summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2006-07-19Drop support for LTCONFIG_OVERRIDE. For quite a long time, pkgsrcjlam1-2/+1
had actually been ignoring LTCONFIG_OVERRIDE anyway and just using the default LIBTOOL_OVERRIDE to replace libtool scripts in packages. This just formalizes the fact that LTCONFIG_OVERRIDE is not used meaningfully by pkgsrc.
2006-07-18Move from www.thc.org to thc.segfault.netadrianp2-7/+9
2006-07-17Update to 1.4.1:wiz3-7/+8
* Version 1.4.1 (released 2006-06-14) ** Replaced inactive ifdefs to enable openpgp support in test programs. ** Fixed bug in OpenPGP authentication handshake. ** Fixed typographical in man pages. ** Build fixes of the manual. ** Added Swedish translation. ** API and ABI modifications: No changes since last version.
2006-07-14Minor typo fix.adrianp1-2/+2
2006-07-13This is pure Perl, no compiler required.heinz1-1/+2
2006-07-13Update libfwbuilder and fwbuilder to 2.0.12. Bugfixes only.bad7-19/+21
2.0.12: Bugs fixed in this release: bug #1455772: Implement more portable fix for converting UTF-8 in comments. The previous one broke the Windows installer. 2.0.11: Bugs fixed in this release: * fixes to make code compile with g++ 4.1. * bug #1455772: Properly convert comments to/from UTF-8 to ensure the script is not corrupted when copied to the firewall * bug #1455748: "make firewall script executable". Bugs fixed in policy compiler for iptables: * bug #1375432: avoid using '-m state' twice for stateless rules with with custom services. * bug#1364060: change shell pattern to match names of conntrack modules in Linux 2.6. Bugs fixed in policy compiler for ipfilter: * bug #1386226: removed nat.conf when nat rules are removed. * bug #1393004: use 'egrep -s' on Solaris.
2006-07-13Convert digest dependency to a USE_TOOLS dependency.jlam1-2/+2
2006-07-11Update to prelude-lml 0.9.6. Changes:shannonjr4-17/+17
- Fix a bug where some rules marked silent would trigger an alert. - Load Sonicwall and Spamassassin ruleset by default. - Fix rule syntax problem in Sonicwall ruleset. - Fix rule indexing problem in Squid ruleset. - Postfix rule consistency fix.
2006-07-11The yield syntax used in one of the modules is not supported byjoerg1-2/+2
Python 2.2, so mark it as 2.3+ only.
2006-07-10Fixed two pkglint warnings.rillig1-2/+2
2006-07-09- made sure skeyprune uses the correct perl binaryschwarz4-2/+62
- made sure that troff-style man pages are used on every platform - some hacks to add IRIX 5 support in hacks.mk
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam50-100/+100
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam50-50/+100
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-08Don't try and use assembler when building 64bit on Solaris. It gets itmarkd1-1/+5
wrong for both amd64 and sparc. Fixes PR pkg/32648 and possibly PR pkg/33030.
2006-07-08Solaris grep doesn't deal well with the binary output of tar when testingmarkd2-1/+15
if tar supports "ustar" so feed through strings before grep. Fixes PR pkg/33776.
2006-07-07Add an explicit run-time dependency on perl because these packagesjlam1-3/+3
install perl scripts. Bump the PKGREVISION for the dependency change.
2006-07-07LIBTOOL_OVERRIDE generally doesn't need to be specified anymore... justjlam1-2/+1
set OVERRIDE_DIRDEPTH to find any libtool scripts deeper in the WRKSRC tree unless they're named something other than "libtool". SHLIBTOOL_OVERRIDE generally doesn't need to be specified either -- just define it to the empty list and shlibtool-override will look for libtool scripts.
2006-07-05Depend on security/kth-krb4 to make this buildwiz1-5/+8
on NetBSD-current (where kerberosIV was removed). Bump PKGREVISION for dependency change.
2006-07-05Sweep pkgsrc and convert packages that included intltool/buildlink3.mkjlam4-12/+8
to use instead "USE_TOOLS+=intltool". Remove now unused intltool/buildlink3.mk
2006-07-05Back out previous and do the same thing more generally for all platforms.jlam6-13/+26
Since the heimdal install process will install additional headers in ${PREFIX}/include/krb5 depending on what the configure process detects, simply query the source Makefile at install-time for the extra headers that it will install and dynamically add them to the PLIST.
2006-07-04+py-paramikodrochner1-1/+2
2006-07-04add py-paramiko-1.6, a python extension implementing the ssh2 protocoldrochner4-0/+136
2006-07-04add one...drochner1-0/+20
2006-07-04update to 0.3.5drochner2-8/+8
changes: - Fix asn1_octet_der to handle writes of zero-length buffers, before it did not write the ASN.1 length for a zero-length buffer. This caused ASN.1 encodings to be incorrect on 64-bit platforms. - Add self test that attempt to trigger the above bug. - Fix test of -Wno-pointer-sign. - Improve cross-compilation to MinGW by using AC_LIBTOOL_WIN32_DLL.
2006-07-03Update to 1.4.4:wiz3-35/+6
Noteworthy changes in version 1.4.4 (2006-06-25) ------------------------------------------------ * User IDs are now capped at 2048 byte. This avoids a memory allocation attack (see CVE-2006-3082). [was already fixed in pkgsrc] * Added support for the SHA-224 hash. Like the SHA-384 hash, it is mainly useful when DSS (the US Digital Signature Standard) compatibility is desired. * Added support for the latest update to DSA keys and signatures. This allows for larger keys than 1024 bits and hashes other than SHA-1 and RIPEMD/160. Note that not all OpenPGP implementations can handle these new keys and signatures yet. See "--enable-dsa2" in the manual for more information.
