summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
1999-12-14Revised buffer-overrun fix from CERT CA-99-15sommerfeld2-10/+14
(believed more complete than previous fix).
1999-12-12Correct location for file to patch.rh2-8/+8
1999-12-09Regenerated patch-sum after adding patch file.he1-1/+2
1999-12-09Add a minor man page formatting fix (missing "." ahead of "SH").he1-0/+13
1999-12-05Catch up to rev 1.11 of regular patch-sumsommerfeld1-3/+3
1999-12-02Range-check input buffer length against maximum modulus size. Forsommerfeld2-7/+43
RSA*Encrypt() routines, require 3 bytes extra space for PKCS tags. From Bugtraq posting <3845D352.95E47E26@core-sdi.com>, by Gerardo Richarte <core.lists.bugtraq@CORE-SDI.COM>, dated Wed, 1 Dec 1999 23:09:12 -0300 If you build packages with USE_RSAREF2 set, it is advisable to update the rsaref package and any packages which may depend on it (openssl, pgp2, ssh).
1999-12-02Update gnupg to 1.0.0. As sideeffect this fixes pr 8826 and pr 8606.frueauf7-95/+48
/* XXX someone should test this in i386/aout, maybe that broke in exchange, so someone would need to fix it. I have no system to test on. But since this package was totaly broken, its an improvement... XXX */ Noteworthy changes in version 1.0.0 (1999-09-07) ----------------------------------- * Add a very preliminary version of the GNU Privacy Handbook to the distribution (lynx doc/gph/index.html). * Changed the version number to GnuPG 2001 ;-) Noteworthy changes in version 0.9.11 ------------------------------------ * UTF-8 strings are now correctly printed (if --charset is set correctly). Output of --with-colons remains C-style escaped UTF-8. * Workaround for a problem with PGP 5 detached signature in textmode. * Fixed a problem when importing new subkeys (duplicated signatures). Noteworthy changes in version 0.9.10 ------------------------------------ * Some strange new options to help pgpgpg * Cleaned up the dox a bit. Noteworthy changes in version 0.9.9 ----------------------------------- * New options --[no-]utf8-strings. * New edit-menu commands "enable" and "disable" for entire keys. * You will be asked for a filename if gpg cannot deduce one. * Changes to support libtool which is needed for the development of libgcrypt. * New script tools/lspgpot to help transferring assigned trustvalues from PGP to GnuPG. * New commands --lsign-key and made --sign-key a shortcut for --edit and sign. * New options (#122--126 ;-) --[no-]default-recipient[-self], --disable-{cipher,pubkey}-algo. See the man page. * Enhanced info output in case of multiple recipients and fixed exit code. * New option --allow-non-selfsigned-uid to work around a problem with the German IN way of separating signing and encryption keys. Noteworthy changes in version 0.9.8 ----------------------------------- * New subcommand "delsig" in the edit menu. * The name of the output file is not anymore the one which is embedded in the processed message, but the used filename with the extension stripped. To revert to the old behaviour you can use the option --use-embedded-filename. * Another hack to cope with pgp2 generated detached signatures. * latin-2 character set works (--charset=iso-8859-2). * New option --with-key-data to list the public key parameters. New option -N to insert notations and a --set-policy-url. A couple of other options to allow reseting of options. * Better support for HPUX. Noteworthy changes in version 0.9.7 ----------------------------------- * Add some work arounds for a bugs in pgp 2 which led to bad signatures when used with canonical texts in some cases. * Enhanced some status outputs. Noteworthy changes in version 0.9.6 ----------------------------------- * Twofish is now statically linked by default. The experimental 128 bit version is now disabled. Full support will be available as soon as the OpenPGP WG has decided on an interpretation of rfc2440. * Dropped support for the ancient Blowfish160 which is not OpenPGP. * Merged gpgm and gpg into one binary. * Add "revsig" and "revkey" commands to the edit menu. It is now possible to revoke signature and subkeys.
1999-12-02These two modules cannot peacefully coexist.rh2-2/+6
1999-12-02Add and enable p5-Digest-MD5rh1-1/+2
1999-12-02Import of p5-Digest-MD5-2.09, a perl extension interface for variousrh7-0/+87
message digest algorithms.
