5782 Commits

Author SHA1 Message Date
landry
c07b18d3d6 Update to nss 3.41, required by gecko 65.0b6
See
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41_release_notes
2018-12-24 10:31:41 +00:00
pea
b30098f2dc Update to 2.2.12
ok ajacoutot@, lum@, abieber@
2018-12-22 17:49:21 +00:00
pirofti
8a8bd6872a Link ossec-hids 2018-12-21 22:04:03 +00:00
pirofti
5a374c9b3d Import security/ossec-hids.
OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection
System (HIDS). It has a powerful correlation and analysis engine, integrating
log analysis, file integrity checking, Windows registry monitoring, centralized
policy enforcement, rootkit detection, real-time alerting and active response.

Help from and OK sthen@, thanks!
2018-12-21 22:01:56 +00:00
naddy
d6682042c6 Always add ${LOCALBASE} to the path since ports-gcc no longer looks
there by default.  Also, with the COMPILER infrastructure, CHOSEN_COMPILER
is the correct variable to check for the compiler type.  ok bluhm@
2018-12-21 21:22:53 +00:00
lum
ee1057427c update to py-bcrypt-3.1.5 and add testing to Makefile. ok sthen@ 2018-12-20 17:31:21 +00:00
gonzalo
89e7641623 Update for Keybase to 2.11.0
OK abieber@ (maintainer)
2018-12-20 14:13:17 +00:00
jca
fdc2a91593 Fix getopts string and use system getopts
from upstream via maintainer Charlene Wendling
2018-12-19 18:18:42 +00:00
ajacoutot
d94ad34311 Enable libdane now that with have libunbound.
Survived a bulk.
2018-12-19 08:35:54 +00:00
abieber
806b8333a8 Bump gopass to 1.8.3. Patch has been sent upstream:
https://github.com/gopasspw/gopass/pull/1015

OK rsadowski@
2018-12-16 01:09:55 +00:00
ajacoutot
ec13a9b298 Update to vault-1.0.0. 2018-12-15 11:42:39 +00:00
ajacoutot
d66328dc56 Major update to gnutls-3.6.5.
This is the new stable branch.
Survived a bulk.
2018-12-15 09:00:26 +00:00
rpointel
b300219af4 update theHarvester to 3.0.4. 2018-12-13 06:52:46 +00:00
sthen
03f88324a6 garbage-collect now unused MODPECL_V 2018-12-12 23:46:18 +00:00
sthen
dcdd36f49d move @pkgpath markers for pecl extensions so that versions compiled against
the old "ports default" versions of php are autoupdated to the current one
2018-12-11 12:33:26 +00:00
sthen
305fd3d250 drop ports/flavours requiring php 5.6 which is about to stop receiving
security fixes.
2018-12-11 12:07:47 +00:00
sthen
e7e89a6669 disable pecl-libsodium for php 7.2, use the built-in support instead 2018-12-11 11:42:23 +00:00
sthen
b8441a656c fix symlinkable ini-file, it should be "sodium" not "libsodium"
reported by johnwmail at gmail
2018-12-11 10:51:06 +00:00
jca
c459f7c54f Unbreak on gcc archs by rewriting C99 construct
Spotted on sparc64 by landry@ who had the same diff.
ok aja@ (maintainer) landry@
2018-12-11 10:46:06 +00:00
ajacoutot
edd203cd90 Don't hardcode user in $deamon (i.e. -u foo).
Use daemon_flags for this, it's what it's for.

ok sthen@
2018-12-09 12:05:25 +00:00
ajacoutot
1e480d204a Update to libgpg-error-1.33. 2018-12-09 10:39:51 +00:00
bket
b466d99c0a Update to mbedtls-2.14.1
Addresses CVE-2018-19608. Bump minor of mbedcrypto as symbols have been
added.

