Number of commits found XX: 1989 (showing only 100 on this page)

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11  »  [Last Page]

security/pinentry*: Update to 1.1.1

Add security/pinentry-efl: An EFL (Enlightenment Foundation Libraries)-based
version of pinentry.

Change the default pinentry program from tty to ncurses so that the package
works out-of-the-box with mail/mutt. [1]

PR:		239381 [1]
Reported by:	<heas@shrubbery.net> [1]
Requested by:	adamw and Derek Schrock <dereks@lifeofadishwasher.com> [1]

Remove expired ports:

2021-01-14 net-im/telegram: Upstream unmaintained; please migrate to
net-im/telegram-cli
2021-01-14 science/dlpoly-classic: MASTERSITE gone; possibly replaced by
https://gitlab.com/DL_POLY_Classic/dl_poly?
2021-01-15 security/py-gtts-token: Obsolete, please use audio/py-gtts instead

LibreTLS is a port of libtls from LibreSSL to OpenSSL. libtls is "a new TLS
library, designed to make it easier to write foolproof applications".

libtls provides an excellent new API, but LibreSSL can be difficult to install
on systems which already use OpenSSL. LibreTLS aims to make the libtls API more
easily and widely available.

WWW: https://git.causal.agency/libretls/about/

security/gpg-gui: GUI wrapper for symmetric GPG file encryption

Reviewed by:		0mp (mentor)
Approved by:		0mp (mentor)
Differential Revision:	https://reviews.freebsd.org/D28014

- Connect security/gvm

- Connect security/greenbone-security-assistant

- Connect security/py-gvm-tools

- Connect security/py-ospd-openvas

- Connect security/gvmd

- Connect security/openvas

- Connect security/gvm-libs

- Connect security/py-python-gvm

New port: security/aws-c-cal

AWS Crypto Abstraction Layer: Cross-Platform, C99 wrapper for
cryptography primitives.

Add rubygem-securerandom 0.1.0

Securerandom is an interface to secure random number generators which are
suitable for generating session keys in HTTP cookies, etc.

WWW: https://github.com/ruby/securerandom

A transparent wrapper that adds support for regex, aliases, gateways,
dynamic hostnames, graphviz, json output, yaml configuration, and more
to SSH.

WWW: https://manfred.life/assh

Remove expired ports:

lang/julia: metaport, useless without any consumers
2020-12-31 lang/julia10: Uses Python 2.7 which is EOLed upstream
2020-12-31 lang/spidermonkey24: Uses Python 2.7 which is EOLed upstream
2020-12-31 mail/getmail: Uses deprecated version of python
2020-12-31 security/broccoli: Depends lang/python27 which is EOLed upstream
2020-12-31 security/orthrus: Uses Python 2.7 version of scons, and Python 2.7
which is EOLed upstream
2020-12-31 sysutils/ori: Uses Python 2.7 version of scons, and Python 2.7 which
is EOLed upstream
2020-12-31 sysutils/osquery: Uses Python 2.7 which is EOLed upstream
2020-12-31 www/cliqz: Uses deprecated version of python
2020-12-31 www/trac: Uses Python 2.7 which is EOLed upstream
2020-12-31 www/trac-accountmanager: Uses Python 2.7 which is EOLed upstream

Re-apply part of r559792 (INDEX and bulk -a OK)

With hat:	portmgr

Revert r559792 to unbreak INDEX and bulk -a
It seems a lot of reverse dependencies were missed

With hat:	portmgr

Remove most expired ports that depend on Python 2.7:

Exceptions are:
- mail/mailman, our listservers still use it
- www/chromium, solely because of popular demand,
  upstream is (slowly) working on porting it to Python 3
- ports that have actual patches for Python 3 against
  them (Cinnamon and a few unrelated other ports)
- llvm70 and qt5-webengine because they seem to have a lot
  of dependencies which need further analysis
- sysutils/uefi-edk2-bhyve because bhyve seems to use them
- python2 and python27 themselves

I'm sure there will be complaints, but the nice thing about
a version control system is that we can revert and adjust things.

(Only the first 15 lines of the commit message are shown above )

New port: security/ssb: SSH Server Bruteforcer

Secure Shell Bruteforcer - A faster and simpler way to bruteforce SSH server.

