summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2002-11-05- make this work with apache2martti2-4/+4
- buildlink2
2002-10-31Remove unneeded files. Closes PR 18868.wiz2-172/+0
2002-10-29Update to version 1.2.1.joda4-38/+40
Changes in release 1.2.1: * kadmind: fix remote exploit Changes in release 1.2: * fix buffer overrun in ftp * fix openssl building * don't try to force encryption in telnet if not talking to a default telnet port * recognise AIX 5 * should work with more DB libraries
2002-10-28update to 1.9a4drochner4-62/+24
Many changes since 0.1.3, compatibility is not provided, so this is more or less a new pkg.
2002-10-28Use buildlink2. Use perl5/module.mk.seb1-5/+3
2002-10-27Remove gmake dependency.seb1-3/+2
2002-10-27Use buildlink2. Use perl5/module.mk.seb5-25/+15
2002-10-27Use buildlink2. Use perl5/module.mk.seb1-6/+3
2002-10-27Enable cyrus-sasl2.chris1-1/+2
2002-10-27Initial import of cyrus-sasl 2.1.9.chris21-0/+811
This is the latest release of cyrus-sasl. It is needed for the 2.1.x versions of cyrus-imapd. SASL is a method for adding authentication support to connection-based protocols. To use SASL, a protocol includes a command for identifying and authenticating a user to a server and for optionally negotiating protection of subsequent protocol interactions. If its use is negotiated, a security layer is inserted between the protocol and the connection.
2002-10-27Update gpgme to 0.3.12. Again mostly bug fixes. Now depends on gpg 1.2.0.chris4-40/+13
Don't seem to need patch-ba. Also fix .info file handling.
2002-10-27Update gnupg to 1.2.1. Is a bug fix release.chris4-46/+22
Major user visible changes are: * The library dependencies for OpenLDAP seem to change fairly frequently, and GnuPG's configure script cannot guess all the combinations. Use ./configure LDAPLIBS="-L libdir -l libs" to override the script and use the libraries selected. * Secret keys generated with --export-secret-subkeys are now indicated in key listings with a '#' after the "sec", and in --with-colons listings by showing no capabilities (no lowercase characters). * --trusted-key has been un-obsoleted, as it is useful for adding ultimately trusted keys from the config file. It is identical to using --edit and "trust" to change a key to ultimately trusted. * The usual bug fixes as well as fixes to build problems on some systems. Note that patch-aa and patch-ab are no longer needed as was, patch-aa now contains fixes to handle dlsym errors properly. Also now include libiconv/buildlink2.mk as gnupg looks for iconv. Fixes pkg/18221.
2002-10-25Add buildlink2.mk.wiz1-0/+20
2002-10-25Convert to buildlink2.wiz1-2/+3
2002-10-25Add buildlink2.mk.wiz2-0/+62
2002-10-25Unused.wiz2-157/+0
2002-10-25Convert to buildlink2.wiz1-5/+6
2002-10-25buildlink1 -> buildlink2.wiz4-14/+18
2002-10-25buildlink1 -> buildlink2.wiz2-7/+9
2002-10-22Convert to buildlink2, and add buildlink2.mk. Inspired by PR 18728.wiz2-2/+23
2002-10-21Use exec to save forking a new process, and use proper argument quoting.jlam1-2/+2
2002-10-21Fix sasl-config script so that "sasl-config --libs" returns the full listjlam5-15/+15
of libraries and linker flags needed to link against libsasl. Bump PKGREVISION and bump the BUILDLINK_DEPENDS as packages will be needing to use a version of cyrus-sasl with a correct sasl-config.
2002-10-20Use buildlink2. Use perl5/module.mk.seb2-11/+6
2002-10-20Use perl5/module.mk.seb1-5/+2
2002-10-20Add CONLICT with ssh2 package. From Greg A. Woods in PR 18729.wiz1-2/+2
2002-10-18Add and enable pyca.jlam1-1/+2
2002-10-18Initial import of of security/pyca.jlam4-0/+147
pyCA tries to make it easier for people to set up and run a organizational certificate authority which fulfills the need for a fairly secure certification processing. The package also tries to reduce administrative tasks and user's frustration by providing a comfortable web interface to users contacting the certificate authority.
