summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-11-23Update to 5.31:wiz2-8/+6
5.31 Mon Sep 5 00:52:42 MST 2005 - added standard tests for pod and pod-coverage checking - inserted subtest to check for failure when using unrecognized SHA algorithm 5.30 Sat Aug 20 16:46:08 MST 2005 - updated docs with recent NIST statement on SHA-1 -- advises use of larger and stronger hash functions (i.e. SHA-224/256/384/512) for new developments 5.29 Sun Aug 14 04:48:34 MST 2005 - added explicit casts in "shaload" routine (ref. "ldvals") -- thanks to E. Allen Smith for pointing out SGI compiler warnings on IPxx-irix platforms - updated docs with cautionary note about SHA-1
2005-11-23Update to 1.13:wiz2-6/+6
2005-10-18 Gisle Aas Release 1.13 Fixed documentation typo.
2005-11-22Depend on p5-Sort-Versions instead of p5-SortVersions.wiz1-3/+3
Bump PKGREVISION.
2005-11-22Update "ipsec-tools" package to version 0.6.3. Changes since 0.6.1:tron2-6/+6
- Various bug fixes - ISAKMP mode config works without Xauth This update fixes the security vulnerability reported in SA17668.
2005-11-21Update audit-packages to version 1.41agc2-4/+14
Fix PR 31957 - only report that we're using @PKG_SYSCONFDIR@/audit-packages.conf if we're in verbose mode.
2005-11-21Update fprot-workstation-bin to version 4.6.2. Changes include:ben4-50/+81
o A small bug was fixed in the check-updates.pl program where the updater wouldn't find the DEF files to update. o Bug in CHM mini-scanner which could lead to crashes was fixed o f-prot-milter wouldn't run on Solaris 10 because of library issues o Fixes an issue where the scanner would sometimes mis-identify .alr files as base64 coded executables o Fix where '-list' option to f-prot would not list the filenames of text-based archives, such as MIME containers. o Fix where certain executables would be mis-identified as UPX packed o Fix where UTF8 coded text files would not be scanned o Fix a crash issue when scanning .chm files containing strange header values o Updated error message when access is denied to files due to user permission problems o F-Prot 4.6.0 contains scanning engine version 3.16.7 which improves detection capabilities significantly and improves several scanning methods along with bugfixes.
2005-11-18Add and enable md4-collision and md5-collisionagc1-1/+3
2005-11-18Initial import of md4-collision-20051118, a program to calculate md4 collisions.agc4-0/+37
MD4 Collision Generation Faster implementation of techniques described in Cryptanalysis for Hash Functions MD4 and RIPEMD, by Xiaoyun Wang, et al. Average runtime on P4 1.6ghz - 5 seconds
2005-11-18Initial import of md5-collision-20051118, a program to calculate md5 collisions.agc4-0/+38
MD5 Collision Generation Faster implementation of techniques in How to Break MD5 and Other Hash Functions, by Xiaoyun Wang, et al. Old (Wang, et al.) average run time on IBM P690 supercomputer - 1 hour New average run time on P4 1.6ghz PC - 45 minutes
2005-11-17Update to 20050615:wiz5-84/+37
