summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-04-05Sort.wiz1-2/+2
2005-04-05Convert to bl3, untested.wiz1-3/+2
2005-04-04Changes 2.2.4:adam12-37/+40
* Fixed several bugs which may impact scanning performance * Reduced CPU usage * A new SMB API to log into the remote Windows host
2005-04-03Avoid calling makeinfo because the distfile contains pre-built .infominskim2-1/+15
files. This makes the package build on platforms without makeinfo. Patch provided by Darrin B. Jewell in PR pkg/29869.
2005-04-02- Update SnortSnarf to 050314.1adrianp3-30/+15
- Grab maintainership - Use SUBST_SED framework replacing patch-aa - Change HOMEPAGE for project - Origional update submitted by Dave Tyson in PR# 29753, thanks ! > * Changed hard coded reference links to the Snort.org SID database to > reflect changes to snort.org - MFR
2005-04-02- Update scanssh from 2.0 to 2.1adrianp2-6/+6
> Minor improvements to open proxy detection. > Ability to scan via SOCKS proxies.
2005-04-02Add package for main QCA library - Cross-platform crypto API for QT.jdolecek6-1/+73
This is required by PSI 0.9.3. Package provided by Piotr Kalinowski in PR pkg/29277
2005-04-02update the COMMENT to reflect this is just a TLS pluginjdolecek1-2/+2
2005-03-30Update to 1.6.8pl7.cube2-8/+8
Changes: 557) Added a set of missing braces needed for MacOS X / Darwin. 558) Define LDAP_OPT_SUCCESS for those without it. 559) Warn if the user tries to use the -u option when not running a command. 560) Better PAM error handling and messages. 561) Fixed setting of $USER when env_reset is enabled.
2005-03-29Update to 0.57:wiz2-6/+6
PuTTY 0.57, released today, fixes two security holes which can allow a malicious SFTP server to execute code of its choice on a PSCP or PSFTP client connecting to it. We recommend everybody upgrade to 0.57 as soon as possible.
2005-03-28Remove security/cyrus-sasl and security/cy-login. These packagesjlam33-1569/+1
tracked the Cyrus SASL 1.5.x releases, which are no longer maintained. Adjust packages to use security/cyrus-sasl2 instead for SASL support. This closes PR pkg/28218 and PR pkg/29736.
2005-03-25Don't need to provide a definition of QMAKE in the environment any longer.bad1-5/+1
qt3-tools/buildlink3.mk does that now.
2005-03-25Changes 0.9.2:adam2-9/+12
- Added SNEFRU128, SNEFRU256. Reintroduced MD2. - Fixes to .spec file and clean-ups of documentation - Fixed typecasts, memory leaks and compiler warnings
2005-03-24Don't check for USE_BUILDLINK3 anymore in these files. These are includedjlam1-4/+2
by other package Makefiles, and with the deprecation of USE_BUILDLINK3 support in the infrastructure files, these had the potential to break existing packages.
2005-03-24Remove FreeBSD RCS Ids. pkgsrc has diverged too much for syncing to bewiz6-14/+6
useful.
2005-03-24Depend on bash>=2 instead of bash>=2.05.2.7.reed1-2/+2
Okayed by maintainer. Sometime ago, I had noticed my bash was too old, but I found it was good enough for this.
2005-03-24Add and enable systrace-policiesagc1-1/+2
2005-03-24Initial import of the collection of systrace(1) policies from hairyeyeball.agc4-0/+242
The files in this archive are example systrace policy files, which can be used to raise the security levels of your computer by using the systrace(1) utility. These example policies can be used as a base for custom policies, or as learning material.
2005-03-24Strip off any leading "-Wl," in the compiler and linker flags beforejlam2-10/+82
the courier Makefile adds it to all of the flags again. This avoids situations where you end up with a flag that looks like "-Wl,-Wl,...". This should fix the problem noted in pkg/29777.
