summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2020-05-12py-argon2-cffi: updated to 20.1.0adam2-7/+7
20.1.0: It is now possible to manually override the detection of SSE2 using the ARGON2_CFFI_USE_SSE2 environment variable.
2020-05-12py-google-auth: updated to 1.14.3adam2-7/+7
1.14.3: Bug Fixes catch exceptions.RefreshError
2020-05-11hs-*: add PLIST filesrillig12-0/+1194
These PLIST files have been autogenerated by mk/haskell.mk using HS_UPDATE_PLIST=yes during a bulk build. They will help to track changes to the packages. The Haskell packages didn't have PLIST files because their paths contained package hashes. These hashes are now determined by mk/haskell.mk, which makes it easy to generate easy to read PLIST files.
2020-05-10security/libssh2: remove unknown configure optionsrillig1-3/+1
2020-05-10security/p5-Authen-PAM: use perl as a toolrillig1-2/+3
This is not only a Perl module, it also runs the Perl interpreter directly.
2020-05-09security/py-ecdsa: remove unnecessary REPLACE_PYTHONrillig1-3/+1
These files are not installed as executables, therefore they don't need a script interpreter. The paths to the files were wrong anyway.
2020-05-09security/aide: skip portability checkrillig1-1/+3
2020-05-09(security/py-certbot-apache) regen PLIST for 1.4.0mef1-2/+3
2020-05-09security/isakmpd: remove no-op files from SUBST_FILESrillig1-2/+2
2020-05-07py-acme/py-certbot*: updated to 1.4.0adam32-114/+114
1.4.0: Added * Turn off session tickets for apache plugin by default when appropriate. * Added serial number of certificate to the output of `certbot certificates` * Expose two new environment variables in the authenticator and cleanup scripts used by the `manual` plugin: `CERTBOT_REMAINING_CHALLENGES` is equal to the number of challenges remaining after the current challenge, `CERTBOT_ALL_DOMAINS` is a comma-separated list of all domains challenged for the current certificate. * Added TLS-ALPN-01 challenge support in the `acme` library. Support of this challenge in the Certbot client is planned to be added in a future release. * Added minimal proxy support for OCSP verification. * On Windows, hooks are now executed in a Powershell shell instead of a CMD shell, allowing both `*.ps1` and `*.bat` as valid scripts for Certbot. Changed * Reorganized error message when a user entered an invalid email address. * Stop asking interactively if the user would like to add a redirect. * `mock` dependency is now conditional on Python 2 in all of our packages. * Deprecate certbot-auto on Gentoo, macOS, and FreeBSD. Fixed * When using an RFC 8555 compliant endpoint, the `acme` library no longer sends the `resource` field in any requests or the `type` field when responding to challenges. * Fix nginx plugin crash when non-ASCII configuration file is being read (instead, the user will be warned that UTF-8 must be used). * Fix hanging OCSP queries during revocation checking - added a 10 second timeout. * Standalone servers now have a default socket timeout of 30 seconds, fixing cases where an idle connection can cause the standalone plugin to hang. * Parsing of the RFC 8555 application/pem-certificate-chain now tolerates CRLF line endings. This should fix interoperability with Buypass' services. More details about these changes can be found on our GitHub repo.
2020-05-07py-google-auth: updated to 1.14.2adam2-9/+7
1.14.2: Bug Fixes support string type response.data
2020-05-06revbump after boost updateadam20-39/+40
2020-05-06tor-browser: update to 9.0.10.wiz2-13/+12
This release updates Firefox to 68.8.0esr, NoScript to 11.0.25, and OpenSSL to 1.1.1g. Also, this release features important security updates to Firefox. The full changelog since Tor Browser 9.0.9 is: All Platforms Update Firefox to 68.8.0esr Bump NoScript to 11.0.25 Windows + OS X + Linux Bug 34017: Bump openssl version to 1.1.1g
2020-05-05snallygaster: Update to 0.6leot2-7/+7
Changes: (No changelog available but main changes inspecting commits): - Add check for wordpress installer in subdir - Remove CVS test, produces too false positives and hardly any true positives - Add installer check for common PHP web applications - Add info check for composer files - Add info check for mailman - Add check for monit default webinterface credentials - Rework optionsbleed check and avoid ReDoS attack (upstream issue #24)
2020-05-04Rename files so that we pick up the correct header file.agc4-4/+21
Add the map file for the BSD Makefile's symbol exports.
2020-05-04polkit: align GCC_REQD with USE_LANGUAGESgutteridge1-3/+3
2020-05-04Bump version of libnetpgpverify and netpgpverify to 20200504 for changesagc1-2/+2
brought over from src.
2020-05-04bring over changes from src - cast return valuesagc1-4/+6
2020-05-04bring over change from src - cast return valuesagc1-2/+2
2020-05-04Bring over change from src - properly cite authors of RFC 4880agc1-5/+12
2020-05-03Update netpgpverify and libnetpgpverify to version 20200503agc12-257/+276
ensure all exported functions use a unique prfix, so that they don't conflict with symbols (both data and text) in libcrypto. this works for statically linked binaries and libraries, rather then the version map which only works for dynalically-linked.
2020-05-02security/Makefile: add dand enable ruby-chef-vaulttaca1-1/+2
2020-05-02security/ruby-chef-vault: add package version 4.0.1taca5-0/+67
Add ruby-chef-vault package version 4.0.1. Chef-Vault Chef-Vault allows you to encrypt a Chef Data Bag Item using the public keys of a list of chef nodes. This allows only those chef nodes to decrypt the encrypted values. For a more detailed explanation of how chef-vault works, please refer to this blog post Chef Vault - what is it and what can it do for you? by Nell Shamrell-Harrington.
