summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* security/openvpn: remove 2048-bit legacy Diffie HellmanMatthias Andree9 hours9-28/+70
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I received a fallout complaint from i386 FreeBSD 15-PRERELEASE builders that, as of now, has no other explanation than a tightened (if intermediately) SECLEVEL on that machine, and that's due to Diffie-Hellman 2048 bit parameters, and self-tests are failing with stereotypical "ee key too small" and "dh key too small". While it's not clear what the exact cause of the failure is and if we had a glitch in the OpenSSL 3.5.1 import (Enji updated the main branch to 3.5.2 shortly after), let's modernize the setup a bit. Fallout and Builder logs (I take it the 2nd URL states that the FreeBSD src branch was at commit c6778f3a442): https://pkg-status.freebsd.org/beefy17/data/main-i386-default/p98b748365fe6_sc6778f3a442/logs/openvpn-2.6.14.log https://pkg-status.freebsd.org/beefy17/build.html?mastername=main-i386-default&build=p98b748365fe6_sc6778f3a442 2025-08-20 11:46:39 OpenVPN 2.6.14 i386-portbld-freebsd15.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] [DCO] 2025-08-20 11:46:39 Note: dev-type not tun, disabling data channel offload. 2025-08-20 11:46:39 library versions: OpenSSL 3.5.1 1 Jul 2025, LZO 2.10 2025-08-20 11:46:39 OpenVPN 2.6.14 i386-portbld-freebsd15.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] [DCO] 2025-08-20 11:46:39 DCO version: FreeBSD 15.0-PRERELEASE 1500061 2025-08-20 11:46:39 library versions: OpenSSL 3.5.1 1 Jul 2025, LZO 2.10 2025-08-20 11:46:39 DCO version: FreeBSD 15.0-PRERELEASE 1500061 2025-08-20 11:46:39 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2025-08-20 11:46:39 GDG: problem writing to routing socket: Invalid argument (errno=22) 2025-08-20 11:46:39 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2025-08-20 11:46:39 OpenSSL: error:030000A8:digital envelope routines::unknown security bits: 2025-08-20 11:46:39 OpenSSL: error:0A00018A:SSL routines::dh key too small: 2025-08-20 11:46:39 SSL_CTX_set0_tmp_dh_pkey 2025-08-20 11:46:39 Exiting due to fatal error 2025-08-20 11:46:39 OpenSSL: error:030000A8:digital envelope routines::unknown security bits: 2025-08-20 11:46:39 OpenSSL: error:0A00018F:SSL routines::ee key too small: 2025-08-20 11:46:39 Cannot load inline certificate file 2025-08-20 11:46:39 Exiting due to fatal error FAIL: t_cltsrv.sh That prompted upstream to file a bug and the suggestion to strip dh2048.pem from installing the demo file and sample configuration should not affect existing setups, however, if someone would have used the shipped dh2048.pem file, that would have to be regenerated with openssl dhparam -out dh2048.pem 2048. https://github.com/OpenVPN/openvpn/issues/819 https://gerrit.openvpn.net/c/openvpn/+/1145 Upstream changelog, as of v3 of the latter: | Remove use of 'dh dh2048.pem' from sample configs, remove 'dh2048.pem' file | | Since commit bd9aa06feb41 (Jan 2015) OpenVPN has allowed to use | '--dh none' to disable traditional Diffie Hellman, since more secure | ECDH algorithms are available that do not use explicit DH parameters. | | If configured with a suffiently high securelevel (3+), or if running in | FIPS mode, OpenSSL 3.5 will refuse 2048 bit DH files, making our tests | fail. | | Thus, remove all the DH2048 stuff from our sample configs. Obtained from: Gert Doering While here, delete files/patch-src_plugins_auth-pam_auth-pam.c because upstream (namely Antonio Quartulli) had fixed that omission in v2.6-beta1 already (in 2022, as of OpenVPN's commit 0fed64a91d894b46). Nobody has been able yet to reproduce the test failure other than by forcing SECLEVEL=3, so let's just push this and see if we receive pkg-fallout again next time i386 gets its ports built. Upstream considers the patch necessary anyways, so let's not waste too much time on testing on a dying system.
* mail/postfix-current: Update to 3.11-20250818Juraj Lutter11 hours2-5/+5
| | | | | | And also address a small nit from [1] PR: 288660 [1]
* mail/postfix: Update to 3.10.4Juraj Lutter11 hours2-5/+5
| | | | | | And also address a small nit from [1] PR: 288660 [1]
* misc/py-transformers: Add dependencies that were disabled beforeYuri Victorovich12 hours1-4/+4
|
* audio/py-torchaudio: Add missing libsox.soYuri Victorovich12 hours1-1/+8
| | | | On a side note: it's bad that libsox is bundled.
