summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2008-04-30Drop maintainershipjmmv2-4/+4
Stop lying and drop maintainership of these packages. I have not maintained them for a very long time already, so leave room for fresh blood to take over them.
2008-04-30Re: pkg/38549 (Support for DragonFly to security/pcsc-lite)shannonjr3-1/+29
Synopsis: Support for DragonFly to security/pcsc-lite Incorporated fix submitted by Hasso Tepper.
2008-04-30Re: pkg/38550 (Support for DragonFly to security/ccid)shannonjr2-5/+32
Synopsis: Support for DragonFly to security/ccid Incorporated fix submitted by Hasso Tepper.
2008-04-30Add patch to conditionally include <stdint.h> based on the symbolshannonjr2-1/+17
HAVE_STDINT_H generated by configure. This is required for compilation on Solaris 9.
2008-04-29Update to 1.4:wiz2-6/+6
Version 1.4 (released 2008-04-21) - Update gnulib files. - Replace uses of alloca with malloc.
2008-04-29Update to 1.4.1:wiz4-46/+6
Noteworthy changes in version 1.4.1 (2008-04-25) ------------------------------------------------ * Fixed a bug introduced by 1.3.1 which led to the comsumption of far too much entropy for the intial seeding. * Improved AES performance for CFB and CBC modes. * Removed build problems for the Padlock support.
2008-04-28Add py-smbpasswdbouyer1-1/+2
2008-04-28py-smbpasswd version 1.0.1bouyer4-0/+27
This module can generate both LANMAN and NT password hashes, suitable for use with Samba.
2008-04-28Update to 2.0.9. Changes:shannonjr4-36/+36
* Enhanced gpg-connect-agent with a small scripting language. * New option --list-config for gpgconf. * Fixed a crash in gpgconf. * The envvars XAUTHORITY and PINENTRY_USER_DATA are now passed to the pinentry. * Fixed the auto creation of the key stub for smartcards. * Fixed a rare bug in decryption using the OpenPGP card. * Creating DSA2 keys is now possible. * New option --extra-digest-algo for gpgsm to allow verification of broken signatures. * Allow encryption with legacy Elgamal sign+encrypt keys with option --rfc2440.
2008-04-28Re: pkg/38508 (gnupg2 won't build)shannonjr1-3/+3
Builds without 'enable-maintainer-mode' being set
2008-04-28Update to 0.9.14. Changes:shannonjr3-8/+14
- Let the user choose the type of sorting (default to time descending, available: time asc/desc, count asc/desc). - Implement Prewikka Asynchronous DNS resolution in alert view as well as message summary (require twisted.names and twisted.internet), see the additional dns_max_delay settings parameters in prewikka.conf. - In the alert summary view, handle portlist and ip_version service fields, and show alert messageid. - Fix exception when rendering ToolAlert. - Fix double classification escaping (could result in non working link for alert with classification containing escaped character). - Improvement to heartbeat retrieval (heartbeat view speedup). - Correct typo (fix #275), thanks Scott Olihovki <skippylou@gmail.com> for pointing this out. - Polish translation, by Konrad Kosmowski <konrad@kosmosik.net>. - Update to pt_BR translation, by Edelberto Franco Silva <edeunix@edeunix.com> - Various bug fixes and cleanup.
2008-04-28Update to 0.9.12.2. Changes:shannonjr5-26/+30
- [rulesets]: Remove successful/failure keyword from classification (use IDMEF completion). Analyzer class sanitization. - [nagios] Handle Nagios V2 log entry (fix #283). - [spamassassin] Fix incorrect AdditionalData assignement. - New Suhosin ruleset, by Sebastien Tricaud <toady@inl.fr> - Fix invalid logfile inconsistency alert that could be triggered in a rare case, after a renaming detection. Alert improvement. - On logfile inconsistency alert, do not re-analyze the whole file. - Remove the 1024 bytes per PCRE reference limit. - Minor bug fixes, build system cleanup.
