06:02 Robert Clausecker (fuz)  Author: Franco Fichtner

security/snuffleupagus: update to 0.10.0

PHP 8.3 is now supported.

Changelog: https://github.com/jvoisin/snuffleupagus/releases/tag/v0.10.0

PR:		274372

    e6fe46f

10:01 Li-Wen Hsu (lwhsu)  Author: Franco Fichtner

security/snuffleupagus: Update to 0.9.0 and enable PHP 8.2

PR:		272888

    12a42e8

14:57 Muhammad Moinur Rahman (bofh) 

*/*: Mark IGNORE_WITH_PHP for 8.3.X

Approved by:	portmgr (blanket)
Sponsored by:	Bounce Experts

    4ca6b84

18:09 Muhammad Moinur Rahman (bofh) 

*/*: Remove merged or non-existent USE_PHP directives

- Remove USE_PHP=hash which is available in default php installation of
  all versions of php
  * security/pear-Horde_Crypt_Blowfish: Remove OPTION MHASH
- Remove USE_PHP=json which is available in default php installation of
  all versions of php
  * devel/pear-PHPTAL: Remove OPTION JSON
  * www/ilias: Remove OPTION SCORM2004
- Remove USE_PHP=mssql which is no longer available in php from php80
  and later and has been replaced with sqlsrv module which is Windows
  only
  * www/codeigniter: Remove OPTION MSSQL
  * www/moodle311: Remove OPTION MSSQL
  * www/moodle39: Remove OPTION MSSQL
  * www/moodle40: Remove OPTION MSSQL
  * www/moodle41: Remove OPTION MSSQL
- Remove USE_PHP=openssl which is available in default php installation
  of all versions of php
  * databases/phpmyadmin: Remove OPTION OPENSSL
  * databases/phpmyadmin5: Remove OPTION OPENSSL
  * security/pear-Horde_Crypt_Blowfish: Remove OPTION OPENSSL
  * www/nextcloud: Remove OPTION SSL
  * www/owncloud: Remove OPTION SSL
- Remove USE_PHP=pcre which is available in default php installation of
  all versions of php
  * sysutils/racktables: Remove OPTION PCRE
- Remove USE_PHP=postgresql which should be USE_PHP=pgsql and update
  following ports
  * www/typo3-11
  * www/typo3-12
- Remove USE_PHP=pdf which is no longer available as php module
  * databases/phpmyadmin: Remove OPTION PDF
- Remove USE_PHP=spl which is available in default php installation of
  all versions of php
- Remove USE_PHP=sqlsrv which was never imported into FreeBSD as that is
  Windows only php module
  * www/typo3-11: Remove OPTION SQLSRV
  * www/typo3-12: Remove OPTION SQLSRV
- Bump where DEFAULT OPTIONS are affected

Sponsored by:	Bounce Experts

Approved by:	portmgr(blanket)

    0ac3a69

17:01 Fernando Apesteguía (fernape)  Author: Franco Fichtner

security/snuffleupagus: update to 0.8.3

ChangeLog: https://github.com/jvoisin/snuffleupagus/releases/tag/v0.8.3

New features

 * Add the ability to dump the parameter passed to eval
 * Add the ability to match on eval's parameter
 * Add optional extended checks for readonly_exec
 * Add config error for ini rules with identical key
 * Add disabled functions return type to config export

Breaking Changes

 * Mix the stacktrace in the sha256 for the filename of .dump()

Bug fixes

 * Make it actually possible to configure sloppy comparison on latests PHP7
 * Allow file:// prefix in include() wich readonly_exec mode
 * Fix a possible crash when exporting function list
 * Fix a minor memory leak when parsing cookie-related configuration

PR:		266291
Reported by:	franco@opnsense.org (maintainer)

    7d1ee10

21:10 Stefan Eßer (se) 

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

    b7f0544

00:08 Muhammad Moinur Rahman (bofh) 

*/*: Ignore with php82

    214a6c5

14:41 Nuno Teixeira (eduardo)  Author: Franco Fichtner

security/snuffleupagus: Update to 0.8.2

ChangeLog: https://github.com/jvoisin/snuffleupagus/releases/tag/v0.8.2

PR:		264544

    e28b761

08:09 Mathieu Arnold (mat) 

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

    cf118cc

14:31 Mathieu Arnold (mat) 

Remove # $FreeBSD$ from Makefiles.

    305f148

10:09 jhale 

security/snuffleupagus: Update to 0.7.0

PR:		252882
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)

 

08:39 fernape 

security/snuffleupagus: update to 0.5.1, build fix

From ChangeLog: https://github.com/jvoisin/snuffleupagus/releases/tag/v0.5.1

 * Add support for syslog
 * Improve OSX support
 * Improve marginally of php8+ compatibility
 * Improve php7.4 compatibility
 * Improve the default ruleset
 * Improve the documentation
 * Improve the gitlab CI

Includes build fix for -fno-common issue.

Pet linters.

PR:	248974
Submitted by:	franco@opnsense.org (maintainer)
MFH:	2020Q3 (build fix, -fno-common)

 

20:29 swills 

security/snuffleupagus: update to 0.5.0

PR:		238693
Submitted by:	avkarenow@o2.pl
Approved by:	Franco Fichtner <franco@opnsense.org> (maintainer)

 

15:47 rene 

Remove stale IGNORE_WITH_PHP=56 values.

Reminded by:	sunpoet

 

11:47 joneum 

Update to 0.4.1

Changelog: https://github.com/nbs-system/snuffleupagus/releases/tag/v0.4.1

PR:		234270
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Sponsored by:	Netzkommune GmbH

 

13:40 swills 

security/snuffleupagus: ignore with PHP 7.3

PHP 7.3 is not yet supported

PR:		232111
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)

 

13:22 arved 

Update to 0.4.0

PR:		231376
Submitted by:	maintainer

 

16:51 swills 

security/snuffleupagus: update to 0.3.0

PR:		230346
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)

 

16:13 joneum 

security/snuffleupagus: Update to 0.2.2

Changelog: https://github.com/nbs-system/snuffleupagus/releases/tag/v0.2.2

PR:		227024
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)

 

19:48 mat 

Introduce PHP flavors.

  Ports using USES=php:phpize, php:ext, php:zend, and php:pecl are now
  flavored.  They will automatically get flavors (php56, php70, php71, php72)
  depending of the versions they support (set with IGNORE_WITH_PHP).  As a
  consequence, ports using USES=pear and USES=horde are also flavored.

PR:		226242
Submitted by:	mat
Exp-run by:	antoine
Approved by:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D14208

 

10:42 pi 

security/snuffleupagus: update 0.1.0 -> 0.2.1

PR:		225593
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Relnotes:	https://github.com/nbs-system/snuffleupagus/releases

 

13:11 joneum 

New port: security/snuffleupagus

Snuffleupagus is a PHP7+ module designed to drastically raise the cost
of attacks against websites.  This is achieved by killing entire bug
classes and providing a powerful virtual-patching system, allowing the
administrator to fix specific vulnerabilities without having to touch
the PHP code.

WWW: https://snuffleupagus.readthedocs.io/

PR:		224545
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Approved by:	rene (mentor)
Differential Revision:	https://reviews.freebsd.org/D13606