summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2016-02-11Fix configure to match properly for darwin9 so that PowerPC code is generatedjklos2-7/+16
properly on Leopard systems.
2016-02-09Updated net/syncthing to 0.12.18abs2-7/+7
v0.12.18 - Add -paths option to print config, key, database paths (@calmh) - Minor refactoring
2016-02-09Update 3.8.2 to 3.8.3mef3-22/+17
--------------------- 2015-05-28 wimpunk * [r183] ., release: Removing unneeded release directory 2015-03-23 wimpunk * [r182] ddclient: Reverting to the old perl requirements like suggested in #75 The new requirements were added when adding support for cloudflare. By the simple fix suggested by Roy Tam we could revert the requirements which make ddclient back usable on CentOS and RHEL. * [r181] ddclient: ddclient: made json optional As suggested in pull 7 on github by @abelbeck and @Bugsbane it is better to make the use of JSON related to the use of cloudflare. * [r180] ddclient: ddclient: reindenting cloudflare Indenting cloudflare according to the vim tags * [r179] ddclient: ddclient: correction after duckdns merge Correcting duckdns configuration after commit r178 * [r178] ddclient: Added simple support for Duckdns www.duckdns.org Patch provided by gkranis on github. Merge branch 'gkranis' 2015-03-21 wimpunk * [r177] README.md: Added duckDNS to the README.md * [r176] sample-etc_rc.d_init.d_ddclient.ubuntu: update ubuntu init.d script Merge pull request #9 from gottaloveit/master * [r175] Changelog, Changelog.old: Renamed Changelog to Changelog.old Avoiding conflicts on case insensitive filesystems * [r174] ddclient: Add missing config line for CloudFlare Merge pull request #19 from shikasta-net/fixes * [r173] ddclient: Merge pull request #22 from reddyr/patch-1 loopia.se changed the "Current Address:" output string to "Current IP Address:" * [r172] ddclient: fixed missing ) for cloudflare service hash Merge pull request #16 from adepretis/master 2015-01-20 wimpunk * [r171] README.md, ddclient, sample-etc_ddclient.conf: Adding support for google domain Patch gently provided through github on https://github.com/wimpunk/ddclient/pull/13 2014-10-08 wimpunk * [r170] README.md, ddclient, sample-etc_ddclient.conf: Added support for Cloudflare and multi domain support for namecheap Pull request #7 from @roberthawdon See https://github.com/wimpunk/ddclient/pull/7 for more info. 2014-09-09 wimpunk * [r169] ddclient: Bugfix: allowing long username-password combinations Patch provided by @dirdi through github. 2014-08-20 wimpunk * [r166] ddclient: Fixing bug #72: Account info revealed during noip update * [r165] ddclient: Interfaces can be named almost anything on modern systems. Patch provided by Stephen Couchman through github 2014-06-30 wimpunk * [r164] ddclient: Only delete A RR, not any RR for the FQDN Make the delete command specific to A RRs. This prevents ddclient from deleting other RRs unrelated to the dynamic address, but on the same FQDN. This can be specifically a problem with KEY RRs when using SIG(0) instead of symmetric keys. Reported by: Wellie Chao Bug report: http://sourceforge.net/p/ddclient/bugs/71/ Fixes #71 2014-06-02 wimpunk * [r163] README.md, ddclient: Adding support for nsupdate. Patch provided by Daniel Roethlisberger <daniel@roe.ch> through github. 2014-04-29 wimpunk * [r162] README.md, README.ssl, ddclient: Removed revision information Revision information isn't very usable when switching to git. 2014-03-20 wimpunk * [r161] README.md, README.ssl, ddclient, sample-etc_rc.d_init.d_ddclient.alpine: Added Alpine Linux init script Patch send by Tal on github. * [r160] RELEASENOTE: Corrected release note 2013-12-26 wimpunk * [r159] release/readme.txt: Commiting updated release information * [r158] README.md, RELEASENOTE: Committing release notes and readme information to trunk
2016-02-09Update to 2.16mef2-7/+7
-------------- Explicit ChangeLog not found, but diff src tells two options are added, -Q and -V, ( -V vlan -Q priority ) -Q pri 802.1p priority to set. Should be used with 802.1Q (-V). Defaults to 0. -V num 802.1Q tag to add. Defaults to no VLAN tag.
