summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-08-30Avoid compiling the path to the "gzip" wrapper script into the binary,tron1-4/+4
bump package revision.
2005-08-30this one doesn't look useful anymoredrochner2-14/+1
2005-08-30Changes 1.2.6:adam2-9/+9
- MiniLZO updated to version 2.01 and moved to separate directory. - Collision between system LZO header files and MiniLZO header file fixed. - Will now test for liblzo functionality in liblzo2 too. - Minilibtasn1 is now 0.2.14 (no code changes). - Some code changes to avoid GTK-DOC warnings. - API and ABI modifications: No changes since last version.
2005-08-30Changes 0.5.7:adam6-60/+15
* Various build fixes, to make version info not say 0.5.5 any more. Changes 0.5.6: * Use libtool -export-symbols-regex instead of GNU ld script. * Fix license with new FSF address. * Test for socklen_t, needed for libgcrypt on some platforms. * A few configure/build fixes. * Don't use malloc.h.
2005-08-30Changes 0.2.15adam2-6/+6
- Gnulib is used to implement memmove if your system does not have it. - Simplified assert/error handling slightly.
2005-08-30Update to 0.76. From the changelog:schmonz2-6/+6
- Fixed the autoconvert feature of cvm-vmailmgr to set the permissions and ownership of the created password table to that of the original. - Added a feature to all qmail-based modules to treat all domains as local if $CVM_QMAIL_ASSUME_LOCAL is set.
2005-08-29update to 180drochner4-22/+27
changes: -manpage added -fix for BUG#210: use start_tls on referrals if configured to do so -when handling new password policy control, only fall through to account management module if a policy error was returned (CERT VU#778916) pkgsrc change: use /etc/pam_ldap.conf as config file, to distinguish from nss_ldap
2005-08-27this needs getopt_long.grant1-1/+4
2005-08-25Correct patchsum so that distinfo does not reference missing patchesshannonjr1-5/+1
patch-ba, patch-bb, patch-bc, and patch-bd.
2005-08-24 Fixed ssh_encode_* calls to have casts to SshUInt32 or size_tkivinen10-3/+140
to get it working properly on the 64-bit platform (amd64).
2005-08-24Update to 0.75. From the changelog:schmonz3-13/+11
- Added an "autoconvert" mode to cvm-vmailmgr, which converts encrypted passwords to plain-text on successful authentication if $VMAILMGR_AUTOCONVERT is set.
2005-08-23Include sys/types.h. This fixes configure on DragonFly. Bump PKGREVISION.reed3-6/+38
Okayed by lha@. I tested on Linux and DragonFly. I got this from Joerg Sonnenberger. On DragonFly, the configure errored like: /usr/include/openssl/md5.h:110: error: syntax error before "size_t" In file included from conftest.c:34: /usr/include/openssl/sha.h:109: error: syntax error before "size_t" This caused tests to break and it ended up building and installing libdes and des.h, md4.h, and related headers. So later libgssapi needed this libdes which was not buildlinked which broke kdelibs3 build.
2005-08-23The real user name in PKG_USERS does not need to be escaped with doublerillig7-14/+14
backslashes anymore. A single backslash is enough. Changed the definition in all affected packages. For those that are not caught, an additional check is placed into bsd.pkginstall.mk.
2005-08-22check for /usr/include/skey.h on NetBSD - in case dist with MKSKEY=noabs1-2/+2
2005-08-22Update to version 2.3.1. From PR#31015 by Julian Dunn.cube4-19/+20
Here's an excerpt from the rather long RELEASE_NOTES included in the distribution: QUICK OVERVIEW: Provides more flexible configuration of decoders. Allows recipients to have individual banning rules. Assigns a long-term unique id to each message, reducing clashes and facilitating retrieval of information. The daemon can store information to a SQL database for logging, reporting and quarantine retrieval, optionally storing entire message to a SQL database. File-based quarantine can disperse files to 62 subdirectories. Provides a quarantine release mechanism. Reconnects to SQL if connection is broken. Can skip quarantining high-score spam. Compatibility with IPv6-enabled Postfix is improved. SECURITY: - require minimal version 1.05 of Convert::UUlib to avoid a known security problem in the underlying uulib (likely to be exploitable);
2005-08-21Update "ipsec-tools" package to version 0.6.1. Changes since 0.6.1rc1:tron3-22/+6
- src/racoon/dnssec.c: fix bogus test on function result - src/racoon/isakmp.c: Improved in/out SA addresses check in purge_remote() - src/libipsec/{key_debug.c|pfkey.c|pfkey_dump.c}: de-lint, warnings - src/racoon/privsep.c: Fixed a %d -> %zu in port_check()
2005-08-20The plugins directory is under ${PREFIX} and we install a plugin injlam2-4/+4
there already, so don't use OWN_DIRS -- just use @dirrm. Bump the PKGREVISION to 2.
