summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2014-12-31Improve EGG_NAME default to work for packages with '-' in their name.wiz4-11/+4
Remove now unnecessary overrides in various packages.
2014-12-31Add three qore modules.wiz1-1/+4
2014-12-30Add qt4-qtkeychainryoon1-1/+2
2014-12-30Import qt4-qtkeychain-0.4.0 as security/qt4-qtkeychain.ryoon5-0/+52
QtKeychain is a Qt API to store passwords and other secret data securely. How the data is stored depends on the platform.
2014-12-30Import qore-xmlsec-module-0.0.2nb4 as security/qore-xmlsec-module,wiz7-0/+85
packaged for wip by nros. The Qore xmlsec module gives Qore programs the possibility to support XML signature(xmldsig) and XML encryption(xmlenc) as defined by W3C.
2014-12-30Import qore-ssh2-module-0.9.9nb4 as security/qore-ssh2-module,wiz8-0/+261
packaged for wip by nros. The ssh2 module provides Qore the possibility to communicate with sshd servers via the ssh2 protocol; the underlying functionality is provided by libssh2.
2014-12-30Import qore-asn1-module-0.0.3nb1 as security/qore-asn1-module,wiz6-0/+66
packaged for wip by nros. ASN.1(Abstract Syntax Notation One) module for Qore provides an API to dynamically create, parse and convert ASN.1 data structures to concrete output formats (like DER).
2014-12-30Remove pkg_views support, second part: infrastructure.wiz1-4/+1
2014-12-30Update to 0.51:wiz2-6/+6
0.51 - 2014-12-17 - Update README file - Work around gpg2 bug by omitting --homedir during symmetric encryption
2014-12-30Update to 2.008:wiz2-6/+6
2.008 2014/12/16 - work around recent OCSP verification errors for revoked.grc.com (badly signed OCSP response, Firefox also complains about it) in test t/external/ocsp.t. - util/analyze.pl - report more details about preferred cipher for specific TLS versions
2014-12-30Update to 20141217. Changes not found, but I expect it was syncedwiz2-8/+6
to mozilla upstream.
2014-12-30remove myself as MAINTAINER (email was obsolete)plunky3-6/+6
add LICENSE
2014-12-25INSTALLATIN_DIRS must be in ${PREFIX}, create ${CSPHOME} manually instead.obache1-2/+3
PR pkg/49499 by Sevan Janiyan.
2014-12-21Fixes build failure, checking "fixed array != NULL".obache2-1/+40
2014-12-18Fix packaging with py-setuptools-0.8.wiz1-4/+5
While here, fix interpreter path in installed file. Bump PKGREVISION.
2014-12-16Update HOMEPAGE, which were unknown (MASTER_SITES now, is still unknown).mef1-2/+4
2014-12-16Update HOMEPAGE, which were unknown (MASTER_SITES is still unknown).mef2-5/+5
2014-12-14remove perllocal.pod refpettai1-2/+1
2014-12-142.1pettai3-9/+35
- New Features: - donuts: - Added the ability to summarize information about a zone in the output, such as the upcoming entire zone expiry time, etc - Added the ability to query live zones for records to analyze. EG: donuts live:good-a,badsign-a test.dnssec-tools.org - Added a -V switch to dump records analyzed - libval: - Add support for conditionally checking all RRSIGs on an assertion even if one that validates is already found. - Look for zonecuts based on NS records, not SOA - Added initial support for TSIG in order to enable libval to query recursive name servers that authorized recursive lookup for only those hosts that used a particular TSIG key. - Validator.pm - Store respondent name server information in result structure. - Owl - additional sensor modules - additional data analysis on manager - logging to the Owl sensors modules - optimized sensor data organization (requires software upgrades on both sensor and manager at the same time) - added -restart option to owl-sensord for restarting sensor modules - improvements to the installation guide - rollerd - generalized zonegroup entry in rollecs to be lists of tags - rndc option support added - dnssec-check - Ported to Qt5 - dnssec-nodes - Ported to Qt5 - lookup - Ported to Qt5 - dnssec-system-tray - Ported to Qt5 - Bug Fixes - Fixed bugs in libval, rollerd, blinkenlights, Owl sensor modules, and Owl manager - Use rlimits to try and limit file descriptor use in libsres so we don't run out of available sockets. - Eliminate a few hardcoded paths in various perl modules - Fix various compiler warnings - Update autoconf and related files
2014-12-12Removing pinentry-gtk and pinentry-qt. Those two have been dropped bymef7-66/+1
upstream. Thanks wiz@ for advice. ------------------------- 2014-10-26 Werner Koch <wk@gnupg.org> Release 0.9.0. (.. ommitted ..) Remove support form QT3 and GTK+-1. * configure.ac: Remove old qt and gtk+-1 support.