1999-12-02Oups, forgot to commit this one (thanks Bernd :)bouyer1-3/+3
1999-12-01Make this work on solaris.bouyer1-4/+7
1999-12-01Use $(INSTALL_DATA), not /usr/bin/install -c ...bouyer1-8/+7
1999-11-30Make this work with -current's krb5 stuff.explorer5-14/+36
1999-11-26Install the RSAglue library if USERSAREF2 if set to YES.erh2-1/+11
1999-11-25Update openssl to 0.9.4.erh17-169/+268
1999-11-13Revise previous fix (overly restrictive range check)sommerfeld3-7/+7
1999-11-12Enable alternate rsh path with SSH_RSHPATHabs1-1/+6
Patch from NoRM <norm@mono.org>
1999-11-12fix security problem with using RSAREF with ssh, reported in FreeBSDsommerfeld3-8/+30
PR14749 (missing range checks in rsaglue.c) see http://www.freebsd.org/cgi/query-pr.cgi?pr=14749
1999-11-01Checksum of distfiles changed.jlam1-2/+2
1999-10-28Change LICENSE to fee-based-commercial-usejlam1-2/+2
1999-10-28Add and enable fortifyjlam1-1/+2
1999-10-28Initial import of fortify for Netscape. Closes PR#8450.jlam8-0/+894
1999-10-22Use wildcard dependence for "gtk+" package.tron1-2/+2
1999-10-19s/DONT_USE_IDEA/SSH_DONT_USE_IDEA/ to make it more obvious which packageagc1-4/+4
uses this definition.
1999-10-19Make openssl compile whether or not RSAref is defined.erh3-11/+59
1999-10-07Remove me as maintainer of those packages.tron1-2/+2
1999-10-04Regenbouyer1-4/+5
1999-10-04Add crack.bouyer1-2/+2
1999-10-04+ MIRROR_DISTFILE= nobouyer1-1/+3
1999-10-04Split to fit into hier(7): Crack and Reporter in sbin/,bouyer6-181/+415
scripts, dics and run in share/crack, docs in share/docs/crack and binaries in libexec/crack. Also, rename patches from 01, 02... to aa, ab, ...
1999-09-30Don't attempt to rebuild binaries and dictionaries at each run, but only whenbouyer2-0/+83
-makeonly or -makedict was specified. While I'm there add the patch-sum file I forgot yesterday.
1999-09-30Create /usr/pkg/crack more 0700.bouyer1-1/+2
1999-09-29Adapt to NetBSD.bouyer5-23/+311
1999-09-29Import crack from FreeBSD.bouyer9-0/+97
1999-09-28Use a relative path for bsd.pkg.mk instead of relying on the search path.soren2-6/+3
1999-09-21install(1) wants directories to install to to existhubertf1-1/+2
1999-09-18Kerberos IV support (cannot have both IV and V at the same time).kim5-42/+59
Note that I reverted some LIBZ stuff in patch-ac that was (while correct) not necessary and conflicted with the Kerberos patch. I have not tested the combination of Kerberos IV and INET6 (yet).
1999-09-18Regen.kim2-8/+8
1999-09-18Regenerate offset and fuzzy patches.kim3-32/+32
1999-09-14Change how Kerberos support is enabled in pkgsrc.kim1-5/+9
Quick guide for compiling packages: - set KERBEROS=4 or KERBEROS=5 in /etc/mk.conf Quick guide for configuring Kerberos support in a package Makefile: - test for KERBEROS value and enable the appropriate version with CONFIGURE_ARGS or other means and set USE_KERBEROS=yes - make sure to disable Kerberos support otherwise (especially if using configure, which might automatically detect it) - BUILD_DEFS and RESTRICTED are set automatically in bsd.pkg.mk when USE_KERBEROS=yes is set
1999-09-13Got some coffee, feel much better now. Thank you.kim1-3/+3
1999-09-13Add Kerberos V support, record Kerberos options.kim1-1/+7
1999-09-13Use Kerberos IV where appropriate.kim1-5/+10
1999-09-08this builds fine without user interactionhubertf1-2/+1
1999-09-06I do not want to know why we do have a /usr/pkg/RC5, but athubertf1-1/+2
least nuke it upon pkg_delete!
1999-09-06Fix USE_INET6 build:sommerfeld4-17/+34
- revise patch-aq so it doesn't conflict with ipv6 patches. - adjust checksums - set up alternate patch-sum-v6 patchfile used when v6 patches are added.
1999-09-03Compare "${USE_INET6}" explicitly with "YES" so that you can overridetron1-3/+3
settings at the command line.
1999-08-31Update sudo to 1.5.9p4. It's the latest stable security release.jlam10-3526/+63
1999-08-28Update dependency on gtk+-1.2.4rh1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-22 19:45:32 +0000