2016-02-09Update 3.31 to 3.71mef2-8/+7
------------------- lft 3.71 / WhoB 3.71 ---------------------- - WhoB: Autodetect input from STDIN (pipe) without '-f -' - WhoB: Redirect some extraneous output to STDERR lft 3.7 / WhoB 3.7 ---------------------- - Added support for 4-byte ASNs - Added support for whob reading bulk input from stdin using '-f -' lft 3.6 / WhoB 3.6 ---------------------- - Added support for 4-byte ASNs lft 3.5 / WhoB 3.5 ---------------------- - Roy T. provided DNS speed-ups - Added GraphViz output option with -g lft 3.35 / WhoB 3.5 ---------------------- - Roy T. provided some clean-ups to avoid double free()s - Bug fixes only lft 3.33 / WhoB 3.5 ---------------------- - Fixed free(sess->hostname) bug (segfault on unresolvable hostname) - Improved error hanlding of pcap failures related to data link type - Kurt's FreeBSD fix for pcap snprintf - Bug fixes only lft 3.32 / WhoB 3.5 ---------------------- - Added support for several encapsulating protocols such as PPP - no other changes
2016-02-09Update 0.7 to 0.8mef2-7/+7
----------------- Thu 15 Oct 2009: [10]Version 0.8 released; changes include: various smaller fixes.
2016-02-09Add user-destdir supportbouyer3-3/+34
2016-02-09Bug fix for workers busy-waiting for child completion: when read()ing abouyer12-26/+42
non-bloking descriptor after a poll(), don't loop forever on EAGAIN as poll() may return POLLIN for a descriptor which doesn't have data to be read. Bump PKGREVISION. While there add user-destdir support.
2016-02-08Do not use TCP_NOPUSH on Darwin, it adds a 5 second delay after the initialjperkin2-7/+7
handshake. Bump PKGREVISION.
2016-02-07more 64bit time_t fixes. Now compiles without -Wformat warnings.bouyer14-19/+649
Ride previous PKGREVISION bump
2016-02-07make it work where Kerberos does not live in.szptvlfn1-2/+2
2016-02-07Workaround for 64bit time_t bug on i386, causing logs to be filled withbouyer3-3/+19
"(null)" instead of the message. Bump PKGREVISION.
2016-02-07Changes 4.1.4:adam4-90/+13
* Fixed 1315 - socket monitor hangs if bind/setsockopt failed. * Fixed 1399 - assertion failure in tcp.cpp after network reconnect. * Fixed 1632 - build failure using latest libsodium. * Fixed 1644 - assertion failure in msg.cpp:390 on STREAM sockets. * Fixed 1661 - does not handle IPv6 link local addresses.
