FORTIFY_SOURCE in FreeBSD

[kavitha bk]

Hi

What is the current status of FORTIFY_SOURCE in FreeBSD?



We use BSD 11 in which I see

hardening-check /usr/bin/su

/usr/bin/su:

Position Independent Executable: no, normal executable!

Stack protected: no, not found!

Fortify Source functions: unknown, no protectable libc functions used

Read-only relocations: no, not found!

Immediate binding: no, not found!



Is it recommended to enable by default?



Thanks

Kavitha
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

OpenSSL multiple names?

[@lbutlr]

When trying to port upgrade mariadb it reinstalled openssl (just about 
everything for the last month has reinstalled openssl)

I get this after a successful build

===>   Registering installation for openssl-1.1.1d,1
Installing openssl-1.1.1d,1...
pkg-static: openssl-1.1.1d,1 conflicts with openssl111-1.1.1d

There is /usr/ports/security/openssl

So why are there two different formats on the port name and how do I fix this?


___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

INDEX now builds successfully on 11.x

[Ports Index build]

___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

INDEX build failed for 11.x

[Ports Index build]

INDEX build failed with errors:
Generating INDEX-11 - please wait..--- describe.accessibility ---
--- describe.arabic ---
--- describe.archivers ---
--- describe.astro ---
--- describe.audio ---
--- describe.benchmarks ---
--- describe.biology ---
--- describe.cad ---
--- describe.chinese ---
--- describe.comms ---
--- describe.converters ---
--- describe.databases ---
--- describe.deskutils ---
--- describe.devel ---
--- describe.dns ---
--- describe.editors ---
--- describe.emulators ---
--- describe.finance ---
--- describe.french ---
--- describe.ftp ---
[...]
--- describe.security ---
--- describe.shells ---
--- describe.sysutils ---
--- describe.textproc ---
--- describe.sysutils ---
sh: freebsd-version: not found
make[5]: "/home/indexbuild/tindex/ports/sysutils/etc_os-release/Makefile" line 
18: warning: "freebsd-version -u" returned non-zero status
--- describe.ukrainian ---
--- describe.vietnamese ---
--- describe.www ---
--- describe.x11 ---
--- describe.x11-clocks ---
--- describe.x11-drivers ---
--- describe.x11-fm ---
--- describe.x11-fonts ---
--- describe.x11-servers ---
--- describe.x11-themes ---
--- describe.x11-toolkits ---
--- describe.x11-wm ---
 Done.
make_index: /home/indexbuild/tindex/ports/www/rubygem-rails60: no entry for 
/home/indexbuild/tindex/ports/devel/rubygem-webpacker-rails60

