- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and USE_GETTEXT=yes to USES=gettext while here95e7081976
ipsec-tools -- remotely exploitable computational-complexity attackentered 2018-04-14
KAME racoon IKE daemon, ipsec-tools version
ipsec-tools:ipsec-tools from the port| CVE-2015-4047 | 7.8 | 2015-05-29 | racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP req… |
pkg audit reports nothing for this version.| CVE-2016-10396 | 7.5 | 2017-07-06 | VuXML · The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation perm… |
no CVE referenced
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and USE_GETTEXT=yes to USES=gettext while here95e7081976
Convert vanhu@ ports to new options framework Removed optionnal dependency on the deprecated py-visual for net/scapy Approved by: maintainer (vanhu)7c736f500c
Move the rc.d scripts of the form *.sh.in to *.in Where necessary add $FreeBSD$ to the file No PORTREVISION bump necessary because this is a no-op9aac569eaa
Apply utmp patch from ${FILESDIR} (not files) if OSVERSION < 900007
Spotted by: Jason Hellenthal <jhell at DataIX.net>
Approved by: crees,rene (mentors,implicit)01f239ee0fIn the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.83eb2c3700Fix the rc.d script to avoid unconditional code execution, and various other cleanups.8d5d707de8
- Fix startup script rc.d/racoon. - Bump portrevision. PR: ports/148605 Submitted by: John Hein <jhein@symmetricom.com> Approved by: maho (mentor) and vanhu@netasq.com (maintainer)537fa88c5f
- update to 0.8.0 PR: ports/155883 Submitted by: vanhu (maintainer)8a131b63e8
Sync to new bsd.autotools.mk4a8684e352
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#1d6b4b3f91
- Mark BROKEN on HEAD: fails to build with new utmpx Reported by: pointyhat5a23bb49bd
- Update to 0.7.3 PR: 137966 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)d7bc82e497
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr789d75c728
Fix a few "bad example" problems in the rc.d scripts that have been propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.0175383f0a- Update to 0.7.2. This release fixes a remote DoS bug with IKE fragmentation reassembly. PR: ports/133922 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)60e37f26a0
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
- Remove CONFIGURE_TARGET hack in various bsd.*.mk
- USE_GNOME=gnometarget is now an no-op
Changes to individual ports, other than removing the CONFIGURE_TARGET hack:
= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
- comms/gnuradio
- science/abinit
- science/elmer-fem
- science/elmer-matc
- science/elmer-meshgen2d
- science/elmerfront
- science/elmerpost
= use x86_64 as ARCH
- devel/g-wrap
= other changes
- print/magicfilter
GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf
Total # of ports modified: 1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)
PR: 126524 (obsoletes 52917)
Submitted by: rafan
Tested on: two pointyhat 7-amd64 exp runs (by pav)
Approved by: portmgr (pav)741aa71483Add an WITH_LDAP option enable hybrid, xauth and mode-cfg per default PR: 125748 Submitted by: Matthew Grooms Approved by: vanhu (maintainer)d31eb81ef0
- Update to 0.7.1 PR: ports/125957 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)b190a8cde5
Fix build on 7.x when RC5 support is enabled. PR: 103084, 122187 Submitted by: Dmitry A Grigorovich Approved by: maintainerb7917da8c5
- Fix: Have the racoon startup script [optionally] create its required dirs. PR: ports/117128 Submitted by: John Hein <jhein@timing.com> Approved by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)fffceacc53
Remove always-false/true conditions based on OSVERSION 50000013441eac4b
Update to 0.7 PR: 115978 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com>3b616a5ff7
- Remove the DESTDIR modifications from individual ports as we have a new, fully chrooted DESTDIR, which does not need such any more. Sponsored by: Google Summer of Code 2007 Approved by: portmgr (pav)42542fb076
- Revert changes to patch-configure. It was slipped in when committing fix for gcc 4.x Noticed by: sat Approved by: maintainer (implicit)f71d92ccef
- Fix build with gcc 4.x - While I'm here, remove extra empty line in distinfo PR: ports/113383 Submitted by: rafan Approved by: VANHULLEBUS Yvan <yvan.vanhullebus at netasq.com> (maintainer)b159d8aee9
- Version 0.6.7 of ipsec-tools is out, which fixes an easy to exploit Denial of Service (CVE-2007-1841). PR: ports/111319 Submitted by: maintainer (VANHULLEBUS Yvan) Security: CVE-2007-18417980df1cc6
