summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2001-12-31Update security/php4-mcrypt to 4.1.0. Changes from version 4.0.6 include:jlam1-3/+3
- Fixed a bug in the mcrypt extension, where list destructors were not properly being allocated. (Sterling) - Fixed bugs in the mcrypt extension that caused crashes. (Derick)
2001-12-31Make ruby-md5 package for ruby 1.4 package only.taca1-1/+3
2001-12-30Update libnasl, nessus{-core,-plugins,-libraries} to 1.0.10.frueauf8-21/+132
1.0.10 : Changes by Michael Scheidell <scheidell@fdma.com> : - Backported Nessus 1.1.x plugins changes in nessus-plugins Changes by Renaud Deraison <deraison@nessus.org> : - Minor fixes
2001-12-30Importing ruby-digest package. This is part of ruby 1.6.6 package.taca3-0/+46
2001-12-30Add and enable p5-Crypt-IDEA.wiz1-1/+2
2001-12-30Initial import of p5-Crypt-IDEA, provided by Sen Nagata in pkg/14158.wiz6-0/+56
Perl module for the IDEA symmetric key algorithm.
2001-12-29Don't hardcode the PKG_DBDIR value at package installation time.agc2-5/+5
Bump version to 1.11
2001-12-28Update "stunnel" package to version 3.22. Changes sinc version 3.21c:tron4-122/+30
- Format string bug fixed in protocol.c smtp, pop3 and nntp in client mode were affected. (stunnel clients could be attacked by malicious servers) - Certificate chain can be supplied with -p option or in stunnel.pem. - Problem with -r and -l options used together fixed. - memmove() instead of memcpy() is used to move data in buffers. - More detailed information about negotiated ciphers is printed. - New ./configure options: "--enable-no-rsa" and "--enable-dh".
2001-12-27suse_compat is built from emulators/suse_compat, not emulators/suse_base.jlam1-2/+2
2001-12-24Make PKGNAME match directory name.wiz1-2/+2
2001-12-21Update security/uvscan-dat to 4177. Changes from 4176 include yet morejlam2-5/+5
MS Windows virii/worms/trojans detected.
2001-12-19Add and enable mirrordiragc1-1/+2
2001-12-19Initial import of mirrordir-0.10.49 into the NetBSD packages collection.agc6-0/+112
Mirrordir is a suite of functions in one package. It contains the following programs: * pslogin: A remote login utility and daemon that provides a secure shell. This can be considered as a GPL replacement to Ssh. * copydir: A cp equivalent which additionally copies to and from ftp servers. Use it to upload and download via ftp and via mirrordir's secure daemon. Use it as a rigorous cp to correctly reproduce hardlinks, permissions and access times. * mirrordir: Mirrors filesystems over ftp or locally via a minimal set of changes. It is optimised for locally mirroring a device as an alternative to RAID devices. It duplicates file-systems in every detail, even correctly recreating hardlinks, devices and access times. It works well mirroring ftp sites that don't support ls-lR summaries. Mirrordir can take a C script to customise the kind of files to mirror based on their stat info, name, or other information. * recursdir: Pass a C script to recursdir to recursively perform operations on files. This is a fast and overkill equivalent of find. Taken from a suggestion by Jeff Sheinberg.
2001-12-19Updated to 1.12 (provided by Shell Hung in pkg/14992)martti2-5/+5
- Fixed a typo in proxy handling for Net::SSLeay::Handle - Fixed make test for wellsfargo
2001-12-17Add RCS Ids.wiz2-0/+2
2001-12-15Updated to 1.11 (provided by Shell Hung in pkg/14953)martti2-7/+7
Changes : - Add proxy support to Net::SSLeay::Handle - New maintainer
2001-12-14upgrade to 20011215a.itojun2-5/+5
- memory leaks has been plugged - retransmission logic has improved - 6144 DH MODP group
2001-12-13Update security/uvscan to 4.16.0 (using the 4160 engine). Changes fromjlam3-18/+24
version 4.14.0 are: - Support for ACE (WinACE) Archiver - Support for additional packers: PKLITE32, ELiTeWrap, Joiner, PEBundle, PEBundle Write-To-Disk, and tElock. - Support for newer versions of packers: Petite, ASPack, UPX, NeoLite, and PECompact. - Support for BZIP compression format - Support for additional LHA compression formats, LH6 and LH7 - Support for zcompress compression format - Support for PDF 5.0 files - Improved scanning for MIME formats - Support for Unicode and Unicode big-endian saved scripts - Support for Compiled Help files - Support for Microsoft Exchange internal data-transfer format - Support for Internet Message Connector (IMC) Archive format. - Support for uncompressed VBA in Visio files - Improved heuristic analysis for 32-bit Windows applications - Support for compressed RTF and HTML in Microsoft Outlook messages - Support for Script Component Type Libraries - Improved performance when scanning Windows 32 applications
2001-12-13Update security/uvscan-dat to 4176. Pkgsrc changes include using thejlam6-168/+83
general INSTALL scripts and checking in the update_dat script that the place to fetch the DAT files ends in a '/'. Changes include checking for even more Internet worms (includes goner).
