summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2004-03-23Fix build on sparc64 with gcc2.snj1-1/+4
2004-03-23bl3ify and convert to use krb5.buildlink3.mk for proper Kerberosjlam4-12/+37
detection and linkage. This fixes PR 24498.
2004-03-23USE_BUILDLINK3 must be set to "yes" or "no", not defined/undefined.jlam3-6/+6
2004-03-22Fix building this package with Kerberos 5 support -- the misdeclaredjlam3-6/+20
krb5_mcc_ops variable is "const" in both Heimdal and in MIT krb5.
2004-03-22Let ONLY_FOR_PLATFORM recognize NetBSD 2.0 and future versions.kristerw1-1/+2
2004-03-21Use strerror() instead of sys_errlist[], as the later isn't available onbouyer4-1/+88
solaris9. OK'd by tron@
2004-03-21This package needs Tcl only at run time; use DEPENDS to get Tclminskim1-6/+7
dependency instead of including buildlink.mk. Switch to Tcl 8.4.
2004-03-21Uses no compiler, so USE_LANGUAGES is emptyheinz1-2/+3
2004-03-20Take maintainership, add HOMEPAGE. Uses no compiler, so mark it with empty ↵heinz1-2/+4
USE_LANGUAGES.
2004-03-20Add HOMEPAGE, adapt to buildlink3 and add BUILD_DEPENDS on p5-Crypt-CBC for ↵heinz2-5/+14
testing.
2004-03-19Update fp-netbsd-ws package to 4.4.1 since old distribution isn'ttaca2-6/+6
available any more. (c) FRISK Software International http://www.f-prot.com/ F-PROT Antivirus for BSD, version 4.4.1 Version 4.4.1 contains various bugfixes and improvements to the documentation and software. o Further enhancements of scanning password encrypted zip files. o Added detection of encrypted archives (since various new viruses spread through encrypted archives). o Minor bug-fixes in the F-Prot daemon. o Minor bug-fixes in scan-mail.pl (smtp proxying). o Critical bug-fixes in f-prot-milter.
2004-03-18Fix serious bug where BUILDLINK_PACKAGES wasn't being ordered properlyjlam9-27/+18
by moving the inclusion of buildlink3.mk files outside of the protected region. This bug would be seen by users that have set PREFER_PKGSRC or PREFER_NATIVE to non-default values. BUILDLINK_PACKAGES should be ordered so that for any package in the list, that package doesn't depend on any packages to the left of it in the list. This ordering property is used to check for builtin packages in the correct order. The problem was that including a buildlink3.mk file for <pkg> correctly ensured that <pkg> was removed from BUILDLINK_PACKAGES and appended to the end. However, since the inclusion of any other buildlink3.mk files within that buildlink3.mk was in a region that was protected against multiple inclusion, those dependencies weren't also moved to the end of BUILDLINK_PACKAGES.
2004-03-16If the ${PKGBASE} of a package doesn't match the token passed tojlam1-1/+2
BUILDLINK_PACKAGES, then set BUILDLINK_PKGBASE.<pkg> explicitly so that we can map from <pkg> to BUILDLINK_PKGBASE.<pkg>.
2004-03-16BUILDLINK_DEPENDS.<pkg> should be appended to, not set.jlam1-2/+2
2004-03-16Define NO_EXPORT_CPP so that rpcgen doesn't produce empty files.cube1-1/+2
2004-03-16Add ruby to CATEGORIES.taca4-8/+8
2004-03-15Add dependency on unzip, per Norm in PR 24785.wiz2-6/+7
While here, update to 4.4.0 since previous distfile disappeared. Changes: o Added detection of encrypted archives (since various new viruses spread through encrypted archives). o Minor bug-fixes in the F-Prot daemon. o Minor bug-fixes in scan-mail.pl (smtp proxying). o Critical bug-fixes in f-prot-milter. o Minor modifications to the check-updates.pl script (disable proxy caching by default).
2004-03-12Update to 3.8p1:wiz5-27/+27
This version features many improvements and bugfixes.
2004-03-12update to 20040310 versionrecht5-54/+16
changes: - Added support for removing files recursivly - Incudes checking for file type and size. - Displays the file being destroyed and its size. - Added command line flags: - Added Security Level Flag (Destroy Severity) - Added Output suppression flag for non-verbose output. - Added Help flag. - Added a Manual page for the program in section 1.
