summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2008-11-05Add some extra install docsadrianp2-3/+8
2008-11-05Update to 1.4.1adrianp3-19/+21
Some highlights: Bug #1680965 sans lookup fails -- Jordan Wiens Fixed index.php redirect -- Kevin Johnson for Terry Burton Added Worldmap feature -- Juergen Leising Added Vendor MAC Map -- Juergen Leising Increased memory limit from 50 to 128 MB in base_graph_common.php Fixed "Select Signature from List" in the query form -- Juergen Leising Newly generated coordinates file world_map6.txt. -- Juergen Leising See docs/CHANGELOG for all the details
2008-11-05Update to 1.17. Add dependencies on p5-Net-LibIDN and p5-IO-Socket-INET6wiz2-9/+11
for IDN and inet6 support. v.17 2008.10.13 - no code changes, publish v.16_3 as v.17 because it looks better than v.16 - document win32 behavior regarding non-blocking and timeouts v.16_3 2008.09.25 - fix t/nonblock.t with workaround for problems with IO::Socket::INET on some systems (Mac,5.6.2) where it cannot do nonblocking connect and leaves socket blocked. - make some tests less verbose by fixing diag in t/testlib.t (send output to STDOUT not STDERR and prefix with '#') v.16_2 2008.09.24 - work around Bug in IO::Socket::INET6 on BSD systems http://rt.cpan.org/Ticket/Display.html?id=39550 by setting Domain based on PeerAddr Thanks to srezic for report and support - remove tests of recv/send from t/core.t. Might badly interact with SSL handshake and cause crashes as seen on OS X 10.4 v.16_1 2008.09.19 - better support for IPv6: - IPv6 is enabled by default if IO::Socket::INET6 is available - t/inet6.t for basic tests
2008-11-05Add .py files to PLIST (Why haven't they been there in the first place? Hm.)tonnerre1-1/+25
2008-11-03Add script for munging locale files.wiz1-0/+18
2008-11-03Remove superfluous patches.wiz6-164/+0
2008-10-30Fix hydra-gtk/src/callbacks.c to put server and service last on thebad3-3/+52
command line as hydra(1) expects. Makes xhydra work again. Bump PKGREVISION.
2008-10-30Hydra does not depend on arp0. And subversion-base pulls in the correctbad2-4/+2
version of APR by itself.
2008-10-30Add security/pakchoisbjs1-1/+2
2008-10-30remove --enable-dlopen from CONFIGURE_ARGS; it's unnecessarybjs1-3/+1
2008-10-30Add pakchois-0.4. (upcoming new neon can use it)bjs5-0/+87
-- pakchois is just another PKCS#11 wrapper library. pakchois aims to provide a thin wrapper over the PKCS#11 interface. The goals are: 1) to offer a modern* object-oriented C interface wrapper for PKCS#11. 2) to not hide or abstract away any details of the PKCS#11 interface itself except where absolutely necessary. 3) to handle the details of loading DSOs 4) to allow the caller to avoid caring about where on the system PKCS#11 modules might be stored, or exactly how they are named. 5) to avoid any dependency on a particular cryptography toolkit. Existing PKCS#11 wrapper libraries solutions differ in at least one of the above goals. *: "modern" being a euphemism for not using process-global state, having a sane symbol namespace, etc.
2008-10-29Add patch-ag, patch-ah, patch-ai (hi, shannonjr!).wiz1-1/+4
2008-10-29Three patches to permit compilation under Solaris with SunPro compiler:shannonjr3-0/+42
patch-ag and patch-ah fix void functions that attempt to return the result of calling a void function. patch-ai conditionally includes <sys/inttypes.h> to pick up uint32_t
2008-10-29Add patch-ag.wiz1-1/+2
2008-10-29"return _gcry_rngfips_deinit_external_test (context);"shannonjr1-0/+11
is incorrect because: 1) _gcry_rngfips_deinit_external_test() is void function 2) the calling function, random, is declared void The unpatched code will not compile with Sun compiler.
