summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2013-08-20Set LICENSE.wiz1-2/+2
2013-08-20Fix build with bison-3.0.wiz2-1/+34
(just build-tested)
2013-08-16update PLIST after heimdal upgraderichard1-1/+3
2013-08-16revbump from libnotify bumped to 0.7 and dependency changed from libnotify07.obache2-6/+6
2013-08-16Changes 1.5.3:adam3-27/+16
Bug fixes - Fix leaking file descriptors in KDC - Better socket/timeout handling in libkrb5 - General bug fixes - Build fixes
2013-08-15Attempt to fix readline fallout. Tested with both READLINE_TYPE on SmartOS.jperkin1-5/+7
2013-08-15Update to 2.14wen3-25/+6
Upstream changes: 2.14 23 Jul 2013 - quick mod to keep META.yml current 2.13 23 Jul 2013 - updated SvUPGRADE to a statement - patched for WIN64
2013-08-15Revbump after updating lang/lua to 5.2.2.obache1-2/+2
2013-08-14Switch to use libnotify07.obache3-4/+37
Bump PKGREVISION.
2013-08-12Update py-itsdangerous to 0.23.kleink2-6/+6
Version 0.23 ~~~~~~~~~~~~ - Fixed a packaging mistake that caused the tests and license files to not be included.
2013-08-12Switch to use libnotify07.obache3-4/+41
Bump PKGREVISION.
2013-08-07update to 0.63drochner12-230/+44
This fixes a buffer overflow which was patched in pkgsrc (CVE-2013-4852), two other buffer overflows (CVE-2013-4206, CVE-2013-4207), and it clears private keys after use now (CVE-2013-4208). Other than that, there are mostly bug fixes from 0.62 and a few small features.
2013-08-07I got the license type wrong - should be "public-domain"agc1-2/+2
2013-08-07add and enable libcurvecpragc1-1/+2
2013-08-07Initial import of libcurvecpr-20130806 into the packages collection.agc6-0/+98
libcurvecpr is a library implementation of Dan Bernstein's CurveCP libcurvecpr is a low-level, networking-independent implementation of Daniel J. Bernstein's CurveCP. libcurvecpr is based on a system of callbacks that must be implemented by library users. Like the reference CurveCP implementation, the client, server, and message-handling portions of libcurvecpr are entirely independent of each other. This means that while it's slightly more effort to build software based on libcurvecpr than other packages, it provides complete freedom to use any underlying mechanism for handling network traffic you want - whether it's an IPC connection to another program, standard poll(2)-type functionality, or libev.
2013-08-06Reset PKGREVISION after update.wiz1-3/+1
2013-08-06Remove FETCH_USING=curl after putting distfile on nbftp.wiz1-3/+1
2013-08-06Upstream changes:gls2-6/+6
----------------- Duncan Ferguson <duncan_ferguson@user.sf.net> - v4.01_05 - New option (-m, --unique-servers) to remove repeated servers when openeing terminals (Thanks to Oliver Meissner) - Drop MYMETA.yml and .json files from the distribution - Do not set default user name to prevent overriding ssh configuration 2013-02-26 Duncan Ferguson <duncan_ferguson@user.sf.net> - v4.01_04 - Fixed 'ccon' not calling the correct command (Sf bug 3605002) - Fixed clusters not being defined correctly within the .clusterssh/config file (Sf bug 3605675) 2013-02-15 Duncan Ferguson <duncan_ferguson@user.sf.net> - v4.01_03 * Correct documentation for references to $HOME/.clusterssh/config * Re-add user back into the configurartion file * Add in missing newline for some error messages * Allow the path to rsh/ssh/telnet to be defined in the configuration file * Move .csshrc to .csshrc.DISABLED since it should no longer be used * Error emitted when adding a host via the "Hosts" drop-down (Debian bug ID #578208) * Pastes uses a strange keyboard layout (Debian bug ID #364565) * Cope with being invoked by 'clusterssh' (Debian bug ID #644368) * Fix migration of .csshrc when not working as expected (Debian bug ID #673507) * Remove doc references to 'always_tile' as renamed 'window_tiling' (Debian bug ID #697371) * Updated manpage whatis entries (patch by Tony Mancill) * Fix watch line expression to catch 4.x series tarballs (Debian patch LP ID #1076897) * Allow tests to pass successfully when run as root * Fix cssh starting if xterm is not installed (Sf bug 3494988) * Set WM_CLASS on windows to 'cssh' (Sf bug 3187736) 2012-12-09 Duncan Ferguson <duncan_ferguson@user.sf.net> - v4.01_02 * Fix logic when using 'autoclose' on the command line or config file * Fix $HOME/.clusterssh/clusters being read in * Fix 'ctel', 'crsh' and 'ccon'so they work as expected
2013-08-06Update security/py-paramiko to 1.11.0gls3-8/+12
pkgsrc changes: --------------- FETCH_USING= curl, as PyPi moved to https. Upstream changes: ----------------- v1.11.0 (26th Jul 2013) ----------------------- * #98: On Windows, when interacting with the PuTTY PAgeant, Paramiko now creates the shared memory map with explicit Security Attributes of the user, which is the same technique employed by the canonical PuTTY library to avoid permissions issues when Paramiko is running under a different UAC context than the PuTTY Ageant process. Thanks to Jason R. Coombs for the patch. * #100: Remove use of PyWin32 in `win_pageant` module. Module was already dependent on ctypes for constructing appropriate structures and had ctypes implementations of all functionality. Thanks to Jason R. Coombs for the patch. * #87: Ensure updates to `known_hosts` files account for any updates to said files after Paramiko initially read them. (Includes related fix to guard against duplicate entries during subsequent `known_hosts` loads.) Thanks to `@sunweaver` for the contribution. v1.10.2 (26th Jul 2013) ----------------------- * #153, #67: Warn on parse failure when reading known_hosts file. Thanks to `@glasserc` for patch. * #146: Indentation fixes for readability. Thanks to Abhinav Upadhyay for catch & patch.
