summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2012-10-21Update to 1.49:wiz2-7/+6
1.49 2012-09-25 Fixed problem where on some platforms test t/local/07_tcpecho.t would bail out if it could not bind port 1212. Now now tries a number of ports to bind to until successful. Improvements to unsigned casting contributed by Reini Urban. Improvements to Net::SSLeay::read to make it easier to use with non-blocking IO: contributed by James Marshall: It modifies Net::SSLeay::read() to return the result from SSL_read() as the second return value, if Net::SSLeay::read() is called in list context. Its behavior should be unchanged if called in scalar or void context. This result code seems to be required for full support of non-blocking I/O, since users need to handle SSL_ERR_WANT_READ, SSL_ERROR_WANT_WRITE, etc. Fixed a problem where t/local/kwalitee.t fails with Module::CPANTS::Analyse 0.86. Patch from Paul. Fixed a number of typos patched by Giles. Fixed a compiler warning from Compiling with gcc-4.4 and -Wall, patched by Giles. Fixed problems with get_https4: documentation was wrong, $header_ref was not correctly set and $server_cert was not returned. Fixed a problem that could cause a Perl exception about no blength method on undef. Reported by "Stephen J. Smith via RT". https://rt.cpan.org/Ticket/Display.html?id=79309 Added documentation about how to mitigatxe various SSL/TLS vulnerabilities. Fixed problem reported by Mike Doherty: SSL_MODE_* are defined in ssl.h, and should be available as constants, but I do not see them listed in constants.h
2012-10-21Update to 20120823. Replace interpreter in installed file.wiz2-7/+7
20120823 - Fix test (RT#79129, reported by Sinan Unur) 20120822 - Add mk-ca-bundle.pl from git repository to distribution. - Add new/additional certificates from the following CAs: Verisign, UTN-USER, UTN USERFirst, Sonera, NetLock Qualified, SwissSign Platinum, S-TRUST, ComSign, Actalis, Trustis, StartCom, Buypass.
2012-10-21Update to 1.77:wiz2-7/+6
v1.77 2012.10.05 - update_peer for IPv6 also, applied fix to https://rt.cpan.org/Ticket/Display.html?id=79916 by tlhackque[AT]yahoo[DOT]com
2012-10-21Update to 5.72:wiz2-7/+6
5.72 Mon Sep 24 15:22:08 MST 2012 - adjusted module installation directory for later Perls -- As of 5.11 Perl searches 'site' first, so use that -- ref. INSTALLDIRS in Makefile.PL -- thanks to Robert Sedlacek for patch
2012-10-21Update to 0.64:wiz3-22/+6
0.64 2012-08-06 01:23:30 - Drastically simplify Makefile.PL to resolve RT bugs #61249, #61324, #63553, #68208, and #68084. - Forgot to update Changes for 0.63, so this version overrides that. 0.61_05 2012-08-04 00:40:22 UTC - Trying to distinguish between good vs bad zero returns from underlying SSL_read/SSL_write broke stuff (see RT bug #78695). Revert to previous behavior. - Completely re-organize Makefile.PL. I hope these changes will help take care of RT bugs #61324, #61249, #63553, and #68084 etc. This is not necessarily finished, but I want to see what happens on CPAN Testers at this point before making a few other minor changes. 0.60 2012-07-29 21:43:47 UTC - Release 0.59_03 as 0.60 so distributions can pick up various fixes. The most important one seems to be bug RT #70565. This should take care of bug RT #77167 - SSL_read and SSL_write now try to handle incomplete reads/writes (see bug RT RT #64054). The current test suite does is not very comprehensive, so caution is recommended at this point. Also, if you have good test cases, I would love to incorporate them into the distribution. 0.59_03 2012-03-10 00:45:28 UTC - Bump version number and upload to CPAN. 0.59_02 2012-03-08 16:16:03 UTC - Forgot to update Changes for 0.59_01. The following is a combined list of the more important fixes incorporated in both. - Bug RT #64054: Handle incomplete reads/writes better - Bug RT #73754: Add LWP::Protocol::https to PREREQ_PM - Bug RT #73755: Crypt-SSLeay does not verify hosts (yet). Don't let that cause a failure during tests. - Streamline t/02-live.t using Try::Tiny and done_testing - Plus assorted related small changes. 0.58_01 2010-09-08 19:11:39 UTC - L<text|scheme:...> is not supported in POD for 5.8.5 and earlier. - TODOs in POD should stand out - Add /boot/common/ssl and some other directories to unix_ssl_dirs (see bug #60936).
