summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-10-31Use OWN_DIRS to make sure the PKGVULNDIR is created as part of the package.erh1-1/+2
2005-10-31Fix build on Interix; it seems % has special meaning in Configure now.tv2-4/+4
2005-10-30This needs msgfmt plurals, according to a recent bulk build.jmmv1-1/+2
2005-10-29Fix for darwin, reusing Dragonfly fix by joergtonio2-4/+4
2005-10-29Kill the post-install script. The example files are installed underjoerg4-18/+49
${PREFIX}/share/examples/smtpd, the spool setup moved into a newly added rc script. This also handles missing configurations files better, since the old post-install would fail e.g. if no local time was configured. Bump revision.
2005-10-29Fix Heimdal's LOCAL_PEERCRED on DragonFly by includingjoerg2-1/+16
the necessary headers. XXX Ask upstream, why this isn't a #if / #elif list Reported-by: walt <wa1ter AT myrealbox DOT com> on tech-pkg
2005-10-28Updated keychain to 2.6.1martti2-6/+6
* keychain 2.6.1 (10 Oct 2005) 10 Oct 2005; Aron Griffis <agriffis@gentoo.org>: Change "unset evalopt" to "evalopt=false" and run through *all* the regression tests instead of just the new ones. *sigh* * keychain 2.6.0 (10 Oct 2005) 10 Oct 2005; Aron Griffis <agriffis@gentoo.org>: Add the --eval option which makes keychain startup easier. See the man-page for examples. Get rid of the release notes from README, so now this file is where changes are tracked.
2005-10-27Upgrade fwbuilder and libfwbuilder to version 2.0.9.bad12-81/+63
Changes since version 2.0.6: Version 2.0.9 -- This is a bug fix release What's new: * support for Cisco FWSM. * Print comments on objects. * Add "commit" menu item. * Spanish translation has been added. Bugs fixed in the GUI: * bug #1254775: "RCS checkin fails on Windows when data file is too big". * bug #1226069: "Segfault: Drag&Drop between two instances". * bugs #1233165: "Illegal Logging-Limit string" and #1287755: "i18n is breaking iptables script". * bug #1240205: "Iilegal --log-level Information". * bug #1277129: "script is truncated when installed by the GUI running on Mac". Bugs fixed in policy compiler for PF: * bug #1276083: "Destination NAT rules". Old restriction on "rdr" rules. Version 2.0.8 -- This is a bug fix release What's new: * Improvements in the GUI: * Included updated German translation by Hans Peter Dittler. * Print RCS Log". * Code changes to make the code compile and work on Solaris. * Improvements in policy compilers for pf, ipf, ipfw: * implemented support for subnets for backup ssh access for pf,ipf,ipfw. * Improvements in compiler for ipfw: * using rule sets to atomically swap old and new rules. * added "established" rule on top of the regular backup ssh access rule. Bugs fixed in the Standard Objects library: * bug #210518: 'Incorrect ending day in the standard object "weekends"'. Bugs fixed in scripts and tools: * bug #1200902: "fwb_compile_all does not work in 2.0". Bugs fixed in GUI: * bug #1072842: "fwbuilder: Solaris and forkpty". * bug #1201406: "shutdown messages should be suppressed". * bug #1204067: "incorrect timezone handling in RCS". * bug #1207983: "incorrect size of "I" and "L" buttons in the group view dialog". * bug #1212121: "sudo shutdown doesn't work". * bug #1212123: "executing file below /tmp as root". * bug #1212179: "tool tips for TCP services cuts off some services". * bug #1213361: "PF on FreeBSD-5.4R". Bugs fixed in policy compiler for iptables: * bug #191423: "Weekend Time restriction not created correctly". * bug #1205665: "Error with summer time when compiling script". * bug #1215279: "rate limiting rule logs everything". Bugs fixed in policy compiler for ipfw: * bug #1155351: "Remote install of FW rulset fails due to race condition". Version 2.0.7 -- This is a bug fix release What's new: * Improvements in the GUI: * "Close" button should change is caption/title to "Install". * "Search for IP Addresses". * Support for SNMP operations has been added in Windows packages of Firewall Builder. * Improvements in built-in installer: