summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2006-06-06Added MESSAGE file.shannonjr1-0/+13
2006-06-06PLIST correction.shannonjr1-4/+1
2006-06-06Added sql to create additional database indices supporting deletion. Withoutshannonjr4-8/+17
these indices web browser will often timeout before delete operation completes. Update to libpreludedb 0.9.8. Changes: - Always use prelude_escape_binary() when inserting additional data, even in case we're inserting a string, since the database field might be of a type that require binary kind of escaping. Fix #143. - Implement reading of message_processing_model, security_model, security_level. Handling of community member is deprecated (IDMEFv16 update). - Fix a bug where Service->ip_version would not be read from database. - Error reporting improvement.
2006-06-06Update to libprelude 0.9.9. Changes:shannonjr3-10/+13
- Correct IDMEF v16 checksum algorithms letter case. - Detailed, verbose error reporting when failing to read IDMEF message. - Detailed, verbose error reporting for unsupported value operation.
2006-06-06Do not install files directly into etc; it should be handled throughminskim2-1/+17
CONF_FILES.
2006-06-05Update to 2.6adrianp3-12/+59
The changes since the 2.5 release include: msfconsole: * Tab completion improvements * Remember last used exploit after save * Improved reload/rexploit/rcheck commands * Security fixes for handling terminal escapes msfcli: * Security fixes for handling terminal escapes msfweb: * Security fixes when using defanged mode meterpreter: * Addition of the SAM password dump extension * Improvements to the VNC injection msfpescan: * PE fingerprinting via the -S option * Additional information via the -D option * Major bug fixes to PE format parser exploits: * Major rewrites of many exploit modules * Reliability improvements across the entire set * 42 new exploits added since 2.5 was released * Improved IPS evasion for SMB/DCERPC/HTTP modules libraries: * Human-friendly SMB and DCERPC error codes * Reworking of the entire DCERPC API * Incremental improvements to the SMB stack * Integration of commonly-duplicated routines * Major improvements to PEInfo module
2006-06-04Fix CONFLICTS of php/pear packages, the asterix was missing (thanks tv).joerg2-4/+4
While going through the tree, fix some more packages which had similiar issues with too strict conflicts, bump the revisions of those.
2006-06-04Remove OPENSSH_GID and OPENSSH_UID, it happened to work before,joerg2-6/+2
since those are the values in NetBSD. In reality, they haven't been used for ages though.
2006-06-04I don't see any reason for kth-krb4 to conflict with zephyr,joerg1-3/+2
maintainer didn't respond to the question either. So remove the CONFLICT and bump revision.
2006-06-04Uses C++.joerg1-1/+2
2006-06-02Rename all PHP 4 packages to php4-*, all PHP 5 packages to php5-*,joerg3-14/+17
all PEAR packages to php?-pear-* and all Apache packages to ap13-* or ap2-* respectively. Add new variables to simplify the Makefile handling. Add CONFLICTS on the old names. Reset revisions of bumped packages. ap-php will now depend on the default Apache and PHP version. All programs using it have an implicit option of the Apache version as well. OK from jlam@ and adrianp@.
2006-06-02Needs Python 2.2 or later.joerg1-1/+3
2006-06-01Move docs under share/doc/p0f, fix INSTALLATION_DIRS, bump revision.joerg2-8/+9
2006-05-31The databases/openldap package has been split in -client and -server componentghen9-24/+24
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-26Added additional environment cleanup before exec'ing prelude-manager.shannonjr2-1/+23
2006-05-26Modify run-prelude-lml to properly start prelude-lml as daemon. This worksshannonjr3-6/+22
around a problem where prelude-lml is not connecting to prelude-manager when passed the -d command line argument.
2006-05-25Fix pasto/thinko: it's PKG_HOME.${DIRMNGR_USER}seb1-2/+2
not PKG_SHELL.${DIRMNGR_USER}
2006-05-22Move the check-shlibs target from bsd.pkg.mk to bsd.pkg.check.mk wherejlam1-2/+1
it will live with other "check" targets run after package installation. Get rid of SHLIB_HANDLING, whose meaning had mutated over the years from one thing to another. Currently, it is used to basically note whether the system's "ldd" command can be usefully run on the package's binaries and libraries. Rename this variable to CHECK_SHLIBS_SUPPORTED for more clarity. CHECK_SHLIBS is now a variable set exclusively by the user in /etc/mk.conf to note whether the check for missing run-time search paths is performed after a package is installed. It defaults to "no" unless PKG_DEVELOPER is set.
2006-05-22Added 2 missing files to PLISTshannonjr1-1/+3
2006-05-221) Update to 0.9.5shannonjr3-14/+26
2) Changed permissions on plugins.rules and prelude-lml.conf so that prelude-lml can run unpriviledged 3) Changed confdir in configure so that plugins.rules and prelude-lml.conf are found. Changes in 0.9.5: - Experimental context support (ala SEC): we now handle multiline log matching. - Update PAX rules so that it use the new context feature. - Don't exit on statistics signal, improve statistics precision, make them easier to read. - Fix some problem with user & group options. - text-output argument is optional. - New experimental ruleset: Sonicwall and Spamassassin. These need to be manually hooked to pcre.rules if you plan to use them. - Fix FAM activation switches.
