Commit graph

961 commits

Author SHA1 Message Date
skrll
bd6e00dc75 Record libssl dependency on libcrypt.
This allows a mixture of 1.5.x openssl (version<0.9.5) and security/openssl
(version>=0.9.6) to actually work.
2001-08-30 14:02:06 +00:00
skrll
41c724207c Fix version logic in 0.9.6a case. 2001-08-30 10:14:24 +00:00
ad
248077b5e0 Add & enable qident. 2001-08-28 10:42:56 +00:00
ad
8262ecc149 qident, a small program to query a remote ident server using libident. 2001-08-28 10:39:35 +00:00
tron
a68a277b43 Use wildcard dependence on "autoconf" package. 2001-08-27 14:35:04 +00:00
skrll
ec3aee670c Update automake to 1.4-p5 (1.5 is available)
Include a bugfix for lisp_LISP independently discovered by me that has
been pulled up to the automake-1-4 branch of automake cvs.

Changes are:
New in 1.4-p5:
* Allow AM_PROG_LIBTOOL again.
* Diagnose AC_CONFIG_HEADERS the same as AC_CONFIG_HEADER.
* Display distributed file list correctly in usage message.
* Allow numbers in macro names.
* Bugfixes.

New in 1.4-p4:
* Deal with configure.ac as well as configure.in -- this time for real!
* The version numbering system now allows three point version numbers,
  such as 1.4.4, without thinking they are alpha release numbers.

New in 1.4-p3:
* Deal with configure.ac as well as configure.in.
* Don't complain if `version.texi' is included in multiple places.

New in 1.4-p2:
* Deal with AC_CONFIG_FILES from autoconf-2.50.
* Improvements to f77 support.
* DESTDIR now works for script targets.
* distcheck-hook works correctly.

New in 1.4-p1:
* The version numbering system now allows fork identifiers (such as
  the p1 in this version of automake).
* Cope gracefully with various versions of libtool which may or may not
  require ltconfig, ltcf-c.sh, ltcf-cxx.sh or ltcf-gcj.sh.
* Bugfixes.
2001-08-26 10:32:18 +00:00
martin
7b8e4113f8 Update of stunnel to version 3.20, from Martti Kuparinen in PR pkg/13728.
Changelog for version 3.20, 2001.08.15, urgency: LOW:

* setsockopt() optlen set according to the optval for Solaris.
* Minor NetBSD compatibility fixes by Martti Kuparinen.
* Minor MSVC6 compatibility fixes by Patrick Mayweg.
* SSL close_notify timeout reduced to 10 seconds of inactivity.
* Socket close instead of reset on close_notify timeout.
* Some source arrangement and minor bugfixes.
2001-08-19 16:26:07 +00:00
kim
5618d7417c Make this work more like the ssh package:
- don't install setuid unless SSH_SUID=YES
- use libwrap (--with-tcp-wrappers) on NetBSD

I also want to fix S/Key support and Kerberos IV,
so I've left some comments in Makefile for that.
2001-08-17 19:49:08 +00:00
jun
ed3aea5f78 Update smimemsg to 1.4
- add RC2-64,RC2-128,DES,Triple-DES
 - update aicrypto lib
 - some fixes,with -p7 option
2001-08-17 05:58:07 +00:00
jun
ef65348c9f now security fix contains main trunk. 2001-08-17 05:06:07 +00:00
jun
e00ea865b9 Update AiSSLtelnet to 0.15
- Fix telnetd origin security hole.
2001-08-17 05:04:29 +00:00
frueauf
8accc3d017 Update libnasl and nessus{-core,-libraries,plugins} to 1.0.9.
- increased login timeout
- fixed a possible deadlock in libpeks
- fixed a bug which would cause the client to crash when sending a too
  long plugin list
- fixed the 'too many plugins selected' bug that would make the
  client crash
- workaround for a Linux bug^H^H^Hfeature that makes recv()
  behave completely differently than the rest of the world
  (thanks to Andreas Steinmetz)
- fixed http://install.nessus.org to better work on Solaris
- various minor issues
- several new plugins
2001-08-16 17:27:53 +00:00
jun
0094e230c6 Update pgpdump to 0.12
* Portability hack.
2001-08-16 09:01:59 +00:00
jlam
4bd463261c * This package doesn't need suse_libc5 anymore...suse_compat is enough.
* Remove make for loop and replace with shell for loop
* Add an RCS ID and comment to uvscan.sh.
* Remove unnecessary whitespace from DESCR.
2001-08-16 05:09:21 +00:00
jlam
5bb4885157 Just use @dirrm. 2001-08-16 04:51:49 +00:00
jlam
08871b3738 Update security/uvscan-dat to 4154. Modify package so that it may
deinstall cleanly with pkg_delete, and make the update_dat script more
robust by fetching to a temporary directory, and only moving the new
DAT files into place if the fetch and untar was successful.
2001-08-16 00:01:24 +00:00
jlam
e085ee5316 grep isn't used anymore, so don't substitute for @GREP@ in the INSTALL
files.  Substitute for @ID@ instead of directly using 'id', and use the
value of ${ID} already set in defs.*.mk.
2001-08-14 03:41:37 +00:00
rh
7bd8f06746 Update uvscan-dat to 4.1.53 (the old distfile is no longer available).
Changes are updated and enhanced virus definition data.
2001-08-13 15:10:40 +00:00
veego
0127d54187 Fix same problems with the user check:
- use 'id' instead of 'finger'. this is not a real problem but it
  is enough and fixing the next problem makes it possible to use it.
- grep -q doesn't work on solaris, so use a different way to suppress
  the output from the user check.
- the return code check for the user was reversed.
2001-08-12 19:45:18 +00:00
martin
a25568677c Update stunnel to version 3.19.
Based on PR pkg/13679 by Martti Kuparinen.

