summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2003-09-17get rid of USE_GCC2/3 in pkg Makefiles, and set GCC_REQD orgrant1-4/+2
USE_PKGSRC_GCC as appropriate, as this is handled by compiler.mk now.
2003-09-17Mark OpenSSH-3.7x as *not available for IRIX*!jschauma1-1/+11
# OpenSSH 3.7x currently does *not* work on IRIX! # To compile, we would need to remove the extraneous inclusion of the # ``inet_ntoa.h'' header in openbsd-compat/inet_ntoa.c, but even though # sshd will not work: It seems the connection is closed by the daemon # when it tries to spawn off a child to handle the incoming connection # # If you need the latest security patches for your openssh, I'm afraid you'll # have to apply them by hand to the 3.6.1p2 version. (Now wouldn't it be nice if we had a NOT_FOR_PLATFORM_REASON that is displayed automatically?)
2003-09-17Update for _new_ new OpenSSH patch, bump pkgrevision.jwise4-10/+71
``Oops, they did it again.''
2003-09-16move ftp.openssh.com to the top, as it's the only site which has thegrant1-3/+3
new distfile so far.
2003-09-16Update openssh to 3.7.1p1.grant2-6/+6
Changes since 3.7p1: more malloc/fatal fixes; ok millert/deraadt; ghudson at MIT.EDU
2003-09-16Apply security patch for OpenSSH-3.6.1p2 recently released by openssh team.jwise3-5/+33
PKGREVISION bump, and BROKEN= removed. While there, fix Solaris short pkg name.
2003-09-16missed a pkg-vulnerabilities filenamegrant1-2/+2
2003-09-16netbsd.org -> NetBSD.org.grant1-2/+2
2003-09-16correct name of pkg-vulnerabilities file; netbsd.org -> NetBSD.org;grant1-7/+7
add missing word; bump date.
2003-09-16ftp.netbsd.org -> ftp.NetBSD.orggrant1-1/+1
2003-09-16Mark this package as broken until an updated version of the openssh+gssapijwise1-1/+3
patch is available, as OpenSSH-3.6.1p2 contains another buffer overflow.
2003-09-16Update openssh to 3.7p1.grant3-16/+15
Large number of changes since 3.6.1p2, the most pertinent being: * do not expand buffer before attempting to reallocate it (buffer.c) note that NetBSD-current already includes this fix. other changes include: * portability fixes * regression test fixes * add GSSAPI support and remove kerberos support from ssh1, retaining kerberos passwd auth for ssh1 and 2 * man page fixes * general bug fixes see the ChangeLog for full details.
2003-09-16Update audit-packages to 1.23.agc2-4/+5
Use the first word of ${FETCH_CMD} to determine which utility is used. Addresses PR 22760 from Todd Vierling.
2003-09-16Update audit-packages to 1.22:agc2-4/+4
Make an informational message clearer.
2003-09-14hange extension.mk to also install optimized files for distutils packages.recht4-4/+74
Inspired by FreeBSD "ports". Fix the PLISTs accordingly. Also, while at it, remove now obsolete compileall.py calls in post-install targets and insure that extension.mk is in included before builinlinks of other Python modules. Discussed with/ok'ed by drochner@.
2003-09-13Use SHLIBTOOL to install the plugins since we used it to build them.jlam2-4/+6
2003-09-13* Use LIBTOOL_OVERRIDE instead of LTCONFIG_OVERRIDE.jlam7-16/+22
* Use ${SHLIBTOOL} to build the shared plugins so we don't get the useless lib<plugin>.a file.
2003-09-13Updated security/p5-IO-Socket-SSL to 0.95. Changes version version 0.93jlam2-5/+5
include: - Better opened() behavior when sockets close unexpectedly. - Added support for WeakRef and Scalar::Util to allow IO::Socket::SSL objects to auto-destroy themselves when they go out of scope. - Added croak()ing for unimplemented send() and recv() methods so they are not accidentally used to transmit unencrypted data. The Perl builtin functions cannot be reliably trapped and are still dangerous, a fact that the POD now reflects - Changed accept() to use inherited accept() instead of IO::Socket::accept, so that IPv6 inheritance is possible. - Added options to import() so that a user could specify IPv6 or IPv4 mode of operation.