2005-08-19Reformat first paragraph. When the package name was expanded,reed1-5/+5
the first line was too long and wrapped.
2005-08-19Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMSjlam4-24/+14
as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-08-18Remove hard-coded reference to $PREFIX/etc which is not accuratereed1-17/+3
and remove documentation.
2005-08-16For NetBSD's crippled OpenSSL distribution, create an <openssl/des_old.h>jlam1-2/+10
header in the buildlink directory that just pulls in /usr/include/des.h. This should allow packages that purposely include <openssl/des_old.h> on post-0.9.7 versions of OpenSSL to find it on NetBSD.
2005-08-12update to 0.7.9drochner3-8/+12
changes: * Better documentation [Adam Schreiber] * Keyring backups not world readable. [Adam Schreiber] * Nautilus context menu items cleaned up. * Better file association for armor encoded keys. * Create agent socket inside user"s home directory. * Clearer status text for key operations. * Cleaned up menus and added GNOME features like dynamic accelerator assignment (ie: using GtkUIManager). * HIG polish and UI fixes. [Jim Pharis, Flavio daCosta] * Better command line handling and aded command line help. [Adam Schreiber] * Many bug and crasher fixes. -translation updates
2005-08-12update to 1.0.3drochner2-7/+6
changes: -license changed to LGPL -changed default for "include certs" to use the backend's setting -bugfixes
2005-08-11Update security/courier-authlib to 0.57. Changes from version 0.55jlam7-115/+172
include: * authlib: create the authtest and authpasswd manual pages. * authdaemon.c (auth_generic): Silly bug in auth_generic(). * authldaplib.c (auth_ldap_do3): Fix call of authcryptpasswd(). * authpgsqllib.c (auth_pgsql_setpass): Ditto. * authmysqllib.c (auth_mysql_setpass): Ditto. * authmysqllib.c (auth_mysql_setpass): Fix a memory leak. * authpipe: more fixes to the authpipe module. * authpipe: various fixes to the authpipe module. * authpipe.c (auth_pipe_pre): Fix zombies created by the authpipe module. * New authpipe authentication module. * authldap.schema: Add mailhost to the recommended LDAP schema. * README_authlib.sgml: Document updated authpipe protocol. * cryptpassword.c (authcryptpasswd): Fix handling of encryption hints. * checkpassword.c (do_authcheckpassword): Ignore {CRYPT} prefix on crypted passwords. * checkpasswordsha1.c (authcheckpasswordsha1): Fix {SHA256} passwords. * authdaemond.c: Strip full name/gecos field after the first comma. * authdaemond: Pass LOGGEROPTS option to authdaemond. * liblog/logger.c: Fix wrong args to setuidgid(). * liblog/logger.c: Added -droproot option to courierlogger. * liblock/lockdaemon.c: Try to recover if upgraded daemon process runs under a different uid. * Changed -uid and -gid options to -user and -group for consistency with couriertcpd. Change them to affect courierlogger itself, after it has spawned any child. * Optional default domain for authentication requests. * Fix the error code when an empty password is provided.
2005-08-10Remove the abuse of buildlink that was pkg-config/buildlink3.mk. Thatjlam8-17/+16
file's sole purpose was to provide a dependency on pkg-config and set some environment variables. Instead, turn pkg-config into a "tool" in the tools framework, where the pkg-config wrapper automatically adds PKG_CONFIG_LIBDIR to the environment before invoking the real pkg-config. For all package Makefiles that included pkg-config/buildlink3.mk, remove that inclusion and replace it with USE_TOOLS+=pkg-config.
2005-08-09Remove explicit dependence on "nessus-core" package because thattron1-2/+1
dependence is inherited from the "nessus-plugins" package anyway.
2005-08-09add a "pam" pkg option and make it work with NetBSD's openpam if enableddrochner4-6/+63
2005-08-08Remove redundant PERL5_CONFIGURE settings as it defaults to "yes".jlam2-6/+2
2005-08-08whitespace removaladrianp2-16/+16
2005-08-07Fix build problem under platforms were "size_t" is not an integer.tron2-1/+17
2005-08-06Bump the PKGREVISIONs of all (638) packages that hardcode the locationsjlam47-134/+131
of Perl files to deal with the perl-5.8.7 update that moved all pkgsrc-installed Perl files into the "vendor" directories.