WWW: https://github.com/kitabisa/ssb

PR:		252222
Submitted by:	Neel Chauhan <neel@neelc.org>

New port: security/xray-core: network penetration tools

Xray, Penetrates Everything. Also the best v2ray-core, with XTLS support.
Fully compatible configuration.

WWW: https://github.com/XTLS/Xray-core

PR:		252226
Submitted by:	Neel Chauhan <neel@neelc.org>

Remove PHP 7.2 which expired today, use PHP 7.4 instead.

2020-12-31 ./net/php72-soap: Security Support ends on 30 Nov 2020
2020-12-31 ./net/php72-sockets: Security Support ends on 30 Nov 2020
2020-12-31 ./net/php72-xmlrpc: Security Support ends on 30 Nov 2020
2020-12-31 ./net/php72-ldap: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-xmlwriter: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-pspell: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-enchant: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-wddx: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-xsl: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-dom: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-ctype: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-xml: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-simplexml: Security Support ends on 30 Nov 2020

(Only the first 15 lines of the commit message are shown above )

Remove expired ports:

2020-12-12 textproc/py-hypua2jamo: Uses deprecated version of python
2020-12-12 devel/py-delfick_error: Uses deprecated version of python
2020-12-12 devel/py-fusefs: Uses deprecated version of python
2020-08-15 devel/py-noseofyeti: Uses deprecated version of python
2020-12-29 databases/py-bsddb: Uses deprecated version of python
2020-12-29 www/py-webhelpers: Uses deprecated version of python
2020-12-29 security/py-pyptlib: Uses deprecated version of python
2020-12-29 japanese/py-zinnia: Uses deprecated version of python
2020-12-29 math/slepc: Broken, uses deprecated version of python
2020-12-29 www/py-pastescript: Uses deprecated version of python
2020-12-29 databases/ldb14: Uses deprecated version of python
2020-12-29 math/py-slepc4py: Depends on broken and expiring math/slepc
2020-12-29 multimedia/py-kaa-base: Uses deprecated version of python
2020-12-29 devel/py-ydbf: Uses deprecated version of python
2020-12-29 devel/py-SymbolType: Uses deprecated version of python

New ports required for rubygem-chef upgrade.

It is expected that this port fails to build till the complete rubygem-chef
upgrade is committed which can take some time depending on some approvals.

bitwarden_rs is a bitwarden clients (password manager) compatible backend server
implemented in rust.

With the help of: jbeich@

Add wolfssh 1.4.5

The wolfSSH library is a lightweight SSHv2 client and server library written in
ANSI C and targeted for embedded, RTOS, and resource-constrained environments -
primarily because of its small size, speed, and feature set.

WWW: https://www.wolfssl.com/products/wolfssh/
WWW: https://github.com/wolfSSL/wolfssh

Remove expired ports:

2020-12-12 comms/py-libconcord: Uses deprecated version of python
2020-12-12 databases/py-swift: Uses deprecated version of python
2020-12-12 devel/py-AddOns: Uses deprecated version of python
2020-12-12 devel/py-BytecodeAssembler: Uses deprecated version of python
2020-12-12 devel/py-repoze.who-testutil: Uses deprecated version of python
2020-12-12 devel/py-riak_pb: Uses deprecated version of python
2020-12-12 devel/pythk: Uses deprecated version of python
2020-12-12 mail/py-spambayes: Uses deprecated version of python
2020-12-12 math/py-numeric: Uses deprecated version of python
2020-12-12 math/py-scientific: Uses deprecated version of python
2020-12-12 net/py-suds: Uses deprecated version of python
2020-12-12 net/pynids: Uses deprecated version of python
2020-12-12 security/py-obfsproxy-tor: Uses deprecated version of python
2020-12-12 sysutils/syslog-ng324: Agreed upon upstream one year deprecation
policy
2020-12-12 www/py-pylons: Uses deprecated version of python
2020-12-12 www/py-qpy: Uses deprecated version of python

New port: security/py-onlykey: cli for the OnlyKey hardware password manager

Python command line tool for configuring and using the OnlyKey
hardware password manager.