User can specify additional command line parameters for ssh that built-in installer runs to access firewall. * Improvements in compiler for ipfilter fwb_ipf: Added support for dynamic addresses in ipfilter. * Improvements in compiler for iptables fwb_ipt: Generated iptables script sets default policies to DROP in all ipv6 filter chains. Bugs fixed in GUI: * bug #1151052: "Not external interfaces marked as external". * bug #1151212: "Collapsed sub-objects shouldn't be added if they are hidden". * bug #1151243: "Maintain format of description text". * bug #1155163: "print does not print group contents". * bug #1172620: "Add tcp service object for icslap". * bug #1184791: "can not copy/paste multiple objects into a group". Bugs fixed in API: * bug #1158870: "mutexes are not properly created on FreeBSD". * bug #1151219: "New Host creation window is not well dimensioned". * bug #1157976: "patches to make fwbuilder compile under NetBSD 1.6". * bug #1173801: '"&" character in prolog/epilog'. Bugs fixed in policy compiler for iptables fwb_ipt: * bug #1123748: "busybox grep -E". * bug #1160186: 'IPTables Compiler - Multiport Issue'. * bug #1176890: "block IPv6". * bug #1176890: "block IPv6". * bug #1179103: 'compiled rules can not be installed'. * bug #1181359: "Missing traling space in "INVALID state" syslog message". * bug #1195201: "getaddr function return error ip address". Bugs fixed in policy compiler for pf fwb_ipf: * bug #1173067: "support for port ranges in NAT rules (ipfilter)". * bug #1173064: "support for dynamic interfaces in ipfilter". Bugs fixed in policy compiler for pf fwb_pf: * bug #1176051: "incorrect rule generated for TCP service ftp-data".
2005-10-26Pull in change from Heimdal CVS committed on 20051012 where the fieldjlam6-2/+231
in a publicly-exported structure was renamed from "private" to "opt_private". This allows <krb5.h> to be used by C++ compilers. Bump the PKGREVISION to 1.
2005-10-26Update security/heimdal to 0.7.1 (approved by lha). We drop supportjlam15-149/+477
for the "db4" option and just rely on the appropriate BDB_* settings via bdb.buildlink3.mk. Also, we tweak the builtin.mk file so use krb5-config, if it's available, to check the version of the built-in heimdal. Patches patch-ab, patch-ae and patch-af have been sent back upstream and will be incorporated into future Heimdal releases. Changes between version 0.6.5 and version 0.7.1 include: * Support for KCM, a process based credential cache * Support CCAPI credential cache * SPNEGO support * AES (and the gssapi conterpart, CFX) support * Adding new and improve old documentation * Bug fixes
2005-10-25Add a patch for CVE-2005-2959: SHELLOPTS and PS4 have to be cleared fromcube3-2/+17
the environment before letting the user execute bash scripts. Bump PKGREVISION. From Debian.
2005-10-25update to 0.8drochner3-8/+9
changes: * Fixed crasher in seahorse-agent when used with GPG 1.4.2 * Now works with gedit 2.12 [Mike Gardiner] * Many crasher and smaller fixes.
2005-10-25update to 2.0.1drochner3-9/+9
changes: -added sha256 module -Add PublicKey to Crypto.__all_ -bugfixes
2005-10-25Solaris 9 has a <vis.h> header, but it is very different to the BSD <vis.h>rillig1-1/+6
header, which is expected by heimdal. Now the package builds on Solaris 9.
2005-10-23Use "+=" instead of "=" for PLIST_SUBST.rillig1-2/+2
2005-10-23Replaced $f with ${f} to fix some pkglint warnings.rillig1-3/+2
2005-10-23Added RCS Id to line 1.rillig1-1/+1
2005-10-23Fix user/group creationadrianp1-2/+3
2005-10-23Install the index file for the www serveradrianp2-28/+60
Don't run as root Bump to nb3
2005-10-22The home page changed.heinz1-2/+2
2005-10-20This package requires curl>=7.15.0nb1.minskim1-1/+3
2005-10-20Update audit-packages to version 1.39agc5-56/+69
Give the audit-pacakges a "-d" option to download the vulnerabilities file with downloaad-vulnerability-list before scanning the installed packages. Update the documentation accordingly. Get rid of some inconsistent style problems in the audit-packages script.