2008-10-27Remove seahorse-gedit and seahorse-nautilus, replace by seahorse-plugins.wiz7-126/+2
2008-10-27Import seahorse-plugins-2.24.1 as security/seahorse-plugins.wiz5-0/+453
Seahorse is a GNOME front-end for GnuGP. It can be used for signing, encrypting, verifying and decrypting text and files. The text can be taken from the clipboard, or written directly in the little editor it has. Seahorse is also a keymanager, which can be used to edit almost all the properties of the keys stored in your keyrings. This package contains various plugins for Seahorse.
2008-10-27Update to 2.24.1. Please note that seahorse-agent and two otherwiz5-109/+102
tools moved to the new seahorse-plugins package. seahorse 2.24.1 --------------- * Fix problems with seahorse crashing when searching for remote keys. [Adam Schreiber] * Build fixes on Solaris [Jeff Cai] * Fix selection of keys in libcryptui. [Philip Withnall] * I18n fixes. [Adam Schreiber] seahorse 2.24.0 --------------- * Some tweaks to the password prompt window, including allowing minimizing to release the keyboard grab. * Fix compiler warnings for gcc 4.3. * Return a 'cancelled' error when from the daemon crypto dbus methods when a user cancels out of a password prompt. * Show revoked subkeys properly in details view of PGP keys. * Fix problem deleting SSH keys. * Fix dialog prompt column widths, and elipsize long text in key listing. [Adam Schreiber] * Fix problem with 'no keys available' when trying to sign a PGP key from within the key manager. * Add 'exportable' flag to objects/keys and don't enable export UI if selected objects are not exportable. * Build fixes [Joe Orton, Adam Schreiber] * Crash and other fixes. [Christian Persch] seahorse 2.23.92 ---------------- * Fix crash when changing a stored Gnome Keyring password. * Fix certain crashes on syncing, searching and other operations. * Fix dumb 'Couldn't import keys' error message when success. seahorse 2.23.91 ---------------- * Fix copying keys to the clipboard. [Adam Schreiber] * Fix double free crash when importing keys. * Fix crasher when deleting a key. * Don't add extra null bytes to SSH authorized_keys and similar files. [Adam Schreiber] * Documentation fixes. [Adam Schreiber] * Don't repeatedly load gnome-keyring items. [Adam Schreiber] * Make help button in 'First Time Options' work proprely. [Adam Schreiber] * Better wording for options in PGP key dialogs. [Adam Schreiber] seahorse 2.23.90 ---------------- * Icon makeover. [Michael Monreal] seahorse 2.23.6 --------------- * Initial PKCS#11 certificate listing implementation. * Internal code refactoring. * Fix problems with reference counting on operations. * Use base64 functions in glib, rather than rolling our own. * Don't use deprecated LDAP functions. [Adam Schreiber] * String operation fixes. [Adam Schreiber] * Build fixes [Jeff Cai] seahorse 2.23.5 --------------- * Fix importing keys from key servers [Mackenzie Morgan] * Factor out seahorse-plugins to a different module. * Add XDS drag and drop support. * Remove gnome-vfs dependency and use gio instead. * Return key id of signer from DBus service even when key is not found locally [Adam Schreiber] * Refactor UI code internally into modules. * Remove hard GPG and GPGME dependency. * Replace signer drop down in key chooser with just a check button when only one secret key exists. [Adam Schreiber] * Set sync button insensitive when no server is selected. [Adam Schreiber] * Test for secure memory before using it. [Coleman Kane] * Change trust model used to match GPG's. [Adam Schreiber] * Remove libgnome and libgnomeui dependencies. [Saleem Abdulrasool] * Grab keyboard focus when prompting for password. [Josselin Mouette] * Use the vala programming language for some code. * Add initial infrastructure for PKCS#11 key/certificate support. * Save and load window sizes from gconf. [Adam Schreiber] * Build fixes [Brian Cameron, Saleem Abdulrasool, Alexis Ballier, Christian Persch, Rodrigo Moya]
2008-10-25Also supports apache 2.2.xadrianp1-2/+4
PKGREVISION++
2008-10-25Might be good to actually add the patch that fixes the problemadrianp1-0/+13
2008-10-25OpenSSL is not JOBS_SAFEadrianp2-3/+5
Pull in a fix from the OpenSSL CVS: http://cvs.openssl.org/filediff?f=openssl/crypto/x509/x509_att.c&v1=1.14&v2=1.15 This should fix PR #39767 opened by Wolfgang Solfrank
2008-10-25Update to 2.24.1:wiz3-7/+9
Changes in version 2.24.1 are: * Fix crash on logout on Solaris. [Jeff Cai] * Add missing 'server' attribute to the NETWORK_PASSWORD schema.