2005-06-15 04:10 nolan * src/serializers.cpp: readCBC wasn't allocating enough memory for the buffer when the string's length was a multiple of 8. This was fixed by adding one. 2005-06-15 03:32 nolan * src/serializers.cpp: Fixed a memory leak in readCBC 2005-02-07 18:04 nolan * src/: aboutdlg.ui, manualdlg.ui, newpassphrasedlg.ui, passphrasedlg.ui, preferencesdlg.ui, pwordeditdlg.ui, startupdlgbase.ui: Added accelerators 2004-12-09 01:51 nolan * release/Makefile: Removed signing from all 2004-12-09 01:49 nolan * src/safelistview.cpp: Root is no longer decorated 2004-12-09 01:48 nolan * images/help.png: Copied from Psi 2004-12-06 11:03 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h, safe.cpp, safelistview.cpp, safelistview.hpp: Added in place group renaming Safe emits changed() now MyPasswordSafe is connected to Safe::changed() Added savingEnabled() slot to MyPasswordSafe 2004-12-06 08:38 nolan * src/: mypasswordsafe.ui, safelistview.cpp: Added icon to passwords 2004-12-06 08:38 nolan * MyPasswordSafe.pro, images/configure.png, images/editcopy.png, images/editcopy_1.png, images/fetch_user.png, images/file_locked.png, images/folder_new.png: Added and redid some images 2004-12-06 08:14 nolan * Makefile, README: Updated README Increased minor version number 2004-12-06 08:07 nolan * src/crypto/: bfproxy.cpp, bfproxy.hpp, cryptointerface.hpp: Added copyright notice 2004-12-06 07:34 nolan * src/: safeserializer.cpp, serializers.cpp, serializers.hpp: Used #ifdef instead of #if 2004-12-06 07:32 nolan * MyPasswordSafe.pro, src/encryptedstring.cpp, src/encryptedstring.hpp, src/myutil.cpp, src/myutil.hpp, src/safe.cpp, src/safe.hpp, src/safeserializer.cpp, src/serializers.cpp, src/serializers.hpp, src/xmlserializer.cpp, src/crypto/bfproxy.cpp, src/crypto/bfproxy.hpp, src/crypto/blowfish.cpp, src/crypto/blowfish.h, src/crypto/cryptointerface.hpp, src/crypto/sha1.cpp, src/crypto/sha1.h, src/pwsafe/PW_BlowFish.cpp, src/pwsafe/PW_BlowFish.h, src/pwsafe/Util.cpp, test/bfproxytest.build, test/bfproxytest.cpp: Moved the serializers off of Password Safe's blowfish and sha1 code Created a proxy class for Blowfish Created two serializers for big endian machines to open the borked safes Made EncryptedString use a single encryption object 2004-12-06 01:16 nolan * src/startupdlgbase.ui: Changed the shadow and shape of banner 2004-12-06 01:14 nolan * release/Makefile: Added about_banner swapping Renamed 'upload' to 'release' All just compiles, no more uploading 2004-12-06 01:01 nolan * src/aboutdlg.ui: Added logo to license 2004-12-06 01:00 nolan * images/: about_banner.png, about_banner.src.png: Branded about logo Created an unbranded src logo 2004-11-30 16:26 nolan * images/edit_remove.png: Switched it to a minus sign again, but it's based off of the new plus sign 2004-11-29 22:35 nolan * uuid-1.0.0/: Makefile, config.status: [no log message] 2004-11-29 22:35 nolan * images/: button_ok.png, edit_add.png, edit_remove.png, fileclose.png: Copied better icons from Psi 2004-11-02 17:17 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h: Connected helpAbout 2004-11-02 17:17 nolan * MyPasswordSafe.pro: Removed some spaces 2004-11-02 16:51 nolan * images/: fileclose.png, lock.png: Added 2004-11-02 16:51 nolan * Makefile: Removed domainname 2004-11-02 16:37 nolan * src/safelistview.cpp: The username is copied to the clipboard on a drag 