summaryrefslogtreecommitdiff
path: root/filesystems
AgeCommit message (Collapse)AuthorFilesLines
2016-07-11Update glusterfs to 3.8.1manu2-6/+6
This is a maintenantce release
2016-07-09Remove python33: adapt all packages that refer to it.wiz7-15/+14
2016-07-09Bump PKGREVISION for perl-5.24.0 for everything mentioning perl.wiz1-2/+2
2016-07-01The recent libarchive update changed the library major. Increase thejperkin1-2/+2
ABI depends and perform a PKGREVISION bump for dependents. Noticed by OSX binary package users.
2016-06-16Update to glusterfs 3.8.0manu4-23/+115
From http://blog.gluster.org/2016/06/glusterfs-3-8-released/ Gluster.org announces the release of 3.8 on June 14, 2016, marking a decade of active development. The 3.8 release focuses on: - containers with inclusion of Heketi - hyperconvergence - ecosystem integration - protocol improvements with NFS Ganesha Contributed features are marked with the supporting organizations. Automatic conflict resolution, self-healing improvements (Facebook) Synchronous Replication receives a major boost with features contributed from Facebook. Multi-threaded self-healing makes self-heal perform at a faster rate than before. Automatic Conflict resolution ensures that conflicts due to network partitions are handled without the need for administrative intervention NFSv4.1 (Ganesha) - protocol Gluster's native NFSv3 server is disabled by default with this release. Gluster's integration with NFS Ganesha provides NFS v3, v4 and v4.1 accesses to data stored in Gluster volume. BareOS - backup / data protection Gluster 3.8 is ready for integration with BareOS 16.2. BareOS 16.2 leverages glusterfind for intelligently backing up objects stored in a Gluster volume. "Next generation" tiering and sharding - VM images Sharding is now stable for VM image storage. Geo-replication has been enhanced to integrate with sharding for offsite backup/disaster recovery of VM images. Self-healing and data tiering with sharding makes it an excellent candidate for hyperconverged virtual machine image storage. block device & iSCSI with LIO - containers File backed block devices are usable from Gluster through iSCSI. This release of Gluster integrates with tcmu-runner [https://github.com/agrover/tcmu-runner] to access block devices natively through libgfapi. Heketi - containers, dynamic provisioning Heketi provides the ability to dynamically provision Gluster volumes without administrative intervention. Heketi can manage multiple Gluster clusters and will be the cornerstone for integration with Container and Storage as a Service management ecosystems. glusterfs-coreutils (Facebook) - containers Native coreutils for Gluster developed by Facebook that uses libgfapi to interact with gluster volumes. Useful for systems and containers that do not have FUSE. For more details, our release notes are included: https://github.com/gluster/glusterfs/blob/release-3.8/doc/release-notes/3.8.0.md The release of 3.8 also marks the end of life for GlusterFS 3.5, there will no further updates for this version.
2016-06-08Bump PKGREVISION for perl-5.24.wiz3-4/+6
2016-05-17Use REAL_ROOT_USER/REAL_ROOT_GROUP instead of ROOT_USER/ROOT_GROUPfhajny2-9/+10
for all pkgsrc dir/file ownership rules. Fixes unprivileged user/group names from leaking into binary packages, manifest as non-fatal chown/chgrp failure messages at pkg_add time. Bump respective packages' PKGREVISION.
2016-04-19Update filesystems/glusterfs to 3.7.11manu3-85/+85
This is a maintenance release
2016-04-15Updated to filesystems/p5-Path-Tiny-0.088mef2-7/+7
----------------------------------------- 0.088 2016-04-15 08:41:07-04:00 America/New_York - No changes from 0.087 0.087 2016-04-12 12:13:14-04:00 America/New_York (TRIAL RELEASE) [Fixes] - Fixed bugs in relative symlink resolution for realpath, spew and edit_lines. [Changes] - Symlink resolution will detect circular loops and throw an error.
