summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2001-08-19Update of stunnel to version 3.20, from Martti Kuparinen in PR pkg/13728.martin5-40/+15
Changelog for version 3.20, 2001.08.15, urgency: LOW: * setsockopt() optlen set according to the optval for Solaris. * Minor NetBSD compatibility fixes by Martti Kuparinen. * Minor MSVC6 compatibility fixes by Patrick Mayweg. * SSL close_notify timeout reduced to 10 seconds of inactivity. * Socket close instead of reset on close_notify timeout. * Some source arrangement and minor bugfixes.
2001-08-17Make this work more like the ssh package:kim5-18/+133
- don't install setuid unless SSH_SUID=YES - use libwrap (--with-tcp-wrappers) on NetBSD I also want to fix S/Key support and Kerberos IV, so I've left some comments in Makefile for that.
2001-08-17Update smimemsg to 1.4jun2-6/+6
- add RC2-64,RC2-128,DES,Triple-DES - update aicrypto lib - some fixes,with -p7 option
2001-08-17now security fix contains main trunk.jun1-22/+0
2001-08-17Update AiSSLtelnet to 0.15jun2-6/+6
- Fix telnetd origin security hole.
2001-08-16Update libnasl and nessus{-core,-libraries,plugins} to 1.0.9.frueauf8-22/+59
- increased login timeout - fixed a possible deadlock in libpeks - fixed a bug which would cause the client to crash when sending a too long plugin list - fixed the 'too many plugins selected' bug that would make the client crash - workaround for a Linux bug^H^H^Hfeature that makes recv() behave completely differently than the rest of the world (thanks to Andreas Steinmetz) - fixed http://install.nessus.org to better work on Solaris - various minor issues - several new plugins
2001-08-16Update pgpdump to 0.12jun2-5/+5
* Portability hack.
2001-08-16* This package doesn't need suse_libc5 anymore...suse_compat is enough.jlam3-23/+33
* Remove make for loop and replace with shell for loop * Add an RCS ID and comment to uvscan.sh. * Remove unnecessary whitespace from DESCR.
2001-08-16Just use @dirrm.jlam1-2/+2
2001-08-16Update security/uvscan-dat to 4154. Modify package so that it mayjlam7-54/+265
deinstall cleanly with pkg_delete, and make the update_dat script more robust by fetching to a temporary directory, and only moving the new DAT files into place if the fetch and untar was successful.
2001-08-14grep isn't used anymore, so don't substitute for @GREP@ in the INSTALLjlam2-5/+5
files. Substitute for @ID@ instead of directly using 'id', and use the value of ${ID} already set in defs.*.mk.
2001-08-13Update uvscan-dat to 4.1.53 (the old distfile is no longer available).rh2-5/+5
Changes are updated and enhanced virus definition data.
2001-08-12Fix same problems with the user check:veego1-5/+5
- use 'id' instead of 'finger'. this is not a real problem but it is enough and fixing the next problem makes it possible to use it. - grep -q doesn't work on solaris, so use a different way to suppress the output from the user check. - the return code check for the user was reversed.
2001-08-10Update stunnel to version 3.19.martin5-54/+32
Based on PR pkg/13679 by Martti Kuparinen. Changelog for version 3.19, 2001.08.10, urgency: MEDIUM: * Critical section added around non MT-safe TCP Wrappers code. * Problem with "select: Interrupted system call" error fixed. * errno replaced with get_last_socket_error() for Win32. * Some FreeBSD/NetBSD patches to ./configure from Martti Kuparinen. * Local mode process pid logged. * Default FQDN (localhost) removed from stunnel.cnf * ./configure changed to recognize POSIX threads library on OSF. * New -O option to set socket options.
2001-08-09Wildcard dewey for kth-krb4.wiz1-2/+2
2001-08-09Add CVS id.nra1-0/+2
2001-08-09buildlink-ify.nra1-0/+14
2001-08-06update. fix compilation on alpha.itojun2-6/+6
2001-08-06Update rats to 1.1jun3-7/+10
New in version 1.1: Ability to scan Perl programs for vulnerabilites. Ability to scan Python programs for vulnerabilities.
