| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
|
|
2.6.1 provides new functionality including the following:
* New pattern matcher with a significantly reduced memory footprint
* Introduction of stream5 for experimental use
* Improvements to stream4, including UDP session tracking and optimizations for the reassembly buffer
* Handling for reassembly of SMB fragmented data in DCE/RPC
* An ssh preprocessor for experimental use
* Updated Snort decoder that can decode GRE encapsulated packets
* Output plugin to allow Snort to configure Aruba access control
Snort 2.6.0:
* Tcp stream properly reassembled after failed sequence check, which may lead to possible detection evasion.
* Added configurable stream flushpoints.
* Improved rpc processing.
* Improved portscan detection.
* Improved http request processing and handling of possible evasion cases.
* Improved performance monitoring.
The Snort 2.6 release also introduces the ability to use dynamic rules and dynamic preprocessors and contains further improvements to the Snort detection engine.
Remove snort-{pgsql,mysql,prelude}. The new snort package uses options.mk
to specify build options.
|
|
|
|
* Major enhancements to rlm_pap, that make "encryption_scheme"
a think of the past. See "man rlm_pap" for details.
* Added SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS flag to use
work-arounds that enable Windows Vista clients to work.
* Added preliminary code to support Firebird.
Use at your own risk!
* Send MS-CHAP2-Success, which makes EAP-TTLS/MSCHAP work on more
platforms.
* Add a new "reply-name" directive in rlm_sqlcounter to define the
name of the reply attribute.
* Added more dictionaries and attributes
* Print ntlm_auth failure reason in Module-Failure-Message
* radsqlrelay is able to get the DB password from a file instead
of command line.
Bug fixes
* Fix a parse error in the digest module, where malformed
digest requests would result in the user being accepted. Oops...
* VALUEs can only be defined for 'integer', to catch mistakes
with setting VALUEs for type 'string'.
* Better parsing of VALUE names, so that values starting with
a digit work correctly.
* Check return from malloc
* Fix a double free() in rlm_eap_tls.c
* Check return code of malloc() during initialization.
* Fix a corner case where the proxy port isn't set either in
radiusd.conf or in proxy.conf.
|
|
Remove from TODO
Remove snort from TODO as well (update coming)
|
|
new features:
new datagram modes for udp, rawip, unix domain sockets
socat option -T specifies inactivity timeout
rewrote lexical analysis to allow nested socat calls
addresses tcp, udp, tcp-l, udp-l, and rawip now support IPv4 and IPv6
socat options -4, -6 and environment variables SOCAT_DEFAULT_LISTEN_IP,
SOCAT_PREFERRED_RESOLVE_IP for control of protocol selection
addresses ssl, ssl-l, socks, proxy now support IPv4 and IPv6
option protocol-family (pf), esp. for openssl-listen
range option supports IPv6 - syntax: range=[::1/128]
option ipv6-v6only (ipv6only)
new tcp-wrappers options allow-table, deny-table, tcpwrap-etc
FIPS version of OpenSSL can be integrated - initial patch provided by
David Acker. See README.FIPS
support for resolver options res-debug, aaonly, usevc, primary, igntc,
recurse, defnames, stayopen, dnsrch
options for file attributes on advanced filesystems (ext2, ext3,
reiser): secrm, unrm, compr, ext2-sync, immutable, ext2-append, nodump,
ext2-noatime, journal-data etc.
option cool-write controls severeness of write failure (EPIPE, ECONNRESET)
option o-noatime
socat option -lh for hostname in log output
traffic dumping provides packet headers
configure.in became part of distribution
socats unpack directory now has full version, e.g. socat-1.5.0.0/
corrected docu of option verify
corrections:
fixed tcpwrappers integration - initial fix provided by Rudolf Cejka
exec with pipes,stderr produced error
setuid-early was ignored with many address types
some minor corrections
|
|
|
|
|
|
Many minor changes omitted; intermediate changelogs combined.
- Added read support for DOC, XLS and PPT documents
- Updated GeoTiff support for new definitions in libgeotiff-1.2.3
- Added ability to write certain EXIF tags (ie. UserComment) as Unicode
|
|
|
|
|
|
|
|
|
|
Packaged and provided by Jonathan A. Kollasch in PR 34610.
This package is 7zip LZMA SDK utility.
|
|
if it was enabled correctly in autoconf.
|
|
|
|
- Many Direct3D fixes and performance improvements.
- Several new comctl32 test cases.
- IDL compiler improvements.
- More OLE32 marshalling fixes.
- Lots of bug fixes.
|
|
|
|
|
|
Patch provided by maintainer, Rhialto in PR 35637.
Changes from version 3.7 to 3.8
-------------------------------
1 - Global cleanup
There were some variables shadowing others, things not being
safely initialized, that sort of thing.