2014-12-12Update pinentry and pinentry-{gtk2,qt4} from 0.8.4 to 0.9.0mef2-8/+6
-- This will remove pinentry-{gtk,qt} by next commit. -- Touched files on this commit are Makefile.common and distinfo only ------------------------- 2014-10-26 Werner Koch <wk@gnupg.org> Release 0.9.0. gtk: Aboid segv for opaste keys. * gtk+-2/gtksecentry.c (gtk_secure_entry_class_init): Disable paste key bindings. Remove support form QT3 and GTK+-1. * configure.ac: Remove old qt and gtk+-1 support. * Makefile.am: Ditto. 2014-10-26 Stanislav Ochotnicky <sochotnicky@redhat.com> Check if we are on tty before initializing curses. * pinentry/pinentry-curses.c (dialog_run): Check stant stdin and stout are connected to ttys. 2014-10-26 Werner Koch <wk@gnupg.org> gtk: Allow pasting using the mouse. * gtk+-2/gtksecentry.h (_GtkSecureEntry): Add fields insert_pos, real_changed, cand change_count. (_GtkSecureEntryClass): Add field paste_clipboard. * gtk+-2/gtksecentry.c (PASTE_CLIPBOARD): New. (gtk_secure_entry_class_init): Set paste_clipboard and create paste-clipboard signal. (gtk_secure_entry_button_press): Call gtk_secure_entry_pase. (begin_change, end_change, emit_changed): New. (gtk_secure_entry_real_insert_text): Use emit_changed. (gtk_secure_entry_real_delete_text): Ditto. (paste_received, gtk_secure_entry_paste) (gtk_secure_entry_paste_clipboard): New. 2014-10-24 Werner Koch <wk@gnupg.org> gtk+-2: Make current focus visible again. * gtk+-2/pinentry-gtk-2.c (grab_keyboard): Return false (ungrab_keyboard): Ditto. gtk+-2: Implement the SETREPEAT command. * gtk+-2/pinentry-gtk-2.c (repeat_entry, error_label): New. (button_clicked): Implement repeat check. (changed_text_handler): Clear repeat field. (create_window): Add repeat entry. Add commands to allow implementing a "repeat passphrase" field. * pinentry/pinentry.c (cmd_setrepeat): New. (cmd_setrepeaterror): New. (register_commands): Add new commands. (cmd_getpin): Print "PIN_REPEATED" status.
2014-12-10Update security/pinentry* from 0.8.3 to 0.8.4mef7-14/+26
The second part of the commit after Makefile.common updated This is the last version pinentry-{qt,gtk} are available.