2003-09-13Update security/p5-Net-SSLeay to 1.25. Changes from version 1.23 include:jlam2-5/+5
- new features: http and raw tcp support - fixed apparent STDIO vs. sysread bug in proxy connect - added tcpecho.pl and tcpcat.pl to MANIFEST - fixed some further bugs with TCP read all, etc. - fixed some const char pointer warnings
2003-09-13Remove redundant TEST_TARGET definition that matches the default one injlam1-2/+1
perl5/module.mk.
2003-09-12Update security/p5-Digest-MD5 to 2.27. Changes from version 2.24 include:jlam2-5/+5
Don't assume PerlIO_read() works like fread() even though it was documented like that for perl 5.6. It returns negative on read failure. The $md5->addfile method now croaks if it discovers errors on the handle after reading from it. This should make it more difficult to end up with the wrong digest just because you are to lazy to check the error status on your file handles after reading from them. Improved documentation.
2003-09-12Update security/p5-Digest-SHA1 to 2.04. Changes from version 2.02 include:jlam2-5/+5
Don't assume PerlIO_read() works like fread() even though it was documented like that for perl 5.6. It returns negative on read failure. Implemented sha1_transform, required to implement NIST FIPS 186-2. Make it build on 64-bit platforms with 32-bit longs. Sync up with the Digest::MD5 implementation: - added clone method - addfile croaks if it can't read - the sha1*() functions warn if called as method or with reference arguments.
2003-09-12kill all references to gcc.buildlink2.mk and compiler.mk, and definegrant1-2/+3
USE_GCC2 or USE_GCC3 where appropriate. the functionality of the old gcc.buildlink2.mk has been rolled into compiler.mk now, which is automatically used. more changes to come later...
2003-09-12Update to version 1.21.seb1-2/+4
download-vulnerability-list(8) now needs digest(1). Hence put digest package as a runtime dependency of audit-packages package.
2003-09-11Change USE_OPENSSL_VERSION into equivalent BUILDLINK_DEPENDS.openssl.jlam1-4/+5
2003-09-11Garbage-collect USE_OPENSSL_VERSION now that openssl/buildlink2.mk supportsjlam4-13/+4
just setting BUILDLINK_DEPENDS.openssl. USE_OPENSSL_VERSION wasn't actually needed here anyway since the minimum version allowed by openssl/buildlink2.mk exceeded the version requested here.
2003-09-11Rewrite this file so that we can specify the version of OpenSSL that wejlam1-94/+112
need by simply setting BUILDLINK_DEPENDS.openssl. This buildlink2.mk file now functions just like any other typical buildlink2.mk file.
2003-09-10Note version numbers for 0.9.6[hij].jlam1-1/+4
2003-09-10Only check if we need to add the rsaref dependency if we need the pkgsrcjlam1-3/+5
openssl.
2003-09-10Use the built-in HAS_CONFIGURE and TEST_TARGET infrastructure to do thejlam1-44/+37
configure and test phases.
2003-09-10Honor CFLAGS/LDFLAGS from the environment.jlam3-7/+18
2003-09-10Back out the make -> @MAKE@ -> ${MAKE} changes since we workaround thejlam8-86/+12
bare "make" problem using tools.mk.
2003-09-09Update audit-packages to 1.20.agc2-4/+11
Support wget and curl as FETCH_CMDs, as discussed in PR 19103.
2003-09-09Whitespace.salo1-7/+9
2003-09-09Remove reference to wip. (hi xtraeme!)salo1-9/+11
Style nits, while here.
2003-09-08use PKG_SYSCONFDIRitojun1-2/+2
2003-09-06upgrade to 2.0.1.itojun3-19/+19
from webpage: >v2 is a significantly more accurate, precise and faster brother of the original >proof-of-concept tool I released in 2000. P0f v1 is largely obsolete...
2003-09-05Remove "/pub" from pathnames on "ftp.fu-berlin.de" because such a directorytron1-2/+2
doesn't exist. It's apparently only mapped in the FTP server configuration.