2016-04-15Updated to filesystems/fuse-wikepediafs-0.4mef2-9/+9
------------------------------------------- === WikipediaFS 0.4 === 2010-05-12 Zephaniah E. Loss-Cutler-Hull <mercury@users.sourceforge.net> - If a write attempt fails, try to log back in once and writing again, instead of immediately failing. - Additional debugging under the debug log level. - Support for the new login controls for MediaWiki 1.15.3. 2009-09-17 Zephaniah E. Loss-Cutler-Hull <mercury@users.sourceforge.net> - Added a "login-cache-time" option in the config file in order to control how long we cache the login session. - Report mtime for stats of files. - Report back to the application when a write fails, to prevent data loss. - Quite a bit of additional debug logging, if you turn debug logging on. 2009-03-27 Mathieu Blondel <mblondel@users.sourceforge.net> - Made logging more flexible (user.py). 2008-09-17 Mathieu Blondel <mblondel@users.sourceforge.net> - Added a "domain" option in the config file in order to add support for LDAP/AD authentication. Patch by Matthieu Moy and Hannes H旦rl. Fixes #1745542. 2007-05-30 Mathieu Blondel <mblondel@users.sourceforge.net> - Set default cache time if article-cache-time is not present in config. 2007-05-27 Mathieu Blondel <mblondel@users.sourceforge.net> - Fixed the problem with articles having special characters like & (article.py). - Made the man page optional in the install process (setup.py). - Check invalid characters in article name. (fs.py)
2016-04-15Updated to filesystems/p5-Path-Tiny-0.086mef2-7/+7
----------------------------------------- 0.086 2016-04-03 13:49:37-04:00 America/New_York [Documented] - Improved documentation of copy and move.
2016-04-11Recursive revbump from textproc/icu 57.1ryoon2-3/+4
2016-04-04Fix build of OpenAFS userland on at least NetBSD/amd64 7.0.jakllsch7-3/+103
Hopefully NetBSD/x86 -current also works. Should merely be a build fix, but bump PKGREVISION anyway. This commit allocates sysname numbers that have not yet been submitted upstream.
2016-04-03Fix wrong checkummanu1-2/+2
2016-04-03Missing patch checksum from previous commitmanu1-1/+2
2016-04-02Update glusterfs to 3.7.10manu3-85/+86
This is a maintenance release
2016-03-29rpclibdir is still not defined, so restore patch. Next time, I'll likelyjoerg2-1/+15
just mark the package as BROKEN.
2016-03-25Needs _KERNTYPES on NetBSD.joerg1-1/+8
2016-03-22Update glusterfs to 3.7.9manu3-86/+87
This is a maintenance release
2016-03-18Update OpenAFS to 1.6.17, fixes security vulnerabilities.jakllsch2-8/+8
User-Visible OpenAFS Changes OpenAFS 1.6.17 (Security Release) All server platforms * Fix for OPENAFS-SA-2016-001: foreign users can create groups as if they were an administrator (RT #132822) (CVE-2016-2860) All client platforms * Fix for OPENAFS-SA-2016-002: information leakage from sending uninitialized memory over the network. Multiple call sites were vulnerable, with potential for leaking both kernel and userland stack data (RT #132847) * Update to the GCO CellServDB update from 01 January 2016 (12188) Linux clients * Fix a crash when the root volume is not found and dynroot is not in use, a regression introduced in 1.6.14.1 (12166) * Avoid introducing a dependency on the kernel-devel package corresponding to the currently running system while building the srpm (12195) * Create systemd unit files with mode 0644 instead of 0755 (12196) (RT #132662) OpenAFS 1.6.16 All platforms * Documentation improvements (11932 12096 12100 12112 12120) * Improved diagnostics and error messages (11586 11587) * Distribute the contributor code of conduct with the stable release (12056) All server platforms * Create PID files in the right location when bosserver is started with the "-pidfiles" argument and transarc paths are not being used (12086) * Several fixes regarding volume dump creation and restore (11433 11553 11825 11826 12082) * Avoid a reported bosserver crash, and potentially others, by replacing fixed size buffers with dynamically allocated ones in some user handling functions (11436) (RT #130719) * Obey the "-toname" parameter in "vos clone" operations (11434) * Avoid writing a loopback address into the server CellServDB - search for a non-loopback one, and fail if none is found (12083 12105) * Rebuild the vldb free list with "vldb_check -fix" (12084) * Fixed and improved the "check_sysid" utility (12090) * Fixed and improved the "prdb_check" utility (12101..04) All client platforms * Avoid a potential denial of service issue, by fixing a bug in pioctl logic that allowed a local user to overrun a kernel buffer with a single NUL byte (commit 2ef86372) (RT #132256) (CVE-2015-8312) * Refuse to change multi-homed server entries with "vos changeaddr", unless "-force" is given, to avoid corruption of those entries (12087) * Provide a new vos subcommand "remaddrs" for removing server entries, to replace the slightly confusing "vos changeaddr -remove" (12092 12094) * Make "fs flushall" actually invalidate all cached data (11894) * Prevent spurious call aborts due to erroneous idle timeouts (11594) * Provide a "--disable-gtx" configure switch to avoid building and installing libgtx and its header files as well as the depending "scout" and "afsmonitor" applications (12095) * Fixed building the gtx applications against newer ncurses (12125) * Allow pioctls to work in environments where the syscall emulation pseudo file is created in a read-only pseudo filesystem, like in containers under recent versions of docker (12124) Linux clients * In Red Hat packaging, avoid following a symbolic link when writing the client CellServDB, which could overwrite the server CellServDB, by removing an existing symlink before writing the file (12081) * In Red Hat packaging, avoid a conflict of openafs-debuginfo with krb5-debuginfo by excluding our kpasswd executable from debuginfo processing (12128) (RT #131771)
2016-03-09Update to 0.084wen2-7/+7
Upstream changes: 0.084 2016-03-04 07:17:49-05:00 America/New_York [Fixes] - Fixed relative() for the case with regex metacharacters in the path 0.082 2016-03-01 18:23:26-05:00 America/New_York [!!! INCOMPATIBLE CHANGES !!!] - (This warning repeated from 0.079-TRIAL) The relative() method no longer uses File::Spec's buggy rel2bs method. The new Path::Tiny algorithm should be comparable and passes File::Spec rel2abs test cases, except that it correctly accounts for symlinks. For common use, you are not likely to notice any difference. For uncommon use, this should be an improvement. As a side benefit, this change drops the minimum File::Spec version required, allowing Path::Tiny to be fatpacked if desired. [Changes] - no other changes from 0.081 0.081 2016-02-18 16:55:37-05:00 America/New_York (TRIAL RELEASE) [Fixed] - Fixed lines_utf8+chomp and relative() bugs on Windows 0.079 2016-02-15 20:52:10-07:00 America/Mazatlan (TRIAL RELEASE) [!!! INCOMPATIBLE CHANGES !!!] - The relative() method no longer uses File::Spec's buggy rel2bs method. The new Path::Tiny algorithm should be comparable and passes File::Spec rel2abs test cases, except that it correctly accounts for symlinks. For common use, you are not likely to notice any difference. For uncommon use, this should be an improvement. As a side benefit, this change drops the minimum File::Spec version required, allowing Path::Tiny to be fatpacked if desired. [FIXED] - Fixed lines_utf8() with chomping for repeated empty lines. [DOCS] - Documented that subclassing is not supported 0.077 2016-02-10 14:17:32-07:00 America/Mazatlan (TRIAL RELEASE) [ADDED] - Added 'edit' and 'edit_lines' plus _utf8 and _raw variants; this is similar to perl's -i flag (though without backups) 0.076 2015-11-16 10:47:24-05:00 America/New_York - no changes from 0.075 0.075 2015-11-15 21:02:18-05:00 America/New_York (TRIAL RELEASE) [FIXED] - Tilde expansion on Windows was resulting in backslashes. Now they are correctly normalized to forward slashes. [DOCS] - Typos fixed 0.073 2015-10-30 10:36:18-04:00 America/New_York (TRIAL RELEASE) [FIXED] - Fixed spewing to a symlink that crosses a filesystem boundary [PREREQS] - Add Test::MockRandom to META as an recommended test prerequisite.
2016-03-05Bump PKGREVISION for security/openssl ABI bump.jperkin7-13/+14
2016-03-01Update to 2.7:jmmv2-8/+8
* Integrated osxfuse's copy of sshfs, which means that sshfs now works on OS X out of the box. * Added -o cache_max_size=N option to let users tune the maximum size of the cache in number of entries. * Added -o cache_clean_interval=N and -o cache_min_clean_interval=N options to let users tune the cleaning behavior of the cache.
