summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2005-01-23Update to Ruby 1.8.2 base and thses changes:taca1-3/+3
o Use Ruby's version instead of its own (old) version.
2005-01-23Update Ruby 1.8.2.taca1-1/+2
This is basically bug fix release, but official changes aren't provided yet. Please refer ChangeLog. Here is pkgsrc changes: o Set RUBY_HAS_ARCHLIB=yes for Ruby packages including archtecture depending extention library in order to depend more specific Ruby. o Now install database for ri(1). Fix PR pkg/28566. o Net::IMAP * lib/net/imap.rb (u8tou16): fixed typo. fixed: [ruby-list:40546] o NKF: * ext/nkf/nkf-utf8/nkf.c (reinit): should initialize all static variables. fixed: [ruby-list:40445] * ext/nkf/lib/kconv.rb (Kconv::RegexpEucjp): second byte is up to 0xfe. * ext/nkf/lib/kconv.rb (Kconv#kconv): should handle UTF8 and UTF16 properly. o WEBrick * lib/webrick/httpauth/htpasswd.rb (WEBrick::Htpasswd#reload): raise NotImplementedError if password is encrypted by digest algorithms. This patch is contributed by sheepman. [ruby-list:40467] * lib/webrick/httpauth/digestauth.rb (WEBrick::HTTPAuth::DigestAuth#_authenticate): fix digest calculation. This patch is contributed by sheepman. [ruby-list:40482] * lib/webrick/{httpauth.rb,httpauth/basicauth.rb,httpproxy.rb}: use pack/unpack-template char "m" instead of lib/base64.rb to do base64 encoding/decoding. fixed: [ruby-dev:25336]
2005-01-23Fix homepage, pointed out by Jeremy C. Reed.peter1-2/+2
2005-01-22Renamed tls to tcl-tls.peter1-2/+2
2005-01-22Reimported as security/tcl-tls.peter8-93/+0
2005-01-22Reimport as security/tcl-tls, suggested by Christoph Badura.peter8-0/+93
TLS (aka SSL) Channel - can be layered on any bi-directional Tcl_Channel. Both client and server-side sockets are possible, and this code should work on any platform as it uses a generic mechanism for layering on SSL and Tcl.
2005-01-22Note addition of tinyca-0.6.7adrianp1-1/+2
2005-01-22TinyCA is a simple graphical userinterface written in Perl/Gtk to manage aadrianp4-0/+75
small CA (Certification Authority). TinyCA works as a frontend for openssl. This is tinyca-0.6.7
2005-01-22Pass -DSYSCONFDIR="$sysconfdir" in the Makefile instead of the configurejlam4-15/+17
script to avoid bizarre quoting problems within the configure script. This also fixes the definition of SYSCONFDIR in the compiled library. Bump the PKGREVISION to 1.
2005-01-22Fix C99-isms to make this pkg build with gcc 2.95.kristerw1-2/+2
2005-01-22Make tct build and run on NetBSD 2.0 and bump PKGREVISION.ben16-82/+190
This does not add support for ffsv2 filesystems nor superblocks. This addresses PR#28357.
2005-01-22Add tls.peter1-1/+2
2005-01-22Initial import of tls-1.5.0 into the NetBSD Packages Collection.peter8-0/+93
TLS (aka SSL) Channel - can be layered on any bi-directional Tcl_Channel. Both client and server-side sockets are possible, and this code should work on any platform as it uses a generic mechanism for layering on SSL and Tcl.
2005-01-19really depend on nessus-libraries>=2.2.2a since >=2.2.0 does not workfrueauf1-2/+2
on alpha as seen in pr pkg/28969. libnasl 2.2.2a needs nessus-libraries 2.2.2a to compile properly.
2005-01-19Add patch for libnessus/share_fd.c to compile with gcc shipped withfrueauf2-1/+19
NetBSD 1.5.4_ALPHA (missing __func__ definition).
2005-01-19Remove nb1 from version as pointed out by Bernd Ernesti.frueauf1-3/+3
2005-01-18Do a "flush all" in the stop command. From Miles Nordin.peter1-2/+2
2005-01-18Update to 20050118.peter2-6/+5
Changes: * Updated the ALTQ patch, now works correctly on NetBSD 2.0 release. Thanks to Miles Nordin for helping and testing. * Write struct "pcap_sf_pkthdr" instead of "pcap_pkthdr". Fixes an LP64 specific problem with reading the pflog with tcpdump(8). * Applied patch to pf.c from OPENBSD_3_6 branch: ICMP state entries use the ICMP ID as port for the unique state key. When checking for a usable key, construct the key in the same way. Otherwise, a colliding key might be missed or a state insertion might be refused even though it could be inserted. The second case triggers the endless loop fixed by 1.474, possibly allowing a NATed LAN client to lock up the kernel. Report and test data by Srebrenko Sehic. * Applied patch to pf_lkm.c from NetBSD HEAD: pfil4_wrapper: clear M_CANFASTFWD which is not compatible with pf. * Applied patch to pf_ioctl.c from OPENBSD_3_6 branch: replace finer-grained spl locking in pfioctl() with a single broad lock around the entire body. this resolves the (misleading) panics in pf_tag_packet() during heavy ioctl operations (like when using authpf) that occur because softclock can interrupt ioctl on i386 since SMP. * Applied patch to pf.c from OPENBSD_3_6 branch: IPv6 packets can contain headers (like options) before the TCP/UDP/ICMP6 header. pf finds the first TCP/UDP/ICMP6 header to filter by traversing the header chain. In the case where headers are skipped, the protocol checksum verification used the wrong length (included the skipped headers), leading to incorrectly mismatching checksums. Such IPv6 packets with headers were silently dropped. Reported by Bernhard Schmidt. * Applied patch to pfctl_optimize.c from OPENBSD_3_6 branch: &&/|| inversion would try to merge IP addresses with non-addresses into a single table causing a ruleset load error and eventually a double-free. * Applied patch to pf.c from OPENBSD_3_6 branch: Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN, prevents a possible endless loop in pf_get_sport() with 'static-port' * Fix to if_events.diff from Miles Nordin <carton at Ivy dot NET>: Call free after removing the element from the list, not before. Fixes panic with "unaligned access" on Alpha.