2002-10-14Remove entry for "sbin/nessus-mkcert-client" which apparently doesn'ttron1-2/+1
get installed by the latest version of this package.
2002-10-14Updated php to 4.2.3martti2-6/+6
* lots of bug fixes * experimental apache2 support * added IPv6 support to gethostbyaddr() ATTENTION!! register_globals defaults to 'off' now
2002-10-13Update nessus{-libraries,-core,-plugins} and libnasl to 1.2.6.frueauf9-23/+228
Changes since 1.2.0: 1.2.6 : . changes by Michael Slifcak (Michael.Slifcak@guardent.com) - Added Bugtraq cross reference in the plugins - Added support for BID in nessusd (this has yet to be done on the client side) . changes by Axel Nennker (Axel.Nennker@t-systems.com) - fixed the xml and html outputs - fixed array issues in a couple of plugins . changes by Michel Arboi (arboi@bigfoot.com) - find_service now detects services protected by TCP wrappers or ACL - find_service detects gnuserv - ptyexecvp() replaced by nessus_popen() (*) . changes by Renaud Deraison (deraison@cvs.nessus.org) - Fixed a bug which may make nasl interpret backquoted strings (\n and \r) received from the network (problem noted by Pavel Kankovsky) - nmap_wrapper.nes calls _exit() instead of exit() (*) - Solved the lack of bpf's on Free/Open/NetBSD and MacOSX by sharing _one_ among all the Nessus processes. As a result, Nessus's ping is much more effective on these platforms - bugfix in plug_set_key() which would eventually make some scripts take too long when writing in the KB - Plugins of family ACT_SETTINGS are run *after* plugins of family ACT_SCANNERS - replaced the implementation of md5 which was used when OpenSSL is disabled by the one from RSA (the old one would not work on a big-endian host) - Fixed plugins build issues on MacOS X - The nessus client compiles and links against GTK+-2.0. Of course, it will be horrible and instable, as the GTK team does not care about backward compatibility (*) These two modifications solve the problems of nmap hanging under FreeBSD 1.2.5 : . changes by Michel Arboi (arboi@bigfoot.com) - find_service now displays unknown services that run on assigned ports - read_stream_connection smarter (smaller timeout) - find_service sometimes declared IDENT as "unknown" . changes by Renaud Deraison (deraison@cvs.nessus.org) - Fixed a deadlock that would prevent some plugins from completing - Fixed a possible (although rare) corruption issue in the reports (the script IDs could under some circumstances be random) - Fixed a potential segfault in the execution of nasl scripts 1.2.4 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - Reverted back to autoconf 2.13. - Bug fix in nessus-core/nessusd/pluginlaunch.c - under some circumstances, data might have be lost in the reports - Fixed a bug in several plugins for web checks (under some circumstances, a plugin would do N x N checks against the remote web servers (where N equals to the number of web servers running on the remote host) 1.2.3 : . changes by Isaac Dawson (idawson@securitymanagementpartners.com) - New html output layout. . changes by Pasi Eronen (pasi.eronen@nixu.com) - fix in nmap_wrapper . changes by Renaud Deraison (deraison@cvs.nessus.org) - Fixed a bug which could make, under some circumstances, make nessusd crash the host it is running on. - If the option log_whole_attack is set to "no", then only the begining and the end of the attack is logged (and not the time each plugin takes) - Improved no404.nasl to further reduce false positives - Bug fix in nessusd - under some rare circumstances, report data could be lost (if many many plugins were enabled at the same time and were sending data at the same time). - UDP packets are resent while we wait for a reply (avoids to loose packets en route) - Fixed the option "auto_enable_dependencies" which would not always work - Sending a SIGTERM to the nessus client during