summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-07-04"inet6" shouldn't be defined in PKG_SUGGESTED_OPTIONS, it's decided insalo1-2/+1
bsd.prefs.mk automatically.
2005-07-03IPv6 support appeared in 4.06, but it was never enabled in pkgsrc.tv2-2/+21
Add as an options.mk switch, on by default where available. Bump to 4.07nb2.
2005-07-02- The tarball has been updated but the version number not incremented, soadrianp3-6/+11
deal with this. - No official changelog in the tarball for what's changed - PLIST fixes - Looks like: Updated certificate for online updates Updated exploits notably Solaris LPD Command Execution Fixes for console interface
2005-07-02- Update to 1.35adrianp5-27/+35
- Change MESSAGE based on new -config directive - Remove outdated patch for bug that's no longer there in CHANGES.txt - Set plugings directory in the default config.txt - Point users to the installed customised config.txt instead of the sample one - From the CHANGELOG.txt 05.20.2005 Database Updates - Multiple msgs updates from david.maciejak@kyxar.fr - Multiple test updates from burak.dayioglu@pro-g.com.tr nikto_core.plugin 1.31 - Bugfix: fingerprint was not including leading /. Thanks Axel Meerschaert for the report. - Bugfix: NMAPOPTS was not being used, thanks to David Rhoades for patching. - Added additional content checking to reduce false positives, thanks to Pavel Kankovsky nikto.pl 1.14 - Added -config option to specify a config file, thanks to Pavel Kankovsky
2005-06-30Do not install a config file directly into PKG_SYSCONFDIR. Useminskim4-10/+26
CONF_FILES instead. Bump PKGREVISION due to PLIST change.
2005-06-24Change the CONFIGURE_ENV to use the variables users are supposed to set,kristerw1-2/+2
rather than the autoconf cache variables.
2005-06-24Change the CONFIGURE_ENV to use the variables users are supposed to set,kristerw1-2/+2
rather than the autoconf cache variables.
2005-06-24Prevent paths to the build directories from being included in the package.kristerw1-2/+4
Bump PKGREVISION.
2005-06-24Prevent paths to the build directories from being included in the package.kristerw1-1/+4
Bump PKGREVISION.
2005-06-23BUILTIN_PKG should contain the package name, otherwise the builtinpeter1-5/+5
detection doesn't work properly.
2005-06-23I neglected to add this patch with my recent update to 1.9.17.shannonjr1-0/+14
2005-06-23Update to 1.9.17.shannonjr2-6/+11
We are pleased to announce the availability of GnuPG 1.9.17 - the branch of GnuPG featuring the S/MIME protocol. You should consider using GnuPG 1.9 if you want to use the GPG-AGENT or GPGSM. The GPG-AGENT is also helpful when using the stable GPG version 1.4 or if you want to check out its ssh-agent replacement feature. GnuPG 1.9 is the current development version of GnuPG. Despite of that, most parts (in particular GPG-AGENT and GPGSM) are considered ready for production use. Please keep on using GnuPG 1.4.x for OpenPGP; 1.9 and 1.4 may - and actually should - be installed simultaneously. This release features a partly rewrite of the smartcard access code as well as several bug fixes and enhancements. Noteworthy things are: * gpg-connect-agent has now features to handle Assuan INQUIRE commands. * Internal changes for OpenPGP cards. New Assuan command WRITEKEY. * GNU Pth is now a hard requirement. * [scdaemon] Support for OpenSC has been removed. Instead a new and straightforward pkcs#15 modules has been written. As of now it does allows only signing using TCOS cards but we are going to enhance it to match all the old capabilities. * [gpg-agent] New option --write-env-file and Assuan command UPDATESTARTUPTTY. * [gpg-agent] New option --default-cache-ttl-ssh to set the TTL for SSH passphrase caching independent from the other passphrases. You will also need to get a new libassuan (our IPC library).
2005-06-23Updating to 0.6.10 to accompany update of gpg-devel to 1.9.17. This updateshannonjr2-6/+6
adds UPDATESTARTUPTTY to the Assuan protocol.
