summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2013-11-20Revbump after updating devel/boost-libsadam2-4/+4
2013-11-20recursive bump from boost-lib shlib major bump.obache2-2/+4
2013-11-19Remove unnecessary command line options from build and install targets.tron2-6/+6
2013-11-19Add and enable "sslscan" package.tron1-1/+2
2013-11-19Import new "sslscan" package:tron6-0/+70
SSLScan queries SSL services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes prefered ciphers of the SSL service, the certificate and is in Text and XML formats.
2013-11-15add and enable smaSHeMagc1-1/+2
2013-11-15Initial import of smaSHeM, version 0.4, into the packages collection.agc5-0/+46
System V shared memory segments created with shmget() are assigned an owner, a group and a set of permissions intended to limit access to the segment to designated processes only. The owner of a shared memory segment can change the ownership and permissions on a segment after its creation using shmctl(). Any subsequent processes that wish to attach to the segment can only do so if they have the appropriate permissions. Once attached, the process can read or write to the segment, as per the permissions that were set when the segment was created. smaSHeM takes advantage of applications that set weak permissions on such segments, allowing an attacker to dump or patch their contents. As discussed in the presentation at 44CON 2013 entitled 'I Miss LSD', in the case of many X11 applications it is possible to extract pixmaps of previously rendered GUI artifacts. When compiled with QtCore linking enabled, smaSHeM aids in that process by brute forcing potentially valid dimensions for the raw pixmap dump.
2013-11-13Force Lua 5.1.joerg1-1/+2
2013-11-11"or" has been deprecated, and the warning about it from ocaml 4.01.xis3-1/+29
aborts the build. Use '||' instead. Upstream's "HEAD" equivalent has the fix already.
2013-11-07Update to KDE SC 4.11.3markd5-16/+14
bugfixes, many new features, improved stability and performance.
2013-11-05Install as egg to fix the 2.6 installation.joerg4-5/+24
2013-11-04Add --without-tpm to configure arguments to have consistency acrosswiz1-1/+2
platforms. Reported by Richard PALO.
2013-11-01Revision bump associated with the update of lang/ocaml to version 4.01.jaapb4-8/+8
2013-10-31Fix PKG_USERS usage.jperkin1-5/+7
2013-10-31Update to 3.2.6:wiz3-8/+9
* Version 3.2.6 (released 2013-10-31) ** libgnutls: Support for TPM via trousers is now enabled by default. ** libgnutls: Camellia in GCM mode has been added in default priorities, and GCM mode is prioritized over CBC in all of the default priority strings. ** libgnutls: Added ciphersuite GNUTLS_ECDHE_RSA_AES_256_CBC_SHA384. ** libgnutls: Fixed ciphersuites GNUTLS_ECDHE_ECDSA_CAMELLIA_256_CBC_SHA384, GNUTLS_ECDHE_RSA_CAMELLIA_256_CBC_SHA384 and GNUTLS_PSK_CAMELLIA_128_GCM_SHA256. Reported by Stefan Buehler. ** libgnutls: Added support for ISO OID for RSA-SHA1 signatures. ** libgnutls: Minimum acceptable DH group parameters were increased to 767 bits from 727. ** libgnutls: Added function to obtain random data from PKCS #11 tokens. Contributed by Wolfgang Meyer zu Bergsten. ** gnulib: updated. ** libdane: Fixed a one-off bug in dane_query_tlsa() introduced by the previous fix. Reported by Tomas Mraz. ** p11tool: Added option generate-random. ** API and ABI modifications: gnutls_pkcs11_token_get_random: Added
2013-10-30Updated MASTER_SITES etc.pettai1-5/+6
Updated USE_TOOLS with gmake
2013-10-30Bump PKGREVISION of packages whose Lua depends changed form, but whosedholland2-4/+4
own PKGNAME is unchanged.
2013-10-30Use LUA_PKGPREFIX. Many Lua packages already do, but not these.dholland1-2/+2
2013-10-29+ sleuthkitpettai1-1/+2
2013-10-29The Sleuth Kit (TSK) is a library and collection of command line tools thatpettai4-0/+113
allow you to investigate disk images. The core functionality of TSK allows you to analyze volume and file system data. The plug-in framework allows you to incorporate additional modules to analyze file contents and build automated systems. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
2013-10-29For Linux/POWERPC64 override the default target, otherwise bad thingsjoerg1-1/+6
happen (TM).
2013-10-29Update security/py-crypto to 2..6.1gls3-8/+11
This is a security fix to address CVE-2013-1445 Upstream changes: ----------------- 2.6.1 ===== * [CVE-2013-1445] Fix PRNG not correctly reseeded in some situations. In previous versions of PyCrypto, the Crypto.Random PRNG exhibits a race condition that may cause forked processes to generate identical sequences of 'random' numbers.