Changelog for version 3.19, 2001.08.10, urgency: MEDIUM:

* Critical section added around non MT-safe TCP Wrappers code.
* Problem with "select: Interrupted system call" error fixed.
* errno replaced with get_last_socket_error() for Win32.
* Some FreeBSD/NetBSD patches to ./configure from Martti Kuparinen.
* Local mode process pid logged.
* Default FQDN (localhost) removed from stunnel.cnf
* ./configure changed to recognize POSIX threads library on OSF.
* New -O option to set socket options.
2001-08-10 14:41:18 +00:00
wiz
2827dd59ac Wildcard dewey for kth-krb4. 2001-08-09 19:29:46 +00:00
nra
93ac27b699 Add CVS id. 2001-08-09 15:17:53 +00:00
nra
e66518145e buildlink-ify. 2001-08-09 15:13:52 +00:00
itojun
00af74fa3f update. fix compilation on alpha. 2001-08-06 08:25:12 +00:00
jun
840d01b00a Update rats to 1.1
New in version 1.1:
        Ability to scan Perl programs for vulnerabilites.
        Ability to scan Python programs for vulnerabilities.
2001-08-06 06:10:50 +00:00
jlam
d7fd38173d Mark as USE_BUILDLINK_ONLY. 2001-08-02 17:27:41 +00:00
itojun
f36045ed80 embed pkg version into binary to help diagnosis. 2001-08-02 15:25:15 +00:00
itojun
63ac378e8a say goodbye to security/ssh6. per comments on packages@netbsd. 2001-08-02 12:55:20 +00:00
wennmach
3cc3468b6a The telnetd in kth-krb4-1.0.1 seems to be vulnerable to the buffer overflow
attack described in SA2001-12 (noted by T. M. Pederson <salvage@plethora.net>
in PR pkg/13610).

Instead of applying the patch submitted by T. M. Pederson, we upgrade
kth-krb4 to 1.0.9 where the vulnerability has been fixed.

The upgrade to 1.0.9 was provided by Assar Westerlund <assar@netbsd.org>
and slightly modified by myself.

Also included is diff file for /etc/services for NetBSD-1.5 (and 1.5.1)
also submitted by T. M. Pederson <salvage@plethora.net> in PR 12540.

Note: files/services.diff resurfaces as files/services-1.4.2.diff.

Closes PR 13610 and PR 12540.
2001-08-02 12:46:48 +00:00
itojun
1649deedd0 make it at least compile on netbsd151 systems. kernel API diffs should be
wrapped by configure.in scripts, however, we don't use them for libipsec part.
2001-08-02 12:44:18 +00:00
itojun
fbd1cf1497 GNORE, as it has security holes left behind, and the patch
is not maintained any more.  use openssh.
2001-08-02 12:32:33 +00:00
itojun
6bec204d53 upgrade to 2001/8/2 KAME tree. whole bunch of stabilization were made. 2001-08-02 12:22:54 +00:00
jun
871b8207e7 Apply:
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2001-012-telnetd.patch