WWW: https://github.com/trustcrypto/python-onlykey

PR:		250601
Submitted by:	Dmytro Bilokha <dmytro@posteo.net>

Add py-python-pkcs11 0.7.0

A high level, "more Pythonic" interface to the PKCS#11 (Cryptoki) standard to
support HSM and Smartcard devices in Python.

The interface is designed to follow the logical structure of a HSM, with useful
defaults for obscurely documented parameters. Many APIs will optionally accept
iterables and act as generators, allowing you to stream large data blocks for
symmetric encryption.

python-pkcs11 also includes numerous utility functions to convert between PKCS
#11 data structures and common interchange formats including PKCS #1 and X.509.

python-pkcs11 is fully documented and has a full integration test suite for all
features, with continuous integration against multiple HSM platforms including:
- Thales nCipher
- Opencryptoki TPM
- OpenSC/Smartcard-HSM/Nitrokey HSM

WWW: https://github.com/danni/python-pkcs11

- Connect new fpc ports

Remove expired ports:

2020-11-15 archivers/py-pyliblzma: Uses deprecated version of python
2020-11-15 databases/postgis23: Upstream no longer maintained
2020-11-15 databases/py-htsql: Uses deprecated version of python
2020-11-15 devel/bzr-fastimport: Uses deprecated version of python
2020-11-15 devel/py-ToscaWidgets: Uses deprecated version of python
2020-11-15 devel/py-calendar: Uses deprecated version of python
2020-11-15 devel/py-distorm: Uses deprecated version of python
2020-11-15 devel/py-fabric1: Uses deprecated version of python
2020-11-15 devel/py-rcsparse: Uses deprecated version of python
2020-11-15 devel/pyrex: Uses deprecated version of python
2020-11-15 japanese/py-tegaki: Uses deprecated version of python
2020-11-15 math/py-networkx1: Obsolete, please use math/py-networkx instead
2020-11-15 misc/py-progressbar231: Uses deprecated version of python
2020-11-15 multimedia/py-kaa-imlib2: Uses deprecated version of python
2020-11-15 multimedia/py-kaa-metadata: Uses deprecated version of python
2020-11-15 net-im/libtelepathy: Uses deprecated version of python
2020-11-15 security/py-mcrypt: Uses deprecated version of python
2020-11-15 www/py-beautifulsoup32: Uses deprecated version of python
2020-11-15 www/py-evernote: Uses deprecated version of python
2020-04-01 www/py-meld3: EOLed upstream
2020-11-15 www/py-requestbuilder: Uses deprecated version of python
2020-11-15 x11-toolkits/py-SquareMap: Uses deprecated version of python

Add py-webauthn 0.4.7

PyWebAuthn is a Python module which can be used to handle WebAuthn registration
and assertion. Currently, WebAuthn is supported in Firefox, Chrome, and Edge.

WWW: https://github.com/duo-labs/py_webauthn

security/spectre-meltdown-checker: shell script to tell if your system is
vulnerable against the several "speculative execution" CVEs that were made
public since 2018

Add py-pyspnego 0.1.3

Library to handle SPNEGO (Negotiate, NTLM, Kerberos) authentication. Also
includes a packet parser that can be used to decode raw NTLM/SPNEGO/Kerberos
tokens into a human readable format.

WWW: https://github.com/jborean93/pyspnego

Add py-sshpubkeys 3.1.0

sshpubkeys provides a native implementation for validating OpenSSH public keys.

WWW: https://github.com/ojarva/python-sshpubkeys

security/rustscan: create port

Faster Nmap Scanning with Rust

Turns a 17 minutes Nmap scan into 19 seconds.
Find all open ports fast with RustScan, automatically pipe them into Nmap.

WWW: https://rustscan.github.io/RustScan

Add security/p5-Crypt-Argon2

Perl interface to the Argon2 key derivation functions

PR:		250563
Submitted by:	Sergei Vyshenski <svysh.fbsd@gmail.com>

PHP 8.0: Connect all the ports added in r552906

Sponsored by:	PHP Update Service

New port: security/ffuf

Fast web fuzzer written in Go

WWW: https://github.com/ffuf/ffuf

PR:		250231
Submitted by:	Gabriel Dutra <0xdutra@gmail.com>

New port: security/digestpp: Experimental C++11 header-only message digest
library

New port: security/hash: C++14 header-only easy-to-use hash library

New ports required for gitlab 13.4.