2001-08-02Mark as USE_BUILDLINK_ONLY.jlam1-1/+2
2001-08-02embed pkg version into binary to help diagnosis.itojun1-1/+2
2001-08-02say goodbye to security/ssh6. per comments on packages@netbsd.itojun53-11418/+1
2001-08-02The telnetd in kth-krb4-1.0.1 seems to be vulnerable to the buffer overflowwennmach12-157/+149
attack described in SA2001-12 (noted by T. M. Pederson <salvage@plethora.net> in PR pkg/13610). Instead of applying the patch submitted by T. M. Pederson, we upgrade kth-krb4 to 1.0.9 where the vulnerability has been fixed. The upgrade to 1.0.9 was provided by Assar Westerlund <assar@netbsd.org> and slightly modified by myself. Also included is diff file for /etc/services for NetBSD-1.5 (and 1.5.1) also submitted by T. M. Pederson <salvage@plethora.net> in PR 12540. Note: files/services.diff resurfaces as files/services-1.4.2.diff. Closes PR 13610 and PR 12540.
2001-08-02make it at least compile on netbsd151 systems. kernel API diffs should beitojun3-1/+33
wrapped by configure.in scripts, however, we don't use them for libipsec part.
2001-08-02GNORE, as it has security holes left behind, and the patchitojun1-1/+3
is not maintained any more. use openssh.
2001-08-02upgrade to 2001/8/2 KAME tree. whole bunch of stabilization were made.itojun2-5/+5
2001-07-30Apply:jun2-1/+24
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2001-012-telnetd.patch see also ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc
2001-07-28Update to 4150. Old one vanished, new one will probably contain lots morewiz2-5/+5
virus signatures.
2001-07-27Convert to use buildlink.mk files and mark as USE_BUILDLINK_ONLY.jlam1-2/+3
Fixes pkg/13568.
2001-07-27Add dir_DEFAULT setting used by EVAL_PREFIX logic to set the defaultjlam5-5/+10
installation directory in case the package isn't installed.
2001-07-26Use new USE_OPENSSL_VERSION setting to force at least OpenSSL-0.9.6.jlam1-2/+2
2001-07-24Re-add accidentally removed do-build target. -current doesn't need it, butjlam1-1/+5
1.5.x does.
2001-07-23Update to version 3.16.martin3-31/+26
Changes: * Some transfer() bugfixes/improvements. * STDIN/STDOUT are no logner assumed to be non-socket decriptors. * Problem with --with-tcp-wrappers patch fixed. * pop3 and nntp support bug fixed by Martin Germann. * -o option to append log messages to a file added. * Changed error message for SSL error 0. Provided by Martti Kuparinen in PR 13537.
2001-07-22Update ruby-ssl to 0.3.1c.taca2-5/+5
Fri Jul 20 01:26:07 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * ssl.c (Init_ssl): regardless of scope state, accessors should be public. It is required with 1.6.4 (2001-06-04).
2001-07-20Use "ftp.fu-berlin.de" as first master site because it is about a thousandtron1-2/+3
time faster from Germany and the USA.
2001-07-20Mechanical changes to buildlink.mk files to use EVAL_PREFIX to setjlam2-4/+4
BUILDLINK_PREFIX.<pkgname>. This allows buildlink to find X11BASE packages regardless of whether they were installed before or after xpkgwedge was installed. Idea by Alistair Crooks <agc@pkgsrc.org>.
2001-07-20Mechanical changes to buildlink.mk files to use EVAL_PREFIX to setjlam1-14/+40
BUILDLINK_PREFIX.<pkgname>. This allows buildlink to find X11BASE packages regardless of whether they were installed before or after xpkgwedge was installed. Idea by Alistair Crooks <agc@pkgsrc.org>. Also overhaul code to specify the minimum version of OpenSSL needed by a dependent package. We now set USE_OPENSSL_VERSION to the version number in <openssl/opensslv.h>. Idea also by Alistair Crooks <agc@pkgsrc.org>.