2006-05-21Fixed pkglint warnings.rillig2-12/+12
2006-05-21It is spelled CONF_FILES_PERMS, USE_GNU_TOOLS is dead and remove somejoerg1-6/+6
bogus :Q.
2006-05-21Forgotten patchsums for last changes. Noticed by rillig.joerg1-2/+4
2006-05-21Support fetching the pkg-vulnerabilities file over httpadrianp4-39/+74
Bump to version 1.43
2006-05-21Build using -fno-common under Darwin, it is needed to be able to long gnutlstonio1-1/+3
against libtasn1 bump pkgrevisoin, and the binary package changed on Darwin
2006-05-20Forgotten patches.joerg2-0/+26
2006-05-20Use config file framework.joerg4-28/+89
2006-05-20Fix PLIST, bump revision.joerg2-3/+11
2006-05-20Uses C++.joerg1-1/+2
2006-05-18Mark as BROKEN_IN pkgsrc-2006Q1 according towiz1-1/+3
ftp://ftp.NetBSD.org/pub/pkgsrc/misc/kristerw/pkgstat/i386-3.0/20060501.1050/broken.html
2006-05-18Remove BROKEN_IN, this builds in current 3.0 bulk builds.wiz1-3/+1
2006-05-17Update to 1.4.0:wiz3-9/+9
* Version 1.4.0 (released 2006-05-15) ** Remove GnuTLS 0.8.x compatibility functions. ** The libgcrypt RNG is initialized in gnutls_global_init(). ** TLS/IA API changes from Emile van Bergen. A dummy credential structure is not needed now, if you wish to use the low-level TLS/IA API, simply call gnutls_ia_enable to enable TLS/IA on a session. ** The self-tests are now run under valgrind, if it is installed. ** Libtasn1 is updated to 0.3.4, and that version is now required. ** The command line tools now use getaddrinfo and support IPv6. ** API and ABI modifications: _gnutls_x509_get_raw_crt_activation_time, _gnutls_x509_get_raw_crt_expiration_time: Removed. gnutls_ia_require_inner_phase: Removed, replaced by gnutls_ia_enable. gnutls_ia_enable: Added.
2006-05-17Update to 0.3.4:wiz2-6/+6
Version 0.3.4 (released 2006-05-10) - Really fix encodings. - Add new self test, tests/Test_encoding.c. - Self tests are ran under valgrind, if it is available. - We test for the -Wno-pointer-sign parameter before using it. Version 0.3.3 (released 2006-05-07) - Add some 'const' to prototypes. - Remove some 'unsigned' keywords. - Corrected asn1_der_coding() bug introduced when it became reentrant. Now it produces correct encodings.
2006-05-16Uses C++.joerg1-1/+2
2006-05-15add p5-GSSAPI.markd1-1/+2
2006-05-15Initial import of p5-GSSAPI 0.21markd4-0/+37
Gives access to the routines of the GSSAPI library, as described in rfc2743 and rfc2744 and implemented by the Kerberos-1.2 distribution from MIT. Since 0.14 it also compiles and works with Heimdal. Lacks of Heimdal support are gss_release_oid(), gss_str_to_oid() and fail of some tests. The API presented by this module is a mildly object oriented reinterpretation of the C API, where opaque C structures are Perl objects, but the style of function call has been left mostly untouched. As a result, most routines modify one or more of the parameters passed to them, reflecting the C call-by-reference (or call-by-value-return) semantics. All users of this module are therefore strongly advised to localize all usage of these routines to minimize pain if and when the API changes.
2006-05-15Linux does not have glob.h and vis.h compatible with heimdal, so heimdalminskim2-1/+5
installs its own glob.h and vis.h. Add them to PLIST.Linux. Bump PKGREVISION.
2006-05-14added a hack that works around a bug (variable name conflict) in OpenSSHschwarz1-0/+15
3.4p1 and 3.4p2 that shows up on IRIX 5.
2006-05-14Honor CPPFLAGS. This is a fix for pkgsrc libtoolization, so there is nominskim2-5/+5
need to notify the author.
2006-05-12Update to 5.3adrianp6-70/+69
Separate out options.mk functionality Add in options for subversion and postresql support > CHANGELOG for 5.3: > ########### > * Added NTLM support modules for pop3, imap, smtp-auth and http-proxy. > Work done by ilo (at) reversing.org. THANKS! > * Added a http form module, thanks to phil (at) irmplc.com > * Fixed a bug in the vnc module (thanks to kan (at) dcit.cz) > * Input files may *not* contain null bytes. I might fix that in the future > but currently I have enough other things on my todo sheet. > Thanks to didiln (at) gmail.com for reporting.
