pkgsrc/security
wiz 9ac74e840c Update to 3.9p1:
* Added new "IdentitiesOnly" option to ssh(1), which specifies that it should
   use keys specified in ssh_config, rather than any keys in ssh-agent(1)

 * Make sshd(8) re-execute itself on accepting a new connection. This security
   measure ensures that all execute-time randomisations are reapplied for each
   connection rather than once, for the master process' lifetime. This includes
   mmap and malloc mappings, shared library addressing, shared library mapping
   order, ProPolice and StackGhost cookies on systems that support such things

 * Add strict permission and ownership checks to programs reading ~/.ssh/config
   NB ssh(1) will now exit instead of trying to process a config with poor
   ownership or permissions

 * Implemented the ability to pass selected environment variables between the
   client and the server. See "AcceptEnv" in sshd_config(5) and "SendEnv" in
   ssh_config(5) for details

 * Added a "MaxAuthTries" option to sshd(8), allowing control over the maximum
   number of authentication attempts permitted per connection

 * Added support for cancellation of active remote port forwarding sessions.
   This may be performed using the ~C escape character, see "Escape Characters"
   in ssh(1) for details

 * Many sftp(1) interface improvements, including greatly enhanced "ls" support
   and the ability to cancel active transfers using SIGINT (^C)

 * Implement session multiplexing: a single ssh(1) connection can now carry
   multiple login/command/file transfer sessions. Refer to the "ControlMaster"
   and "ControlPath" options in ssh_config(5) for more information

 * The sftp-server has improved support for non-POSIX filesystems (e.g. FAT)

 * Portable OpenSSH: Re-introduce support for PAM password authentication, in
   addition to the keyboard-interactive driver. PAM password authentication
   is less flexible, and doesn't support pre-authentication password expiry but
   runs in-process so Kerberos tokens, etc are retained