2005-03-23Missing installed files inPLISTmanu1-1/+18
2005-03-23Upgrade to ipsec-tools 0.6b1.manu2-9/+10
New features: - PAM support - privilege separation
2005-03-23Update security/openssl to openssl-0.9.7f.jlam8-117/+214
Pkgsrc changes from version 0.9.7e include: *) Install the man pages with names that are less likely to collide with other packages' man pages. *) Support PKG_OPTIONS of "idea", "mdc2" and "rc5" to allow building with patented algorithms. By default, this package still builds without patented algorithms. Major changes from version 0.9.7e include: *) Prompt for pass phrases when appropriate for PKCS12 input format. *) Back-port of selected performance improvements from development branch, as well as improved support for PowerPC platforms. *) Add lots of checks for memory allocation failure, error codes to indicate failure and freeing up memory if a failure occurs. *) Add new -passin argument to dgst. *) Make an explicit check during certificate validation to see that the CA setting in each certificate on the chain is correct.
2005-03-22Update to 1.4.1:wiz4-36/+26
Noteworthy changes in version 1.4.1 (2005-03-15) ------------------------------------------------ * New --rfc2440-text option which controls how text is handled in signatures. This is in response to some problems seen with certain PGP/MIME mail clients and GnuPG version 1.4.0. More details about this are available at <http://lists.gnupg.org/pipermail/gnupg-users/2005-January/024408.html>. * New "import-unusable-sigs" and "export-unusable-sigs" tags for --import-options and --export-options. These are off by default, and cause GnuPG to not import or export key signatures that are not usable (e.g. expired signatures). * New experimental HTTP, HTTPS, FTP, and FTPS keyserver helper that uses the cURL library <http://curl.haxx.se> to retrieve keys. This is disabled by default, but may be enabled with the configure option --with-libcurl. Without this option, the existing HTTP code is used for HTTP, and HTTPS, FTP, and FTPS are not supported. [enabled with the "curl" option for the package] * When running a --card-status or --card-edit and a public key is available, missing secret key stubs will be created on the fly. Details of the key are listed too. * The implicit packet dumping in double verbose mode is now sent to stderr and not to stdout. * Added countermeasures against the Mister/Zuccherato CFB attack <http://eprint.iacr.org/2005/033>. * Add new --edit-key command "bkuptocard" to allow restoring a card key from a backup. * The "fetch" command of --card-edit now retrieves the key using the default keyserver if no URL has been stored on the card. * New configure option --enable-noexecstack. Also, gpgkeys_mailto is not installed any longer, dropping the dependency on perl.
2005-03-22Bump revision due to update of eel2 to 2.10.0.jmmv1-1/+2
2005-03-22Update to 0.4.2:jmmv3-7/+8
* AIX portability fixes * Translation updates
2005-03-22Update security/courier-authlib to courier-authlib-0.55. Changes fromjlam2-7/+6
version 0.54 include: * authsystem.passwd.in: Explicitly set LC_ALL to en_US * SASL: Added CRAM-SHA256 authentication method (experimental). * courierauthdebug.h: Macro dprintf conflicts with new glibc.
2005-03-22Add and enable dsniff-nox11.wiz1-1/+2
2005-03-22Split parts of Makefile into Makefile.common for use by dsniff-nox11.wiz4-45/+36
Only build webspy in this package, and depend on dsniff to get the other tools. Bump PKGREVISION.
2005-03-22Initial import of dsniff-nox11, the tools from dsniff that don'twiz3-0/+45
need X11. Addresses PR 25703 by Jukka Salmi.
2005-03-21Do not open files opened for reading in RW mode. Helps in usingwiz3-3/+18
cfs over coda. From Greg Troxel in PR 28479. PKGREVISION++
2005-03-20Fix build by avoiding conflicts between the included tun files and the onesjmmv2-1/+23
provided by libdnet. This was broken during the last update of libdnet to 0.10, as the previous versions did not include the tun stuff.
