summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2004-04-27Pull up revision 1.12 of the Makefile to the pkgsrc-2004Q1 branch.agc1-1/+10
Requested by taca in ticket pkgsrc-6. Necessary for correct compilation and running.
2004-03-28Fix the Kerberized telnetd and rsh to use the Heimdal binaries forjlam1-8/+26
login and rsh so that the correct programs (and not the system ones) are executed. Bump the PKGREVISION to 3.
2004-03-26Reverse the use of USE_DB185 in bdb.buildlink3.mk -- it defaults tojlam2-4/+2
"yes" and packages that can't use the DB-1.85 API should set it to "no". This makes the native DB the preferred DB if it exists.
2004-03-26Teach security/tcp_wrappers to build on NetBSD systems. Remove thejlam3-25/+51
ONLY_FOR_PLATFORMS setting and simply allow the build to fail on systems on which it currently doesn't build. Replace the cascading if statement that set the Makefile target with something more compact. Lastly, teach tcp_wrappers to partially honor PKG_SYSCONFDIR -- it will default to the historic locations /etc/host.{allow,deny} for the config files, but if PKG_SYSCONFDIR.tcp_wrappers is set in /etc/mk.conf, then it will use that instead.
2004-03-26Consolidate all of the PLIST.* files that duplicated each other into ajlam7-38/+10
single file PLIST.shlib. Only have PLIST.${LOWER_OPSYS} if it differs from PLIST.shlib.
2004-03-26Don't rebuild openssl again as part of installing it.jlam2-5/+10
2004-03-26Allow the rehash of the certs database to not error out during the buildjlam3-14/+23
due to libssl.so.300 not being found by correctly setting LD_LIBRARY_PATH.
2004-03-26We can't use ${PKGBASE} on the left-hand side of an assignment since it'sjlam1-2/+2
not defined yet until bsd.pkg.mk. Explicitly use "openssl" instead. This correctly forces NetBSD installations of openssl to use /etc/openssl as the configuration file directory as originally intended.
2004-03-26Add some mirror sites since the main OpenSSL site seems to be dead at thejlam1-2/+7
moment.
2004-03-26PKGREVISION bump after openssl-security-fix-update to 0.9.6m.wiz56-81/+114
Buildlink files: RECOMMENDED version changed to current version.
2004-03-26Update to 0.9.6m:wiz9-39/+38
Changes between 0.9.6l and 0.9.6m [17 Mar 2004] *) Fix null-pointer assignment in do_change_cipher_spec() revealed by using the Codenomicon TLS Test Tool (CAN-2004-0079) [Joe Orton, Steve Henson]
2004-03-25Fix compile problem under gcc 3.3.3.taca7-1/+119
- use <stdarg.h> instead of <varargs.h> - don't declare errno assuming nicluding <errno.h> is sufficient. - check strerror(3) and don't use own alternative one.
2004-03-24Use declaration of sys_nerr from <errno.h> rather than redeclaring it.markd2-1/+16
Fixes problem seen in bulk builds.
2004-03-23homepage has moveddmcmahill1-2/+2
2004-03-23Add a missing apostrophe in a shell command.minskim2-5/+5
2004-03-23Fix build on sparc64 with gcc2.snj1-1/+4
2004-03-23bl3ify and convert to use krb5.buildlink3.mk for proper Kerberosjlam4-12/+37
detection and linkage. This fixes PR 24498.
2004-03-23USE_BUILDLINK3 must be set to "yes" or "no", not defined/undefined.jlam3-6/+6
2004-03-22Fix building this package with Kerberos 5 support -- the misdeclaredjlam3-6/+20
krb5_mcc_ops variable is "const" in both Heimdal and in MIT krb5.
2004-03-22Let ONLY_FOR_PLATFORM recognize NetBSD 2.0 and future versions.kristerw1-1/+2
2004-03-21Use strerror() instead of sys_errlist[], as the later isn't available onbouyer4-1/+88
solaris9. OK'd by tron@
2004-03-21This package needs Tcl only at run time; use DEPENDS to get Tclminskim1-6/+7
dependency instead of including buildlink.mk. Switch to Tcl 8.4.
2004-03-21Uses no compiler, so USE_LANGUAGES is emptyheinz1-2/+3
2004-03-20Take maintainership, add HOMEPAGE. Uses no compiler, so mark it with empty ↵heinz1-2/+4
USE_LANGUAGES.
2004-03-20Add HOMEPAGE, adapt to buildlink3 and add BUILD_DEPENDS on p5-Crypt-CBC for ↵heinz2-5/+14
testing.
2004-03-19Update fp-netbsd-ws package to 4.4.1 since old distribution isn'ttaca2-6/+6
available any more. (c) FRISK Software International http://www.f-prot.com/ F-PROT Antivirus for BSD, version 4.4.1 Version 4.4.1 contains various bugfixes and improvements to the documentation and software. o Further enhancements of scanning password encrypted zip files. o Added detection of encrypted archives (since various new viruses spread through encrypted archives). o Minor bug-fixes in the F-Prot daemon. o Minor bug-fixes in scan-mail.pl (smtp proxying). o Critical bug-fixes in f-prot-milter.
2004-03-18Fix serious bug where BUILDLINK_PACKAGES wasn't being ordered properlyjlam9-27/+18
by moving the inclusion of buildlink3.mk files outside of the protected region. This bug would be seen by users that have set PREFER_PKGSRC or PREFER_NATIVE to non-default values. BUILDLINK_PACKAGES should be ordered so that for any package in the list, that package doesn't depend on any packages to the left of it in the list. This ordering property is used to check for builtin packages in the correct order. The problem was that including a buildlink3.mk file for <pkg> correctly ensured that <pkg> was removed from BUILDLINK_PACKAGES and appended to the end. However, since the inclusion of any other buildlink3.mk files within that buildlink3.mk was in a region that was protected against multiple inclusion, those dependencies weren't also moved to the end of BUILDLINK_PACKAGES.