2020-05-01security/fail2ban: clean up SUBST blockrillig1-5/+3
fail2ban-client does not contain any paths.
2020-05-01tor-browser: update to 9.0.9nb4.wiz6-18/+119
Install and use the fonts distributed with the Linux binary of tor-browser. Reduces fingerprinting possibilities based on installed fonts. Idea from Caspar Schutijser, the OpenBSD ports maintainer, and based on his patch for OpenBSD ports.
2020-04-30security/Bastille: fix build with SUBST_NOOP_OK=norillig1-1/+2
2020-04-30Add missing patch checksumsmanu2-3/+5
And while there, sort PLIST
2020-04-30security/py-cryptodomex: Import from wip (packaged by leot and kethzer.dr)nikita7-1/+902
PyCryptodomex is a self-contained Python package of low-level cryptographic primitives. All modules are installed under the Cryptodome package.
2020-04-30openssl: Fix KERN_ARND usage on NetBSD.nia3-2/+51
XXX upstream
2020-04-30tor-browser: update to 9.0.9nb3.wiz2-11/+4
Depend on tor-browser-https-everywhere.
2020-04-30security/Makefile: +tor-browser-https-everywherewiz1-1/+2
2020-04-30security/tor-browser-https-everywhere: import ↵wiz4-0/+34
tor-browser-https-everywhere-2020.3.16 HTTPS Everywhere is a browser extension that encrypts your communications with many major websites, making your browsing more secure.
2020-04-29pam-ldap: preemptively avoid "version 10" issues by accepting allmaya1-2/+2
versions of netbsd. unlikely that anyone is using netbsd<3.
2020-04-28security/openpam: define NO_STATIC_MODULES on NetBSDriastradh1-1/+5
This is a hack to work around a mistake in the NetBSD openpam build which leaked into the public header files. We will fix this in the NetBSD build but it's been in the public header files for nearly a decade now, with each individual pam module sometimes having this workaround, so let's apply the workaround uniformly for now. PR security/39313 PR security/55216
2020-04-28security/Makefile: + p5-Crypt-HSXKPasswdwiz1-1/+2
2020-04-28security/p5-Crypt-HSXKPasswd: import p5-Crypt-HSXKPasswd-3.6wiz3-0/+42
Inspired by a XKCD webcomic and by Steve Gibson's Password Haystacks page, HSXKPasswd is a Perl module (Crypt::HSXKPasswd) and terminal command (hsxkpasswd) for generating passwords that are secure, memorable, and easy to read, type, and share over the phone.
2020-04-28tor-browser: update to 9.0.9nb2.wiz5-17/+38
Automatically install the noscript extension. (https-everywhere package is ready, but doesn't work.) Change the default path in the home directory to ".tor-browser" to be more similar to other mozilla products. By default, use the standard tor port. No separate instance of tor is started for tor-browser from pkgsrc.
2020-04-28security/Makefile: + tor-browser-noscriptwiz1-1/+2
2020-04-28security/tor-browser-noscript: import tor-browser-noscript-11.0.25wiz4-0/+35
The NoScript Firefox extension provides extra protection for browsers: this free, open source add-on allows JavaScript, Java, Flash, and other plugins to be executed only by trusted web sites of your choice (e.g., your online bank).
2020-04-28py-google-auth: update to 1.14.1.wiz2-7/+7
Bug Fixes support es256 raw format signature (#490) (cf2c0a9)
2020-04-28Add security/libgabe Version 1.0nikita6-1/+55
Import from wip Fork of the CP ABE library libbswabe (http://hms.isi.jhu.edu/acsc/cpabe/) replacing OpenSSL with libgcrypt and fixing some bugs.
2020-04-28security/libpbc: Add bl3 filenikita1-0/+17
2020-04-28adjust maintainer to my new loginnikita2-4/+4
2020-04-28security/sudo: update to 1.8.31p1taca2-7/+7
Update sudo to 1.8.31p1. Major changes between sudo 1.8.31p1 and 1.8.31 * Sudo once again ignores a failure to restore the RLIMIT_CORE resource limit, as it did prior to version 1.8.29. Linux containers don't allow RLIMIT_CORE to be set back to RLIM_INFINITY if we set the limit to zero, even for root, which resulted in a warning from sudo.
2020-04-28security/doas: fix no-op SUBST blockrillig1-7/+3
The Makefile has changed to GNU format, using round parentheses, which turned the substitution a no-op.
2020-04-27security/openssh: remove no-op file from SUBST_FILESrillig1-2/+2
2020-04-25lxqt-openssh-askpass: minor grammar tweaksgutteridge2-3/+3
2020-04-25lxqt-openssh-askpass: add new package, version 0.14.1gutteridge5-1/+65
lxqt-openssh-askpass is a tool used with openssh to prompt the user for a password. (Packaged in wip by pin@, final review by myself.) (It would be nice if security/openssh had a builtin.mk to avoid unnecessarily building it from pkgsrc. The version in NetBSD's base offers more.)
2020-04-25lxqt-sudo: add new package, version 0.14.1gutteridge6-1/+99
lxqt-sudo is a graphical front-end of the sudo and su commands. (Packaged in wip by pin@, final review by myself.)
2020-04-25lxqt-policykit: add new package, version 0.14.1gutteridge5-1/+65
This is the LXQt Policykit authentication agent. (Packaged in wip by pin@, final review by myself.)
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-28 09:58:29 +0000