5792 Commits

Author SHA1 Message Date
rpointel
69916f7d3a updte volatility to 2.6.1. 2019-01-03 08:02:25 +00:00
jasper
93a5eb16a8 remove libhttpseverywhere; it is no longer used by anything and was broken
by the recent vala update. upstream (gnome) has made no effort to fix it so
let us get rid of it too.

ok aja@
2019-01-02 20:32:07 +00:00
jasper
b6dc7910a2 -libhttpseverywhere 2019-01-02 20:31:00 +00:00
sebastia
6327b1ce87 simple update 2.0.16 -> 2.0.18 2019-01-02 12:23:27 +00:00
rpointel
a96deb5879 update ropper to 1.11.10. 2019-01-02 06:33:17 +00:00
rpointel
096dbfa760 update theHarvester to 3.0.6. 2018-12-31 09:35:40 +00:00
rpointel
21b054ae09 update oledump to 0.0.40. 2018-12-31 09:19:27 +00:00
ajacoutot
8a2c553625 Set rc_usercheck=NO since ossec-control is only executable by root and the
_ossec user; discussed with pirofti@
Don't use rcexec for actions other than 'start', it's not needed.
TRUEPREFIX->PREFIX in MESSAGE (TRUEPREFIX isn't expended).
2018-12-31 07:02:07 +00:00
phessler
9f0753d67c Handle changes in the associated AP. This lets wpa_supplicant re-connect to
a dot1x SSID after a suspend/resume cycle, or when roaming between access
points.

Tested in the wild at the 35C3 CCC Congress.

Hard work done by Gregor Best (gbe -bei- unobtanium -punkt- de), thanks!

OK sthen@
2018-12-29 09:22:55 +00:00
sthen
f372518695 update to pecl-libsodium-2.0.20. bit of a noop as we're using built-in
sodium in 7.2+ but keeps portroach happy.

2.0.20	- Restore compatibility with PHP
2.0.19	- Restore compatibility with 7.3
2.0.18	- Restore compatibility with PHP before 7.3
2.0.17	- PHP 7.3 compatibility.
2.0.16	- PHP 7.3 compatibility.
2018-12-27 15:33:07 +00:00
landry
c07b18d3d6 Update to nss 3.41, required by gecko 65.0b6
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41_release_notes
2018-12-24 10:31:41 +00:00
pea
b30098f2dc Update to 2.2.12
ok ajacoutot@, lum@, abieber@
2018-12-22 17:49:21 +00:00
pirofti
8a8bd6872a Link ossec-hids 2018-12-21 22:04:03 +00:00
pirofti
5a374c9b3d Import security/ossec-hids.
OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection
System (HIDS). It has a powerful correlation and analysis engine, integrating
log analysis, file integrity checking, Windows registry monitoring, centralized
policy enforcement, rootkit detection, real-time alerting and active response.

Help from and OK sthen@, thanks!
2018-12-21 22:01:56 +00:00
naddy
d6682042c6 Always add ${LOCALBASE} to the path since ports-gcc no longer looks
there by default.  Also, with the COMPILER infrastructure, CHOSEN_COMPILER
is the correct variable to check for the compiler type.  ok bluhm@
2018-12-21 21:22:53 +00:00
lum
ee1057427c update to py-bcrypt-3.1.5 and add testing to Makefile. ok sthen@ 2018-12-20 17:31:21 +00:00
gonzalo
89e7641623 Update for Keybase to 2.11.0
OK abieber@ (maintainer)
2018-12-20 14:13:17 +00:00
jca
fdc2a91593 Fix getopts string and use system getopts
from upstream via maintainer Charlene Wendling
2018-12-19 18:18:42 +00:00
ajacoutot
d94ad34311 Enable libdane now that with have libunbound.
Survived a bulk.
2018-12-19 08:35:54 +00:00
abieber
806b8333a8 Bump gopass to 1.8.3. Patch has been sent upstream:
https://github.com/gopasspw/gopass/pull/1015