a command line scan forces it to save its result to the current test file - Non-printables characters are not shown in the report any more 1.2.2 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - In the GUI, while running a scan, plugins names are only updated once in a while (saves CPU) - Bugfix in the client : some host names would make the client crash - Repaired the '-P' switch in the client 1.2.1 : . changes by Simon Law (sfllaw@engmail.uwaterloo.ca) - Made a manpage for nessus-mkcert-client(1) and have it installed by the Makefile - Revised most other manpages for missing information and to increase clarity
2002-10-12Unused.wiz1-45/+0
2002-10-09Unused.wiz1-34/+0
2002-10-09Unused.wiz1-64/+0
2002-10-09buildlink1 -> buildlink2.wiz1-6/+6
2002-10-09Unused.wiz1-54/+0
2002-10-09buildlink1 -> buildlink2.wiz1-2/+3
2002-10-09Unused.wiz1-40/+0
2002-10-09Unused.wiz3-112/+0
2002-10-09upgrade to 1.2.0, from skrueger@europe.comitojun9-143/+89
2002-09-21 Werner Koch <wk@gnupg.org> Released 1.2.0. * configure.ac: Bumbed version number and set development version to no. 2002-09-19 David Shaw <dshaw@jabberwocky.com> * configure.ac: Try linking LDAP as just -lldap as it seems very recent OpenLDAPs (>=2.0.23) support that. 2002-09-14 David Shaw <dshaw@jabberwocky.com> * configure.ac: Try linking LDAP without -lresolv first, just in case the platform has libresolv, but doesn't actually need it to use LDAP. 2002-09-12 David Shaw <dshaw@jabberwocky.com> * NEWS: Note that the old IDEA plugin won't work with post-1.1.90 gpg. 2002-09-11 Werner Koch <wk@gnupg.org> Released 1.1.92. * configure.ac (random_modules): The default random module for system lacking a /dev/random is now auto selected at runtime. 2002-09-09 David Shaw <dshaw@jabberwocky.com> * NEWS: typo. * configure.ac: Add a link test for LDAP without -lresolv for HPUX. Remove "hstrerror" test as it is no longer needed. 2002-09-02 Werner Koch <wk@gnupg.org> * README: Removed the note about a development version so that we later don't forget this. Minor other changes. 2002-08-29 Werner Koch <wk@gnupg.org> * configure.ac (random_modules): Reworked the code to select the random module. Define USE_ALL_RANDOM_MODULES for value all. 2002-08-27 David Shaw <dshaw@jabberwocky.com> * configure.ac: Check type of mode_t. * NEWS: Clarify that --libexecdir is a configure option. * configure.ac: Check for hstrerror. 2002-08-19 David Shaw <dshaw@jabberwocky.com> * NEWS: Document new ways to enable MDC, and change in automatic compression disabling. * configure.ac: No such thing as the "none" random gather any longer. 2002-08-08 David Shaw <dshaw@jabberwocky.com> * configure.ac: Add an --enable-tiger. * NEWS: Clarify new permission checks. 2002-08-07 David Shaw <dshaw@jabberwocky.com> * configure.ac: If the static IDEA cipher is present, disable dynamic loading. Also fix backwards grammar of keyserver exec-path CHECKING message. 2002-08-05 Werner Koch <wk@gnupg.org> * configure.ac: Bumbed version number. 2002-08-04 Werner Koch <wk@gnupg.org> Released 1.1.91. * configure.ac (ALL_LINGUAS): Added Catalan. 2002-08-02 Werner Koch <wk@gnupg.org> * configure.ac: Removed all extension stuff but keep the tests for dlopen. We don't need to figure out the flags required. All stuff is now statically loaded. 2002-07-30 David Shaw <dshaw@jabberwocky.com> * README, configure.ac: --with-exec-path is now clarified into --disable-keyserver-path * NEWS: changes since 1.1.90. 2002-07-24 David Shaw <dshaw@jabberwocky.com> * configure.ac: Include a GNUPG_LIBEXECDIR in g10defs.h, as well as a SUBST for Makefiles. 2002-07-22 Timo Schulz <ts@winpt.org> * configure.ac: Replace the 'c:/' variables with 'c:\' due to the fact we already use '\' in the remaining code. 2002-07-08 David Shaw <dshaw@jabberwocky.com> * configure.ac: Add --with-mailprog to override the use of sendmail with another MTA. We can use anything that follows the "$MAILPROG -t" convention. 