2005-10-20Update to 1.2.8:wiz5-153/+13
* Version 1.2.8 (2005-10-07) - Libgcrypt 1.2.2 is required to fix a bug for forking GnuTLS servers. - Don't install the auxilliary libexamples library used by the examples in doc/examples/ on "make install", report and tiny patch from Thomas Klausner - If you pass a X.509 CA or PGP trust database to the command line tool, it will now abort the connection if the server certificate validation fails. Use the parameter --insecure to continue even after certificate validation failures. Inspired from discussion with Alexander Kotelnikov - The test for socklen_t has been moved to gnulib. - Link failures for duplicate or missing "program_name" symbol has been fixed, patch from Martin Lambers - The command line tool and the examples no longer uses mmap or bzero, to make them more portable, patch from Martin Lambers - Made the PKCS #12 API handle null passwords. Based on patch by Anton Altaparmakov - The GTK-DOC manual should build with current released tools. (But a copy of the output is included, so the tools are not required.) - API and ABI modifications: No changes since last version.
2005-10-19Update to metasploit 2.5adrianp4-46/+53
This is a maintenance release - all updates to 2.4 have been rolled into 2.5, along with some new exploits and minor features.
2005-10-18tcp_wrappers needs libnsl, libsocket for linking into an executable ongrant1-1/+9
Solaris.
2005-10-17Remove wip from CATEGORIES, noted by bouyer.wiz1-2/+2
2005-10-16Updated to version 0.97.heinz2-7/+6
No pkgsrc changes. Changes since version 0.96: =========================== v0.97 - Writes now correctly return errors. (Problem noted by Dominique Quatravaux <dom at idealx.com>). - CA paths now work without passing an empty SSL_ca_file argument. (Problem found by Phil Pennock, <phil.pennock at globnix.org>). - IO::Socket::SSL now automatically passes Proto => tcp (if not already specified) to IO::Socket::INET to work around /etc/services files with udp entries listed first. (Fix suggested by Phil Pennock). - $socket->accept() now returns the peer address in array context for better conformance with IO::Socket::INET. However, if you were doing "map { $_->accept } (@sockets)", or similar tricks, you will need to use "scalar" to get the old behavior back. (Problem noted by Nils Sowen, <n.sowen at kon.de>). - IO::Socket::SSL should now properly block on reads larger than the buffer size of Net::SSLeay. (Problem found by Eric Jergensen, <eric at dvns.com>). - IO::Socket::SSL should now send CA Certs (if necessary) along with certificates. (Problem found by <roy at momentous.ca>). - Timeouts should now work, but be aware that if multiple reads/writes are necessary to complete a connection, then each one may have a separate timeout. (Request from Dominique Quatravaux <dom at idealx.com>). - In certain cases, start_SSL() would misplace a socket's fileno, causing problems with starting SSL. This should now be fixed. (Problem found by <russ at zerotech.net>). - IO::Socket::SSL now requires a minimum of Net::SSLeay 1.21.
2005-10-15Fixed misspelled variable. PKGVERSION was used, but PKGREVISIONrillig1-2/+2
intended. This automatically leads to a PKGREVISION bump.
2005-10-15Update security/openssl from 0.9.7h to 0.9.7i. Changes from versionjlam2-6/+6
0.9.7h include fixing a shared library upgrade problem where openssl-0.9.7h had a different ABI than previous 0.9.7 sub-revisions due to a changed constant.