2014-12-10Update security/pinentry* from 0.8.3 to 0.8.4mef1-3/+3
Another commit follows for other files. This is the last version pinentry-{qt,gtk} are available. ----------------------------------------- 2014-09-18 Werner Koch <wk@gnupg.org> Release 0.8.4. Add missing build support files and move them to build-aux. Use generic autogen.sh script. * autogen.rc: New. * autogen.sh: New. Take from GnuPG. * Makefile.am (EXTRA_DIST): Add autogen.rc. (DISTCHECK_CONFIGURE_FLAGS): Disable qt4. 2014-08-12 Werner Koch <wk@gnupg.org> common: Fix compiler warning. * pinentry/pinentry.c (pinentry_utf8_to_local): Use cast for iconv arg. (pinentry_local_to_utf8): Ditto. New pinentry-tty version for dumb terminals. * Makefile.am: Add pinentry-tty. * NEWS: Add news about pinentry-tty. * README: Update. * configure.ac: Add support for this pinentry. * tty/Makefile.am: New. * tty/pinentry-tty.c: New. 2014-08-06 Andre Heinecke <aheinecke@intevation.de> Check for MOC also if pinentry-qt is disabled. * configure.ac: Call QT_PATH_MOC if pinentry_qt4 is not no. Add fallbacks for SetForegroundWindow. If that foreground window fails pinentry-qt now tries to attach to the current foreground process and then tries to set the foreground window again. If that fails it also calls ShowWindow as a last resort. * qt4/pinentrydialog.cpp (raiseWindow): Add fallbacks in case SetForegroundWindow fails. Use raiseWindow also for confirm dialogs. This should fix the case that the dialog opened in the foreground but a warning / confirm dialog opened in the background. * qt4/pinentryconfirm.cpp, qt4/pinentryconfirm.h (showEvent): New overwrite base class method to call raiseWindow. * NEWS: Mention this. 2014-07-30 Andre Heinecke <aheinecke@intevation.de> Set some accessibility information. * qt4/main.cpp (qt_cmd_handler): Build buttons with accessibile Description. * qt4/pinentrydialog.cpp (setDescription, setError, setOkText) (setCancelText, setQualityBar): Set an accessible description. * qt4/pinentryconfirm.cpp (PinentryConfirm): Set message box contents also as accessible values. * NEWS: Mention it and the copy/paste change from last year. 2013-07-15 Andre Heinecke <aheinecke@intevation.de> Lower paste length limit to 300. This should be more then enough and avoids possible problems with libassuan cmd line lenght or percent escaping etc. * qt4/qsecurelineedit.cpp (insert): Lower paste limit Limit paste length to 1023 characters. * qt4/qsecurelineedit.cpp (insert): Check for a maximum length before allocation the secmem string. Fix contextmenu support for pasting. MOC ignores preprocessor definitions so we can not conditionally declare SLOTS. So we now move the ifdefs in the definition and always declare the SLOTS. * qt4/qsecurelinedit.cpp (cut, copy, paste): Do nothing if QT_NO_CLIPBOARD is defined. * qt4/qsecurelinedit.h: Always declare cut, copy and paste slots Remove check for RTL extensions. Our code does nothing RTL specific there anyway. And the qt_use_rtl_extensions symbol has been removed. * qt4/qsecurelinedit.cpp: Remove check for RTL extensions. 2013-07-12 Werner Koch <wk@gnupg.org> Fix for commit fb38be9 to allow for "make distcheck". * qt4/Makefile.am: Make correct use of BUILT_SOURCES. 2013-05-29 Andre Heinecke <aheinecke@intevation.de> Add pinentry-qt4-clipboard option. Enabling this option will make it possible to paste a passphrase into pinentry-qt4. This defeats the secmem mechanism but drastically increases usability for some users. * configure.ac: New option pinentry-qt4-clipboard. * qt4/qsecurelineedit.cpp, qt4/qsecurelineedit.h: Activate clipboard and context menu if PINENTRY_QT4_CLIPBOARD is defined. Remove qt4 moc files and add moc to buildsystem. This is neccessary to conditionally enable signals/slots at build time. * qt4/Makefile.am: Moc files automatically. * qt4/pinentryconfirm.moc, qt4/pinentrydialog.moc, qsecurelineedit.moc: Removed.
2014-12-10Convert security/pinentry* to using Makefile.common style.mef6-99/+53
No any changes on built binary. Proposed at: http://mail-index.netbsd.org/pkgsrc-users/2014/12/08/msg020735.html Thank you.
2014-12-09Updated security/pev to 0.70khorben7-65/+133
Changelog for this version: pev 0.70 - December 26, 2013 ! Missing full/English documentation. ! Missing valid XML and HTML output formats. ! pestr: no support for --net option when parsing unicode strings. ! pestr: unable to handle too big strings. * libpe: rewritten, now using mmap. (Jardel Weyrich). * pestr: added countries domains suffixes. * readpe and peres: output enhancements (Jardel Weyrich). + pehash: sections and headers hash calculation (Jardel Weyrich). + pehash: ssdeep fuzzy hash calculation. + pehash: support for new digest hashes like sha512, ripemd160 and more. + peres: added new tool to analyze/extract PE resources (Marcelo Fleury). + pescan: cpl malware detection. + pescan: undocumented anti-disassembly fpu trick detection. + pesec: show and extract cerfiticates from digitally signed binaries (Jardel Weyrich). - readpe can't show functions exported by ID only. - readpe: fixed subsystem types (Dmitry Mostovenko).
