*/*: Ports return to pool Sponsored by: Netzkommune GmbH8824e7f507
The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
Powerful network monitoring system
nagios:nagios from the portThe _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641.
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read.
Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a "kill `cat /pathname/nagios.lock`" command.
rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.
qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) av…
Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service (segmentation fault) via a long message to cmd.cgi.
pkg audit reports nothing for this version.The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read.
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) av…
*/*: Ports return to pool Sponsored by: Netzkommune GmbH8824e7f507
net-mgmt/nagios: Add monplugins flavor Some users asked to add a flavor to permit to have nagios already packaged with monplugins. PR: 283977 Sponsored by: Klara, Inc. Approved by: 0mp (mentor) Approved by: joneum (maintainer) Differential Revision: https://reviews.freebsd.org/D481460fb561611e
net-mgmt/nagios: Avoid deprecated @exec/@unexec Utilize USES=localbase while I am here Approved by: portmgr (blanket)0eae56127a
*/*nagios*: Take Maintainership Sponsored by: Netzkommune GmbHfbf337b4df
net-mgmt/nagios: drop maintainership060665232e
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
net-mgmt: remove 'Created by' lines A big Thank You to the original contributors of these ports: * @BABOLO <.@babolo.ru> * Alex Samorukov, samm@freebsd.org * Alexander Kriventsov <avk@vl.ru> * Alexander Sulfrian <alexander@sulfrian.net> * Alexander Y. Grigoryev <alexander.4mail@gmail.com> * Alexandre Biancalana <ale@biancalanas.net> * Alexandre Snarskii <snar@paranoia.ru> * Alexandre Snarskii <snar@snar.spb.ru> * Alexey Bobkov <mr.deadlystorm@gmail.com> * Alexey Dokuchaev <danfe@FreeBSD.org> * Alexey V. Degtyarev * Anders Nordby <anders@FreeBSD.org> * Anders Troback * Andreas Klemm <andreas@klemm.gtn.com> * Andrew 'derfi' Sidorov <derfi@vei.ru> * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrew Thompson <andy@fud.org.nz> * Andrew Thompson <thompsa@freebsd.org> * Anton Berezin <tobez@FreeBSD.org> * Anton Berezin <tobez@tobez.org> * Athanasios Douitsis <aduitsis@cpan.org> * Babak Farrokhi <farrokhi@FreeBSD.org> * Bartlomiej Rutkowski <r@robakdesign.com> * Bill Fenner <fenner@FreeBSD.org> * Blaz Zupan <blaz@si.FreeBSD.org> * BluePex Security Solutions <freebsd-ports@bluepex.com> * Boris Samorodov <bsam@FreeBSDD.org> * Brad Davis <brd@FreeBSD.org> * Brad Hendrickse <bradh@uunet.co.za> * Brian Somers <brian@FreeBSD.org> * Bruce M Simpson <bms@FreeBSD.org> * Bruce Simpson * Chris S.J. Peron <maneo@bsdpro.com> * Chris St Denis <chris@smartt.com> * Christer Edwards <christer.edwards@gmail.com> * Christopher N. Harrell <cnh@ivmg.net> * Clement Laforet <sheepkiller@cultdeadsheep.org> * Corey Smith <corsmith@gmail.com> * Craig Boston <craig@yekse.gank.org> * Dave Cottlehuber <dch@FreeBSD.org> * Dave Cottlehuber <dch@skunkwerks.at> * David O'Brien (obrien@NUXI.com) * David Shane Holden <dpejesh@yahoo.com> * David Yeske <dyeske@gmail.com> * Denis Shaposhnikov <dsh@vlink.ru> * Dennis Herrmann <adox@mcx2.org> * Dikshie <dikshie@sfc.wide.ad.jp> * Dmitry Sivachenko <demon@FreeBSD.org> * Domas Mituzas <midom@dammit.lt> * Douglas Fraser <doug@idmf.net> * Douglas K. Rand <rand@iteris.com> * Douglas K. Rand <rand@meridian-enviro.com> * Edwin Groothuis <edwin@mavetju.org> * El Vampiro <vampiro@rootshell.ru> * Emanuel Haupt <ehaupt@FreeBSD.org> * Eric F Crist <ecrist@secure-computing.net> * Eric Turgeon <ericturgeon.bsd@gmail.org> * Eugene Grosbein <eugen@FreeBSD.org> * Fotis Zabaras <fotis@zabaras.eu> * Frank Wall <freebsd@moov.de> * Frank Wall <fw@moov.de> * Gea-Suan Lin <gslin@gslin.org> * Geoffroy Desvernay <dgeo@centrale-marseille.fr> * George Reid <greid@ukug.uk.freebsd.org> * Gerrit Beine <gerrit.beine@gmx.de> * Henrik Brix Andersen <henrik@brixandersen.dk> * Holger Lamm <holger@eit.uni-kl.de> * Hsin-Han You <hhyou@cs.nctu.edu.tw> * Hung-Yi Chen <gaod@hychen.org> * Inacio <nacho319+freebsdZilla@gmail.com> * J.R. Oldroyd <fbsd@opal.com> * JJ Behrens <jj@nttmcl.com> * Jake Smith <jake@xz.cx> * James FitzGibbon <jfitz@FreeBSD.org> * James Flemer <jflemer@acm.jhu.edu> * Janos Mohacsi <janos.mohacsi@bsd.hu> * Janos Mohacsi <mohacsi@niif.hu> * Janos.Mohacsi@bsd.hu * Janos.Mohacsi@dante.org.uk * Jason Helfman <jgh@FreeBSD.org> * Jeremy Chadwick <koitsu@FreeBSD.org> * Jerry A! <jerry@thehutt.org> * Jev Björsell <ports@ecadlabs.com> * Joe Clarke <marcus@marcuscom.com * Joe Clarke <marcus@marcuscom.com> * Johannes Jost Meixner <johannes@FreeBSD.org> * Johannes Jost Meixner <johannes@perceivon.net> * Josh Carroll <josh.carroll@gmail.com> * KIKUCHI Koichiro <koichiro@rworks.jp> * Kevin Hung <khung@nullaxiom.com> * Kian Mohageri <kian.mohageri@gmail.com> * Kimura Fuyuki <fuyuki@hadaly.org> * Kirill Ponomarew <ponomarew@oberon.net> * Kris Kennaway <kris@FreeBSD.org> * Lars Engels <lars.engels@0x20.net> * Lars Thegler <lars@thegler.dk> * Lawrence Chen <beastie@tardisi.com> * Lev Walkin <vlm@lionet.info> * Luca Pizzamiglio <pizzamig@FreeBSD.org> * Mahdi Mokhtari <mokhi63@gmail.com> * Manuel Kreutz <mk@nomtec.net> * Marcin Cieslak <saper@system.pl> * Mark Felder <feld@FreeBSD.org> * Mark Pulford <mark@kyne.com.au> * Martin Jackson <mhjacks@swbell.net> * Martin Matuska <mm@FreeBSD.org> * Mathieu Simon <freebsd@simweb.ch> * Matt Moriarity <matt@mattmoriarity.com> * Matt Peterson <matt@peterson.org> * Matthew Seaman <matthew@FreeBSD.org> * Michael L. Hostbaek (mich@freebsdcluster.org) * Michael Lyngbøl <lyngbol@wheel.dk> * Michael Reifenberger <mr@FreeBSD.org> * Michal Hanula <michal@hanu.la> * Mike Bristow <mike@urgle.com> * Mikhail T. <mi@aldan.algebra.com> * Mikolaj Golub <to.my.trociny@gmail.com> * Muhammad Moinur Rahman <5u623l20@gmail.com> * Muhammad Moinur Rahman <bofh@FreeBSD.org> * Nicholas Esborn <nick@netdot.net> * Nick F <ffault@gmail.com> * Nick Hilliard * Nick Hilliard <nick@foobar.org> * Pakhom Golynga <pg@pakhom.spb.ru> * Paul Chvostek <paul@it.ca> * Paul Dlug <paul@nerdlabs.com> * Paul Dlug<paul@nerdlabs.com> * Pavel I Volkov * Peter C. Lai <cowbert@gmail.com> * Phil Phillips * Pierre David <pdagog@gmail.com>, Jean Benoit <jean@unistra.fr> * Rihaz Jerrin <rihaz.jerrin@gmail.com> * Roar Pettersen <roar@uib.no> * Russell A. Jackson <rjackson@cserv62.csub.edu> * Ryan Steinmetz * Ryan Steinmetz <rpsfa@rit.edu> * Ryan Steinmetz <zi@FreeBSD.org> * Serge Maslov <serge@maslov.biz> * Sergey Skvortsov <skv@protey.ru> * Sevan Janiyan <venture37@geeklan.co.uk> * Shaun Amott <shaun@inerd.com> * Simon 'corecode' Schubert <corecode@corecode.ath.cx> * Stefan Esser <se@FreeBSD.org> * Stefan Lambrev <cheffo@freebsd-bg.org> * Stephen J. Roznowski <sjr@home.net> * Steve Wills <swills@FreeBSD.org> * Steven Kreuzer <skreuzer@FreeBSD.org> * Tassilo Philipp <tphilipp@potion-studios.com> * Thomas Spreng <spreng@socket.ch> * Tim Bishop <tdb@FreeBSD.org> * Timur I. Bakeyev <bat@cpan.org> * Tom Judge <tj@FreeBSD.org> * Tor Halvard "Squat" Furulund <squat@squat.no> * Tsung-Han Yeh <snowfly@yuntech.edu.tw> * Tsung-Han Yeh <snowfly@yunteche.du.tw> * Tuc <freebsd-ports@t-b-o-h.net> * Vaida Bogdan * Veniamin Gvozdikov <vg@FreeBSD.org> * Vladimir Ermakov <samflanker@gmail.com> * Vladimir Kotal <vlada@devnull.cz> * Wei-chun Chao * Xavier Beaudouin <kiwi@oav.net> * Ying-Chieh Chen <yinjieh@csie.nctu.edu.tw> * Yuan-Chung Hsiao <ychsiao@ychsiao.org> * anarcat@anarcat.ath.cx * arved * babak@farrokhi.net * brock@cotcomsol.com * clement@FreeBSD.org * cnh@ivmg.net * dom@happygiraffe.net * dpejesh@yahoo.com * ecronin@gizmolabs.org * ehaupt@FreeBSD.org * gpalmer * gslin <gslin@gslin.org> * hr <holgerrepp@googlemail.com> * ijliao * itojun@itojun.org * jabley * jabley@clear.co.nz * jamrich.majo@gmail.com * janos.mohacsi@bsd.hu * joris * joseph@randomnetworks.com * marck@rinet.ru * mich@FreeBSD.org * mich@freebsdcluster.org * nbm * rea-fbsd@codelabs.ru * rflynn@acsalaska.net * salexanov@gmail.com * sanpei@FreeBSD.org * steinex * torstenb * trevor * vfom@narod.ru * # Created by Kevin Bowling <kbowling@FreeBSD.org> With hat: portmgr43ac3e28ab
*/*: Remove redundant '-*' from CONFLICTS definitions The conflict checks compare the patterns first against the package names without version (as reported by "pkg query "%n"), then - if there was no match - agsinst the full package names including the version (as reported by "pkg query "%n-%v"). Approved by: portmgr (blanket)04b9da4140
all: Remove all other $FreeBSD keywords.135fdeebb9
Remove # $FreeBSD$ from Makefiles.305f148f48
- update libgd to 2.3.0 - new option RAQM - resurrect deprecated gdlib-config - bump dependend portseff60e5ddb
Fix a few redirects to https in my ports.ec441d76cc
Update the rest of my ports to UCL pkg-message.2ce0cb26fa
Help nagios cope with php-7 split has been replaced with explode PR: 224509a7efdfb5dd
- update libgd to 2.2.2 - new MASTER_SITES - add security patch PR: 210913 Submitted by: Piotr Kubaj MFH: 2016Q3 Security: CVE-2015-8874 Security: CVE-2016-3074 Security: http://www.openwall.com/lists/oss-security/2016/07/12/43561a46f28
Convert USE_PHP*=yes into USES=php* PR: 210529 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D6936dca255c3ce
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.