2013-08-06add patch from upstream to fix possible heap overflow in SSH handshakedrochner5-5/+55
due to integer overflow (CVE-2013-4852) bump PKGREV
2013-08-06Make sure to set correct PKGNAME using DISTNAME.taca1-2/+2
2013-08-05+ py-passlibkleink1-1/+2
2013-08-05Import passlib-1.6.1 as security/py-passlib.kleink4-0/+241
Passlib is a password hashing library for Python 2 & 3, which provides cross-platform implementations of over 30 password hashing algorithms, as well as a framework for managing existing password hashes. It's designed to be useful for a wide range of tasks, from verifying a hash found in /etc/shadow, to providing full-strength password hashing for multi-user application.
2013-08-05Fix patch file code for modern GCCfhajny3-7/+7
2013-08-03Fix build on SunOS (LDFLAGS.SunOS+= -lsocket -lnsl).rodent1-1/+3
2013-08-01Changes 3.2.3:adam4-20/+14
** libgnutls: Fixes in parsing of priority strings. Patch by Stefan Buehler. ** libgnutls: Solve issue with received TLS packets that exceed 2^14. (this fixes a bug that was accidentally introduced in 3.2.2) ** libgnutls: Removed gnulib modules under LGPLv3 that could possibly be used by the library. ** libgnutls: Fixes in gnutls_record_send_range(). ** API and ABI modifications: gnutls_priority_kx_list: Added gnutls_priority_mac_list: Added gnutls_priority_cipher_list: Added
2013-07-30+ PACK.wiz1-1/+2
2013-07-30Import PACK-0.0.3 as security/PACK.wiz4-0/+47
PACK (Password Analysis and Cracking Toolkit) is a collection of utilities developed to aid in analysis of password lists and enhancing cracking of passwords using smart rule generation. It can be used to reverse word mangling rules, generate source words and optimize password masks for the Hashcat family of tools. NOTE: The toolkit itself is not able to crack passwords, but instead designed to make operation of password crackers more efficient.
