08:22 Alexander Leidinger (netchild) 

security/bastillion: update to 3.14.0

    309b41b

10:58 Alexander Leidinger (netchild) 

security/bastillion: update to 3.13.00

Contains updates to h2 and log4j.

    c527917

10:37 Alexander Leidinger (netchild) 

security/bastillion: update to 3.12.02

Release notes at
https://github.com/bastillion-io/Bastillion/releases/tag/v3.12.02

    1a85399

14:52 Alexander Leidinger (netchild) 

security/bastillion: update to 3.12.00

This update contains an incompatible DB change, please read UPDATING
*before* updating.

    85fc17b

07:42 Alexander Leidinger (netchild) 

security/bastillion: update to 3.11.01 (log4j 2.16)

Revert my previous log4j fix (disable JNDI lookups via env variable),
the update to 3.11.01 contains the fixed log4j 2.16.

    94d2bb6

07:37 netchild 

Update to 3.10.00.
This fixes some potential XSS in the included jquery, but there is no
information if bastillion is vulnerable in some place or not.

As all the action in bastillion happens after authentication, and
is limited to what you enter yourself, it looks like the impact
or attack surface of the jquery XSS on bastillion is low.

ChangeLog:	https://github.com/bastillion-io/Bastillion/releases/tag/v3.10.00
CVE:		CVE-2020-11022
CVE:		CVE-2020-11023

 

10:12 netchild 

Update to 3.09.00:
 - removed license key requirement

 

17:53 netchild 

 - Add update tool.
 - Add update instructions (datastore needs to be updated).
 - Convert pkg-message to UCL format.
 - Rework plist generation target.

 

11:50 netchild 

Fix build by actually committing the change in the plist...

 

08:33 antoine 

Remove duplicate line from plist

 

20:36 netchild 

Add new port "Bastillion".

Bastillion is an open-source web-based SSH console that centrally manages
administrative access to systems.

A bastion host for administrators with features that promote infrastructure
security, including key management and auditing.