summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2004-07-17Fix a typo: use ldap.conf (not pam.conf) as the default LDAP config file.rh1-2/+2
Pointed out by Dick Davies < rasputnik at hellooperator dot net >.
2004-07-15add and enable prngdrecht1-1/+2
2004-07-15Initial import of prngd-0.9.29recht5-0/+91
from othyro at freeshell dot org via pkgsrc-wip PRNGD is a Pseudo Random Number Generator Daemon. It is intended to replace EGD, and provides an EGD compatible interface to obtain random data and as an entropy source. PRNGD is never drained and can never block. And it has a seed-save file, so that it is immediately usable after system start.
2004-07-11this needs -lnsl -lsocket on Solaris.grant1-1/+3
2004-07-08Use a better fix from ASG CVS the GSSAPI problems.recht3-10/+49
patch-ap now includes the updates between rev 1.84 and rev 1.90 modulo the support for passing of GSSAPI credentials. Patch provided by Jukka Salmi in PR 26184 Bump PKGREVISION to 3 for the new fix.
2004-07-06Accept "yes" or "YES" for USE_LIBCRACK.jlam1-2/+2
2004-07-06Unused.wiz2-197/+0
2004-07-06Refer to ${VARBASE} instead of /var for the location for local statejlam3-6/+6
information.
2004-07-06Update php4 package to 4.3.7.jdolecek1-2/+2
Change list from release notes: * Synchronized bundled GD library with GD 2.0.23. * Fixed a bug that prevented compilation of GD extensions against FreeType 2.1.0-2.1.2. * Fixed thread safety issue with informix connection id. * Fixed incorrect resolving of relative paths by glob() in windows. * Fixed mapping of Greek letters to html entities. * Fixed a bug that caused an on shutdown crash when using PHP with Apache 2.0.49. * Fixed a number of crashes inside pgsql, cpdf and gd extensions. All in all this release fixes over 30 bugs that have been discovered and resolved since the 4.3.6 release.
2004-07-06Add and enable libfwbuilderagc1-1/+2
2004-07-06Initial import of libfwbuilder-1.0.2 into the Packages Collection. Thisagc7-0/+245
was based a long time ago on the OpenBSD port, but the only thing that remains form that is one of the patches, and I'm not sure that's necessary any more. Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, ipfilter, OpenBSD PF, and Cisco PIX libfwbuilder provides the back-end functionality in a library.
2004-07-06Re-add revision 1.3 of patch-ab as patch-ag. This resurrects a change tojlam3-3/+17
use shlibtool to build the plugins to avoid generating and installing a static archive for the plugin module. This fixes PLIST breakage. Bump the PKGREVISION to 2.
2004-07-05Pull in a fix from ASG CVS: increase maxoutbuf buffer sizerecht3-2/+17
This allows uploading of SIEVE scripts larger than 4kb if GSSAPI authentification is used for cyrus-imapd. link to the patch provided by Jukka Salmi in PR 26165 bump PKGREVISION to 1
2004-07-02bl2 -> bl3 in a package that does not have USE_BUILDLINK* set.wiz1-2/+2
2004-07-02When exec'ing child processes (netstat and vmstat), make sure the standardjmmv3-2/+35
file descriptors (0, 1, 2) are open. This avoids multiple warnings issued under NetBSD about running set[ug]id programs with those descriptors closed. Fixes PR pkg/26079; although it talks about gaim, the problem is here, in libgcrypt. Bump PKGREVISION to 1.
2004-07-01Unused.wiz1-31/+0
2004-07-01Convert to bl3.wiz1-3/+3
2004-06-28Update to bl3. All test built with jdk or sun-jdk14.abs1-2/+2
jakarta-tomcat4 has other issues independant of this - will patch next
2004-06-27use buildlink3 for compiler specific flag stripping. fixes build ongrant1-1/+2
Solaris.
2004-06-27tiny whitespace tweakgrant1-2/+2
2004-06-27this needs flex and bison to build. fixes build on Solaris.grant2-8/+9
XXX this could be handled better by the tools stuff.
2004-06-27this needs -lnsl on Linux and -lnsl -lsocket on Solaris.grant1-1/+6
2004-06-27this blindly calls "gcc" so use buildlink3 so it uses the wrapper.grant1-1/+3
2004-06-27don't call a static function from an inline function, not allgrant2-1/+15
compilers allow it.
2004-06-27don't inline a function in one source file and expect to be able togrant3-1/+29
use it in other source files - not all compilers allow this.
2004-06-27use buildlink3 and include libpcap/buildlink3.mk to remove the hiddengrant1-1/+3
dependency on libpcap. no PKGREVISION bump required as this would not build without libpcap, anyway.
