summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2006-04-17Bump BUILDLINK_ABI_DEPENDS.png and PKGREVISION for png-1.2.9nb2 update.wiz21-38/+42
2006-04-17Update to 1.22.gdt4-34/+6
hashcash-1.22 - 08-Apr-2006 - Adam Back <adam@cypherspace.org> [BUG FIXES] hashcash-1.18 - 05-Jul-2005 - Adam Back <adam@cypherspace.org> * add a simpler minting API to make it easier to mint stamps from VB scripting hashcash-1.17 - 30-Mar-2005 - Adam Back <adam@cypherspace.org> [BUG FIXES] hashcash-1.15 - 12-Jan-2005 - Adam Back <adam@cypherspace.org> * make "Hashcash:" be accepted as well as "X-Hashcash:" suggestion by Simon Josefsson <jas@extundo.com>. This way if/when the X- is dropped from hashcash headers we will not have a backwards compatibility problem. (Well not after version 1.15). * implement the -Z option to compress stamps; in fact the usage changed so -Z takes an argument: 0, 1 or 2. 0 = not compressed, 1 = compressed but not so the counter + padding is split, and 2 = very compressed, but slow. (Due to a late discovered bug 2 is the same as 1 for now until I can fix that.) * added -O x -sv to request benchtest of core x only * make code work with -DOPENSSL, think this slipped during integration of Jonathan's libfastmint as it uses some lower level openssl APIs internally. I fixed it but it might be a bit openssl version specific, if they changed the state fields at any point. (This change coincidentally I think should work around the linking with openssl problem that Hal Finney <hal@finney.org> reported). * add libhashcash.a intermediate target to make hashcash more convenient to link into other software on linux. (A suggestion from Hal Finney who was trying to link to his RPOW system.) hashcash-1.14 - 14-Dec-2004 - Adam Back <adam@cypherspace.org> * make hashcash -cX accept continuation lines starting with space as well as tab * add library function to wrap lines and use it from hashcash command line tool. * fix long vs time_t prototype mismatch that was giving compile errors on BSD; also cleaned up some warnings that can be obtained with gcc -Wall.
2006-04-17Strip ${PKGLOCALEDIR} from PLISTs of packages that already obeyjlam13-228/+228
PKGLOCALEDIR and which install their locale files directly under ${PREFIX}/${PKGLOCALEDIR} and sort the PLIST file entries. From now on, pkgsrc/mk/plist/plist-locale.awk will automatically handle transforming the PLIST to refer to the correct locale directory.
2006-04-16Remove unused variable, SKIP_AUDIT_PACKAGES.salo1-3/+1
2006-04-15Version 1.42salo4-77/+12
- Remove the "ignore vulnerabilities" stuff which was backed out from pkgsrc infrastructure months ago. We are back at format 1.0.0.
2006-04-14Added appropriate TEST_TARGET.heinz1-1/+3
2006-04-13Update path from cyrus-sasl2 to cyrus-sasl.wiz10-20/+20
2006-04-13Finish move of cyrus-sasl2 to cyrus-sasl.wiz26-739/+4
2006-04-13Add current contents of security/cyrus-sasl2, starting its movewiz24-0/+734
to security/cyrus-sasl (to make PKGNAME match directory name).
2006-04-13BROKEN_GETTEXT_DETECTION already defaults to "no".jlam1-2/+1
2006-04-13BUILD_USE_MSGFMT and USE_MSGFMT_PLURALS are obsolete. Replace withjlam8-32/+16
USE_TOOLS+=msgfmt.
2006-04-13Fixed pkglint warnings.rillig1-8/+8
2006-04-12Fixed pkglint warnings. Added a file to PERL_REPLACE. Bumped PKGREVISION.rillig2-691/+693
2006-04-12Don't install cat pages at all, it's not worth the trouble to getjoerg4-66/+42
correctly working on all platforms.
2006-04-12Use configuration file framework. Bump revision.joerg4-93/+71
2006-04-12Optimizie substition handling of "check-updates.pl".tron1-7/+2
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig43-86/+86
that they look nicer.
