Commit Graph

3381 Commits

Author SHA1 Message Date
jca
3df624f906 Security fix for GNUTLS-SA-2013-3,
GnuTLS Denial of Service vulnerability in DANE records processing.
(no CVE assigned yet)

ok aja@ (MAINTAINER)
2013-10-24 15:42:08 +00:00
sthen
82b8ebc4e0 add a comment about use of gnu libtool
prompted (indirectly ;) by a mail from aja@
2013-10-23 17:50:38 +00:00
sthen
1dc37895d7 +libsodium 2013-10-23 12:08:08 +00:00
sthen
7ae527c412 import security/libsodium, ok benoit@
NaCl (pronounced "salt") is a new easy-to-use high-speed software library
for network communication, encryption, decryption, signatures, etc.
NaCl's goal is to provide all of the core operations needed to build
higher-level cryptographic tools.

Sodium is a fork of NaCl with a compatible API. Unlike NaCl, Sodium
performs checks for hardware features at runtime instead of compile time,
making it suitable for packaging.
2013-10-23 12:07:52 +00:00
sthen
c4d9d2b279 Update to scanlogd 2.2.7, fixing an off-by-one bug in a safety check (only a
minor impact in scanlogd), and cutting down the license a bit further,
see http://www.openwall.com/lists/announce/2013/10/21/1 for more.

While there, drop USE_GROFF and rearrange port into Makefile.template order.
2013-10-23 10:10:56 +00:00
sthen
c193492c7c ClamAV 0.98 moved from libtommath to tomfastmath; however word-length detection
is broken on !amd64 64-bit arch which invalidates assumptions in the code.
Workaround by taking a diff from clamav upstream. This fixes a problem reported
by Markus Lude where freshclam signature checks fail - researched by him and
port diff from him (I just added a bit of commentary to the patch file).
2013-10-22 08:56:34 +00:00
naddy
d9d9ccbd06 Drop USE_GROFF since groff and mandoc produce identical output. 2013-10-18 11:29:41 +00:00
bluhm
e891f03167 update p5-IO-Socket-SSL to 1.955 2013-10-16 19:41:11 +00:00
naddy
06a9102560 Drop USE_GROFF since groff and mandoc produce identical output. 2013-10-11 23:48:03 +00:00
pascal
b919015e44 SECURITY update to GnuPG 2.0.22. Fixes CVE-2013-4402, see:
http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000333.html

ok pea@ (maintainer)
2013-10-07 11:54:28 +00:00
naddy
9ea24770be no need for groff 2013-10-05 12:30:45 +00:00
dcoppa
a2a0464ede Bye bye MODPY_BADEGGS 2013-10-03 16:37:15 +00:00
ajacoutot
539eeef333 distfiles.bsdfrog.org: http -> https 2013-10-01 09:07:14 +00:00
sthen
84de7e7adb - fix gnuism in unit_tests/Makefile
- allow running tests twice (don't fail if can't create symlink to python)

no pkg change
2013-09-29 22:38:29 +00:00
ajacoutot
c611a41f46 Update to libpwquality-1.2.3. 2013-09-24 14:57:14 +00:00
ajacoutot
fe43e2a5a1 Update to p11-kit-0.20.1. 2013-09-24 08:06:56 +00:00
sthen
7c20710162 missing run dep; rpe@ 2013-09-23 14:05:21 +00:00
sthen
c753168019 +sslScanner, p5-Net-SSL-ExpireDate, p5-Crypt-OpenSSL-X509 2013-09-23 11:50:55 +00:00
sthen
90f8eda064 import ports/security/sslScanner, ok landry@
sslScanner is an open source Perl application which connects to a range
of hosts/ports which are running SSL based services such as HTTPS.
It then displays the certificate CN and how long is left until the
certificate expires. It also has a mode suitable for use from cron(8),
to alert on certificates expiring within a certain number of days.
2013-09-23 11:49:45 +00:00
sthen
056bfd2b4a import ports/security/p5-Net-SSL-ExpireDate, ok landry@
Net::SSL::ExpireDate fetches a certificate from the network (SSL) or local
file, obtains its start and expiration dates, and allows validity to be
tested or dates to be returned.
2013-09-23 11:49:21 +00:00
sthen
0c7c118d60 import ports/security/p5-Crypt-OpenSSL-X509, ok landry@
This Perl extension implements the majority of OpenSSL's X509 API.
2013-09-23 11:48:55 +00:00
benoit
e2f83b2f10 Update py-paramiko to 1.11.1. 2013-09-21 06:11:48 +00:00
sthen
ba709626eb update to yubikey-personalization-gui-3.1.10 2013-09-20 21:19:40 +00:00
sthen
ad82cdda3c update to clamav 0.98:
- signature improvements, performance improvements, support for new file
types including ISO9660, Flash, self-extracting 7z files

