summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2004-07-06Re-add revision 1.3 of patch-ab as patch-ag. This resurrects a change tojlam3-3/+17
use shlibtool to build the plugins to avoid generating and installing a static archive for the plugin module. This fixes PLIST breakage. Bump the PKGREVISION to 2.
2004-07-05Pull in a fix from ASG CVS: increase maxoutbuf buffer sizerecht3-2/+17
This allows uploading of SIEVE scripts larger than 4kb if GSSAPI authentification is used for cyrus-imapd. link to the patch provided by Jukka Salmi in PR 26165 bump PKGREVISION to 1
2004-07-02bl2 -> bl3 in a package that does not have USE_BUILDLINK* set.wiz1-2/+2
2004-07-02When exec'ing child processes (netstat and vmstat), make sure the standardjmmv3-2/+35
file descriptors (0, 1, 2) are open. This avoids multiple warnings issued under NetBSD about running set[ug]id programs with those descriptors closed. Fixes PR pkg/26079; although it talks about gaim, the problem is here, in libgcrypt. Bump PKGREVISION to 1.
2004-07-01Unused.wiz1-31/+0
2004-07-01Convert to bl3.wiz1-3/+3
2004-06-28Update to bl3. All test built with jdk or sun-jdk14.abs1-2/+2
jakarta-tomcat4 has other issues independant of this - will patch next
2004-06-27use buildlink3 for compiler specific flag stripping. fixes build ongrant1-1/+2
Solaris.
2004-06-27tiny whitespace tweakgrant1-2/+2
2004-06-27this needs flex and bison to build. fixes build on Solaris.grant2-8/+9
XXX this could be handled better by the tools stuff.
2004-06-27this needs -lnsl on Linux and -lnsl -lsocket on Solaris.grant1-1/+6
2004-06-27this blindly calls "gcc" so use buildlink3 so it uses the wrapper.grant1-1/+3
2004-06-27don't call a static function from an inline function, not allgrant2-1/+15
compilers allow it.
2004-06-27don't inline a function in one source file and expect to be able togrant3-1/+29
use it in other source files - not all compilers allow this.
2004-06-27use buildlink3 and include libpcap/buildlink3.mk to remove the hiddengrant1-1/+3
dependency on libpcap. no PKGREVISION bump required as this would not build without libpcap, anyway.
2004-06-27this uses a c and c++ compiler.grant1-1/+2
2004-06-27this blindly calls "gcc" so use buildlink3 so it uses the compilergrant1-2/+3
wrappers.
2004-06-26this uses zlib, so use buildlink3 and include zlib/buildlink3.mk.grant1-1/+3
2004-06-26don't override CC, don't pass gcc specific flags.grant2-7/+11
2004-06-26be quiet in do-buildgrant1-3/+3
2004-06-26use the specially provided targets for solaris sparc and i386grant1-1/+21
optimisations. this doesn't have a configure script.
2004-06-26nuke trailing slashesgrant1-7/+7
2004-06-26oops, back out a line that shouldn't have been committed.grant1-3/+1
2004-06-26don't override CC, LD, etc.grant3-8/+25
2004-06-25Cede maintainership to the hard-working people on tech-pkg@NetBSD.org.jlam1-2/+2
2004-06-25Whitespace nits.jlam1-11/+11
2004-06-24Set BUILDLINK_RECOMMMENDED to mit-krb5>=1.3.4 due to the security advisory:jlam1-3/+4
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-001-an_to_ln.txt
2004-06-24Update to security/mit-krb5 to 1.3.4. Major changes from version 1.3.3jlam2-6/+5
include a fix for security advisory [MITKRB-SA-2004-001]: http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-001-an_to_ln.txt Please read the security advisory to see if you are affected and should update your MIT krb5 installation.