2012-10-21Update to 0.13:wiz2-7/+6
0.13 Updated the WRITE() method to use syswrite() and account for variable buffer sizes in SASL.
2012-10-21Update to 2.16:wiz2-7/+6
Authen-SASL 2.16 -- Tue Sep 4 11:01:18 CDT 2012 * SASL.pod: fix typo [Peter Marschall] * Perl.pm: avoid warning on "uninitialized value" [Peter Marschall]
2012-10-20Update to 0.14wen4-46/+6
Upstream changes: 0.14 October 16, 2012 - compiling with -Werror=format-security now works (Jerome Quelin, #48446) - Use Digest::SHA instead of Digest::SHA1 (Ansgar Burchardt, #60271) - Security fix, CVE-2009-0129: Missing error check in do_verify (Havard Eidnes, #79958)
2012-10-17Added scryptpettai1-1/+2
2012-10-17A simple password-based encryption utility is available as a demonstrationpettai4-0/+31
of the scrypt key derivation function. On modern hardware and with default parameters, the cost of cracking the password on a file encrypted by scrypt enc is approximately 100 billion times more than the cost of cracking the same password on a file encrypted by openssl enc; this means that a five- character password using scrypt is stronger than a ten-character password using openssl
2012-10-12MASTER_SITES fixadam1-2/+2
2012-10-12security/qoauth: Fix DISTNAME and thus fetchmarino1-1/+1
As soon as qoauth got PKGREV bump, this package could no longer fetch due to a bad DISTNAME definition. Fix DISTNAME to fix "make fetch".
2012-10-12security/mit-krb5: Fix build for gcc 4.7marino3-1/+209
Generated file didn't pass -Werror check on gcc4.7. The problem is well-known and already fixed on the current version of mit-krb5. The patch added here was taken from upstream. No revbump necessary, won't change binary on systems that already built it.
2012-10-10update to 3.0.24drochner3-8/+9
changes: -better IPv6 support -bugfixes -minor improvements
2012-10-08Revbump after updating graphics/pangoadam32-64/+64
2012-10-08Update to Botan 1.8.14:pettai3-9/+7
* 1.8.14, 2012-07-18 - The malloc allocator would return null instead of throwing in the event of an allocation failure, which could cause an application crash due to null pointer dereference where normally an exception would occur. - Recent versions of OpenSSL include extra information in ECC private keys, the presence of which caused an exception when such a key was loaded by botan. The decoding of ECC private keys has been changed to ignore these fields if they are set. - AutoSeeded_RNG has been changed to prefer /dev/random over /dev/urandom - Fix detection of s390x (Debian bug 638347)
2012-10-08Revision bump associated with the update of lang/ocaml to version 4.jaapb5-8/+10
2012-10-07PKGNAME_NOREV must be used for DISTNAME.obache1-2/+2
fixes PR pkg/47043.
2012-10-05Small clean-upadam1-7/+2
2012-10-05CONFLICTS between lang/sr and security/srmcheusov1-1/+4
2012-10-05In the PLIST, add four files in ${PYSITELIB}/${EGG_INFODIR}.apb2-4/+8
In the Makefile, remove PYDISTUTILSPKG=yes, add .include "../../lang/python/egg.mk", and set PKGREVISION=1. This fixes errors from "make package" complaining about files that were installed but not present in the PLIST.
2012-10-05Add build dependency on p5-Perl4-CoreLibs, needed since a scriptwiz1-1/+4
uses find.pl. Reported by Jörn Clausen in PR 47036.
2012-10-04validns 0.6pettai3-13/+12
Support for TLSA records. Support for ILNP (NID, L64, L3, LP) records (untested). Support for IPSECKEY records. Handle TYPEXXX for known types correctly. A number of NSEC3-related bug fixes. Miscellaneous bug fixes.
2012-10-04Bump revision for packages with changed CONFLICTS (PYTHON_SELF_CONFLICT)cheusov2-4/+4
2012-10-03CONFLICTS between python modulescheusov2-2/+5
2012-10-03Bump all packages that use perl, or depend on a p5-* package, orwiz116-189/+232
are called p5-*. I hope that's all of them.
2012-10-03ClamAV 0.97.6 includes minor bug fixes and detection improvements.adam2-6/+6
2012-10-02Update to 2.14:wiz3-7/+8
* Noteworthy changes in release 2.14 (2012-09-24) [stable] - Added asn1_read_node_value() to obtain a node's value. This is to deprecate the export of the node_asn internal structure for the upcoming 3.x release. The ASN1_DATA_NODE type and the ASN1_ETYPE_* constants were added to support the new function.
2012-10-02Mass recursive bump after the dependence fix of the "cairo" packagetron32-62/+64
requested by Thomas Klausner.
2012-10-02Apply a fix for CVE-2009-0129, taken from Debian's problem report.he4-3/+43
Also reported upstream, ref. https://rt.cpan.org/Public/Bug/Display.html?id=79958 Bump PKGREVISION.