2016-02-06Removed the automatic setting of PKGNAME to ocaml-${DISTNAME} fromjaapb1-2/+1
ocaml.mk. It was becoming more trouble than it was worth: only a minority of packages used it, and it only made Makefiles more confusing. (I've left out some packages: these will be updated forthwith)
2016-02-06Update "youtube-dl" to version 2016.02.05.1. Changes since 2016.01.23:tron3-8/+11
[youtube] added vcodec/acodec/abr for multiple itags [utils] Add more items to mimetype2ext (#8293) [utils] Reorder items in mimetype2ext alphabetically [youtube] Prefer info from YouTube than _formats (#8293) [common] Keep full codec name from m3u8 manifests [facebook] Add shortcut and reformat _VALID_URL [facebook:post] Add extractor (Closes #8321) [vevo] extract all formats and bypass geo restriction [vevo] extract metadata and formats from api if videoinfo is empty [cspan] Fix clip/prog id extraction (#8317) [vevo] fallback to youtube video only if vevo video is geo restricted [cspan] Extract from path when no qualities (Closes #8317) [instagram] Make description optional (Closes #8326) [daum.net] Fixes #8331 [extractor/common] Auto calculate tbr when missing [spankbang] Fix formats extraction [spankbang] Fix title extraction (Closes #8329) [extractor/common] detect media playlist in _extract_m3u8_formats [cbsnews] extract all formats [cbsnews] Remove unused import [utils] fix dfxp2srt text extraction(fixes #8055) [ndr:embed:base] Add missing ext for m3u8 [ok] Add support for mobile URLs (Closes #8345) [bbc] Add another title regex (Closes #8340) [bbc] Add another description regex [bbc] Add test for #8147 [ffmpeg] fix adding metadata when using m3u8_native(fixes #8350) [youtube:user] Require 'https?://' in the url (fixes #8356) [azubu] Add extractor for live streams (closes #8343) [cspan] Unescape path (Closes #8365) [extractor/common] Restrict checks when auto calculating tbr [espn] Improve video id extraction (Closes #8368) [daum] Fix copy-paste mistake [daum] Fix add view_count, comment_count to test [daum.net] Move the request to ClipInfoXml.do [daum.net] Support VodPlayer.swf URLs (closes #8173) [daum] Add 'thumbnail' to all _TESTS [facebook] Support alternative webpage form [youtube] Move decrypt_sig out of _parse_dash_manifest [daum.net] Support for playlists, user channels [downloader/f4m] Prefer bootstrap url attribute over inline bootstrap [matchtv] Add extractor (Closes #8313) [options] Add missing closing parenthesis [common] _parse_dash_manifest() from youtube.py [downloader/fragment] Do not report total bytes estimation and eta [downloader/f4m] Add live stream flag to context [common] Modify _parse_dash_manifest for use in Facebook [downloader/fragment] Remove superfluous whitespace [facebook] Add support for DASH manifests [youtube] Pass self._formats to _parse_dash_manifest [common] Fix for youtube [common] Prefer the manifest than formats_dict in determining codecs [downloader/f4m] Do not update fragment list while test [youtube] Remove '(v|a)codec': 'none' entries [common] Rename to namespace [common] Remove unused arguments [common] Add _extract_dash_manifest_formats [facebook] Add md5 for the test case with DASH [generic] Add support for Limelight API [limelight] fix format sorting and make m3u8 and f4m extraction [npo] Add extension for m3u8 [viidea] Skip download for the test case requiring ffmpeg [vgtv] Fix test_VGTV_2 [screenwavemedia] Fix HLS extension and test_TeamFour [tv2] Fix test_TV2 [senateisvp] Fix test_SenateISVP and test_SenateISVP_1 [nrktv] Fix _TESTS [nbc] Use NBC's id and fix _TESTS [nba] Add ext for hls formats and fix test_NBA [schooltv] Add extractor for SchoolTV playlists [schooltv] Improve video id regex [Gamekings] Fix url from .tv to .nl [letv] Fix LetvCloud extraction [Gamekings] Fix viewing of old videos [youtube] Use authentication for entry list base extractor (Closes #8380) [youtube] Filter duplicates in playlists base extractor [test_youtube_lists] Fix TestYoutubeLists.test_youtube_course [test_subtitles] Fix