2005-01-18update to 0.44drochner5-25/+49
changes: -IPv6 support -client added -bugfixes XXX dropbear wants to use /dev/random per default now which makes it unusable on systems w/o entropy source. I've patched it back to /dev/urandom. There might be security concerns.
2005-01-18It's not very useful to include <sys/select.h> in only one source filetv3-1/+36
when other source files depend on fd_set being defined in a local header. (Required on Interix, which does not expose <sys/select.h>/<sys/time.h> automagically via other system headers as some OS's do by default.)
2005-01-18when building with SunPro on x86, do not use -fast argument to cc(1)grant2-4/+13
because: - its behaviour changes between releases - it uses build-host specific instructions where possible, specifically on >= Solaris 9 update 6 and Sun Studio 9 (sse, sse2) this breaks using the binary pkg when installed on systems with a less capable processor. instead, just use -xO5 so the binary pkg will work everywhere.
2005-01-17Update to release 1.9.15. This is a bug fix release.shannonjr3-25/+12
2005-01-17OpenPAM doesn't really need perl during the build... it's only therejlam1-3/+4
to regenerate some documentation files, but the regen is unnecessary. Fix the post-tools target that created a dummy perl -- it was failing because ${TRUE} may not be an actual executable (it could be a shell builtin) and thus symlinking to it may not work.
2005-01-17According to the bulk builds, this needs perl;wiz1-1/+2
add USE_PERL5=build.
2005-01-14Upgrade to 2.3adrianp3-70/+469
- Complete overhaul of the Framework payload collection + Win32 ordinal-stagers are now included (92-byte reverse connect) + A handful of new sparc payloads have been added (sol, linux, bsd) + Reliability problems have been resolved in bsd, linux, and win32 + New udp-based linux shell stagers and shell payloads + New size-optimized Mac OS X encoders and payloads - Includes the win32 version of the Meterpreter + Dynamically load new features over the network w/o disk access + In-memory dll injection of the basic meterpreter shell + Current extensions include Fs, Process, Net, and Sys + Extensive documentation is available online: * http://metasploit.com/projects/Framework/docs/meterpreter.pdf - Complete rewrite of the 'msfweb' user interface + Generate and encode stand-alone shellcode from the web interface + The interface is skinnable and includes three different themes + Streaming HTTP is used to provide a 100% web-based shell + Ability to set advanced options in the web interface - Massive speed enhancements in msfconsole and msfweb + Snappier response and quicker load times on older systems + Optimizations made to various sort/search algorithms + Modules are no longer reloaded after each exploit - New exploits + Microsoft WINS Service Memory Overwrite (MS04-045) + Samba trans2open() Buffer Overflow (Mac OS X) + 4D WebSTAR FTP Server Buffer Overflow (Mac OS X) + Veritas Name Service Registration Buffer Overflow + AOL Instant Messenger 'goaway' Buffer Overflow + IPSwitch IMail IMAPD 'delete' Buffer Overflow + Seattle Labs Mail Server POP3 Buffer Overflow + UoW IMAPD Buffer Overflow (sparc, ia32) + IRIX lpdsched Remote Command Execution + CDE dtspcd Buffer Overflow (Solaris) + IIS 4.0 ism.dll HTR Buffer Overflow + IIS w3who.dll ISAPI Buffer Overflow
2005-01-14- Updated to v1.0 (No CHANGELOG available)adrianp5-28/+82
- Use options.mk framework for python and rrdtool support
2005-01-14Re: pkg/28968: pinentry breaks on buildshannonjr1-1/+3
Added dependancy on libconv to fix breakage reported on NetBSD 1.6.2 alpha
2005-01-14Changes 1.2.1:adam3-30/+9
* Portability fixes, memory allocation fixes and other minor things. * Support to build as a W32 static library. * Changed the way the RNG gets initialized. This allows to keep it uninitialized as long as no random numbers are used. To override this, the new macro gcry_fast_random_poll may be used. It is in general a good idea to spread this macro into the application code to make sure that these polls happen often enough.
