summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2004-07-24Update to 0.0.11, provided by Sergio Jimenez in PR 26418.wiz3-7/+7
* Changes in 0.0.11 (released 2004-04-18) ** Minor cleanups to the core header file. Using xom.h is no longer supported (the file doesn't exist on modern systems). ** Kerberos 5 sequence number handling fixed. First, gss_init_sec_context set the sequence numbers correctly, before the incorrect sequence numbers prevented gss_(un)wrap from working correctly. Secondly, gss_unwrap now check the sequence numbers correctly. This was prompted by the addition of randomized sequence numbers by default in Shishi 0.0.15. ** The compatibility files in gl/ where synced with Gnulib. ** Various bugfixes and cleanups. ** Polish translation added, by Jakub Bogusz.
2004-07-23This homepage doesn't exist anymore.jlam1-2/+1
2004-07-22Changes 2.0.12:adam16-43/+51
* Fixed a bug in ./configure which would sometimes assume that GTK is not installed whereas it actually is * Fixed a race condition in nessus-adduser for users who do not configure their TMPDIR variable (thanks to Cyrille Barthelemy) * Fixed a bug in nessus-update-plugins which would not update the plugins properly on all systems (thanks to Keith Butler) * Fixed the installer to compile Nessus with GTK support if gtk-config OR pkg-config is installed.
2004-07-22add python as categoryrecht7-14/+14
ok'd a while back at pkgsrcCon by agc and wiz
2004-07-21Add CONFLICTS with qmail>=1.03nb7 and netqmail>=1.05 (to be committedschmonz1-1/+3
shortly). All three packages have a "bin/forward" and a corresponding section 1 manual page.
2004-07-21USE_IMAKE implies USE_X11BASE, remove it.salo1-2/+1
2004-07-21Add steghide.snj1-1/+2
2004-07-21Initial import of steghide-0.5.1.snj6-0/+78
Steghide is a steganography program that can hide data in JPEG, BMP, WAV, and AU files. Taken from pkgsrc-wip and modified by me.
2004-07-20Changes 2.0.11:adam11-2036/+46
* Solaris support fix * HTML support fix * Supports GTK+ 2.x * Minor speed improvements in client-server communication
2004-07-17Fix a typo: use ldap.conf (not pam.conf) as the default LDAP config file.rh1-2/+2
Pointed out by Dick Davies < rasputnik at hellooperator dot net >.
2004-07-15add and enable prngdrecht1-1/+2
2004-07-15Initial import of prngd-0.9.29recht5-0/+91
from othyro at freeshell dot org via pkgsrc-wip PRNGD is a Pseudo Random Number Generator Daemon. It is intended to replace EGD, and provides an EGD compatible interface to obtain random data and as an entropy source. PRNGD is never drained and can never block. And it has a seed-save file, so that it is immediately usable after system start.
2004-07-11this needs -lnsl -lsocket on Solaris.grant1-1/+3
2004-07-08Use a better fix from ASG CVS the GSSAPI problems.recht3-10/+49
patch-ap now includes the updates between rev 1.84 and rev 1.90 modulo the support for passing of GSSAPI credentials. Patch provided by Jukka Salmi in PR 26184 Bump PKGREVISION to 3 for the new fix.
2004-07-06Accept "yes" or "YES" for USE_LIBCRACK.jlam1-2/+2
2004-07-06Unused.wiz2-197/+0
2004-07-06Refer to ${VARBASE} instead of /var for the location for local statejlam3-6/+6
information.
2004-07-06Update php4 package to 4.3.7.jdolecek1-2/+2
Change list from release notes: * Synchronized bundled GD library with GD 2.0.23. * Fixed a bug that prevented compilation of GD extensions against FreeType 2.1.0-2.1.2. * Fixed thread safety issue with informix connection id. * Fixed incorrect resolving of relative paths by glob() in windows. * Fixed mapping of Greek letters to html entities. * Fixed a bug that caused an on shutdown crash when using PHP with Apache 2.0.49. * Fixed a number of crashes inside pgsql, cpdf and gd extensions. All in all this release fixes over 30 bugs that have been discovered and resolved since the 4.3.6 release.
2004-07-06Add and enable libfwbuilderagc1-1/+2
2004-07-06Initial import of libfwbuilder-1.0.2 into the Packages Collection. Thisagc7-0/+245
was based a long time ago on the OpenBSD port, but the only thing that remains form that is one of the patches, and I'm not sure that's necessary any more. Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, ipfilter, OpenBSD PF, and Cisco PIX libfwbuilder provides the back-end functionality in a library.
2004-07-06Re-add revision 1.3 of patch-ab as patch-ag. This resurrects a change tojlam3-3/+17
use shlibtool to build the plugins to avoid generating and installing a static archive for the plugin module. This fixes PLIST breakage. Bump the PKGREVISION to 2.