2006-05-12uses c++dan1-1/+2
2006-05-12Update to BASE 1.2.4adrianp4-29/+31
> Changes: > - Fixed issue with PostGRES and schema in base_db.inc.php -- Kevin J and Nikns > - Fixed bug 1284695 Error in SQL with PostgreSQL -- Kevin J and Nikns > - Fixed issues displaying PortScans -- Nikns > - Fixed sig_class (bug 1407325) and sig_priority filter bug -- Nikns and Max Valdez (garaged) > - Fixed bug 1408387 Archive move and Email summary issues -- Nikns > - Fixed bug when, after setup, archive database wasn't used -- Nikns > - Fixed PostgreSQL archive database support -- Nikns > - Fixed bug 1313261 Unable to use actions in base_stat_sensor.php -- Nikns > - Fixed bug 1371532 First of month timestamp issue -- Nikns > - Fixed bug 1406945 Lost alert order when switching between payload display -- Nikns > - Fixed bug 1413712 base_conf.php file path issue under MS Windows -- garaged > - Fixed search by signature name -- Nikns > - Converted sql/create_base_tbls_mssql_extra.sql to CRLF line terminators -- Nikns > - Fixed broken auth system for MSSQL -- Nikns > - Changed MSSQL schema for table acid_event, sig_name now has type VARCHAR instead of TEXT -- Nikns > - Fixed bug 1307250 broken base_stat_alerts.php with MSSQL -- Nikns > - Fixed bug 1413594 Force to use alert database for auth system stuff -- Nikns > - Setup fix, on error form values are remembered, default language is English -- garaged > - Uppercased name 'Archive' in base_main.php (in sync with base_hdr1.php) -- Nikns > - Fixed support for actions in base_stat_class.php -- Nikns > - Fixed bug 1418660 Broken search by IP criteria -- Nikns > - Added checkboxes and fixed support for actions in base_stat_iplink.php -- Nikns > - Implemented RFE 1123382 support for actions in base_stat_uaddr.php -- Nikns > - Implemented support for actions in base_stat_ports.php -- Nikns > - Fixed bug 1422575 when empty email sent even if action unsuccessful -- Nikns > - Fixed bug 1424033 Unable to Graph Alert Detection Time -- Nikns > - Fixed bug 1426089 Score removed from email address -- Nikns > - Fixed bug 1210542 and 1288402 Packet display mode issues -- Nikns > - Detect archiving duplicates with select queries instead of catching db conflict error -- Nikns > - Fixed bug 1430686 Update alert cache for archived alert right after it is coppied to archive db -- Nikns > - Implemented archiving support for schema 107 -- Nikns > - Added sig_gid (signature generator id) to snort signature reference url for schema 107 -- Nikns > - session_start() on base_conf.php avoiding repetition, easier to handle with debug output -- garaged > - debug_mode needs to be off on login (index.php:45 ) -- garaged > - Fixed bug 1275536 Unable to download binary payload in Internet Explorer when using SSL -- Nikns > - Implemented archiving support for FLoP extended database schema -- Nikns > - Implemented rebuild of packet in pcap format for FLoP extended database -- Nikns > - Added display of MAC addresses in base_query_alert.php for FLoP extended database -- Nikns > - Fixed BASE authentication bypass in standalone mode for base_maintenance.php -- Nikns > - Added HTTP response codes on authentication failure in base_maintenance.php for standalone mode -- Nikns > - Fixed bug 1341286 Show IP header length in bytes, not words -- Juergen Leising > - In plain display mode several sequential non-ASCII payload characters join together displaying their count -- Nikns > - Changed input type of the password field in useradmin -- Kevin Johnson
2006-05-12Update security/caff to 0.4.6tonio2-15/+7
Remove the hostname subst, since it was fixed upstream Changelog: caff: - try hostname without -f first to be compatible with BSD - make local-user a config option, and let it accept a list of keyids pkg-clean: - add option to allow importing subkeys
2006-05-12Don't include both net/bpf.h and pcap.h on DragonFly.joerg2-1/+16
XXX Are both needed on any platform at all?
2006-05-11Use and fix C++.joerg3-2/+34
2006-05-11Fix build on DragonFly. Don't depend on dsniff and dsniff-nox11 beingjoerg3-4/+18
in the same toplevel directory.
2006-05-11Addsmb2-2/+4
USE_LANGUAGES= c++ lines.
2006-05-10This software does not qualify as either Free or Open Source.gdt1-4/+5
Add LICENSE=, and license file. Set RESTRICTED and NO_BIN_ON_* because permission to distribute derived works is unclear, limited to some operating systems, and requires a reciprocal license grant.
2006-05-09Forgotten part: treat DragonFly like the other BSDs in telnet.joerg1-0/+49
2006-05-09Fix errno. Force USE_TERMIO on DragonFly.joerg14-9/+207
Hide ut assignment in utmp.c (patch-aj), it doesn't exist at least in the code path DragonFly is taking.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-29 22:27:00 +0000