2005-03-20Use BUILDLINK_PREFIX.libdnet rather than PREFIX to locate libdnet.jmmv1-2/+2
2005-03-20Update fprot-workstation-bin to version 4.5.4. This addresses PR#29747.ben4-19/+29
Version 4.5.4 is a bugfix release. Fixed a string error in the updater. Fixed a race condition in f-protd where f-protd would report 'Bad file number' on accept() under high loads. Fixed a crash issue with malformed word macros. Fixed a memory corruption in the x86 emulation code. Modified check-updates.pl to automatically detect f-prot version number.
2005-03-20Extend "fshcompat.py" to work with python24, using patch submitted byfredb3-2/+44
lukem in PR pkg/29704. Reviewed by recht.
2005-03-19Update to 5.2.1. Provided by Stefan Krüger in PR 28740.wiz6-35/+73
5.2 - merged in changes for 5.01 - 5.0.4 - added support for using encoding parameters and key derivation parameters with public key encryption (implemented by OAEP and DL/ECIES) - added Camellia, SHACAL-2, Two-Track-MAC, Whirlpool, RIPEMD-320, RIPEMD-128, RIPEMD-256, Base-32 coding - added ThreadUserTimer for timing thread CPU usage - added option for password-based key derivation functions to iterate until a mimimum elapsed thread CPU time is reached - added option (on by default) for DEFLATE compression to detect uncompressible files and process them more quickly - improved compatibility and performance on 64-bit platforms, including Alpha, IA-64, x86-64, PPC64, Sparc64, and MIPS64 - fixed ONE_AND_ZEROS_PADDING to use 0x80 instead 0x01 as padding. - fixed encoding/decoding of PKCS #8 privateKeyInfo to properly handle optional attributes 5.2.1 - fixed bug in the "dlltest" DLL testing program - fixed compiling with STLport using VC .NET - fixed compiling with -fPIC using GCC - fixed compiling with -msse2 on systems without memalign() - fixed inability to instantiate PanamaMAC - fixed problems with inline documentation
2005-03-18Avoid possibly linking everything against -lintl when PostgreSQLjlam4-8/+23
support is built into courier-authlib -- -lintl is only needed by the authpgsql authentication module. This avoids problems when linking clients with -lcourierauth and the linker thinks -lintl is needed when it really doesn't. Bump the PKGREVISION to 3.
2005-03-18Add and enable ruby16-digest package.taca1-1/+2
2005-03-18Importing security/ruby16-digest package which I forgot to import,taca5-0/+74
it is needed by ruby16 package. Now this package includes some fixes for IRIX, too.
2005-03-17Update HOMEPAGE and MASTER_SITES.wiz1-3/+3
2005-03-16Added patches for gcc-2.95.3 that properly order declarations and code.rillig3-1/+46
Approved by wiz.
2005-03-16Added proper CFLAGS quoting. Approved by wiz.rillig1-2/+2
2005-03-14There's no need to manually format and install a nroffed manpage.tv1-13/+1
Install the source and let man(1) do it. (Since this code is actually all commented out, no PKGREVISION bump.)
2005-03-10Make build on Interix, sharing some of the OS-specific oddities with _WIN32.tv4-7/+90
2005-03-10Sort.wiz1-2/+2
2005-03-08Make it explicit that the package doesn't install any authentication mechanismsbad1-2/+7
and what the likely, but opaque, error message is in that case.
2005-03-07nb5: Rework Interix support, based on work done by Interop Systemstv24-337/+613
*before* a BSD-with-advertising license was added to their diffs, and other work done personally by me. sshd now works. Most permissions checks work properly. Privsep is off by default, and the sshd user is not created, on Interix until some problems with privsep are fixed (perhaps by abstracting the auth functionality out to openpam).
2005-03-07Because LIBTOOLIZE_PLIST is "yes" by default we must list only the .la filebad1-10/+1
in the PLIST.
2005-03-07Fix quoting.uebayasi2-4/+4
2005-03-06Bump PKGREVISION with introduce of ruby16-base/ruby18-base pacakge.taca2-4/+4
2005-03-06Add and enable ruby-digest and ruby-openssl.taca1-1/+3