2004-03-12Update to version 3.2.9.1.seb2-10/+9
While here bl3ify. Changes since previously packaged version (3.2.5): 2003-12-03 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.9.1. * non-commercial: removed cert hash compat stuff, which broke compilation. 2003-09-26 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.9. * ssh2,sshd2: (by Patrick Irwin): Critical security fix: fixed several bugs in ASN.1 decoding functionality, which were caused by invalid assumptions on the format of input BER data. Certificates malformed in certain ways could cause a crash or buffer overflow. No known exploits at this time, but you are strongly advised to upgrade. Admins unwilling or unable to upgrade need to disable certificates, but this may not be enough for "hostbased" authentication. "publickey" auth should be safe even with the old version with certificates disabled. Clients are probably vulnerable against malicious servers in the initial key exchange regardless of configuration. Users of noncommercial version are not affected by this vulnerability. 2003-09-25 Sami J. Lehtinen <sjl@ssh.com> * sshd2, ssh2: Implemented DisableVersionFallback, with which you can disable fallback compatibility code for older, or otherwise incompatible versions of software. Don't disable unless you know what you're doing. See sshd2_config(5) for details. For really paranoid people (using this option will probably hurt usability somewhat, especially in environments where multiple versions of SSH are used from different vendors). * sshd2, ssh2: Implemented Cert.RSA.Compat.HashScheme. Older SSH Secure Shell clients and servers used hashes in an incoherent manner (sometimes MD5, sometimes SHA-1). With this option, you can set what hash is used. See sshd2_config(5) for details. * Previous: ssh-3.2.8. 2003-08-07 Tomi Salo <ttsalo@ssh.com> * Added a new general configuration option, MaxCRLSize. This sets the maximum size for CRLs and CA certs used in validating received certificates. (The size is the total size of all CRLs and certs, not the maximum individual size.) 2003-06-11 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.7. * ssh-signer2: Fixed a bug, which caused the application to intermittently call fatal because the read() operation was interrupted by a signal (SIGCHLD). 2003-06-04 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.6. * SecurID certified binaries, no code changes.
2004-03-12Bump pacakge revision with ruby-base package's update.taca1-2/+2
2004-03-11The MESSAGE mentions modifying the sudoers file (and doesn'treed1-1/+3
haev location shown), so tell the admin to use the visudo tool.
2004-03-11s/Gnome/GNOME/jmmv1-2/+2
2004-03-11Fix path to an icon so that the entry in the control center shows up properly.jmmv2-1/+15
2004-03-11Bump PKGREVISION to catch with gpgme03 package rename (it was named gpgmejmmv1-2/+2
previously) and its associated library.
2004-03-11Rename this package to gpgme03, and rename all installed files to includejmmv7-22/+183
the '03' suffix, so that this can coexist with the gpgme package.
2004-03-11unusedjmmv1-20/+0
2004-03-11Fix build on Red Hat 7.3.uebayasi2-2/+19
2004-03-10Convert to use bdb.buildlink3.mk.jlam2-4/+4
2004-03-10Split out the code that deals with checking whether the software isjlam8-362/+278
built-in or not into a separate builtin.mk file. The code to deal checking for built-in software is much simpler to deal with in pkgsrc. The buildlink3.mk file for a package will be of the usual format regardless of the package, which makes it simpler for packagers to update a package. The builtin.mk file for a package must define a single yes/no variable USE_BUILTIN.<pkg> that is used by bsd.buildlink3.mk to decide whether to use the built-in software or to use the pkgsrc software.
2004-03-10Define NO_EXPORT_CPP so that rpcgen doesn't get mad.cube1-1/+2
2004-03-10Remove info files entries from PLIST.seb1-5/+1
2004-03-10Remove info files entries from PLIST.seb2-6/+2
2004-03-10Remove info files entries from PLIST.seb2-4/+2
2004-03-09Remove info files entries from PLIST.seb1-2/+1
2004-03-09Remove info files entries from PLIST.seb2-5/+2
2004-03-09Don't build and install openssl with IDEA, MDC2, or RC5 support.reed2-8/+5
According to README, "RSA Security holds software patents on the RC5 algorithm. If you intend to use this cipher, you must contact RSA Security for licensing conditions." And "The IDEA algorithm is patented by Ascom ... They should be contacted if that algorithm is to be used." The openssl FAQ says "For patent reasons, support for IDEA, RC5 and MDC2 is disabled in this [Red Hat Linux] version." The FAQ lists patent numbers and expiry dates of US patents: MDC-2: 4,908,861 13/03/2007 IDEA: 5,214,703 25/05/2010 RC5: 5,724,428 03/03/2015 Now fee-based-commercial-use ACCEPTABLE_LICENSES is not needed.
