summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2007-11-11Update to 2.0.3:wiz3-8/+11
* Version 2.0.3 (released 2007-11-10) ** This version backports several fixes from the 2.1.x branch. ** Fixed PKCS #3 parameter export. ** Added gnutls_record_disable_padding() to allow servers talking to buggy clients that complain if the TLS 1.0 record protocol padding is used. ** Introduced gnutls_session_enable_compatibility_mode() to allow enabling all supported compatibility options (like disabling padding). ** Corrected bug which did not allow a server to run without supporting certificates. ** API and ABI modifications: gnutls_session_enable_compatibility_mode: ADDED gnutls_record_disable_padding: ADDED Add LICENSE, commented out; it contains both LGPL-2.1 and GPL2 code.
2007-11-11Added commented-out LICENSE=something.martti2-2/+4
2007-11-08Bump revision, as the resulting binary should differ because it findsbjs1-2/+2
gpg2.
2007-11-08Tell gpgme where the gnupg2 binary is should the user build withbjs1-1/+2
the 'gpgsm' option.
2007-11-08Remove space between '=' and "idea" in "PKG_OPTIONS.libgcrypt+= idea".bjs1-2/+2
This was causing a build failure for gpgme if the package was built with the "idea" option.
2007-11-08Update to 0.6.5:wiz4-10/+25
Noteworthy changes in version 0.6.5 (2007-10-27) ------------------------------------------------ * Cleanups for the key export and import functionality. * Clarified the semantic of cdk_pk_check_sigs. * Now the by usage keydb function correctly finds the self signature. patch-aa provided by drochner@; sent upstream, will be in next release.
2007-11-081) Added configuration arg so that PKG_SYSCONFDIR is honoredshannonjr2-2/+6
2) Added missing PLIST entry
2007-11-071) Fix incorect patchshannonjr5-25/+45
2) Fix incorrect socket permission
2007-11-07Added missing entryshannonjr1-1/+2
2007-11-07Update to 2.0.7. This is maintenance release with a few minor enhancements.shannonjr4-20/+21
Changes: * Fixed encryption problem if duplicate certificates are in the keybox. * Add new options min-passphrase-nonalpha, check-passphrase-pattern, enforce-passphrase-constraints and max-passphrase-days to gpg-agent. * Add command --check-components to gpgconf. Gpgconf now uses the installed versions of the programs and does not anymore search via PATH for them.
2007-11-07Update to 1.0.1. Changes:shannonjr5-35/+40
* The option --ocsp-signer may now take a filename to allow several certificates to be valid signers for the default responder. * New option --ocsp-max-period and improved the OCSP time checks. * New option --force-default-signer for dirmngr-client.
2007-11-07Upgrade to 1.0.3. This is a maintenance upgrade. Noteworthy changes inshannonjr2-7/+7
version 1.0.3: * New functions assuan_process_done and assuan_inquire_ext to support external event loops. * Changed the license of the library code back to LGPLv2.1 to support a bunch of GPLv2(only) software which does not allow the use of LGPLv3. * Assorted bug fixed and code cleanups.
2007-11-05update to 2.20.1drochner8-52/+146
This switches to the new gnome-2.20 branch.
2007-11-04Fix detection of PAM support under Mac OS X to get "pam_gnome_keyring.la"tron1-2/+9
built. Bump package revision because package was previously incomplete and the package list incorrect.
2007-11-04Update sudo package to 1.6.9p8.taca2-6/+6
Major changes since Sudo 1.6.9p7: o Fixed a bug where a sudoers entry with no runas user specified was treated differently from a line with the default runas user explicitly specified.
2007-11-03Fixed building the package with sunpro.rillig2-1/+15
2007-11-03Added MAKE_JOBS_SAFE as suggested in PR 37261.rillig1-1/+2
2007-11-03update to 2.20.0drochner4-9/+35
This switches to the new gnome-2.20 branch.
2007-11-01Update to 1.12:wiz2-6/+6
v1.12 - treat timeouts of 0 for accept_SSL and connect_SSL like no timeout, like IO::Socket does.
2007-10-31update to 2.20.1drochner4-9/+42
This switches to the new gnome-2.20 branch. (While this is not part of the "platform" subset formally, it is used by platform -- this looks like an inconsistency in gnome packaging.)
2007-10-31Comment out LICENSE=gnu-gpl-v3 for now as part of transition to switchingjlam1-2/+2
pkgsrc to using license.mk. This will eventually be turned back on.
2007-10-31Renamed the deprecated LICENCE to LICENSE, which has the exactly samerillig5-10/+10
meaning.
2007-10-30Based on some feedback, comment out the newly added LICENSE=xxx for now.martti2-4/+4
I'll re-activate this later when the global license stuff is activated.