2006-04-10At least look for "Massachusetts Institute of Technology" as a crudejlam1-23/+18
check for MIT Kerberos 5 when inspecting /usr/include/krb5.h. Also, bring this file more in line with heimdal/builtin.mk.
2006-04-10Fix various issues with use replacement facility reported by "pkglint".tron1-8/+12
2006-04-10Teach Kerberos 5 to detect the MIT Kerberos 5 bundled with Mac OS X.tron1-0/+70
This stops the "gnome-vfs2" package from pulling in the "heimdal" package. This fixes PR pkg/29946 by Juha-Matti Liukkonen.
2006-04-08This needs msgid_plural support.jmmv1-1/+2
2006-04-08Reset MAINTAINER as I'm no longer using this package and I don't havemartti1-2/+2
time to handle PRs and update this any more.
2006-04-07List the info files directly in the PLIST and honor PKG{INFO,MAN}DIR.jlam8-15/+20
2006-04-06Over 1200 files touched but no revisions bumped :)reed78-200/+200
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-04-05Backport fix for CVE-2006-0353 from lsh2:salo3-3/+24
"unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys." http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0353
2006-04-05Use RUBY_DLEXT as a file name extension of a loadable module.minskim1-2/+2
(There should be a pkgsrc-wide variable instead of a Ruby-specific one.)
2006-04-05--with-libcurl is on per default, so revert the logicsdrochner1-2/+3
(no functional change, just more effective because a compile check is skipped)
2006-04-04Update to 1.4.3:wiz6-23/+30
Noteworthy changes in version 1.4.3 (2006-04-03) ------------------------------------------------ * If available, cURL-based keyserver helpers are built that can retrieve keys using HKP or any protocol that cURL supports (HTTP, HTTPS, FTP, FTPS, etc). If cURL is not available, HKP and HTTP are still supported using a built-in cURL emulator. To force building the old pre-cURL keyserver helpers, use the configure option --enable-old-keyserver-helpers. Note that none of this affects finger or LDAP support, which are unchanged. Note also that a future version of GnuPG will remove the old keyserver helpers altogether. * Implemented Public Key Association (PKA) signature verification. This uses special DNS records and notation data to associate a mail address with an OpenPGP key to prove that mail coming from that address is legitimate without the need for a full trust path to the signing key. * When exporting subkeys, those specified with a key ID or fingerpint and the '!' suffix are now merged into one keyblock. * Added "gpg-zip", a program to create encrypted archives that can interoperate with PGP Zip. * Added support for signing subkey cross-certification "back signatures". Requiring cross-certification to be present is currently off by default, but will be changed to on by default in the future, once more keys use it. A new "cross-certify" command in the --edit-key menu can be used to update signing subkeys to have cross-certification. * The key cleaning options for --import-options and --export-options have been further polished. "import-clean" and "export-clean" replace the older import-clean-sigs/import-clean-uids and export-clean-sigs/export-clean-uids option pairs. * New "minimize" command in the --edit-key menu removes everything that can be removed from a key, rendering it as small as possible. There are corresponding "export-minimal" and "import-minimal" commands for --export-options and --import-options. * New --fetch-keys command to retrieve keys by specifying a URI. This allows direct key retrieval from a web page or other location that can be specified in a URI. Available protocols are HTTP and finger, plus anything that cURL supplies, if built with cURL support. * Files containing several signed messages are not allowed any longer as there is no clean way to report the status of such files back to the caller. To partly revert to the old behaviour the new option --allow-multisig-verification may be used. * The keyserver helpers can now handle keys in either ASCII armor or binary format. * New auto-key-locate option that takes an ordered list of methods to locate a key if it is not available at encryption time (-r or --recipient). Possible methods include "cert" (use DNS CERT as per RFC2538bis, "pka" (use DNS PKA), "ldap" (consult the LDAP server for the domain in question), "keyserver" (use the currently defined keyserver), as well as arbitrary keyserver URIs that will be contacted for the key. * Able to retrieve keys using DNS CERT records as per RFC-2538bis (currently in draft): http://www.josefsson.org/rfc2538bis pkgsrc change: make architecture-specific options really architecture-specific.