* science/packmol: Update to 21.1.0Nuno Teixeira12 hours2-4/+4
| | | | ChangeLog: https://github.com/m3g/packmol/releases/tag/v21.1.0
* devel/hs-cabal-plan: Update 0.7.5.0 => 0.7.6.1Tiago Gasiba12 hours2-45/+98
| | | | | | | | | | | Changelog: https://hackage.haskell.org/package/cabal-plan-0.7.6.1/changelog Commit log: https://github.com/haskell-hvr/cabal-plan/compare/v0.7.5.0...v0.7.6.1 PR: 288930 Approved by: yuri@ (Mentor)
* x11/roxterm: Update to 3.16.2Neel Chauhan12 hours2-4/+4
|
* security/krb5-devel: update to the latest MIT/KRB5 github commitCy Schubert12 hours2-5/+5
| | | | Security: CVE-2025-57736
* security/krb5-122: Fix KRB5 GsS MIC VerificationCy Schubert12 hours4-0/+95
| | | | | | | | Apply same fix as src/f96110babbe1, also upstream/83cd76b11. This fixes upstream bug #9181. The result of the bug is the acceptance of MIC tokens with invalid checksums. Security: CVE-2025-57736
* security/krb5-122: Regenerate patchesCy Schubert12 hours9-37/+38
| | | | Regenerate patches using makepatch.
* audio/py-torchaudio: Remove unnecessary LDFLAGSYuri Victorovich14 hours1-2/+1
|
* misc/py-torchvision: Remove unnecessary LDFLAGSYuri Victorovich14 hours1-2/+1
|
* misc/py-pytorch: Add USE_LDCONFIGYuri Victorovich14 hours1-0/+2
| | | | | ... because it installs shared libraries into the Python module path that users later link with.
* lang/perl5.42: silence Getopt::Long duplicate‐spec warning in json_ppMathieu Arnold15 hours2-0/+14
| | | | PR: 286820
* converters/p5-JSON-PP: silence Getopt::Long duplicate‐spec warningMathieu Arnold15 hours2-0/+14
| | | | PR: 286820
* graphics/swappy: update to 1.7.1Hiroki Tagato15 hours4-25/+33
| | | | | | | | | | | | | While here: - switch to use upstream release tarball - split PLIST_FILES into pkg-plist - move post-patch target to patch file since the change is about static content - sort variable order to make portclippy happy Changelog: https://github.com/jtheoof/swappy/blob/v1.7.1/CHANGELOG.md Reported by: GitHub (watch releases)
* devel/py-ruamel.yaml: update to 0.18.15Matthew Seaman16 hours2-4/+4
| | | | | Changes: https://sourceforge.net/p/ruamel-yaml/code/ci/0.18.15/tree/CHANGES Reported by: portscout, repology
* x11-toolkits/aquamarine: update to 0.9.3Hiroki Tagato18 hours2-4/+4
| | | | | | Changelog: https://github.com/hyprwm/aquamarine/releases/tag/v0.9.3 Reported by: GitHub (watch releases)
* Revert "security/py-fail2ban: Remove unneeded filter.d files"Cy Schubert18 hours3-11/+45
| | | | | | | | | | While some users want the upstream sshd filters to have the contents the BSD sshd filters, others use them as is. Revert this change. Let users decide which to use. PR: 288849 This reverts commit d906503fb22992a7a92d46365b9f2af31454dee6.
* lang/racket: Update to 8.18Jimmy Olgeni19 hours3-15/+32
|
* lang/racket-minimal: Update to 8.18Jimmy Olgeni19 hours3-7/+17
|
* devel/hyprutils: update to 0.8.3Hiroki Tagato20 hours3-4/+5
| | | | | | Changelog: https://github.com/hyprwm/hyprutils/releases/tag/v0.8.3 Reported by: GitHub (watch releases)
* multimedia/kew: update 3.4.0 → 3.4.1Yuri Victorovich20 hours2-4/+4
| | | | Reported by: portscout
* misc/py-diffusers: New port: State-of-the-art diffusion in PyTorch and JAXYuri Victorovich20 hours4-0/+44
|
* devel/py-omegaconf: New port: Flexible configuration libraryYuri Victorovich20 hours4-0/+37
|
* net-p2p/jackett: update to 0.22.2311Ralf van der Enden24 hours3-9/+11
| | | | | | | Changelog: https://github.com/Jackett/Jackett/releases PR: 288948 Reported by: Ralf van der Enden <tremere@cainites.net> (maintainer)
* www/go-anubis: Add config/rules dataDanilo G. Baio25 hours2-4/+59
| | | | | | | | | This will make it easy to maintain a custom configuration by importing the current Anubis rules/policies. Approved by: dch (maintainer) Differential Revision: https://reviews.freebsd.org/D51750
* sysutils/android-file-transfer: update to 4.5Tiago Gasiba26 hours2-5/+6
| | | | | | | | | | | While here, update license from GPLv3+ to LGPL21. Changelog: - https://github.com/whoozle/android-file-transfer-linux/releases/tag/v4.4 - https://github.com/whoozle/android-file-transfer-linux/releases/tag/v4.5 PR: 288925 Reported by: Tiago Gasiba <tiago.gasiba@gmail.com> (maintainer)
* textproc/py-smartypants: Update to 2.0.2Neel Chauhan27 hours2-5/+4
|
