summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2001-09-19Make it work under 1.5. Patch by Martti Kuparinen from pkg/14010.wiz3-5/+15
Update to 1.2nb1.
2001-09-19Update to 2.16, as suggested by Sen Nagata.mjl2-5/+5
2001-09-19Add p5-Digest-MD2, p5-Digest-MD4, p5-Digest-SHA1mjl1-1/+4
2001-09-19Initial import of p5-Digest-MD4, as provided by Sen Nagata on tech-pkg.mjl4-0/+26
2001-09-19Conflict with MD5 <= 2.12mjl1-2/+2
2001-09-19Initial import of p5-Digest-SHA1, as provided by Sen Nagata in PR/13986.mjl4-0/+29
2001-09-19Initial import of p5-Digest-MD2, as provided by Sen Nagata in PR/13986.mjl4-0/+29
2001-09-15Add and enable keychainwiz1-1/+2
2001-09-15Initial import of keychain package provided by Martti Kuparinen in pkg/13931.wiz5-0/+135
DESCR: Keychain is a shell script which acts as user-friendly front-end to ssh-agent(1), allowing you to have one long-running ssh-agent process per system rather than per login session. Please study the documentation on the keychain website carefully since incorrect usage of this script may have certain security implementations.
2001-09-15Update to qident-1.2. Changes since 1.0:ad2-5/+5
- NetBSD 1.5 and earlier doesn't have getprogname(). - Fix typo in manual page. - Remove debug crud. - unistd.h, not getopt.h.
2001-09-14Update to 0.2.1, as requested in pkg/13772.wiz4-34/+16
Changes since last version, from the NEWS file: AMaViS 0.2.1 relesed. We improved qmail support and added support for exim and postfix and a hack for sendmail to scan outgoing/relayed mail, too. Added support for several anti-virus programs. Lots of other improvements and bug fixes. Read ChangeLog for full details.
2001-09-14Super bump the major numbers for libssl and libcrypto so that they don'tskrll3-13/+13
conflict with the -current versions.
2001-09-09Deprecate NO_WRKSUBDIR, replacing it with an explicit assignment of:agc2-4/+4
WRKSRC= ${WRKDIR} This is much cleaner, much more indicative of what happens, and removes another of the negative definitions (NO_.* = value).
2001-09-08Various changes: mostly removing 'WWW:' lines, since that's what we havewiz4-5/+1
the HOMEPAGE variable for, as well as some grammar and spelling fixes.
2001-09-02Add note to run nessus-adduser etc.hubertf1-1/+5
2001-08-31upgrade to the latest (20010831a). a lot of bug fixes after helsinki IPsec/IKEitojun3-13/+13
bakeoff.
2001-08-30Record libssl dependency on libcrypt.skrll2-5/+5
This allows a mixture of 1.5.x openssl (version<0.9.5) and security/openssl (version>=0.9.6) to actually work.
2001-08-30Fix version logic in 0.9.6a case.skrll1-2/+2
2001-08-28Add & enable qident.ad1-1/+2
2001-08-28qident, a small program to query a remote ident server using libident.ad4-0/+25
2001-08-27Use wildcard dependence on "autoconf" package.tron3-8/+6
2001-08-26Update automake to 1.4-p5 (1.5 is available)skrll2-4/+4
Include a bugfix for lisp_LISP independently discovered by me that has been pulled up to the automake-1-4 branch of automake cvs. Changes are: New in 1.4-p5: * Allow AM_PROG_LIBTOOL again. * Diagnose AC_CONFIG_HEADERS the same as AC_CONFIG_HEADER. * Display distributed file list correctly in usage message. * Allow numbers in macro names. * Bugfixes. New in 1.4-p4: * Deal with configure.ac as well as configure.in -- this time for real! * The version numbering system now allows three point version numbers, such as 1.4.4, without thinking they are alpha release numbers. New in 1.4-p3: * Deal with configure.ac as well as configure.in. * Don't complain if `version.texi' is included in multiple places. New in 1.4-p2: * Deal with AC_CONFIG_FILES from autoconf-2.50. * Improvements to f77 support. * DESTDIR now works for script targets. * distcheck-hook works correctly. New in 1.4-p1: * The version numbering system now allows fork identifiers (such as the p1 in this version of automake). * Cope gracefully with various versions of libtool which may or may not require ltconfig, ltcf-c.sh, ltcf-cxx.sh or ltcf-gcj.sh. * Bugfixes.
2001-08-19Update of stunnel to version 3.20, from Martti Kuparinen in PR pkg/13728.martin5-40/+15
Changelog for version 3.20, 2001.08.15, urgency: LOW: * setsockopt() optlen set according to the optval for Solaris. * Minor NetBSD compatibility fixes by Martti Kuparinen. * Minor MSVC6 compatibility fixes by Patrick Mayweg. * SSL close_notify timeout reduced to 10 seconds of inactivity. * Socket close instead of reset on close_notify timeout. * Some source arrangement and minor bugfixes.
2001-08-17Make this work more like the ssh package:kim5-18/+133
- don't install setuid unless SSH_SUID=YES - use libwrap (--with-tcp-wrappers) on NetBSD I also want to fix S/Key support and Kerberos IV, so I've left some comments in Makefile for that.