2013-10-29Update security/py-ecdsa to 0.10.gls2-9/+9
Upstream changes: ----------------- * Release 0.10 (23 Oct 2013) Make the secp256k1 available in __init__.py too (thanks to Scott Bannert). While here, adjust HOMEPAGE.
2013-10-27Update to 3.2.5:wiz3-7/+8
* Version 3.2.5 (released 2013-10-23) ** libgnutls: Documentation and build-time fixes. ** libgnutls: Allow the generation of DH groups of less than 700 bits. ** libgnutls: Added several combinations of ciphersuites with SHA256 and SHA384 as MAC, as well as Camellia with GCM. ** libdane: Added interfaces to allow initialization of dane_query_t from external DNS resolutions, and to allow direct verification of a certificate chain against a dane_query_t. Contributed by Christian Grothoff. ** libdane: Fixed a buffer overflow in dane_query_tlsa(). This could be triggered by a DNS server supplying more than 4 DANE records. Report and fix by Christian Grothoff. ** srptool: Fixed index command line option. Patch by Attila Molnar. ** gnutls-cli: Added support for inline commands, using the --inline-commands-prefix and --inline-commands options. Patch by Raj Raman. ** certtool: pathlen constraint is now read correctly. Reported by Christoph Seitz. ** API and ABI modifications: gnutls_certificate_get_crt_raw: Added dane_verify_crt_raw: Added dane_raw_tlsa: Added * Version 3.2.4 (released 2013-08-31) ** libgnutls: Fixes when session tickets and session DB are used. Report and initial patch by Stefan Buehler. ** libgnutls: Added the RSA-PSK key exchange. Patch by by Frank Morgner, based on previous patch by Bardenheuer GmbH and Bundesdruckerei GmbH. ** libgnutls: Added ciphersuites that use ARCFOUR with ECDHE. Patch by Stefan Buehler. ** libgnutls: Added the PFS priority string option. ** libgnutls: Gnulib included files are strictly LGPLv2. ** libgnutls: Corrected gnutls_certificate_server_set_request(). Reported by Petr Pisar. ** API and ABI modifications: gnutls_record_set_timeout: Exported
2013-10-26Remove obsolete --with-static-rnd=auto, as suggested by Andreas Gustafssonwiz1-2/+1
in PR 48345.
2013-10-26Remove obsolete --with-static-rnd=auto as suggested by Andreas Gustafssonwiz1-2/+1
in PR 48345.
2013-10-26update mit-krb5 builtin for solaris and better krb5-config supportrichard2-4/+23
2013-10-25Add stdbool.h workaround for older OSX.jperkin3-1/+33
2013-10-24Update to 1.1.2. Changeset from Sebastian Wiedenroth.jperkin3-10/+28
Changes since 1.0.5: * SunOS build fix * An other client info bugfix * Client info bugfixes * Client info option * Client certificate validation * Some cleanup in the client side connection code * Type conversion to compile cleanly on OS X
2013-10-24Add socket libraries on SunOS. Fix from Thomas Merkel.jperkin1-1/+3
2013-10-23Update to 0.4.5. From csosstudy in PR 48336.wiz2-7/+6
* Version 0.4.5 - Restore compatibility with OSX <= 10.6 * Version 0.4.4 - Visual Studio is officially supported (VC 2010 & VC 2013) - mingw64 is now supported - big-endian architectures are now supported as well - The donna_c64 implementation of curve25519_donna_c64 now handles non-canonical points like the ref implementation - Missing scalarmult_curve25519 and stream_salsa20 constants are now exported - A crypto_onetimeauth_poly1305_ref() wrapper has been added
2013-10-20Pass rpath options with correct -Wl prefix.joerg9-14/+154
2013-10-20Update security/py-paramiko to 1.12.0gls3-7/+12
pkgsrc changes: --------------- - Depends on security/py-ecdsa - FETCH_USING=curl to deal with PyPi's htpps only website. upstream changes: ----------------- v1.12.0 (27th Sep 2013) ----------------------- * #152: Add tentative support for ECDSA keys. *This adds the ecdsa module as a new dependency of Paramiko.* The module is available at [warner/python-ecdsa on Github](https://github.com/warner/python-ecdsa) and [ecdsa on PyPI](https://pypi.python.org/pypi/ecdsa). * Note that you might still run into problems with key negotiation -- Paramiko picks the first key that the server offers, which might not be what you have in your known_hosts file. * Mega thanks to Ethan Glasser-Camp for the patch. * #136: Add server-side support for the SSH protocol's 'env' command. Thanks to Benjamin Pollack for the patch. v1.11.2 (27th Sep 2013) ----------------------- * #156: Fix potential deadlock condition when using Channel objects as sockets (e.g. when using SSH gatewaying). Thanks to Steven Noonan and Frank Arnold for catch & patch. * #179: Fix a missing variable causing errors when an ssh_config file has a non-default AddressFamily set. Thanks to Ed Marshall & Tomaz Muraus for catch & patch. * #200: Fix an exception-causing typo in `demo_simple.py`. Thanks to Alex Buchanan for catch & Dave Foster for patch. * #199: Typo fix in the license header cross-project. Thanks to Armin Ronacher for catch & patch. v1.12.0 (27th Sep 2013) ----------------------- * #152: Add tentative support for ECDSA keys. *This adds the ecdsa module as a new dependency of Paramiko.