2001-12-12Updated p5-Crypt-CBC to 2.01 (provided by Shell Hung in pkg/14917)martti4-45/+6
Changes : - Patches for foreign program compatibility, initialization vectors and padding methods from Jody Biggs <jody.biggs@paymybills.com> - Removed debugging code - Used Digest-MD5
2001-12-10Updated to 0.4.2 (provided by Peter Reich in pkg/14842)martti2-6/+6
* configure.in (BUILD_INCLUDED_LIBINTL): Set to no for W32. * Makefile.am: Include autogen.sh
2001-12-10Updated to 0.05 (provided by Shell Hung in pkg/14803)martti2-6/+5
Changes: - Removed empty HOMEPAGE - Implemented the recommendation by NIST, ECB, CBC, CFS-128, OFC and CTR
2001-12-10Updated to 1.10 (provided by Shell Hung in pkg/14881)martti2-6/+6
* Add proxy support
2001-12-10Added optional GSSAPI support. To activate this feature, please setmartti4-24/+19
SASL_USE_GSSAPI=YES in /etc/mk.conf
2001-12-10Update pgpdump to 0.16 .jun2-5/+5
0.16 2001/12/06 * Key ID hack. 0.15 2001/11/13 * Old man style for pgpdump.1. * The symmetric encryption algorism is displayed more user-friendly.
2001-12-06Updated to 1.6b. List of changes is unknown as there is no ChangeLog file.martti2-5/+5
2001-12-05Fix path to example files in MESSAGE. Reported by Paul Hoffmann.wiz1-2/+2
2001-12-05Normalise all the uses of "wheel", and "root" for ${ROOT_GROUP}, now thatagc1-7/+1
the definition is available in all the defs.${OPSYS}.mk files.
2001-12-04By default, prevent invocation of GNU "auto*" driven by the generatedjlam1-2/+1
Makefiles during the build process by touching various auto{conf,make} source files to make them up-to-date. Packages that require regenerating the configure script and Makefile.in files should make the appropriate calls to auto{conf,make} in a pre-configure target. This allows the various targets listed in ${_CONFIG_PREREQ} to modify the generated files without triggering the GNU auto* tools and having the modifications be overwritten.
2001-12-03Use PKGREVISION to manage the package-specific version number when itjlam1-2/+2
differs from the distfile version number. G/C some the unused variables in php4/Makefile.common related to the old way of handling version numbers.
2001-12-03* Updated to 3.0.2.1martti5-69/+74
* Disabled scard-install (patch/patch-ah -- Do we need/want it?) Changes since 2.9.9.2: - Don't allow authorized_keys specified environment variables when UseLogin in active - Fix IPv4 default in ssh-keyscan - Fix early (and double) free of remote user when using Kerberos - fix krb5 authorization check - enable authorized_keys2 again - ignore SIGPIPE early, makes ssh work if agent dies, netbsd-pr via itojun@ - make ~& (backgrounding) work again for proto v1; add support ~& for v2, too - pad using the padding field from the ssh2 packet instead of sending extra ignore messages - missing free and sync dss/rsa code - crank c->path to 256 so they can hold a full hostname - cleanup libwrap support - Fix fd leak in loginrec.c - avoid possible FD_ISSET overflow for channels established during channnel_after_select() - chdir $HOME after krb_afslog() - stat subsystem command before calling do_exec - close all channels if the connection to the remote host has been closed, should fix sshd's hanging with WCHAN==wait - add NoHostAuthenticationForLocalhost; note that the hostkey is now check for localhost, too - loginrec.c: fix type conversion problems exposed when using 64-bit off_t - Update spec files for new x11-askpass
2001-12-02bsd.pkg.install.mk calls the INSTALL script at the right timesjlam3-7/+3
automatically, so no need to do it ourselves.