Add py-sequoia 0.19.0, python binding of sequoia.

PR:		249238
Submitted by:	phryk-ports@wzff.de

Add sequoia 0.19.0, modern PGP implementation, written in rust.

PR:		249238
Submitted by:	phryk-ports@wzff.de

Remove expired ports:

2020-09-15 audio/abraca: Uses deprecated version of python
2020-09-15 audio/ardour5: Uses deprecated version of python
2020-09-15 audio/cplay: Uses deprecated version of python
2020-09-15 audio/cpp-xmms2: Uses deprecated version of python
2020-09-15 audio/p5-xmms2: Uses deprecated version of python
2020-09-15 biology/haplohseq: Uses deprecated version of python
2020-09-15 biology/tophat: Uses deprecated version of python
2020-09-15 chinese/ibus-array: Uses deprecated version of python
2020-09-15 comms/congruity: Uses deprecated version of python
2020-09-15 comms/libbtbb: Uses deprecated version of python
2020-09-15 comms/quisk: Uses deprecated version of python
2020-09-15 databases/mtools-mongodb: Uses deprecated version of python
2020-09-15 databases/mydbf2mysql: Uses deprecated version of python

(Only the first 15 lines of the commit message are shown above )

New port: security/stegify: Steganography software

New port: security/heaan: Library that implements homomorphic encryption

Add security/pam_pkcs11, PAM module using crypto tokens for auth

Submitted by:	Ka Ho Ng <khng300@gmail.com>
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D26419

Add intel-ipsec-mb g20200801, intel(R) Multi-Buffer Crypto for IPsec
Library.

PR:		248285
Submitted by:	freebsd@sysctl.cz

Add py-uhashring 1.2

uhashring implements consistent hashing in pure Python.

Consistent hashing is mostly used on distributed systems/caches/databases as
this avoid the total reshuffling of your key-node mappings when adding or
removing a node in your ring (called continuum on libketama).

WWW: https://github.com/ultrabug/uhashring

Remove security/scamp at maintainer request, it is no longer viable.

Remove expired ports:

2020-08-26 audio/timidity++-tcltk: Broken for more than 6 months
2020-08-26 biology/pbcopper: Broken for more than 6 months
2020-08-26 devel/ace: Broken for more than 6 months
2020-08-26 devel/bin86: Broken for more than 6 months
2020-08-26 devel/erlang-oserl: Broken for more than 6 months
2020-08-20 emulators/qemu40: Please consider using qemu or qemu41
2020-08-26 games/linux-darwinia-demo: Broken for more than 6 months
2020-08-26 games/linux-defcon: Broken for more than 6 months
2020-08-26 games/linux-uplink-demo: Broken for more than 6 months
2020-08-26 games/xevil: Broken for more than 6 months
2020-08-26 games/xminesweep: Broken for more than 6 months
2020-08-26 graphics/backfract: Broken for more than 6 months
2020-08-26 japanese/kanjipad: Broken for more than 6 months

(Only the first 15 lines of the commit message are shown above )

security/nextcloud-end_to_end_encryption: Add new port

 * No longer marked pre-production

Add security/nitrokey-app, Nitrokey app to manage nitrokey key

PR:		248799
Submitted by:	Thibault Payet <monwarez@mailoo.org>

Add security/libnitrokey, library to manage nitrokey key

PR:		248797
Submitted by:	Thibault Payet <monwarez@mailoo.org>

Remove expired ports:

2020-08-15 audio/py-cddb: Uses deprecated version of python
2020-08-15 databases/py-sybase: Uses deprecated version of python
2020-08-15 devel/py-pp: Uses deprecated version of python
2020-08-15 security/py-keyczar: Uses deprecated version of python
2020-08-15 math/py-pysparse: Uses deprecated version of python
2020-08-15 net/py-beanstalkc: Uses deprecated version of python
2020-08-15 x11-toolkits/py-wxPython30: Uses deprecated version of python
2020-08-15 net-im/py-skype4py: Uses deprecated version of python
2020-08-15 net-im/telepathy-haze: Uses deprecated version of python

Remove deprecated ports:

