summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2010-03-09Authen::TacacsPlus allows you to authenticate using tacacs+ serverpettai4-0/+52
2010-03-08Updating security/p5-Crypt-Blowfish from 2.10nb1 to 2.12sno2-8/+10
pkgsrc changes: - Add recommeded minimum version for Crypt::CBC dependency Upstream changes: 2.12 04 Mar 2010 - updated Changes to mesh with revision. 2.11 Feb 2010 - patched _blowfish.c to stop spurious warnings. - updated POD
2010-03-08Bump PKGREVISION for previous, on the grounds that fixing errno.h affectsdholland1-2/+2
more than just the Linux build.
2010-03-08Fix Linux build broken since 2006. Two issues: (1) do _FILE_OFFSET_BITS=64dholland3-3/+45
instead of rolling a private _llseek syscall using now-nonexistent type declarations; (2) as noted in PR 33893 use errno.h instead of "extern int errno".
2010-03-06update to latest releasespz2-27/+32
DESTDIRify ok'd by manu@
2010-03-05Update to netpgp-20100305agc2-6/+6
+ clean up some lint + the obligatory ''build on os x'' fixes - include <inttypes.h>
2010-03-05Update netpgp to version 1.99.20/20100304 - portability improvements, and ↵agc3-13/+16
bug fixes: Changes to 1.99.20/20100304 + move args to some functions around to be consistent + use uint*_t where appropriate + fix bug in verify memory + add documentation to manual pages to show how to do combined signing/encryption and decryption/verification + make verification of ascii-armoured memory work the same as binary + eliminate use of strdup(3), strcasecmp(3), and strptime(3). NetBSD/pkgsrc PR 42922 applies - need to define _XOPEN_SOURCE and _BSD_SOURCE for newer linux platforms with glibc 2.10.1. solved a bit differently, by implementing strdup(3) and strcasecmp(3) independently, and using regexps to avoid calling strptime(3).
2010-03-04Update php-suhosin package to 0.9.29.taca2-6/+6
2009-08-15 - 0.9.29 - Fixing crash bugs with PHP 5.3.0 caused by unexpected NULL in EG(active_symbol_table) - Added more compatible way to retrieve ext/session globals - Increased default length and count limit for POST variables (for people not reading docu) 2009-08-14 - 0.9.28 - Fixed crash bug with PHP 5.2.10 caused by a change in extension load order of ext/session - Fixed harmless parameter order error in a bogus memset() - Disable suhosin.session.cryptua by default because of Internet Explorer 8 "features" - Added suhosin.executor.include.allow_writable_files which can be disabled to disallow inclusion of files writable by the webserver
2010-03-01Fix broken PLIST.taca2-2/+72
(I wonder why "make print-PLIST" generated wrong result before...") Bump PKGREVISION.
2010-02-26Reset maintainer for developers who gave back their commit bit.wiz2-4/+4
2010-02-26Update openssl to 0.9.8m.taca10-198/+34
The OpenSSL project team is pleased to announce the release of version 0.9.8m of our open source toolkit for SSL/TLS. This new OpenSSL version is a security and bugfix release which implements RFC5746 to address renegotiation vulnerabilities mentioned in CVE-2009-3555. For a complete list of changes, please see http://www.openssl.org/source/exp/CHANGES.
2010-02-26Update sudo package to 1.7.2p4.taca2-6/+6
Major changes between version 1.7.2p3 and 1.7.2p4: * Fix a bug that could allow users with permission to run sudoedit to run arbitrary commands. Major changes between version 1.7.2p2 and 1.7.2p3: * Fix printing of entries with multiple host entries on a single line. * Fix use after free when sending error messages via email. * Use setrlimit64(), if available, instead of setrlimit() when setting AIX resource limits since rlim_t is 32bits. * Fix size arg when realloc()ing include stack. * Avoid a duplicate fclose() of the sudoers file.
2010-02-25Explicitly pull PREFIX/lib into the normal library search path too.joerg2-6/+8
DESTDIR support
2010-02-25Reset MAINTAINER, mail bounced.joerg2-4/+4
2010-02-25+pinentry-qt4drochner1-1/+2
2010-02-25add the qt4 version of the pinentry widget, from Sverre Froyen per PMdrochner7-3/+232
2010-02-25add licensing infoagc3-4/+29
modern NetBSD has PAM - add a patch so that this is recognised there is no reason not to run this on modern NetBSD systems - remove the old NOT_FOR_PLATFORM, since this runs just fine on NetBSD 5.99.20
2010-02-24Fix CVE-2009-4212 (MITKRB5-SA-2009-004) using patches fromtez9-3/+281
http://web.mit.edu/kerberos/advisories/2009-004-patch_1.6.3.txt (slightly adjusted for older kerberos version)
2010-02-23Updating security/p5-IO-Socket-SSL from 1.31 to 1.32sno2-6/+6
Upstream changes: v1.32 2010.02.22 - Makefile.PL: die if Scalar::Util has no dualvar support instead of only complaining. Thanks to w[DOT]phillip[DOT]moore[AT]gmail[DOT]com for reporting.
