summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2008-05-17Fix MAINTAINER address typo since initial import.obache2-4/+4
tech-pkg at jp.NetBSD.org => tech-pkg-ja at jp.NetBSD.org
2008-05-15update to 1.7.3drochner4-7/+35
changes: -direct-tcpip support -bug fixes pkgsrc change: disable use of Python setuptools (gives unpredictable results)
2008-05-15Fix build on NetBSD-current with openssl-current, by adding a "const".wiz2-4/+13
2008-05-14libhcrypto.la only seems to get installed if we're building on 3.x or older,jwise2-4/+7
so make it only end up in the PLIST if that is the case.
2008-05-14Update security/seudo pacakge to 1.6.p16.taca2-7/+7
Major changes since Sudo 1.6.9p15: o There was missing whitespace before the ldap libraries in the Makefile for some configurations. o LDAPS_PORT may not be defined on older Solaris LDAP SDKs. o If the LDAP server could not be contacted and the user was not present in sudoers, a syntax error in sudoers was incorrectly reported.
2008-05-09Add and enable stegtunnelagc1-1/+2
2008-05-09Initial import of stegtunnel-0.4 into the packages collection.agc11-0/+264
Stegtunnel provides a covert channel in the IPID and sequence number fields of any desired TCP connection. It requires the server and client to have a previously shared secret in common to detect and decrypt the data.
2008-05-08Supports DESTDIR.joerg1-1/+3
2008-05-08Supports DESTDIRjoerg1-1/+3
2008-05-08Fix build of OpenSSL on NetBSD/amd64 (4.0 and current tested)tonnerre2-4/+4
2008-05-05Add missing library (libhcrypto) to PLIST, allowing sudo to build againstjwise2-2/+4
this heimdal on 3.x. Bump PKGREVISION.
2008-05-01Note addition of security/ruby-ezcrypto.jlam1-1/+2
2008-05-01Initial import of ruby18-ezcrypto-0.7 as security/ruby-ezcrypto.jlam4-0/+60
EzCrypto is an easy-to-use wrapper around the poorly documented OpenSSL Ruby library. Features include: * Defaults to AES 128 CBC * Will use OpenSSL library for transparent hardware crypto support * Single-class object-oriented access to most commonly used features * Ruby-like syntax
2008-04-30Drop maintainershipjmmv2-4/+4
Stop lying and drop maintainership of these packages. I have not maintained them for a very long time already, so leave room for fresh blood to take over them.
2008-04-30Re: pkg/38549 (Support for DragonFly to security/pcsc-lite)shannonjr3-1/+29
Synopsis: Support for DragonFly to security/pcsc-lite Incorporated fix submitted by Hasso Tepper.
2008-04-30Re: pkg/38550 (Support for DragonFly to security/ccid)shannonjr2-5/+32
Synopsis: Support for DragonFly to security/ccid Incorporated fix submitted by Hasso Tepper.
2008-04-30Add patch to conditionally include <stdint.h> based on the symbolshannonjr2-1/+17
HAVE_STDINT_H generated by configure. This is required for compilation on Solaris 9.
2008-04-29Update to 1.4:wiz2-6/+6
Version 1.4 (released 2008-04-21) - Update gnulib files. - Replace uses of alloca with malloc.
2008-04-29Update to 1.4.1:wiz4-46/+6
Noteworthy changes in version 1.4.1 (2008-04-25) ------------------------------------------------ * Fixed a bug introduced by 1.3.1 which led to the comsumption of far too much entropy for the intial seeding. * Improved AES performance for CFB and CBC modes. * Removed build problems for the Padlock support.
2008-04-28Add py-smbpasswdbouyer1-1/+2
2008-04-28py-smbpasswd version 1.0.1bouyer4-0/+27
This module can generate both LANMAN and NT password hashes, suitable for use with Samba.
2008-04-28Update to 2.0.9. Changes:shannonjr4-36/+36
* Enhanced gpg-connect-agent with a small scripting language. * New option --list-config for gpgconf. * Fixed a crash in gpgconf. * The envvars XAUTHORITY and PINENTRY_USER_DATA are now passed to the pinentry. * Fixed the auto creation of the key stub for smartcards. * Fixed a rare bug in decryption using the OpenPGP card. * Creating DSA2 keys is now possible. * New option --extra-digest-algo for gpgsm to allow verification of broken signatures. * Allow encryption with legacy Elgamal sign+encrypt keys with option --rfc2440.
2008-04-28Re: pkg/38508 (gnupg2 won't build)shannonjr1-3/+3
Builds without 'enable-maintainer-mode' being set
2008-04-28Update to 0.9.14. Changes:shannonjr3-8/+14
- Let the user choose the type of sorting (default to time descending, available: time asc/desc, count asc/desc). - Implement Prewikka Asynchronous DNS resolution in alert view as well as message summary (require twisted.names and twisted.internet), see the additional dns_max_delay settings parameters in prewikka.conf. - In the alert summary view, handle portlist and ip_version service fields, and show alert messageid. - Fix exception when rendering ToolAlert. - Fix double classification escaping (could result in non working link for alert with classification containing escaped character). - Improvement to heartbeat retrieval (heartbeat view speedup). - Correct typo (fix #275), thanks Scott Olihovki <skippylou@gmail.com> for pointing this out. - Polish translation, by Konrad Kosmowski <konrad@kosmosik.net>. - Update to pt_BR translation, by Edelberto Franco Silva <edeunix@edeunix.com> - Various bug fixes and cleanup.