2005-06-22Update PKG_OPTIONS variable "PAM" to "pam".taca1-3/+3
2005-06-20Security update for security/sudo to 1.6.8p9. Changes from versionjlam2-7/+7
1.6.8p7 include: 562) Fixed noexec functionality on Linux. 564) Fixed a bug that prevented Heimdal authentication from working. 566) A sudoers entry with sudo ALL no longer overwrites the value of safe_cmnd. This fixes the privilege escalation vulnerability noted in http://www.courtesan.com/sudo/alerts/path_race.html
2005-06-20Allow package revisions in dependences on "nessus-core" andtron1-3/+3
"nessus-plugins". The package can now be installed again after the recent change to the "nessus-plugins" package.
2005-06-20Update to Heimdal 0.6.5lha2-6/+6
Changes in release 0.6.5 * fix vulnerabilities in telnetd * unbreak Kerberos 4 and kaserver
2005-06-20There is no need to use package revision for this package. Therefore bumptron1-3/+2
version number to 1.37.
2005-06-20Disable thread support per request of jlam.kristerw1-5/+3
Bump PKGREVISION.
2005-06-19Prevent paths to the build directories from being included in the package.kristerw1-1/+4
Bump PKGREVISION.
2005-06-19- Use ${FIND} as opposed to hardcoding 'find'adrianp2-3/+5
- Bump to nb1 - ok'ed wiz@
2005-06-19Prevent paths to the build directories from being included in the package.kristerw3-10/+37
Bump PKGREVISION.
2005-06-17Fix inappropriate uses of ${LOCALBASE} or ${X11PREFIX} instead ofjlam2-14/+14
${PREFIX}.
2005-06-17Create directories before installing files into them.jlam39-39/+107
2005-06-16This package need pthreads in order to build.kristerw1-1/+4
2005-06-14Fix C99-isms to make this package compile with gcc 2.95.kristerw2-1/+20
2005-06-12Change the maintainer (me) email address.rpaulo1-2/+2
Approved by hubertf.
2005-06-12replace centered dots with `o', as they are not always displayed correctlydillo1-34/+34
noted by adrianp
2005-06-11Some shells don't accept empty word lists in for loops. For thosejlam1-1/+16
Makefiles where this occurs, edit the file so that we avoid running the loop. This should fix PR pkg/28809.
2005-06-09Require pkg_info with ranges support, bump version to 1.36.dillo4-44/+67
Reviewed by wiz.
2005-06-09Work around a bug in 1.6.2's mdoc macros (they don't know about .Ex).wiz2-40/+42
Noted by reed@ Replace ".Xx Ns 's" by ".Xx Ap s" while here.
2005-06-09Fix copy-and-paste error -- in the case where we prefer the pkgsrcjlam3-6/+6
version of the software, USE_BUILTIN.<pkg> should be set to "no", not to ${IS_BUILTIN.<pkg>}.
2005-06-08Remove samba2 packages, abandonware.salo8-136/+1
2005-06-07Add a license. Used exact same license as used for source code,reed1-2/+32
but changed the name of the copyright holder. I provided the original man page in PR #21865.
2005-06-07Add a file format version to pkg-vulnerabilities, and check fordillo4-48/+145
its compatiblity. Bump version to 1.35 Done during the freeze to have the support on the branch. Okayed by wiz.
2005-06-04- Remove reference to bsd.prefs.mk as it's not neededadrianp1-3/+1
- Problem spotted by wiz@
2005-06-04Correct the PLIST for non-i386 machines.kristerw2-6/+7
Bump PKGREVISION.
2005-06-01This buildlink3.mk wasn't adding to BUILDLINK_DEPENDS like it wasjlam1-2/+2
supposed to.
2005-06-01Remove mk/autoconf.mk and mk/automake.mk and replace their usage withjlam4-21/+17
USE_TOOLS and any of "autoconf", "autoconf213", "automake" or "automake14". Also, we don't need to call the auto* tools via ${ACLOCAL}, ${AUTOCONF}, etc., since the tools framework takes care to symlink the correct tool to the correct name, so we can just use aclocal, autoconf, etc.
2005-06-01There is no ipv6 category.wiz1-2/+2
XXX: should there be one, replacing USE_INET6?
