summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2004-10-14Find OpenSSL in the correct location.gavan1-1/+2
2004-10-14You're going to install those .la files, and you're going to like it, Mister.tv4-3/+29
(Fixes build breakage because the .la files are needed by the new libtoolize-plist logic.)
2004-10-13Uncomment erroneously commented out lines in Makefile.ben1-13/+13
2004-10-13Update fprot-workstation-bin to version 4.4.7, and add SunOS support.ben2-17/+24
Addresses PR#27254 Version 4.4.7 contains various bugfixes and improvements to the documentation and software. o A critical bug fixed in scan-mail.pl. o Detection of JPG exploits has been added. o A file descriptor leak has been fixed in f-protd. o A minor bug in f-protd related to CPU hogging under certain conditions has been fixed. o A log level has been added (further information can be found in the man pages).
2004-10-11RCD_SCRIPTS_EXAMPLEDIR was just changed to be a relative directoryreed2-5/+5
under ${PREFIX} instead of being an absolute path. So fix the references using RCD_SCRIPTS_EXAMPLEDIR to be ${PREFIX}/${RCD_SCRIPTS_EXAMPLEDIR}. This should have no changes to use before. Please note that the MESSAGE files in most cases are wrong in the first place. We have automated mechanisms and could have an automated message for explaining rc.d script usage. (This is something to do!)
2004-10-111) Taking over maintainance of package on agreement with previousshannonjr3-10/+9
maintainer Klaus Klein. 2) Update to version 0.9.7 to satisfy version requirements for, soon to be committed, gnupg2 (1.9.10) that provides SMIME support. Libksba is a library to make the tasks of working with X.509 certificates, CMS data and related objects more easy. It a highlevel interface to the implemented protocols and presents the data in a consistent way.
2004-10-07This is a libtool package. .la files go in the PLIST.tv3-12/+7
2004-10-07* Make PKGSRC_TOPDIR a private variable by renaming it to _PKGSRC_TOPDIR,jlam1-2/+2
as it's only used internally by bsd.prefs.mk. * Make _PKGSRCDIR a public variable by renaming it to PKGSRCDIR. Also, generate its value from ${_PKGSRC_TOPDIR} so it's less fragile than the old method of stripping off the last two components of ${.CURDIR}. PKGSRCDIR may now be used after bsd.prefs.mk is defined. * Change all references to _PKGSRCDIR to PKGSRCDIR.
2004-10-06Undefine open in ndbm_wrap.c. This fixes a build problem on Solaris.gavan2-1/+14
2004-10-06Update to 20041004, closes PR 27161:wiz2-6/+6
2004-10-03 22:04 nolan * src/: mypasswordsafe.ui.h, safedragobject.cpp, safedragobject.hpp, safelistview.cpp, safelistview.hpp: Did some work so MyPS wouldn't segfault when dragging onto another app 2004-10-03 22:03 nolan * MyPasswordSafe.pro: Removed spaces added by Designer
2004-10-06Moved corkscrew from security to netmartti6-42/+1
2004-10-06rename cfg+ directory to libcfg+ so it matches the PKGNAME.grant1-2/+2
2004-10-06Add and enable MyPasswordSafe.wiz1-1/+2
2004-10-06Initial import of MyPasswordSafe-20041001:wiz7-0/+144
MyPasswordSafe is a straight-forward, easy-to-use password manager that maintains compatibility with Password Safe files. MyPasswordSafe has the following features: * Safes are encrypted when they are stored to disk. * Passwords never have to be seen, because they are copied to the clipboard * Random passwords can be generated. * Window size, position, and column widths are remembered. * Passwords remain encrypted until they need to be decrypted at the dialog and file levels. * A safe can be made active so it will always be opened when MyPasswordSafe starts. * Supports Unicode in the safes * Languages supported: English and French
2004-10-05Fix dependences broken by package revision bump madness. Bump packagetron1-4/+4
revision of this package, too.
2004-10-04On certain OS'es (e.g. Darwin) CPP can be defined as "gcc -E -no-cpp-precomp".adrianp1-2/+2
So when it comes to do the building of the package this causes it to fail if it is not enclosed in double-quotes.
2004-10-03BUILDLINK_DEPENDS should, in nearly every case, be a dewey depends, not atv1-2/+2
precise version.
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv114-169/+231
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-10-01there will not be a NetBSD-1.[7-9] but will be a NetBSD-[2-9].*grant2-6/+6
adjust patterns used in ONLY_FOR_PLATFORM/NOT_FOR_PLATFORM to reflect this.