2008-04-28Update to 0.9.12.2. Changes:shannonjr5-26/+30
- [rulesets]: Remove successful/failure keyword from classification (use IDMEF completion). Analyzer class sanitization. - [nagios] Handle Nagios V2 log entry (fix #283). - [spamassassin] Fix incorrect AdditionalData assignement. - New Suhosin ruleset, by Sebastien Tricaud <toady@inl.fr> - Fix invalid logfile inconsistency alert that could be triggered in a rare case, after a renaming detection. Alert improvement. - On logfile inconsistency alert, do not re-analyze the whole file. - Remove the 1024 bytes per PCRE reference limit. - Minor bug fixes, build system cleanup.
2008-04-28New patch required for 0.9.17shannonjr1-0/+13
2008-04-28Update to 0.9.17. Changes:shannonjr3-44/+44
- Implement RFC 4122 UUIDv1 identifier generation, more resistant to duplicate than our previous implementation in case of clock skew, or multiple client with the same analyzerid sending alert in parallel. - You can now provide NULL value to idmef_path_set() in order to destroy existing value within an IDMEF message. - Unify memory handling of value retrieval through idmef_path_t. This allow the user to retrieve and keep any values, even through the associated IDMEF message is freed. - Build system cleanup, enable RELRO when possible. - Implement PRELUDE_CLIENT_FLAGS_AUTOCONFIG, which is set by default, but that applications might unset in order for their client not to read the default profile/global configuration. - Fix possible assertion when destroying un-started prelude-client. - Improvement to the prelude-io API, the user might now hook its own handling function. - Fix dumping of (not) NULL criteria operator to string. Remove gratuitous space insertion when dumping criteria. - Headers fixes for C++ build. - Fix printing and cloning of empty IDMEF string. - In IDMEF to string convertion code, print <invalid enum value> in place of NULL on invalid enumeration value. - Various bug fixes.
2008-04-27Set MAINTAINER to pkgsrc-users@NetBSD.org to indicate anyone can work on ↵frueauf1-2/+2
fixes for those packages.
2008-04-27Update to OpenSSH 5.0p1.tnn6-65/+47
Changes since 4.7: - fix two security issues - chroot support for sshd(8) - sftp server internalized in sshd(8) - assorted bug fixes
2008-04-25Fix DEPENDS for Python 2.5.tnn1-2/+2
2008-04-25Don't hardcode PYPKGPREFIX in bl3.mktnn1-11/+11
2008-04-25Update PYTHON_VERSIONS_COMPATIBLEjoerg10-20/+15
- assume that Python 2.4 and 2.5 are compatible and allow checking for fallout. - remove PYTHON_VERSIONS_COMPATIBLE that are obsoleted by the 2.3+ default. Modify the others to deal with the removals.
2008-04-25Fix detection of openssl configuration directory on NetBSD so it'sjlam1-3/+5
/etc/openssl only if USE_BUILTIN.openssl is "yes".
2008-04-25Fix function prototype mismatchsmb3-3/+35
2008-04-22revbumps due to libevent update.tnn4-8/+8
2008-04-21Changes 2.1.18:adam6-16/+24
This version includes compilers for Cisco PIX and IOS access lists which were released under GPL.
2008-04-20sortjnemeth1-2/+2
2008-04-15update to 2.22.1drochner6-26/+44
This switches to the gnome-2.22 release branch.
2008-04-13Update to 1.0:wiz2-7/+7
Ignore temporary build files make make install install stuff. Bump NEWS.Debian. Proposed solution for #462897: unconditionally sync keys between normal gnupg home and caff gnupg home on startup, to cope with changed keys.
2008-04-13Update to 0.90. From the changelog:schmonz5-10/+40
- Added support for chaining modules within the version client library. To use this, specify the module string as a list of modules separated with commas. For example: cvm-command:/path/to/module,cvm-local:/path/to/socket This enhancement deprecates the cvm-chain module. - Introduced an "out of scope" fact, to be used on credential rejection results when the supplied credentials are outside of the scope of authority of the module. The cvm-vmailmgr and cvm-qmail modules report this fact as appropriate, and cvm-chain copies it as appropriate from the modules it invokes. - A random anti-spoofing tag is added to all version 2 client requests. Its length is set by $CVM_RANDOM_BYTES and defaults to 8. - Fixed a bug that caused the domain output to be set incorrectly when doing qmail lookups with a domain not in the control files with $CVM_QMAIL_ASSUME_LOCAL set.
2008-04-12Convert to use PLIST_VARS instead of manually passing "@comment "jlam19-76/+73
through PLIST_SUBST to the plist module.
2008-04-12Remove non-standard qt4/lib/pkgconfig directory. Bump PKGREVISION.wiz2-3/+4
2008-04-10Remove unnecessary PLIST_SUBST definition -- the PLIST is dynamic throughjlam1-2/+1
the use of AUTHLIB_PLIST, so we don't need to comment stuff out.
2008-04-10update to 2.22.1drochner6-14/+74
This switches to the gnome-2.22 release branch.
2008-04-10Fix path in DEPENDS line.wiz1-2/+2
2008-04-08Fix build problem with hpn-patch option enabled.taca2-12/+7
2008-04-07Fix installation.joerg1-1/+3
2008-04-07Fix DESTDIR.joerg1-1/+2
2008-04-07Add missing directories.joerg1-4/+3
2008-04-04also set KRB5_CONFIG in the case where using builtin butmarkd1-3/+6
/usr/bin/krb5-config exists. Fixes build of imap-uw package with the kerberos option on NetBSD-current and possibly other platforms.