2014-12-09Fixed the default path to "userdb.txt" in pepack(1) (for pkg/49458)khorben4-6/+45
2014-12-08(pkgsrc)mef5-21/+26
- Add comment on patch-ac (from cvs log) (upstream) - Update 0.49 to 0.50 04/30/2014 - Version 0.50 new tests: linuxrootkit-AMD-64-sound Operation Windigo ssh backdoor detection Minor bug fixes
2014-12-07add another test, after some prodding from riz@ - check that the verificationagc1-1/+4
fails when no valid public key for the signature is provided.
2014-12-06Updated security/clamav to version 0.98.5khorben2-6/+6
ChangeLog for this version: Wed, 12 Nov 2014 14:30:39 EDT (swebb) ------------------------------------- * bb11176 - Instruct OpenSSL to allow MD5 when in FIPS-compliant mode. Patch submitted by Reinhard Max. Mon, 10 Nov 2014 11:03:29 EDT (swebb) ------------------------------------- * bb11155 - Adjust the logic surrounding adjusting the PE section sizes This fixes a crash with maliciously crafted yoda's crypter files and also improves virus detections for PE files. Thu, 6 Nov 2014 14:51:26 EDT (swebb) ------------------------------------- * bb11088 - Merge in fixes for clamscan -a crash bug Mon, 20 Oct 2014 11:33:18 EDT (swebb) ------------------------------------- * Revert "bb#10731 - Allow to specificy a group for the socket of which the user is not a member" Thu, 31 Jul 2014 19:11:22 EDT (swebb) ------------------------------------- * Add support for XDP PDF file format Thu, Jul 31 11:50:23 EDT 2014 (swebb) ------------------------------------ * bb#10731 - Allow specification of a group for the milter socket of which the user is not a member - patch submitted by Sebastian Andrzej Siewior Fri, 25 Jul 2014 12:26:04 EDT (klin) ------------------------------------ * bb#10981 - applied LLVM 3.1-3.4 - patch submitted by Andreas Cadhalpun Fri, 25 Jul 2014 12:06:13 (klin) -------------------------------- * clambc: added diagnostic tools for bytecode IR Tue, 8 Jul 2014 19:53:41 EDT (swebb) ------------------------------------ * mass cleanup of compiler warnings Tue, 08 Jul 11:30:00 EDT 2014 (morgan) ------------------------------------ * 0.98.5 beta release Mon, 07 Jul 09:00:00 EDT 2014 (swebb) ------------------------------------ * 0.98.5-beta1 release engineering Thu, 03 Jul 22:14:40 EDT 2014 (swebb) ------------------------------------ * Call cl_initialize_crypto() in cl_init() Thu, 03 Jul 16:28:10 EDT 2014 (swebb) ------------------------------------ * Finalize PDF parsing code for the preclassification feature Wed, 25 Jun 16:26:33 EDT 2014 (swebb) ------------------------------------ * Finalize linking in libjson, a new optional dependency Fri, 13 Jun 2014 16:11:15 EDT (smorgan) --------------------------------------- * add timeout facility for file property scanning Tue, 3 Jun 2014 13:31:50 EDT (smorgan) -------------------------------------- * add callback for user processing of json string and json scan result Wed, 7 May 2014 10:56:35 EDT (swebb) ------------------------------------ * PE file properties collection Tue, 6 May 2014 15:26:30 EDT (klin) ----------------------------------- * add api to read json to the bytecode api Thu, 1 May 2014 16:59:01 EDT (klin) ----------------------------------- * docx/pptx/xlsx file properties collection Wed, 30 Apr 2014 16:38:55 EDT (swebb) ------------------------------------- * pdf file properties collection Tue, 22 Apr 2014 14:22:39 EDT (klin) ------------------------------------ * json api wrapper Mon, 21 Apr 2014 18:30:28 EDT (klin) ------------------------------------ * doc/ppt/xls file properties collection Wed, 16 Apr 18:14:45 2014 EDT (smorgan) -------------------------------------- * Initial libjson-c configure/build support and json file properties work
2014-12-05 Version 1.4.2rodent2-6/+6
Several small bugfixes related to six/py3 support.
2014-12-05add & enable snoopyimil1-1/+2
2014-12-05Initial import of snoopy, version 2.1.0, into the NetBSD Packages Collection.imil5-0/+50
Snoopy sends every executed command to syslog.