2001-08-17Update smimemsg to 1.4jun2-6/+6
- add RC2-64,RC2-128,DES,Triple-DES - update aicrypto lib - some fixes,with -p7 option
2001-08-17now security fix contains main trunk.jun1-22/+0
2001-08-17Update AiSSLtelnet to 0.15jun2-6/+6
- Fix telnetd origin security hole.
2001-08-16Update libnasl and nessus{-core,-libraries,plugins} to 1.0.9.frueauf8-22/+59
- increased login timeout - fixed a possible deadlock in libpeks - fixed a bug which would cause the client to crash when sending a too long plugin list - fixed the 'too many plugins selected' bug that would make the client crash - workaround for a Linux bug^H^H^Hfeature that makes recv() behave completely differently than the rest of the world (thanks to Andreas Steinmetz) - fixed http://install.nessus.org to better work on Solaris - various minor issues - several new plugins
2001-08-16Update pgpdump to 0.12jun2-5/+5
* Portability hack.
2001-08-16* This package doesn't need suse_libc5 anymore...suse_compat is enough.jlam3-23/+33
* Remove make for loop and replace with shell for loop * Add an RCS ID and comment to uvscan.sh. * Remove unnecessary whitespace from DESCR.
2001-08-16Just use @dirrm.jlam1-2/+2
2001-08-16Update security/uvscan-dat to 4154. Modify package so that it mayjlam7-54/+265
deinstall cleanly with pkg_delete, and make the update_dat script more robust by fetching to a temporary directory, and only moving the new DAT files into place if the fetch and untar was successful.
2001-08-14grep isn't used anymore, so don't substitute for @GREP@ in the INSTALLjlam2-5/+5
files. Substitute for @ID@ instead of directly using 'id', and use the value of ${ID} already set in defs.*.mk.
2001-08-13Update uvscan-dat to 4.1.53 (the old distfile is no longer available).rh2-5/+5
Changes are updated and enhanced virus definition data.
2001-08-12Fix same problems with the user check:veego1-5/+5
- use 'id' instead of 'finger'. this is not a real problem but it is enough and fixing the next problem makes it possible to use it. - grep -q doesn't work on solaris, so use a different way to suppress the output from the user check. - the return code check for the user was reversed.
2001-08-10Update stunnel to version 3.19.martin5-54/+32
Based on PR pkg/13679 by Martti Kuparinen. Changelog for version 3.19, 2001.08.10, urgency: MEDIUM: * Critical section added around non MT-safe TCP Wrappers code. * Problem with "select: Interrupted system call" error fixed. * errno replaced with get_last_socket_error() for Win32. * Some FreeBSD/NetBSD patches to ./configure from Martti Kuparinen. * Local mode process pid logged. * Default FQDN (localhost) removed from stunnel.cnf * ./configure changed to recognize POSIX threads library on OSF. * New -O option to set socket options.
2001-08-09Wildcard dewey for kth-krb4.wiz1-2/+2
2001-08-09Add CVS id.nra1-0/+2
2001-08-09buildlink-ify.nra1-0/+14
2001-08-06update. fix compilation on alpha.itojun2-6/+6
2001-08-06Update rats to 1.1jun3-7/+10
New in version 1.1: Ability to scan Perl programs for vulnerabilites. Ability to scan Python programs for vulnerabilities.
2001-08-02Mark as USE_BUILDLINK_ONLY.jlam1-1/+2
2001-08-02embed pkg version into binary to help diagnosis.itojun1-1/+2
2001-08-02say goodbye to security/ssh6. per comments on packages@netbsd.itojun53-11418/+1
2001-08-02The telnetd in kth-krb4-1.0.1 seems to be vulnerable to the buffer overflowwennmach12-157/+149
attack described in SA2001-12 (noted by T. M. Pederson <salvage@plethora.net> in PR pkg/13610). Instead of applying the patch submitted by T. M. Pederson, we upgrade kth-krb4 to 1.0.9 where the vulnerability has been fixed. The upgrade to 1.0.9 was provided by Assar Westerlund <assar@netbsd.org> and slightly modified by myself. Also included is diff file for /etc/services for NetBSD-1.5 (and 1.5.1) also submitted by T. M. Pederson <salvage@plethora.net> in PR 12540. Note: files/services.diff resurfaces as files/services-1.4.2.diff. Closes PR 13610 and PR 12540.
2001-08-02make it at least compile on netbsd151 systems. kernel API diffs should beitojun3-1/+33
wrapped by configure.in scripts, however, we don't use them for libipsec part.
2001-08-02GNORE, as it has security holes left behind, and the patchitojun1-1/+3
is not maintained any more. use openssh.
2001-08-02upgrade to 2001/8/2 KAME tree. whole bunch of stabilization were made.itojun2-5/+5
2001-07-30Apply:jun2-1/+24
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2001-012-telnetd.patch see also ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc
2001-07-28Update to 4150. Old one vanished, new one will probably contain lots morewiz2-5/+5
virus signatures.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-08 05:05:32 +0000