TestRaiSubtitles [xuite] Replace the test case with my uploaded one [FFmpegSubtitlesConvertorPP] delete old subtitle files (fixes #8382) [youtube] Use 'orderedSet' instead of 'set' to preserve the order [gamekings] Add MD5 back [gamekings] add_ie [gamekings] Stricter checks [acast] Fix extraction [acast] Remove ACastBaseIE [allocine] Fix extraction of test_allocine_1 and update tests [bpb] Fix extraction and update tests [allocine] Use xpath_element [vidzi] Fix extraction [vidzi] Fix _TESTS [YoutubeDL] Do not override ie_key in url_transparent [kickstarter] Eliminate the warning message and add_ie [kickstarter] Fix title and test_kickstarter [daum] PEP8 [daum] Do not match a single URL with multiple info extractors [daum] Update test_daum_1 [daum.net:user] Match more URLs (#1952) [vk:uservideos] Improve _VALID_URL (Closes #8389) [test_YoutubeDL] Fix test_youtube_format_selection [ffmpeg] fix adding metadata when using --hls-prefer-native(#8350) [utils] dfxp2srt: make TTMLPElementParser inherit from object [cbsnews] add support for live videos(fixes #7010) [srgssr] use flv as ext for rtmp formats [README.md] Clarify unavailable sequences in output format [kuwo] Check for georestriction [generic] extract m3u8 formats when mpegurl content type detected [youtube] fix subtitle extraction(fixes #8415) [youtube] fix subtitle order [test_subtitles] update youtube subtitles tests [arte.tv:+7] Fix extraction (fixes #8427)
2016-02-04Updated net/syncthing to 0.12.17abs2-11/+11
v0.12.17 - Handle null case for invalid ng-model value (#2392, @tpng) - Use dialer in relay checks (#2732, @AudriusButkevicius) Plus some minor line shuffling for pkglint
2016-02-04Fix build on NetBSD-current, where it warns about the unportablewiz2-1/+26
'%m' format string. From coypu.
2016-02-04Add bl3.mk file, provided by coypu.wiz1-0/+13
2016-02-04Bump PKGREVISION for vala update to 0.30.wiz2-4/+4
2016-02-03Updated package to newest version, 4.0.4. Changes include:jaapb5-342/+356
* GnuTLS: compatibility with GnuTLS-3.4.2 * Nethttpd_plex: the post_add_hook was not called by accident (since OCamlnet-4); this is now fixed. * Nethtml: new option case_sensitive * GnuTLS: initializing the library on-demand. This avoids that /dev/random is kept open all the time since program start, and works around incompatibilities with Netplex. (Thomas Calderon found the problem.) * GnuTLS: setting DH parameters on certificates (this was forgotten in previous releases). (Thomas Calderon found the problem.) * GnuTLS: supporting GnuTLS versions where SRP is disabled. Supporting GnuTLS-3.4. * OpenBSD build: fix linker option (Christopher Zimmermann) * Equeue: There is a new method request_proxy_notification, which is only used by Uq_engines.qseq_engine (but unfortunately needs to appear in the public type of the object). This new method permits that chains of Uq_engines.qseq_engine pairs can now be arbitrarily long without consuming too much memory and without the danger of getting stack overflows. This fixes issues where notification chains got too long. In particular, we saw a stack overflow when retrieving a video stream via HTTP. The stream was sent with many chunks, resulting in a long Uq_engines.qseq_engine chain. Implementers of engines can simply define request_proxy_notification as no-ops. * Nethttp.set_content_range: this function generated an incorrect header (the "bytes" word was missing). (Török Edwin) * _oasis is generated from _oasis.in * Netplex: the Netplex socket directory has a different default if not specified in the config file. * Netshm: the POSIX specifier has now two args * IPv6: automatically enabled if there is a global IPv6 address * Unicode tables: Moved them to a separate netunidata library. This library needs to be linked in for getting access to the tables (this is no longer the default). * Renamings: Http_client, Ftp_client etc. => Nethttp_client, Netftp_client Mimestring => Netmime_string Xdr => Netxdr * Netmime: moved functions to Netmime_header and Netmime_channels * Netmech_scram: Removed the check that passwords only consist of ASCII chars. The user can now call Netsaslprep.saslprep. * Removed: rpc-auth-dh, nethttpd-for-netcgi2 * Http_client: the authentication mechanisms are now encapsulated in a first-class module HTTP_MECHANISM. So far, there is Digest authentication in this form. The signature of HTTP_MECHANISM is similar to SASL_MECHANISM. Another visible change is that the insecure Basic authentication is no longer enabled for non-TLS-secured connections. This can be changed back by setting flags, though. Some fixes in the design improve Digest authentication for proxy connections. * Netpop: implementating SASL authentication for POP3. Moved Netpop into netclient. * Netsmtp: implementing SASL authentication for SMTP. Moved Netsmtp into netclient. * Adding a framework for SASL, and a number of mechanisms (PLAIN, CRAM-MD5, DIGEST-MD5, SCRAM-SHA1). * fcgi/scgi/ajp connectors: exporting a handle_connection function, and unifying existing such functions (Christopher Zimmermann) * adding support for modular cryptography (symmetric ciphers and digests) * SCRAM is now implemented with the new crypto providers * removing dependency on Cryptokit * removed library netgssapi; now part of netsys/netstring * removed library netmech-scram; now part of netstring Ocamlnet-4 adds: - new library netgss-system - new library nettls-gnutls - removed equeue-ssl and rpc-ssl - X.500 modules Netasn1, Netdn, Netx509 - Crypto definitions Netsys_crypto_types, Netsys_crypto - TLS modules Netsys_tls, Nettls_support - Support for SASL and GSSAPI - Moved many functions from Uq_engines to new modules in the equeue library (Uq_client, Uq_server, Uq_multiplex, Uq_transfer)
2016-02-02Update net/socat to 1.7.3.1.leot2-7/+7
Changes: ####################### V 1.7.3.1: security: Socat security advisory 8 A stack overflow in vulnerability was found that can be triggered when command line arguments (complete address specifications, host names, file names) are longer than 512 bytes. Successful exploitation might allow an attacker to execute arbitrary code with the privileges of the socat process. This vulnerability can only be exploited when an attacker is able to inject data into socat's command line. A vulnerable scenario would be a CGI script that reads data from clients and uses (parts of) this data as hostname for a Socat invocation. Test: NESTEDOVFL Credits to Takumi Akiyama for finding and reporting this issue. Socat security advisory 7 MSVR-1499 In the OpenSSL address implementation the hard coded 1024 bit DH p parameter was not prime. The effective cryptographic strength of a key exchange using these parameters was weaker than the one one could get by using a prime p. Moreover, since there is no indication of how these parameters were chosen, the existence of a trapdoor that makes possible for an eavesdropper to recover the shared secret from a key exchange that uses them cannot be ruled out. Futhermore, 1024bit is not considered sufficiently secure. Fix: generated a new 2048bit prime. Thanks to Santiago Zanella-Beguelin and Microsoft Vulnerability Research (MSVR) for finding and reporting this issue.
2016-02-01Update to 0.10.1:wiz2-7/+7
* Release 0.10.1 (21-Jan-2015) ** Packaging Fixes This release fixes a version-string management failure when the "log publisher" feature was used in a tree built from a release tarball (rather than from a git checkout). This caused a unit test failure, as well as operational failures when using `flogtool tail`. Thanks to Ramakrishnan Muthukrishnan (vu3rdd) for the catch and the patch. (#248)
2016-02-01Fix build on SunOS. Clean up patches while here.jperkin3-3/+30
2016-02-01Changes 1.9.20160113:adam2-7/+7
* --disable-pppconn to disable WanPPPConnection more fixes in DeviceProtection service * improve syslog message for incoming HTTP requests
2016-01-31Update to 4.3.4ryoon3-9/+8