 * Improved and more extensive regression tests

 * Many bugfixes and small improvements
2004-08-31 11:27:11 +00:00
..
AiCA use buildlink3 for compiler specific flag stripping. fixes build on 2004-06-27 13:42:46 +00:00
aide this needs flex and bison to build. fixes build on Solaris. 2004-06-27 13:23:40 +00:00
aide06 this needs flex and bison to build. fixes build on Solaris. 2004-06-27 13:23:40 +00:00
AiSSLtelnet Fix compile problem under gcc 3.3.3. 2004-03-25 15:23:40 +00:00
amavis COMMENT should start with a capital letter. 2003-07-21 17:10:16 +00:00
amavis-perl Set USE_BUILDLINK3, since this package already includes a bl3 file. 2004-07-29 00:59:53 +00:00
amavisd-new Change the way that legacy USE_* and FOO_USE_* options are converted 2004-08-22 19:32:51 +00:00
antonym add 75-char double-dashed lines 2004-05-07 12:05:10 +00:00
apg this needs -lnsl on Linux and -lnsl -lsocket on Solaris. 2004-06-27 13:16:36 +00:00
arirang this blindly calls "gcc" so use buildlink3 so it uses the wrapper. 2004-06-27 13:13:23 +00:00
audit-packages Update audit-packages to 1.32, with fixes for the problems mentioned 2004-06-06 08:28:54 +00:00
avcheck this blindly calls "gcc", so use buildlink3 so it uses the wrappers. 2004-07-25 04:57:11 +00:00
beecrypt Convert to buildlink3. 2004-04-12 20:50:27 +00:00
bitstir Convert to buildlink3 and make pkglint happy. 2004-04-25 03:02:53 +00:00
cfs Unfortunately, "mountd" REQUIREs "mountall", causing a circular dependency 2004-08-03 04:35:42 +00:00
chkrootkit Use versioned distfile. 2004-05-27 01:22:55 +00:00
crack homepage has moved 2004-03-23 23:02:30 +00:00
crypto++ Import crypto++ from pkgsrc-wip. Packaged by Sergio Jimenez and 2004-07-26 15:18:44 +00:00
cy-login PKGREVISION bump after openssl-security-fix-update to 0.9.6m. 2004-03-26 02:27:34 +00:00
cy2-anonymous Initial import of security/cy2-anonymous, the SASL ANONYMOUS AUTH plugin. 2004-08-13 18:12:58 +00:00
cy2-crammd5 Initial import of security/cy2-crammd5, the SASL CRAM-MD5 AUTH plugin. 2004-08-13 18:13:28 +00:00
cy2-digestmd5 Initial import of security/cy2-digestmd5, the SASL DIGEST-MD5 AUTH plugin. 2004-08-13 18:13:52 +00:00
cy2-gssapi Initial import of security/cy2-gssapi, the SASL GSSAPI AUTH plugin. 2004-08-13 18:14:04 +00:00
cy2-login Cosmetic changes. 2004-08-13 07:11:57 +00:00
cy2-ntlm Cosmetic changes. 2004-08-13 07:11:57 +00:00
cy2-otp Initial import of security/cy2-otp, the SASL OTP AUTH plugin. 2004-08-13 18:14:19 +00:00
cy2-plain Initial import of security/cy2-plain, the SASL PLAIN AUTH plugin. 2004-08-13 18:14:32 +00:00
cy2-sql Change the way that legacy USE_* and FOO_USE_* options are converted 2004-08-22 19:32:51 +00:00
cyrus-sasl Change the way that legacy USE_* and FOO_USE_* options are converted 2004-08-22 19:32:51 +00:00
cyrus-sasl2 Split out the plugins into individual packages. This allows us to 2004-08-13 18:08:02 +00:00
cyrus-saslauthd Change the way that legacy USE_* and FOO_USE_* options are converted 2004-08-22 19:32:51 +00:00
ddos-scan Make this package compile when using gcc 3.3. 2004-05-23 23:03:40 +00:00
destroy regen to remove unused entries. 2004-04-17 12:15:04 +00:00
dropbear Updated dropbear to 0.43 2004-08-31 10:27:38 +00:00
dsniff Convert to buildlink3. 2004-04-25 04:20:11 +00:00
egd Convert to buildlink3. 2004-04-26 04:19:47 +00:00
flawfinder Update flawfinder to 1.26. Don't set PY_PATCHPLIST, as it is useless. 2004-06-23 16:19:41 +00:00
fortify don't override pkgsrc set build variables, don't pass gcc specific 2004-07-25 04:30:09 +00:00
fprot-workstation-bin General package cleanup. Points of interest: 2004-05-13 18:48:32 +00:00
fragroute libevent has no shlibs. Make BUILDLINK_DEPMETHOD.libevent=build. 2004-04-30 17:26:23 +00:00
fressh use buildlink3, expose hidden dependency on openssl. 2004-07-25 04:19:59 +00:00
fsh Remove info files entries from PLIST. 2004-03-09 23:01:17 +00:00
gnome-keyring Update to 0.2.1: new and updated translations. 2004-05-15 11:33:28 +00:00
