summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2006-08-03When using idea option, change license from fee-based-commercial-usegdt1-2/+6
to idea-license, and also set RESTRICTED and NO_*_CDROM. (Note that this doesn't change what happens if the idea option is unused.)
2006-08-02update to 1.4.5drochner4-21/+8
security update, recommended by gnupg.org (fixes CVE-2006-3746) changes: * More DSA2 tweaks. * Fixed a problem uploading certain keys to the smart card. * Fixed 2 more possible memory allocation attacks. * Added Norwegian translation.
2006-07-31Bump default dependency so dependent packages get shared cvm libs.schmonz1-2/+2
2006-07-31Update to 0.81. From the changelog:schmonz3-14/+18
- Fixed a typo in the INSTHIER file that caused incomplete installations.
2006-07-29USE_TOOLS+=lexminskim1-2/+2
2006-07-29Update to 0.80. From the changelog:schmonz2-6/+8
- Modified the build procedures to use libtool to produce and install shared libraries. - No other code changes.
2006-07-27Rename "SITES_* to "SITES.*" for file-specific lists of sites from whichjlam4-8/+8
to fetch the file. This completes the renaming described in revision 1.1799 of bsd.pkg.mk.
2006-07-22Added "c" to USE_LANGUAGES for packages that use GNU configure scripts,rillig4-8/+8
since they always need a C compiler, even when the source code is completely in C++. For some other packages, stated in the comment that a C compiler is really not needed.
2006-07-21This package needs zlib. Include its buildlink3.mk. This fixes PR 33856.minskim1-1/+2
2006-07-21Add missing file to PLIST. Bump PKGREVISION.wiz2-2/+4
2006-07-20Convert to use the pkginstall framework for INSTALL/DEINSTALL scripts.jlam2-23/+3
2006-07-20REPLACE_INTERPRETER occurs as part of the configure step, so don't setjlam1-2/+1
NO_CONFIGURE.
2006-07-19Fix a pkglint warning.wiz1-2/+2
2006-07-19Remove superfluous bsd.prefs.mk inclusion.wiz1-2/+1
2006-07-19regen with current createbuildlink.wiz1-3/+3
2006-07-19Update to 1.1.0, based on patches provided by George Michaelsonwiz8-43/+42
in PR 32761. Noteworthy changes in version 1.1.0 (2005-10-01) ------------------------------------------------ * You can now configure the backend engine file name and home directory to be used, as default and per context. * Information about the recipients of an encrypted text is now available at decryption time. * New status GPGME_STATUS_PLAINTEXT. This is analyzed by the decrypt and verify handlers, the information about the plaintext filename, if available is made available in the new field file_name of the respective result structure. * The code for "automagically detecting the thread library" has been removed from libgpgme. It is deprecated since version 0.4.3. Since then, you had to link against libgpgme-pthread for applications using pthread and libgpgme-pth for applications using GNU Pth. The code was removed because it caused compilation problems on systems where the pthread.h header from GNU Pth is available in addition to the system header (FreeBSD 6 and later for example). * There is a new flag for keys and subkeys, is_qualified, which indicates if a key can be used for qualified signatures according to local government regulations. * You can associate a filename with a data object using the new function gpgme_data_set_file_name(). This filename will be stored in the output when encrypting or signing the data and will be returned when decrypting or verifying the output data. * You can now set notation data at signature creation with the new function gpgme_sig_notation_add(). * Interface changes relative to the 1.0.3 release: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ gpgme_set_engine_info NEW gpgme_ctx_get_engine_info NEW gpgme_ctx_set_engine_info NEW gpgme_recipient_t NEW gpgme_decrypt_result_t EXTENDED: New field recipients. gpgme_verify_result_t EXTENDED: New fields pubkey_algo, hash_algo. gpgme_decrypt_result_t EXTENDED: New field plaintext_filename. gpgme_verify_result_t EXTENDED: New field plaintext_filename. GPGME_STATUS_PLAINTEXT NEW gpgme_key_t EXTENDED: New field is_qualified. gpgme_subkey_t EXTENDED: New field is_qualified. gpgme_data_get_file_name NEW gpgme_data_set_file_name NEW gpgme_sig_notation_flags_t NEW GPGME_SIG_NOTATION_HUMAN_READABLE NEW GPGME_SIG_NOTATAION_CRITICAL NEW gpgme_sig_notation_clear NEW gpgme_sig_notation_add NEW gpgme_sig_notation_get NEW
2006-07-19Drop support for LTCONFIG_OVERRIDE. For quite a long time, pkgsrcjlam1-2/+1
had actually been ignoring LTCONFIG_OVERRIDE anyway and just using the default LIBTOOL_OVERRIDE to replace libtool scripts in packages. This just formalizes the fact that LTCONFIG_OVERRIDE is not used meaningfully by pkgsrc.
2006-07-18Move from www.thc.org to thc.segfault.netadrianp2-7/+9
2006-07-17Update to 1.4.1:wiz3-7/+8
* Version 1.4.1 (released 2006-06-14) ** Replaced inactive ifdefs to enable openpgp support in test programs. ** Fixed bug in OpenPGP authentication handshake. ** Fixed typographical in man pages. ** Build fixes of the manual. ** Added Swedish translation. ** API and ABI modifications: No changes since last version.