Committers on the hook:
 bofh farrokhi gerald linimon sunpoet tcberner 

Most recent SVN update was:
Updating '.':
Udatabases/pymongo/Makefile
Udatabases/pymongo/distinfo
Udatabases/geoserver-mysql-plugin/Makefile
Udatabases/geoserver-mysql-plugin/distinfo
Udatabases/Makefile
Adatabases/rubygem-globalid-rails60
Adatabases/rubygem-globalid-rails60/Makefile
Adatabases/rubygem-globalid-rails60/distinfo
Adatabases/rubygem-globalid-rails60/pkg-descr
Adatabases/rubygem-activerecord60
Adatabases/rubygem-activerecord60/Makefile
Adatabases/rubygem-activerecord60/distinfo
Adatabases/rubygem-activerecord60/pkg-descr
Adatabases/rubygem-activemodel60
Adatabases/rubygem-activemodel60/Makefile
Adatabases/rubygem-activemodel60/distinfo
Adatabases/rubygem-activemodel60/pkg-descr
Udatabases/py-tiledb/Makefile
Udatabases/py-tiledb/distinfo
Udatabases/py-fakeredis/Makefile
Udatabases/py-fakeredis/distinfo
Udatabases/tiledb/Makefile
Udatabases/tiledb/distinfo
Unet-mgmt/fastnetmon/Makefile
Ugraphics/geoserver/Makefile
Ugraphics/geoserver/distinfo
Ugraphics/geoserver/pkg-plist
Usysutils/fusefs-sshfs/Makefile
Usysutils/fusefs-sshfs/distinfo
Ulang/gcc10-devel/Makefile
Ulang/gcc10-devel/distinfo
Umath/armadillo/Makefile
UMOVED
Uwww/rubygem-rails52/Makefile
Uwww/rubygem-rails5/Makefile
Uwww/rubygem-rails50/Makefile
Uwww/Makefile
Awww/rubygem-responders-rails60
Awww/rubygem-responders-rails60/Makefile
Awww/rubygem-responders-rails60/distinfo
Awww/rubygem-responders-rails60/pkg-descr
Awww/rubygem-railties60
Awww/rubygem-railties60/Makefile
Awww/rubygem-railties60/distinfo
Awww/rubygem-railties60/pkg-descr
Awww/rubygem-rails60
Awww/rubygem-rails60/Makefile
Awww/rubygem-rails60/distinfo
Awww/rubygem-rails60/pkg-descr
Awww/rubygem-actionpack60
Awww/rubygem-actionpack60/Makefile
Awww/rubygem-actionpack60/distinfo
Awww/rubygem-actionpack60/pkg-descr
Awww/rubygem-actioncable60
Awww/rubygem-actioncable60/Makefile
Awww/rubygem-actioncable60/distinfo
Awww/rubygem-actioncable60/pkg-descr
Uwww/py-django-redis/Makefile
Uwww/py-dj22-django-redis/Makefile
Ddevel/rubygem-web-console-rails5
Ddevel/rubygem-web-console-rails50
Ddevel/rubygem-web-console-rails52
Udevel/Makefile
Adevel/rubygem-web-console3-rails52
Adevel/rubygem-web-console3-rails52/Makefile
Adevel/rubygem-web-console3-rails52/distinfo
Adevel/rubygem-web-console3-rails52/pkg-descr
Adevel/rubygem-web-console3-rails5
Adevel/rubygem-web-console3-rails5/Makefile
Adevel/rubygem-web-console3-rails5/distinfo
Adevel/rubygem-web-console3-rails5/pkg-descr
Adevel/rubygem-web-console3-rails50
Adevel/rubygem-web-console3-rails50/Makefile
Adevel/rubygem-web-console3-rails50/distinfo
Adevel/rubygem-web-console3-rails50/pkg-descr
Adevel/rubygem-web-console-rails60
Adevel/rubygem-web-console-rails60/Makefile
Adevel/rubygem-web-console-rails60/distinfo
Adevel/rubygem-web-console-rails60/pkg-descr
Adevel/rubygem-sprockets-rails-rails60
Adevel/rubygem-sprockets-rails-rails60/Makefile
Adevel/rubygem-sprockets-rails-rails60/distinfo
Adevel/rubygem-sprockets-rails-rails60/pkg-descr
Adevel/rubygem-jbuilder-rails60
Adevel/rubygem-jbuilder-rails60/Makefile
Adevel/rubygem-jbuilder-rails60/distinfo
Adevel/rubygem-jbuilder-rails60/pkg-descr
Adevel/rubygem-devise-rails60
Adevel/rubygem-devise-rails60/Makefile
Adevel/rubygem-devise-rails60/distinfo
A

p5-Locale-Language?

[Doug Sampson]

How do I go about requesting a new Perl port for the Locale::Language module 
that was taken out of Perl 5.30? www/foswiki depends on that module and some of 
its functions have not worked since I upgraded the wiki system to 5.30. Since I 
use ports exclusively, I do not wish to revert to cpan to install such modules.

~Doug

___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: Why are there 1981 p5-* subdirectories in /usr/ports/devel?

[Adam Weinberger]

On Tue, Feb 4, 2020 at 1:18 PM Kurt Jaeger  wrote:
>
> Hi!
>
> > I find the number of perl subdirectores in the /usr/ports/devel
> > directory pretty annoying to navigate.
> > Is there a reason there needs to be 1981 of them?
>
> There are approx. 1300 python ports in devel and approx. 1100 ruby ports.
>
> > Couldn't there be a better
> > way to organize all of the perl ports so that they don't clutter
> > up the devel directory so much?
>
> Up to now we had no time to implent a different solution.
>
> It's no easy task, therefore it will take quite some investment
> in development time to fix this.

At one point, bapt did the legwork to support three-level port
directories. Perhaps it's time to implement /usr/ports/devel/p5/.

# Adam


-- 
Adam Weinberger
ad...@adamw.org
https://www.adamw.org
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

[jes...@cisco.com: [Clamav-announce] ClamAV?? blog: ClamAV 0.102.2 security patch released]

[The Doctor via freebsd-ports]

Heads up security/clamav team.


