summaryrefslogtreecommitdiff
path: root/security/bastillion (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Mk/**java.mk: Convert bsd.java.mk to USESMuhammad Moinur Rahman2024-12-311-2/+1
| | | | | | | | | | | | | | | | | | | The following features have been added or changed: - Instead of USE_JAVA use USES=java. This defaults to USES=java:build,run if NO_BUILD is undefined. Else it defaults to USES=java:run - Instead of USE_ANT=yes use USES=java:ant which also implies USES=java:build - Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or extract - Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply build or run - Instead of JAVA_RUN=yes use USES=java:run does not imply extract or build - Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version> Approved by: mat (portmgr), glewis Differential Revision: https://reviews.freebsd.org/D48201
* Remove WWW entries moved into port MakefilesStefan Eßer2022-09-071-2/+0
| | | | | | | | | | Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)
* Add WWW entries to port MakefilesStefan Eßer2022-09-071-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)
* cleanup: remove remaining occurrences of $FreeBSD$Tobias C. Berner2022-07-211-2/+0
|
* security/bastillion: update to 3.14.0Alexander Leidinger2022-02-143-69/+81
|
* security/bastillion: update to 3.13.00Alexander Leidinger2022-01-104-28/+16
| | | | Contains updates to h2 and log4j.
* security/bastillion: update to 3.12.02Alexander Leidinger2022-01-044-86/+81
| | | | | Release notes at https://github.com/bastillion-io/Bastillion/releases/tag/v3.12.02
* security/bastillion: update to 3.12.00Alexander Leidinger2021-12-234-37/+99
| | | | | This update contains an incompatible DB change, please read UPDATING *before* updating.
* security/bastillion: update to 3.11.01 (log4j 2.16)Alexander Leidinger2021-12-174-20/+17
| | | | | Revert my previous log4j fix (disable JNDI lookups via env variable), the update to 3.11.01 contains the fixed log4j 2.16.
* security/bastillion: fix log4j vulnerablityAlexander Leidinger2021-12-142-1/+9
| | | | | | Disable format msg lookup via shell variable on startup. Security: CVE-2021-44228
* One more small cleanup, forgotten yesterday.Mathieu Arnold2021-04-071-1/+0
| | | | Reported by: lwhsu
* all: Remove all other $FreeBSD keywords.Mathieu Arnold2021-04-061-3/+0
|
* Remove # $FreeBSD$ from Makefiles.Mathieu Arnold2021-04-061-1/+0
|
* Update to 3.10.00.Alexander Leidinger2020-05-243-119/+84
| | | | | | | | | | | | | | | | This fixes some potential XSS in the included jquery, but there is no information if bastillion is vulnerable in some place or not. As all the action in bastillion happens after authentication, and is limited to what you enter yourself, it looks like the impact or attack surface of the jquery XSS on bastillion is low. ChangeLog: https://github.com/bastillion-io/Bastillion/releases/tag/v3.10.00 CVE: CVE-2020-11022 CVE: CVE-2020-11023 Notes: svn path=/head/; revision=536365
* Update to 3.09.00:Alexander Leidinger2019-12-133-6/+4
| | | | | | | - removed license key requirement Notes: svn path=/head/; revision=520010
* Remove references to EoL'ed Java versionsGreg Lewis2019-10-031-1/+1
| | | | | | | | | | | | * Java 9 and 10 are EoL'ed upstream and the ports for them are scheduled for deletion, so switch the version specification here to 11+. PR: 241022 Approved by: netchild@ Sponsored by: The FreeBSD Foundation Notes: svn path=/head/; revision=513677
* Update to bugfix release 3.08.01.Alexander Leidinger2019-09-262-6/+6
| | | | Notes: svn path=/head/; revision=512884
* Add missing distinfo for upgrafe program.Alexander Leidinger2019-09-121-1/+3
| | | | Notes: svn path=/head/; revision=511860
* - Add update tool.Alexander Leidinger2019-09-113-6/+24
| | | | | | | | | - Add update instructions (datastore needs to be updated). - Convert pkg-message to UCL format. - Rework plist generation target. Notes: svn path=/head/; revision=511830
* Fix build by actually committing the change in the plist...Alexander Leidinger2019-09-102-69/+93
| | | | Notes: svn path=/head/; revision=511756
* Update to 3.08.Alexander Leidinger2019-09-092-5/+5
| | | | Notes: svn path=/head/; revision=511696
* Regular pkg-message cleanup.Mathieu Arnold2019-08-271-3/+0
| | | | | | | Pointy hat: dinoex ashish Notes: svn path=/head/; revision=510004
* Fix URL.Alexander Leidinger2019-08-172-2/+2
| | | | | | | Noticed by: pkubaj Notes: svn path=/head/; revision=509166
* Remove duplicate line from plistAntoine Brodin2019-08-171-1/+0
| | | | Notes: svn path=/head/; revision=509144
* Improvements to the port MAkefile, no package changes.Alexander Leidinger2019-08-161-5/+3
| | | | | | | Suggested by: mat Notes: svn path=/head/; revision=509065
* Add new port "Bastillion".Alexander Leidinger2019-08-148-0/+757
Bastillion is an open-source web-based SSH console that centrally manages administrative access to systems. A bastion host for administrators with features that promote infrastructure security, including key management and auditing. Notes: svn path=/head/; revision=508967