gnu-crypto Update to bl3. All test built with jdk or sun-jdk14. 2004-06-28 17:28:56 +00:00
gnupg add back idea.c.gz (from USE_IDEA=yes). (hi wiz!) 2004-08-26 13:39:05 +00:00
gnustep-ssl No longer used. 2004-04-12 20:21:54 +00:00
gnutls update to 1.0.20 2004-08-27 13:16:16 +00:00
gpa Bump PKGREVISION to 2 for the gpgme BUILDLINK_DEPENDS change. 2004-08-22 17:54:18 +00:00
gpass Update to 0.4.4: 2004-06-21 07:29:13 +00:00
gpg2dot Update to 1.3: Contributed by Stefan Schumacher (stefan net-tex de) in 2004-04-04 22:16:58 +00:00
gpgme update to gpgme-0.9.0 2004-08-22 17:52:26 +00:00
gpgme03 Add a missing apostrophe in a shell command. 2004-03-23 22:54:54 +00:00
gsasl PKGREVISION bump because of libidn shlib major bump. 2004-05-26 14:55:46 +00:00
gss Update to 0.0.11, provided by Sergio Jimenez in PR 26418. 2004-07-24 08:33:19 +00:00
gtk-systrace Convert to buildlink3. 2004-04-25 05:02:23 +00:00
hackbot Move WRKSRC definition away from the first paragraph in a Makefile. 2004-01-20 12:18:15 +00:00
hashcash Update to 0.32. Changes: 2004-08-01 18:35:30 +00:00
heimdal Change the way that legacy USE_* and FOO_USE_* options are converted 2004-08-22 19:32:51 +00:00
honeyd - Include readline to fix Linux builds 2004-08-13 11:04:21 +00:00
honeyd-arpd libevent has no shlibs. Make BUILDLINK_DEPMETHOD.libevent=build. 2004-04-30 17:26:23 +00:00
hydan Initial import of hydan-0.13 into the Packages Collection. 2004-08-13 10:26:03 +00:00
ike-scan MAINTAINER should be tech-pkg@NetBSD.org instead of packages@netbsd.org. 2004-02-28 15:29:20 +00:00
isakmpd Convert to buildlink3. 2004-04-25 05:02:23 +00:00
jessie Jessie 0.9.7, a GPL implementation of the Java Secure Sockets Extension 2004-04-16 16:23:35 +00:00
john use the specially provided targets for solaris sparc and i386 2004-06-26 19:17:33 +00:00
keychain Update to 2.3.4. From the changelog: 2004-07-26 19:02:10 +00:00
kssh USE_LANGUAGES=c c++ ; USE_LIBTOOL=yes 2004-07-28 13:18:11 +00:00
kth-krb4 Unused. 2004-07-01 13:45:08 +00:00
libbf Move WRKSRC definition away from the first paragraph in a Makefile. 2004-01-20 12:18:15 +00:00
libcrack No longer used. 2004-04-11 22:57:57 +00:00
libdes Detect builtin libdes. (NetBSD 2.0, for instance, has one.) 2004-07-31 05:31:57 +00:00
libfwbuilder Initial import of libfwbuilder-1.0.2 into the Packages Collection. This 2004-07-06 18:04:39 +00:00
libgcrypt When exec'ing child processes (netstat and vmstat), make sure the standard 2004-07-02 13:14:27 +00:00
libgpg-error Fix serious bug where BUILDLINK_PACKAGES wasn't being ordered properly 2004-03-18 09:12:08 +00:00
libidea Convert to buildlink3. 2004-04-18 18:48:41 +00:00
libident Oops. Finish conversion to buildlink3. 2004-04-12 20:37:17 +00:00
libksba Fix serious bug where BUILDLINK_PACKAGES wasn't being ordered properly 2004-03-18 09:12:08 +00:00
libksba04 Convert to buildlink3. 2004-04-12 20:32:43 +00:00
libmcrypt Unused. 2004-04-25 23:19:37 +00:00
libnasl Changes 2.0.12: 2004-07-22 14:59:53 +00:00
libtasn1 Changes 0.2.10 2004-05-22 07:30:03 +00:00
libtcpa PKGREVISION bump after openssl-security-fix-update to 0.9.6m. 2004-03-26 02:27:34 +00:00
logcheck Convert to buildlink3. 2004-04-25 03:38:34 +00:00
lsh Convert to buildlink3. 2004-04-25 03:47:44 +00:00
mcrypt Convert to buildlink3. 2004-04-25 03:32:00 +00:00
mhash Unused. 2004-04-25 23:19:37 +00:00
mirrordir Add CONFLICTS with qmail>=1.03nb7 and netqmail>=1.05 (to be committed 2004-07-21 22:27:19 +00:00
mit-krb5 Change the way that legacy USE_* and FOO_USE_* options are converted 2004-08-22 19:32:51 +00:00
msu s/netbsd.org/NetBSD.org/ 2003-07-17 22:50:55 +00:00
msudir s/netbsd.org/NetBSD.org/ 2003-07-17 22:50:55 +00:00
nessus Changes 2.0.12: 2004-07-22 14:59:53 +00:00
nessus-core Changes 2.0.12: 2004-07-22 14:59:53 +00:00
nessus-libraries Changes 2.0.12: 2004-07-22 14:59:53 +00:00
nessus-plugins Changes 2.0.12: 2004-07-22 14:59:53 +00:00
netramet Use declaration of sys_nerr from <errno.h> rather than redeclaring it. 2004-03-24 11:32:07 +00:00
nfsbug Let ONLY_FOR_PLATFORM recognize NetBSD 2.0 and future versions. 2004-03-22 03:22:01 +00:00
