summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2008-07-31Add and enable sshfpagc1-1/+2
2008-07-31Initial import of sshfp-1.1.3 into the Packages Collection.agc5-0/+57
sshfp is a small utility that generates RFC4255 SSHFP DNS records based on the public keys stored in a known_hosts file or obtained by using ssh-keyscan. If the nameserver of the domain allows zone tranfers (AXFR), an entire domain can be processed for all its A records. These can then be easilly added to a zone, and then secured by DNSSEC.
2008-07-30update to gnutls-2.4.1kefren4-22/+67
Changes: ** libgnutls: Fix local crash in gnutls_handshake. [GNUTLS-SA-2008-2] ** libgnutls: Fix memory leaks when doing a re-handshake. ** Fix compiler warnings. ** Fix ordering of -I's to avoid opencdk.h conflict with system headers. ** srptool: Fix a problem where --verify check does not succeed.
2008-07-30Update from version 0.34nb4 to 0.36.he2-9/+9
Pkgsrc changes: o Change to use CPAN as distribution source o Change HOMEPAGE to use search.cpan.org; leave old HOMEPAGE pointing to sourceforge commented-out Upstream changes: 0.36 Mon Aug 13 12:16:38 EDT 2007 * [rt.cpan.org #28814] - Performance improvement from mehradek (Radoslaw Zielinski) -use English; +use English qw( -no_match_vars ); 0.35 Fri Apr 20 12:33:53 EDT 2007 - Jesse Vincent <jesse@bestpractical.com> * New Maintainer: Jesse Vincent <jesse@bestpractical.com> took over maintenance of this module. * Removed test key expiry dates. (Fixes http://rt.cpan.org/Ticket/Display.html?id=17618) * Applied secret key output patch for modern GPG from http://rt.cpan.org/Ticket/Display.html?id=17619 * Applied patch to support 'tru' record types from (http://search.cpan.org/src/JRED/Mail-GPG-1.0.6/patches/)
2008-07-29Needs pkg-config.joerg1-1/+3
2008-07-28Update from version 0.06 to 0.07. Changes:he2-6/+6
0.07 Thu Jul 23 10:31:33 2008 - rt 34703 - argument logic before filehandle fetch so that they'll apply - read small chunk of file handles instead if readline() to avoid various issues
2008-07-27NetBSD at least gets glob.h installed, so check for it.joerg1-1/+2
2008-07-27Add HOMEPAGE pointing into search.cpan.org.he1-2/+2
No other change, so no version bump.
2008-07-26Update from version 0.02 to 0.04.he2-9/+14
Pkgsrc changes: o Added full list of dependencies, from Makefile.PL. Upstream changes: 0.04 Sun Jun 15 16:22:32 JST 2008 * fixed a bug caused memory greediness with too long strings :< * improved internal code for PAUSE. 0.03 Sat Jun 14 19:17:30 JST 2008 * added support for Math::Random::MT::Perl. * switched to Module::Build. * cleaned up test scripts. * added 'binary' option to rndpassword.
2008-07-25Fixed the problems reported by babylon5.netbsd.org weekly pkgsrc output for ↵rhaen1-2/+2
Thu Jul 24 02:20:00 2008
2008-07-24Add patch from OpenSSH 5.1 that fixes an X11 fwd security issue on HP-UX.tnn3-2/+42
Bump PKGREVISION.
2008-07-24Update amavisd-new to 2.6.1.obache3-15/+18
Based on maintainer update request in PR 39196. There are a lot of changes and some incompatabilities with 2.5.3 (current version in pkgsrc) particularly as respects SQL schema. Consult vendor's releases notes for more detail: http://www.ijs.si/software/amavisd/release-notes.txt
2008-07-23updated to 2.01rhaen3-17/+7
- no complete ChangeLog from upstream - ChangeLog: 2000-03-13 Gisle Aas <gisle@ActiveState.com> Release 2.01 Broken out of the Digest-MD5-2.12 distribution and made into a separate dist.
2008-07-21Changed so that pflogger daemon can run as non-root with nologin shell.shannonjr4-10/+190
2008-07-21Added prelude-correlatorshannonjr1-1/+2
2008-07-21Prelude-Correlator serves to correlate, in real time, the multipleshannonjr9-0/+353
events received by Prelude. Several isolated alerts, generated from different probes, can thus trigger a single correlation alert should the events be related. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules.
2008-07-21Update to 0.9.14. Changes:shannonjr3-24/+24
- Improve thread safety when evicting events to disk. - Handle IDMEF message version tag, which will be used in upcoming libprelude version. - Add support for newer GnuTLS 2.2.0 session priority functions. When the option is available, the user might specify TLS settings through the "tls-options" configuration entry. - Fix a possible crash upon destruction of a bufpool that is writing to a failover. - Correct strtoul() error checking, when verifying scheduler options.