2005-08-05Update "ipsec-tools" package to version 0.6.1rc1.tron3-8/+22
Changes since version 0.6b2: - NAT-T fixes for situations where NAT-T is not used - OpenSSL 0.9.8 support - keys are not restricted to OpenSSL default size anymore - PKCS7 support - SHA2 support
2005-08-04Add patch-aa to make heimdal compile with gcc-4 (default with darwin 8)tonio3-2/+33
This patch is the same as revision 1.3 of /cvsroot/src/crypto/dist/heimdal/lib/asn1/gen_glue.c by matt@ those cvs log: Don't emit struct units [] anymore. emit a struct units * const foo and in the C file initialize that to the static list. Bump pkgrevision: it changes the binary package on gcc<4 platforms approved by wiz@
2005-08-04Fixed the number of backslashes in the version checking code.rillig2-5/+5
2005-08-04Updated keychain to 2.5.5martti2-6/+6
* lots of bug fixes
2005-08-03Add patch to address msfweb "refang" security updateadrianp3-9/+34
Bump to nb2 make pkglint happy
2005-08-02Sync COMMENT with other perl comments.wiz1-2/+2
2005-08-02Replace references of pkgsrc/mk/bsd.pkg.defaults.mk toreed2-3/+3
pkgsrc/mk/defaults/mk.conf. This is from PR 30741 from anonymous AT example.net.
2005-08-01Use tar, gtar is not really necessary.wiz1-3/+2
2005-08-01Update MASTER_SITES. Use rsaref-license.wiz1-4/+4
2005-08-01Convert to options framework.wiz2-24/+26
2005-08-01Sort.wiz2-4/+4
2005-08-01Default to enabling ssl, like before.wiz1-1/+3
2005-08-01Convert to options framework.wiz2-13/+20
2005-07-31Add and enable pwsafe.wiz1-1/+2
2005-07-31Initial import of pwsafe-0.1.6 from pkgsrc-wip, packaged bywiz6-0/+78
Mike M. Volokhov. pwsafe is a unix commandline program that manages encrypted password databases. There are few features listed: * Pure command-line operation if desired (good for remote access over ssh). * Can interact with X11 selection & clipboard. * Portable, endianess-clean, misaligned-access-free C++. * Compatible with CounterPane's PasswordSafe Win32 program versions 1.9.x. * Funny comments included in source code.
2005-07-29Add "VARBASE" to "PLIST_SUBST" to create a correct package list.tron1-1/+2
2005-07-28MESSAGE file removed. As mentioned on tech-pkg in May, /etc/ssh.confreed3-25/+5
and /etc/sshd.conf is old (and I assume some configurations from there don't apply any more), user and group are not created automatically (only if PKG_CREATE_USERGROUP is at default YES), UsePrivilegeSeparation is the default, and seems to imply that openssh is insecure without it. Bump PKGREVISION. Change comment regarding MESSAGE.Interix. Removed unused MESSAGE_SUBST settings. Move one to the options.mk as it is for "pam" only.
2005-07-28My fix from eight days ago was broken. Add the "man" subdirectoryreed1-14/+14
for the man entries.
2005-07-28Update to 1.4.2.wiz2-6/+6
Noteworthy changes in version 1.4.2 (2005-07-26) ------------------------------------------------ * New command "verify" in the card-edit menu to display the Private-DO-3. The Admin command has been enhanced to take the optional arguments "on", "off" and "verify". The latter may be used to verify the Admin Pin without modifying data; this allows displaying the Private-DO-4 with the "list" command. * Rewrote large parts of the card code to optionally make use of a running gpg-agent. If --use-agent is being used and a gpg-agent with enabled scdaemon is active, gpg will now divert all card operations to that daemon. This is required because both, scdaemon and gpg require exclusive access to the card reader. By delegating the work to scdaemon, both can peacefully coexist and scdaemon is able to control the use of the reader. Note that this requires at least gnupg 1.9.17. * Fixed a couple of problems with the card reader. * Command completion is now available in the --edit-key and --card-edit menus. Filename completion is available at all filename prompts. Note that completion is only available if the system provides a readline library. * New experimental HKP keyserver helper that uses the cURL library. It is enabled via the configure option --with-libcurl like the other (also experimental) cURL helpers. * New key cleaning options that can be used to remove unusable (expired, revoked) signatures from a key. This is available via the new "clean" command in --edit-key on a key by key basis, as well as via the import-clean-sigs/import-clean-uids and export-clean-sigs/export-clean-uids options for --import-options and --export-options. These are currently off by default, and replace the import-unusable-sigs/export-unusable-sigs options from version 1.4.1. * New export option export-reset-subkey-passwd. * New option --limit-card-insert-tries.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-06 15:04:52 +0000