2016-03-01Request kernel types on NetBSD.joerg3-5/+11
2016-03-01Fix const violation. Fix delete on array. Request kernel types onjoerg4-13/+40
NetBSD. Bump revision. Don't fix cheese-style memory leaks.
2016-03-01Add and enable fuse-sshfs.jmmv1-1/+2
2016-03-01Initial addition of fuse-sshfs, version 2.6:jmmv4-0/+48
This is a filesystem client based on the SSH File Transfer Protocol. Since most SSH servers already support this protocol it is very easy to set up: i.e. on the server side there's nothing to do. On the client side mounting the filesystem is as easy as logging into the server with ssh. The idea of sshfs was taken from the SSHFS filesystem distributed with LUFS. There were some limitations in that codebase, and this implementation features: - Based on FUSE - Multithreading - Large reads (max 64k) - Caching directory contents - Reconnect on failure
2016-02-25Use OPSYSVARS.jperkin1-6/+2
2016-02-21Mention that py-service_identity doesn't support python-3.3.wiz1-1/+2
(no change since other dependencies forbid python-3.x anyway.)
2016-02-09Update to glusterfs 3.7.8manu3-84/+84
This is a maintenance update, which fixes a regression bug introduced in 3.7.7, with the self-heal feature being broken.
2016-02-05Add filesystems/fuse-pcachefs:jmmv5-1/+65
The FUSE-based pCacheFS file system provides a simple caching layer for other filesystems. This makes slow, remote filesystems seem very fast to access. Moreover, the cache does not disappear when you start or stop pCacheFS or if you reboot your computer -- it is persistent. pCacheFS is designed for caching large amounts of data on remote filesystems that don't change very much, such as movie or music libraries.
2016-02-01Upgrade to 3.7.7manu5-115/+86
This a maintenance release.
2016-02-01Update fuse-unionfs to 1.0:jmmv9-68/+84
1.0 - add unionfsctl utility to control unionfs-fuse over ioctl - better apple support - dropped stats - better test suite - probably lots of other things, it's been a while since last release ;-) 0.26 - use BUILD_PATH instead of snprintf, which will return -ENAMETOOLONG if the path is too long instead of simply using a wrong path - new options "-o relaxed_permissions" and "-o hide_meta_dir" - included the debian directory - Properly check on rmdir() if sub-branches are also empty - Always compile with debug code, but only enable debugging on request - New option -o debug_file - Lots of bugs fixed in BUILD_PATH() - Improved search of white-out files - Properly fix Debian Bug#509516. - More debug output. - Add syslog support without the risk of possible dead locks - Use fuse big-writes (and reads) if available 0.25 - Alternate way to specify branches - Minor fixes 0.24 - Support for liveCDs / live USB sticks (-o chroot) - Build-in support to change the maximum number of open files - Added recursive directory COW. - relative paths: Critical bug fix, had been completely broken in 0.23 0.23 - remove to_user() and to_root() calls for autorization and use fuse build-in default_permissions checks - bugfix: rename created wrong whiteout type 0.22 - Fix a bug reported by Jens Hoelldampf <jens@hoelldampf.net>, in 0.21 cow didn't work for pathes. 0.21 - Fix a segmentation fault when COW was enabled, but no rw-branch was specified. - Proper handling when ro-branches are on top of rw-branches. - Disabled syslog entries for now, since it might cause deadlocks. - Fixed a license issue with the elfhash, since the CPL is not compatible with the BSD license. - Fix a bug when stat() was called instead of lstat(). - Many internal code changes (renaming of "root" to "branch"). - Better directory structure. - Add this NEWS file. - Add a man page. 0.20 - Fix a critical bug introduced in 0.19 when we disabled threadding. 0.19 - Several copy-on-write fixes (readdir, unlink, rmdir, rename). - Whiteout files are now located in branch/.unionfs/ subdirectories. - Disable threadding, since our current permissions-model is not compatible with the NPTL implementation and the Posix-Thread model in general. - Add supplementary group support. 0.18 - First release with copy-on-write (COW) support. - Many many internal code changes.
2015-12-10Since it doesn't seem to want to build with its own argp, use regularjoerg4-3/+32
external one. Restore patch to unbreak build with cwrappers. Bump revision.