2020-08-15 archivers/py-backports.lzma: Uses deprecated version of python
2020-08-15 archivers/py-bup: Uses deprecated version of python
2020-08-15 archivers/py-librtfcomp: Uses deprecated version of python
2020-08-15 audio/blop-lv2: Uses deprecated version of python
2020-08-15 audio/bs2b-lv2: Uses deprecated version of python
2020-08-15 audio/py-gmusicproxy: Uses deprecated version of python
2020-08-15 audio/py-karaoke: Uses deprecated version of python
2020-08-15 audio/py-openal: Uses deprecated version of python
2020-08-15 audio/py-py-jack: Uses deprecated version of python
2020-08-15 audio/py-xmms2: Uses deprecated version of python
2020-08-15 audio/triceratops-lv2: Uses deprecated version of python
2020-08-15 biology/py-biom-format: Uses deprecated version of python
2020-08-15 comms/py-bulksms: Uses deprecated version of python

(Only the first 15 lines of the commit message are shown above )

New port: security/rubygem-openssl-cmac

rubygem-openssl-cmac is an implementation of RFC 4493, 4494, 4615 - AES-CMAC
Algorithm.
WWW: https://github.com/smalllars/openssl-cmac

Add a new security/isal-kmod port.

This port builds a kernel crypto device driver which uses routines
from Intel's ISA-L crypto library to perform AES-GCM encryption and
decryption.

Reviewed by:	mat
Sponsored by:	Netflix
Differential Revision:	https://reviews.freebsd.org/D25514

Mew port: security/py-merkletools: Tools for working with Merkle trees

New port: security/py-coincurve: Cross-platform Python CFFI bindings for
libsecp256k1

games/py-mnemosyne: Take Maintainer'ship, fix runtime error and add missing
dependencies

Latest version of games/py-mnemosyne requires new dependencies. This commit adds
the missing dependencies:

 - audio/py-gtts
 - security/py-gtts-token (required by audio/py-gtts)
 - textproc/py-googletrans

The games/py-mnemosyne port needs to be limited to Python 3.7+ to keep the
dependency chains intact. This is because textproc/py-googletrans depends on
www/py-httpx which is only for Python 3.7+.

PR:		247595
Submitted by:	kai
Reported by:	gspurki@gmail.com
Approved by:	tcberner (mentor)
MFH:		2020Q3
Differential Revision:	https://reviews.freebsd.org/D25895

Add py-cert-human 1.0.7

I wanted to incorporate a method to get an SSL certificate from a server, show
the user the same kind of information as you'd see in a browser, prompt them for
validity, then write it to disk for use in all requests to a server.

I was unable to find any great / easy ways that incorporated all of these
concepts into one neat thing. So I made a thing.

Originally this was based off of yet another lovely over-engineered solution in
get-ca-py by Josh Peak.

WWW: https://github.com/lifehackjim/cert_human

New port: security/py-xkcdpass

A flexible and scriptable password generator which generates
strong diceword-style passphrases, inspired by XKCD 936.

  $ xkcdpass
  > correct horse battery staple

Usable as standalone script or a module within a larger
Python project.

WWW: https://github.com/jwfh/xkcdpass

Submitted by:	jacob_jwfh.ca
Differential Revision:	https://reviews.freebsd.org/D21234

Add security/py-certbot-dns-cpanel: CPanel DNS Authenticator plugin for Certbot

Plugin to allow acme dns-01 authentication of a name managed in cPanel. Useful
for automating and creating a Let's Encrypt certificate (wildcard or not) for a
service with a name managed by cPanel, but installed on a server not managed in
cPanel.

WWW: https://pypi.org/project/certbot-dns-cpanel/

PR:		244096
Submitted by:	Venim <h.freshports@skarnell.se>

new port: security/vigenere: cipher algorithm tool

vigenere is an implementation of the Vigenere cipher algorithm extended
to the entire set of printable ASCII characters

https://www.olivermahmoudi.com/programming/vigenere-cipher/

PR:	247244
Submitted by:	fbsd@olivermahmoudi.com

Made rubygem net-ssh version 5 available as it is required by
net-mgmt/rubygem-oxidized.

