3537 Commits

Author SHA1 Message Date
naddy
2b8930a283 Drop USE_GROFF since groff and mandoc produce identical output. 2014-04-13 01:01:38 +00:00
ajacoutot
495965f924 Bugfix update to gnutls-3.2.13. 2014-04-08 12:28:48 +00:00
naddy
0f88ce9cc8 add another semi-portable alternative to work around our lack of sum(1) 2014-04-03 15:13:19 +00:00
sthen
6e21013420 switch to separate vpnc-scripts package; ok rpe@ 2014-04-01 11:40:27 +00:00
sthen
063d394c04 switch from p5-Mozilla-CA to p5-Mozilla-CA-Fake 2014-03-30 19:28:02 +00:00
sthen
111ce6ccc6 Import security/p5-Mozilla-CA-Fake, an alternative to CPAN's Mozilla::CA but
rather than bundling an old copy of Mozilla certs, this just points to the
system /etc/ssl/cert.pem. OK on earlier version and tweaks nigel@
2014-03-30 19:27:31 +00:00
dcoppa
618dbc0c88 Update to ccid-1.4.16 2014-03-27 13:55:43 +00:00
sthen
ff5896063c remove bogus timestamp-checking code resulting in spurious failures 2014-03-27 13:52:30 +00:00
naddy
dd96da4ac9 Drop USE_GROFF since groff and mandoc produce identical output. 2014-03-27 12:07:59 +00:00
ajacoutot
d4d4db0455 Sync WANTLIB. 2014-03-26 18:17:49 +00:00
gonzalo
c88fe5026a This is an update for jailkit to 2.17, is a minor bugfix release, allows
jk_chrootsh to be called -su, it improves argument handling and error messages, and
makes jk_cp honor the -j option again.

Also remove maintainer.

Tested on powerpc@ and amd64@

OK sebastia@ (EX-Maintainer ;)
2014-03-26 17:38:27 +00:00
sthen
738d7e71d2 update to oath-toolkit 2.4.1 2014-03-26 14:17:53 +00:00
espie
38f56a042e replace MAINTAINER address with currently valid address, bump REVISIONS.
okay maintainer
2014-03-25 21:20:39 +00:00
ajacoutot
df8d1135fc Forgot @pkgpath in previous. 2014-03-25 12:33:31 +00:00
ajacoutot
e916ea18fd -sshguard,tcpd 2014-03-25 12:32:10 +00:00
ajacoutot
73a7684a80 Drop the tcpd FLAVOR.
ok sthen@
2014-03-25 12:31:50 +00:00
dcoppa
03e0bb9161 Disable libwrap support.
Ok gsoares@ (maintainer)
2014-03-24 21:44:09 +00:00
dcoppa
5c51c99534 Disable tcp wrappers 2014-03-24 14:39:23 +00:00
ajacoutot
114d6c63ac Update to cvechecker-3.5. 2014-03-24 12:47:55 +00:00
kili
eb17bd6c23 Don't try to link against librt.
ok dcoppa@
2014-03-23 20:02:14 +00:00
jasper
a53a456a6c update to p5-Crypt-DSA-1.17 2014-03-22 10:22:36 +00:00
jasper
5295ffcbf6 don't bother running pod2man on a .pod file which won't build with perl 5.18,
and then end up not installing it anyway.
2014-03-21 12:26:18 +00:00
jasper
ad3fcc413e unbreak with perl 5.18, patch taken from 0.46. 2014-03-21 12:05:29 +00:00
jasper
f40af640e9 update to p5-Crypt-DH-0.07 2014-03-20 20:36:00 +00:00
gsoares
f14b418692 update to 0.5
from Henrik Friedrichsen < henrik at diff dot cc >
2014-03-20 19:21:00 +00:00
jasper
3ea3febc52 remove m68k-related workarounds 2014-03-19 13:40:59 +00:00
sthen
2a8dd838e1 build py-bcrypt,python3 2014-03-19 11:16:16 +00:00
sthen
e99b9c3602 SECURITY update to py-bcrypt 0.4, from Francisco de Borja Lopez Rio
- while there, fix WANTLIB and enable python 3 support; by me