2004-09-28Update chkrootkit to 0.44adrianp4-7/+42
- Fix false positive on NetBSD for "login". Thanks to Richard Ibbotson for helping sort this out. - Install main shell script and documentation. chkwtmp.c fix: del counter (Thanks to Dietrich Raisin) chkproc.c fix: better support for Linux threads chkrootkit; new rootkit detected: Madalin rootkit top and find tests improved for Suse Linux more ports added in the bindshell test fix: FreeBSD false positives fix: slammer detection lots of minor bug fixes
2004-09-27Remove leftover patch that is no longer used.rh1-20/+0
2004-09-24Update gnustep-ssl to 1.10.0. No major changes, this just syncs therh3-8/+8
library changes for gnustep-base 1.10.0.
2004-09-22Pass ${MAKE_ENV} when calling ${MAKE}, so that rules in /etc/mk.confkim1-2/+2
(and possibly elsewhere) behave as expected. Without this, the build framework thinks you are not building a package, but base.
2004-09-22- Update to 2.0.5adrianp2-8/+6
- ok'ed wiz@, snj@ - Grab maintainership - Remove DIST_SUBDIR directive Verison 2.0.5: -------------- [BUG] OpenBSD compile fix. Support for 802.1Q. New signatures. Speel-chceked teh docuhmentation! Absolutely experimental support for open connection fingerprinting (-O). Synced manpage and documentation. Added several -O signatures.
2004-09-22Mechanical changes to package PLISTs to make use of LIBTOOLIZE_PLIST.jlam42-310/+42
All library names listed by *.la files no longer need to be listed in the PLIST, e.g., instead of: lib/libfoo.a lib/libfoo.la lib/libfoo.so lib/libfoo.so.0 lib/libfoo.so.0.1 one simply needs: lib/libfoo.la and bsd.pkg.mk will automatically ensure that the additional library names are listed in the installed package +CONTENTS file. Also make LIBTOOLIZE_PLIST default to "yes".
2004-09-22Added corkscrewmartti1-1/+2
2004-09-22Corkscrew is a tool for tunneling SSH through HTTP proxies.martti5-0/+40
2004-09-21Update to 0.4.0. This version corresponds to GNOME 2.8.0.jmmv4-10/+19
Changes in version 0.4.0 are: * Build fix on some systems * Translation updates Changes in version 0.3.3 are: * Translation updates Changes in version 0.3.2 are: * New API functions for getting/setting ACL * Implemented delete keyring operation Changes in version 0.3.1 are: * New and updated translations. * New introduction document * unlocking the NULL keyring unlocks the default keyring
2004-09-21Give a bit of leeway in the atime time calculation - the problem isagc3-2/+18
that, on a large SMP bulk build machine, and occasionally on smaller less busy machines, we can get a false-postive message in the aide output because the atime on a group of files can be one second later than "cur_time", the current time as returned to aide. So allow for one second's difference in the time calculation. Bump package revision.
2004-09-19Update to 0.1.4, provided by Sergio Jimenez in PR 26974.wiz4-17/+38
Changes since 0.0.8: * Changes in 0.1.4 (released 2004-08-08) ** Revamp of gnulib compatibility files. ** More translations. German (by Roland Illig), Basque (by Mikel Olasagasti), French (by Michel Robitaille), Irish (by Kevin Patrick Scannell), Dutch (by Elros Cyriatan), Polish (by Jakub Bogusz), Romanian (by Laurentiu Buzdugan), and Serbian (by Aleksandar Jelenak). * Changes in 0.1.3 (released 2004-08-04) ** Command line tool support IPv6 (and other protocol families). Requires that your system has `getaddrinfo'. ** Command line behaviour for gsasl tool improved. The --client and --imap parameters are now the default. The --connect host and port can now be specified directly. If --authentication-id is not specified, the username of the user invoking gsasl is used (i.e., getpwuid(getuid)->pw_name). Alltogether, this allows simple usage, as in `gsasl mail.example.com' to connect, via IMAP, to mail.example.com. * Changes in 0.1.2 (released 2004-07-16) ** The SMTP mode in `gsasl' should now work. ** Cross compile builds should work. It should work for any sane cross compile target, but the only tested platform is uClibc/uClinux on Motorola Coldfire. ** The GNU Readline library is used to read data, if available. ** Passwords read from stdin are not echoed to the terminal. * Changes in 0.1.1 (released 2004-06-26) ** In the command line client, the default quality of protection is now none. * Changes in 0.1.0 (released 2004-04-16) ** The library re-licensed to LGPL and distributed as a separate package. This means a fork of this NEWS