2005-01-14- Update to 1.7adrianp3-7/+25
- Add bl3 and openssl support - Fix paths in man pages - Install extra documentation - Remove un-needed options from pkgsrc Makefile Lots of changes/bugfixes from 1.6 including: psk-crack.c: New program to crack Aggressive Mode Pre-Shared Keys using dictionary attack. This uses the output from "ike-scan -P" together with a dictionary.
2005-01-14Modify linux-pam and solaris-pam builtin.mk files to be more generaljlam1-18/+19
in their tests for built-in versions of the PAM implementations. The MacOS X case now collapses nicely into the linux-pam case. Allow pam.buildlink3.mk to use solaris-pam as an accepted PAM implementation.
2005-01-14Fix spelling error that would have made this file inefficient.jlam1-2/+2
2005-01-14Switch to using pam.buildlink3.mk.jlam1-2/+2
2005-01-14Create a pam.buildlink3.mk file that is used by PAM-using packages.jlam9-23/+23
It includes the correct buildlink3.mk file from either Linux-PAM (security/PAM) or OpenPAM (security/openpam) and eventually will support solaris-pam. pam.buildlink3.mk will: * set PAMBASE to the base directory of the PAM files; * set PAM_TYPE to the PAM implementation used. There are two variables that can be used to tweak the selection of the PAM implementation: PAM_DEFAULT is a user-settable variable whose value is the default PAM implementation to use. PAM_ACCEPTED is a package-settable list of PAM implementations that may be used by the package. Modify most packages that include PAM/buildlink3.mk to include pam.buildlink3.mk instead.
2005-01-14Rename the multiple inclusion guard to LINUX_PAM_BUILDLINK3_MK.jlam1-5/+5
2005-01-14* Rename the buildlink module name associated with the security/PAMjlam5-37/+49
package from "pam" to "linux-pam". * Rewrite PAM/builtin.mk to check that we have Linux-PAM, and re-classify MacOS X's PAM as Linux-PAM because it _is_, according to to Apple. Also don't use BUILDLINK_TRANSFORM.* to rewrite header file paths -- just use a symlink so that <security/*.h> can be used to find <pam/*.h>.
2005-01-13Add a builtin.mk file to check for a built-in version of openpam and tojlam1-0/+40
associate it with a PKGNAME.
2005-01-13Add a buildlink3.mk file for openpam.jlam1-0/+20
2005-01-13This package dlopen()s loadable modules, so include dlopen.buildlink3.mkjlam1-1/+3
to do the right thing on NetBSD-2.0.
2005-01-13Note conflict with openpam-[0-9]*.jlam1-1/+3
2005-01-13Add and enable openpam.jlam1-1/+2
2005-01-13Initial import of openpam-20040210 as security/openpam.jlam6-0/+147
OpenPAM is an open source PAM library that focuses on simplicity, correctness, and cleanliness. OpenPAM aims to gather the best features of Solaris PAM, XSSO and Linux-PAM, plus some innovations of its own. In areas where these implementations disagree, OpenPAM tries to remain compatible with Solaris, at the expense of XSSO conformance and Linux-PAM compatibility. These are some of OpenPAM's features: - Implements the complete PAM API as described in the original PAM paper and in OSF-RFC 86.0; this corresponds to the full XSSO API except for mappings and secondary authentication. Also implements some extensions found in Solaris 9. - Extends the API with several useful and time-saving functions. - Performs strict checking of return values from service modules.
2005-01-13Fix multiple useless C99isms. Should fix the build with GCC 2.95.jmmv5-1/+137
Spotted by latest NetBSD 1.6.2/i386 kristerw@'s bulk build.
2005-01-13Bump PKGREVISION to 1 as a result of fixing the run-time behavior ofjlam1-1/+2
openssl on sparc64 and amd64 in the previous commit.
2005-01-13Optimize the NetBSD/amd64 config a bit to improve RC4 performance, andjlam2-5/+5
fix the NetBSD/sparc64 config by adding -DMD32_REG_T=int to the flags. Tested by martin (at) NetBSD.org. This should fix PR pkg/28858.
2005-01-12Use PKG_SYSCONFDIRkim1-1/+4
2005-01-12Make this build on NetBSD -current which uses OpenPAM (should fix thextraeme2-1/+150
build with FreeBSD too). Patch stolen from FreeBSD/ports.
2005-01-12BUILDLINK_TRANSFORM is not enough to buildlink the files when usingxtraeme1-1/+5
OpenPAM (NetBSD/FreeBSD), so use BUILDLINK_FILES to right directory.
2005-01-11Fix build on NetBSD/sparc64 by marking the system as ``ULTRASPARC''jlam2-19/+19
so that the appropriate OpenSSL sources are built. Also, explicitly mark the endianness of each supported NetBSD platform to avoid potential endianness issues when doing the crypto arithmetic.
2005-01-11Fix compilation on Interix. Reported in PR pkg/28938tv2-4/+4
by HIRAMATSU Yoshifumi <hiramatu@boreas.dti.ne.jp>.
2005-01-11+p5-Digest-CRCtv1-1/+2
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-20 01:26:34 +0000