2010-02-22share some common stuffdrochner6-18/+9
2010-02-22fix a problem with the curses widget and non-UTF8 locales: keys whichdrochner3-2/+20
used less bytes in the system encoding than in the UTF8 passed to the caller caused that the passphrase got truncated because only the input length was accounted for bump PKGREVISION
2010-02-22Updating security/p5-Net-OpenSSH from 0.44 to 0.45sno2-6/+6
Upstream changes: 0.45 Feb 17, 2010 - support for taint mode - use better IPv6 regexp - bug in glob_quoter incorrectly handling empty strings solved - document how $SIG{CHLD} can break some methods and add FAQ - some typos corrected - update copyright notices
2010-02-22Updating security/p5-Authen-SASL from 2.12nb1 to 2.13sno2-9/+13
pkgsrc changes: - Add license definition - Adjust dependencies - Add module type Upstream changes: Authen-SASL 2.13 -- Thu Sep 24 17:27:47 CDT 2009 * RT#42191 Only use pass for GSSAPI credentials if it is an object of type GSSAPI::Cred * RT#675 Authorization with Authen::SASL::Perl::External * Call client_new and server_new inside eval so further plugins can be tried before failing * Prefer to use Authen::SASL::XS over Authen::SASL::Cyrus
2010-02-22Updating security/p5-Data-SimplePassword from 0.04nb1 to 0.05sno2-8/+10
pkgsrc changes: - Add license definition - Add module type - Order dependencies like in META.yml (upstream) Upstream changes: 0.05 Tue Oct 13 11:04:46 JST 2009 * added a few new types for rndpassword(1). * added 'endless mode' for rndpassword(1). * cleaned code & pod up.
2010-02-20* add user-destdir supportobache4-6/+38
* set LICENSE=gnu-gpl-v2
2010-02-19Use plain CONF_FILES. Bump revision.joerg1-4/+3
2010-02-19Fix ownership. Bump revision.joerg2-4/+4
2010-02-19Added LICENSE information.heinz2-2/+4
2010-02-19Fix ownership. Bump revision.joerg1-3/+3
2010-02-19Use real root user in install script.joerg1-2/+2
2010-02-19Fix linkage. Honour CFLAGS. Bump revision.joerg3-9/+15
2010-02-19Regenerated some of the patches.martti10-71/+71
2010-02-18Add checksum for hpn-patch.taca1-1/+4
2010-02-18Updated OpenSSH to 5.3.1 (pkg/42635 by Fredrik Pettai)martti6-29/+25
This is a bugfix release, no new features have been added. Changes since OpenSSH 5.2 ========================= General Bugfixes: * Do not limit home directory paths to 256 characters. bz#1615 * Several minor documentation and correctness fixes. Portable OpenSSH Bugfixes: * This release removes for support for very old versions of Cygwin and for Windows 95/98/ME * Move the deletion of PAM credentials on logout to after the session close. bz#1534 * Make PrintLastLog work on AIX. bz#1595 * Avoid compile errors on FreeBSD from conflicts in glob.h. bz#1634 * Delay dropping of root privileges on AIX so chroot and pam_open_session work correctly. bz#1249 and bz#1567 * Increase client IO buffer on Cygwin to 64K, realising a significant performance improvement. * Roll back bz#1241 (better handling for expired passwords on Tru64). The change broke password logins on some configurations. * Accept ENOSYS as a fallback error when attempting atomic rename(). bz#1535 * Fix passing of variables to recursive make(1) invocations on Solaris. bz#1505 * Skip the tcgetattr call on the pty master on Solaris, since it never succeeds and can hang if large amounts of data is sent to the slave (eg a copy-paste). bz#1528 * Fix detection of krb5-config. bz#1639 * Fix test for server-assigned remote forwarding port for non-root users. bz#1578 * Fix detection of libresolv on OSX 10.6.