file, all the entries below relate to the combined work of earlier versions. New entries above does not document user visible changes for the library ("libgsasl"), for that see NEWS in the lib/ sub-directory, which is also distributed as a stand-alone package. * Changes in 0.0.14 (released 2004-01-22) ** Moved all mechanism specific code into sub-directories of lib/. Each backend is built into its own library (e.g., libgsasl-plain.so), to facilitate future possible use of dlopen to dynamically load backends. ** Moved compatibility files (getopt*) to gl/, and added more (strdup*). * Changes in 0.0.13 (released 2004-01-17) ** Nettle (the crypto functionality, crypto/) has been updated. This fixes two portability issues, the new code should work on platforms that doesn't have inttypes.h and alloca. * Changes in 0.0.12 (released 2004-01-15) ** Protocol line parser in 'gsasl' tool more reliable. Earlier it assumed two lines were sent in one packet in one place, and sent as two packets in another place. ** Various bugfixes. * Changes in 0.0.11 (released 2004-01-06) ** The client part of CRAM-MD5 now uses SASLprep instead of NFKC. This aligns with draft-ietf-sasl-crammd5-01. ** The CRAM-MD5 challenge string now conform to the proper syntax. ** The string preparation (SASLprep and trace) functions now work correctly. ** DocBook manuals no longer included. The reason is that recent DocBook tools from the distribution I use (Debian) fails with an error. DocBook manuals may be included in the future, if I can get the tools to work. ** API and ABI modifications. GSASL_SASLPREP_ERROR: ADD. * Changes in 0.0.10 (released 2003-11-22) ** The CRAM-MD5 server now reject invalid passwords. The logic flaw was introduced in 0.0.9, after blindly making code changes to shut up valgrind just before the release. ** Various build improvements. Pkg-config is no longer needed. GTK-DOC is only used if present. * Changes in 0.0.9 (released 2003-11-21) ** Command line client can talk to SMTP servers with --smtp. ** DocBook manuals in XML, PDF, PostScript, ASCII and HTML formats included. ** Token parser in DIGEST-MD5 fixed, improve interoperability of DIGEST-MD5. ** Libgcrypt >= 1.1.42 is used if available (for CRAM-MD5 and DIGEST-MD5). The previous libgcrypt API is no longer supported. ** CRAM-MD5 and DIGEST-MD5 no longer require libgcrypt (but can still use it). If libgcrypt 1.1.42 or later is not found, it uses a minimalistic cryptographic library based on Nettle, from crypto/. Currently only MD5 and HMAC-MD5 is needed, making a dependence on libgcrypt overkill. ** Listing supported server mechanisms with gsasl_server_mechlist work. ** Autoconf 2.59, Automake 1.8 beta, Libtool CVS used. ** Source code for each SASL mechanism moved to its own sub-directory in lib/. ** The command line interface now uses getopt instead of argp. The reason is portability, this also means we no longer use gnulib. ** API and ABI modifications. gsasl_randomize: ADD. gsasl_md5: ADD. gsasl_hmac_md5: ADD. gsasl_hexdump: REMOVED. Never intended to be exported. gsasl_step: ADD. gsasl_step64: ADD. gsasl_client_step: DEPRECATED: use gsasl_step instead. gsasl_server_step: DEPRECATED: use gsasl_step instead. gsasl_client_step_base64: DEPRECATED: use gsasl_step64 instead. gsasl_server_step_base64: DEPRECATED: use gsasl_step64 instead. gsasl_finish: ADD. gsasl_client_finish: DEPRECATED: use gsasl_finish instead. gsasl_server_finish: DEPRECATED: use gsasl_finish instead. gsasl_ctx_get: ADD. gsasl_client_ctx_get: DEPRECATED: use gsasl_ctx_get instead. gsasl_server_ctx_get: DEPRECATED: use gsasl_ctx_get instead. gsasl_appinfo_get: ADD. gsasl_appinfo_set: ADD. gsasl_client_application_data_get: DEPRECATED: use gsasl_appinfo_get instead. gsasl_client_application_data_set: DEPRECATED: use gsasl_appinfo_set instead. gsasl_server_application_data_get: DEPRECATED: use gsasl_appinfo_get instead. gsasl_server_application_data_set: DEPRECATED: use gsasl_appinfo_set instead. Gsasl: ADD. Gsasl_ctx: DEPRECATED: use Gsasl instead. Gsasl_session: ADD. Gsasl_session_ctx: DEPRECATED: use Gsasl_session instead. GSASL_CRYPTO_ERROR: ADD, replaces deprecated GSASL_LIBGCRYPT_ERROR. GSASL_LIBGCRYPT_ERROR: DEPRECATED: use GSASL_CRYPTO_ERROR instead. GSASL_KERBEROS_V5_INTERNAL_ERROR: ADD, replaces deprecated GSASL_SHISHI_ERROR. GSASL_SHISHI_ERROR: DEPRECATED: use GSASL_KERBEROS_V5_INTERNAL_ERROR instead. GSASL_INVALID_HANDLE: ADD.
