summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2015-05-04Recursive PKGREVISION bump for libzip shlib major bump.wiz1-1/+2
2015-05-04Add patch to work with OpenSSH 6.8+ format.roy3-3/+22
2015-05-03Update to 2.013:wiz2-6/+6
2.013 2015/05/01 - assign severities to internal error handling and make sure that follow-up errors like "configuration failed" or "certificate verify error" don't replace more specific "hostname verification failed" when reporting in sub errstr/$SSL_ERROR. see also RT#103423 - enhanced documentation thanks to Chase Whitener https://github.com/noxxi/p5-io-socket-ssl/pull/26
2015-05-01Update to 0.21wen2-7/+6
Upstream changes: 0.19 Sun Feb 8 11:30:09 2015 - fixed issue with OO crc64, #101999 - remove Build.PL as it seems to have some issues with the XS support 0.20 Sun Feb 8 16:45:13 2015 - removed debug code 0.21 Sat Feb 21 13:18:25 2015 - new() throwing an error if an unsupported type is specified
2015-05-01Update to 2.04wen2-7/+6
Upstream changes: 2014-04-28 Gisle Aas <gisle@ActiveState.com> Release 2.04 No change. I accidentally deleted the 2.03 dist from CPAN when trying to clean up old Digest-MD5 dists.
2015-04-30Update to 4.5:wiz2-6/+6
* Noteworthy changes in release 4.5 (released 2015-04-29) [stable] - Corrected an invalid memory access in octet string decoding. Reported by Hanno Böck.
2015-04-29- fix false positive for netstatchristos4-10/+39
- fix compilation mistake
2015-04-28hppa -> hppa64tnn1-2/+2
2015-04-27Needs libexecinfo on newer NetBSD. Needs pkg-config for autoreconf.joerg1-2/+6
2015-04-27Add u_int* compatibility defines for SunOS.jperkin1-1/+4
2015-04-25Recursive revbump following MesaLib update, categories p through x.tnn37-69/+74
2015-04-25Add comment to patch.wiz2-3/+5
2015-04-25Fix packaging for python-3.x by using the same .so name for allwiz4-5/+21
supported python versions (like py-cryptography). They are in different paths anyway. While here, sort PLIST and fix CONFLICTS line. Bump PKGREVISION.
2015-04-24Update to 0.24wen2-6/+6
Upstream changes: 0.24 Sat Jan 10 00:45:34 MST 2015 - simplified shabits() routine (bitwise input buffering) -- slightly less efficient but easier to understand - minor documentation tweaks and additions 0.23 Sun Jan 4 05:36:30 MST 2015 - updated to reflect Draft FIPS 202 -- append domain separation bits to message -- implement SHAKE128 and SHAKE256 Extendable-Output Functions (XOFs)
2015-04-22Fix paths in two missed installed scripts.dsainty1-3/+28
The intention of zmsystemctl.pl is to use bin/pkexec to allow the apache user to start and stop the ZoneMinder services on operating systems using systemd and newer versions of Polkit than Pkgsrc currently has. If the base OS doesn't use systemd (E.g. anything not Linux), this file shouldn't be used anyway. In Pkgsrc we ignore the potentially absent pkexec interpreter in this file. If the base OS uses systemd, it probably also has pkexec in its base installation. Bump PKGREVISION.
2015-04-20+ py-service_identitywiz1-1/+2
2015-04-20Import py34-service_identity-14.0.0 as security/py-service_identity.wiz4-0/+51
service_identity aspires to give you all the tools you need for verifying whether a certificate is valid for the intended purposes. In the simplest case, this means host name verification. However, service_identity implements RFC 6125 fully and plans to add other relevant RFCs too.
2015-04-19Update to 2.0:wiz2-6/+6
Allow configuring the GPG executable, improve documentation.
2015-04-19guard against undefined ABItnn1-3/+3
2015-04-19CONFLICT with py-py-bcrypt. They install some files in the same place.rodent1-1/+3
2015-04-19+py-py-bcryptrodent1-1/+2
2015-04-19Import py27-py-bcrypt-0.4 as security/py-py-bcrypt.rodent4-0/+44
py-bcrypt is a Python wrapper of OpenBSD's Blowfish password hashing code, as described in "A Future-Adaptable Password Scheme" by Niels Provos and David Mazieres. This system hashes passwords using a version of Bruce Schneier's Blowfish block cipher with modifications designed to raise the cost of off-line password cracking and frustrate fast hardware implementation. The computation cost of the algorithm is parametised, so it can be increased as computers get faster. The intent is to make a compromise of a password database less likely to result in an attacker gaining knowledge of the plaintext passwords (e.g. using John the Ripper). As of py-bcrypt-0.4, this module can also be used as a Key Derivation Function (KDF) to turn a password and salt into a cryptographic key.
2015-04-18added security/mozilla-rootcerts-openssldholland1-1/+2
2015-04-18Add mozilla-rootcerts-openssl.dholland3-0/+422
It operates the mozilla-rootcerts installer script in order to allow managing the resulting output openssl certs with the package tools. Since openssl does not support more than one directory of certificates (sheesh) this is an abusive package - it installs directly into the openssl certs directory even though this is a sysconfig directory that should normally only be touched using the config files infrastructure. And, for native openssl, it's in the root /etc outside of $PREFIX. Nonetheless, having this package is better than not having it. Probably at some point this and the mozilla-rootcerts package should be folded together in some fashion; but I didn't want to do that up front, and in particular I didn't want to muck with the installer script in mozilla-rootcerts any more than necessary to make this package possible. This in particular prevented e.g. installing the certs in share/ and symlinking them into the certs directory. As things are, if you already have the certs installed manually you can install this package over them cleanly, and thenceforth not have to update them by hand.
