summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-01-19really depend on nessus-libraries>=2.2.2a since >=2.2.0 does not workfrueauf1-2/+2
on alpha as seen in pr pkg/28969. libnasl 2.2.2a needs nessus-libraries 2.2.2a to compile properly.
2005-01-19Add patch for libnessus/share_fd.c to compile with gcc shipped withfrueauf2-1/+19
NetBSD 1.5.4_ALPHA (missing __func__ definition).
2005-01-19Remove nb1 from version as pointed out by Bernd Ernesti.frueauf1-3/+3
2005-01-18Do a "flush all" in the stop command. From Miles Nordin.peter1-2/+2
2005-01-18Update to 20050118.peter2-6/+5
Changes: * Updated the ALTQ patch, now works correctly on NetBSD 2.0 release. Thanks to Miles Nordin for helping and testing. * Write struct "pcap_sf_pkthdr" instead of "pcap_pkthdr". Fixes an LP64 specific problem with reading the pflog with tcpdump(8). * Applied patch to pf.c from OPENBSD_3_6 branch: ICMP state entries use the ICMP ID as port for the unique state key. When checking for a usable key, construct the key in the same way. Otherwise, a colliding key might be missed or a state insertion might be refused even though it could be inserted. The second case triggers the endless loop fixed by 1.474, possibly allowing a NATed LAN client to lock up the kernel. Report and test data by Srebrenko Sehic. * Applied patch to pf_lkm.c from NetBSD HEAD: pfil4_wrapper: clear M_CANFASTFWD which is not compatible with pf. * Applied patch to pf_ioctl.c from OPENBSD_3_6 branch: replace finer-grained spl locking in pfioctl() with a single broad lock around the entire body. this resolves the (misleading) panics in pf_tag_packet() during heavy ioctl operations (like when using authpf) that occur because softclock can interrupt ioctl on i386 since SMP. * Applied patch to pf.c from OPENBSD_3_6 branch: IPv6 packets can contain headers (like options) before the TCP/UDP/ICMP6 header. pf finds the first TCP/UDP/ICMP6 header to filter by traversing the header chain. In the case where headers are skipped, the protocol checksum verification used the wrong length (included the skipped headers), leading to incorrectly mismatching checksums. Such IPv6 packets with headers were silently dropped. Reported by Bernhard Schmidt. * Applied patch to pfctl_optimize.c from OPENBSD_3_6 branch: &&/|| inversion would try to merge IP addresses with non-addresses into a single table causing a ruleset load error and eventually a double-free. * Applied patch to pf.c from OPENBSD_3_6 branch: Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN, prevents a possible endless loop in pf_get_sport() with 'static-port' * Fix to if_events.diff from Miles Nordin <carton at Ivy dot NET>: Call free after removing the element from the list, not before. Fixes panic with "unaligned access" on Alpha.
2005-01-18update to 0.44drochner5-25/+49
changes: -IPv6 support -client added -bugfixes XXX dropbear wants to use /dev/random per default now which makes it unusable on systems w/o entropy source. I've patched it back to /dev/urandom. There might be security concerns.
2005-01-18It's not very useful to include <sys/select.h> in only one source filetv3-1/+36
when other source files depend on fd_set being defined in a local header. (Required on Interix, which does not expose <sys/select.h>/<sys/time.h> automagically via other system headers as some OS's do by default.)
2005-01-18when building with SunPro on x86, do not use -fast argument to cc(1)grant2-4/+13
because: - its behaviour changes between releases - it uses build-host specific instructions where possible, specifically on >= Solaris 9 update 6 and Sun Studio 9 (sse, sse2) this breaks using the binary pkg when installed on systems with a less capable processor. instead, just use -xO5 so the binary pkg will work everywhere.
