Number of commits found: 64

Add support for ECDSA key exchange and SHA256 MAC.

Note these patches were cherry-piecked from the following upstream commits:

https://github.com/libssh2/libssh2/commit/bbc43cb
https://github.com/libssh2/libssh2/commit/aba34f5
https://github.com/libssh2/libssh2/commit/62b825c

Submitted by:	Andrew Heybey <ath@heybey.org>
Reviewed by:	sbz (maintainer)

security/openssl-devel: Remove BROKEN from some ports

 * databases/freetds: Fixed 2017-02-14
 * databases/postgresql10-server: Fixed 2016-09-15 [1]
 * ftp/lftp: Fixed in 4.8.0
 * ftp/proftpd: Fixed in 1.3.5c
 * ftp/wget: Fixed in 1.19.3 [2]
 * lang/erlang-runtime20: Fixed in 20.0
 * net/socat: Fixed in 1.7.3.2
 * security/libssh2: Fixed in 1.8.0 [3]
 * security/p5-Crypt-OpenSSL-X509: Fixed in 1.8.8
 * sysutils/bacula9-server: Fixed in 9.0.6
 * www/nginx: Fixed in 1.9.14

 * Bulk build OK 10.3/11.1 both i386 and amd64:
    - multimedia/librtmp
    - net/libvncserver
    - www/lynx

PR:		225875 [1], 225872 [2], 225873 [3]

Remove last two occurrences of USE_OPENSSL.

Reported by:	antoine
Sponsored by:	Absolight

Assume "pkg-config --static zlib" works after 9.x EOL

Many hacks simply removed dependency on zlib which broke static linking
if it was actually supported.

- Update to 1.8.0

PR:		214914
Submitted by:	Anton Yuzhaninov <citrin+pr at citrin.ru>

Mark some ports as not openssl-devel ready.

Sponsored by:	Absolight

Fix with GCRYPT option on.

Submitted by:	Craig Leres
Sponsored by:	Absolight

Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.

WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577

- Update to 1.7.0

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

security/libssh2: Fix pkgconfig

Update to 1.6.0 was breaking builds of libvirt, vlc, etc.

Submitted by:	milios@ccsys.com
MFH:		2015Q3

security/libssh2: Update to 1.6.0

This resolves a CVE

Approved by:	ports-secteam (with hat)
MFH:		2015Q3
Security:	9770d6ac-614d-11e5-b379-14dae9d210b8
Security:	CVE-2015-1782

By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do.  On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same

(Only the first 15 lines of the commit message are shown above )

security/libgcrypt: 1.6.1 -> 1.6.2, bump depends

Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
  with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
  error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code.  Take
	care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in

(Only the first 15 lines of the commit message are shown above )

security/libssh2:
- Convert to USES=libtool and USES=pathfix
- Add INSTALL_TARGET=install-strip
- Only depend on openssl if GCRYPT option is off
- Sanitize libssh2.pc

devel/libvirt:
- Remove workaround for broken libssh2.pc
- Add USES=libtool and bump dependent ports
- Convert to INSTALL_TARGET=install-strip

devel/libvirt-glib:
- Convert to USES=libtool

Approved by:	portmgr (implicit, bump unstaged port)

security/libgcrypt: 1.5.3_3 -> 1.6.1

- Update to 1.6.1
- Remove some unneeded patches
- Fix pkg-plist
- report configure bug upstream
  https://bugs.g10code.com/gnupg/issue1668
- report API breakage downstream and find that MacPorts had the same issue
  https://rt.cpan.org/Ticket/Display.html?id=97201
- bump PORTREVISION for dependent ports (approx. 100 ports)
- Thanks to exp-run by antoine@ to find ports that break
- patch ports that would otherwise break
  security/shishi with PR 192164 is already committed
  [1] devel/ccrtp
  [2] editors/abiword
  [3] security/p5-Crypt-GCrypt

PR:		191256, 192162 [1], 192163 [2], 192166 [3]
Submitted by:	Carlos Jacobo Puga Medina <cjpugmed@gmail.com>
Approved by:	maintainer timeout, antoine (exp-run), portmgr (implicit)

- Use new OPTIONS features
- Remove useless (with staging support) maintainer target
- Fix pkgconfig file

PR:		185891
Submitted by:	amdmi3
Approved by:	maintainer timeout

- Stage support

Set LICENSE to a valid value

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

Chase security/libgcrypt update

- Remove A/An in COMMENT
- Trim Header where applicable

- Update to 1.4.3

Feature safe:	yes

- Fix Makefile header

- Convert to OptionsNG

- Update to 1.4.2

- Update to 1.4.1

Approved by:    jadawin@, miwi@ (mentors, implicit)