2015-04-18Add support for -d destdir to the mozilla-rootcerts installer script.dholland2-11/+14
2015-04-17Revbump after updating devel/boost-libsadam5-8/+10
2015-04-17Re-introduce previous fix for building on Solaris SPARC, confirmed to resolvesevan2-1/+27
issue on Solaris 10 SPARC. pkg/26815 https://bugs.g10code.com/gnupg/issue1703 Reviewed by wiz@
2015-04-14Demote docs tools to BUILD_DEPENDS.gdt1-4/+6
sphinx and numpy-doc are not needed at runtime.
2015-04-14Since @ is used to start line comments on ARM, use % for the sectionjoerg3-4/+35
type when on ARM.
2015-04-14Add p5-Authen-SASL-Authdfhajny1-1/+2
2015-04-14Import Authen::SASL::Authd 0.04 as security/p5-Authen-SASL-Authd.fhajny3-0/+25
Authen::SASL::Authd provides client authentication via Cyrus saslauthd or Dovecot authentication daemon.
2015-04-14Remove more references to python-2.6.wiz1-2/+2
2015-04-12Update to 0.9.1.wiz5-65/+8
Noteworthy changes in version 0.9.1 (2015-03-18) ------------------------------------------------ * Fixed build problems for systems without ncurses. * Reworked the option parser to allow building on systems without getopt_long. * Fixed Qt4 build problems.
2015-04-12Update to 0.8.2:wiz2-6/+6
0.8.2 - 2015-04-10 ~~~~~~~~~~~~~~~~~~ * Fixed a race condition when initializing the OpenSSL or CommonCrypto backends in a multi-threaded scenario.
2015-04-12Update to 1.19:wiz2-6/+6
Noteworthy changes in version 1.19 (2015-04-10) [C15/A15/R0] ----------------------------------------------- * New set of error codes for use with LDAP. * New options --help and --defines for gpg-error. * Allow building with gcc 5. * Interface changes relative to the 1.18 release: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ GPG_ERR_LDAP_* NEW.
2015-04-10Patch up some Linux-specific assumptions in the code.dsainty6-10/+88
Fixes build under NetBSD. Bump PKGREVISION for switch to ffmpeg2, and some portability changes that aren't expected to affect functionality.
2015-04-10New ZoneMinder supports the newer ffmpeg APIs, so switch the ffmpegdsainty1-4/+4
dependency from ffmpeg010 to ffmpeg2.
2015-04-08Update to 0.64ryoon3-8/+21
* Avoid compilation error on tolower and char type. Changelog: 2015-02-28 PuTTY 0.64 released, fixing a SECURITY HOLE PuTTY 0.64, released today, fixes a security hole in 0.63 and before: private-key-not-wiped-2. Also diffie-hellman-range-check has been argued to be a security hole. In addition to these and other less critical bug fixes, 0.64 also supports the major new feature of sharing an SSH connection between multiple instances of PuTTY and its tools, and a command-line and config option to specify the expected host key(s).
2015-04-07Recognise lower-case "netbsd" as BSD.dsainty2-4/+17
NB: This doesn't fix the threads portability issues yet for NetBSD, but gets through configuration.
2015-04-07NetBSD's tar (6.1) does an exit(1) on the source archive, complaining:dsainty1-1/+4
Invalid header, starting valid header search. As a workaround: EXTRACT_USING=gtar
2015-04-06Looks like py-six is required outside of tests option.rodent2-3/+3
2015-04-06Revbump after updating textproc/icuadam11-21/+22
2015-04-06Use += to GCC_REQD. Thanks to richard@.rodent1-2/+2
2015-04-06Remove commented line.rodent1-2/+1
2015-04-06GCC_REQD= 4.4, because 4.2 won't build this package on OpenBSD.rodent1-1/+2
2015-04-05Update ZoneMinder from 1.25.0 to 1.28.1.dsainty15-248/+394
Numerous changes, documented at: https://github.com/ZoneMinder/ZoneMinder/releases Addresses two security advisories: https://github.com/ZoneMinder/ZoneMinder/releases/tag/v1.28.0 http://secunia.com/advisories/62918/ Pkgsrc changes: patch-src_zm_signal_h is no longer necessary because zm_signal.h uses HAVE_EXECINFO_H. patch-src_zmf_cpp appears to be applied upstream. patch-configure_ac no longer needs to set PATH_BUILD to PREFIX/share/zoneminder, so that zmupdate.pl can locate the database build scripts as installed files. Upstream has now implemented this via the ZM_PATH_DATA entry in zm.conf, and adds a ZM_PATH_DATA/db subdirectory. src/Makefile.am no longer setuid's zmfix, as zmfix was removed from ZoneMinder 1.26.6. The code now uses clock_gettime(), which on some systems (like Linux), calls for -lrt. Since the build system isn't aware of this, but Pkgsrc is, just set PTHREAD_AUTO_VARS=yes. The PHP code now uses PDO for DB access, but it looks like there are some straggling dependencies on the raw MySQL driver, so both are pulled in.
2015-04-04Fix HOMEPAGE. Missed saving this change.rodent1-2/+2
2015-04-04Update to version 1.1.1. No public ChangeLog. Fixed HOMEPAGE and addedrodent4-26/+26
py-six and removed py-mock as dependencies for the tests option. Some commits from the repo: Enable coverage testing and require 100% coverage Upgrade crypt_blowfish to 1.3 Removed usage of mock which wasn't really doing anything
2015-04-03use --diable-assembler on armv4 systems. they're not supported.mrg1-1/+5
2015-04-03- Require glibs>=2.35 because lasso breaks with 2.34manu3-17/+4
"gtype.c:2720: You forgot to call g_type_init()" warnings - Remove now useless build fix patch Approved by wiz@