2001-07-20Mechanical changes to buildlink.mk files to use EVAL_PREFIX to setjlam2-4/+4
BUILDLINK_PREFIX.<pkgname>. This allows buildlink to find X11BASE packages regardless of whether they were installed before or after xpkgwedge was installed. Idea by Alistair Crooks <agc@pkgsrc.org>.
2001-07-19Update ruby-ssl to 0.3.1b and utilize USE_OPENSSL_096 for work welltaca3-12/+23
in NetBSD 1.5.1.
2001-07-19We do not need pthreads (as it doesn't work for stunnel), so don't dependmartin1-2/+1
on pth.
2001-07-19Update stunnel to 3.15.martin3-27/+54
Based on a pkg provided by Martti Kuparinen in PR 13484. Changes include: * Serious bug resulting in random transfer() hangs fixed. * Separate file descriptors are used for inetd mode. * -f (foreground) logs are now stamped with time. * New ./configure option: --with-tcp-wrappers by Brian Hatch. * pop3 protocol client support (-n pop3) by Martin Germann. * nntp protocol client support (-n nntp) by Martin Germann. * RFC 2487 (smtp STARTTLS) client mode support. * Transparency support for Tru64 added. * Some #includes for AIX added.
2001-07-18Allow definition of USE_OPENSSL_096 force a minimum dependency ofjlam1-11/+16
openssl>=0.9.6.
2001-07-17Fix patch-ab to not have hardcoded /usr/pkg.nra3-59/+11
2001-07-17Use MESSAGE_SUBST (and its default settings) instead of manually doingwiz2-14/+6
the same.
2001-07-17Enable logcheck.nra1-1/+2
2001-07-17Add logcheck-1.1.1. PR #13271 by Martti Kuparinen.nra8-0/+242
Auditing tool for system logs on Unix boxes. Logcheck helps spot problems and security violations in your logfiles automatically and will send the results to you in e-mail. Logcheck is part of the Abacus Project of security tools. It is a program created to help in the processing of UNIX system logfiles generated by the various Abacus Project tools, system daemons, Wietse Venema's TCP Wrapper and Log Daemon packages, and the Firewall Toolkit(c) by Trusted Information Systems Inc.(TIS). Logcheck also works very well at reporting on other common operating system security violations and strange events.
2001-07-16Update ruby-ssl to 0.3.1.taca4-21/+12
Sun Jun 17 23:27:52 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * make it the release 0.3.0 Sun Jun 17 16:23:19 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * sample/verify_cb.rb: for SSLSocket#verify_callback= * sample/x509.rb: new sample for X509. * sample/login.rb: new sample for Net::Telnet. Sun Jun 17 16:07:12 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * lib/net/protocols.rb: split NetPrivate from https.rb. Sun Jun 17 15:03:02 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * lib/net/https.rb: use forwardable.rb. * lib/net/https: follow SSLSocket. * lib/net/telnets: ditto. Sun Jun 17 13:00:37 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * ssl.c: use instance variable (rb_ivar_set/rb_ivar_get) instead of the fields in C structure. * ssl.c: new methods SSLSocket#timeout, SSLSocket#ciphers=, SSLSocket#verify_depth=. * ssl.c: new class X509_STORE_CTX. and fix arguments for the Proc#call at verify callback. * ssl.c: new methods X509#sigAlgor, X509#key_type, X509#extension, X509#verify, #X509#to_s * ssl.c: change the sequence of arguments of SSLSocket.new. Sun Jun 17 12:59:50 2001 GOTOU YUUZOU <gotoyuzo@notwork.org> * ChangeLog: new file.
2001-07-15Pass LDFLAGS through to link step so that zebedee gets the right rpathjlam3-29/+22
for systems where the dependent libraries aren't part of the base system. Don't include tcl/buildlink.mk as the libraries aren't required for the build -- only the tclsh binary is required at run-time. Also honor CFLAGS passed in from environment during the build.
2001-07-15Utilize buildlink.mk methodology and make it work on NetBSD 1.5.1.taca3-9/+14
2001-07-13Update my email address.fredb1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-30 21:35:41 +0000