2008-04-28New patch required for 0.9.17shannonjr1-0/+13
2008-04-28Update to 0.9.17. Changes:shannonjr3-44/+44
- Implement RFC 4122 UUIDv1 identifier generation, more resistant to duplicate than our previous implementation in case of clock skew, or multiple client with the same analyzerid sending alert in parallel. - You can now provide NULL value to idmef_path_set() in order to destroy existing value within an IDMEF message. - Unify memory handling of value retrieval through idmef_path_t. This allow the user to retrieve and keep any values, even through the associated IDMEF message is freed. - Build system cleanup, enable RELRO when possible. - Implement PRELUDE_CLIENT_FLAGS_AUTOCONFIG, which is set by default, but that applications might unset in order for their client not to read the default profile/global configuration. - Fix possible assertion when destroying un-started prelude-client. - Improvement to the prelude-io API, the user might now hook its own handling function. - Fix dumping of (not) NULL criteria operator to string. Remove gratuitous space insertion when dumping criteria. - Headers fixes for C++ build. - Fix printing and cloning of empty IDMEF string. - In IDMEF to string convertion code, print <invalid enum value> in place of NULL on invalid enumeration value. - Various bug fixes.
2008-04-27Set MAINTAINER to pkgsrc-users@NetBSD.org to indicate anyone can work on ↵frueauf1-2/+2
fixes for those packages.
2008-04-27Update to OpenSSH 5.0p1.tnn6-65/+47
Changes since 4.7: - fix two security issues - chroot support for sshd(8) - sftp server internalized in sshd(8) - assorted bug fixes
2008-04-25Fix DEPENDS for Python 2.5.tnn1-2/+2
2008-04-25Don't hardcode PYPKGPREFIX in bl3.mktnn1-11/+11
2008-04-25Update PYTHON_VERSIONS_COMPATIBLEjoerg10-20/+15
- assume that Python 2.4 and 2.5 are compatible and allow checking for fallout. - remove PYTHON_VERSIONS_COMPATIBLE that are obsoleted by the 2.3+ default. Modify the others to deal with the removals.
2008-04-25Fix detection of openssl configuration directory on NetBSD so it'sjlam1-3/+5
/etc/openssl only if USE_BUILTIN.openssl is "yes".
2008-04-25Fix function prototype mismatchsmb3-3/+35
2008-04-22revbumps due to libevent update.tnn4-8/+8
2008-04-21Changes 2.1.18:adam6-16/+24
This version includes compilers for Cisco PIX and IOS access lists which were released under GPL.
2008-04-20sortjnemeth1-2/+2
2008-04-15update to 2.22.1drochner6-26/+44
This switches to the gnome-2.22 release branch.
2008-04-13Update to 1.0:wiz2-7/+7
Ignore temporary build files make make install install stuff. Bump NEWS.Debian. Proposed solution for #462897: unconditionally sync keys between normal gnupg home and caff gnupg home on startup, to cope with changed keys.
2008-04-13Update to 0.90. From the changelog:schmonz5-10/+40
- Added support for chaining modules within the version client library. To use this, specify the module string as a list of modules separated with commas. For example: cvm-command:/path/to/module,cvm-local:/path/to/socket This enhancement deprecates the cvm-chain module. - Introduced an "out of scope" fact, to be used on credential rejection results when the supplied credentials are outside of the scope of authority of the module. The cvm-vmailmgr and cvm-qmail modules report this fact as appropriate, and cvm-chain copies it as appropriate from the modules it invokes. - A random anti-spoofing tag is added to all version 2 client requests. Its length is set by $CVM_RANDOM_BYTES and defaults to 8. - Fixed a bug that caused the domain output to be set incorrectly when doing qmail lookups with a domain not in the control files with $CVM_QMAIL_ASSUME_LOCAL set.
2008-04-12Convert to use PLIST_VARS instead of manually passing "@comment "jlam19-76/+73
through PLIST_SUBST to the plist module.