2001-11-30Oops. Correct leftover SHA1 -> HMACmjl1-2/+2
2001-11-30Enable p5-Digest-HMACmjl1-1/+2
2001-11-30Import p5-Digest-HMAC-1.01mjl4-0/+31
HMAC is used for message integrity checks between two parties that share a secret key, and works in combination with some other Digest algorithm, usually MD5 or SHA-1. The HMAC mechanism is described in RFC 2104.
2001-11-29A dependency on automake implies a dependency on autoconf; there's no needjlam1-2/+1
to list them both when we listing just automake will do.
2001-11-29Get rid of manually adding "nbX" to PKGNAME when a pkg was changed inhubertf5-10/+11
pkgsrc. Instead, a new variable PKGREVISION is invented that can get bumped independent of DISTNAME and PKGNAME. Example #1: DISTNAME= foo-X.Y PKGREVISION= Z => PKGNAME= foo-X.YnbZ Example #2: DISTNAME= barthing-X.Y PKGNAME= bar-X.Y PKGREVISION= Z => PKGNAME= bar=X.YnbZ (!) On subsequent changes, only PKGREVISION needs to be bumped, no more risk of getting DISTNAME changed accidentally.
2001-11-28Updated to p5-Net-SSLeay-1.09 (provided by Shell Hung in pkg/14512)martti2-6/+6
1.09 20.8.2001, - fixed Makefile.PL (computation of bin_path) and test.pl ($perl use before defined) per Gordon Lack <gml4410@ggr.co.uk> 11.9.2001, - Patch by Jeremy Mates <jmates@mbt.washington.edu> to make Handle.pm more acceptable for older perls 25.9.2001, - systematically implemented many of the newer functions of openssl API (per popular request and for completeness)
2001-11-28Update to 2.4.18, provided by Shell Hung in pkg/14707.wiz2-5/+5
Change: memory leak fixed.
2001-11-26Use PKG_{USERS,GROUPS} instead of PKG_{USER,GROUP}.jlam2-7/+7
2001-11-26Forgot a CONFDIR -> PKG_SYSCONFDIR replacement.jlam2-4/+4
2001-11-26Missed a CONFDIR -> PKG_SYSCONFDIR replacement.jlam1-2/+2
2001-11-26Buildlinkify, in the sense that only the perl headers are found injlam17-40/+56
${PREFIX} -- everything else is pickup up from ${BUILDLINK_DIR}.
2001-11-25PKG_SYSCONFDIR is where the configuration files for a package may be found.jlam3-7/+7
This value may be customized in various ways: PKG_SYSCONFBASE is the main config directory under which all package configuration files are to be found. PKG_SYSCONFSUBDIR is the subdirectory of PKG_SYSCONFBASE under which the configuration files for a particular package may be found. PKG_SYSCONFDIR.${PKGBASE} overrides the value of ${PKG_SYSCONFDIR} for a particular package. Users will typically want to set PKG_SYSCONFBASE to /etc, or accept the default location of ${PREFIX}/etc. This obsoletes the use of CONFDIR, which was active for only 6 days, so no need to have a workaround to still accept old CONFDIR settings.
2001-11-23Update to 2.09, provided by Shell Hung in pkg/14695.wiz3-11/+12
Changes since 2.06: - changed keysize back to 0 apparently setting keysize to 8 triggered a bad hack in Crypt::CBC which resulted in OpenSRS breaking. the "bad hack" in question is: $ks = $cipher =~ /blowfish/i ? 56 : 8 unless $ks > 0; ... anyway.. fixed. - added two new functions: min_keysize and max_keysize these allow modules like Crypt::CBC_IL and Crypt::CBC_R to use variable key lengths with CBC modes. - cleaned up test.pl - updated README - minor change in XS - additions to reported platforms Remove package version number from DESCR.
2001-11-23Stop the SSH daemom from truncating output on slow networks and/ortron2-5/+31
machines. Patch supplied by Michael Eriksson in PR pkg/9119.
2001-11-22Updated to version 4172 to include even more virus definitions.martti2-5/+5
2001-11-21Buildlinkify, respect ${CONFDIR}, use general INSTALL/DEINSTALL scripts,jlam6-204/+136
and make sasl_passwd into a real rc.d script.
2001-11-21These rc.d scripts are copied to ${RCD_SCRIPTS_DIR} == /etc/rc.d, so changejlam1-6/+6
the test for pre-rc.d systems to just whether /etc/rc.subr is present.
2001-11-21RCD_SCRIPTS now just lists the filenames (see bsd.pkg.install.mk).jlam1-2/+2