2004-11-02 16:28 nolan * Makefile: Inced version 2004-11-02 16:27 nolan * README: Added headers and -jN 2004-11-02 16:25 nolan * src/: aboutdlg.ui, aboutdlg.ui.h, main.cpp, mypasswordsafe.ui, mypasswordsafe.ui.h: The license gets displayed the first time MyPS is ran 2004-11-02 15:57 nolan * src/: main.cpp, mypasswordsafe.ui, mypasswordsafe.ui.h: Made locking hide the main window Locking no longer prompts on a change of virtual desktops 2004-11-02 01:38 nolan * src/mypasswordsafe.ui.h: [no log message] 2004-11-01 18:42 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h, startupdlgbase.ui, startupdlgbase.ui.h: The password widget gets focus after an action is selected Set the startup dialog's icon Changed a couple of the action items' text Default action sets the default safe 2004-11-01 18:23 nolan * MyPasswordSafe.pro, src/myendian.h, src/myutil.hpp, src/startupdlgbase.ui.h, src/crypto/blowfish.cpp, src/crypto/blowfish.h, src/crypto/sha1.cpp, src/crypto/sha1.h, src/pwsafe/PwsPlatform.h: Added new crypto 2004-11-01 16:54 nolan * MyPasswordSafe.pro, src/encryptedstring.cpp, src/encryptedstring.hpp, src/serializers.cpp, src/pwsafe/PW_BlowFish.cpp, src/pwsafe/PW_sha1.cpp, src/pwsafe/PW_sha1.h, src/pwsafe/Util.cpp, src/pwsafe/Util.h, src/pwsafe/sha1.cpp, src/pwsafe/sha1.h: Renamed sha1 Changed the #includes 2004-11-01 16:50 nolan * README: Removed Boost and added trademark and copyright info 2004-11-01 16:49 nolan * MyPasswordSafe.pro, README: [no log message] 2004-11-01 16:48 nolan * MyPasswordSafe.pro: Changed BlowFish to PW_BlowFish 2004-11-01 16:48 nolan * src/pwsafe/: BlowFish.cpp, BlowFish.h, PW_BlowFish.cpp, PW_BlowFish.h: Renamed 2004-11-01 16:44 nolan * COPYING: [no log message] 2004-11-01 16:34 nolan * src/: encryptedstring.cpp, encryptedstring.hpp, exception.hpp, main.cpp, mypasswordsafe.ui.h, myutil.cpp, myutil.hpp, newpassphrasedlg.ui.h, passphrasedlg.ui.h, plaintextlizer.cpp, plaintextlizer.hpp, preferencesdlg.ui.h, pwordeditdlg.ui.h, safe.cpp, safe.hpp, safedragobject.cpp, safedragobject.hpp, safelistview.cpp, safelistview.hpp, safeserializer.cpp, safeserializer.hpp, securedstring.cpp, securedstring.hpp, serializers.cpp, serializers.hpp, smartptr.cpp, smartptr.hpp, startupdlg.cpp, startupdlgbase.ui.h, uuid.cpp, uuid.hpp, xmlserializer.cpp, xmlserializer.hpp: Changed the header 2004-11-01 16:01 nolan * src/aboutdlg.ui: Changed license to GPL 2004-11-01 16:01 nolan * MyPasswordSafe.pro: [no log message] 2004-11-01 12:53 nolan * src/: mypasswordsafe.ui.h, passphrasedlg.ui.h, preferencesdlg.ui.h, pwordeditdlg.ui.h: Changed SGS to SG 2004-11-01 12:44 nolan * src/: encryptedstring.cpp, encryptedstring.hpp, main.cpp, plaintextlizer.cpp, safe.cpp, safe.hpp, safelistview.cpp, safeserializer.cpp, safeserializer.hpp, securedstring.cpp, securedstring.hpp, serializers.cpp, serializers.hpp, smartptr.cpp, smartptr.hpp, uuid.cpp, uuid.hpp, xmlserializer.hpp: Changed Semantic Gap Solutions to Semantic Gap (TM) 2004-11-01 12:39 nolan * src/: safe.cpp, safelistview.cpp, smartptr.cpp, smartptr.hpp: Replaced assert w/ Q_ASSERT Added headers to smartptr.?pp 2004-11-01 12:35 nolan * src/main.cpp: ifdefed out a print statement 2004-11-01 12:34 