nikto PKGREVISION bump after openssl-security-fix-update to 0.9.6m. 2004-03-26 02:27:34 +00:00
opencdk update to 0.5.5 2004-08-27 13:01:35 +00:00
openssh Update to 3.9p1: 2004-08-31 11:27:11 +00:00
openssh+gssapi Resurrect openssh+gssapi per request of jwise@. 2004-06-15 18:44:57 +00:00
openssl Back out previous... unintended commit. 2004-08-28 20:38:18 +00:00
otpcalc Convert to buildlink3. 2004-04-25 04:53:30 +00:00
p0f - Update to 2.0.4 2004-08-14 10:09:15 +00:00
p5-Authen-SASL Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Authen-SASL-Cyrus Convert to buildlink3. 2004-05-09 06:48:40 +00:00
p5-Crypt-Blowfish Add HOMEPAGE, adapt to buildlink3 and add BUILD_DEPENDS on p5-Crypt-CBC for testing. 2004-03-20 17:21:32 +00:00
p5-Crypt-CAST5_PP Initial import of Crypt::CAST5_PP. 2004-02-25 00:25:02 +00:00
p5-Crypt-CBC Updated to version 2.08 2004-02-22 16:54:56 +00:00
p5-Crypt-DES Add HOMEPAGE, adapt to buildlink3 and add BUILD_DEPENDS on p5-Crypt-CBC for testing. 2004-03-20 17:21:32 +00:00
p5-Crypt-DES_EDE3 Taking maintainership. 2004-02-24 22:26:28 +00:00
p5-Crypt-DSA Adapted to buildlink3. 2004-02-24 23:34:59 +00:00
p5-Crypt-IDEA Updated to version 1.02. 2004-02-22 17:07:18 +00:00
p5-Crypt-OpenPGP PKGREVISION bump after openssl-security-fix-update to 0.9.6m. 2004-03-26 02:27:34 +00:00
p5-Crypt-OpenSSL-Bignum Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Crypt-OpenSSL-DSA Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Crypt-OpenSSL-Random Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Crypt-OpenSSL-RSA PKGREVISION bump after openssl-security-fix-update to 0.9.6m. 2004-03-26 02:27:34 +00:00
p5-Crypt-Primes Updated to version 0.50. 2004-02-22 22:24:38 +00:00
p5-Crypt-Random Updated to version 1.13. 2004-02-22 22:18:10 +00:00
p5-Crypt-Rijndael Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Crypt-RIPEMD160 Added HOMEPAGE and adapted to buildlink3. 2004-02-24 23:09:42 +00:00
p5-Crypt-RSA Updated to version 1.50. 2004-02-24 23:05:08 +00:00
p5-Crypt-Twofish Added HOMEPAGE and adapted to buildlink3. 2004-02-24 22:29:40 +00:00
p5-Digest Update to version 1.08. 2004-05-02 02:22:15 +00:00
p5-Digest-BubbleBabble Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Digest-Hashcash Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Digest-HMAC Take maintainership, add HOMEPAGE. Uses no compiler, so mark it with empty USE_LANGUAGES. 2004-03-20 17:29:26 +00:00
p5-Digest-MD2 Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Digest-MD4 Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Digest-MD5 bl3ify 2004-01-05 22:16:24 +00:00
p5-Digest-Nilsimsa Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Digest-SHA1 Update to version 2.10. 2004-05-02 02:27:59 +00:00
p5-IO-Socket-SSL PKGREVISION bump after openssl-security-fix-update to 0.9.6m. 2004-03-26 02:27:34 +00:00
p5-Net-DNS-SEC Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-Net-SSLeay This homepage doesn't exist anymore. 2004-07-23 18:07:18 +00:00
p5-SHA Convert to buildlink3. 2004-04-27 04:59:42 +00:00
p5-SSLeay Convert to subst.mk. 2004-06-10 21:16:35 +00:00
p5-Tie-EncryptedHash Convert to buildlink3. 2004-04-27 04:59:42 +00:00
pakemon Convert to buildlink3. 2004-04-25 04:20:11 +00:00
PAM Change the way that legacy USE_* and FOO_USE_* options are converted 2004-08-22 19:32:51 +00:00
pam-ldap Fix a typo: use ldap.conf (not pam.conf) as the default LDAP config file. 2004-07-17 01:24:45 +00:00
pam-smbpass Update samba2 package to 2.2.10 2004-08-07 08:18:37 +00:00
pgp2 Replace RPATH_FLAG with LINKER_RPATH_FLAG and COMPILER_RPATH_FLAG, 2004-08-27 06:29:06 +00:00
pgp5 Move WRKSRC definition away from the first paragraph in a Makefile. 2004-01-20 12:18:15 +00:00
pgpdump Update pgpdump pacakge to 0.22. 2004-01-23 14:49:35 +00:00
php4-mcrypt bl3ify 2004-04-24 23:35:15 +00:00
php4-mhash bl3ify 2004-04-24 23:35:15 +00:00
php4-openssl Update php4 package to 4.3.7. 2004-07-06 19:52:01 +00:00
pinepgp Convert to buildlink3. 2004-05-09 06:48:40 +00:00