2005-06-01Massive cleanup of buildlink3.mk and builtin.mk files in pkgsrc.jlam18-325/+503
Several changes are involved since they are all interrelated. These changes affect about 1000 files. The first major change is rewriting bsd.builtin.mk as well as all of the builtin.mk files to follow the new example in bsd.builtin.mk. The loop to include all of the builtin.mk files needed by the package is moved from bsd.builtin.mk and into bsd.buildlink3.mk. bsd.builtin.mk is now included by each of the individual builtin.mk files and provides some common logic for all of the builtin.mk files. Currently, this includes the computation for whether the native or pkgsrc version of the package is preferred. This causes USE_BUILTIN.* to be correctly set when one builtin.mk file includes another. The second major change is teach the builtin.mk files to consider files under ${LOCALBASE} to be from pkgsrc-controlled packages. Most of the builtin.mk files test for the presence of built-in software by checking for the existence of certain files, e.g. <pthread.h>, and we now assume that if that file is under ${LOCALBASE}, then it must be from pkgsrc. This modification is a nod toward LOCALBASE=/usr. The exceptions to this new check are the X11 distribution packages, which are handled specially as noted below. The third major change is providing builtin.mk and version.mk files for each of the X11 distribution packages in pkgsrc. The builtin.mk file can detect whether the native X11 distribution is the same as the one provided by pkgsrc, and the version.mk file computes the version of the X11 distribution package, whether it's built-in or not. The fourth major change is that the buildlink3.mk files for X11 packages that install parts which are part of X11 distribution packages, e.g. Xpm, Xcursor, etc., now use imake to query the X11 distribution for whether the software is already provided by the X11 distribution. This is more accurate than grepping for a symbol name in the imake config files. Using imake required sprinkling various builtin-imake.mk helper files into pkgsrc directories. These files are used as input to imake since imake can't use stdin for that purpose. The fifth major change is in how packages note that they use X11. Instead of setting USE_X11, package Makefiles should now include x11.buildlink3.mk instead. This causes the X11 package buildlink3 and builtin logic to be executed at the correct place for buildlink3.mk and builtin.mk files that previously set USE_X11, and fixes packages that relied on buildlink3.mk files to implicitly note that X11 is needed. Package buildlink3.mk should also include x11.buildlink3.mk when linking against the package libraries requires also linking against the X11 libraries. Where it was obvious, redundant inclusions of x11.buildlink3.mk have been removed.
2005-06-01Fix casing of IPsec in COMMENT.wiz1-2/+2
2005-06-01Make this build on Darwin. This fixes PR pkg/29147.yyamano1-1/+3
2005-05-31Build on DragonFly. From Joerg Sonnenberger.salo2-1/+14
2005-05-31Update to 1.2.4:wiz2-6/+6
* Version 1.2.4 (2005-05-28) - Corrected some bugs that could affect 64 bit systems. - Some corrections in the header files to include the prototype of memmem properly (affected 64 bit systems). Report and patch by Yoann Vandoorselaere <yoann@prelude-ids.org>. - Introduced the --fix-key option to certtool, which can be used to regenerate the (optional) parameters in a private key. It should be used together with --key-info. - Corrected a bug in certificate chain verification that could lead to marking a trusted chain as non trusted, if the last certificate in the chain was a self signed one. - Gnulib portability files were updated. - License were updated to reflect new FSF address.
2005-05-31Rename option prefix-cmds to kerberos-prefix-cmds. Backwardsdillo2-8/+10
compatibility provided via PKG_OPTIONS_LEGACY_OPTS.
2005-05-31Rename option PAM to pam (so all options are lower case). Backwardsdillo4-13/+13
compatibility provided via PKG_OPTIONS_LEGACY_OPTS.
2005-05-31Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's adillo8-34/+20
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-28Expanded patch-aa with a few #if cases.heinz2-5/+21
This still works on NetBSD (1.6.2 tested) but also fixes the include error on Linux (Debian 3 tested) and Solaris (9 tested). Although DragonFlyBSD, FreeBSD and OpenBSD should work as before I have not tried to build the package there. Feedback whether it builds/works on Darwin/MacOS is also welcome.
2005-05-28Fixed type error on Solaris (tested with Solaris 9).heinz1-0/+12
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-22 09:59:12 +0000