nolan * src/mypasswordsafe.ui.h: browseForSafe uses QFileDialog's static methods 2004-11-01 12:10 nolan * src/: aboutdlg.ui, manualdlg.ui, mypasswordsafe.ui, mypasswordsafe.ui.h, newpassphrasedlg.ui: Changed icons New safes won't ask to be saved when they're closed Changed MyPS's icon 2004-11-01 12:10 nolan * images/: button_cancel.png, button_ok.png, configure.png, contexthelp.png, edit.png, editcut.png, exit.png, fileopen.png, filesave.png, filesaveas.png, folder_new.png, help.png, redo.png, undo.png: Switched to 16x16 images 2004-11-01 12:09 nolan * MyPasswordSafe.pro: [no log message] 2004-10-31 07:32 nolan * src/pwsafe/: PwsPlatform.h, Util.h: Refactored the endian.h inclusion 2004-10-31 07:32 nolan * src/: mypasswordsafe.ui.h, safelistview.cpp: Changed the default column sizes 2004-10-31 01:38 nolan * src/: aboutdlg.ui, manualdlg.ui: Added a two contributors to credits Changed Semantic Gap (TM) Solutions to Semantic Gap (TM) 2004-10-31 01:22 nolan * release/Makefile: Added upload 2004-10-31 01:07 nolan * src/pwsafe/Util.h: Added endian.h for __APPLE__ 2004-10-30 09:41 nolan * MyPasswordSafe.pro, src/newpassphrasedlg.ui, src/passphrasedlg.ui, src/preferencesdlg.ui, src/pwordeditdlg.ui, src/startupdlgbase.ui: Added icons to buttons 2004-10-30 09:15 nolan * src/: passphrasedlg.ui, startupdlgbase.ui: Changed the dialog sizes 2004-10-30 08:58 nolan * images/keys.png: Readded 2004-10-30 08:58 nolan * MyPasswordSafe.pro, images/keys.png, src/passphrasedlg.ui, src/startupdlgbase.ui: Added keys Changed source files to use keys.png 2004-10-30 08:44 nolan * images/keys.png: new icon 2004-10-22 19:14 nolan * doc/sshots/mainwindow.jpg, src/serializers.cpp: Groupnames are converted from UTF8 2004-10-11 05:27 nolan * Makefile, src/pwsafe/PwsPlatform.h, src/pwsafe/Util.h: Applied contributed patches 2004-10-03 22:04 nolan * src/: mypasswordsafe.ui.h, safedragobject.cpp, safedragobject.hpp, safelistview.cpp, safelistview.hpp: Did some work so MyPS wouldn't segfault when dragging onto another app 2004-10-03 22:03 nolan * MyPasswordSafe.pro: Removed spaces added by Designer 2004-10-01 22:40 nolan * Makefile: Increased version number Added check for HOST 2004-10-01 22:26 nolan * src/: aboutdlg.ui, mypasswordsafe.ui, mypasswordsafe.ui.h, newpassphrasedlg.ui, passphrasedlg.ui, plaintextlizer.cpp, preferencesdlg.ui, pwordeditdlg.ui, safedragobject.cpp, safelistview.cpp, safelistview.hpp, safeserializer.cpp, xmlserializer.cpp, xmlserializer.hpp: Added some file headers Changed the button order on some dialogs Added drag and drop Finished XmlSerializer
2005-11-16regen.wiz1-45/+67
2005-11-16Improve usage. Add -K description.wiz1-4/+5
2005-11-16Various improvements:wiz1-25/+21
Describe -K. Improve -i description. Sort options in SYNOPSIS. Remove superfluous .Pp. Add EXIT STATUS section. Remove trailing whitespace. Bump date for new -i.
2005-11-16Add several new command line options so audit-packages can be used as part oferh3-19/+135
the improved ALLOW_VULNERABILITIES support. This now has the ability to: -p : Only check a single package -i : Provide a list of vulnerabilities to ignore -K : Specify an alternate pkg dbdir. Bump the version to 0.40.
