security/nmap-devel: Fix mksock_bind_addr EINVAL
Fix mksock_bind_addr EINVAL on FreeBSD in service/connect scans.
From https://github.com/nmap/nmap/pull/3439:
Summary
Fixes #3438 — mksock_bind_addr(): Bind to <IP>:0 failed ... Invalid argument (22)
on FreeBSD when running -sV (service version scan).
Root Cause
After commit eb79c42, nsock_iod_set_localaddr() is called for every service
probe whenever a source address can be determined via routing — not only when
the user explicitly requests source binding via -S or -e.
On FreeBSD, the subsequent bind() call fails with EINVAL because the stored
addrlen may equal sizeof(sockaddr_storage) (128 bytes) rather than the
protocol-specific size the POSIX-strict kernel requires:
[23 lines not shown]
security/nmap: Update to 7.991 and rework port
* Remove obsolete mirror in MASTER_SITES
* Import upstream PR #3439 [1]
* Convert multiple variables from ?= to =
* Remove old historical references
* Remove .if !defined(MASTERDIR) definition
* Add libpcap from ports as a permanent dependency, also removes
local patch for bundled version
* Update pcre2 dependency definition
* Sort USES
* Unbundle lua, also removes local patches for bundled version
* Don't extract unbundled libraries
* Remove MAKE_JOBS_UNSAFE
* Rename SSH2 to LIBSSH2 for consistency with tree
* Remove DOCS from OPTIONS_DEFAULT as framework always enables DOCS
* Simplify LibreSSL guard
* Follow Porters Handbook's example about stripping binaries in
post-install section
[5 lines not shown]
net/mosquitto: Rework port
* Unbundle uthash as recommended by Porters Handbook
* Unbundle (lib)websockets as recommended by Porters Handbook
* Make (lib)websockets mandatory, default in all major distros
* Use sqlite helper
* Prefer libedit as upstream provides no way of selecting either libedit
or readline and it'll try to find libedit first
* Remove hack for adding path(s) to localbase, use helper instead
* Disable WITH_HTTP_API as port will otherwise pick up libmicrohttpd
in unclean environments
* Remove REINPLACE_CMD for CMakeLists.txt files as it does nothing
* Remove hardcoded cjson path
PR: 297568
Tested by: leres (maintainer)
math/R-cran-alabama: update 2015.3-1 to 2025.1.0
Upstream changelog: constrOptim.nl now returns a convergence code
when only equality constraints are present.
Submitted by: chris.longros at gmail.com
Differential Revision: https://reviews.freebsd.org/D56058
mail/dovecot24: new port
- adding the new version 2.4 of dovecot, while keeping 2.3 in place
- please note that the config syntax has changed between 2.3
and 2.4 and needs to be manually adapted, so use/upgrade with care
PR: 286695
Reported by: Ian Dickens <ian_dickens at icloud.com>
Author: Jordan Ostreff <jordan at ostreff.info>
Co-authored-by: Sebastian Oswald <sko at rostwald.de>
Discussed with: Sebastian Oswald <sko at rostwald.de>,
Eugene R <genie at geniechka.ru>,
Herbert J. Skuhra <herbert at gojira.at>,
Christos Chatzaras <chris at cretaforce.gr>,
and others
Tested by: Jordan Ostreff <jordan at ostreff.info>
multimedia/jellyfin-ffmpeg7: don't advertise private libraries
The bundled libs install into a private prefix and are loaded by
ffmpeg/ffprobe through --enable-rpath, so nothing else links against them.
Drop USE_LDCONFIG and trim INSTALL_TARGET (no install-headers) to match
upstream's packaging.
Only for archs amd64, aarch64 -- upstream targets 64bit
Suggested by: arrowd
security/cyberchef: Update to 11.4.0
re: https://github.com/gchq/CyberChef/releases/tag/v11.4.0
The naming conventions of the CyberChef project have changed.
Trying to use the build-in GH macros is futile.
This patch stops using them so we can download the right tarball.
My thanks to mce@ for this via via the PR.
PR: 297688
Sponsored by: yes