PR:		247172

[NEW] security/yubikey-agent: Seamless ssh-agent for YubiKeys

  (*) Easy to use. A one-command setup, one environment variable,
    and it just runs in the background.
  (*) Indestructible. Tolerates unplugging, sleep, and suspend.
    Never needs restarting.
  (*) Compatible. Provides a public key that works with all services
    and servers.
  (*) Secure. The key is generated on the YubiKey and can't be
    extracted. Every session requires the PIN, every login requires a
    touch. Setup takes care of PUK and management key.

  WWW: https://filippo.io/yubikey-agent

Remove expired port:

2020-05-05 security/pam_pseudo: Broken for more than 6 months

security/bro: Remove expired port

2020-06-01 security/bro: Please migrate to security/zeek

New port: security/fizz: C++14 implementation of the TLS-1.3 standard

New port: security/cfssl: CloudFlares PKI and TLS toolkit

PR:		205326
Submitted by:	Tomoyuki Sakurai <trombik1973@gmail.com> (latest version), me
(original version)

New ports required for www/gitlab-ce 12.10 upgrade.

Remove expired ports:

Adjusted for ports rescued since r534032

2020-05-05 audio/festvox-czech: Broken for more than 6 months
2020-05-05 audio/gkrellmvolume2: Broken for more than 6 months
2020-05-05 audio/mixmos: Broken for more than 6 months
2020-05-05 audio/mma: Broken for more than 6 months
2020-05-05 audio/pd-cyclone: Broken for more than 6 months
2020-05-05 audio/shorten: Broken for more than 6 months
2020-05-05 audio/taglib-sharp: Broken for more than 6 months
2020-05-05 audio/xhippo: Broken for more than 6 months
2020-05-05 biology/consed: Broken for more than 6 months
2020-05-05 biology/plinkseq: Broken for more than 6 months
2020-05-05 biology/seqtools: Broken for more than 6 months

(Only the first 15 lines of the commit message are shown above )

New port: security/rubygem-net-ssh-krb

Add Kerberos (password-less) authentication capabilities to Net::SSH, without
the need for modifying Net::SSH source code.

This is a great way to help get Capistrano to be accepted in mid-to-large size
enterprises with strict security rules.

No more getting locked out of the network because you mis-typed your password -
even if your company prohibits public key or host-based authentication. If your
organization uses Kerberos (many mid-to-large size corporations do), you can
use this package to get password-less authentication without breaking your
company's security guidelines.

WWW: http://rubygems.org/gems/net-ssh-krb

Add security/py-pyotp2289

Pure Python implementation of RFC-2289 - "A One-Time Password System"

"The system provides authentication for system access (login) and other
applications requiring authentication that is secure against passive attacks
based on replaying captured reusable passwords. OTP evolved from the S/KEY
(S/KEY is a trademark of Bellcore) One-Time Password System that was released
by Bellcore."

WWW: https://github.com/blackm0re/pyotp2289

PR:		245755
Submitted by:	Simeon Simeonov <sgs@pichove.org>

security/openssl-devel: Resurrect OpenSSL devel port

Add security/py-pgpy:  Pretty Good Privacy for Python

PGPy is a Python (2 and 3) library for implementing Pretty Good Privacy into
Python programs, conforming to the OpenPGP specification per RFC 4880.

WWW: https://github.com/SecurityInnovation/PGPy

PR:		245335
Submitted by:	contact@evilham.com

[NEW] security/bsmtrace3: BSM based intrusion detection system

bsmtrace is a BSM based intrusion detection system, utilizing audit trails
and real-time audit event analysis through auditpipe(4).  This host based
IDS operates using a finite state machine principles with a flexible
sequence driven signature system.

WWW: https://www.github.com/openbsm/bsmtrace

This is a repocopy of security/bsmtrace, updated to recently-released 3.x.
There are breaking changes between 1.x and 3.x, so it was decided to create
a new port to give consumers some time to update their configs. The old
security/bsmtrace should be deprecated in fairly short order, after
bsmtrace3 has received a little bit of soak time in ports.

(Only the first 15 lines of the commit message are shown above )

Remove expired port:

2020-04-20 security/suricata5: security/suricata is already at version 5

This port contains the Smallstep step-ca certificates component

It can be used together with the Smallstep step-ca client.
step-ca is a local CA. It can be used to create your own local PKI
Infrastructure and includes things like e.g. the possibility to have your
own ACME server.