Changelog: ============================= Release Notes for Samba 4.3.4 January 12, 2016 ============================= This is the latest stable release of Samba 4.3. Changes since 4.3.3: -------------------- o Michael Adam <obnox@samba.org> * BUG 11619: doc: Fix a typo in the smb.conf manpage, explanation of idmap config. * BUG 11647: s3:smbd: Fix a corner case of the symlink verification. o Jeremy Allison <jra@samba.org> * BUG 11624: s3: libsmb: Correctly initialize the list head when keeping a list of primary followed by DFS connections. * BUG 11625: Reduce the memory footprint of empty string options. o Douglas Bagnall <douglas.bagnall@catalyst.net.nz> * BUG 11659: Update lastLogon and lastLogonTimestamp. o Ralph Boehme <slow@samba.org> * BUG 11065: vfs_fruit: Enable POSIX directory rename semantics. * BUG 11466: Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix. * BUG 11645: smbd: Make "hide dot files" option work with "store dos attributes = yes". o Günther Deschner <gd@samba.org> * BUG 11639: lib/async_req: Do not install async_connect_send_test. o Stefan Metzmacher <metze@samba.org> * BUG 11394: Crash: Bad talloc magic value - access after free. o Rowland Penny <repenny241155@gmail.com> * BUG 11613: samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given. o Karolin Seeger <kseeger@samba.org> * BUG 11619: docs: Fix some typos in the idmap backend section. * BUG 11641: docs: Fix typos in man vfs_gpfs. o Uri Simchoni <uri@samba.org> * BUG 11649: smbd: Do not disable "store dos attributes" on-the-fly.
2016-01-30Update mikutter to 3.3.5.tsutsui2-7/+7
Upstream changes: * update lang files (en, zh_TW) * reweeting retweeted tweet didn't work in some case * gyazo preview didn't work
2016-01-27Fix the Solaris SMF method script. Bump PKGREVISION.jperkin3-3/+19
2016-01-26distinfo was missing checksum for patch-zenmap_test_run__tests.py.jklos1-2/+2
2016-01-25Updated net/syncthing to 0.12.16abs2-9/+8
v0.12.16 Don't require restart for usage reporting changes (#2704, @calmh) Restart on Debian package upgrade (@calmh) Avoid spurious scans with inotify package (#2151, @plouj)
2016-01-24Changes 2016.01.23:adam3-14/+38
[downloader/common] report_retry: Don't crash when retries is infinite [cbsnews] Extract subtitles [cbsnews] Simplify subtitles extraction and fix test [arte:future] Fix extraction [arte:future] Make duplicated test matching only [arte:cinema] Add extractor [nuevo] Generalize nuevo extractor and add support for trollvids [nuevo] Simplify nuevo extractors [ruleporn] Add new extractor [nuevo] Improve thumbnail extraction [ruleporn] Rework in terms of nuevo [lovehomeporn] Add extractor [SVTPlay] Add subtitle support [svt] Improve subtitles extraction and add test [options] Clarify language tags [kanalplay] Use IETF language tag [drtv] Use IETF language tag
2016-01-24Update mikutter to 3.3.4.tsutsui2-8/+8
Also take maintainership. Upstream changes: * fill untranslated ja_KanSai locales * avoid methods deprecated by Ruby 2.3
2016-01-24Attempt to bring sanity to how ABI and MACHINE_ARCH are set.jperkin1-2/+2
Previously there were at least 5 different ways MACHINE_ARCH could be set, some statically and some at run time, and in many cases these settings differed, leading to issues at pkg_add time where there was conflict between the setting encoded into the package and that used by pkg_install. Instead, move to a single source of truth where the correct value based on the host and the chosen (or default) ABI is determined in the bootstrap script. The value can still be overridden in mk.conf if necessary, e.g. for cross-compiling. ABI is now set by default and if unset a default is calculated based on MACHINE_ARCH. This fixes some OS, e.g. Linux, where the wrong default was previously chosen. As a result of the refactoring there is no need for LOWER_ARCH, with references to it replaced by MACHINE_ARCH. SPARC_TARGET_ARCH is also removed.
2016-01-24update nmap options ndiff and zenmap and corresponding PLIST entries,richard6-5/+51
as well as getting the test facility to run. okay'd pettai@ No PKGREVISION for now as default installation remains unchanged.