[Richard Levitte]
2 - Fixed several memory leaks found by
"Nadav Har'El" <nyh@math.technion.ac.il>.
[Olaf "Rhialto" Seibert]
3 - Merged in the f.movetitlebar command. By default this is bound to
alt-left-click in the titlebar.
[Olaf "Rhialto" Seibert]
4 - Fixed the following issues:
Poking at the code, it looks like InitVirtualScreens() is called
before the configuration file is parsed which would explain what
I see since there's no attempt to create them after the config
file read.
Moving the call after the config parsing causes things to work.
I've run into a few other issues that I fixed with the attached
patch:
- shadow menus on the right screen open the shadow on
the left screen
- shadow menus on the left screen open on top of the
window
- windows on the right screen disappear after startup
[Todd Kover]
5 - Adjustments to ctwm.man:
I noticed a couple of small errors.
One is that the window list arguments for the opaque
keywords are now optional, are listed with square brackets
in the man page. The other is that the two Threshold
keywords are shown in the man page as requiring curly-
brackets, but they are not required or accepted in
configuration files.
[Ross Combs]
6 - improve algoritm to deal with mismatched geometry of virtual
screens
- allow windows to be dragged from one virtual screen to another and
have them switch workspaces appropriately
- handle restarts properly with virtual screens, including preserving
where windows were placed within workspaces regardless of which
virtual screen a window was on; preserve across restarts
[Todd Kover]
7 - WMapCreateCurrentBackGround() and WMapCreateDefaultBackGround()
would skip remaining virtual screens if not all parameters are present.
- small type errors. [Olaf "Rhialto" Seibert].
8 - There were some directives in the config file that wanted to set some
setting for all virtual screens. However since that list is (now) only
set up after parsing the config file, they failed to work. Moreover,
these settings were basically meant to be global to all virtual
screens, so a better place for them is somewhere in *Scr. They all
related to the Workspace Manager, so I moved them from struct
WorkSpaceWindow to struct WorkSpaceMgr.
The affected directives are StartInMapState, WMgrVertButtonIndent,
WMgrHorizButtonIndent, MapWindowCurrentWorkSpace,
MapWindowDefaultWorkSpace. The window and icon_name, even though not
user-settable, were also moved.
This is basically change #7 above done right.
[Olaf "Rhialto" Seibert]
9 - Re-introduced TwmWindow.oldvs, used to avoid calling
XReparentWindow() when possibe (it messed up the stacking order
of windows). However, maybe the use of .vs should be rethought a
bit: in Vanish() it is now set to NULL with the old value kept
in .oldvs. However the window is still a child of the same vs.
Maybe it is better not to set it to NULL and then, when *really*
changing the virtual screen, .vs can be used instead of .oldvs.
This whole "virtual screen" thing is unexplained in the manual,
which even uses it as a synonym for "workspace" already in the
introduction paragraph. (There also does not seem to be a way
now to test virtual screens in captive windows) I suspect that
all this causes lots of confusion, and when cleared up, can
simplify the code a lot.
I also fixed up the horrible indentation in the functions
where I changed something.
[Olaf "Rhialto" Seibert]
10 - Fixed interaction between "inner" and "outer" workspace
selection with "captive" windows. This was because the Gnome
"_WIN_WORKSPACE" property is used in 2 conflicting ways: for
client windows it indicates which workspace they are in, for
root windows it indicates which workspace they show. Captive
windows are both. Also, the initially selected inner workspace
is now the first, not the same as the outer workspace (this had
a different cause).
[Olaf "Rhialto" Seibert]
11 - Introduce Scr->XineramaRoot to store the root window that
encompasses all virtual screen rootwindows. This further reduces
any need to use RealRoot and/or CaptiveRoot.
Add a schematic drawing that clarifies the relation between the
various root-type windows.
[Olaf "Rhialto" Seibert]
12 - Get rid of all non-locale code and make I18N the silent default
(doesn't have to be mentioned any more).
THIS WILL BREAK CTWM ON OLDER (PRE-LOCALE) ENVIRONMENTS.
I strongly recommend an upgrade to "post-locale" standards.
[Richard Levitte]
13 - Enhance RandomPlacement with a displacement argument, so the
pseudo-radomness can be of displacements other than +30+30.
Here's an example for a pretty funky displacement:
RandomPlacement "on" "-30-100"
[Richard Levitte]
14 - Extend the Info window with the geometry seen from the lower
right corner as well.
[Richard Levitte]
15 - Extend the pointer button specification for title buttons
to take modifiers.
As part of this change, the following title pointer button
specification is deprecated:
Button {j} : {function}
in favor of the following, for consistency:
Button {j} = {function}
The old way still works, but is considered bad form and will
be removed in ctwm 4.0.
[Richard Levitte]
16 - Fix position of buttons in Occupy window, to make them centered.