2005-11-15Added an empty line at line 2.rillig1-1/+2
2005-11-14stop openssh from complaining about zlib version numbers, as pkgsrcgrant1-1/+5
already enforces a "secure" version of zlib via dependencies.
2005-11-14Update to 1.2.9:wiz2-6/+6
* Version 1.2.9 (2005-11-07) - Documentation was updated and improved. - RSA-MD2 is now supported for verifying digital signatures. - Due to cryptographic advances, verifying untrusted X.509 certificates signed with RSA-MD2 or RSA-MD5 will now fail with a GNUTLS_CERT_INSECURE_ALGORITHM verification output. For applications that must remain interoperable, you can use the GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2 or GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5 flags when verifying certificates. Naturally, this is not recommended default behaviour for applications. To enable the broken algorithms, call gnutls_certificate_set_verify_flags with the proper flag, to change the verification mode used by gnutls_certificate_verify_peers2. - Make it possible to send empty data through gnutls_record_send, to align with the send(2) API. - Some changes in the certificate receiving part of handshake to prevent some possible errors with non-blocking servers. - Added numeric version symbols to permit simple CPP-based feature tests, suggested by Daniel Stenberg <daniel@haxx.se>. - The (experimental) low-level crypto alternative to libgcrypt used earlier (Nettle) has been replaced with crypto code from gnulib. This leads to easier re-use of these components in other projects, leading to more review and simpler maintenance. The new configure parameter --with-builtin-crypto replace the old --with-nettle, and must be used if you wish to enable this functionality. See README under "Experimental" for more information. Internally, GnuTLS has been updated to use the new "Generic Crypto" API in gl/gc.h. The API is similar to the old crypto/gc.h, because the gnulib code were based on GnuTLS's gc.h. - Fix compiler warning in the "anonself" self test. - API and ABI modifications: gnutls_x509_crt_list_verify: Added 'const' to prototype in <gnutls/x509.h>. This doesn't reflect a change in behaviour, so we don't break backwards compatibility. GNUTLS_MAC_MD2: New gnutls_mac_algorithm_t value. GNUTLS_DIG_MD2: New gnutls_digest_algorithm_t value. GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2, GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5: New gnutls_certificate_verify_flags values. Use when calling gnutls_x509_crt_list_verify, gnutls_x509_crt_verify, or gnutls_certificate_set_verify_flags. GNUTLS_CERT_INSECURE_ALGORITHM: New gnutls_certificate_status_t value, used when broken signature algorithms is used (currently RSA-MD2/MD5). LIBGNUTLS_VERSION_MAJOR, LIBGNUTLS_VERSION_MINOR, LIBGNUTLS_VERSION_PATCH, LIBGNUTLS_VERSION_NUMBER: New CPP symbols, indicating the GnuTLS version number, can be used for feature existence tests.
2005-11-12Update sudo to nb2 to address the recent secuity issue:adrianp3-6/+16
- http://www.sudo.ws/sudo/alerts/perl_env.html - Add "PERLLIB", "PERL5LIB" and the "PERL5OPT" to the list of environment variables to be cleaned.
2005-11-08Include devel/sysexits bl3.tv1-1/+2
2005-11-07Skip two more setgroups(3) instances on Interix; openssh now builds again.tv2-9/+23
2005-11-07Fix typo in Interix-specific bit.tv2-4/+4
2005-11-07Only install the authldap.schema file if the "ldap" package option isjlam2-3/+3
specified.
2005-11-07Revive hpn-patch distfile.taca1-1/+4
2005-11-04Use LTCONFIG_OVERRIDE. Besides making "configure" faster, this avoids antv1-1/+2
odd case where cyrus-sasl2 attempts to load /dev/null via shell "." command, which won't work on Interix as /dev/null is not set as executable there.
2005-11-04Don't depend on -lpthread as name of the thread library,joerg3-5/+34
check in configure using PTHREAD_LIBS / PTHREAD_LDFLAGS and use them to link libgpgme_thread as well.