2006-07-14Minor typo fix.adrianp1-2/+2
2006-07-13This is pure Perl, no compiler required.heinz1-1/+2
2006-07-13Update libfwbuilder and fwbuilder to 2.0.12. Bugfixes only.bad7-19/+21
2.0.12: Bugs fixed in this release: bug #1455772: Implement more portable fix for converting UTF-8 in comments. The previous one broke the Windows installer. 2.0.11: Bugs fixed in this release: * fixes to make code compile with g++ 4.1. * bug #1455772: Properly convert comments to/from UTF-8 to ensure the script is not corrupted when copied to the firewall * bug #1455748: "make firewall script executable". Bugs fixed in policy compiler for iptables: * bug #1375432: avoid using '-m state' twice for stateless rules with with custom services. * bug#1364060: change shell pattern to match names of conntrack modules in Linux 2.6. Bugs fixed in policy compiler for ipfilter: * bug #1386226: removed nat.conf when nat rules are removed. * bug #1393004: use 'egrep -s' on Solaris.
2006-07-13Convert digest dependency to a USE_TOOLS dependency.jlam1-2/+2
2006-07-11Update to prelude-lml 0.9.6. Changes:shannonjr4-17/+17
- Fix a bug where some rules marked silent would trigger an alert. - Load Sonicwall and Spamassassin ruleset by default. - Fix rule syntax problem in Sonicwall ruleset. - Fix rule indexing problem in Squid ruleset. - Postfix rule consistency fix.
2006-07-11The yield syntax used in one of the modules is not supported byjoerg1-2/+2
Python 2.2, so mark it as 2.3+ only.
2006-07-10Fixed two pkglint warnings.rillig1-2/+2
2006-07-09- made sure skeyprune uses the correct perl binaryschwarz4-2/+62
- made sure that troff-style man pages are used on every platform - some hacks to add IRIX 5 support in hacks.mk
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam50-100/+100
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam50-50/+100
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-08Don't try and use assembler when building 64bit on Solaris. It gets itmarkd1-1/+5
wrong for both amd64 and sparc. Fixes PR pkg/32648 and possibly PR pkg/33030.
2006-07-08Solaris grep doesn't deal well with the binary output of tar when testingmarkd2-1/+15
if tar supports "ustar" so feed through strings before grep. Fixes PR pkg/33776.
2006-07-07Add an explicit run-time dependency on perl because these packagesjlam1-3/+3
install perl scripts. Bump the PKGREVISION for the dependency change.
2006-07-07LIBTOOL_OVERRIDE generally doesn't need to be specified anymore... justjlam1-2/+1
set OVERRIDE_DIRDEPTH to find any libtool scripts deeper in the WRKSRC tree unless they're named something other than "libtool". SHLIBTOOL_OVERRIDE generally doesn't need to be specified either -- just define it to the empty list and shlibtool-override will look for libtool scripts.
2006-07-05Depend on security/kth-krb4 to make this buildwiz1-5/+8
on NetBSD-current (where kerberosIV was removed). Bump PKGREVISION for dependency change.
2006-07-05Sweep pkgsrc and convert packages that included intltool/buildlink3.mkjlam4-12/+8
to use instead "USE_TOOLS+=intltool". Remove now unused intltool/buildlink3.mk
2006-07-05Back out previous and do the same thing more generally for all platforms.jlam6-13/+26
Since the heimdal install process will install additional headers in ${PREFIX}/include/krb5 depending on what the configure process detects, simply query the source Makefile at install-time for the extra headers that it will install and dynamically add them to the PLIST.
2006-07-04+py-paramikodrochner1-1/+2
2006-07-04add py-paramiko-1.6, a python extension implementing the ssh2 protocoldrochner4-0/+136
2006-07-04add one...drochner1-0/+20
2006-07-04update to 0.3.5drochner2-8/+8
changes: - Fix asn1_octet_der to handle writes of zero-length buffers, before it did not write the ASN.1 length for a zero-length buffer. This caused ASN.1 encodings to be incorrect on 64-bit platforms. - Add self test that attempt to trigger the above bug. - Fix test of -Wno-pointer-sign. - Improve cross-compilation to MinGW by using AC_LIBTOOL_WIN32_DLL.
2006-07-03Update to 1.4.4:wiz3-35/+6
Noteworthy changes in version 1.4.4 (2006-06-25) ------------------------------------------------ * User IDs are now capped at 2048 byte. This avoids a memory allocation attack (see CVE-2006-3082). [was already fixed in pkgsrc] * Added support for the SHA-224 hash. Like the SHA-384 hash, it is mainly useful when DSS (the US Digital Signature Standard) compatibility is desired. * Added support for the latest update to DSA keys and signatures. This allows for larger keys than 1024 bits and hashes other than SHA-1 and RIPEMD/160. Note that not all OpenPGP implementations can handle these new keys and signatures yet. See "--enable-dsa2" in the manual for more information.
2006-07-02Fixed unprivileged builds.rillig1-1/+7
2006-07-02Solaris does not have err.h, glob.h, ifaddrs.h and vis.h compatible withmarkd2-2/+7
heimdal, so heimdal installs its own. Add them in PLIST.SunOS Fixes PR pkg/33656. Bump PKGREVISION.
2006-07-02This package needs expect(1). Bumped PKGREVISION.rillig1-2/+3
2006-07-01Forgotten patchsum update.joerg1-2/+2
2006-06-30Needs Python 2.2+joerg1-1/+2
2006-06-28Use config file framework. Keep the permission of the original codejoerg4-4/+39
for the installed version of the configuration file, but not the example. Bump revision.
2006-06-26Back out changes unrelated to last security update.shannonjr1-9/+6
2006-06-24Security fix for CVE-2006-3082:salo3-2/+31
"parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length, which could lead to an integer overflow, as demonstrated using the --no-armor option." Patch from GnuPG CVS repository. Bump PKGREVISION.
2006-06-23Backport fix for CVE-2006-3082 from GnuPG: trunk/g10/shannonjr4-14/+40
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-09 08:30:32 +0000