(and spread the remaining space evenly in 4).
[Olaf "Rhialto" Seibert]
17 - "TwmWindow.group" was once apparently set to 0 when a window had
no group leader but this was changed to pointing to its own
window. This resulted however in many places checking for both
conditions, and several checking only for 0 which could not
occur anymore. Changed it back to 0 (so we can now distinguish
again windows that really indicate themselves as group leader,
if we wish) and this gave rise to some simplifications.
Also, there were various loops through all TwmWindows looking
for a group leader (or a transientfor), I replaced them with
GetTwmWindow() which uses the Xlib function XFindContext() which
uses a hash table lookup. This should be more efficient.
When you change the occupation of a group member window, it is
now applied to the group leader (which in turn affects all
members).
I tried this with ExMH, the only program that uses a real group
leader that I could find. Iconifying the leader unmaps the
members. What should "squeezing" do? ExMH also has an icon
window (see ICCCM 4.1.9, 3rd option) which behaves weirdly; this
may be a bug in ExMH (see exmh-2.7.2/exmh.BUGS) even though fvwm
somehow handles it better.
[Olaf "Rhialto" Seibert]
18 - When Squeezing a window group leader, unmap the member windows,
just like happens with iconification.
[Olaf "Rhialto" Seibert]
19 - Simplifications c.q. de-duplications of code regarding the
WorkSpaceManager and Occupation windows. This includes coding
the layout of these windows only once instead of twice (at
initialisation and when resizing). If it's wrong now at least it
should be consistent.
When changing occupation via functions like
f.movetonextworkspace, also move complete window groups (just
like when you do it via the Occupation window).
Also fixed changing the occupation of the Occupation window.
Documented (so far) undocumented possibility to edit the labels
of workspaces on the fly (what use this is, I'm not sure).
Removed some unused variables.
[Olaf "Rhialto" Seibert]
20 - Get rid of the USE_SESSION and X11R6 macros and make them the
silent default. Also cleaned out a few references to the macro
X11R4, which hasn't been used for ages.
THIS WILL BREAK CTWM ON OLDER (PRE-X11R6) ENVIRONMENTS.
I strongly recommend an upgrade to a newer X11 release.
[Richard Levitte]
21 - Modified the random placement so a negative X displacement has
the first "random" window start near the right edge instead of
the right and a negative Y displacement has the first "random"
window start near the bottom edge instead of the top.
[Richard Levitte]
|
|
|
|
|
|
|
|
* use db_185.h, build under darwin
|
|
|
|
|
|
|
|
* 32-bit multiplication overflow vulnerabilities along with a number of similar
issues
* Memory allocation errors that were not checked
* Multiple issues in the GIF loader. Corrupt gif images would cause a segfault
or infinite loop
* Malformed or empty PNG image also may have caused segfaults
* gdImageFillToBorder segfaulted when the color was not opaque (alpha > 0)
* Antialiased lines drawn on an images edge caused a segfault
* gdImageFill segfaulted when used with patterns or invalid arguments
* gdImageFilledEllipse did not respect transparency
|
|
|
|
I couldn't find any changelog. Sorry if I missed it.
|
|
the latest version of Samba.
|
|
Samba distribution since version 3.0.23. "mysql" and "pgsql" passdb backends
are now maintained via http://pdbsql.sourceforge.net/ and will have to be
packaged separately.
|
|
|
|
|
|
|
|
Patch provided by Kimura Fuyuki in PR 35595.
And regen patch-aa.
1.0.3 2006-07-10
* Released 1.0.3 to provide the bogotune bugfixes to a wider
audience.
2006-07-09
* Work around GNU make 3.81 incompatibility in doc/Makefile*
(it does not work properly with "}\" at the line ends, but
wants "} \" instead).
2006-06-02
* "make rpm" changes:
- document use with gpg-agent (see Makefile.am)
- build static RPMs (these won't fail) before shared RPMs
2006-05-29
* #include cleanups in common.h, system.h and C files.
2006-04-28
* Updated copyright dates.
2006-04-13
* Included additional config file options in bogofilter's
--help message.
2006-03-27
* Corrected option parsing in bogotune to support -n ham1 ham2
-s spam1 spam2 as suggested by bogotune -h; broken since 0.93.2.
2006-03-26
* Corrected problem with bogotune's -D option (thanks to Jason Smith).
* Corrected man page description of bogotune's -n and -s options.
2006-03-17
* Fixed bf_compact's test for transactional environment.
2006-03-12
* 1.0.2 Promoted to "Stable" status
1.0.2 2006-03-03
2006-02-19
* Added vm-bogofilter.el for using bogofilter with VM, an
Emacs mail tool (thanks to Björn Knutsson).
* Added FAQ question "How do I use bogofilter with VM (an
Emacs mail tool)?" (thanks to Pimpon).