2005-01-17Update to release 1.9.15. This is a bug fix release.shannonjr3-25/+12
2005-01-17OpenPAM doesn't really need perl during the build... it's only therejlam1-3/+4
to regenerate some documentation files, but the regen is unnecessary. Fix the post-tools target that created a dummy perl -- it was failing because ${TRUE} may not be an actual executable (it could be a shell builtin) and thus symlinking to it may not work.
2005-01-17According to the bulk builds, this needs perl;wiz1-1/+2
add USE_PERL5=build.
2005-01-14Upgrade to 2.3adrianp3-70/+469
- Complete overhaul of the Framework payload collection + Win32 ordinal-stagers are now included (92-byte reverse connect) + A handful of new sparc payloads have been added (sol, linux, bsd) + Reliability problems have been resolved in bsd, linux, and win32 + New udp-based linux shell stagers and shell payloads + New size-optimized Mac OS X encoders and payloads - Includes the win32 version of the Meterpreter + Dynamically load new features over the network w/o disk access + In-memory dll injection of the basic meterpreter shell + Current extensions include Fs, Process, Net, and Sys + Extensive documentation is available online: * http://metasploit.com/projects/Framework/docs/meterpreter.pdf - Complete rewrite of the 'msfweb' user interface + Generate and encode stand-alone shellcode from the web interface + The interface is skinnable and includes three different themes + Streaming HTTP is used to provide a 100% web-based shell + Ability to set advanced options in the web interface - Massive speed enhancements in msfconsole and msfweb + Snappier response and quicker load times on older systems + Optimizations made to various sort/search algorithms + Modules are no longer reloaded after each exploit - New exploits + Microsoft WINS Service Memory Overwrite (MS04-045) + Samba trans2open() Buffer Overflow (Mac OS X) + 4D WebSTAR FTP Server Buffer Overflow (Mac OS X) + Veritas Name Service Registration Buffer Overflow + AOL Instant Messenger 'goaway' Buffer Overflow + IPSwitch IMail IMAPD 'delete' Buffer Overflow + Seattle Labs Mail Server POP3 Buffer Overflow + UoW IMAPD Buffer Overflow (sparc, ia32) + IRIX lpdsched Remote Command Execution + CDE dtspcd Buffer Overflow (Solaris) + IIS 4.0 ism.dll HTR Buffer Overflow + IIS w3who.dll ISAPI Buffer Overflow
2005-01-14- Updated to v1.0 (No CHANGELOG available)adrianp5-28/+82
- Use options.mk framework for python and rrdtool support
2005-01-14Re: pkg/28968: pinentry breaks on buildshannonjr1-1/+3
Added dependancy on libconv to fix breakage reported on NetBSD 1.6.2 alpha
2005-01-14Changes 1.2.1:adam3-30/+9
* Portability fixes, memory allocation fixes and other minor things. * Support to build as a W32 static library. * Changed the way the RNG gets initialized. This allows to keep it uninitialized as long as no random numbers are used. To override this, the new macro gcry_fast_random_poll may be used. It is in general a good idea to spread this macro into the application code to make sure that these polls happen often enough.
2005-01-14- Update to 1.7adrianp3-7/+25
- Add bl3 and openssl support - Fix paths in man pages - Install extra documentation - Remove un-needed options from pkgsrc Makefile Lots of changes/bugfixes from 1.6 including: psk-crack.c: New program to crack Aggressive Mode Pre-Shared Keys using dictionary attack. This uses the output from "ike-scan -P" together with a dictionary.
2005-01-14Modify linux-pam and solaris-pam builtin.mk files to be more generaljlam1-18/+19
in their tests for built-in versions of the PAM implementations. The MacOS X case now collapses nicely into the linux-pam case. Allow pam.buildlink3.mk to use solaris-pam as an accepted PAM implementation.