2016-01-24Use hardcoded py27ryoon1-9/+9
2016-01-22The previous update to the isc-dhcp packages replaced @PREFIX@ andjperkin4-11/+14
@PKG_SYSCONFDIR@ with hardcoded paths to /usr/pkg, possibly due to SUBST_STAGE being set to post-patch. Revert that change, move SUBST_STAGE to pre-configure, and perform some minor cleanup while here. Bump PKGREVISION of all packages, ignoring pkglint's error that this shouldn't be done in Makefile.common.
2016-01-21Modify setup.py requirements in order to be less restrictive regarding versionleot3-2/+36
dependencies. Bump PKGREVISION.
2016-01-20Adjust rc script to use correct pidfile.roy1-1/+11
2016-01-20Update to dhcpcd-6.10.1 with the following changes:roy2-7/+7
* Add -P, --printpidfile to print the pidfile dhcpcd will use to stdout * Fix a crash when a non active interface departs * Add the -1, --oneshot option which causes dhcpcd to exit once an interface has been configured * Fix delegation activating interfaces
2016-01-20Update bind99 to 9.9.8pl3 (BIND 9.9.8-P3).taca2-7/+7
Security Fixes * Specific APL data could trigger an INSIST. This flaw was discovered by Brian Mitchell and is disclosed in CVE-2015-8704. [RT #41396] * Named is potentially vulnerable to the OpenSSL vulnerabilty described in CVE-2015-3193. * Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. This flaw is disclosed in CVE-2015-8000. [RT #40987] * Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. This flaw is disclosed in CVE-2015-8461. [RT#40945] New Features * None Feature Changes * Updated the compiled in addresses for H.ROOT-SERVERS.NET. Bug Fixes * Authoritative servers that were marked as bogus (e.g. blackholed in configuration or with invalid addresses) were being queried anyway. [RT #41321]
2016-01-20Update bind910 to 9.10.3pl3 (BIND 9.10.3-P3).taca2-7/+7
Security Fixes * Specific APL data could trigger an INSIST. This flaw was discovered by Brian Mitchell and is disclosed in CVE-2015-8704. [RT #41396] * Certain errors that could be encountered when printing out or logging an OPT record containing a CLIENT-SUBNET option could be mishandled, resulting in an assertion failure. This flaw was discovered by Brian Mitchell and is disclosed in CVE-2015-8705. [RT #41397] * Named is potentially vulnerable to the OpenSSL vulnerabilty described in CVE-2015-3193. * Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. This flaw is disclosed in CVE-2015-8000. [RT #40987] * Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. This flaw is disclosed in CVE-2015-8461. [RT#40945] New Features * None. Feature Changes * Updated the compiled in addresses for H.ROOT-SERVERS.NET. Bug Fixes * Authoritative servers that were marked as bogus (e.g. blackholed in configuration or with invalid addresses) were being queried anyway. [RT #41321]
2016-01-18Update py-foolscap to 0.10.0:wiz3-9/+12
* Release 0.10.0 (15-Jan-2015) ** Compatibility Fixes This release is compatible with Twisted-15.3.0 through 15.5.0. A change in 15.3.0 triggered a bug in Foolscap which produced a somewhat-infinite series of log messages when run under `twistd`. This release fixes that bug, and slightly changes the semantics of calling `log.msg()` with additional parameters. (#244) Foolscap no longer claims compatibility with python-2.6.x . Twisted-15.5.0 was the last release to offer 2.6 support, and subsequent releases actively throw errors when run against 2.6, so we've turned off Foolscap's automated testing for 2.6. It may remain compatible by accident for a while. (#245)
2016-01-18Revbump all Go packages after the go-1.5.3 security update (hint: staticfhajny3-4/+6
linking).
