security/putty0.85

Update to new upstream release 0.69.

Upstream change "You can now explicitly configure SSH terminal mode
settings not to be sent to the server, if your server objects to them."

Enable pageant, was missing from the 0.68 upgrade.

Switch to GTK3, no longer compiles with GTK2.

The security fixes contained in 0.69 are only good on Windows, so not
flagging this as a security update.

Remove leftover files.

The reference to these had been removed as of r184036 on 2007-02-03 already.

Add forgotten patch for Linux -> BSD portability.

Submitted by:	cy@
Reported by:	cy@
MFH:		2017Q1
Differential Revision:	https://reviews.freebsd.org/D10023

Update to new upstream release 0.68 (security fixes)

Additional minor updates on top of cy@'s patch (USE_GNOME, USE_XORG,
LDFLAGS).

ChangeLog: http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html

Submitted by:	cy@
MFH:		2017Q1
Security:	CVE-2017-6542
Security:	9b973e97-0a99-11e7-ace7-080027ef73ec
Differential Revision:	https://reviews.freebsd.org/D10023

Add new putty-nogtk port as alternative SSH implementation.

Cleanup $() variables in ports Makefiles.

Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)

Sponsored by:	Absolight

Security upgrade to new upstream release 0.67.

Unix-relevant changes:
* Security fix: a buffer overrun in the old-style SCP protocol when receiving
  the header of each file downloaded from the server is fixed. (CVE-2016-2563)
* Assorted other robustness fixes for crashes and memory leaks.

MFH:		2016Q1
Security:	7f0fbb30-e462-11e5-a3f3-080027ef73ec
Security:	CVE-2016-2563

security/putty: Fix typo

security/putty: Fix krb5 dependency

Due to using both <bsd.port.pre.mk> and <bsd.port.options.mk>, the
USES+= gssapi:mit directive was ignored and not included in the build
dependency list.  Remove <pre>/<post> includes to fix.

Approved by:	mandree (maintainer)

Update to new upstream release 0.66 (security fix).

Switch to USES=gssapi:mit.

Security:	CVE-2015-5309
Security:	0cb0afd9-86b8-11e5-bf60-080027ef73ec

Drop 8 support.

With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3694

Update to new upstream bug-fix release 0.65

Release notes: http://lists.tartarus.org/pipermail/putty-announce/2015/000021.html

MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight

Add CPE info.

PR:		198369
Submitted by:	shun.fbsd.pr@dropcut.net

Upgrade to upstream bugfix release 0.64.

This fixes a security bug, various other bugs, and supports SSH
connection sharing between multiple instances of PuTTY and its tools.

MFH:		2015Q1
Security:	92fc2e2b-c383-11e4-8ef7-080027ef73ec
Security:	CVE-2015-2157

Modernize LIB_DEPENDS

With hat:	portmgr

Convert GMAKE to MAKE_CMD Please note that lots of invocation of MAKE_CMD here are wrong as they do not properly respect MAKE_ENV and friends

With hat:	portmgr

Support staging.

Add NO_STAGE all over the place in preparation for the staging support (cat: security)

Add explicit dependency on pkgconf (27 ports)

Upgrade PuTTY to new 0.63 beta upstream release, adding vulnerability info.

Quoting the upstream's change log:

- Security fix: prevent a nefarious SSH server or network attacker from
  crashing PuTTY at startup in three different ways by presenting a maliciously
  constructed public key and signature.
- Security fix: PuTTY no longer retains the private half of users' keys in
  memory by mistake after authenticating with them.
- Revamped the internal configuration storage system to remove all fixed
  arbitrary limits on string lengths. In particular, there should now no longer
  be an unreasonably small limit on the number of port forwardings PuTTY can
  store.
- Port-forwarded TCP connections which close one direction before the other
  should now be reliably supported, with EOF propagated independently in the
  two directions. This also fixes some instances of port-forwarding data
  corruption (if the corruption consisted of losing data from the very end of
  the connection) and some instances of PuTTY failing to close when the session
  is over (because it wrongly thought a forwarding channel was still active
  when it was not).
- The terminal emulation now supports xterm's bracketed paste mode (allowing
  aware applications to tell the difference between typed and pasted text, so
  that e.g. editors need not apply inappropriate auto-indent).
- You can now choose to display bold text by both brightening the foreground
  colour and changing the font, not just one or the other.  - PuTTYgen will now
  never generate a 2047-bit key when asked for 2048 (or more generally n−1 bits
  when asked for n).
- Some updates to default settings: PuTTYgen now generates 2048-bit keys by
  default (rather than 1024), and PuTTY defaults to UTF-8 encoding and 2000
  lines of scrollback (rather than ISO 8859-1 and 200).
- Unix: PSCP and PSFTP now preserve the Unix file permissions, on copies in
  both directions.
- Unix: dead keys and compose-character sequences are now supported.
- Unix: PuTTY and pterm now permit font fallback (where glyphs not present in
  your selected font are automatically filled in from other fonts on the
  system) even if you are using a server-side X11 font rather than a Pango
  client-side one.
- Bug fixes too numerous to list, mostly resulting from running the code
  through Coverity Scan which spotted an assortment of memory and resource
  leaks, logic errors, and crashes in various circumstances.