2010-02-16Update to 0.9.3, needed by KDE-4.4.wiz3-8/+8
2010-02-16Fixing '.orig' relicts being installed after patchingsno1-2/+5
2010-02-16Update to 1.1.3:wiz2-6/+6
* keylookup: + Fixed typo noticed by lintian in manpage keylookup.1. * caff: + Set the Sender header with the email address which is used for the From header. This overrides the default value which was set by the MIME::Entity Perl module based on the local hostname. (Closes: #556782)
2010-02-15Use SETUID_ROOT_PERMS and allow building as normal user. Bump revision.joerg3-3/+24
2010-02-15"as" is a reserved word in Python 2.6+, so don't use it as variable.joerg4-2/+169
Fix a Python interpreter path while here.
2010-02-14Needs pkg-config.joerg1-1/+2
2010-02-14Don't mess with ldconf.joerg2-4/+4
2010-02-14It was missing to replace user in scan-mail.pl.taca1-3/+14
Add FPROT_GROUP and FPROT_USER to proper handling that user. Bump PKGREVISION.
2010-02-13Update the netpgp package to version 20100212/1.99.19agc2-7/+6
Changes to 1.99.19/20100212 + plug some memory leaks, from cppcheck via Thomas Klausner (thanks!) + make the singular of time units read correctly + print decryption key info properly when prompting for passphrase Changes to 1.99.18/20100211 small steps, but lots of them - this is the first one. + print out the correct key information when signing files and memory. what used to be printed out was the copy of the public key which is stored as part of the private key. does not address the info shown when decrypting, since that is done in a different way, by callback. this whole part needs to be re-written, but will have to wait for two good hands. Changes to 1.99.17/20100206 + get rid of last 2 static variables - use the __ops_printstate_t struct passed down + get rid of 3 occurrences in reader.c where an automatic buffer was addressed (as part of a subsequent callback) by a struct field from a calling scope, and only valid within the callback. Found by Flexelint and phk - many thanks. + print filename/"memory" when time problems occur when validating signatures Changes to 1.99.16/20100205 + minor simplifications to netpgp(1) internally + fix a bug in netpgp_verify_file where a non-existent file while listing packets would cause a SIGSEGV + add duration arg to netpgp(1), and check for validity when verifying signatures + add birthtime arg to netpgp(1), and check for validity when verifying signatures + add netpgp commands to print pubkey, if desired + allow the passphrase for the signature to be taken from --pass-fd + get rid of static indent value when printing packet contents + print signature validity times when verifying a file's signature
2010-02-12Updating security/p5-Crypt-OpenPGP from 1.03nb5 to 1.04sno3-19/+34
pkgsrc changes: - Adding license definition - Adding pgp2-compat option which turns on idea dependency (defaultly off) - Reordering and updating dependencies to cover fixes Upstream changes: 1.04 2009.12.10 - Keyring lookup by uid is now case-insensitive to match the behavior in GnuPG. Fixes http://rt.cpan.org/Public/Bug/Display.html?id=2225 - Got rid of a warning in Crypt::OpenPGP::SKSessionKey related to broken calculation of the session_key; that session_key value was never used, so I removed the code generating the key, hence removing the warning. Addresses http://rt.cpan.org/Public/Bug/Display.html?id=29950 - Default key and config file locations (in compatibility mode) now work on Windows. Fixes http://rt.cpan.org/Public/Bug/Display.html?id=18815 - Updated to use Module::Install. Addresses http://rt.cpan.org/Public/Bug/Display.html?id=35983 and http://rt.cpan.org/Public/Bug/Display.html?id=31411 - Made all dependencies required, rather than optional based on feature packages. Simplifies distribution and packaging, and addresses http://rt.cpan.org/Public/Bug/Display.html?id=41426 - Removed sign() and auto_install() from Makefile.PL. - Removed magic svn keywords. - Converted test suite to Test::More. - Added author tests (xt/) and modified SYNOPSIS for all modules to make them pass the compilation test.
2010-02-12Updating security/p5-Crypt-DSA from 1.16 to 1.16nb1sno3-2/+17
- Applying fix from RT#49668 (openssl dsaparam output format change in 1.0 beta 3 breaks Crypt::DSA::KeyChain), see https://rt.cpan.org/Ticket/Display.html?id=49668
2010-02-12Updating security/p5-Crypt-RIPEMD160 from 0.04nb3 to 0.04nb4sno3-3/+17
Applying patch from RT #19138 to fix invalid results on 64-Bit platforms
2010-02-10Bump revision for change of PostgreSQL default version.joerg1-2/+2
2010-02-10Bump revision for PYTHON_VERSION_DEFAULT change.joerg7-13/+14
2010-02-09update master_siteszafer1-5/+3
2010-02-08create relative symlink from the beginning, the pkgsrc absolute->relativedrochner1-3/+3
conversion logics has problems
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-23 17:25:48 +0000