2008-10-22+py-asn1tonnerre1-1/+2
2008-10-22Import the ASN1 Python module to pkgsrc. This module allows to dissecttonnerre4-0/+107
ASN1-encoded files (DER, BER, PER, etc.) in Python. ASN1 is the Abstract Syntax Notation version 1, as defined by the International Telecommunication Union (ITU).
2008-10-20The HTTP MASTER_SITES entry is no longer available, and has a text filedsainty1-2/+2
indicating that ftp://ftp.gnu.org/pub/gnu/gnutls/ should be used instead. The replacement site also supports HTTP, so make it our HTTP source.
2008-10-19Bump the PKGREVISION for all packages which depend directly on perl,he63-83/+126
to trigger/signal a rebuild for the transition 5.8.8 -> 5.10.0. The list of packages is computed by finding all packages which end up having either of PERL5_USE_PACKLIST, BUILDLINK_API_DEPENDS.perl, or PERL5_PACKLIST defined in their make setup (tested via "make show-vars VARNAMES=...").
2008-10-18Prelude-manager now can send alerts via E-mail. Make start depend on mail.shannonjr1-2/+2
2008-10-18Update to 0.9.14. Changes:shannonjr2-6/+6
- Fix log file permission error, that could happen thought the user Prelude-LML was running as could access the file (#291). - ModSecurity ruleset update, by Dan Kopecek <dkopecek@redhat.com>: provides much more descriptive classification.text, add regexps for [file ..], [line ...], [tag ...] fields and fine tune targets/types (#321). - Deprecate Gamin/FAM support in favor of libev: the previous implementation had problem on SELinux enabled system due to Gamin server startup being triggered by other program, and thus using improper role for Prelude-LML. (#326). - Improved polling architecture by using Operating System specific backend when possible. - We now monitor files that are not immediately available for reading on startup: once the file can be monitored, libev provide us with a notification.
2008-10-18Update to 0.9.21.1. Changes:shannonjr3-8/+7
- Fix an assertion warning upon sensor start in case the address for the local machine could not be found. - Consistency rework of EasyBindings IDMEFCriteria API. - Add refcount support for prelude_client_t and prelude_client_profile_t, and update EasyBindings destructor to use them. - Fix a bug where EasyBindings would be built although they were not enabled. - Fix path issue in case libprelude was configured with specific path outside of $prefix (fix #319).
2008-10-18Changes 2.6.0:adam7-56/+39
* libgnutls: Correct printing and parsing of IPv6 addresses. * libgnutls-openssl: fix out of bounds access. * certtool: Use inet_pton for parsing IPv6 addresses. * Added API to replace and update the crypto backend. * certtool: can add several subject alternative names via template file. * opencdk: Parse (but not decrypt) encrypted secret keys. * more...
2008-10-17Changes 4.26:adam4-18/+17
* libwrap related fixes, better debugging messages, MS Visual C++ support Changes 4.25: * delay libwrap process spawning after dropping privs, other improvements
2008-10-16PKGREVISION bump for libevent shlib name change.wiz4-8/+8
2008-10-16update to 2.24.0drochner4-21/+62
This switches to the gnome-2.24 release branch.
2008-10-14Changes 1.4.3:adam8-38/+40
* Try to auto-initialize Libgcrypt to minimize the effect of applications not doing that correctly. This is not a perfect solution but given that many applicationion would totally fail without such a hack, we try to help at least with the most common cases. Folks, please read the manual to learn how to properly initialize Libgcrypt! * Auto-initialize the secure memory to 32k instead of aborting the process. * Log fatal errors via syslog. * Changed the name and the semantics of the fips mode config file. * Add convenience macro gcry_fips_mode_active. * More self-tests. * Documentation cleanups.