2006-02-14
* SleepyCat has been acquired by Oracle, who are now providing
Berkeley DB. Since most of the references are to actual
strings in the programs or addresses that remain unchanged,
this will only gradually show in the bogofilter sources and
documentation.
2006-02-06
* Flush output after writing spam header line and/or message body.
* When database is near to maximum allowed size, allow reading
it and disallow writing to it.
2006-01-30
* Fix formatting of Rtable output when in the message header,
this keeps verbose passthrough modes RFC-822/2822 compliant.
2006-01-29
* The configure script, when checking Berkeley DB capabilities,
now checks for logging and transactional subsystems rather
than the locking subsystem that was abandoned before 1.0.0.
This appears a suitable workaround for configure lockups on
OpenBSD 3.7 macppc with db 4.2 or 4.3.
2006-01-28
* Only print Berkeley DB file size message once per run.
2006-01-21
* 1.0.1 Promoted to "Stable" status
2006-01-02
* Fixed --input-file and --output-file command line options.
2006-01-01
* Added CVE-2005 identifiers for defects described in
doc/bogofilter-SA-2005-01
1.0.1 2006-01-01
* New names for binary rpms:
bogofilter-db42 - requires shared library for DB-4.2.52
bogofilter-db42-static - statically linked with DB-4.2.52
bogofilter-sqlite3 - requires shared library for SQLite3-3.2.8
bogofilter-sqlite3-static - statically linked with SQLite3-3.2.8
2005-12-30
* The configure help texts have been revised, the IEEE checks
for trio have been simplified (they are no longer nested) and
configure.ac has been updated to quiet autoconf -Wobsolete
warnings. The README file now reflects the new requirements.
2005-12-29
* For maintainers: Add install-staticdblibs.sh, a script to
fetch and build static & lean BerkeleyDB 4.2.52.4 and SQLite
3.2.8 libraries. Modify some parts of the RPM building so that
the binary RPMs are built without external dependencies beyond
glibc 2.2. This may render "make rpm" unusable on non-Linux
platforms, but you should still be able to "rpmbuild -tb" from
the source .tar.gz file.
2005-12-27
* Add '-O' option to direct bogoutil output to a file.
* Fix building of binary rpms with SQLite support.
* Include SQLite binary rpm as standard part of "make rpm"
2005-12-26
* Split NEWS file into files NEWS and NEWS.0 for new (version
1.0 and after) and old (version 0.x.y) info
2005-12-25
* Capitalize variables in bogofilter.spec.in to please RH9's
RPM 4.2 implementation.
2005-12-18
* Fix bad return code in db_loop() in datastore_sqlite.c
(reported by Sami Farin).
2005-12-17
* XML documentation cleanups (thanks to Nicholas Kaiser).
2005-12-06
* bogofilter.cf.example was updated to reflect the proper default of
db_log_autoremove=yes. It previously claimed the default were "off".
1.0.0 2005-11-30
2005-11-28
* Minor FAQ updates and correctons.
* Abort if ar(1) is not available during build.
2005-11-19
* bogofilter supports BerkeleyDB 4.4.16. doc/README.db and INSTALL have
been updated accordingly.
|
|
|
|
Added dependency on python curse libraries, do that it does not fail at runtime
Changelog contains many bugfixes, and:
* Support IPv6 with SSL.
* improve performance with large folders.
* new homepage
* sync INTERNALDATEs.
* Fixed a bug that could cause OfflineIMAP to crash when copying
a message from a remote server that didn't have an
INTERNALDATE.
|
|
for that...
|
|
|
|
media! This also adds support for all HDDVD and BluRay media! Also small
but important fixes have been made on cd_disect for ATAPI drives; these
could give up in the process.
|
|
also adds support for all HDDVD and BluRay media! Also small but important
fixes have been made on cd_disect for ATAPI drives; these could give up in
the process.
|
|
|
|
|
|
The 0.9x series introduces lots of improvements in terms of detection
rate and performance, like support for many new packers and decryptors,
RAR3 and SIS archives, and a new phishing signatures format that proves
to be very effective.
|
|
|
|
source), from pkgsrc-wip and packaged by iMil.
Csup is a rewrite of CVSup in C.
CVSup(R) is a software for distributing and updating collections of files
accross a network. It can efficiently and accurately mirror all types of files,
including sources, binaries, hard links, symbolic links, and even device nodes.
In addition to being a great general-purpose mirroring tool, CVSup includes
special features and optimizations specifically tailored to CVS repositories.
It is being used as the preferred way to update sources within the FreeBSD,
NetBSD and OpenBSD projects and more.
|
|
its own line. Since NetBSD 1.6 has been EOL'd, replaced the special
entries with more generic ones, like NetBSD-*-i386.
|
|
|
|
use a newer JDK here.
|