2004-03-08Enable tk84 and replace x11/tk with x11/tk83. Packages compatibleminskim1-2/+2
with 8.4 will be updated to depend on x11/tk after Tk update.
2004-03-08Replace lang/tcl with lang/tcl83. Packages compatible with 8.4 willminskim1-2/+2
be updated to depend on lang/tcl after Tcl/Tk update.
2004-03-08Handle some shared directories by depending on (or updating dependancies tojmmv1-3/+3
the latest versions) xdg-dirs, xdg-x11-dirs or gnome*-dirs. Bump PKGREVISION.
2004-03-07Updated to version 1.03heinz3-40/+24
Adapted to buildlink3 No INTERACTIVE_STAGE anymore Changes sinces 0.17 =================== 1.03 2002.12.09 - Makefile.PL now uses ExtUtils::AutoInstall. Thanks to Autrijus Tang for the note. - SIGNATURE file now included with distribution. - Added --version to bin/pgplet, which lists supported ciphers, digests, etc., along with version information. - Added Crypt::OpenPGP::KeyBlock::save_armoured, to save an armoured version of the keyblock (useful for exporting public keys). - encrypt and verify no longer fail if there are no public keyrings, in case lookup in a keyserver is desired. - Added Crypt::OpenPGP::Digest::supported and Crypt::OpenPGP::Cipher::supported. - Fixed bug where signed cleartext has \r characters in the header. 1.02 2002.10.12 - encrypt and verify now support auto-retrieval of public keys from an HKP keyserver, if the keys are not found in the local keyring. - Added support for the SHA-1 integrity checks on secret keys used by gnupg 1.0.7. Thanks to Chip Turner for the spot. - Added a --local-user|-u option to bin/pgplet to support using a different secret key for signing. Thanks to Joseph Pepin for the patch. - new() now accepts Crypt::OpenPGP::KeyRing objects for the PubRing and SecRing parameters. - Fixed a bug in decrypt where passing in a "Key" param to decrypt a message encrypted to multiple recipients did not work. Thanks to rdailey for the spot. - ElGamal self-signatures no longer cause an error. - Added LWP::UserAgent and URI::Escape to prereqs, for keyserver. - Added Crypt::OpenPGP::Signature::digest accessor. Thanks to Bob Mathews for the patch. 1.01 2002.07.15 - Added Crypt::OpenPGP::handle, a DWIM wrapper around the other high-level interface methods. Given data, it determines whether the data needs to be decrypted, verified, or both. And then it does what it's supposed to do. - Added Crypt::OpenPGP::Signature::timestamp to return the created-on time for a signature. Also, Crypt::OpenPGP::decrypt and Crypt::OpenPGP::verify now return the Crypt::OpenPGP::Signature object if called in list context (and, in the case of decrypt, if there is a signature). Thanks to Erik Arneson for the patches. - Fixed a bug in decrypt with uncompressed encrypted signed data. Thanks to Erik Arneson for the spot. - Fixed a bug in Crypt::OpenPGP::Message with clearsigned messages, if the text and signature were contained in a block of text containing more PGP messages/signatures. - Fixed a nasty, evil, stupid compatibility bug with canonical text. Namely, pgp2 and pgp5 do not trim trailing whitespace from "canonical text" signatures, only from cleartext signatures. This was causing invalid signatures which should not have been invalid. Thanks to Erik Arneson for the spot. - Added Crypt::OpenPGP::KeyServer, which does lookups against an HKP keyserver. 1.00 2002.02.26 - CAST5 is now supported thanks to Crypt::CAST5_PP from Bob Mathews. - bin/pgplet now supports encrypting and decrypting symmetrically- encrypted messages. - The PassphraseCallback argument to Crypt::OpenPGP::decrypt can now be used to supply a callback for symmetrically-encrypted packets, as well as public-key-encrypted packets. - Fix a bug with encrypted, signed text--the signature was being armoured, which led to errors from the process trying to decrypt and verify. - Fix a bug with symmetric-encrypted session keys w/r/t generation for PGP2--PGP2 doesn't understand symmetric-encrypted session keys, so we need to leave them out when Compat is PGP2. Also, we need to use the 'Simple' S2k rather than the default, 'Salt_Iter'. - Fix a key generation bug where GnuPG will not import generated public keys, because the self-signature is invalid; signature needs to be on key data *and* user ID. Thanks to Joel Rowles for the spot. - Fix bug in ElGamal encryption and k generation. 