2012-09-28Fix building on Darwinadam3-51/+18
2012-09-28add patches for libxml2>=2.9.0, new buffer structure.obache5-4/+91
2012-09-28LICENSE=gnu-gpl-v2obache1-1/+2
2012-09-23missing parts of recursive revbump for gnutls update.obache6-12/+12
2012-09-22Install man source into $(mandir)/man8 instead of catman for saslauthd(8),obache3-2/+23
or manpage will not displayed correctly with man(1). It also fixes installation failure for platforms missing `nroff -mandoc'. Bump PKGREVISION.
2012-09-20Added my missing package subdirectories to category Makefiles.jaapb1-1/+2
2012-09-16Added qoauth 1.0.1 as security/qoauth.jaapb5-0/+61
QOAuth is a library to support interaction with OAuth-powered network services, such as StatusNet or Twitter, in a Qt way.
2012-09-16CONFLICTS with gethost-[0-9]*; ++pkgrevisioncheusov1-4/+7
Fixes for minor pkglint warnings
2012-09-16CONFLICTS with STk-[0-9]*; ++pkgrevisioncheusov3-10/+14
Set LICENSE Fix pkglint warnings
2012-09-16Make this package to ruby18 (Ruby 1.8.7) only.taca1-1/+2
2012-09-16Fix this properly; retrieve the random pool size the same way rndctl(8)dholland4-40/+88
does. Thanks to tls@ for pointers. PKGREVISION -> 2.
2012-09-16Deploy a gross hack to make this buildable on -current and maybe -6.dholland3-1/+44
XXX: This should be reverted and done a different way, or maybe not at all; XXX: this package should probably be reviewed for soundness.
2012-09-15Recursive bump from mysql51-client library changed to use openssl.obache4-8/+8
2012-09-15recursive bump from libffi shlib major bumpobache49-97/+98
(additionaly, reset PKGREVISION of qt4-* sub packages from base qt4 update)
2012-09-14Update F-PROT Antivirus to 6.2.2.taca4-14/+14
Quote from release announce: The only changes in this version are licensing information updates in the documentation.
2012-09-14Remove emacs from dependencies because it may be usedcheusov1-4/+2
by other programs. One example is ssmtp. ++pkgrevision
2012-09-12USE_TOOLS+= xgettextjperkin1-2/+2
2012-09-11USE_TOOLS+=yaccdholland1-1/+2
2012-09-09CONFLICTS with heimdal, libdes and arla; ++pkgrevisioncheusov1-3/+4
2012-09-09Updated security/p5-pcsc to 1.4.12abs2-8/+8
2011-03-06 Ludovic Rousseau <rousseau@debian> * README: release 1.4.12 * PCSC.xs: Also check for SVt_PVIV and not just SVt_IV. Fixes Debian bug #613722 "libpcsc-perl: GetStatusChange error after print" * PCSC.xs, PCSC.pm, test.pl: Use lines of less than 80 columns 2010-10-27 Ludovic Rousseau <rousseau@debian> * create_distrib.sh: compress using bzip2 instead of gzip * README: release 1.4.11 * PCSCperl.h: SCardCancelTransaction() is no more present in pcsc-lite * PCSC.pm, PCSC.pod, PCSC.xs, PCSCperl.h: SCardSetTimout is no more present in pcsc-lite > 1.6.4 It was a pcsc-lite specific and deprecated function 2010-08-18 Ludovic Rousseau <rousseau@debian> * PCSCperl.h: use SCARD_READERSTATE * instead of LPSCARD_READERSTATE since is not define in pcsc-lite < 1.6.3 * README: release 1.4.10 * PCSC.pm, PCSC.xs, PCSCperl.h, README: Update copyright date * create_distrib.sh: Allow more than one digit in the version numbers * PCSC.xs, PCSCperl.h: Use LPSCARD_READERSTATE instead of LPSCARD_READERSTATE_A since it is no more defined in pcsc-lite >= 1.6.2 2010-06-30 Ludovic Rousseau <rousseau@debian> * README: release 1.4.9 * PCSC.pm, PCSC.pod, PCSC.xs: sort constants in alphabetical order * PCSC.pod, PCSC.xs: SCARD_E_UNSUPPORTED_FEATURE is not specific to pcsc-lite but is also available on Windows * PCSC.pm, PCSC.pod, PCSC.xs: SCARD_W_INSERTED_CARD is no more defined in pcsc-lite 1.6.0 and then pcsc-perl failed to build. It was an error code specific to pcsc-lite. 2010-01-03 Ludovic Rousseau <rousseau@debian> * Card/Card.pod: fix spelling error 2009-09-23 Ludovic Rousseau <rousseau@debian> * README: release 1.4.8 * Card/Card.pod: Correct 3 bugs signaled by podchecker 2009-09-06 Ludovic Rousseau <rousseau@debian> * PCSC.xs: PCSC.xs:853: warning: format ‘%d’ expects type ‘int’, but argument 2 has type ‘long unsigned int’ 2008-09-28 Ludovic Rousseau <rousseau@debian> * PCSC.pod: example code for GetStatusChange()
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-14 20:21:57 +0000