-01 17:52:39 +00:00
bket
971462c417 Update to mbedtls-2.16.4
This release fixes a side channel attack on ECDSA (CVE-2019-18222).
Release notes can be found at
https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.4-and-2.7.13-released

Minor of libmbedcrypto has been bumped as a symbol has been added.

OK rsadowski@
2020-01-31 04:14:43 +00:00
sthen
e70c9037e7 update to xca-2.2.1 2020-01-30 23:19:33 +00:00
millert
8fec1b1efc Update sudo to 1.8.31:
* Fixed CVE-2019-18634, a buffer overflow when the "pwfeedback"
   sudoers option is enabled on systems with uni-directional pipes.

 * The "sudoedit_checkdir" option now treats a user-owned directory
   as writable, even if it does not have the write bit set at the
   time of check.  Symbolic links will no longer be followed by
   sudoedit in any user-owned directory.  Bug #912

 * Fixed sudoedit on macOS 10.15 and above where the root file system
   is mounted read-only.  Bug #913.

 * Fixed a crash introduced in sudo 1.8.30 when suspending sudo
   at the password prompt.  Bug #914.

 * Fixed compilation on systems where the mmap MAP_ANON flag
   is not available.  Bug #915.
2020-01-30 18:47:11 +00:00
sthen
ce59e21888 update to yubikey-manager-3.1.1 2020-01-30 14:24:19 +00:00