2008-04-12Remove non-standard qt4/lib/pkgconfig directory. Bump PKGREVISION.wiz2-3/+4
2008-04-10Remove unnecessary PLIST_SUBST definition -- the PLIST is dynamic throughjlam1-2/+1
the use of AUTHLIB_PLIST, so we don't need to comment stuff out.
2008-04-10update to 2.22.1drochner6-14/+74
This switches to the gnome-2.22 release branch.
2008-04-10Fix path in DEPENDS line.wiz1-2/+2
2008-04-08Fix build problem with hpn-patch option enabled.taca2-12/+7
2008-04-07Fix installation.joerg1-1/+3
2008-04-07Fix DESTDIR.joerg1-1/+2
2008-04-07Add missing directories.joerg1-4/+3
2008-04-04also set KRB5_CONFIG in the case where using builtin butmarkd1-3/+6
/usr/bin/krb5-config exists. Fixes build of imap-uw package with the kerberos option on NetBSD-current and possibly other platforms.
2008-04-04Add and enable new ruby-* packages.jlam1-1/+3
2008-04-04Initial import of ruby18-net-ssh-1.1.2 as security/ruby-net-ssh.jlam4-0/+278
Net::SSH is to SSH as Net::Telnet is to Telnet and Net::HTTP is to HTTP. Perform non-interactive SSH processing, purely from Ruby!
2008-04-04Initial import of ruby18-net-sftp-1.1.1 as security/ruby-net-sftp.jlam4-0/+135
Net::SFTP is a pure-Ruby implementation of the SFTP client protocol.
2008-04-03Fix two vulnerabilities in OpenSSH:tonnerre4-12/+52
- X11 forwarding information disclosure (CVE-2008-1483) - ForceCommand bypass vulnerability
2008-04-02Don't hardcode "0 0" for the root user and group -- use ${REAL_ROOT_USER}jlam1-2/+3
and ${REAL_ROOT_GROUP} instead. The pkginstall framework checks for the name of the user and group, not the uid and gid, when comparing permissions. This fixes the following spurious warning from appearing: The following files are used by sudo-1.6.9p15 and have the wrong ownership and/or permissions: /usr/pkg/etc/sudoers (m=0440, o=0, g=0)
2008-03-29Update sudo package to 1.6.9p15.taca4-20/+21
653) Fixed installation of sudo_noexec.so on AIX. 654) Updated libtool to version 1.5.26. 655) Fixed printing of default SELinux role and type in -V mode. 656) The HOME environment variable is once again preserved by default, as per the documentation.
2008-03-26Update to gnupg-1.4.9adrianp2-6/+6
Addresses a recent security issue that only impacts 1.4.8 and 2.0.8 * Improved AES encryption performance by more than 20% (on ia32). Decryption is also a bit faster. * Fixed possible memory corruption bug in 1.4.8 while importing OpenPGP keys.
2008-03-26Add a new option "via-padlock" which enables support for thetron2-11/+21
VIA PadLock Security Engine: - The new option is turned on by default. - The new option is only available on i386 systems except Mac OS X (which doesn't work on VIA CPU). - The new option isn't available on system which uses GCC 3.x because it causes build failures. This fixes PR pkg/38197. Approved by Dieter Baron.
2008-03-25Readd checksum for "libgcrypt-1.2.4-idea.diff.bz2" which was accidentallytron1-1/+4
removed in revision 1.22.
2008-03-25Remove openssh+gssapi.wiz17-609/+1
It has security problems for a long time now. Removal was announced on pkgsrc-users on March 13.
2008-03-16Add a hack for GCC 3.* failing to compile asm() call inseb1-1/+8
cipher/rijndael.c:do_padlock(): seen with GCC 3.3.3 on NetBSD.
2008-03-16Sort.wiz1-4/+4
2008-03-11Fix build with MIPSPro. PR pkg/38210.tnn2-1/+24
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-21 21:06:57 +0000