2008-07-21Update to 0.9.18. Changes:shannonjr3-19/+17
- Add support for newer GnuTLS 2.2.0 session priority functions. When the option is available, the user might specify TLS settings through the "tls-options" configuration entry. - Workaround a GnuTLS issue where the client wouldn't be able to negotiate a supported compression protocol with the server (#299). - Implement variable substitution in Prelude configuration files. - Allow IDMEF criteria with multiples values for a single path, as can be seen in the following example: alert.classification.text = (A || B || C || D) - Implement negation of idmef-criteria, allowing to write criteria like: ! (alert.classification.text = A || alert.classification.text = B) - Fix an IDMEF-Criteria matching problem, where the match function would not attempt to match a OR after multiple consecutive AND that failed. Thanks Alexander Afonyashin <firm(at)iname.com> for pointing out the problem. - Never use non-pointer field, always use the "required" keyword. Fix API consistency issue, that could lead to unexpected behavior. - Fix multiples problem with prelude_read_multiline / prelude_read_multiline2, (fix a problem with prelude-manager idmef-criteria that wouldn't read external ruleset). - Error out if GnuTLS initialization fail.
2008-07-17Updated to version 1.98.heinz2-6/+6
Pkgsrc changes: - none Changes since version 1.58: =========================== 1.98 Jul 08, 2008 * Precedence bug in Public::write() and Private::write() (http://rt.cpan.org/Public/Bug/Display.html?id=37489) Thanks to HRAFNKELL for reporting this! 1.96 Jul 06, 2008 * Set the version numbers in modules to $Crypt::RSA::Version::VERSIOn 1.95 Jul 06, 2008 * Remove STDERR error output in Crypt::RSA::SS::PSS. (http://rt.cpan.org/Public/Bug/Display.html?id=29048) * Allow symmetric cipher specification in Crypt::RSA::Key. (http://rt.cpan.org/Public/Bug/Display.html?id=27929) * Fix bug in AUTOLOAD. (http://rt.cpan.org/Public/Bug/Display.html?id=26028) * Use Module::Install instead of ExtUtils::MakeMaker * Consolidate versioning to module version in Crypt::RSA::Version (which is the reason for the version # jump) * "use base" instead of @ISA * "use FindBin" instead of the literal "lib" - this is safer.
2008-07-17Updated to version 1.24.heinz2-6/+6
Pkgsrc changes: - none Changes since version 1.21: =========================== 1.24 (Tue Jul 15 14:35:35 EDT 2008) - Remove references to Artistic License from README. 1.23 (Tue Jul 15 05:18:37 EDT 2008) - Applied patch from ANDK@cpan.org to avoid failures in reforgy.t [http://rt.cpan.org/Ticket/Display.html?id=27585] - Turned off warnings in the test suite. It is supposed to generate warnings but it freaks out people. - License changed to Artistic 2.0 | GPL for Fedora folks.
2008-07-17Updated to version 2.29.heinz2-6/+6
Pkgsrc changes: - none Changes since version 2.24: =========================== 2.29 Tue Apr 22 10:22:37 EDT 2008 - Fixed errors that occurred when encrypting/decrypting utf8 strings in Perl's more recent than 5.8.8. 2.28 Mon Mar 31 10:46:25 EDT 2008 - Fixed bug in onesandzeroes test that causes it to fail with Rijndael module is not installed. 2.27 Fri Mar 28 10:13:32 EDT 2008 - When taint mode is turned on and user is using a tainted key, explicitly check tainting of key in order to avoid "cryptic" failure messages from some crypt modules. 2.26 Thu Mar 20 16:41:23 EDT 2008 - Fixed onezeropadding test, which was not reporting its test count properly. 2.25 Fri Jan 11 15:26:27 EST 2008 - Fixed failure of oneandzeroes padding when plaintext size is an even multiple of blocksize. - Added new "rijndael_compat" padding method, which is compatible with the oneandzeroes padding method used by Crypt::Rijndael in CBC mode.