* editors/jove: Update to 4.17.5.5Neel Chauhan27 hours3-4/+7
|
* misc/py-hf-xet: update to 1.1.8Hiroki Tagato29 hours2-4/+4
| | | | | | Changelog: https://github.com/huggingface/xet-core/releases/tag/v1.1.8 Reported by: portscout
* devel/py-ty: update to 0.0.1a19Hiroki Tagato29 hours3-95/+103
| | | | | | | | While here, add DOCS option. Changelog: https://github.com/astral-sh/ty/blob/0.0.1-alpha.19/CHANGELOG.md Reported by: portscout
* net/dataplaneapi: Update to 3.2.3Jesús Daniel Colmenares Oviedo31 hours2-8/+7
| | | | | | | | | ChangeLogs: - https://github.com/haproxytech/dataplaneapi/releases/tag/v3.2.2 - https://github.com/haproxytech/dataplaneapi/releases/tag/v3.2.3 Approved by: acm (mentor)
* databases/tdbc: fix package with Tcl 8 and 9Pietro Cerutti31 hours1-1/+1
|
* mail/thunderbird-esr: update to 140.2.0 (rc3)Christoph Moench-Tegeder31 hours2-5/+5
| | | | | Release Notes: https://www.thunderbird.net/en-US/thunderbird/140.2.0esr/releasenotes/
* www/py-searxng-devel: Update to 20250819Jesús Daniel Colmenares Oviedo31 hours3-7/+25
| | | | | | ChangeLog: https://github.com/searxng/searxng/compare/d57433...25647c Approved by: acm (mentor)
* databases/py-valkey: Update to 6.1.1Jesús Daniel Colmenares Oviedo31 hours2-5/+4
| | | | | | ChangeLog: https://github.com/valkey-io/valkey-py/releases/tag/v6.1.1 Approved by: acm (mentor)
* databases/libvalkey: Update to 0.2.0Jesús Daniel Colmenares Oviedo31 hours3-4/+6
| | | | | | | ChangeLog: https://github.com/valkey-io/libvalkey/compare/0.1.0...0.2.0 Approved by: acm (mentor)
* www/filebrowser: Update to 2.42.5Jesús Daniel Colmenares Oviedo33 hours2-8/+8
| | | | | | | | | ChangeLogs: - https://github.com/filebrowser/filebrowser/releases/tag/v2.42.4 - https://github.com/filebrowser/filebrowser/releases/tag/v2.42.5 Approved by: acm (mentor)
* security/nextcloud-twofactor_webauthn: Update to 2.3.0Bernard Spil34 hours2-4/+4
|
* mail/nextcloud-mail: Update to 5.3.0Bernard Spil34 hours2-4/+4
|
* www/nextcloud-calendar: Update to 5.3.9Bernard Spil34 hours2-4/+4
|
* www/nextcloud-contacts: Update to 7.2.5Bernard Spil34 hours2-4/+4
|
* print/cups-filters: Support QPDF 12Tijl Coosemans34 hours5-5/+491
| | | | | | | | Also add more upstream bugfixes. Upstream commit c3d2f07399da contains bits that look like PDF headers that cause github.com to return Forbidden. Put it as a patch in the ports tree. PR: 288928
* math/maxima: Update to 5.48.1Fernando Apesteguía34 hours5-19/+22
| | | | | | ChangeLog: https://sourceforge.net/p/maxima/code/ci/master/tree/changelogs/ChangeLog-5.48.md Reported by: portscout
* net/remmina: Update to 1.4.41Fernando Apesteguía34 hours1-2/+1
| | | | | | ChangeLog: https://gitlab.com/Remmina/Remmina/-/tags/v1.4.41 Update translation files
* cad/openvsp: Update to 3.45.1Fernando Apesteguía34 hours3-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ChangeLog: https://openvsp.org/blogs/announcements/2025/08/12/openvsp-3-45-1-released Features: * Camber decomposition scaling for file and interpolated airfoils * Advanced Link code section now has line numbers * Advanced Link code error messages reflect displayed line numbers * Geometry Analysis Online Help * Error handling for Geometry Analysis * Adjust Main Screen sizing VSPAERO Updates: * Cleaned up vspaero_opt * Optimization support for non-geometric inputs as design variables * Optimization based trim mode * Preliminary support for VSPAERO API wrapper * Various bug fixes Bug Fixes: * Fix holes in NGon mesh with co-planar surfaces * Fix control surface tag file name problem on Windows * Fix vspviewer temp directory problem on Linux * Fix writing Mref to VSPAERO input file * Add omitted support for VSPAERO CLMax2D parameter * Expose AuxGeom XSec Attributes * Fix bug with tessellation of EngineGeom * Fix CFDMesh crash tied to model scale. * Fix reading STL files on Windows with non-native line endings. * Fix Bogie containers not appearing in search * Fix CG envelope calculations & visualization * Clean up GearScreen * Improve matrix attribute format string
* science/afni: Update to 25.2.08Fernando Apesteguía34 hours2-4/+4
|
* misc/py-transformers: New port: State-of-the-art Machine Learning for JAX, ↵Yuri Victorovich35 hours4-0/+54
| | | | PyTorch and TensorFlow
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-21 03:09:03 +0000