OK kn@, jca@
2018-12-07 13:11:24 +00:00
ajacoutot
ddc1b1a04a Update to libnettle-3.4.1. 2018-12-06 14:03:41 +00:00
rpointel
76951103b5 update oledump to 0.0.39. 2018-12-06 09:52:09 +00:00
sthen
b4a89ef73b fix previous a different way that avoids the extra headers 2018-12-04 13:40:06 +00:00
sthen
bfed3247f0 some additional headers are needed to use libclamav but aren't installed by
default; install them, and use a subdir because one of them has a common name
2018-12-04 13:23:11 +00:00
sthen
4f38af6a00 update to ClamAV 0.101.0 2018-12-04 12:33:40 +00:00
bluhm
de139e244f update p5-POE-Component-SSLify to 1.012
from Charlene Wendling
2018-12-04 11:02:31 +00:00
robert
becdcd5b83 use arc4random_buf(3) in libgcrypt instead of /dev/random
this issue came to the light after using an unveil(2)'d chrome
inside a GNOME environment where it was trying to use the keyring
which was relying on libgcrypt

ok ajacoutot@
2018-12-02 11:24:15 +00:00
landry
a5821d16a7 Update to nss 3.40.1.
Fixes CVE-2018-12404
2018-12-01 09:18:26 +00:00
sthen
c7b148abe8 update to pecl-libsodium-2.0.15 2018-11-29 23:11:00 +00:00
rpointel
480dd4dce6 update TheHarvester to 3.0.1, and switch to python3. 2018-11-27 16:32:48 +00:00
sthen
5349f30d3b unhook/remove Math::Pari and dependent ports, this has been blocking
math/pari updates (Math::Pari still gets updated but even recently
released versions require old Pari; the crypto libs based on this
seem a bit unloved these days).

ok daniel semarie
2018-11-26 21:47:01 +00:00
bket
e1717927a1 Update to mbedtls-2.14.0.
Bump major number of shared libs, as symbols have been removed.

OK jca@
2018-11-26 15:18:28 +00:00
ajacoutot
891cc967e3 Update to vault-0.11.5. 2018-11-23 09:49:41 +00:00
gonzalo
402388b9f4 Update to 1.2.11
OK benoit@
2018-11-21 11:23:02 +00:00
sthen
68ac84cbdb update to openssl-1.1.1a 2018-11-20 22:19:57 +00:00
sthen
b2ca7ff77a update to openssl-1.0.2q 2018-11-20 22:19:48 +00:00
naddy
b086632fa8 Disable CAST cipher when configuring the embedded OpenSSL.
Since we don't build shared libraries, the CAST assembly implementation
is included on i386 even though there is no PIC version. Skip the whole
cipher as there are no SSL/TLS cipher suites that use CAST.

ok sthen@
2018-11-20 16:46:36 +00:00
jca
ed688c7797 LibreSSL and packaging tweaks
- don't force-disable the use of BN_GENCB_new() and friends, supported
  since LibreSSL 2.7.1
- fix WANTLIB, this is c++
- provide a correct WRKDIST, and use it
- install README.md, it has useful data

ok abieber@ (maintainer)
2018-11-20 13:01:08 +00:00
ajacoutot
d5f7a3c543 Update to cyrus-sasl-2.1.27.
This survived a bulk but only got light testing.
Getting this in early to get feedback about potential regressions.
Please *test* :-)
2018-11-19 08:24:23 +00:00
naddy
c22e808d10 don't bother with a non-PIC i386 assembly implementation of Blowfish, just
use the C version like all other archs
2018-11-18 21:25:43 +00:00
naddy
e1c4f1c499 allow text relocations from non-PIC i386 assembly code 2018-11-18 21:09:47 +00:00
ajacoutot
cad5071144 Add comment. 2018-11-18 16:09:52 +00:00
millert
5d08bf42fb Update to sudo 1.8.26
The PLIST file was missing cvtsudoers(1) which was added in 1.8.23
2018-11-16 13:19:23 +00:00
rpointel
e83a67332d update oletools to 0.53.1. 2018-11-16 08:02:25 +00:00
solene
852c42ff01 https for MASTER_SITES and HOMEPAGE
ok jca@
2018-11-15 20:21:33 +00:00
sthen
5fcd38d614 mark BROKEN-i386 for now (undefined reference to `__guard_local'), not sure
what's going on yet..
2018-11-15 10:03:08 +00:00
sthen
492606ac6e update to pecl-libsodium-2.0.14
2.0.14 	- Some Base64-encoded values couldn't be decoded when using unpadded variants. This has been fixed.
2.0.13 	- Security fix: sodium_pad() used to read extra memory when given an empty string
2018-11-15 09:44:09 +00:00
pvk
47e8ec619b +softhsm2 2018-11-14 22:25:20 +00:00