2005-01-14Fix spelling error that would have made this file inefficient.jlam1-2/+2
2005-01-14Switch to using pam.buildlink3.mk.jlam1-2/+2
2005-01-14Create a pam.buildlink3.mk file that is used by PAM-using packages.jlam9-23/+23
It includes the correct buildlink3.mk file from either Linux-PAM (security/PAM) or OpenPAM (security/openpam) and eventually will support solaris-pam. pam.buildlink3.mk will: * set PAMBASE to the base directory of the PAM files; * set PAM_TYPE to the PAM implementation used. There are two variables that can be used to tweak the selection of the PAM implementation: PAM_DEFAULT is a user-settable variable whose value is the default PAM implementation to use. PAM_ACCEPTED is a package-settable list of PAM implementations that may be used by the package. Modify most packages that include PAM/buildlink3.mk to include pam.buildlink3.mk instead.
2005-01-14Rename the multiple inclusion guard to LINUX_PAM_BUILDLINK3_MK.jlam1-5/+5
2005-01-14* Rename the buildlink module name associated with the security/PAMjlam5-37/+49
package from "pam" to "linux-pam". * Rewrite PAM/builtin.mk to check that we have Linux-PAM, and re-classify MacOS X's PAM as Linux-PAM because it _is_, according to to Apple. Also don't use BUILDLINK_TRANSFORM.* to rewrite header file paths -- just use a symlink so that <security/*.h> can be used to find <pam/*.h>.
2005-01-13Add a builtin.mk file to check for a built-in version of openpam and tojlam1-0/+40
associate it with a PKGNAME.
2005-01-13Add a buildlink3.mk file for openpam.jlam1-0/+20
2005-01-13This package dlopen()s loadable modules, so include dlopen.buildlink3.mkjlam1-1/+3
to do the right thing on NetBSD-2.0.
2005-01-13Note conflict with openpam-[0-9]*.jlam1-1/+3
2005-01-13Add and enable openpam.jlam1-1/+2
2005-01-13Initial import of openpam-20040210 as security/openpam.jlam6-0/+147
OpenPAM is an open source PAM library that focuses on simplicity, correctness, and cleanliness. OpenPAM aims to gather the best features of Solaris PAM, XSSO and Linux-PAM, plus some innovations of its own. In areas where these implementations disagree, OpenPAM tries to remain compatible with Solaris, at the expense of XSSO conformance and Linux-PAM compatibility. These are some of OpenPAM's features: - Implements the complete PAM API as described in the original PAM paper and in OSF-RFC 86.0; this corresponds to the full XSSO API except for mappings and secondary authentication. Also implements some extensions found in Solaris 9. - Extends the API with several useful and time-saving functions. - Performs strict checking of return values from service modules.
2005-01-13Fix multiple useless C99isms. Should fix the build with GCC 2.95.jmmv5-1/+137
Spotted by latest NetBSD 1.6.2/i386 kristerw@'s bulk build.
2005-01-13Bump PKGREVISION to 1 as a result of fixing the run-time behavior ofjlam1-1/+2
openssl on sparc64 and amd64 in the previous commit.
2005-01-13Optimize the NetBSD/amd64 config a bit to improve RC4 performance, andjlam2-5/+5
fix the NetBSD/sparc64 config by adding -DMD32_REG_T=int to the flags. Tested by martin (at) NetBSD.org. This should fix PR pkg/28858.
2005-01-12Use PKG_SYSCONFDIRkim1-1/+4
2005-01-12Make this build on NetBSD -current which uses OpenPAM (should fix thextraeme2-1/+150
build with FreeBSD too). Patch stolen from FreeBSD/ports.
2005-01-12BUILDLINK_TRANSFORM is not enough to buildlink the files when usingxtraeme1-1/+5
OpenPAM (NetBSD/FreeBSD), so use BUILDLINK_FILES to right directory.
2005-01-11Fix build on NetBSD/sparc64 by marking the system as ``ULTRASPARC''jlam2-19/+19
so that the appropriate OpenSSL sources are built. Also, explicitly mark the endianness of each supported NetBSD platform to avoid potential endianness issues when doing the crypto arithmetic.
