summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2006-08-17Update to 0.9.10.1. Changes:shannonjr4-14/+13
- Fix checking for swig/perl/python when full path to the application is specified. - Fix OpenBSD getaddrinfo() AI_ADDRCONFIG issue (apply to some other system as well). - Fix workaround for system with broken libtool, that prevented the use of plugin (#168).
2006-08-16Update security/caff to 0.4.7tonio2-7/+7
From debian changelog: signing-party (0.4.7-1) unstable; urgency=low * gpg-mailkeys: use right content-type for attached key, thanks Wesley Landaker * gpgsigs: recognize rvk (revoker), found in ksp-dc6.txt.
2006-08-15update p5-Crypt-SSLeay to 0.51nb6 - p5-libwww now depends on usabs1-4/+2
2006-08-15Update security/p5-IO-Socket-SSL from 0.997 to 0.998.abs2-6/+6
v0.998 - declare socket as opened before calling fatal_ssl_error because the SSL_error_trap set up from HTTP::Daemon needs this - accept_SSL sets errors on $socket (the accepted socket) not $self (the listening socket if called from accept) so it can be queried from SSL_error_trap - note in BUGS section that IO::Socket::SSL is not thread-safe Note: The previous update from 0.97 broke all https:// URLs in p5-libwww, will address that in next commit (to p5-libwww)
2006-08-14Update msu to 1.08:abs2-6/+7
- call fchown on tty - Rename log() to log_msu() to avoid compiler warning - switch dist to .tbz from .tgz
2006-08-14I don't use this package anymore.rpaulo1-2/+2
2006-08-13Reset maintainer, email bounced with:wiz1-2/+2
host monkeybyte.org[69.16.221.13] said: 550-"The recipient cannot be verified. Please check all recipients of this 550 message to verify they are valid." (in reply to RCPT TO command)
2006-08-13+p5-String-Randomadrianp1-1/+2
2006-08-13String::Random is used to generate random strings. It was written toadrianp4-0/+26
make generating random passwords and such a little easier.
2006-08-13+p5-Crypt-PasswdMD5adrianp1-1/+2
2006-08-13The unix_md5_crypt() provides a crypt()-compatible interface to the ratheradrianp4-0/+25
new MD5-based crypt() function found in modern operating systems.
2006-08-11Make this package compile with gcc-4.taca3-3/+17
Bump PKGREVISION.
2006-08-09Security fix for SA21436:salo7-3/+254
"A security issue has been reported in Heimdal, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges. The security issue is caused due to missing checks for whether the "setuid()" call has succeeded in the bundled rcp application. This may be exploited to perform certain actions with root privileges if the "setuid()" call fails due to e.g. resource limits." http://secunia.com/advisories/21436/ http://www.pdc.kth.se/heimdal/advisory/2006-08-08/ Bump PKGREVISION.
2006-08-09Security fixes for SA21402:salo9-3/+199
"A security issue has been reported in Kerberos, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges. The security issue is caused due to missing checks for whether the "setuid()" call has succeeded in the bundled krshd and v4rcp applications. This can be exploited to disclose or manipulate the contents of arbitrary files or execute arbitrary code with root privileges if the "setuid()" call fails due to e.g. resource limits." http://secunia.com/advisories/21402/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3083 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3084 http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-001-setuid.txt Bump PKGREVISION.