With hat: portmgr
Sponsored by: Absolight8d6597e0bbDon't say there is a documentation installed. PR: 207267 Sponsored by: Absolight2981dfe17c
converters/libiconv: - Remove const qualifier from iconv(3) to match POSIX: http://pubs.opengroup.org/onlinepubs/9699919799/functions/iconv.html - Patch iconv.h to expose more GNU extensions when LIBICONV_PLUG is defined because the base system iconv supports these extensions too. Add/remove patches to/from ports to call iconv with non-const arguments. This breaks some ports on FreeBSD 10 because base system iconv.h still has the const qualifier. Fix this by letting USES=iconv add a build dependency on converters/libiconv so ports can use its iconv.h (with LIBICONV_PLUG defined) instead of the base system iconv.h. This exposed some ports that link with libiconv when it is available instead of using libc iconv. In these cases one of the following changes has been made: - patch configure scripts to test for libc iconv first - add ac_cv_lib_iconv_libiconv=no or similar to CONFIGURE_ARGS to disable some configure tests - converters/wkhtmltopdf: this includes Qt4 so add a patch from devel/qt4 - lang/gcc5-aux: respect CFLAGS and friends during configure such that LIBICONV_PLUG is defined in the iconv test, also switch to external gettext - mail/gnarwl: replace patches with CPPFLAGS/LIBS - multimedia/ffmpeg2theora: remove iconv test from SConstruct and use ICONV_LIB in port Makefile instead, also fix a bug in subtitles.c - net-im/licq: finish conversion to cmake - net-mgmt/bandwidthd, net-mgmt/icinga, net-mgmt/nagios, net-mgmt/nagios4: don't need iconv - textproc/p5-XML-TinyXML: finish conversion to USES=perl5 Other changes: - databases/qdbm and slaves: respect CFLAGS and friends, also enable bzip2 and lzo support - games/ldmud: respect CFLAGS and friends - graphics/inventor: replace some patches with MAKE_ARGS/MAKE_ENV to respect CFLAGS and friends, also remove FreeBSD/alpha patch and add missing xorg dependencies PR: 199099 Exp-run by: antoine Approved by: portmgr (antoine)074ea5282a
Add CPE. Sponsored by: Absolight723d568e7a
Pet check-plist. PR: 195572 Submitted by: ohauer Sponsored by: Absolight84528a233d
Fix packaging as a user. Sponsored by: Absolighte7b5460ee1
Don't use autotools any more. Sponsored by: Absolight85ebaf0245
Replace USE_AUTOTOOLS=libltdl with an ordinary LIB_DEPENDS in all ports. There are only 60 such ports so there doesn't need to be a separate keyword or USES for this. Approved by: portmgr (bapt)15c4a5ecf3
- Add OPTIONS to either depend on plugins from nagios-plugins.org, monitoring-plugins.org or neither at all - Bump PORTREVISION Approved by: mat (implicit)383100cfc7
Support LIBS like LDFLAGS.
- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS. Also remove references to
PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
required additional patches.
Somewhat simplified a linker command line looks like:
${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}
where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us. If possible -L and -l flags need to be
added to LIBS to make sure they appear after any -L and -l flags set by
upstream. Many ports currently add -L${LOCALBASE}/lib to LDFLAGS but this
may appear too early on the command line causing installed libraries to
be linked in instead of freshly built ones.