2006-04-03Fix typo in allowed platforms.ben1-2/+2
2006-04-02Add support for NetBSD/amd64 with COMPAT_NETBSD32.ben1-2/+7
Used patch from Nicolas Joly in PR#33135.
2006-04-02Update to 1.15:wiz2-6/+6
2006-13-20 Gisle Aas Release 1.15. Improved documentation.
2006-04-02Update to 0.3.2:wiz3-8/+13
Version 0.3.2 - Corrected bug in asn1_der_coding() which overwrited some data in the original structure. - The asn1Parser, asn1Coding and asn1Decoding programs are now installed.
2006-04-01Add ruby-password.minskim1-1/+2
2006-04-01Import ruby-password.minskim6-0/+65
Ruby/Password is a suite of password handling methods for Ruby. It supports the manual entry of passwords from the keyboard in both buffered and unbuffered modes, password strength checking, random password generation, phonemic password generation (for easy memorization by human-beings) and the encryption of passwords.
2006-04-01Add and enable gnome-keyring-manager.jmmv1-1/+2
2006-04-01Initial import of gnome-keyring-manager, version 2.14.0:jmmv4-0/+118
GNOME Keyring Manager is an application that manages user keyrings. The default window shows 'default' keyrings with its items and allows to remove, add and edit them. It also lets you edit your secrets and copy them using drag and drop. The Manager window allows to lock/unlock, create and open other keyrings. At last, items can be moved between different keyrings.
2006-03-31List the info pages directly in the PLIST and ensure that we honorjlam22-40/+44
PKGINFODIR.
2006-03-31heimdal and gss conflict because they install a common set of manpagesjlam2-2/+5
for the gss_* functions.
2006-03-31Set INFO_FILES so that the dir file is proper maintained byjlam1-1/+3
INSTALL/DEINSTALL scripts. Bump the PKGREVISION to 1.
2006-03-31Create directories needed for proper package functionality in anjlam2-14/+12
INSTALL script using OWN_DIRS_PERMS. Drop the redundant targets and PLIST entries. Bump the PKGREVISION to 3.
2006-03-31Package Makefiles should never set PKG_RCD_SCRIPTS -- that is a user-onlyjlam1-2/+1
variable.
2006-03-31allow any Python >=21drochner1-2/+2
2006-03-30Avoid extra stat() calls by not repeatedly checking whether a filejlam8-25/+28
exists on the disk -- we can just check whether a variable defined by find-files.mk is "__nonexistent__" or not.
2006-03-30Export a publicly readable variable PFCTL that contains the path to thejlam1-2/+18
"pfctl" binary.
2006-03-30Update to version 1.7.0.2salo2-7/+8
Changes: - download tar.bz2 distfile 1.7.0.2: ======== - 64-bit fix in src/rpp.c
2006-03-30* Honor PKGINFODIR.jlam2-3/+4
* List the info files directly in the PLIST.