2007-10-30Added LICENSE=modified-bsdmartti1-1/+2
2007-10-30Added LICENSE=gnu-gpl-v2martti1-1/+2
2007-10-29Update to 0.9.13. Changes:shannonjr3-7/+13
- Only perform additional database request when using Sensor localtime: this bring a performance improvement of about 36% on aggregated query, when using either frontend localtime (the default), or UTC time. - JQuery support: Port most of the javascript code to make use of JQuery. Add show/hide effect to CSS popup. More filtering functionality in the SensorListing view. - Cleanup the Authentication class, so that uper Prewikka layer can act depending whether the backend support user creation / deletion. Anonymous authentication is nowa plugin. - Better integration of CGI authentication allowing user listing and deletion. - Report template exception directly to the user. - Fix exception if an alert analyzer name is empty. - Fix problem when adding new Prewikka users (#262). - Fix exception when user has no permission set. - When changing password, we didn't try to match an empty 'current password' (which is a minor issue since the user is already authenticated). Thanks to Helmut Azbest <helmut.azbest@gmail.com> for the fix. - Fix a typo making mod_python use the parent method (patch from Helmut Azbest <helmut.azbest@gmail.com>). - In the configuration file, recognize section even if there are whitespace at the beginning of the line. - Localization fixes, by Sebastien Tricaud <toady@gscore.org>, and Bjoern Weiland.
2007-10-29Update to 0.9.10. Changes:shannonjr2-6/+6
- Make threshold act like a real threshold: pass every Nth events in the defined amount of seconds. - Allow mixing Limit and Threshold. - Do not share the tresholding hash accross thresholding plugin instance: previously, the shared hash would result in strange thresholding plugin behavior if you had several instance of thresholding loaded. - Various bug fixes concerning plugin instance un-subscribtion (unsubscribtion of certain plugin was not triggered).
2007-10-29Update to 0.9.16. Changes:shannonjr2-7/+6
- Implement prelude-admin list [-l] command, which provide the ability to list existing profile name, permission, registration permission, analyzerID, and Issuer analyzerid. - Implement multiple analyzer deletion in prelude-admin. - Correct printing of IDMEF time field using non local GMT offset. - Patch to avoid struct typespec redefinition, due to variable mispelling. This fixes a compilation problem on OpenBSD 3.8. - Various bug fixes.
2007-10-29PLIST correctionshannonjr2-7/+3
2007-10-29Add and enable snow.agc1-1/+2
2007-10-29Initial import of snow-20060213 into the Packages Collection.agc4-0/+44
Whitespace steganography The program snow is used to conceal messages in ASCII text by appending whitespace to the end of lines. Because spaces and tabs are generally not visible in text viewers, the message is effectively hidden from casual observers. And if the built-in encryption is used, the message cannot be read even if it is detected. What's in a name? snow exploits the steganographic nature of whitespace. Locating trailing whitespace in text is like finding a polar bear in a snowstorm (which, by the way, explains the logo). And it uses the ICE encryption algorithm, so the name is thematically consistent.
2007-10-28Update sudo package to 1.6.9p7.taca5-66/+32
pkgsrc change: added DESTDIR support. Major changes since Sudo 1.6.9p6: o Reverted back to to using TCSAFLUSH instead of TCSADRAIN when turning off echo during password reading. o Fixed a configure bug that was preventing the addition of -lutil for login.conf support on FreeBSD and NetBSD. o Added a configure check for struct in6_addr since some systems define AF_INET6 but have no real IPv6 support.
2007-10-25Changes 0.2.21:adam3-20/+20
* Fix typos in manual. * Update gnulib files.
2007-10-25Remove empty PLISTs from pkgsrc since revision 1.33 of plist/plist.mkjlam51-51/+0
can handle packages having no PLIST files.
2007-10-23Update to 2.0.2:wiz7-59/+18
* Version 2.0.2 (released 2007-10-17) ** TLS authorization support removed. This technique may be patented in the future, and it is not of crucial importance for the Internet community. After deliberation we have concluded that the best thing we can do in this situation is to encourage society not to adopt this technique. We have decided to lead the way with our own actions. ** certtool: Fixed data corruption when using --outder. ** Fix configure-time Guile detection. ** API and ABI modifications: GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA: ADDED. To avoid that the gnutls_supplemental_data_format_type_t enum type becomes empty. * Version 2.0.1 (released 2007-09-20) ** New directory doc/credentials/ with test credentials. This collects the test credentials from the web page and from src/. The script gnutls-http-serv has also been moved to that directory. ** Update SRP extension type and cipher suite with official IANA values. This breaks backwards compatibility with SRP in older versions of GnuTLS, but this is intentional to speed up the adoption of the official values. The old values we used were incorrect. ** Guile: Fix `x509-certificate-dn-oid' ** API and ABI modifications: No changes since last version.