2005-11-04Change the __dead patches into the form I'm submitting back to thetv3-14/+14
openssh-portable team (elide the extra cpp macro level).
2005-11-04SETGROUPS_NOOP disappeared, so we're relying only on HAVE_INTERIX in thosetv3-39/+40
specific cases.
2005-11-04regentv1-5/+3
2005-11-04Add more Interix fixes: Need prototype for strtoll(), and two moretv2-6/+44
instances of setgroups() that are not usable on that platform.
2005-11-04Fixed wrong use of WRKSRC. Converted explicit ${SED} substitution torillig3-14/+11
appropriate SUBST_* definitions.
2005-11-03Fixed wrong usage of WRKSRC.rillig3-15/+14
2005-11-03Forgot distinfo in previous commit.tv1-1/+2
2005-11-03osfinger.c forgot to include <arpa/inet.h> for htons().tv2-1/+30
Use traditional recv loop over a stream socket rather than depending on MSG_WAITALL to be available. (Interix doesn't have MSG_WAITALL.)
2005-11-03Using MASTER_SITE_GNUSTEP instead of hard-coded URL.rillig1-2/+2
2005-11-03Delete removed ruby related pacakge's entries.taca1-3/+1
2005-11-03Remove packages which is part of Ruby 1.6.8.taca9-124/+0
2005-11-02Bump PKGREVISION of packages including ruby extention librarytaca1-2/+2
by Ruby 1.8.3 updates.
2005-11-02Disable packages used with ruby16-base only or bundled withtaca1-3/+3
ruby18-base packages.
2005-11-02Remove ruby-digest and ruby-openssl package since they are merged intotaca13-221/+0
ruby18-base package now.
2005-11-02Delete ruby-zlib, ruby-digest and ruby-openssl entries.taca1-3/+1
(They merged into ruby18-base pacakge.)
2005-11-01Fixed spelling: SOURCEFORCE => SOURCEFORGE. Removed empty definition forrillig1-3/+2
PKGREVISION.
2005-11-01Fix build on Interix.tv2-1/+16
(The presence of this sync(2) call is somewhat suspect, given that the call guarantees almost nothing in today's virtual memory implementations, but it is left in for other OS's that do support it.)
2005-11-01Fix build on Interix, which doesn't have S_IFWHT.tv2-1/+22
2005-10-31Use OWN_DIRS to make sure the PKGVULNDIR is created as part of the package.erh1-1/+2
2005-10-31Fix build on Interix; it seems % has special meaning in Configure now.tv2-4/+4
2005-10-30This needs msgfmt plurals, according to a recent bulk build.jmmv1-1/+2
2005-10-29Fix for darwin, reusing Dragonfly fix by joergtonio2-4/+4
2005-10-29Kill the post-install script. The example files are installed underjoerg4-18/+49
${PREFIX}/share/examples/smtpd, the spool setup moved into a newly added rc script. This also handles missing configurations files better, since the old post-install would fail e.g. if no local time was configured. Bump revision.
2005-10-29Fix Heimdal's LOCAL_PEERCRED on DragonFly by includingjoerg2-1/+16
the necessary headers. XXX Ask upstream, why this isn't a #if / #elif list Reported-by: walt <wa1ter AT myrealbox DOT com> on tech-pkg
2005-10-28Updated keychain to 2.6.1martti2-6/+6
* keychain 2.6.1 (10 Oct 2005) 10 Oct 2005; Aron Griffis <agriffis@gentoo.org>: Change "unset evalopt" to "evalopt=false" and run through *all* the regression tests instead of just the new ones. *sigh* * keychain 2.6.0 (10 Oct 2005) 10 Oct 2005; Aron Griffis <agriffis@gentoo.org>: Add the --eval option which makes keychain startup easier. See the man-page for examples. Get rid of the release notes from README, so now this file is where changes are tracked.
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-30 10:03:17 +0000