2005-10-14Addition of ap-modsecurityadrianp1-1/+2
2005-10-14ModSecurity is an open source intrusion detection and prevention engine foradrianp5-0/+82
web applications (or a web application firewall). Operating as an Apache Web server module or standalone, the purpose of ModSecurity is to increase web application security, protecting web applications from known and unknown attacks. This package is for both Apache 1.x and Apache 2.x
2005-10-14Add and enable secpanel-0.5.1.minskim1-1/+2
2005-10-14Import secpanel from pkgsrc-wip. Packaged by dhowland.minskim4-0/+58
SecPanel serves as a graphical user interface for managing and running SSH (Secure Shell) and SCP (Secure Copy) connections. SecPanel is written entirely in pure Tcl/Tk and does not need any extensions but it requires version 8.x of Tcl and Tk.
2005-10-14Add and enable dirb-1.8.minskim1-1/+2
2005-10-14Import dirb from pkgsrc-wip. Packaged by pancake.minskim4-0/+42
DIRB is a Web Content Scanner. It looks for existing (and/or hidden) Web Objects. It basically works by launching a dictionary based attack against a web server and analizing the response. DIRB comes with a set of preconfigured attack wordlists for easy usage but you can use your custom wordlists. Also DIRB sometimes can be used as a classic CGI scanner, but remember is a content scanner not a vulnerability scanner. DIRB main purpose is to help in professional web application auditing. Specially in security related testing. It covers some holes not covered by classic web vulnerability scanners. DIRB looks for specific web objects that other generic CGI scanners can't look for. It doesn't search vulnerabilities nor does it look for web contents that can be vulnerables.
2005-10-13Add & enable p5-Net-SSHseb1-1/+2
2005-10-13Initial import of p5-Net-SSH version 1.29 into The NetBSD Packagesseb5-0/+68
Collection. The Net::SSH::Perl Perl5 module contains implementations of both the SSH1 and SSH2 protocols.
2005-10-13Update HOMEPAGE and MASTER_SITES, from Zafer Aydogan in PR 31549.wiz1-3/+3
2005-10-13belatedly add & enable p5-Crypt-DHseb1-1/+2
2005-10-12Update to 0.4.5:jmmv2-6/+6
Changes in version 0.4.5 are: * Fix a crash in some sync functions.
2005-10-12Initial import of p5-Crypt-DH as version 0.06 into the NetBSD Packagesseb4-0/+28
Collection. The Perl 5 module Crypt::DH implements the Diffie-Hellman key exchange system.
2005-10-12If the native openssl-0.9.7d contains the security fixes pulled up tojlam1-3/+16
the netbsd-2-0, netbsd-2, and netbsd-3-0 branches on 2005-10-11, then for the purposes of satisfying dependencies, pretend it's openssl-0.9.7h.
2005-10-12Remove leading "-" from version number when matching the openssl-0.9.6gjlam1-2/+2
from the netbsd-1-6 branch with the 20040401 fix.
2005-10-11Update security/openssl to version 0.9.7h. This is a securityjlam7-53/+54
vulnerability triggered update due to CAN-2005-2969. Changes from version 0.9.7f include: o Fix SSL 2.0 Rollback, CAN-2005-2969 o Allow use of fixed-length exponent on DSA signing o Default fixed-window RSA, DSA, DH private-key operations o More compilation issues fixed. o Adaptation to more modern Kerberos API. o Enhanced or corrected configuration for Solaris64, Mingw and Cygwin. o Enhanced x86_64 assembler BIGNUM module. o More constification. o Added processing of proxy certificates (RFC 3820).
2005-10-11When patches are updated, distinfo must be updated as well.riz1-3/+3
Hi joerg! 8-)
2005-10-10Remove the redundant INSTALLATION_DIRS. This alreadyreed1-3/+1
does mkdir or mkinstalldirs for these needed directories.
2005-10-10Allow sudo to properly build on DragonFly. Without the detection ofjoerg3-14/+138
shared linking the noexec wrapper is not build.
2005-10-10s/jp.netbsd.org/jp.NetBSD.org/hira1-2/+2
2005-10-10Update to 0.4.4:jmmv2-6/+9
Changes in version 0.4.4 are: * Translation updates * warning fixes * require gtk 2.6
2005-10-10Changed explicit sed(1) code to the SUBST framework. Added BINOWN andrillig1-7/+9
BINGRP to the MAKE_ENV to make unpriviledged builds work.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-15 07:28:52 +0000