Additional changes:
benchmarks/netio: Replace WITH_IPV6 with an IPV6 option.
comms/gnokii: Replace some patches with USES=pathfix. Also remove -fPIC.
graphics/gimageview: USES=libtool and install desktop file in DESKTOPDIR.
graphics/visionworkbench: Remove FreeBSD 7 support.
multimedia/libmovtar: New LIB_DEPENDS syntax.
multimedia/opencinematools: Use standard do-build.
net/siproxd: USES=libtool:keepla (port actually needs .la files for plugins)
net-mgmt/nagios: Remove -fPIC.
net-mgmt/nagios4: Remove -fPIC.
print/cups-base: Only add -lssp_nonshared on i386 and OSVERSION < 1000036.
security/p11-kit: Replace PTHREAD_LIBS in CONFIGURE_ENV with
ac_cv_func_pthread_mutexattr_init=no in CONFIGURE_ARGS. This skips a test
in configure that falsely detects pthread_mutexattr_init in our libc.
sysutils/dar: Fix iconv detection.
x11/rxvt-unicode: Remove -lstdc++ and patch configure to remove a FreeBSD
hack and use $CXX as linker as on other platforms.
PR: 190592
Exp-run by: antoine
Approved by: portmgr (antoine)9f8b4bcde3Fix a segfault when using livestatus, downtime and logrotate. Issue: http://tracker.nagios.org/view.php?id=455 Sponsored by: Absolight1b6a0aa634
Use @sample for my port, cleanup an etc/PORTNAME into ETCDIR. Sponsored by: Absolightcc30f48479
Pet portscout. Sponsored by: Absolight11e1e53534
Add nagios4, the next version of the nagios monitoring system. While there, garbage collect the UID/GID in nagios. Sponsored by: Absolight0253032ea5
* Add a patch from upstream fixing a cgi vulnerability[1] * Cleanup COMMENT * Rename patches to follow make makepatch naming * Incorporate a sed into already patched files. Poked by: ohauer [1] Security: CVE-2013-7108 CVE-2013-7205121dea5a9c
Take that, will work on the main issue today.22e13304f8
Drop maintainership, I have no enoght time now.152a0456ac
- Actually make nagios work with staging - Make the index.php patch respect the possible corewindow parameter8ba3edb0ee
Fix tac.cgi location for people with redefined $cgi_base_url in config.inc.php. Submitted by: mat78873ed8a4
Replace meaningless startpage with tactical overview. Submitted by: ohauerb18fcf42b6
Bump portrevision because of recent changes. Requested by: mat25de3d6ce6
Do not overwrite config.inc.php; Convert to staging; Use new LIB_DEPENDS format. PR: 185187 Submitted by: mat3036971e90
Add NO_STAGE all over the place in preparation for the staging support (cat: net-mgmt)985b201424
Convert to new perl framework Submitted by: az46c6877a4a
Update to 3.5.1.01067bb348
- update libdg to 2.1.0b83d7bf933
Take maintainership.535cd21d53
- Reassign to the heap PR: ports/180754 Submitted by: Jarrod Sayers <jarrod@downtools.com.au> (maintainer)a9acc27919
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig while here Reviewed by: zeisinga3a0715f38
- update to 3.5.0 changelog: http://www.nagios.org/projects/nagioscore/history/core-3x PR: 177304 Submitted by: Jarrod Sayers <jarrod@downtools.com.au> (maintainer)e5f328ef87
- update to 3.4.4 - remove patch, applied upstream changelog: http://www.nagios.org/projects/nagioscore/history/core-3x PR: 176188 Submitted by: Jarrod Sayers <jarrod@downtools.com.au> (maintainer)8f206379d8
- Fix all cases of 'No newline at end of file' in ports tree Approved by: portmgr (bapt)05a9235c98
- add upstream patch for CVE-2012-6096 PR: 175196 Submitted by: Jarrod Sayers <jarrod@mail.downtools.com.au> (maintainer) Security: 97c22a94-5b8b-11e2-b131-000c299b62e1faa190fb03