A private certificate authority (X.509 & SSH) & ACME server for secure
automated certificate management, so you can use TLS everywhere & SSO for SSH.

WWW: https://smallstep.com/certificates/

PR:		245535
Submitted by:	Markus Wipp <mw@wipp.bayern>

step is a zero trust swiss army knife that integrates with step-ca for
automated certificate management. It's an easy-to-use and hard-to-misuse utility
for building, operating, and automating systems that use zero trust technologies
like authenticated encryption (X.509, TLS), single sign-on (OAuth OIDC, SAML),
multi-factor authentication (OATH OTP, FIDO U2F), encryption mechanisms (JSON
Web Encryption, NaCl), and verifiable claims (JWT, SAML assertions).

WWW: https://smallstep.com/cli/

PR:		245534
Submitted by:	Markus Wipp <mw@wipp.bayern>

USES=lua gained flavors.

Ports using USES=lua:module or lua:flavors will be flavored.  A range of
supported lua versions can be set using XX-YY (or XX-, or -YY, or simply ZZ)
for ports not supporting all lua versions.

USES=lua sets LUA_FLAVOR that needs to be used on all dependencies of
flavored lua ports, in a similar way as PHP or Python flavors.

PR:		245038
Submitted by:	andrew tao11 riddles org uk
Reviewed by:	mat, kevans, russ haley gmail com
Approved by:	mat (portmgr)
Differential Revision:	https://reviews.freebsd.org/D16494

New port: security/tailscale

Tailscale is a mesh VPN alternative, based on WireGuard, that connects your
computers, databases, and services together securely without any proxies.

WWW: https://tailscale.com/

Reviewed by:	dmgk
Differential Revision:	https://reviews.freebsd.org/D24376

security/sedutil: create port

Self Encrypting Drive utility.

This allows encrypting and decrypting drives that use encryption based on
the various TCG (Trusted Computing Group) specifications.

From the web site:

   The Drive Trust Alliance software (sedutil) is an Open Source (GPLv3)
   effort to make Self Encrypting Drive technology freely available to
   everyone. It is a combination of the two known available Open Source code
   bases today: msed and OpalTool.

   The DTA Open Source can be employed freely not only for higher security

(Only the first 15 lines of the commit message are shown above )

Remove expired ports:

2020-03-29 security/w3af: Uses deprecated version of Python
2020-03-30 sysutils/duplicity-devel: Obsolete now, use sysutils/duplicity
instead
2020-03-31 net-mgmt/tornova: Use EOL'd Python 2.7
2020-03-31 audio/py-ogg: Unmaintained, uses EOLed python27
2020-03-31 net-mgmt/onionlauncher: Use EOL'd Python 2.7
2020-03-31 databases/mongodb34: EOL January 2020; See
https://www.mongodb.com/support-policy
2020-03-31 graphics/sane-frontends: Unmaintained upstream, no consumers left
2020-03-31 lang/ruby24: Move to a new version (lang/ruby26 or above). Ruby 2.4
is in security maintenance phase and planned for EOL on March 31, 2020
2020-03-31 databases/pgpool: Reached EOL at 2019-10-31, please use pgpool-II-35
or higher
2020-03-31 net/pygopherd: Unmaintained, uses EOLed python27
databases/mongodb34-tools: Part of expired MongoDB 3.4

New ports required for gitlab-ce 12.9 upgrade.

A Python implementation of the SCRAM authentication protocol defined
by RFC 5802 and RFC 7677. Scramp supports the following mechanisms:
  * SCRAM-SHA-256
  * SCRAM-SHA-1

WWW: https://github.com/tlocke/scramp

Rename swatch to swatchdog, update to 3.2.4, unbreak build

Reported by:	Andrea Venturoli <ml@netfence.it>

New port: security/py-angr

angr is a platform-agnostic binary analysis framework in a form of a suite
of Python 3 libraries that let you load a binary and do a lot of cool
things to it:

- Disassembly and intermediate-representation lifting
- Program instrumentation
- Symbolic execution
- Control-flow analysis
- Data-dependency analysis
- Value-set analysis (VSA)
- Decompilation

The most common angr operation is loading a binary:

(Only the first 15 lines of the commit message are shown above )

New port: security/py-ailment

AIL is the angr intermediate language.