- Fix build when using GCRYPT KNOB
- Bump PORTREVISION

PR:             ports/164835
Submitted by:   Hirohisa Yamaguchi <umq at ueo.co.jp>
Approved by:    jadawin@, miwi@ (mentors, implicit)

- Update to 1.4.0

Approved by:    jadawin@, miwi@ (mentors, implicit)

- Remove WITH_FBSD10_FIX, is no longer needed

- Fix build on FreeBSD 10

Reported by:    pointyhat

- Update to 1.3.0

Approved by:    jadawin@ (mentor)

- Update to 1.2.9
- Update pkg-descr
- Make happy portlint

Approved by:    miwi@ (mentor)

- Chase the libgcrypt shared lib version

- Fix version of pkg-config
- Bump PORTREVISION

PR:             ports/158195
Submitted by:   mandree@
Approved by:    miwi@ (mentor)

- Update to 1.2.8
- Add LICENSE

Approved by:    jadawin@ (mentor)

Update my MAINTAINER address to sbz at FreeBSD.org.

Approved by:    jadawin@ (mentor)

- Update to 1.2.7

PR:             ports/149799
Submitted by:   Sofian Brabez <sbrabez _AT_ gmail.com>

Chase security/libgcrypt shlib bump.

PR:             ports/148755
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp>

- Update to 1.2.6

PR:             147846
Submitted by:   Sofian Brabez <sbrabez@gmail.com> (maintainer)

Update to 1.2.5 and hand maintainership to Sofian Brabez.

PR:             ports/145760
Submitted by:   sbrabez@gmail.com

Update to 1.2.4.

PR:             ports/144202
Submitted by:   Sofian Brabez <sbrabez@gmail.com>
Feature safe:   yes

Update to 1.2.3.

PR:             ports/143542
Submitted by:   Sofian Brabez

- Add TRACE and ZLIB options

PR:             ports/140711
Submitted by:   Sofian Brabez <sbrabez@gmail.com>
Approved by:    maintainer timeout (lx; 18 days)

Update to 1.2.2.

PR:             ports/140626
Submitted by: David Naylor
Feature safe:   yes

Support libgcrypt, and update to 1.2.1, a bugfix release.

PR:             ports/138473
Submitted by:   Peter Wullinger
Feature safe:   yes

Update to 1.2.

PR:     137760
Submitted by:   Sofian Brabez
Approved by:    maintainer

Update to 1.1.

PR:             ports/133336
Submitted by:   Sofian Brabez <sbrabez@gmail.com>
Approved by:    lx (maintainer)

Argh. So, the update notifier was wrong, and 0.2 is not a new release
(of course), but I was fooled because there's a separate project called
libssh which *did* just have a new release. 1.0 is the real update.

Pointed out by: J. Johnston

Update to 0.2.

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

(Only the first 15 lines of the commit message are shown above )

Update to 0.18.

Update to 0.17.

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run

Updating to 0.15.

- Provide a patch to fix a bug in the configure script that caused the include
  and library directory flags to gcc to be wrong
- Bump PORTREVISION

PR:             102920
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)

- Updating libssh2 to 0.14. Changes:
  - Plug leaks in EVP cipher init/shutdown. (Selcuk Gueney)
  - Allow socket_fd == 0 in libssh2_session_startup(). (puudeli)
  - Swap ordering of packet_add/packet-inspection to avoid inspect after
  - free. (Selcuk)
  - Swap KEX_INIT ordering, send our KEX_INIT first.
  - Add check for oportunistic KEX_INIT packets.  Burn bad guess if necessary.
  - Fix OpenSSL detection using pkg-config. (Dan Casey)

PR:             ports/100127
Submitted by:   maintainer (David Thiel)

- Adopt

PR:             ports/97860
Submitted by:   David Thiel <lx@redundancy.redundancy.org>

- update to 0.13

Update to 0.12
Add SHA256

PR:             89239
Submitted by:   KATO Tsuguru <tkato432@yahoo.com>

- Update to 0.11.

PR:             ports/83401
Submitted by:   Marcus Grando <marcus@corp.grupos.com.br>

- Update to 0.10

PR:             ports/82280
Submitted by:   Ports Fury

Fix post-install target.

Noticed by:     pointyhat (via kris)

libssh2 is a library implementing the SSH2 protocol as defined by
Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25), SECSH-CONNECTION(23),
SECSH-ARCH(20), SECSH-FILEXFER(06)*, SECSH-DHGEX(04), and SECSH-NUMBERS(10).

Number of commits found: 64

13 vulnerabilities affecting 42 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2019-03-19 14:51:44