Security:	4b448a96-ff73-11e2-b28d-080027ef73ec
Security:	CVE-2013-4206
Security:	CVE-2013-4207
Security:	CVE-2013-4208
Security:	CVE-2013-4852

Bump PORTREVISION, to get the ports rebuilt with ${CC}.

- Convert to Options NG. Renames GTK option to GTK2 for consistency. - Strip Makefile header. - Make sure that the port build heeds ${CC}, passing it through MAKE_ARGS. - Replace CC-is-clang specific -Wno-empty-body by unconditional -Wno-error. - Remove LIB_DEPENDS ABI versions.

Add CONFLICTS.

Suggested by:	ketas's ports conflicts checker
Feature safe:	yes

- cleanup comments Feature safe: yes

- update png to 1.5.10

Update PuTTY to new upstream security and bug fix release 0.62, and add a new VuXML entry.

Changelog:      http://lists.tartarus.org/pipermail/putty-announce/2011/000017.html
Security:       bbd5f486-24f1-11e1-95bc-080027ef73ec
Feature safe:   yes

Revise OPTIONS wording.

Feature safe: yes

Fix build with GSSAPI under 9.0.

Approved by:	tabthorp (portmgr)
Feature safe:	yes

- Take over maintainership from beat@ along his suggestion,   permit him to take it back or commit without my approval. - Update to upstream version 0.61. - Add OPTIONS for GSSAPI and GTK (both enabled by default).

NOTE: GSSAPI is currently broken on 9-CURRENT because the
  Kerberos in base expects MD2 which isn't provided by OpenSSL.

- mark BROKEN on OSVERSION >= 900000 when GSSAPI is enabled
- heed CFLAGS, CC, WITH_DEBUG, INSTALL_* settings.
- WITHOUT_X11 is now an alias for WITHOUT_GTK
- drop utmp support, the upstream requires a utmpx implementation that
  FreeBSD does not provide in any version.
- Preliminary clang support (adds files/patch-timing.c)
- Refreshed patches.

-remove MD5

- Remove unneeded utmp.h include to fix build on CURRENT

Reported by:	pointyhat via erwin

Update my email address to @FreeBSD.org.

Approved by:	miwi (mentor)

- Pass maintainership to submitter

Submitted by:	"Beat Gätzi" <beat@chruetertee.ch>

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

Drop maintainership

- Add one more MASTER_SITE

- Update to 0.60

PR:		ports/112377
Submitted by:	Dima Panov <fluffy@ael.ru>

- Welcome X.org 7.2 \o/. - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}.

Install puttygen even if you set WITHOUT_GTK since it doesn't require gtk.

PR:		ports/110335
Submitted by:	Kenneth Vestergaard Schmidt<kvs@pil.dk>

Update to 0.59

- Remove 4.x support on my ports

Remove USE_REINPLACE from all categories starting with S

Bump PORTREVISION on glib12/gtk12 consumer ports to ease the upgrade path.

Discussed with:	kris
Approved by:	portmgr (implicit)

- Add SHA256

Change MAINTAINER to my @FreeBSD.org account

Approved by:	flz (mentor)

- Update to 0.58 - Assign maintainership

PR:		80460
Submitted by:	Renato Botelho <freebsd@galle.com.br>

Security update to 0.57.

Security:	http://vuxml.FreeBSD.org/a413ed94-836e-11d9-a9e7-0001020eed82.html
Approved by:	erwin (mentor)

- Security Update to 0.56

- drop maintainership