2006-08-09some apps (dovecot) need the SSLDIR rather than SSLCERTS & SSLKEYSabs1-10/+10
2006-08-07this actually uses both c and c++ - C is used for openssl testjdolecek1-2/+2
2006-08-05Update to 0.997:wiz2-6/+6
v0.997 - fix readline (e.g. getline,getlines,<>) so that it behaves regarding $/ like written in the $/ dokumentation. v0.996 - removed links and comments to inofficial release of Net::SSLeay, because there is a newer version already v0.995 - add support for Diffie Hellman Key Exchange. See parameter SSL_dh_file and SSL_dh. v0.994 - hide DEBUG statements and remove test to load Debug.pm because packets like Spamassisin cannot cope with it (at least the OpenBSD port) v0.993 - added SSL_cert and SSL_key parameter which do not take a file name like SSL_cert_file and SSL_key_file but an internal X509* resp. EVP_PKEY* value. Useful for dynamically created certificates and keys. - added test for sysread/syswrite behavior (which was changed in v0.991) v0.992 - _set_rw_error does $!||=EAGAIN only if error is one of SSL_WANT_READ|SSL_WANT_WRITE (patch from Mike Smith <mike at mailchannels dot com>) - Fix Makefile.PL to allow detectection of failures in PREREQ_PM (http://rt.cpan.org/Public/Bug/Display.html?id=20563, patch by alexchorny at gmail dot com) v0.991 - sysread and syswrite ar no longer the same as read and write, but can return already if only parts of the data are read or written (which is the usual semantic for sysread and syswrite) This should fix problems with HTTP::Daemon::SSL v0.99 - just upgrade Version number because I've screwed up upload of v0.98 to cpan v0.98 - Maintainer changed to <Steffen_Ullrich at genua dot de> - Better support for nonblocking sockets: . exports $SSL_ERROR which contains the latest error from the openssl library. Exports constants SSL_WANT_READ and SSL_WANT_WRITE es special errors which will be set if openssl wants to write or read during nonblocking connects, accepts, reads or writes. . accept,accept_SSL,connect and connect_SSL don't block anymore if the socket is nonblocking. Instead $! will be set from the underlying IO::Socket::INET connect or accept if it failed there (usually EAGAIN or EINPROGRESS) or if the underlying openssl needs to read or write $! will be set to EAGAIN and $SSL_ERROR will be set to SSL_WANT_READ or SSL_WANT_WRITE . syswrite returns undef and sets $!,$SSL_ERROR if it fails to write instead of returning 0. - Bugfixes (http://rt.cpan.org/Public/Bug/Display.html?id=Bugid) . Bug 18439: fileno 0 should be valid . Bug 15001: sysread interpretes buffer "0" as "" - peer_certifcate returns X509 struct string if no field for extraction was specified - get_peer_certificate returns the certificate instead of the IO::Socket::SSL object
2006-08-05Bump to nb6adrianp1-2/+2
2006-08-05Fix for SA21310/CVE-2006-3123adrianp2-4/+22
Patch via. Debian
2006-08-05Add an HTTP download location too, as a fallback for when FTP downloads are ↵dsainty1-2/+3
awkward.
2006-08-03When using idea option, change license from fee-based-commercial-usegdt1-2/+6
to idea-license, and also set RESTRICTED and NO_*_CDROM. (Note that this doesn't change what happens if the idea option is unused.)
2006-08-02update to 1.4.5drochner4-21/+8
security update, recommended by gnupg.org (fixes CVE-2006-3746) changes: * More DSA2 tweaks. * Fixed a problem uploading certain keys to the smart card. * Fixed 2 more possible memory allocation attacks. * Added Norwegian translation.
2006-07-31Bump default dependency so dependent packages get shared cvm libs.schmonz1-2/+2
2006-07-31Update to 0.81. From the changelog:schmonz3-14/+18
- Fixed a typo in the INSTHIER file that caused incomplete installations.
2006-07-29USE_TOOLS+=lexminskim1-2/+2
2006-07-29Update to 0.80. From the changelog:schmonz2-6/+8
- Modified the build procedures to use libtool to produce and install shared libraries. - No other code changes.
2006-07-27Rename "SITES_* to "SITES.*" for file-specific lists of sites from whichjlam4-8/+8
to fetch the file. This completes the renaming described in revision 1.1799 of bsd.pkg.mk.
2006-07-22Added "c" to USE_LANGUAGES for packages that use GNU configure scripts,rillig4-8/+8
since they always need a C compiler, even when the source code is completely in C++. For some other packages, stated in the comment that a C compiler is really not needed.
2006-07-21This package needs zlib. Include its buildlink3.mk. This fixes PR 33856.minskim1-1/+2
2006-07-21Add missing file to PLIST. Bump PKGREVISION.wiz2-2/+4
2006-07-20Convert to use the pkginstall framework for INSTALL/DEINSTALL scripts.jlam2-23/+3
2006-07-20REPLACE_INTERPRETER occurs as part of the configure step, so don't setjlam1-2/+1
NO_CONFIGURE.