- more configurable limits

- callbacks added to API

while there, drop run dependency on zoo; clamav actually switched from zoo
to unzoo (which we don't have in ports) in 0.60(!) so this was doing nothing.
2013-09-20 15:22:58 +00:00
ajacoutot
798d1f1962 Update to libassuan-2.1.1. 2013-09-17 11:10:01 +00:00
sthen
d7d281815f Replace "source ./vars" (bashism) with ". ./vars" in various files
installed by easy-rsa. Found the hard way by Predrag Punosevac.
2013-09-14 21:59:59 +00:00
sthen
836a7c1d81 update to clamav-unofficial-sigs-3.7.2 2013-09-09 22:09:58 +00:00
ajacoutot
b10ddb6f8e Update to gnutls-3.2.4. 2013-09-06 16:27:51 +00:00
ajacoutot
3d8d8cf06c Update to p11-kit-0.20.0. 2013-09-06 16:27:21 +00:00
ajacoutot
c2de9d8d58 Update to libgpg-error-1.12. 2013-09-06 16:25:06 +00:00
ajacoutot
23b354ad1a Build py-crypto,python3 2013-09-05 07:47:22 +00:00
sthen
50e8f03e81 tweaks for libnettle, from Juan Francisco Cantero Hurtado:
- don't force -ggdb3

- don't use asm on arm, our toolchain can't handle it
(http://rhaalovely.net/build-failures/arm/20130730/security/libnettle.log)
2013-09-03 13:53:47 +00:00
ajacoutot
7b341dfcc3 Update to libgcrypt-1.5.3. 2013-08-26 08:20:28 +00:00
zhuk
4f664d8b82 Fixup handling of FreeDesktop goo: desktop-file-utils, gtk-update-icon-cache
and shared-mime-info. Found by portcheck.

A lot of input from and okay ajacoutot@
2013-08-20 22:05:46 +00:00
pascal
2db9b7d854 Update to GnuPG 2.0.21.
ok dcoppa@, maintainer timeout
2013-08-20 20:01:30 +00:00
dcoppa
492f06c1db Explicitly link with -lpthread; tests, no bump needed. 2013-08-20 14:28:48 +00:00
stsp
ae981be712 Update pidgin-otr to version 4.0.0. ok pascal@ 2013-08-15 16:33:31 +00:00
stsp
c5653589d6 Update libotr to version 4.0.0. Supports version 3 of the OTR protocol,
which most importantly adds support for multiple simultaneously logged-in
instances of the same user account.
ok pascal@
2013-08-15 16:33:22 +00:00
naddy
fb935bc764 remove (time_t)timeval.tv_sec casts now that tv_sec has type time_t 2013-08-15 14:58:45 +00:00
pascal
b5494e6708 add comment about ports that need to be adapted to the new libotrv4 API when
updating.
2013-08-14 14:17:28 +00:00
abieber
3a099ac12f bump revision to catch the gyp fix
OK nigel@
2013-08-13 21:18:09 +00:00
dcoppa
3fedf5890d Update to ccid-1.4.12. 2013-08-13 09:46:54 +00:00
rpe
78a8551c23 add pwsafe,no_x11 2013-08-12 22:24:01 +00:00
rpe
665318a6a2 - add no_x11 FLAVOR so it's usable on hosts with no X sets installed
- be a bit more verbose in updated DESCR
- bump REVISION

'Sure, why not' aja@, sthen@
2013-08-12 21:55:35 +00:00
benoit
b3a7890e7e Update py-paramiko to 1.11.0. 2013-08-11 10:20:03 +00:00
rpointel
e17019ffb8 oops, add pthread to WANTLIB... 2013-08-09 19:26:56 +00:00
rpointel
e63340b418 Update libssh to 0.5.5.
ok aja@
2013-08-09 19:14:50 +00:00
naddy
8019c3b106 fix FULLPKGNAME abuse, revealed by REVISION bump 2013-08-09 11:23:25 +00:00
bluhm
5d6ea09c64 update p5-IO-Socket-SSL to 1.953 2013-08-08 22:37:45 +00:00
bluhm
ea78e22df6 update p5-Net-SSLGlue to 1.04 2013-08-08 22:18:18 +00:00