Use libtool port instead of included version to avoid objformat a.out botchae994c8ea8
- An option to force NATT functionality - Sneak in master sites beautification and use_ldconfig while I'm here PR: ports/105488 Submitted by: bz Approved by: VANHULLEBUS Yvan <yvan.vanhullebus@netasq.com> (maintainer)c6f1382e04
- There should be only one site in the WWW line and kame is obsolete anywayc452887cf1
- Add patch for people having trouble compiling OpenSSL bits PR: ports/97442 Submitted by: Dmitry Andrianov <dimas@dataart.com> Approved by: VANHULLEBUS Yvan <yvan.vanhullebus@netasq.com> (maintainer)69a56c54c8
- Update to 0.6.6 PR: ports/98902 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)0e54122ba5
Makefile: - introduce OPTIONS to enable/disable features - add more features to the OPTION dialog - choose reasonable defaults for OPTIONS (disabled patented stuff) - remove usesless WRKSRC line - move LDFLAGS to the place where it is necessary - extend CONFIGURE_ARGS to set the directory for the adminport socket * Note: racoonctl is useless without adminport enabled * create the socket dir in
pkg-descr:
- shortened by one line to please portlint
pkg-plist:
- slight reorganization
- add create instructions for the adminport socket dir for the
"installing from package" case
- add removal instructions for the adminport socket dir
files/patch-configure:
- add some stuff to detect libiconv when the GSSAPI OPTION is enabled
- iconv is required for GSSAPI but the library is not added to LIBS
in the original configure script
- Why not use USE_AUTOTOOLS and patch configure.ac?
* because the leads to configure running twice which is useless
overhead. I found no way to avoid this so we patch configure.
files/racoon.sh.in:
- add the adminsocket directory to required_dirs
PR: ports/96368
Submitted by: Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Approved by: maintainer485163afc0Conversion to a single libtool environment. Approved by: portmgr (kris)8503536d38
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears. We have not checked for this KEYWORD for a long time now, so this is a complete noop, and thus no PORTREVISION bump. Removing it at this point is mostly for pedantic reasons, and partly to avoid perpetuating this anachronism by copy and paste to future scripts.c49d1a3273
- Update to 0.6.5 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer) PR: ports/9283849a2a95b33
Change facility from daemon to security, because daemon.info goes to devnull by default PR: ports/91047 Submitted by: PR: Brian Candler <B.Candler@pobox.com>, patch: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer) Approved by: garga (mentor)8a8114f0c1
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry Approved by: krion@ PR: ports/88711 (related)508b8d82f4
ports/security/ipsec-tools enables itself at startup ports/security/ipsec-tools rc.d script defaults to 'enabled' It also installs its own versions of setkey and libipsec.so which seems redundant as they are part of the base system and should be used in preference. Submitted by: Vivek Khera <vivek@khera.org> PR: ports/913172490b762f7
Update to 0.6.4 PR: 90326 Submitted by: maintainerf830909ab5
- Change the location of racoon configuration files to /usr/local/etc/racoon, bringing it in line with the old security/racoon port and the handbook [1] - Make use of USE_RC_SUBR instead of home-grown substitution and install - Prevent installation of some intermediate sample configuration files PR: ports/89273 [1] Submitted by: Angelo Turetta <aturetta@bestunion.it> [1] Approved by: VANHULLEBUS Yvan <vanhu@netasq.com> (maintainer)12df895f92
- Update to 0.6.3. It fixes some crashes, including potential DoS in aggressive mode. - Add SHA256 PR: ports/89365 Submitted by: ANHULLEBUS Yvan (maintainer)9c2893448c
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself. Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME team -- all GNOME 2.12.x ports use it. Preliminary documentation can be found at: http://people.FreeBSD.org/~ade/autotools.txt which is in the process of being SGMLized before introduction into the Porters Handbook. Light blue touch-paper. Run.54a0b86543
Update to 0.6.2 PR: 88042 Submitted by: VANHULLEBUS Yvan <yvan.vanhullebus@netasq.com> (maintainer)73fa60d495
Update to 0.6.1 Submitted by: Yvan Vanhullebus (maintainer)d11db448ed
Add IPSec tools port - the new "official" version of racoon, is the only one which is maintained and have lots of new features. PR: 85544 Submitted by: VANHULLEBUS Yvan <vanhu@netasq.com> Approved by: perky (mentor)9eebd2f131