pks Convert to buildlink3. 2004-05-09 06:48:40 +00:00
portsentry Convert to buildlink3. 2004-04-25 05:02:23 +00:00
priv Update priv to 1.0beta2nb1. 2004-06-14 03:16:42 +00:00
prngd Initial import of prngd-0.9.29 2004-07-15 23:10:35 +00:00
pscan s/netbsd.org/NetBSD.org/ 2003-07-17 22:50:55 +00:00
py-amkCrypto add python as category 2004-07-22 09:15:59 +00:00
py-cryptkit add python as category 2004-07-22 09:15:59 +00:00
py-gnupg add python as category 2004-07-22 09:15:59 +00:00
py-gnutls add python as category 2004-07-22 09:15:59 +00:00
py-m2crypto add python as category 2004-07-22 09:15:59 +00:00
py-OpenSSL add python as category 2004-07-22 09:15:59 +00:00
pyca add python as category 2004-07-22 09:15:59 +00:00
qident Reset maintainer to tech-pkg@ (from ad@, since he is not working on them 2004-05-07 11:54:35 +00:00
racoon upgrade to 20040617a. includes important certificate mangement change. 2004-06-17 03:36:18 +00:00
rats USE_BUILDLINK3 must be set to "yes" or "no", not defined/undefined. 2004-03-23 04:40:59 +00:00
rc5des Move WRKSRC definition away from the first paragraph in a Makefile. 2004-01-20 12:18:15 +00:00
rid don't inline a function in one source file and expect to be able to 2004-06-27 12:21:21 +00:00
rsaref Unused. 2004-07-06 22:41:15 +00:00
ruby-acl Add ruby to CATEGORIES. 2004-03-16 02:01:09 +00:00
ruby-digest Add ruby to CATEGORIES. 2004-03-16 02:01:09 +00:00
ruby-openssl Convert to buildlink3. 2004-04-27 04:59:42 +00:00
ruby-tcpwrap Add ruby to CATEGORIES. 2004-03-16 02:01:09 +00:00
scanssh - Update to scanssh 2.0 2004-08-17 19:43:22 +00:00
seahorse Make use of the new USE_DIRS variable, instead of directly depending on the 2004-04-14 16:15:20 +00:00
sfs this uses a c and c++ compiler. 2004-06-27 11:41:09 +00:00
sign Fix HOMEPAGE. 2004-05-16 00:10:23 +00:00
skey Unused. 2004-05-11 21:01:05 +00:00
smimemsg this blindly calls "gcc" so use buildlink3 so it uses the compiler 2004-06-27 11:40:07 +00:00
smtpd move CFLAGS and LD_LIBS to pkgsrc Makefile and clean up install 2004-02-08 14:27:35 +00:00
sniff Convert to buildlink3. 2004-04-25 03:09:56 +00:00
snortsnarf This does not need buildlink2. 2004-04-25 03:17:55 +00:00
srm Initial import of srm, version 1.2.8 into the NetBSD Package Collection, 2004-03-01 09:43:06 +00:00
srp_client Convert to buildlink3. 2004-04-26 04:36:24 +00:00
ssh-askpass USE_IMAKE implies USE_X11BASE, remove it. 2004-07-21 21:16:10 +00:00
ssh-ip-tunnel Depend on security/openssh instead of security/ssh for machines that 2004-05-31 22:13:16 +00:00
ssh2 Revert previous: conflicts with openssh (and others) are already specified in 2004-07-31 12:52:42 +00:00
ssh2-nox11 Revert previous: conflicts with openssh (and others) are already specified in 2004-07-31 12:52:42 +00:00
ssldump Fix typo in COMMENT, from diro at nixsys bz in PR 25483. 2004-05-07 07:43:31 +00:00
sslwrap Convert to buildlink3. 2004-04-25 03:28:54 +00:00
steghide Initial import of steghide-0.5.1. 2004-07-21 03:08:08 +00:00
stunnel Add simple rc.d script. Bump PKGREVISION. 2004-06-06 14:19:04 +00:00
sudo Restore USE_LIBTOOL which was silently removed recently (hi xtraeme!). 2004-08-24 17:31:48 +00:00
tacshell tacshell-0.91: RSA ACE/Server sdshell workalike, using TACACS+ 2004-05-26 12:04:27 +00:00
tcp_wrappers Add USE_INET6 to BUILD_DEFS as these packages use it. Part of PR#25743 from 2004-06-08 12:23:59 +00:00
tct Convert to buildlink3. 2004-05-09 06:48:40 +00:00
tkpasman Fix paths to tclsh and wish, which were being found in the buildlink 2004-08-30 16:00:49 +00:00
tripwire Convert to buildlink3. 2004-04-25 05:02:23 +00:00
uvscan Update to 4.24.1: 2004-07-29 22:19:57 +00:00
winbind Update samba2 package to 2.2.10 2004-08-07 08:18:37 +00:00
xdm-krb4 Convert to bl3. 2004-07-01 13:44:11 +00:00
xmlsec1 import xmlsec1-1.2.6, an XML signature and encryption library 2004-08-27 13:19:57 +00:00
zebedee PKGREVISION bump after openssl-security-fix-update to 0.9.6m. 2004-03-26 02:27:34 +00:00
Makefile +xmlsec1 2004-08-27 13:22:30 +00:00