2006-03-29Update to 20060326. Add options.mk file in preparation of eventualwiz3-10/+27
qt4 support (doesn't compile yet). 2006-03-26 19:06 nolan * src/serializers.cpp: Had a reported bug in which only the items in a single group got saved with a PwSafe 1.0 safe. The repro steps were: Create a safe with a few entries Save it as a PwSafe 1.0 safe Create a couple of folders Move the items into those folders Save the safe. Reopen the safe It ended up with the items from a single group instead of all the items. The cause was that I was returning from a recursive call to BlowfishLizer::saveGroup instead of only returning on an error. 2006-01-23 20:57 nolan * MyPasswordSafe.pro, MyPasswordSafe.qrc, src/aboutdlg.ui, src/main.cpp, src/manualdlg.ui, src/mypasswordsafe.ui, src/mypasswordsafe.ui.h, src/newpassphrasedlg.ui, src/passphrasedlg.ui, src/plaintextlizer.cpp, src/plaintextlizer.hpp, src/preferencesdlg.ui, src/preferencesdlg.ui.h, src/pwordeditdlg.ui, src/safe.hpp, src/safedragobject.cpp, src/safedragobject.hpp, src/safelistview.cpp, src/safelistview.hpp, src/serializers.cpp, src/startupdlgbase.ui, src/xmlserializer.cpp, src/tools/idle/idle_x11.cpp, uuid-1.0.0/Makefile, uuid-1.0.0/config.status: Converted to Qt4 2005-12-17 06:47 nolan * src/: mypasswordsafe.ui.h, pwordeditdlg.ui, pwordeditdlg.ui.h: Set the edit dialog as the active window if the user tries to edit that item a second time. Moved the future group handling for new items into MyPasswordSafe 2005-12-17 06:33 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h, pwordeditdlg.ui, pwordeditdlg.ui.h, safelistview.cpp: Made the add and edit dialogs non-modal Hiding during a lock now works 2005-12-17 05:03 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h, pwordeditdlg.ui, pwordeditdlg.ui.h, safelistview.cpp, safelistview.hpp: Attempted to hide the edit dialog when MyPS got locked, but that caused a crash so they get closed. Moved entry creation and updating to PwordEditDlg Moved the default user name and generation length into PwordEditDlg 2005-12-17 02:42 nolan * src/pwordeditdlg.ui.h, src/serializers.cpp, uuid-1.0.0/Makefile, uuid-1.0.0/config.status: Fixed the problem with the show password button; was checking for a normal echo mode 2005-11-25 00:21 nolan * src/: mypasswordsafe.ui, mypasswordsafe.ui.h: Lock on minimize works under WindowMaker 2005-11-24 01:23 nolan * src/mypasswordsafe.ui.h: Parented all the dialogs 2005-11-23 22:15 nolan * release/Makefile: Updated release path and upload rules 2005-11-23 11:14 nolan * src/: mypasswordsafe.ui.h, pwordeditdlg.ui, pwordeditdlg.ui.h: Had a bug in the user name and password checking in the edit dialog. Fixed that by adding an isNew attribute. 2005-11-23 08:21 nolan * src/tools/idle/: idle.cpp, idle.h, idle.pri, idle_mac.cpp, idle_win.cpp, idle_x11.cpp, win32/Makefile, win32/idleui.cpp, win32/idleui.def, win32/idleui.dll, win32/idleui.h: Added Idle from Psi to lock MyPS 2005-11-23 08:21 nolan * src/mypasswordsafe.ui, src/mypasswordsafe.ui.h, src/preferencesdlg.ui, src/preferencesdlg.ui.h, src/pwordeditdlg.ui, src/pwordeditdlg.ui.h, src/safe.cpp, src/safe.hpp, src/safelistview.cpp, src/safelistview.hpp, src/serializers.cpp, test/safe/safe.pro, test/safe/safetest.cpp: Added Idle from Psi to lock MyPS Add Password: automatically generate a new password and display it to the user Confirm changes to user name and/or password in entries Empty fields are now saved working around a bug in Password Safe Clipboard will be cleared after a specified time Generated passwords are automatically fetched 2005-11-23 08:19 nolan * MyPasswordSafe.pro: Added Idle from Psi
2006-03-28bump to 1.0nb1: make this build on NetBSD 2.0 and 3.0 after fsid_t'shubertf3-16/+13
implementation was changed then.
2006-03-22Use "tv@NetBSD.org" as my MAINTAINER address; makes identifying me as atv7-14/+14
PR-responsible person (such as I am ;) a little easier.
2006-03-21Bump PKGREVISION for all packages that had broken INSTALL/DEINSTALLjlam3-3/+6
scripts prior to revision 1.43 of bsd.pkginstall.mk.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-24 21:32:12 +0000