It is developed within the angr project.

WWW: https://github.com/angr/pyvex

PR:		244562

New port: security/rubygem-hrr_rb_ssh

Pure Ruby SSH 2.0 server implementation.

WWW: https://github.com/hirura/hrr_rb_ssh

Hook security/py-pyvex to the build

PR:		244562

New port: security/gef

GEF (pronounced "Jeff") is a set of commands for x86/64, ARM, MIPS, PowerPC
and SPARC to assist exploit developers and reverse-engineers when using old
school GDB. It provides additional features to GDB using the Python API to
assist during the process of dynamic analysis and exploit development.
Application developers will also benefit from it, as GEF lifts a great part
of regular GDB obscurity, avoiding repeating traditional commands, or
bringing out the relevant information from the debugging runtime.

Some of GEF features include:
- One single GDB script.
- Fast limiting the number of dependencies and optimizing code to make the
  commands as fast as possible.
- Provides more than 50 commands to drastically change your experience in
  GDB.
- Easily extendable to create other commands by providing more
  comprehensible layout to GDB Python API.
- Built around an architecture abstraction layer, so all commands work in
  any GDB-supported architecture such as x86-32/64, ARMv5/6/7, AARCH64,
  SPARC, MIPS, PowerPC, etc.
- Suited for real-life apps debugging, exploit development, just as much as
  CTF.

WWW: https://gef.rtfd.io

New port: security/py-ropper

You can use ropper to look at information about files in different
file formats and you can find ROP and JOP gadgets to build chains for
different architectures. Ropper supports ELF, MachO and the PE file
format. Other files can be opened in RAW format. The following
architectures are supported:

- x86 / x86_64
- Mips / Mips64
- ARM (also Thumb Mode)/ ARM64
- PowerPC / PowerPC64

Ropper is inspired by ROPgadget, but should be more than a gadgets
finder. So it is possible to show information about a binary like
header, segments, sections etc. Furthermore it is possible to edit the
binaries and edit the header fields, but currently this is not fully
implemented and in a experimental state. For disassembly ropper uses
the awesome Capstone Framework.

Now you can generate rop chain automatically (auto-roper) for execve
and mprotect syscall.

WWW: https://scoding.de/ropper/

Add Perl implementation of Shamir's Secret Sharing System.

WWW: https://metacpan.org/release/Crypt-SSSS

Remove expired ports:

2020-03-01 audio/idjc: Old, uses EOLed python27
2020-03-01 cad/py-pycam: Old, uses EOLed python27
2020-02-27 chinese/gimp-help-zh_CN: Broken
2020-03-01 databases/emma: Old, uses EOLed python27
2020-03-01 deskutils/anamnesis: Old, uses EOLed python27
2020-02-28 deskutils/cherrytree: Old, uses EOLed python27
2020-03-01 deskutils/gbirthday: Old, uses EOLed python27
2020-03-01 deskutils/gtg: Old, uses EOLed python27
2020-03-01 deskutils/nemo-extensions: Old, uses EOLed python27
2020-03-01 deskutils/pybookreader: Old, uses EOLed python27
2020-03-01 devel/diffuse: Old, uses EOLed python27
2020-02-28 devel/dreampie: Old, uses EOLed python27
2020-03-01 devel/gtkparasite: Old, uses EOLed python27

(Only the first 15 lines of the commit message are shown above )

Add py-python3-saml 1.9.0

Add SAML support to your Python software using this library. Forget those
complicated libraries and use the open source library provided and supported by
OneLogin Inc.

WWW: https://github.com/onelogin/python3-saml

Add py-authlib 0.14.1

Authlib is the ultimate Python library in building OAuth and OpenID Connect
servers. JWS, JWK, JWA, JWT are included.

WWW: https://authlib.org/
WWW: https://github.com/lepture/authlib

Obsolete by gitlab-ce upgrade.

Number of commits found XX: 1989 (showing only 100 on this page)

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11  »  [Last Page]

12 vulnerabilities affecting 81 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2021-01-23 18:22:23