pkgsrc/security, branch pkgsrc_2008Q2[no description]https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2008Q22008-08-19T00:26:03Zpullup ticket #2489 - requested by manu2008-08-19T00:26:03Zrtrrtr2008-08-19T00:26:03Zurn:sha1:1a62e99454c177ccf244eeb66d9daa3ff111b24a
ipsec-tools: update package for cve
revisions pulled up:
pkgsrc/security/ipsec-tools/Makefile 1.28
pkgsrc/security/ipsec-tools/distinfo 1.15
Module Name: pkgsrc
Committed By: manu
Date: Sat Aug 16 06:55:18 UTC 2008
Modified Files:
pkgsrc/doc: CHANGES-2008
pkgsrc/security/ipsec-tools: Makefile distinfo
Log Message:
Update to ipsec-tools 0.7.1, fixes CVE-2008-3652
Changes since the 0.6 branch:
0.7.1 - 23 July 2008
o Fixes a memory leak when invalid proposal received
o Some fixes in DPD
o do not set default gss id if xauth is used
o fixed hybrid enabled builds
o fixed compilation on FreeBSD8
o cleanup in network port value manipulation
o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in
purge_ipsec_sp
i()
o Generates a log if cert validation has been disabled by
configuration
o better handling for pfkey socket read errors
o Fixes in yacc / bison stuff
o new plog() macro (reduced CPU usage when logging is disabled)
o Try to works better with huge SPD/SAD
o Corrected modecfg option syntax
o Many other various fixes...
0.7 - 09 August 2007
o Xauth with pre-shared key PSK
o Xauth with certificates
o SHA2 support
o pkcs7 support
o system accounting (utmp)
o Darwin support
o configuration can be reloaded
o Support for UNIQUE generated policies
o Support for semi anonymous sainfos
o Support for ph1id to remoteid matching
o Plain RSA authentication
o Native LDAP support for Xauth and modecfg
o Group membership checks for Xauth and sainfo selection
o Camellia cipher support
o IKE Fragment force option
o Modecfg SplitNet attribute support
o Modecfg SplitDNS attribute support ( server side )
o Modecfg Default Domain attribute support
o Modecfg DNS/WINS server multiple attribute support
pullup ticket #2497 - requested by kefren2008-08-18T12:26:48Zrtrrtr2008-08-18T12:26:48Zurn:sha1:764132b4eb6fc0b888e5613eb27fb09647443c01
gnutls: update package for fixes
revisions pulled up:
pkgsrc/security/gnutls/Makefile 1.71
pkgsrc/security/gnutls/PLIST 1.32
pkgsrc/security/gnutls/distinfo 1.45
pkgsrc/security/gnutls/patches/patch-ad r0
Module Name: pkgsrc
Committed By: kefren
Date: Wed Jul 30 17:17:21 UTC 2008
Modified Files:
pkgsrc/security/gnutls: Makefile PLIST distinfo
Removed Files:
pkgsrc/security/gnutls/patches: patch-ad
Log Message:
update to gnutls-2.4.1
Changes:
** libgnutls: Fix local crash in gnutls_handshake. [GNUTLS-SA-2008-2]
** libgnutls: Fix memory leaks when doing a re-handshake.
** Fix compiler warnings.
** Fix ordering of -I's to avoid opencdk.h conflict with system headers.
** srptool: Fix a problem where --verify check does not succeed.
pullup ticket #2459 requested by tnn2008-07-25T09:21:40Zrtrrtr2008-07-25T09:21:40Zurn:sha1:1ccd1c9555ffb42273a78f0c231a3c0e850056e7
openssh: patch for X11 forwarding issue on HP-UX
revisions pulled up:
pkgsrc/security/openssh/Makefile 1.189
pkgsrc/security/openssh/distinfo 1.70
pkgsrc/security/openssh/patches/patch-at 1.7
Module Name: pkgsrc
Committed By: tnn
Date: Thu Jul 24 16:25:47 UTC 2008
Modified Files:
pkgsrc/security/openssh: Makefile distinfo
Added Files:
pkgsrc/security/openssh/patches: patch-at
Log Message:
Add patch from OpenSSH 5.1 that fixes an X11 fwd security issue on
HP-UX. Bump PKGREVISION.
Make nessus-core honor PKG_SYSCONFBASE for configuration files.2008-07-01T21:27:38Zbadbad2008-07-01T21:27:38Zurn:sha1:c9be38bb5cbc81cfdfc03a2a6dea32207e51c712
While here, move the sharedstatedir to VARBASE where it belongs.
Bump PKGREVISION.
Treat DragonFly same as other *BSDs.2008-07-01T13:46:02Zobacheobache2008-07-01T13:46:02Zurn:sha1:1eaf0ee2e3aad52a8367276d85c029880caa9563
Patch provided by Hasso Tepper in PR 38878.
Update sudo package to 1.6.9p17.2008-06-30T15:53:41Ztacataca2008-06-30T15:53:41Zurn:sha1:1390b17c14eafdbed53ae28d659869fe33b92722
660) The -i flag should imply resetting the environment, as it did in
sudo version prior to 1.6.9. Also, the -i and -E flags are
mutually exclusive.
661) Fixed the configure test for dirfd() under Linux.
662) Fixed test for whether -lintl is required to link.
663) Changed how sudo handles the child process when sending mail.
This fixes a problem on Linux with the mail_always option.
664) Fixed a problem with line continuation characters inside of
quoted strings.
-pflkm2008-06-26T21:01:25Zpeterpeter2008-06-26T21:01:25Zurn:sha1:c833cf78b2f07e632b805e3b442e67ff91500393Remove security/pflkm, it's outdated and unmaintained.2008-06-26T21:01:00Zpeterpeter2008-06-26T21:01:00Zurn:sha1:b8f755258ca2b5a2c49babc4d095fa89e3b29da9
Approved by agc.
don't pass DESTDIR in CPPFLAGS, from Stephen Borrill2008-06-25T18:17:33Zdrochnerdrochner2008-06-25T18:17:33Zurn:sha1:f9fd33ea048ba1c2b404e90dbc1c50d27ea365dfDESTDIR support.2008-06-22T23:05:00Zjoergjoerg2008-06-22T23:05:00Zurn:sha1:964621e6b8d5f3ad55d4deb21c3de4b7932604ef