Commit graph

20 commits

Author SHA1 Message Date
Oliver Eikemeier
10813956a8 update to 0.3.1:
- use passive ftp by default, don't retry on failure [1]
- add a -C flag, portlint style
- don't keep databases that are tool old [2]

Requested by:	hubs [1]
Noticed by:	Nicolas Rachinsky <nicolas@rachinsky.de> [2]
2004-03-31 22:52:01 +00:00
Oliver Eikemeier
1832c23a94 Update to 0.3.
Since we are using the official VuXML database
the auditing should be pretty complete.

- mention web page
- add more mirrors, disabling .ru mirror (too much lag)
- allow combined options in portaudit shell script
- add sample configuration file
- use absolute paths for binaries, to ease use in crontab scripts [1]
- correct type in man page [2]

PR:		64005 [2]
Submitted by:	Tomasz Pilat <poncki@axelspringer.com.pl> [1]
		Nathan Dove <njdove@wafer.sandia.gov> [2]
2004-03-11 11:11:59 +00:00
Oliver Eikemeier
598dedc510 grammar
Submitted by:	will, nectar
2004-02-25 14:12:03 +00:00
Oliver Eikemeier
16af0c01c0 add a security contact 2004-02-25 12:47:13 +00:00
Oliver Eikemeier
6cd6202ef7 - bugfix: awk in -CURRENT accepts no regexes in RS, causing the database
update to fail

- add an install & deinstall message

Submitted by:	nectar & Ion-Mihai Tetcu <itetcu@apropo.ro>
2004-02-25 09:46:26 +00:00
Oliver Eikemeier
dd190f52fe update to 0.2:
- new command line tool
- new man page
- reworked database update code, incorporating feedback from
  Max Khon <fjoe>, Radim Kolar <hsn@netmag.cz> (PR 63066) and
  Ion-Mihai Tetcu <itetcu@apropo.ro> (PR 62655)
2004-02-21 21:19:41 +00:00
Oliver Eikemeier
5ef80c7ef0 Disable auditfile.txt until we decide on a database format,
two databases cause more confusion than it is worth.

portaudit uses ports/security/vuxml/vuln.xml in the meantime,
please commit your changes there and send feedback wich format
you prefer.

Currently we have to migrate gnats, mailman, monkey and some
apache versions.
2004-02-19 02:19:33 +00:00
Oliver Eikemeier
2ea4608d31 add bind, pine, samba 3.x 2004-02-17 12:28:13 +00:00
Oliver Eikemeier
2f1bc26f47 remove duplicate mutt entry, sorry. 2004-02-16 20:19:53 +00:00
Oliver Eikemeier
3fcca49ba6 add mutt and mailman 2004-02-16 19:14:24 +00:00
Oliver Eikemeier
f78667fc99 XFree86-Server font file buffer overflows 2004-02-16 18:41:05 +00:00
Oliver Eikemeier
c9d6de4408 add GNATS3 2004-02-16 15:02:04 +00:00
Oliver Eikemeier
dcb711e3ef require gaim version 0.75_6, since the vulnerability has been re-introduced
add libtool symlink vulnerability
2004-02-13 14:20:15 +00:00
Oliver Eikemeier
d873cb4b08 add fspd <= 2.8.1.3
PR:		62747
Submitted by:	Radim Kolar <hsn@netmag.cz>
2004-02-13 01:22:49 +00:00
Clement Laforet
88f171bfd3 Add mutt < 1.4.2 vulnerabilty. 2004-02-11 18:28:18 +00:00
Oliver Eikemeier
89e295c836 add an URL where at least somek kind of advisory for monkeyd can be found... 2004-02-11 11:54:29 +00:00
Clement Laforet
51242e4c41 Add entries for:
- www/apache13-ssl<1.3.29.1.53
	- www/monkey < 0.8.2
2004-02-11 00:07:28 +00:00
Oliver Eikemeier
14c08ca6ff add clamav<0.65_7
PR:		62586
2004-02-10 14:11:14 +00:00
Oliver Eikemeier
5ddd771fd6 Add some more examples (inn, apache) to test combined >= & < relations 2004-01-28 16:19:08 +00:00
Oliver Eikemeier
34522b5af1 portaudit provides a list of published security vulnerabilities
of FreeBSD ports and tools to check if installed ports are listed.

Since this is a prerelease version, it is mostly usable for
committers that want to contribute to the project, and can currently
not be relied upon as an extensive security auditing tool.
2004-01-27 19:24:52 +00:00