pkgsrc/security/base, branch pkgsrc_2008Q1

- 11/20/2007 1.3.9 (anne)

2007-11-25T18:09:53Z

- Update to Spanish -- David Gil - Bug 1750697 base_header() is undefined fixed -- Juergen and Kevin Johnson - Bug 1680965 sans lookup fails -- Jordan Wiens - Updated Chinese language file -- Randy - Added Sean Muller as the Project Manager -- Kevin Johnson - Fixed error in contrib/base-rss.php -- Dan - Added INSTALL and INSTALL.rtf files to docs directory -- Sean Muller - Bug 1801192 XSS bug in BASE fixed -- Kevin Johnson and Sean Muller - Bug 1760615 Sort order ignored -- Kevin Johnson and Jordan Weins

Update to 1.3.8

2007-10-20T23:22:08Z

- Fixed base_conf_contents.php to include colored alerts -- Jonathan W Miner - Fixed base_main.php to remove an extra table and repair two column display -- Jonathan W Miner - Added exit() to the redirect to fix security hole -- Jon Hart - removed fpdf file to save room since we are not using them. -- Kevin Johnson - Fixed bug #1723928 Top Right, Database and User not shown -- Kevin Johnson - Added base_header wrapper, please use it instead of header if you're not sure -- GaRaGeD - Fixed Bug #1675094 snort signature information links broken (really a hack!) -- Kevin Johnson - Fixed Bug #1689885 Maybe need count(DISTINCT ip_src) to sort by IP correctly -- Kevin Johnson - Fixed Bug #1649659 Use of archive DB seems broken in "karen" release -- Kevin Johnson - Cleaned a warning -- Marek Cruz - Spanish install guide -- Daniel Medianero

Make it easier to build and install packages "unprivileged", where

2007-07-04T20:54:31Z

the owner of all installed files is a non-root user. This change affects most packages that require special users or groups by making them use the specified unprivileged user and group instead. (1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to unprivileged.mk. These two variables are lists of other bmake variables that define package-specific users and groups. Packages that have user-settable variables for users and groups, e.g. apache and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP}, etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER} and ${UNPRIVILEGED_GROUP}. (2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.

Must be restricted to PHP4 as adodb is not available for PHP5.

2007-06-30T13:47:38Z

Update to 1.3.6

2007-05-18T23:27:22Z

Lots of updates but some highlights in brief: - Added base64 encoding support for ICMP payload additional table in base_qr y_alert.php -- Juergen Leising - Changed input type of the password field to actually be password in setup3 .php -- Nikns - Fixed Time error in searches -- Jeff Kell - Added FQDN to display -- Jonathan W Miner - Fixed issues with graphing -- Kevin J - Updated tons of HTML for complience -- Marek Cruz

Update to 1.2.7

2007-02-17T19:18:24Z

- 8/5/2006 1.2.7 (karen) - Improved HTML output in "base_qry_alert.php" -- Jonathan W Miner - Remove message when 0 alerts -- Jonathan W Miner - PrintBase64PacketPayload fix for payload lenght modulo = 0 -- Juergen Leising - Added empty function to ProtocolFieldCriteria -- Kevin Johnson - Fixed issue if sig_gid was empty -- Valter Santos - Added SnortUnified, a perl replacement for Barnyard -- Jason Brvenik - Updated base-rss.php -- Dan Michitsch

Update to 1.2.5

2006-10-23T18:19:45Z

- Added check for base_users and base_roles tables in base_main.php - Kevin Johnson - Added . to VAR_PUNC to fix query issue - Kevin johnson - Fixed issue with base_users table being required - Kevin Johnson - Added search punctuation fix - Bruce Briggs - Added FQDN to display -- Jonathan W Miner - PrintForm() fixes - Bruce Briggs - Settings for automatic expansion of the IP and Payload Criteria on Search screen - Bruce Briggs - Save the fields entered on the Search screen for Back button proper refilling - Bruce Briggs - RFE 1520185 Add support for managing last_cid - Eric Jacobsen - Changed show_rows to 49 in base_conf.php.dist to fix IE 6/7 bug - Bruce Briggs - Fixed link to FAQ - Juergen Leising - Fixed VAR_BOOLEAN error and some typos in the footer - Eric Jacobsen - Trivial patch to make base_stat_time.php use GET insted of POST to avoid the 'resend data' warning on refresh - GaRaGeD - Added base-rss.php to the contrib section - Dan Michitsch