2015-12-05Extend PYTHON_VERSIONS_INCOMPATIBLE to 35adam6-12/+12
2015-11-10Changes 2015.3.14:adam9-39/+104
Changes to NTFS-3G: ------------------- Fixed inserting a new ACL after wiping out by chkdsk Fixed Windows-type inheritance Fixed ignoring the umask mount option when permissions are used Fixed checking permissions when Posix ACLs are compiled in but not enabled Disabled option remove_hiberfile on read-only mounts Implemented an extended attribute to get/set EAs Avoid full runlist updating in more situations Update ctime after setting an ACL Use MFT record 15 for the first extent to MFT:DATA Ignore the sloppy mount option (-s) Implemented FITRIM (fstrim) ioctl Reengineered the compression algorithm Changes to ntfsprogs: --------------------- Return success from ntfsprogs utilities with options –version and the like Implemented configure option –enable-quarantined for non functional utilities Added manuals for ntfsdecrypt, ntfswipe, ntfstruncate and ntfsfallocate
2015-11-09Requires libevent>=2.0dholland1-1/+4
2015-11-09Maintenance update of glusterfs to 3.7.6manu4-100/+86
2015-11-04Remove duplicate SHA512 digests that crept in.agc1-2/+1
2015-11-03Add SHA512 digests for distfiles for filesystems categoryagc39-39/+78
Existing SHA1 digests verified, all found to be the same on the machine holding the existing distfiles (morden). Existing SHA1 digests retained for now as an audit trail.
2015-10-28update openafs to 1.6.15jakllsch2-7/+8
OpenAFS 1.6.15 (Security Release) All client and server platforms * Fix for OPENAFS-SA-2015-007 "Tattletale" When constructing an Rx acknowledgment (ACK) packet, Andrew-derived Rx implementations do not initialize three octets of data that are padding in the C language structure and were inadvertently included in the wire protocol (CVE-2015-7762). Additionally, OpenAFS Rx in versions 1.5.75 through 1.5.78, 1.6.0 through 1.6.14, and 1.7.0 through 1.7.32 include a variable-length padding at the end of the ACK packet, in an attempt to detect the path MTU, but only four octets of the additional padding are initialized (CVE-2015-7763).
2015-10-26Drop maintainership.gdt1-2/+2
(I don't use this any more.)
2015-10-11Reset maintainertron1-2/+2
2015-10-10Update filesytems/glusterfs to 3.7.5manu3-85/+84
This is a bugfix release
2015-10-10Recursive revbump from textproc/icuryoon2-3/+4
2015-09-29Update openafs to 1.6.14.jakllsch2-7/+7
User-Visible OpenAFS Changes OpenAFS 1.6.10 All platforms * Don't hide the "version" subcommand in help output (11214) * Documentation improvements (11126 11216 11222 11223 11225 11226) * Improved diagnostics and error messages (11154 11246 11247 11249 11181 11182 11183) * Build system improvements (11158 11221 11224 11225 11227..11241 11282 11342 11350 11353 11242 11367 11392) * Avoid potentially erratic behaviour under certain error conditions by either avoiding or at least not ignoring them, in various places (11008 11010..11065 11112 11148 11196 11530) FreeBSD * Support releases 9.3 and 10.1 (11368 11369 11402 11403 11404) * Makes a disk cache more likely to work on FreeBSD, though such configurations remain not very tested (11448) All server platforms * Added volscan(8) (11252..11280 11387 11388) * Fixed a bug causing subgroups not to function correctly if their ptdb entry had more than one continuation entry (11352) * Logging improvements (10946 11153) * Allow log rotation via copy and truncate (11193) * Avoid a server crash during startup only observed on a single platform and when using a 3rd party library under certain circumstances, which is a collateral effect of the security improvements introduced in OpenAFS release 1.6.5 (11075) (RT #131852) All client platforms * Raised the free space reported for /afs to the maximum possible value of just under 2 TiB - the old value was 9 GiB on most platforms (10984) * Reduced the amount of stack space used (11162 11163 11203 11164..11167 11338 11339 11364..11366 11381) * Sped up a periodic client task which could be problematically slow on systems with a large number of PAGs and files in use (11307) * Fixed failure of the up command with large ACLs (11111) * Avoid a potential crash of aklog (11218) * Avoid potential crashes of scout and xstat_fs_test (11155) Linux clients * Support kernels up to 3.16 (11308 11309) * Fixed a regression introduced in OpenAFS release 1.6.6 that made checking for existing write locks incorrectly fail on readonly