see also
 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc
2001-07-30 15:24:06 +00:00
wiz
6818af459f Update to 4150. Old one vanished, new one will probably contain lots more
virus signatures.
2001-07-28 18:03:53 +00:00
jlam
68399b4207 Convert to use buildlink.mk files and mark as USE_BUILDLINK_ONLY.
Fixes pkg/13568.
2001-07-27 14:46:10 +00:00
jlam
d2eb68d2a6 Add dir_DEFAULT setting used by EVAL_PREFIX logic to set the default
installation directory in case the package isn't installed.
2001-07-27 13:33:18 +00:00
jlam
8378ed89ea Use new USE_OPENSSL_VERSION setting to force at least OpenSSL-0.9.6. 2001-07-26 04:44:10 +00:00
jlam
22e231e3a4 Re-add accidentally removed do-build target. -current doesn't need it, but
1.5.x does.
2001-07-24 09:55:34 +00:00
martin
2652afb096 Update to version 3.16.
Changes:
* Some transfer() bugfixes/improvements.
* STDIN/STDOUT are no logner assumed to be non-socket decriptors.
* Problem with --with-tcp-wrappers patch fixed.
* pop3 and nntp support bug fixed by Martin Germann.
* -o option to append log messages to a file added.
* Changed error message for SSL error 0.

Provided by Martti Kuparinen in PR 13537.
2001-07-23 10:03:09 +00:00
taca
a3c97f5de5 Update ruby-ssl to 0.3.1c.
Fri Jul 20 01:26:07 2001  GOTOU YUUZOU  <gotoyuzo@notwork.org>

	* ssl.c (Init_ssl): regardless of scope state, accessors
	  should be public. It is required with 1.6.4 (2001-06-04).
2001-07-22 12:36:09 +00:00
tron
f75218bff5 Use "ftp.fu-berlin.de" as first master site because it is about a thousand
time faster from Germany and the USA.
2001-07-20 09:58:29 +00:00
jlam
dd30dabc8c Mechanical changes to buildlink.mk files to use EVAL_PREFIX to set
BUILDLINK_PREFIX.<pkgname>.  This allows buildlink to find X11BASE packages
regardless of whether they were installed before or after xpkgwedge was
installed.  Idea by Alistair Crooks <agc@pkgsrc.org>.
2001-07-20 01:54:51 +00:00
jlam
f79b2df20a Mechanical changes to buildlink.mk files to use EVAL_PREFIX to set
BUILDLINK_PREFIX.<pkgname>.  This allows buildlink to find X11BASE packages
regardless of whether they were installed before or after xpkgwedge was
installed.  Idea by Alistair Crooks <agc@pkgsrc.org>.

Also overhaul code to specify the minimum version of OpenSSL needed by
a dependent package.  We now set USE_OPENSSL_VERSION to the version number
in <openssl/opensslv.h>.  Idea also by Alistair Crooks <agc@pkgsrc.org>.
2001-07-20 01:54:50 +00:00
jlam
7b1d3cb465 Mechanical changes to buildlink.mk files to use EVAL_PREFIX to set
BUILDLINK_PREFIX.<pkgname>.  This allows buildlink to find X11BASE packages
regardless of whether they were installed before or after xpkgwedge was
installed.  Idea by Alistair Crooks <agc@pkgsrc.org>.
2001-07-20 01:54:31 +00:00
taca
5b1a78371d Update ruby-ssl to 0.3.1b and utilize USE_OPENSSL_096 for work well
in NetBSD 1.5.1.
2001-07-19 12:44:18 +00:00
martin
67a1283c23 We do not need pthreads (as it doesn't work for stunnel), so don't depend
on pth.
2001-07-19 12:28:03 +00:00
martin
64bebb655e Update stunnel to 3.15.
Based on a pkg provided by Martti Kuparinen in PR 13484.

Changes include:

* Serious bug resulting in random transfer() hangs fixed.
* Separate file descriptors are used for inetd mode.
* -f (foreground) logs are now stamped with time.
* New ./configure option: --with-tcp-wrappers by Brian Hatch.
* pop3 protocol client support (-n pop3) by Martin Germann.
* nntp protocol client support (-n nntp) by Martin Germann.
* RFC 2487 (smtp STARTTLS) client mode support.
* Transparency support for Tru64 added.
* Some #includes for AIX added.
2001-07-19 12:22:17 +00:00
jlam
8559bffd4c Allow definition of USE_OPENSSL_096 force a minimum dependency of
openssl>=0.9.6.
2001-07-18 18:03:16 +00:00
nra
d044079801 Fix patch-ab to not have hardcoded /usr/pkg. 2001-07-17 15:50:31 +00:00
wiz
0fff203906 Use MESSAGE_SUBST (and its default settings) instead of manually doing
the same.
2001-07-17 15:16:17 +00:00