- Forwarded message from "Joel Esler (jesler)"  -

Date: Wed, 5 Feb 2020 17:29:00 +
From: "Joel Esler (jesler)" 
To: "clamav-annou...@lists.clamav.net" ,
"clamav-us...@lists.clamav.net" ,
"clamav-de...@lists.clamav.net" 
Subject: [Clamav-announce] ClamAV?? blog: ClamAV 0.102.2 security patch
released
x-mailer: Apple Mail (2.3608.60.0.2.5)


https://blog.clamav.net/2020/02/clamav-01022-security-patch-released.html

Today, we're publishing 0.102.2. Navigate to ClamAV's 
downloads page to download the release 
materials.
0.102.2
ClamAV 0.102.2 is a security patch release to address the following issues.

  *   
CVE-2020-3123: A 
denial-of-service (DoS) condition may occur when using the optional credit card 
data-loss-prevention (DLP) feature. Improper bounds checking of an unsigned 
variable resulted in an out-of-bounds read, which causes a crash.
  *   Significantly improved the scan speed of PDF files on Windows.
  *   Re-applied a fix to alleviate file access issues when scanning RAR files 
in downstream projects that use libclamav where the scanning engine is 
operating in a low-privilege process. This bug was originally fixed in 0.101.2 
and the fix was mistakenly omitted from 0.102.0.
  *   Fixed an issue where freshclam failed to update if the database version 
downloaded is one version older than advertised. This situation may occur after 
a new database version is published. The issue affected users downloading the 
whole CVD database file.
  *   Changed the default freshclam ReceiveTimeout setting to 0 (infinite). The 
ReceiveTimeout had caused needless database update failures for users with 
slower internet connections.
  *   Correctly display the number of kilobytes (KiB) in progress bar and 
reduced the size of the progress bar to accommodate 80-character width 
terminals.
  *   Fixed an issue where running freshclam manually causes a daemonized 
freshclam process to fail when it updates because the manual instance deletes 
the temporary download directory. The freshclam temporary files will now 
download to a unique directory created at the time of an update instead of 
using a hardcoded directory created/destroyed at the program start/exit.
  *   Fix for freshclam's OnOutdatedExecute config option.
  *   Fixes a memory leak in the error condition handling for the email parser.
  *   Improved bound checking and error handling in ARJ archive parser.
  *   Improved error handling in PDF parser.
  *   Fix for memory leak in byte-compare signature handler.
  *   Updates to the unit test suite to support libcheck 0.13.
  *   Updates to support autoconf 2.69 and automake 1.15.

Special thanks to the following people for code contributions and bug reports:


  *   Antoine Desch??nes
  *   Eric Lindblad
  *   Gianluigi Tiesi
  *   Tuomo Soini

Please join us on the ClamAV mailing lists 
for further discussion. Thanks!

___

clamav-announce mailing list
clamav-annou...@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-announce

http://www.clamav.net/contact.html#ml


- End forwarded message -

-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
https://www.empire.kred/ROOTNK?t=94a1f39b  Look at Psalms 14 and 53 on Atheism
Sometimes it is the greediest giving things away.  -unknown
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

security/openssl: 1.1.1d in 2020Q1 still vulnerable?

[Dan McGrath]

Hi,

Was just noticing that the 2020Q1 port for OpenSSL was still showing up
with 11 different CVE's, yet I noticed that the commit [1] in r511808 says
it fixed 9e0c6f7a-d46d-11e9-a1c7-b499baebfeaf, yet it still shows up in pkg
audit for CVE-2019-1549 and CVE-2019-1547.

Any idea what the story is here?

[1] - https://svnweb.freebsd.org/ports?view=revision=511808


Thanks,

Danny McGrath
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Re: xterm-353

[Robert Huff]

Kevin Oberman writes:
>  > Where would I find User Agent Switcher by Linder?  Would it be on a
>  > Mozilla site, and would it work with SeaMonkey?
>  >
>  > Would the several Firefox or SeaMonkey extensions have similar
>  > functionality?
>
>  It's available through Firefox from about:addons. It is the one by Linder,
>  one of at eat three extensions of the same name. I don't know about
>  SeaMonkey. Does it support the extension interface like Firefox? If so, it
>  will probably work. You might also check the website at
>  http://mybrowseraddon.com/useragent-switcher.html

Seamonkey - which was my default browser until it was no longer
updated -   came with this ability built in.  The only problem was the
list of alternate identities was vintage, like, 2000 with no way (that
I knew of)  to change it.


Respectfully,


Robert Huff



___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"