2004-09-19Update to 0.0.13, provided by Sergio Jimenez in PR 26972:wiz3-7/+7
* Changes in 0.0.13 (released 2004-08-08) ** Revamp of gnulib compatibility files. ** More translations. French (by Michel Robitaille) and Romanian (by Laurentiu Buzdugan). * Changes in 0.0.12 (released 2004-08-01) ** Added rudimentary self tests of Kerberos 5 context init/accept. Tests client and server authentication, with and without mutual authentication, and that various aspects of the API like ret_flags work. ** Various fixes, discovered while writing the Kerberos 5 self test. ** Cross compile builds should work. It should work for any sane cross compile target, but the only tested platform is uClibc/uClinux on Motorola Coldfire.
2004-09-17Use "pl" as the magic abbreviation for "pathlevel" in the package name.agc1-1/+2
2004-09-17Update to version 1.6.8p1. This is a security update, see advisorycube3-13/+13
at: http://www.sudo.ws/sudo/alerts/sudoedit.html Major changes since Sudo 1.6.8: o Sudoedit now re-opens the temp file as the invoking user and will only open regular files. o Better detection of unchanged files in sudoedit. o The path to ldap.conf is now configurable. o Added SSL tls_* certificate checking options when using LDAP. o The sample pam config file has been updated.
2004-09-16Add patches to work around compile problems for this package onhe5-1/+131
NetBSD-1.6.2_STABLE. Gets rid of a parse error when only one argument is given to HDN_WARN, which leaves us with "fprintf(fp, arg, )". This may be a failure of the compiler on this platform to properly do varargs macros, but the changes are noops and gets it building there.
2004-09-15Force using the BSD utmp interface on NetBSD until the configurejlam1-1/+9
scripts can be taught how to properly detect our utmpx implementation. This should fix the build on NetBSD-2.0 and -current.
2004-09-15The configure script checks for some libraries the wrong order, sincejlam1-3/+11
-lreadline also needs either -ltermcap, -lcurses, -lncurses in the link command to resolve all symbols used in the readline library. Cause one of these libraries to automatically be added whenever "-lreadline" appears on the command line. This is a generalization of the change in revision 1.6 to work on more operating systems.
2004-09-15Include buildlink3.mk files for packages needed to satisfy libraryjlam1-1/+12
dependencies. This fixes link failures when the Heimdal dependency is satisfied by the package rather than the builtin Heimdal. Pointed out by Mark Davies in private email. I've intentionally left out including readline/buildlink3.mk. Although it is used by libsl.* and libss.*, those libraries are not actually critical or used by other packages that depend on Heimdal for Kerberos functionality.
2004-09-14Teach builtin.mk about the latest releases of Heimdal and match them upjlam1-1/+4
with NetBSD versions.
2004-09-14Update security/heimdal to 0.6.3. Changes from version 0.6.1 include:jlam5-63/+17
* fix vulnerabilities in ftpd * support for linux AFS /proc "syscalls" * support for RFC3244 (Windows 2000 Kerberos Change/Set Password) in kpasswdd * fix possible KDC denial of service * Fix possible buffer overrun in v4 kadmin (which now defaults to off)
2004-09-12Bump the PKGREVISION after fixing pkg/26678.jlam1-1/+2
2004-09-12List the other cy2-* packages that use cyrus-sasl2/Makefile.common.jlam1-1/+7
2004-09-12Fix build when using the built-in Heimdal on NetBSD. Analysis and fixjlam1-1/+3
provided in PR pkg/26678 by Jukka Salmi.
2004-09-10According to the bulk build logs, this installs version 2.19wiz1-2/+2
of the library, not 2.18; adapt PLIST.
2004-09-08varargs -> stdargmarkd4-20/+72
Don't try and use getutent() on NetBSD's that have utmpx Fixes problems seen in bulkbuild.
2004-09-07- Dont use the built-in libevent as it's too old. Fixes build on 2.0.adrianp1-3/+4
2004-09-07Apply the patches for security/mit-krb5 that fix MITKRB5-SA-2004-00{2,3}.jlam2-3/+17
Bump the PKGREVISION for this security update.
2004-09-06bump PKGREVISION for devel/cfg+ soname changedanw1-1/+2
2004-09-05Remove some obsolete comments, ok wennmach.wiz1-11/+1
2004-09-05fix PKGNAME.grant1-1/+2
2004-09-05+pam-dbmgrant1-1/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-28 00:37:09 +0000