volumes (11361) * Fixed a regression introduced in OpenAFS release 1.6.8 that could cause VFS cache inconsistencies when a previously-accessed directory entry was removed and recreated with the same name but pointing to a different file on another client (11358) * Use the right path to depmod in Red Hat packaging to avoid dependency calculation incorrectly failing unless a link /sbin -> /usr/sbin is present on the system performing it (11171) (RT #131860) * Do not ignore kernel module build errors (11205) User-Visible OpenAFS Changes OpenAFS 1.6.11 All platforms * Allow aklog to succeed creating native K5 tokens even when mapping the K5 principal to a K4 one fails (11538) * Build fixes (11435 11636) All client platforms * Avoid a potential kernel panic due to connection reference overcounts (11645) (RT #131885) * Avoid potential corruption of files written using memory mapped I/O when the file is larger than the cache (11656) (RT #131976) Linux clients * Support kernels at least up to 3.19 (11549 11550 11569 11570 11595 11658..11662 11694 11752) Note: By default this excludes kernels 3.17 to 3.17.2, which will leak an inode reference when an error occurs in d_splice_alias(). The module will build and work, but leak kernel memory, leading to performance degradation and eventually system failure due to memory exhaustion. Since it's impossible to detect this condition automatically, the switch --enable-linux-d_splice_alias-extra-iput must be passed to configure when building the module for those kernels. The same would be necessary for any kernel with backports of commit 908790fa3b779d37365e6b28e3aa0f6e833020c3 or commit 95ad5c291313b66a98a44dc92b57e0b37c1dd589 but not the fix in commit 51486b900ee92856b977eacfc5bfbe6565028070 in the linux-stable repo (git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git) or the corresponding changes on other branches. * Fixed a regression introduced in OpenAFS release 1.6.10 which could make the spurious "getcwd: cannot access parent directories" problem return (11558 11568) (RT #131780) * Avoid leaking memory when scanning a corrupt directory (11707) OS X clients * Support OS X 10.10 "Yosemite" (11571 11572 11611) (RT #131946) Solaris clients * Avoid reading random data rather than correct cache content when using ZFS as the cache file system on Solaris >= 11, and fix potential similar problems on other platforms (11713 11714) FreeBSD * Build fix for releases >= 11.0 (11610) OpenBSD * Support release 5.4 (11700) User-Visible OpenAFS Changes OpenAFS 1.6.11.1 Linux clients * Support kernels up to 4.0 (11760 11761) FreeBSD clients * Fixed kernel module build on systems with an updated clang which no longer accepts the -mno-align-long-strings as a no-op (11809) User-Visible OpenAFS Changes OpenAFS 1.6.12 All server platforms * Avoid database corruption if a database server is shut down and then brought up again quickly with an altered database (11773 11774) (RT #131997) All client platforms * Fixed a potential buffer overflow in aklog (11808) * Avoid a bogus warning regarding the checkserver daemon, which could be logged during startup when the cache initialization was very fast (11680) * Added documentation of the inaccuracy of the 'partition' field in 'fs listquota' output for partitions larger than 2 TiB (11626) Linux clients * Support kernels up to 4.1 (11872 11873) * Avoid spurious EIO errors when writing large chunks of data to mmapped files (11877) OS X * Build fixes required at least on OS X 10.10 Yosemite with the latest XCode (11859 11876 11842..11845 11863 11878 11879) User-Visible OpenAFS Changes OpenAFS 1.6.13 All server platforms * Fix for CVE-2015-3282: vos leaks stack data onto the wire in the clear when creating vldb entries * Workaround for CVE-2015-3283: bos commands can be spoofed, including some which alter server state * Disabled searching the VLDB by volume name regular expression to avoid possible buffer overruns in the volume location server All client platforms * Fix for CVE-2015-3284: pioctls leak kernel memory * Fix for CVE-2015-3285: kernel pioctl support for OSD command passing can trigger a panic Solaris clients * Fix for CVE-2015-3286: Solaris grouplist modifications for PAGs can panic or overwrite memory User-Visible OpenAFS Changes OpenAFS 1.6.14 All server platforms * Prior to the OpenAFS security release 1.6.13, the Volume Location Server (vlserver) RPC