2004-07-05Pull in a fix from ASG CVS: increase maxoutbuf buffer sizerecht3-2/+17
This allows uploading of SIEVE scripts larger than 4kb if GSSAPI authentification is used for cyrus-imapd. link to the patch provided by Jukka Salmi in PR 26165 bump PKGREVISION to 1
2004-07-02bl2 -> bl3 in a package that does not have USE_BUILDLINK* set.wiz1-2/+2
2004-07-02When exec'ing child processes (netstat and vmstat), make sure the standardjmmv3-2/+35
file descriptors (0, 1, 2) are open. This avoids multiple warnings issued under NetBSD about running set[ug]id programs with those descriptors closed. Fixes PR pkg/26079; although it talks about gaim, the problem is here, in libgcrypt. Bump PKGREVISION to 1.
2004-07-01Unused.wiz1-31/+0
2004-07-01Convert to bl3.wiz1-3/+3
2004-06-28Update to bl3. All test built with jdk or sun-jdk14.abs1-2/+2
jakarta-tomcat4 has other issues independant of this - will patch next
2004-06-27use buildlink3 for compiler specific flag stripping. fixes build ongrant1-1/+2
Solaris.
2004-06-27tiny whitespace tweakgrant1-2/+2
2004-06-27this needs flex and bison to build. fixes build on Solaris.grant2-8/+9
XXX this could be handled better by the tools stuff.
2004-06-27this needs -lnsl on Linux and -lnsl -lsocket on Solaris.grant1-1/+6
2004-06-27this blindly calls "gcc" so use buildlink3 so it uses the wrapper.grant1-1/+3
2004-06-27don't call a static function from an inline function, not allgrant2-1/+15
compilers allow it.
2004-06-27don't inline a function in one source file and expect to be able togrant3-1/+29
use it in other source files - not all compilers allow this.
2004-06-27use buildlink3 and include libpcap/buildlink3.mk to remove the hiddengrant1-1/+3
dependency on libpcap. no PKGREVISION bump required as this would not build without libpcap, anyway.
2004-06-27this uses a c and c++ compiler.grant1-1/+2
2004-06-27this blindly calls "gcc" so use buildlink3 so it uses the compilergrant1-2/+3
wrappers.
2004-06-26this uses zlib, so use buildlink3 and include zlib/buildlink3.mk.grant1-1/+3
2004-06-26don't override CC, don't pass gcc specific flags.grant2-7/+11
2004-06-26be quiet in do-buildgrant1-3/+3
2004-06-26use the specially provided targets for solaris sparc and i386grant1-1/+21
optimisations. this doesn't have a configure script.
2004-06-26nuke trailing slashesgrant1-7/+7
2004-06-26oops, back out a line that shouldn't have been committed.grant1-3/+1
2004-06-26don't override CC, LD, etc.grant3-8/+25
2004-06-25Cede maintainership to the hard-working people on tech-pkg@NetBSD.org.jlam1-2/+2
2004-06-25Whitespace nits.jlam1-11/+11
2004-06-24Set BUILDLINK_RECOMMMENDED to mit-krb5>=1.3.4 due to the security advisory:jlam1-3/+4
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-001-an_to_ln.txt
2004-06-24Update to security/mit-krb5 to 1.3.4. Major changes from version 1.3.3jlam2-6/+5
include a fix for security advisory [MITKRB-SA-2004-001]: http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-001-an_to_ln.txt Please read the security advisory to see if you are affected and should update your MIT krb5 installation.
2004-06-23Update flawfinder to 1.26. Don't set PY_PATCHPLIST, as it is useless.snj2-12/+6
Don't include python/extension.mk, as it is also useless. Don't set NO_CONFIGURE, because it makes PYTHON_PATCH_SCRIPTS useless. Don't set MAKEFILE, as we don't actually use the included makefile for anything. Changes since 1.24: * Added more support for Microsoft's approach to internationalization. * Added two new rules for GLib functions, "g_get_home_dir" and g_get_tmp_dir". * Added curl_getenv(). * Added several rules for input functions (for -I) - recv, recvfrom, recvmsg, fread, and readv. * Tightened the false positive test slightly; if a name is followed by = or - or + it's unlikely to be a function call, so it'll be quietly discarded. * Modified the summary report format slightly. * Modified the getpass text to remove an extraneous character. * Added rules for cuserid, getlogin, getpass, mkstemp, getpw, memalign, as well as the obsolete functions gsignal, ssignal, ulimit, usleep. * Modified text for strncat to clarify it. * Fixed error in --columns format, so that the output is simply "filename:linenumber:columnnumber" when --columns (-C) is used. * Eliminated "Number of" phrase in the footer report * Added more statistical information to the footer report. * Added shortcut single-letter commands (-D for --dataonly, -Q for --quiet, -C for --columns), so that invoking from editors is easier. * Tries to autoremove some false positives. In particular, a function name followed immediately by "=" (ignoring whitespace) is automatically considered to be a variable and NOT a function, and thus doesn't register as a hit. There are exotic cases where this won't be correct, but they're pretty unlikely in real code. * Added a "--falsepositive" (-F) option, which tries to remove many more likely false positives.
2004-06-21update to 0.42drochner3-21/+27
Many fixes and feature additions since 0.38. Too many to list here.