2013-07-30Update to 2.23ryoon2-7/+6
Changelog: Changes from 2.22 to 2.23: New Features: New password quality estimation algorithm. Added toolbar buttons: 'Open URL(s)', 'Copy URL(s) to Clipboard' and 'Perform Auto-Type'. Added 'Generate Password' command in the context menu of the KeePass system tray icon. Added 'Copy history' option in the entry duplication dialog (enabled by default). Added 'Duplicate Group' context menu command. In the MRU list, currently opened files now have an '[Opened]' suffix and are blue. When a dialog is displayed, (double) clicking the KeePass system tray icon now activates the dialog. Added {T-REPLACE-RX:...} placeholder, which replaces text using a regular expression. Added {VKEY-NX X} and {VKEY-EX X} special key codes. Added 'Perform auto-type with selected entry' trigger action. Added 'Import into active database' trigger action. Mozilla Bookmarks HTML import: added support for groups, bookmark descriptions and icons. Mozilla Bookmarks JSON import: bookmark descriptions are now imported into the note fields of entries. RoboForm import: added support for the new file format. Added support for importing Network Password Manager 4.0 CSV files. Enhanced SafeWallet XML importer to additionally support importing web entries and groups from very old export file versions (for newer versions this was already supported). Added database repair mode warning. Added option to accept invalid SSL certificates (turned off by default). Added user activity notification event for plugins. File transactions for FTP URLs are now always disabled when running under .NET 4.0 in order to workaround .NET bug 621450. Added workaround for Mono list view item selection bug. Added workaround for Mono bug 649266; minimizing to tray now removes the task bar item and restoring does not result in a broken window anymore. Added workaround for Mono bug 5795; text and selections in password boxes are now drawn properly (a monospace font can only be used on Windows due to the bug). Added workaround for Mono bug 12525; dialog banners are now drawn correctly again. Added workaround for Mono form loading bug. KPScript: added 'Import' command. KPScript: the 'ListEntries' command now also outputs date/time fields of entries. Improvements / Changes: When the option for remembering the last used database is enabled, KeePass now remembers the last active database (instead of the last opened or saved database). The 'Add Group' command and the F2 key in the groups tree view now open the group editing dialog; in-place tree node label editing is disabled. Custom string and plugin-provided columns in the 'Configure Columns' dialog are sorted alphabetically now. Improved behavior when closing inactive databases. Improved support for trigger actions during database closing. The 'Special' GUI character set now includes '|' and '~'. The 'High ANSI' character set now consists of the range [U+0080, U+00FF] except control and non-printable characters. The options dialog is now listed in the task bar when it is opened while KeePass is minimized to the system tray. A remembered user account usage state can now be preset even when the user account option is disabled using key prompt configuration flags. Improved initial input focus in key creation/prompt dialogs when key creation/prompt configuration flags are specified. During synchronization, the status dialog is now closed after all files have been saved. Improved behavior of the global KeePass activation hot key when a dialog is displayed. Changed auto-type command icon. Shortened product name in main window title. Improved data URI validation. Custom clipboard data is now encoded as data URI (with a vendor-specific MIME type). Improved configuration loading performance. Enhanced IO connection problem diagnostics. Improved single instance checking on Unix-like systems. KeePassLibC DLLs and ShInstUtil are now explicitly marked as DEP- and ASLR-compatible (like the executable file). Various UI improvements. Various code optimizations. Minor other improvements. Bugfixes: The suffixes to the 'Inherit setting from parent' options on the 'Behavior' tab of the group editing dialog now correctly show the inherited settings of the current group's parent. When locked, the main window's title doesn't show the full path of the database anymore when the option 'Show full path in title bar (instead of file name only)' is turned off. The status bar is now updated correctly after sorting by a column. Changes from 2.21 to 2.22: New Features: When the option for remembering key sources is enabled, KeePass now also remembers whether the user account is required. Added 'View' -> 'Grouping in Entry List' menu. Added 'Close active database' trigger action. Added '-ioiscomplete' command line option, which tells KeePass that the path and file system credentials are complete (the 'Open URL' dialog will not be displayed then). Added support for importing SafeWallet XML files (3.0.4 and 3.0.5). Added support for importing TurboPasswords 5.0.1 CSV files. LastPass CSV importer: added support for group trees. Alle meine Passworte XML importer: added support for custom fields and group names with special characters. Password Safe XML importer: added support for the e-mail field. Added 'Help' button in the generic CSV importer dialog. Added workaround for .NET bug 642188; top visible list view items are now remembered in details view with groups enabled. Added workaround for Mono form title bar text update bug (which e.g. caused bug 801414). Improvements / Changes: After closing a character picking dialog, KeePass now explicitly activates the previous window. Improved behavior when cancelling the icon picker dialog. Main window activation redirection now works with all KeePass dialogs automatically. The window state of the current database is now remembered before opening another database. Previous parameters are now discarded when switching between different trigger event/condition/action types. Unified separators in group paths. The UI state is now updated after adding an entry and clicking an entry reference link in the entry view. The '-entry-url-open' command line option now searches for matching entries in all open databases. Improved database context determination when opening an URL. Added support for special values in date/time fields imported from KeePass 1.x. Improved HTML entity decoding (support for more entities and CDATA sections, improved performance, ...). RoboForm HTML importer: URLs are converted to lower-case now and support for a special order rotation of attributes has been added. Removed Password Gorilla CSV importer; users should use the generic CSV importer (which can import more data than the old specialized CSV importer). Improved file discoveries. Improved test form entry auto-type window definition. In the MSI package, the version is now included in the product name. Native key transformation library: replaced Boost threads by Windows API threads (because Boost threads can result in crashes on restricted Windows 7 x64 systems). Various UI improvements. Various code optimizations. Minor other improvements. Bugfixes: (None).
2013-07-30Replace no longer existing master site, by nk@kajander.fi.is1-4/+4
2013-07-26Fix build under GNU/kFreeBSD/amd64.ryoon5-5/+122
2013-07-26Bump PKGREVISION.ryoon5-24/+53
* For DragonFly, use its own condition. * Add Debian GNU/kFreeBSD support.