2008-07-17Updated to version 5.45.heinz2-6/+6
Pkgsrc changes: - none Changes since version 5.45: =========================== 5.47 Wed Apr 30 04:00:54 MST 2008 - modified Makefile.PL to install in core for Perls >= 5.10 -- thanks to Jerry Hedden for patch - changed from #include <> to #include "" in SHA.xs -- some platforms not able to find SHA source files -- thanks to Alexandr Ciornii for testing - moved .pm file to appropriate lib directory - minor addition to META.yml 5.46 Wed Apr 9 05:04:00 MST 2008 - modified Addfile to recognize leading and trailing whitespace in filenames (ref. rt.cpan.org #34690) - minor C source code modification (ref. hmac.c) - use const in sha.c for clean builds with -Wwrite-strings -- thanks to Robin Barker for patch
2008-07-17-make this work with the openpam version in -currentdrochner6-18/+44
(I didn't try whether it still works on 4.0. Would be nice if someone did it.) -supply an example pam.conf file -slow down to avoid abuse, better cleanup in error cases, more paranoia thanks to Joerg for suggestions
2008-07-17- updated to 1.06rhaen2-6/+8
- fixed dependencies (required) ChangeLog: 1.06 - Wed Apr 23 13:14:34 2008 * This release has a compiler-bug workaround for Sun C 5.9 identified by Andy Armstrong. No, really, it was a compiler bug: http://in.opensolaris.org/jive/thread.jspa?threadID=53641&tstart=0 * You don't need to upgrade if you already have 1.05.
2008-07-16- updated to 0.14rhaen2-6/+6
Changelog: 0.11 Wed Oct 31 20:26:13 2007 - fixed __reflect error 0.12 Sat Nov 3 10:11:42 2007 - Debug output removed 0.13 Sun Nov 4 11:22:54 2007 - fixed tests 0.14 Mon Nov 5 08:10:11 2007 - fixed __reflect error in non XS part
2008-07-15Try to fix build on NetBSD.joerg1-1/+14
2008-07-15Use my NetBSD.org email - I read it much more regulary than any others.mishka1-2/+2
2008-07-15sync w/ base pkgdrochner2-6/+6
2008-07-15update to 2.22.3drochner2-6/+6
change: version bump for gnome-2.22.3
2008-07-15+p5-Crypt-GPGabs1-1/+2
2008-07-15Added security/p5-Crypt-GPG version 1.63abs3-0/+43
The Crypt::GPG module provides access to the functionality of the GnuPG (www.gnupg.org) encryption tool through an object oriented interface. It provides methods for encryption, decryption, signing, signature verification, key generation, key certification, export and import. Key-server access is on the todo list.
2008-07-15Changes 2.1.19:adam6-16/+19
* Improvements and bug fixes.
2008-07-14Catch distinfo up with the removal of patch-a[bh].dsainty1-3/+1
(Hi Tobias :)
2008-07-14update to 2.22.3drochner3-23/+12
changes: -Better initization of (non-crypto) random number generator -Build fixes
2008-07-14Mark as destdir ready.joerg13-13/+38
2008-07-14Update to openssl-0.9.8h. Changes from 0.9.8g:tnn4-37/+6
Two crashes discovered using the Codenomicon TLS test suite, as reported in CVE-2008-0891 and CVE-2008-1672, were fixed. The root CA certificates of commercial CAs were removed from the distribution. Functions were added to implement RFC3394 compatible AES key wrapping. Utility functions to handle ASN1 structures were added. The certificate status request TLS extension, as defined in RFC3546, was implemented. Several other bugfixes and enhancements were made.
2008-07-01Make nessus-core honor PKG_SYSCONFBASE for configuration files.bad1-3/+4
While here, move the sharedstatedir to VARBASE where it belongs. Bump PKGREVISION.
2008-07-01Treat DragonFly same as other *BSDs.obache2-6/+6
Patch provided by Hasso Tepper in PR 38878.
2008-06-30Update sudo package to 1.6.9p17.taca2-6/+6
660) The -i flag should imply resetting the environment, as it did in sudo version prior to 1.6.9. Also, the -i and -E flags are mutually exclusive. 661) Fixed the configure test for dirfd() under Linux. 662) Fixed test for whether -lintl is required to link. 663) Changed how sudo handles the child process when sending mail. This fixes a problem on Linux with the mail_always option. 664) Fixed a problem with line continuation characters inside of quoted strings.
2008-06-26-pflkmpeter1-2/+1
2008-06-26Remove security/pflkm, it's outdated and unmaintained.peter9-392/+0
Approved by agc.
2008-06-25don't pass DESTDIR in CPPFLAGS, from Stephen Borrilldrochner1-2/+2
2008-06-22DESTDIR support.joerg1-3/+5
2008-06-21Add p5-Digest-MD5-File.he1-1/+2
2008-06-21Import p5-Digest-MD5-File version 0.06.he3-0/+29
Get MD5 sums for files of a given path or content of a given url.
2008-06-20Add DESTDIR support.joerg50-109/+191
2008-06-19- Switch to use vendor_dir with Ruby 1.8.7.taca4-21/+23
Bump PKGREVISION.
2008-06-16Fix shared library build on various architectures. This basically fiddlestonnerre3-20/+20
with the number of colons between the fields.
2008-06-16Add missing directory.joerg3-5/+9
2008-06-15Add detection for pf 4.1 and 4.2.peter1-2/+10
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-25 18:28:50 +0000