* The module is available at [warner/python-ecdsa on Github](https://github.com/warner/python-ecdsa) and [ecdsa on PyPI](https://pypi.python.org/pypi/ecdsa). * Note that you might still run into problems with key negotiation -- Paramiko picks the first key that the server offers, which might not be what you have in your known_hosts file. * Mega thanks to Ethan Glasser-Camp for the patch. * #136: Add server-side support for the SSH protocol's 'env' command. Thanks to Benjamin Pollack for the patch. v1.11.2 (27th Sep 2013) ----------------------- * #156: Fix potential deadlock condition when using Channel objects as sockets (e.g. when using SSH gatewaying). Thanks to Steven Noonan and Frank Arnold for catch & patch. * #179: Fix a missing variable causing errors when an ssh_config file has a non-default AddressFamily set. Thanks to Ed Marshall & Tomaz Muraus for catch & patch. * #200: Fix an exception-causing typo in `demo_simple.py`. Thanks to Alex Buchanan for catch & Dave Foster for patch. * #199: Typo fix in the license header cross-project. Thanks to Armin Ronacher for catch & patch.
2013-10-20Added security/py-ecdsagls1-1/+2
2013-10-20Added security/py-ecdsa to the NetBSD packages collection.gls4-0/+75
py-ecdsa is an easy-to-use implementation of ECDSA cryptography (Elliptic Curve Digital Signature Algorithm), implemented purely in Python, released under the MIT license. With this library, you can quickly create keypairs (signing key and verifying key), sign messages, and verify the signatures. The keys and signatures are very short, making them easy to handle and incorporate into other protocols.
2013-10-19Revbump after updating textproc/icuadam11-20/+22
2013-10-18Fix a common mistake in many different packages: POSIX says that when usingbsiegert1-1/+2
pax -rw, the destination directory must exist. pax in NetBSD creates it if not, pax in MirBSD complains. I read through all pkgsrc Makefiles that use pax and added an entry to INSTALLATION_DIRS, or an INSTALL_DATA_DIR invocation. I did not test all the changes but they should be fairly safe. If you notice any breakage because of this change, please contact me.
2013-10-15SoftHSM 1.3.5pettai2-7/+6
Bugfixes: * SOFTHSM-45: Improved handling of a busy database * SUPPORT-76: Add -Wall -Werror flags and fix the warnings. Fix more warnings on EPEL.
2013-10-15Fix enough problems with Clang so that the build hangs in the RPCjoerg8-22/+152
compiler, which seems to also occur at least with GCC 4.7's cpp.
2013-10-14Fix pakaging on Linux.ryoon1-1/+7
vis.h and glob.h are installed on Linux (Debian GNU/Linux 7.1 and CentOS 6.4 at least) * Makefile of Rev 1.100 removes vis.h and glob.h hack. My two Linux environments require vis.h and glob.h entries for PLIST. Set PLIST.vis and PLIST.glob for Linux.
2013-10-12revert API to 1.4nb1 for mit-krb5 builtin supportrichard1-3/+2
2013-10-11Heimdal really uses termcaproy4-4/+97
2013-10-10Recursive revbump from pango-1.36.0ryoon15-30/+30
2013-10-10Fix build with modernish flex.joerg2-1/+26
2013-10-09recursive bump for libmng-2.0.2 shlib major bump and dependency changewiz10-19/+20
2013-10-08+ security/py-hsmpettai1-1/+2
2013-10-08This is the Python package to talk to a YubiHSM.pettai4-0/+100
The YubiHSM is Yubico's take on the Hardware Security Module (HSM), designed for protecting secrets on authentication servers, including cryptographic keys and passwords, at unmatched simplicity and low cost.
2013-10-06Recursive bump for serf shlib major downgrade.wiz1-1/+2
2013-10-06Change to create fake *.pc files much close to real one.obache1-16/+31
Fixes to detect its prefix with `pkg-config --variable=prefix", such as CMake.
2013-10-06Bump PKGREVISION to be built with unvulnerable libnids>=1.24.obache3-6/+6
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-08 05:40:14 +0000