OK rsadowski@
2018-12-16 01:09:55 +00:00
ajacoutot
ec13a9b298 Update to vault-1.0.0. 2018-12-15 11:42:39 +00:00
ajacoutot
d66328dc56 Major update to gnutls-3.6.5.
This is the new stable branch.
Survived a bulk.
2018-12-15 09:00:26 +00:00
rpointel
b300219af4 update theHarvester to 3.0.4. 2018-12-13 06:52:46 +00:00
sthen
03f88324a6 garbage-collect now unused MODPECL_V 2018-12-12 23:46:18 +00:00
sthen
dcdd36f49d move @pkgpath markers for pecl extensions so that versions compiled against
the old "ports default" versions of php are autoupdated to the current one
2018-12-11 12:33:26 +00:00
sthen
305fd3d250 drop ports/flavours requiring php 5.6 which is about to stop receiving
security fixes.
2018-12-11 12:07:47 +00:00
sthen
e7e89a6669 disable pecl-libsodium for php 7.2, use the built-in support instead 2018-12-11 11:42:23 +00:00
sthen
b8441a656c fix symlinkable ini-file, it should be "sodium" not "libsodium"
reported by johnwmail at gmail
2018-12-11 10:51:06 +00:00
jca
c459f7c54f Unbreak on gcc archs by rewriting C99 construct
Spotted on sparc64 by landry@ who had the same diff.
ok aja@ (maintainer) landry@
2018-12-11 10:46:06 +00:00
ajacoutot
edd203cd90 Don't hardcode user in $deamon (i.e. -u foo).
Use daemon_flags for this, it's what it's for.

ok sthen@
2018-12-09 12:05:25 +00:00
ajacoutot
1e480d204a Update to libgpg-error-1.33. 2018-12-09 10:39:51 +00:00
bket
b466d99c0a Update to mbedtls-2.14.1
Addresses CVE-2018-19608. Bump minor of mbedcrypto as symbols have been
added.

OK kn@, jca@
2018-12-07 13:11:24 +00:00
ajacoutot
ddc1b1a04a Update to libnettle-3.4.1. 2018-12-06 14:03:41 +00:00
rpointel
76951103b5 update oledump to 0.0.39. 2018-12-06 09:52:09 +00:00
sthen
b4a89ef73b fix previous a different way that avoids the extra headers 2018-12-04 13:40:06 +00:00
sthen
bfed3247f0 some additional headers are needed to use libclamav but aren't installed by
default; install them, and use a subdir because one of them has a common name
2018-12-04 13:23:11 +00:00
sthen
4f38af6a00 update to ClamAV 0.101.0 2018-12-04 12:33:40 +00:00
bluhm
de139e244f update p5-POE-Component-SSLify to 1.012
from Charlene Wendling
2018-12-04 11:02:31 +00:00
robert
becdcd5b83 use arc4random_buf(3) in libgcrypt instead of /dev/random
this issue came to the light after using an unveil(2)'d chrome
inside a GNOME environment where it was trying to use the keyring
which was relying on libgcrypt

ok ajacoutot@
2018-12-02 11:24:15 +00:00
landry
a5821d16a7 Update to nss 3.40.1.
Fixes CVE-2018-12404
2018-12-01 09:18:26 +00:00
sthen
c7b148abe8 update to pecl-libsodium-2.0.15 2018-11-29 23:11:00 +00:00
rpointel
480dd4dce6 update TheHarvester to 3.0.1, and switch to python3. 2018-11-27 16:32:48 +00:00
sthen
5349f30d3b unhook/remove Math::Pari and dependent ports, this has been blocking
math/pari updates (Math::Pari still gets updated but even recently
released versions require old Pari; the crypto libs based on this
seem a bit unloved these days).

ok daniel semarie
2018-11-26 21:47:01 +00:00
bket
e1717927a1 Update to mbedtls-2.14.0.
Bump major number of shared libs, as symbols have been removed.

OK jca@
2018-11-26 15:18:28 +00:00
ajacoutot
891cc967e3 Update to vault-0.11.5. 2018-11-23 09:49:41 +00:00
gonzalo
402388b9f4 Update to 1.2.11
OK benoit@
2018-11-21 11:23:02 +00:00
sthen
68ac84cbdb update to openssl-1.1.1a 2018-11-20 22:19:57 +00:00
sthen
b2ca7ff77a update to openssl-1.0.2q 2018-11-20 22:19:48 +00:00
naddy
b086632fa8 Disable CAST cipher when configuring the embedded OpenSSL.
Since we don't build shared libraries, the CAST assembly implementation
is included on i386 even though there is no PIC version. Skip the whole
cipher as there are no SSL/TLS cipher suites that use CAST.

ok sthen@
2018-11-20 16:46:36 +00:00
jca
ed688c7797 LibreSSL and packaging tweaks
- don't force-disable the use of BN_GENCB_new() and friends, supported
  since LibreSSL 2.7.1
- fix WANTLIB, this is c++
- provide a correct WRKDIST, and use it
- install README.md, it has useful data

ok abieber@ (maintainer)
2018-11-20 13:01:08 +00:00