Update distinfo missed in the update to 1.2.5

2006-06-06T20:09:49Z

Update to 1.2.5

2006-06-06T19:41:43Z

> - 6/4/2006 1.2.5 (sarah) > - Added base64 encoding support for MAC addresses presented on the screen for FLoP extended database -- Juergen Leising > - Added base64 encoding support for rebuild of packet in pcap format for FLoP extended database -- Juergen Leising > - Fixed issue with Oracle and schema version in base_db.inc.php -- Nikns > - Fixed bug when alerts with sig references would fail to archive causing duplicates error -- Nikns > - Added base64 encoding support for ICMP payload additional table in base_qry_alert.php -- Juergen Leising > - Added check for PHP Logging Level against E_NOTICES in setup/index.php -- Nikns > - Fixed bug when certain preprocessor alerts would not be cached (for example arpspoof) -- Nikns > - Added setup/setup_db.inc.php with CreateBASEAG() to resolve redundancy in setup and base_db_setup.php -- Nikns > - Removed unnecessary and broken search index stuff from Create BASE AG, since schemas are already with them -- Nikns > - Added XSSPrintSafe() (array safe htmlspecilchars() function) and made filterSql() use ADOdb qmagic() -- Nikns > - Changed input type of the password field to actually be password in setup3.php -- Nikns > - Filtered all unfiltred (mainly auth system stuff) $_POST and $_GET variables using filterSql() -- Nikns > - Santized all $_SERVER variables to be protected against XSS attacks -- Nikns > - Added "Clear Data Tables" option in base_maintenance.php and "Repair Tables" option to execute CreateBASEAG() -- Nikns > - Make use of FLoP's event reference. Signature name of alert which trigered "Tagged Packet" alert is shown too -- Nikns > - Updated chinese.lang.php -- Johnson Chiang > - Fixed Time error in searches -- Jeff Kell > - Fixed refresh issue with ~ directories -- Kevin Johnson > - Fixed cookie stored data and authentication scheme to correct Nikns' report on session forge issue -- GaRaGeD > - Updated link to the Nessus plug in DB -- Jonathan W Miner > - Fixed display after deleting alerts -- Bruce Briggs > - Fixed Bug #1466392 - Back button doesn't work after refresh. -- Juergen Leising > - Patches from jhart@spoofed.org to add missing ICMP and TCP type and codes - GaRaGeD > - add support for ICMP redirect decoding. - Jon Hart > - add decoding support for ICMP source quench and ICMP parameter problem - Jon Hart > - split up "flags" into DF and MF, much like tcp flags are currently handled - Jon Hart

Rename all PHP 4 packages to php4-, all PHP 5 packages to php5-,

2006-06-02T18:27:54Z

all PEAR packages to php?-pear-* and all Apache packages to ap13-* or ap2-* respectively. Add new variables to simplify the Makefile handling. Add CONFLICTS on the old names. Reset revisions of bumped packages. ap-php will now depend on the default Apache and PHP version. All programs using it have an implicit option of the Apache version as well. OK from jlam@ and adrianp@.

pkgsrc/security/base, branch pkgsrc_2008Q1

- 11/20/2007 1.3.9 (anne)

Update to 1.3.8

Make it easier to build and install packages "unprivileged", where

Must be restricted to PHP4 as adodb is not available for PHP5.

Update to 1.3.6

Update to 1.2.7

Update to 1.2.5

Update distinfo missed in the update to 1.2.5

Update to 1.2.5

Rename all PHP 4 packages to php4-*, all PHP 5 packages to php5-*,

Rename all PHP 4 packages to php4-, all PHP 5 packages to php5-,