2006-07-19Fix a pkglint warning.wiz1-2/+2
2006-07-19Remove superfluous bsd.prefs.mk inclusion.wiz1-2/+1
2006-07-19regen with current createbuildlink.wiz1-3/+3
2006-07-19Update to 1.1.0, based on patches provided by George Michaelsonwiz8-43/+42
in PR 32761. Noteworthy changes in version 1.1.0 (2005-10-01) ------------------------------------------------ * You can now configure the backend engine file name and home directory to be used, as default and per context. * Information about the recipients of an encrypted text is now available at decryption time. * New status GPGME_STATUS_PLAINTEXT. This is analyzed by the decrypt and verify handlers, the information about the plaintext filename, if available is made available in the new field file_name of the respective result structure. * The code for "automagically detecting the thread library" has been removed from libgpgme. It is deprecated since version 0.4.3. Since then, you had to link against libgpgme-pthread for applications using pthread and libgpgme-pth for applications using GNU Pth. The code was removed because it caused compilation problems on systems where the pthread.h header from GNU Pth is available in addition to the system header (FreeBSD 6 and later for example). * There is a new flag for keys and subkeys, is_qualified, which indicates if a key can be used for qualified signatures according to local government regulations. * You can associate a filename with a data object using the new function gpgme_data_set_file_name(). This filename will be stored in the output when encrypting or signing the data and will be returned when decrypting or verifying the output data. * You can now set notation data at signature creation with the new function gpgme_sig_notation_add(). * Interface changes relative to the 1.0.3 release: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ gpgme_set_engine_info NEW gpgme_ctx_get_engine_info NEW gpgme_ctx_set_engine_info NEW gpgme_recipient_t NEW gpgme_decrypt_result_t EXTENDED: New field recipients. gpgme_verify_result_t EXTENDED: New fields pubkey_algo, hash_algo. gpgme_decrypt_result_t EXTENDED: New field plaintext_filename. gpgme_verify_result_t EXTENDED: New field plaintext_filename. GPGME_STATUS_PLAINTEXT NEW gpgme_key_t EXTENDED: New field is_qualified. gpgme_subkey_t EXTENDED: New field is_qualified. gpgme_data_get_file_name NEW gpgme_data_set_file_name NEW gpgme_sig_notation_flags_t NEW GPGME_SIG_NOTATION_HUMAN_READABLE NEW GPGME_SIG_NOTATAION_CRITICAL NEW gpgme_sig_notation_clear NEW gpgme_sig_notation_add NEW gpgme_sig_notation_get NEW
2006-07-19Drop support for LTCONFIG_OVERRIDE. For quite a long time, pkgsrcjlam1-2/+1
had actually been ignoring LTCONFIG_OVERRIDE anyway and just using the default LIBTOOL_OVERRIDE to replace libtool scripts in packages. This just formalizes the fact that LTCONFIG_OVERRIDE is not used meaningfully by pkgsrc.
2006-07-18Move from www.thc.org to thc.segfault.netadrianp2-7/+9
2006-07-17Update to 1.4.1:wiz3-7/+8
* Version 1.4.1 (released 2006-06-14) ** Replaced inactive ifdefs to enable openpgp support in test programs. ** Fixed bug in OpenPGP authentication handshake. ** Fixed typographical in man pages. ** Build fixes of the manual. ** Added Swedish translation. ** API and ABI modifications: No changes since last version.
2006-07-14Minor typo fix.adrianp1-2/+2
2006-07-13This is pure Perl, no compiler required.heinz1-1/+2
2006-07-13Update libfwbuilder and fwbuilder to 2.0.12. Bugfixes only.bad7-19/+21
2.0.12: Bugs fixed in this release: bug #1455772: Implement more portable fix for converting UTF-8 in comments. The previous one broke the Windows installer. 2.0.11: Bugs fixed in this release: * fixes to make code compile with g++ 4.1. * bug #1455772: Properly convert comments to/from UTF-8 to ensure the script is not corrupted when copied to the firewall * bug #1455748: "make firewall script executable". Bugs fixed in policy compiler for iptables: * bug #1375432: avoid using '-m state' twice for stateless rules with with custom services. * bug#1364060: change shell pattern to match names of conntrack modules in Linux 2.6. Bugs fixed in policy compiler for ipfilter: * bug #1386226: removed nat.conf when nat rules are removed. * bug #1393004: use 'egrep -s' on Solaris.
2006-07-13Convert digest dependency to a USE_TOOLS dependency.jlam1-2/+2
2006-07-11Update to prelude-lml 0.9.6. Changes:shannonjr4-17/+17
- Fix a bug where some rules marked silent would trigger an alert. - Load Sonicwall and Spamassassin ruleset by default. - Fix rule syntax problem in Sonicwall ruleset. - Fix rule indexing problem in Squid ruleset. - Postfix rule consistency fix.
2006-07-11The yield syntax used in one of the modules is not supported byjoerg1-2/+2
Python 2.2, so mark it as 2.3+ only.
2006-07-10Fixed two pkglint warnings.rillig1-2/+2
2006-07-09- made sure skeyprune uses the correct perl binaryschwarz4-2/+62
- made sure that troff-style man pages are used on every platform - some hacks to add IRIX 5 support in hacks.mk
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam50-100/+100
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam50-50/+100
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-08Don't try and use assembler when building 64bit on Solaris. It gets itmarkd1-1/+5
wrong for both amd64 and sparc. Fixes PR pkg/32648 and possibly PR pkg/33030.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-12 06:44:42 +0000