2003-09-04Add and enable p5-Authen-SASL and p5-Authen-SASL-Cyrusxtraeme1-1/+3
2003-09-04Initial import of p5-Authen-SASL-Cyrus, version 0.07.xtraeme5-0/+47
SASL is a generic mechanism for authentication used by several network protocols. Authen::SASL provides an implementation framework that all protocols should be able to share. The XS framework makes calls into the existing libsasl.so shared library to perform SASL client connection functionality, including loading existing shared library mechanisms. Authen::SASL::Cyrus implements XS SASL Authentication. Packages provided by Quentin Garnier via pkgsrc-wip.
2003-09-04Initial import of p5-Authen-SASL, version 2.04.xtraeme4-0/+28
SASL is a generic mechanism for authentication used by several network protocols. Authen::SASL provides an implementation framework that all protocols should be able to share. The included plugin Authen::SASL::Perl implements several of these protocols (DIGEST-MD5, CRAM-MD5, ANONYMOUS, EXTERNAL, LOGIN and PLAIN). Package provided by Quentin Garnier via pkgsrc-wip.
2003-09-03Fix inconsistent filename for "pkg-vulnerabilities" file intron2-4/+4
"audit-packages" script. Bump package version again.
2003-09-02Nuke definition for INSTALL_EXTRA_TMPL here since INSTALL doesn't exist.jmc1-2/+1
2003-09-02Update audit-packages to 1.18.agc4-37/+75
Changes from previous version: + rely on an embedded sha1 digest to tell whether the vulnerabilities file has been damaged in transit or received successfully, rather than trusting that the file will not grow smaller + use the new filename "pkg-vulnerabilities" + use definitions from defs.${OPSYS}.mk in the download-vulnerability-list script + at installation time, don't rely on "ln -sf" to DTRT - explicitly call "rm -f" before attempting the symbolc link With thanks to seb@ for testing.
2003-09-02Update libnasl, nessus{-core,-libraries,-plugins} to 2.0.7.frueauf14-35/+170
Based on pr pkg/22356 by Adrian Portelli. Changes since 2.0.6a: . changes by Renaud Deraison (deraison@cvs.nessus.org) - Fixed bad performances issues when pinging dead hosts - Fixed a bug which would prevent to store items larger than 2kb in the KB - NFS and SMB file-related functions completed (open, read and cwd are implemented) - Plugins support for Windows 2003 - Network IPs can now be evenly sliced instead of being scanned sequentially - User-definable source-IP(s) for the checks (nessusd -S) - Fixed a possible message corruption problem if a plugin was to send a too long message back to nessusd - Fixed a possible plugin corruption problem when the client overwrites existing plugins - Fixed various false positives and wording issues in several plugins
2003-09-01Added php4-openssl 4.3.3 - PHP4 extension module for access to OpenSSLjdolecek1-1/+2
library
2003-09-01add PHP4 OpenSSL extension modulejdolecek2-0/+17
adresses openssl part of PR pkg/22654 by Adrian Portelli
2003-09-01appears the CONFIGURE_ENV+= MCRYPT_DIR=... isn't necessary anymore - itjdolecek1-4/+2
compiles fine without
2003-09-01whitespace fixescjep1-3/+4
2003-08-31Update PHP to final 4.3.3jdolecek4-24/+2
Some highlights of changes since 4.2.3: * PCRE updated to 4.3, GD to 2.0.15 * improved Apache2 support * much improved stream & URL wrapper support, output compression support * added CLI (Command Line Interface) SAPI * debug_backtrace() backported from ZendEngine2 * faster build system * huge number of other bug fixes and improvements Packaging changes: * 'pcre', 'xml', and 'session' modules folded back into main package - 'pcre' and 'xml' is required by PEAR, and 'session' is just too essential to be separate * 'gd' module now uses bundled PHP GD library, which is better integrated * PHP modules use shared distinfo when possible to ease future PHP updates * ${PREFIX}/bin/php is now CLI version, ${PREFIX}/libexec/cgi-big/php remains CGI version
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-08 05:41:46 +0000