0.18 2002.01.29 - Added IsPacketStream parameter to Crypt::OpenPGP::Message; this turns off armour detection when initializing the message, and can be used when you *know* that the message is a stream of packets, and not an ASCII-armoured stream of packets. - When unarmouring, remove \r characters from the armoured text end of lines. - Added Crypt::OpenPGP::KeyRing::save method. Thanks to Ben Xain for the idea and a patch. - Added compatibility with symmetric-key-encrypted files that do not have a symmetric-key session key packet. The assumption with these encrypted messages is that they are PGP2-encrypted, using the IDEA cipher, MD5 digests, and a Simple s2k. So that is how the fix has been implemented. Thanks to Ben Xain for the bug report. - Win32 fixes: use binmode when reading files that might be binary. - Added --symmetric and --digest options to Makefile.PL to set symmetric and digest algorithms when using --sdk. - Fixed subkey IDs in list-keys with bin/pgplet. - Check for errors when reading keyring.
2004-03-05Reorder location and setting of BUILDLINK_PACKAGES to match templatejlam14-77/+97
buildlink3.mk file in revision 1.101 of bsd.buildlink3.mk.
2004-03-04Update gss to 0.0.10.minskim4-22/+51
Changes since 0.0.6: - A command line tool "gss" added in src/. - gss_display_status can return multiple description texts (using context). - The Swedish translation has been updated. - Various cleanups and improvements. - Implemented gss_export_name and gss_krb5_inquire_cred_by_mech. The Kerberos 5 backend also support them. - gss_inquire_cred support default credentials. - Kerberos 5 gss_canonicalize_name now support all mandatory name types. - Kerberos 5 gss_accept_sec_context now support sub-session keys in AP-REQ. - Added new extended function API: gss_userok. - API documentation in HTML format from GTK-DOC included in doc/reference/. - Moved all backend specific code into sub-directories of lib/. - The gss_duplicate_name function now allocate the output result properly. - Man pages for all public functions are included. - Documentation fixes. For example, all official APIs are now documented. - Fixed typo that broke gss_wrap for 3DES with Kerberos 5. - Improvements to build environment. - Autoconf 2.59, Automake 1.8 beta, Libtool CVS used.
2004-03-04Update to priv-1.0-beta2.simonb3-25/+8
Changes from previous version are: + Fix a single byte buffer overflow. Can only be a NUL byte that overflows, not believed (at this stage!) to be exploitable in any way. + Avoid null-pointer dereference if getpwuid(getuid()) fails.
2004-03-03Update opencdk to 0.5.4.minskim2-6/+5
Changes since 0.5.3: * Added versioned symbols.
2004-03-01Make build on m68kelf, and honour M68060 variable for quite a bitwiz3-3/+29
of speedup on m68060 machines. From S.P. Zeidler in PR 24579.
2004-03-01Bump PKGREVISION due to libtasn1 and gnutls updates.jmmv1-2/+2
2004-03-01Update to 1.0.8. Changes since 1.0.6:jmmv4-17/+15
Version 1.0.8 (28/02/2004) - Corrected bug in mutual certificate authentication in SSL 3.0. - Several other minor bugfixes. Version 1.0.7 (25/02/2004) - Implemented TLS 1.1 (and also obsoleted the TLS 1.0 CBC protection hack). - Some updates in the documentation.
2004-03-01Update to 0.2.7:jmmv5-11/+11
- Added versioned symbols.
2004-03-01Enable and note addition of srm version 1.2.8.cube1-1/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-26 15:41:29 +0000