2004-03-16If the ${PKGBASE} of a package doesn't match the token passed tojlam1-1/+2
BUILDLINK_PACKAGES, then set BUILDLINK_PKGBASE.<pkg> explicitly so that we can map from <pkg> to BUILDLINK_PKGBASE.<pkg>.
2004-03-16BUILDLINK_DEPENDS.<pkg> should be appended to, not set.jlam1-2/+2
2004-03-16Define NO_EXPORT_CPP so that rpcgen doesn't produce empty files.cube1-1/+2
2004-03-16Add ruby to CATEGORIES.taca4-8/+8
2004-03-15Add dependency on unzip, per Norm in PR 24785.wiz2-6/+7
While here, update to 4.4.0 since previous distfile disappeared. Changes: o Added detection of encrypted archives (since various new viruses spread through encrypted archives). o Minor bug-fixes in the F-Prot daemon. o Minor bug-fixes in scan-mail.pl (smtp proxying). o Critical bug-fixes in f-prot-milter. o Minor modifications to the check-updates.pl script (disable proxy caching by default).
2004-03-12Update to 3.8p1:wiz5-27/+27
This version features many improvements and bugfixes.
2004-03-12update to 20040310 versionrecht5-54/+16
changes: - Added support for removing files recursivly - Incudes checking for file type and size. - Displays the file being destroyed and its size. - Added command line flags: - Added Security Level Flag (Destroy Severity) - Added Output suppression flag for non-verbose output. - Added Help flag. - Added a Manual page for the program in section 1.
2004-03-12Update to version 3.2.9.1.seb2-10/+9
While here bl3ify. Changes since previously packaged version (3.2.5): 2003-12-03 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.9.1. * non-commercial: removed cert hash compat stuff, which broke compilation. 2003-09-26 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.9. * ssh2,sshd2: (by Patrick Irwin): Critical security fix: fixed several bugs in ASN.1 decoding functionality, which were caused by invalid assumptions on the format of input BER data. Certificates malformed in certain ways could cause a crash or buffer overflow. No known exploits at this time, but you are strongly advised to upgrade. Admins unwilling or unable to upgrade need to disable certificates, but this may not be enough for "hostbased" authentication. "publickey" auth should be safe even with the old version with certificates disabled. Clients are probably vulnerable against malicious servers in the initial key exchange regardless of configuration. Users of noncommercial version are not affected by this vulnerability. 2003-09-25 Sami J. Lehtinen <sjl@ssh.com> * sshd2, ssh2: Implemented DisableVersionFallback, with which you can disable fallback compatibility code for older, or otherwise incompatible versions of software. Don't disable unless you know what you're doing. See sshd2_config(5) for details. For really paranoid people (using this option will probably hurt usability somewhat, especially in environments where multiple versions of SSH are used from different vendors). * sshd2, ssh2: Implemented Cert.RSA.Compat.HashScheme. Older SSH Secure Shell clients and servers used hashes in an incoherent manner (sometimes MD5, sometimes SHA-1). With this option, you can set what hash is used. See sshd2_config(5) for details. * Previous: ssh-3.2.8. 2003-08-07 Tomi Salo <ttsalo@ssh.com> * Added a new general configuration option, MaxCRLSize. This sets the maximum size for CRLs and CA certs used in validating received certificates. (The size is the total size of all CRLs and certs, not the maximum individual size.) 2003-06-11 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.7. * ssh-signer2: Fixed a bug, which caused the application to intermittently call fatal because the read() operation was interrupted by a signal (SIGCHLD). 2003-06-04 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.6. * SecurID certified binaries, no code changes.
2004-03-12Bump pacakge revision with ruby-base package's update.taca1-2/+2
2004-03-11The MESSAGE mentions modifying the sudoers file (and doesn'treed1-1/+3
haev location shown), so tell the admin to use the visudo tool.
2004-03-11s/Gnome/GNOME/jmmv1-2/+2
2004-03-11Fix path to an icon so that the entry in the control center shows up properly.jmmv2-1/+15
2004-03-11Bump PKGREVISION to catch with gpgme03 package rename (it was named gpgmejmmv1-2/+2
previously) and its associated library.
2004-03-11Rename this package to gpgme03, and rename all installed files to includejmmv7-22/+183
the '03' suffix, so that this can coexist with the gpgme package.
2004-03-11unusedjmmv1-20/+0
2004-03-11Fix build on Red Hat 7.3.uebayasi2-2/+19
2004-03-10Convert to use bdb.buildlink3.mk.jlam2-4/+4
2004-03-10Split out the code that deals with checking whether the software isjlam8-362/+278
built-in or not into a separate builtin.mk file. The code to deal checking for built-in software is much simpler to deal with in pkgsrc. The buildlink3.mk file for a package will be of the usual format regardless of the package, which makes it simpler for packagers to update a package. The builtin.mk file for a package must define a single yes/no variable USE_BUILTIN.<pkg> that is used by bsd.buildlink3.mk to decide whether to use the built-in software or to use the pkgsrc software.
2004-03-10Define NO_EXPORT_CPP so that rpcgen doesn't get mad.cube1-1/+2
2004-03-10Remove info files entries from PLIST.seb1-5/+1
2004-03-10Remove info files entries from PLIST.seb2-6/+2
2004-03-10Remove info files entries from PLIST.seb2-4/+2
2004-03-09Remove info files entries from PLIST.seb1-2/+1
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-07 07:49:11 +0000