2004-06-27this uses a c and c++ compiler.grant1-1/+2
2004-06-27this blindly calls "gcc" so use buildlink3 so it uses the compilergrant1-2/+3
wrappers.
2004-06-26this uses zlib, so use buildlink3 and include zlib/buildlink3.mk.grant1-1/+3
2004-06-26don't override CC, don't pass gcc specific flags.grant2-7/+11
2004-06-26be quiet in do-buildgrant1-3/+3
2004-06-26use the specially provided targets for solaris sparc and i386grant1-1/+21
optimisations. this doesn't have a configure script.
2004-06-26nuke trailing slashesgrant1-7/+7
2004-06-26oops, back out a line that shouldn't have been committed.grant1-3/+1
2004-06-26don't override CC, LD, etc.grant3-8/+25
2004-06-25Cede maintainership to the hard-working people on tech-pkg@NetBSD.org.jlam1-2/+2
2004-06-25Whitespace nits.jlam1-11/+11
2004-06-24Set BUILDLINK_RECOMMMENDED to mit-krb5>=1.3.4 due to the security advisory:jlam1-3/+4
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-001-an_to_ln.txt
2004-06-24Update to security/mit-krb5 to 1.3.4. Major changes from version 1.3.3jlam2-6/+5
include a fix for security advisory [MITKRB-SA-2004-001]: http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-001-an_to_ln.txt Please read the security advisory to see if you are affected and should update your MIT krb5 installation.
2004-06-23Update flawfinder to 1.26. Don't set PY_PATCHPLIST, as it is useless.snj2-12/+6
Don't include python/extension.mk, as it is also useless. Don't set NO_CONFIGURE, because it makes PYTHON_PATCH_SCRIPTS useless. Don't set MAKEFILE, as we don't actually use the included makefile for anything. Changes since 1.24: * Added more support for Microsoft's approach to internationalization. * Added two new rules for GLib functions, "g_get_home_dir" and g_get_tmp_dir". * Added curl_getenv(). * Added several rules for input functions (for -I) - recv, recvfrom, recvmsg, fread, and readv. * Tightened the false positive test slightly; if a name is followed by = or - or + it's unlikely to be a function call, so it'll be quietly discarded. * Modified the summary report format slightly. * Modified the getpass text to remove an extraneous character. * Added rules for cuserid, getlogin, getpass, mkstemp, getpw, memalign, as well as the obsolete functions gsignal, ssignal, ulimit, usleep. * Modified text for strncat to clarify it. * Fixed error in --columns format, so that the output is simply "filename:linenumber:columnnumber" when --columns (-C) is used. * Eliminated "Number of" phrase in the footer report * Added more statistical information to the footer report. * Added shortcut single-letter commands (-D for --dataonly, -Q for --quiet, -C for --columns), so that invoking from editors is easier. * Tries to autoremove some false positives. In particular, a function name followed immediately by "=" (ignoring whitespace) is automatically considered to be a variable and NOT a function, and thus doesn't register as a hit. There are exotic cases where this won't be correct, but they're pretty unlikely in real code. * Added a "--falsepositive" (-F) option, which tries to remove many more likely false positives.
2004-06-21update to 0.42drochner3-21/+27
Many fixes and feature additions since 0.38. Too many to list here.
2004-06-21Update to 0.4.4:jmmv4-20/+8
This is mainly a bugfix release. Sometimes EOF was not properly detected while reading the password file. This would result in an 'Line too long' error message (and some wierd behavour). Also, the current password file is now backed up before each write.
2004-06-17upgrade to 20040617a. includes important certificate mangement change.itojun2-7/+7
2004-06-15Add and enable openssh+gssapi.kristerw1-1/+2
2004-06-15Resurrect openssh+gssapi per request of jwise@.kristerw16-0/+568
2004-06-14Update priv to 1.0beta2nb1.uebayasi1-1/+4
* Make sure ${PKG_SYSCONFDIR} is passed to configure. * Care ${PRIV_CONF_DIR} as an obsoleted variable. Pointed out by Matt Green.
2004-06-10Convert to subst.mk.jmmv1-4/+6
2004-06-10Fix build (SSL not found during configuration, causing missing includes).jmmv1-2/+2
Problem probably introduced during the conversion to buildlink3. Exposed by latest kristerw@'s bulk build in NetBSD 2.0_BETA/i386.
2004-06-08Add USE_INET6 to BUILD_DEFS as these packages use it. Part of PR#25743 fromcjep1-1/+3
Georg Schwarz.
2004-06-06Add simple rc.d script. Bump PKGREVISION.schmonz2-2/+21