2014-12-05Packaged gnutls 3.2.20khorben3-17/+17
* Version 3.2.20 (released 2014-11-10) ** libgnutls: Removed superfluous random generator refresh on every call of gnutls_deinit(). That reduces load and usage of /dev/urandom. ** libgnutls: Corrected issue in export of ECC parameters to X9.63 format. Reported by Sean Burford [GNUTLS-SA-2014-5]. ** API and ABI modifications: No changes since last version.
2014-12-05Packaged gnutls 3.2.19khorben7-37/+37
* Version 3.2.19 (released 2014-10-13) ** libgnutls: Fixes in the transparent import of PKCS #11 certificates. Reported by Joseph Peruski. ** libgnutls: Fixed issue with unexpected non-fatal errors resetting the handshake's hash buffer, in applications using the heartbeat extension or DTLS. Reported by Joeri de Ruiter. ** libgnutls: fix issue in DTLS retransmission when session tickets were in use; reported by Manuel Pégourié-Gonnard. ** libgnutls: Prevent abort() in library if getrusage() fails. Try to detect instead which of RUSAGE_THREAD and RUSAGE_SELF would work. ** guile: new 'set-session-server-name!' procedure; see the manual for details. ** API and ABI modifications: No changes since last version.
2014-12-04Also modify the header guard definition, which libnetpgpverify uses toagc1-1/+1
get its version number.
2014-12-04Update netpgpverify to version 20141204agc11-43/+63
Changes since 20141129: + bring over lint changes from src/crypto version of this utility + add a helper function to get an element from a cursor + added a small compile and test script, which uses BSD makefiles + change WARNS level in BSD Makefile from 6 to 5 - changes to make WARNS=6 compile are way too intrusive and distracting to be useful + bump version to 20141204
2014-12-04Update to version 1.4.7.he4-432/+37
Changes: * The patch for SUPPORT-147 got integrated upstream. * Regenerate enforcer/utils/Makefile.in diff Upstream changes: * SUPPORT-147: Zone updating via zone transfer can get stuck * Crash on 'retransfer command when not using DNS adapters.
2014-12-03Use explicit library search path.joerg2-4/+4
2014-11-30Update to 2.007:wiz2-6/+6
2.007 2014/11/26 - make getline/readline fall back to super class if class is not sslified yet, i.e. behave the same as sysread, syswrite etc. This fixes RT#100529
2014-11-29Update netpgpverify to version 20141129agc3-4/+4
+ enhancement to tiger.c (from apb, IIRC) to use the union rather than dubious and probably unportable casts. + bump version number
2014-11-28Fix off-by-one in tty output library. Patch provided by Wada Keiji inbsiegert4-6/+20
PR pkg/49312.
2014-11-27The variable is called MAKE_ENV, not BUILDENV.joerg1-2/+2
2014-11-25Add patch for CVE-2014-5351 from:tez3-3/+55
http://krbdev.mit.edu/rt/Ticket/Display.html?id=8018 https://github.com/krb5/krb5/commit/3bf9e33f9d66c0eef486cbd83f9e4f13a74d12c3.diff
2014-11-25Update to 1.3.2. Add comment to patch.wiz3-9/+10
Noteworthy changes in version 1.3.2 (2014-11-25) [C19/A11/R3] ------------------------------------------------ * Fixed a buffer overflow in ksba_oid_to_str. Noteworthy changes in version 1.3.1 (2014-09-18) ------------------------------------------------ * Fixed memory leak in CRL parsing. * Build fixes for Windows, Android, and ppc64el.
2014-11-24+ py-oauth2clientwiz1-1/+2
2014-11-24Import py34-oauth2client-1.4.1 as security/py-oauth2client.wiz4-0/+84
This is a client library for accessing resources protected by OAuth 2.0.
2014-11-24+ py-rsa.wiz1-1/+2
2014-11-24Import py34-rsa-3.1.4 as security/py-rsa.wiz4-0/+94
Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS#1 version 1.5. It can be used as a Python library as well as on the commandline.
2014-11-24+ py-asn1-moduleswiz1-1/+2
2014-11-24Import py34-asn1-modules-0.0.5 as security/py-asn1-modules.wiz4-0/+94
This is a small but growing collection of ASN.1 data structures expressed in Python terms using the pyasn1 data model. It's thought to be useful to protocol developers and testers.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-17 16:02:56 +0000