2008-10-14Changes 1.6:adam4-23/+20
* Fixed a build problem under Windows. Changes 1.5: * Minor build system fixes. * Updated gettext. Removed included gettext copy. * gpg-error has a new option --version.
2008-10-13Fix botched update of nessus.bad10-26/+40
Need to BUILDLINK_ABI_DEPENDS on the 2.2.11 versions of the libraries. Bump PKGREVISION wholesale to disambiguate the fixed packages from the botched ones and depend on them. Use GPLed version of the plugins instead of the non-free version. While here fix permissions of PKG_SYSCONFDIR in nessus-core/Makefile.
2008-10-13Changes 1.5:adam2-7/+7
- Update gnulib files. - Fix memory leaks.
2008-10-12Update from 2.1.4->2.5.7adrianp6-91/+76
Use ./configure as one is now supplied libmxl2 is no longer optional but curl is Rename doc/eg dirs from ap-security to ap-modsecurity * Allow for disabling request body limit checks in phase:1 * Now log XML parsing/validation warnings and errors to be in the debug log at levels 3 and 4, respectivly. * Transformation caching has been deprecated, and is now off by default. We now advise against using transformation caching in production. * Improve request body processing error messages. Any many more . . . see CHANGES for all the details
2008-10-11Move mk/emacs.mk to editors/emacs/modules.mk.uebayasi2-4/+4
Don't call pkg_info to get the installed Emacs version; always use the version matching EMACS_TYPE set by users. Be DEPENDS to it. This should address pkg/37146 by Aleksey Cheusov. While here convert some emacs lisp packages to user-destdir.
2008-10-10.nbin patches are not installedadam1-0/+13
2008-10-10Changes 2.2.11:adam10-46/+39
* Bug fixes and improvements
2008-10-09Update to 1.16:wiz2-6/+6
v1.16 - change code for SSL_check_crl to use X509_STORE_set_flags instead of X509_STORE_CTX_set_flags based on bug report from <tjtoocool[AT]phreaker[DOT]net > - change opened() to report -1 if the IO::Handle is open, but the SSL connection failed, needed with HTTP::Daemon::SSL which will send an error mssage over the unencrypted socket
2008-10-03Don't put glob.h in the PLIST for NetBSD. At least 4.0 and current dogdt1-4/+10
not require this, and this fixes the build on those systems. Not objected to by joerg@.
2008-10-03Use POSIX types for int32/uint32 to fix build on AMD64.joerg4-27/+38
Add DESTDIR support.
2008-10-02Don't mess with /etc on installation. Add DESTDIR support.joerg3-6/+17
2008-10-02Fix DESTDIR build.joerg1-1/+3
2008-10-02Fix lp64 build. Add DESTDIR support.joerg3-4/+47
2008-10-01* Move inclusion of phthread.buildlink3.mk to rightful place in options.mk andobache2-12/+10
only suggest pthread option when native pthread exists. We cannot use pthread.buildlink3.mk to just detect if suituable pthread implementation exist or not. Avoid unwanted dependency on pthread package when no native pthread and pthread option off. * Move inclusion of seculity/tcp_wappers/buildlink3.mk to rightful place in options.mk. Avoid unwanted dependency on tcp_wrappers when libwrap option off. * Remove deprecated(?) --with-tcp-wrappers from CONFIGURE_ARGS. * Remove --enable-libwrap from CONFIGURE_ARGS even if require tcp_wrappers. It affect not only check of existence of tcp_wappers but also blow off needful addition of -lwrap to LIBS. Fixes PR 39635
2008-10-01Revert to previous revision and remove bin/makedat (it was conflict with ↵obache1-17/+1
maildrop?). Additional entries are optionally and already handled in Makefile and options.mk. Re: PR 39661
2008-10-01Make dsniff and dsniff-nox11 build on NetBSD-current:apb5-8/+34
* In dsniff-nox11/Makefile, add a post-configure target to move missing/sys/queue.h out of the way if the configure script found a real sys/queue.h. * Add patches to #include <string.h> in some files where I noticed warnings. Bump PKGREVISION for both dsniff and dsniff-nox11.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-30 19:48:35 +0000