Fix concurrency bug reported by Alan Fairless of spideroak.com:
Multiple threads may hash into the same memory area simultaneously.
This may manifest as occasional random authentication failures (as
user-a's password hash is compared to user-b's), but could potentially
be used to bypass password checking by an attacker (user-a attempts
login on user-b's account, while simultaneously flooding auth requests
against user-a's account to overwrite the hash).
2014-03-19 11:15:56 +00:00
jasper
c29ba2e8b4 Crypt-Twofish-2.17 2014-03-19 07:23:57 +00:00
jasper
65f0c72501 update to Crypt-Blowfish-2.14 2014-03-19 07:23:45 +00:00
jasper
d48fc4e12f update to Crypt-DES-2.07 2014-03-18 23:13:33 +00:00
dcoppa
0c9ddb5974 Update to wpa_supplicant-2.1.
Tested by pascal@ and Gregor Best

OK sthen@ (maintainer)
2014-03-18 05:57:22 +00:00
sthen
4291ce340c SECURITY update to stunnel 5.00, fixes an issue similar to libssh and
postgresql where a forked child process doesn't correctly reset RNG state.
See CVE-2014-0016, http://www.openwall.com/lists/oss-security/2014/03/05/1

ok gsoares@

Note from upstream release notes:

"stunnel 5.00 disables some features previously enabled by default.
Users should review whether the new defaults are appropriate for their
particular deployments."

These changes include: FIPS mode, pid file generation and
libwrap disabled by default, and the default cipher list has
been updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2".
2014-03-17 13:03:11 +00:00
ajacoutot
00688c41d5 unbound is in base, tweak comment. 2014-03-16 15:53:25 +00:00
benoit
e9999b3ac8 Update to clusterssh 4.02.03.
from Daniel Levai, maintainer timeout
2014-03-16 08:54:34 +00:00
benoit
d3611ded33 +libscrypt 2014-03-15 14:01:46 +00:00
benoit
4818484737 Import libscrypt.
Shared library that implements the scrypt key derivation function.

from maintainer Daniel Levai, ok sthen@
2014-03-15 13:37:18 +00:00
ajacoutot
94f4ad8215 Be safe and explicitely set --with-default-trust-store-file. 2014-03-14 17:42:59 +00:00
rpointel
2b0f480bc9 update to 0.6.3
security fix: http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0017
2014-03-14 10:17:17 +00:00
benoit
361fe78037 Update to py-ecdsa 0.11. 2014-03-12 21:01:56 +00:00
dcoppa
e83874182f Use sthen's mirror due to problems with SPI's certificate 2014-03-12 13:43:09 +00:00
dcoppa
38b21609db Update to pcsc-lite-1.8.11 2014-03-12 08:37:49 +00:00
benoit
96725a0b54 Update to pdfcrack 0.13. 2014-03-11 17:28:47 +00:00
benoit
864f605fc2 Update to pdfcrack 0.12. 2014-03-10 21:15:36 +00:00
benoit
1d0c7965eb Update to py-paramiko 1.12.2. 2014-03-10 20:56:17 +00:00
rpe
691dc3214a add py-keyczar 2014-03-09 23:49:08 +00:00
rpe
5c8f797c2f add py-keyczar 0.71c which is a dependecy for ansible 1.5
Keyczar is an open source cryptographic toolkit designed to make
it easier and safer for developers to use cryptography in their
applications. Keyczar supports authentication and encryption with
both symmetric and asymmetric keys.

with feedback and OK sthen@
2014-03-09 23:44:51 +00:00
brad
accc4f1e17 Update to Botan 1.10.7.
ok sthen@
2014-03-09 22:47:50 +00:00
brad
b32a963827 Enable ASM bits.
ok sthen@
2014-03-09 22:32:48 +00:00
ajacoutot
6b8f98992b SECURITY update to gnutls-3.2.12.1. 2014-03-09 22:08:50 +00:00