2004-06-23Update flawfinder to 1.26. Don't set PY_PATCHPLIST, as it is useless.snj2-12/+6
Don't include python/extension.mk, as it is also useless. Don't set NO_CONFIGURE, because it makes PYTHON_PATCH_SCRIPTS useless. Don't set MAKEFILE, as we don't actually use the included makefile for anything. Changes since 1.24: * Added more support for Microsoft's approach to internationalization. * Added two new rules for GLib functions, "g_get_home_dir" and g_get_tmp_dir". * Added curl_getenv(). * Added several rules for input functions (for -I) - recv, recvfrom, recvmsg, fread, and readv. * Tightened the false positive test slightly; if a name is followed by = or - or + it's unlikely to be a function call, so it'll be quietly discarded. * Modified the summary report format slightly. * Modified the getpass text to remove an extraneous character. * Added rules for cuserid, getlogin, getpass, mkstemp, getpw, memalign, as well as the obsolete functions gsignal, ssignal, ulimit, usleep. * Modified text for strncat to clarify it. * Fixed error in --columns format, so that the output is simply "filename:linenumber:columnnumber" when --columns (-C) is used. * Eliminated "Number of" phrase in the footer report * Added more statistical information to the footer report. * Added shortcut single-letter commands (-D for --dataonly, -Q for --quiet, -C for --columns), so that invoking from editors is easier. * Tries to autoremove some false positives. In particular, a function name followed immediately by "=" (ignoring whitespace) is automatically considered to be a variable and NOT a function, and thus doesn't register as a hit. There are exotic cases where this won't be correct, but they're pretty unlikely in real code. * Added a "--falsepositive" (-F) option, which tries to remove many more likely false positives.
2004-06-21update to 0.42drochner3-21/+27
Many fixes and feature additions since 0.38. Too many to list here.
2004-06-21Update to 0.4.4:jmmv4-20/+8
This is mainly a bugfix release. Sometimes EOF was not properly detected while reading the password file. This would result in an 'Line too long' error message (and some wierd behavour). Also, the current password file is now backed up before each write.
2004-06-17upgrade to 20040617a. includes important certificate mangement change.itojun2-7/+7
2004-06-15Add and enable openssh+gssapi.kristerw1-1/+2
2004-06-15Resurrect openssh+gssapi per request of jwise@.kristerw16-0/+568
2004-06-14Update priv to 1.0beta2nb1.uebayasi1-1/+4
* Make sure ${PKG_SYSCONFDIR} is passed to configure. * Care ${PRIV_CONF_DIR} as an obsoleted variable. Pointed out by Matt Green.
2004-06-10Convert to subst.mk.jmmv1-4/+6
2004-06-10Fix build (SSL not found during configuration, causing missing includes).jmmv1-2/+2
Problem probably introduced during the conversion to buildlink3. Exposed by latest kristerw@'s bulk build in NetBSD 2.0_BETA/i386.
2004-06-08Add USE_INET6 to BUILD_DEFS as these packages use it. Part of PR#25743 fromcjep1-1/+3
Georg Schwarz.
2004-06-06Add simple rc.d script. Bump PKGREVISION.schmonz2-2/+21
2004-06-06Update audit-packages to 1.32, with fixes for the problems mentionedagc4-21/+27
in PR 25654 from Hauke Fath. Take any non-standard values from audit-packages.conf file in audit-packages as well as download-vulnerability-list. Fix the pre-formatted documentation so that filenames to be substituted are not formatted with the bold or underline "overstrikes" on ttys, so that the correct sed substitutions take place at package install time.
2004-06-01Remove obsolete packages, per discussion on tech-pkg.kristerw63-8643/+1
2004-06-01Since we set ALL_TARGET to irix6 (under, IRIX 6.x), we don't need to patchjschauma2-11/+3
the irix6.5 target into the Makefile.
2004-05-31Depend on security/openssh instead of security/ssh for machines thatkristerw1-2/+2
do not have /usr/bin/ssh.
2004-05-28Fixed bug, which only appeared in the NetBSD 2.0 systems where thekivinen3-2/+32
write can return 0 even when the select has indicated that socket is writable. Do not consider this error, but call select again.
2004-05-27Use versioned distfile.wiz2-8/+5
2004-05-27The libopencdk.so.8.0 used libgcrypt.so.11.reed2-3/+4
libgcrypt was recently upgraded. So when using binary packages it is possible for new libgcrypt (libgcrypt.so.12.1) to be installed with old opencdk-0.5.4 package. So bump PKGREVISION and BUILDLINK_DEPENDS (to force a new package to be required).
2004-05-26Make chklastlog useful on NetBSD; from Makoto Fujiwara in PR 25701.wiz3-2/+19
Bump PKGREVISION.
2004-05-26PKGREVISION bump because of libidn shlib major bump.wiz1-2/+2
2004-05-26Add tacshell.sekiya1-1/+2
2004-05-26tacshell-0.91: RSA ACE/Server sdshell workalike, using TACACS+sekiya5-0/+31