2002-07-04 David Shaw <dshaw@jabberwocky.com> * configure.ac: --enable-exec-path should be a 'with'. Fix 'no' cases of --with-exec-path and --with-photo-viewer. * README: Document --disable-exec, --disable-photo-viewers, --disable-keyserver-helpers, --enable-exec-path, and --with-photo-viewer. * configure.ac: Add --with-photo-viewer to lock the viewer at compile time and --disable-keyserver-helpers and --disable-photo-viewers to allow disabling one without disabling the other. 2002-07-03 David Shaw <dshaw@jabberwocky.com> * configure.ac: Allow setting USE_EXEC_PATH to lock the exec-path to a fixed value. 2002-07-01 Werner Koch <wk@gnupg.org> * configure.ac: Set version number to 1.1.91. Released 1.1.90. * INSTALL: Replaced by generic install file. * README: Marked as development version and moved most stuff of the old INSTALL file to here. 2002-06-30 Werner Koch <wk@gnupg.org> * configure.ac: Link W32 version against libwsock32. 2002-06-29 Werner Koch <wk@gnupg.org> * configure.ac (development_version): New. (HAVE_DEV_RANDOM_IOCTL): Removed test for it; it was never used. * BUGS, AUTHORS: Add a note on how to send security related bug reports. 2002-06-20 David Shaw <dshaw@jabberwocky.com> * NEWS: changes since 1.0.7. * configure.ac: Set new version number (1.1.90), and fix Solaris compiler flags for shared objects. 2002-06-11 David Shaw <dshaw@jabberwocky.com> * configure.ac: Move -lsocket and -lnsl checks before LDAP link tests so they work properly on Solaris. Noted by David Champion. Also, check for the Mozilla LDAP library if the OpenLDAP library check fails. Put -lsocket and -lnsl in NETLIBS rather than LIBS so not all programs are forced to link to them. 2002-06-05 David Shaw <dshaw@jabberwocky.com> * configure.ac: Add a switch for the experimental external HKP keyserver interface. 2002-05-22 Werner Koch <wk@gnupg.org> * configure.ac: Check for strcasecmp and strncasecmp. Removed stricmp and memicmp checks. 2002-05-08 David Shaw <dshaw@jabberwocky.com> * configure.ac: If LDAP comes up unusable, try #including <lber.h> before giving up. Old versions of OpenLDAP require that. 2002-05-03 David Shaw <dshaw@jabberwocky.com> * configure.ac: In g10defs.h, use \ for the directory separator when HAVE_DOSISH_SYSTEM is on. * configure.ac: Add --disable-exec flag to disable all remote program execution. --disable-exec implies --disable-ldap and --disable-mailto. Also look in /usr/lib for sendmail. If sendmail is not found, do not default - just fail. 2002-04-30 David Shaw <dshaw@jabberwocky.com> * configure.ac: Try and link to a sample LDAP program to check if the LDAP we're about to use is really sane. The most common problem (using a very old OpenLDAP), could be fixed with an extra #include, but this would not be very portable to other LDAP libraries.
2002-10-07Update MASTER_SITES and HOMEPAGE.wiz1-3/+5
From Jim Geovedi on tech-pkg <20021007224707.GA16634@toxic.magnesium.net>.
2002-10-07Convert to buildlink2. Use perl5/module.mk.seb1-6/+3
2002-10-07Allow this to build on Linux (the Debian flavor, at least)jschauma3-8/+17
2002-10-07Use int32_t while dealing with sasldb version not long! This fix cyrus saslseb5-7/+150
on sparc64. Bump PKGREVISION.
2002-10-06Convert to buildlink2. Use perl5/module.mk.seb9-54/+27
2002-10-06Use buildlink2. Use perl5/module.mk.seb1-4/+4
2002-10-06Add p5-Digest-Nilsimsaheinz1-1/+2
2002-10-06Import of p5-Digest-Nilsimsa, a perl5 extension module for Nilsimsaheinz4-0/+36
signatures. A Nilsimsa signature is a statistic of n-gram occurance in a piece of text. It is a 256 bit value usually represented in hex
2002-10-05Unused.wiz1-34/+0
2002-10-05Convert to buildlink2.wiz1-4/+4
2002-10-04Add and enable optcalc.wiz1-1/+2
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-30 17:02:39 +0000