2006-07-02Fixed unprivileged builds.rillig1-1/+7
2006-07-02Solaris does not have err.h, glob.h, ifaddrs.h and vis.h compatible withmarkd2-2/+7
heimdal, so heimdal installs its own. Add them in PLIST.SunOS Fixes PR pkg/33656. Bump PKGREVISION.
2006-07-02This package needs expect(1). Bumped PKGREVISION.rillig1-2/+3
2006-07-01Forgotten patchsum update.joerg1-2/+2
2006-06-30Needs Python 2.2+joerg1-1/+2
2006-06-28Use config file framework. Keep the permission of the original codejoerg4-4/+39
for the installed version of the configuration file, but not the example. Bump revision.
2006-06-26Back out changes unrelated to last security update.shannonjr1-9/+6
2006-06-24Security fix for CVE-2006-3082:salo3-2/+31
"parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length, which could lead to an integer overflow, as demonstrated using the --no-armor option." Patch from GnuPG CVS repository. Bump PKGREVISION.
2006-06-23Backport fix for CVE-2006-3082 from GnuPG: trunk/g10/shannonjr4-14/+40
2006-06-17Fixed the set of installed files when the "qt" or "gtk" options arerillig3-27/+37
selected. Fixed pkglint warnings. Bumped PKGREVISION.
2006-06-16Support checking passwords using either Kerberos or PAM via PKG_OPTIONS.jlam3-3/+39
This fixes the PLIST on systems that have PAM natively. Bump the PKGREVISION to 5.
2006-06-16Update to 0.9.5. Changes:shannonjr3-8/+9
- Store Prelude-Manager FIFO into the profile backup directory so that FIFO are per profile. Fix #151. - Update libwrap check, don't statically link libwrap. Cleanup. Fix #144. - XMLmod: Implement CorrelationAlert processing. - XMLmod: No ntpstamp attribute in File/Inode element datetime fields. - XMLmod: permission -> Permission, as per IDMEF DTD requirements. - XMLmod: Process the Checksum IDMEF element. - XMLmod: Make AdditionalData validation pass (IDMEF v15 -> v16 change). - XMLmod: disable-buffering option argument is optional. - XMLmod: Correct DTD loading error. - XMLmod: Avoid NULL libxml warning.
2006-06-16REPLACE_PERL without a runtime dependency to Perl is useless. Bumpedrillig1-2/+3
PKGREVISION.
2006-06-16Converted to the SUBST framework.rillig1-11/+7
2006-06-16Removed the leading "@" from shell commands.rillig1-5/+5
2006-06-14PKGMANDIR instead of "man".reed1-21/+21
2006-06-14Make sudo use VARBASE.reed1-2/+6
Always use "man" instead of catpages. Make sure "run" directory is precreated, so you don't get: /usr/bin/sudo sudo: can't mkdir /var/run/sudo: No such file or directory Bump PKGREVISION. Okayed by maintainer back in December. The only concern was that /var/run may not be for all platforms, but this is same as other packages to (not specific to sudo).
2006-06-13py-cheetah needs Python 2.2+joerg1-1/+2
2006-06-13Forgotten patchsum update.joerg1-2/+2
2006-06-12Add DragonFly support.joerg4-12/+45
2006-06-11Rename to match Python naming convention. Depend on py-cheetah.joerg2-3/+63
Fix PLIST. Conflict on old name.
2006-06-11Needs pkg-config.joerg1-1/+2
2006-06-09Forgotten patchsum. Detected by wizd(8).joerg1-1/+2
2006-06-08Removed temporary code that should not have been committed in my lastshannonjr1-4/+1
update.
2006-06-07Updated to version 5.41.heinz2-6/+6
Pkgsrc changes: - none Relevant changes since version 5.31: ==================================== - modified addfile to accept indirect filehandles -- ref. rt.cpan.org #19627 and #19641 - modified shasum to warn rather than die for file errors -- to follow conventions of GNU sha1sum/md5sum - added new capabilities to the "addfile" method -- now able to accept file names as well as handles -- includes mode for portable digest calculation -- thanks to Adam Kennedy for emails and ideas ref. File::LocalizeNewlines - used expanded addfile interface to simplify shasum (sumfile) -- regex a tad less general than 5.37, but handles all known newline variants in UNIX/Windows/MacOS - enhanced WARNING messages from shasum checkfile processing -- to mimic behavior of md5sum - improved error handling of checksum files in shasum -- to better mimic the behavior of md5sum - refined line-break regex in shasum (ref. sub sumfile) -- catches multiple CR's preceding LF thanks to Gisle Aas for suggested patch - changed loop vars to signed int's in shadump (ref. src/sha.c) -- to prevent type mismatch warnings - added "portable" option to shasum -- to make digests match across Windows/Unix/MacOS - enabled bundling of shasum command line options -- to mimic behavior of md5sum - removed \r's from text files in t/nist directory -- resolves SIGNATURE clashes (rt.cpan.org #18983) - changed suffix on SHA64_MAX (src/sha.h) to ULL -- eliminates gcc warnings (rt.cpan.org #18988) - specified minimum Perl version for module and Makefile.PL -- closes rt.cpan.org #18984 - made minor code changes to silence compiler warnings -- resulting from signed/unsigned integer mixing