2007-10-22Update to Net::SSH::Perl 1.3.0:dogcow2-7/+7
1.30 2006.03.17 - Fix for local *READ/*WRITE tie problem in open2 function (Bas van Sisseren). - Add back 'use IO::Socket' to fix 'Can't locate object method "blocking" via package "IO::Handle"' error (rt.cpan.org #15102). - Allow "The socket is already in use" as well as "Address already in use" to detect port already in use (for AIX, rt.cpan.org #16301). - Use sysread (not <>) to read the version string to avoid mixing read types and allow pre-version data (fix by Denis Bider, rt.cpan.org #14812). - Fix warnings on empty hostfile lines (fix by JOHANL, rt.cpan.org #13750). - Get the user's home directory from getpwuid() if the HOME environment variable isn't set (rt.cpan.org #13434).
2007-10-21Full and proper fix for CVE-2007-5135adrianp3-14/+48
PKGREVISION++
2007-10-21+keepassxadrianp1-1/+2
2007-10-21KeePass is a free/open-source password manager or safe which helps you toadrianp4-0/+91
manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key-disk. So you only have to remember one single master password or insert the key-disk to unlock the whole database. The databases are encrypted using the best and most secure encryption algorithms currently known (AES and Twofish).
2007-10-20Update to 1.3.8adrianp3-9/+9
- Fixed base_conf_contents.php to include colored alerts -- Jonathan W Miner - Fixed base_main.php to remove an extra table and repair two column display -- Jonathan W Miner - Added exit() to the redirect to fix security hole -- Jon Hart - removed fpdf file to save room since we are not using them. -- Kevin Johnson - Fixed bug #1723928 Top Right, Database and User not shown -- Kevin Johnson - Added base_header wrapper, please use it instead of header if you're not sure -- GaRaGeD - Fixed Bug #1675094 snort signature information links broken (really a hack!) -- Kevin Johnson - Fixed Bug #1689885 Maybe need count(DISTINCT ip_src) to sort by IP correctly -- Kevin Johnson - Fixed Bug #1649659 Use of archive DB seems broken in "karen" release -- Kevin Johnson - Cleaned a warning -- Marek Cruz - Spanish install guide -- Daniel Medianero
2007-10-17Update to 1.11:wiz2-6/+6
v1.11 - fixed errors in accept_SSL which would work when called from start_SSL but not from accept v1.10 - start_SSL, accept_SSL and connect_SSL have argument for Timeout so that the SSL handshake will not block forever. Only used if the socket is blocking. If not set the Timeout value from the underlying IO::Socket is used
2007-10-16Fix abusers of LOWER_OPSYS to check OPSYS or MACHINE_PLATFORM instead.tnn2-5/+5
2007-10-15Update security/courier-authlib to 0.60.1. Changes from version 0.59.3jlam5-41/+34
include: * MYSQL_CHARACTER_SET option. * Allow underscores, colons and plusses, in account names. * Add {MD5RAW} hash method. * Fix runtime problems with hardcoded file descriptors in the daemon code by using OPEN_MAX instead.
2007-10-13Update putty to 0.60.obache3-15/+14
Patch provided by Jukka Salmi in PR 37056. These features are new in beta 0.60 (released 2007-04-29): * Pressing Ctrl+Break now sends a serial break signal. (The previous behaviour can still be obtained with Ctrl+C.) * Serial ports higher than COM9 now no longer need a leading \\.\. * You can now store a host name in the Default Settings. * Bug fix: serial connections and local proxies should no longer crash all the time. * Bug fix: configuring the default connection type to serial should no longer cause the configuration dialog to be skipped on startup. * Bug fix: "Unable to read from standard input" should now not happen, or if it still does it should produce more detailed diagnostics. * Bug fix: fixed some malformed SSH-2 packet generation. * Other minor bug fixes.
2007-10-10Update sudo package to 1.6.9p6.taca2-6/+6
Major changes since Sudo 1.6.9p5: o Worked around bugs in the session support of some PAM implementations. The full tty path is now passed to PAM as well. o Sudo now only prints the password prompt if the process is in the foreground. o inttypes.h is now included when appropriate if it is present. o Simplified alias allocation in the parser.
2007-10-09Remove trailing spaces.martti1-2/+2
2007-10-09Needs pre-created directories.rillig1-4/+3
2007-10-02Make this package compile and run with recent C++ from gcc4.agc11-9/+152
Take maintainership. Anglicise some of the text in DESCR.
2007-09-30Reset maintainer -- shell@ is inactive.wiz4-8/+8
2007-09-26PKG_OPTIONS_OPTIONAL_GROUPS/PKG_OPTIONS_NONEMPTY_SETS have their respectivebjs1-2/+2
options added to PKG_SUPPORTED_OPTIONS automagically. Duplicate options removed.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-17 19:18:50 +0000