2013-07-26Fix build under GNU/kFreeBSD.ryoon3-17/+35
* host_os in configure script is something wrong (gnukfreebsd, not kfreebsd*-gnu).
2013-07-26Fix build on at least SunOS by pointing to real OpenSSL.fhajny1-1/+3
2013-07-25Update to 1.10wen3-25/+6
Upstream changes: 1.09 - Tue 23 Jul '13 made SvUPGRADE a statement corrected VERSION statement fixed _idea.c for Strawberry (No upstream changelog for 1.10)
2013-07-25Update to 2.07wen3-25/+6
Upstream changes: In release 2.06, SvUPGRADE was changed to a statement. In release 2.07, a minor bug in META.yml was fixed.
2013-07-25Update to 1.5.3:wiz2-6/+6
Noteworthy changes in version 1.5.3 (2013-07-25) ------------------------------------------------ * Mitigate the Yarom/Falkner flush+reload side-channel attack on RSA secret keys. See <http://eprint.iacr.org/2013/448>.
2013-07-25Update to 1.4.14:wiz3-33/+6
Noteworthy changes in version 1.4.14 (2013-07-25) ------------------------------------------------- * Mitigate the Yarom/Falkner flush+reload side-channel attack on RSA secret keys. See <http://eprint.iacr.org/2013/448>. * Fixed IDEA for big-endian CPUs * Improved the diagnostics for failed keyserver lockups. * Minor bug and portability fixes.
2013-07-21Tweak GEM_CLEANBUILD for ruby200.taca1-2/+2
2013-07-20Use Mt for email addresses.wiz5-10/+10
2013-07-19Install missing files as necessary.joerg1-2/+2
2013-07-15Update to 3.2.2, with SunOS updates from Jörn Clausen.wiz5-26/+29
* Version 3.2.2 (released 2013-07-14) ** libgnutls: Several optimizations in the related to packet processing subsystems. ** libgnutls: DTLS replay detection can now be disabled (to be used in certain transport layers like SCTP). ** libgnutls: Fixes in SRTP extension generation when MKI is being used. ** libgnutls: Added ability to set hooks before or after sending or receiving any handshake message with gnutls_handshake_set_hook_function(). ** API and ABI modifications: GNUTLS_NO_REPLAY_PROTECTION: Added gnutls_certificate_set_trust_list: Added gnutls_cipher_get_tag_size: Added gnutls_record_overhead_size: Added gnutls_est_record_overhead_size: Added gnutls_handshake_set_hook_function: Added gnutls_handshake_description_get_name: Added gnutls_digest_list: Added gnutls_digest_get_id: Added gnutls_digest_get_name: Added
2013-07-15* .include "../../devel/readline/buildlink3.mk" with USE_GNU_READLINE=yesryoon9-25/+20
are replaced with .include "../../devel/readline/buildlink3.mk", and USE_GNU_READLINE are removed, * .include "../../devel/readline/buildlink3.mk" without USE_GNU_READLINE are replaced with .include "../../mk/readline.buildlink3.mk".
2013-07-14Update to 2.53wen2-7/+6
Upstream changes: 2013-07-02 Gisle Aas <gisle@ActiveState.com> Release 2.53 Drop File::Spec dependency and don't override installation location for perl-5.12++ Documentation tweaks.
2013-07-14Update to 1.9wen2-7/+6
Upstream changes: *** 2013-03-22 Version 1.9 Updated author and distribution location details to airspayce.com
2013-07-14Add p5-Bytes-Random-Securewen1-1/+2
2013-07-14Import Bytes::Random::Secure-0.26 as security/p5-Bytes-Random-Secure.wen3-0/+28
Bytes::Random::Secure provides two interfaces for obtaining crypto-quality random bytes. The simple interface is built around plain functions. For greater control over the Random Number Generator's seeding, there is an Object Oriented interface that provides much more flexibility.
2013-07-14Add p5-Crypt-Random-Seedwen1-1/+2
2013-07-14Import Crypt::Random::Seed-0.03 as security/p5-Crypt-Random-Seed.wen3-0/+32
Crypt::Random::Seed is a simple mechanism to get strong randomness. The main purpose of this module is to provide a simple way to generate a seed for a PRNG such as Math::Random::ISAAC, for use in cryptographic key generation, or as the seed for an upstream module such as Bytes::Random::Secure. Flags for requiring non-blocking sources are allowed, as well as a very simple method for plugging in a source.
2013-07-14Add p5-Crypt-Random-TESHA2wen1-1/+2
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-26 12:06:22 +0000