VL_ListAttributesN2() supported wildcard volume name lookups via regular expression (regex) pattern matching. This support was completely disabled in 1.6.13 because it was judged to be a security risk due to buffer overruns in the implementation, as well as the possibility of denial of service attacks where certain regular expressions could cause excessive CPU usage in some regex implementations. Unfortunately, after 1.6.13 was released, it was discovered that the native OpenAFS 'backup' system uses the VL_ListAttributesN2() regex support to evaluate configured volume sets. If you use the OpenAFS 'backup' system (or another backup system which relies on it, such as Tivoli Storage Manager (TSM, aka Tivoli ADSM)), and are using volume sets which require regular expressions for the volume name, then those volume sets cannot be resolved by OpenAFS 1.6.13. The next paragraph provides details on how to identify any affected volume sets. OpenAFS backup volume sets may be described by fileserver, partition name, and volume name. The fileserver and partition specifications never require regular expression support. The volume name specification always requires regular expression support except for when specifying _all_ volumes via two special cases: the universal wildcard ".*", or "". For example, volume name "proj" or "*.backup" or "homevol.*" all require regex support - even if the specification contains no wildcard characters and/or exactly matches an existing volume name. As a result of this issue, OpenAFS 1.6.14 replaces the 1.6.13 changes to VL_ListAttributesN2. 1.6.14 prevents the buffer overruns and reenables the regex support, but restricts it to OpenAFS super-users and -localauth only. This is sufficient to restore the OpenAFS 'backup' system's ability to work correctly with any previously supported volume set. The OpenAFS 'backup' commands are already documented to require super-user authorization, so this restriction is moot for the backup system. There are no other direct consumers of the VL_ListAttributesN2() regex support in the OpenAFS tree. However, the VL_ListAttributesN2 RPC is publicly accessible and might be used by third party tools directly or indirectly via OpenAFS's libadmin. Any such tools that issue VL_ListAttributesN2 RPCs must now be executed using super-user or -localauth tokens. None of the other security fixes in OpenAFS 1.6.13 are known to have any issues, and are still included unchanged in OpenAFS 1.6.14. If there are any questions concerning the possible impact of OpenAFS 1.6.13 or 1.6.14 at your site, please contact your OpenAFS support provider or the openafs-info@openafs.org mailing list for further assistance.
2015-09-04Add following line for make testmef1-1/+3
BUILD_DEPENDS+= p5-File-pushd-[0-9]*:../../devel/p5-File-pushd
2015-09-01Maintenance upgrade to 3.7.4manu4-1021/+86
2015-08-28Update to 0.5 to fix build with latest libgphoto. Set LICENSE.wiz2-9/+8
What's new in 0.5 ----------------- - ported to work with new libgphoto2 2.5.0 and later
2015-08-14Update to 1.10.2:wiz3-12/+14
Release 1.10.2 (2015-07-30) ''''''''''''''''''''''''''' Packaging Changes ----------------- This release no longer requires the ``mock`` library (which was previously used in the unit test suite). Shortly after the Tahoe-LAFS 1.10.1 release, a new version of ``mock`` was released (1.1.0) that proved to be incompatible with Tahoe's fork of setuptools, preventing Tahoe-1.10.1 from building at all. `#2465`_ The ``tahoe --version`` output is now less likely to include scary diagnostic warnings that look deceptively like stack traces. `#2436`_ The pyasn1 requirement was increased to >= 0.1.8. .. _`#2465`: https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2465 .. _`#2436`: https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2436 Other Fixes ----------- A WebAPI ``GET`` would sometimes hang when using the HTTP Range header to read just part of the file. `#2459`_ Using ``tahoe cp`` to copy two different files of the same name into the same target directory now raises an error, rather than silently overwriting one of them. `#2447`_ All tickets closed in this release: 2328 2436 2446 2447 2459 2460 2461 2462 2465 2470. .. _`#2459`: https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2459 .. _`#2447`: https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2447
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-30 03:30:50 +0000