2005-01-11Fix compilation on Interix. Reported in PR pkg/28938tv2-4/+4
by HIRAMATSU Yoshifumi <hiramatu@boreas.dti.ne.jp>.
2005-01-11+p5-Digest-CRCtv1-1/+2
2005-01-11The Digest::CRC module calculates CRC sums of all sorts. It containstv4-0/+30
wrapper functions with the correct parameters for CRC-CCITT, CRC-16 and CRC-32. [tv: This differs from p5-String-CRC32 in that it is a generic Digest.pm module plugin.]
2005-01-11Changes 2.2.2a:adam7-17/+17
* nessus-fetch would not build under Solaris * the detached scans in Nessus 2.2.x were broken * improved http-proxy support over SSL
2005-01-10Fix held over "wip" path; p5-GnuPG-Interface is now in "security".tv1-2/+2
2005-01-10+pgpenvelopetv1-1/+2
2005-01-10Import pgpemvelope from the pkgsrc-wip project. From DESCR:tv5-0/+55
The purpose of pgpenvelope is to allow easy use of GnuPG to encrypt/sign/decrypt/verify messages using Pine's send- ing/displaying filters. Simply make the appropriate filter entries in one's Pine configuration, and run Pine as normal. When sending mail, choose the pgpenvelope_encrypt filter. Additionally, one can use it as a procmail filter.
2005-01-10+p5-GnuPG-Interfacetv1-1/+2
2005-01-10GnuPG::Interface and its associated modules are designed to provide antv5-0/+60
object-oriented method for interacting with GnuPG, being able to perform functions such as but not limited to encrypting, signing, decryption, verification, and key-listing parsing.
2005-01-09pkgsrc changes:schmonz6-22/+47
* An "stunnel3" perl script is installed. REPLACE_PERL and add to PLIST. * Regenerate patches to lose fuzz. * Format DESCR. * Bump PKGREVISION.
2005-01-04Enabled threads as recommended by developers.shannonjr5-8/+64
2005-01-04Update to release 0.90.shannonjr8-66/+309
Dirmngr is a server for managing and downloading certificate revocation lists (CRLs) for X.509 certificates and for downloading the certificates themselves. Dirmngr also handles OCSP requests as an alternative to CRLs. Dirmngr is either invoked internaly by gpgsm (from gnupg 1.9) or when running as a system daemon through the dirmngr-client tool. Whats new in this release ========================= * New option --daemon to start dirmngr as a system daemon. This switches to the use of different directories and also does CRL signing certificate validation on its own. * New tool dirmngr-client. * New options: --ldap-wrapper-program, --http-wrapper-program, --disable-ldap, --disable-http, --honor-http-proxy, --http-proxy, --ldap-proxy, --only-ldap-proxy, --ignore-ldap-dp and --ignore-http-dp. * Uses an external ldap wrapper to cope with timeouts and general LDAP problems. * SIGHUP may be used to reread the configuration and to flush the certificate cache. * An authorithyKeyIdentifier in a CRL is now handled correctly.
2005-01-04Update pgpdump 0.24.taca2-5/+5
0.24 2004/12/24 * More secure programming style. * Adding GnuPG string-to-key. * Adding a missing key flag.
2005-01-04Fix PLIST; don't leave used directories.taca1-1/+3
2005-01-03Updated stunnel to 4.07martti4-34/+12
Version 4.07, 2005.01.03, urgency: MEDIUM: * Bugfixes - Problem with infinite poll() timeout negative, but not equal to -1 fixed. - Problem with a file descriptor ready to be read just after a non-blocking connect call fixed. - Compile error with EAI_NODATA not defined or equal to EAI_NONAME fixed. - IP address and TCP port textual representation length (IPLEN) increased to 128 bytes. - OpenSSL engine support is only used if engine.h header file exists.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-12 03:18:35 +0000