2016-01-18Updated net/syncthing-gtk to 0.8.1abs3-8/+12
v0.8.1 Added localization support with translations for Czech, German and Slovak languages. Fixes: - Syncthing version of remote node not shown - Missing definition causing UI problems and Appreport madness on Ubuntu (thanks @Newman101) Other: - Added --portable parameter to syncthing-gtk.exe on Windows. - Updated syncthing-inotify version to 0.6.7 - Added support for download placeholders in Nautilus plugin v0.8.0.0.1 Prelease for localization testing. May work. Probably. Added localization support with translations for Czech, German and Slovak languages. Fixes: - Syncthing version of remote node not shown - Missing definition causing UI problems and Appreport madness on Ubuntu (thanks @Newman101) v0.8.0.1 Linux-only release. If you are on Windows, please, use v0.8 Fixes: - Syncthing version of remote node not shown - Missing definition causing UI problems, inotify bugs and Appreport madness on Ubuntu (thanks @Newman101) v0.8 For Syncthing 0.12 and above Additional fixes: - No 'ignore' button on Unknown device message. - Better support for non-ascii characters in user's home path on Windows v0.7.6.2 Prerelease to test with Syncthing v0.12. Most likely working. v0.7.6.1 Fixes: - Typo in Windows installer description (thanks @DennisPS) - Missing image definition causes crash with some GLib versions v0.7.6 Fixes: - window border disappearing (again) on Windows - crash on too recent glib (#198) - crash on too old glib (#201) - inotify (filesystem watcher) not being aware of created directories - Nautilus plugin ignoring some files until view is refreshed
2016-01-17Updated net/syncthing to 0.12.15abs2-7/+7
v0.12.15 - Handle race within the job queue (#1263, @AudriusButkevicius) - Improve API/GUI shutdown handling (#2694, @calmh) - Don't crash on folder remove while pulling (#2705, @calmh) This release uses code signing on Mac OS X. v0.12.14 This is a security update. The Windows builds are now done using Go 1.6beta2, otherwise this is identical to v0.12.13. v0.12.13 This build is a security update. - Add support for themes (#1925, @AudriusButkevicius) - Don't leak sendIndexes on disconnect (#2589, @calmh) - Always run relaying when enabled (#2665, @calmh) - Update 'Edit' menu to 'Action' menu (#2662, @kluppy) v0.12.12 - Update kardianos/osext (#2650, @calmh) - Change default max conflicts to 10 (#2604, @calmh) - Don't conflict copy conflict copies (#2605, @calmh) - Don't allow in use CSRF tokens to expire (#1008, @calmh) - Add relaying to main settings dialog (#2433, @calmh) - Don't resolve destination address until we need to (#2671, @calmh) - More fine grained locking in discovery cache (#2667, @calmh) - Added STNODEFAULTFOLDER envvar to skip default folder creation on new install (#1515, @nrm21) v0.12.11 - Remove windows specialisation from osutil.GetLans (#2192, @AudriusButkevicius) - Ensure loaded config is free of duplicate devices (#2627, @calmh) - Show device ID QR code from edit dialog (#1494, @ironmig) - Don't warn about failed ignores if folder unhealthy (#2630, @AudriusButkevicius) - Detect nonstandard hash algo and stop folder (#2314, @calmh) - Also build linux-arm64, linux-ppc64, linux-ppc64le (@calmh) - Disallow adding duplicate device ID in GUI (@ironmig) v0.12.10 - Don't crash on stat error in ensureDir (#2608, @calmh) - Correctly set default logfile location on Windows (#2608, @calmh) - Consider tempfile when checking for free space (#2598, @andersonvom) - Update kardianos/osext (#1272, @calmh) - Remove fixed footer at first media break (#2454, @andersonvom) - Update mtime of config file before upgrading (#2509, @andersonvom) - Correct GUI asset dir handling (#2621, @calmh) v0.12.9 - Example GUI override address (#2530, @calmh) - Additional output on insufficient error (#2580, @Zillode) - Add command line option to open GUI (#2210, @andersonvom) - Always exit via error select, making sure reader routine is exits (#2547, @AudriusButkevicius) - Don't verify free space for files when folder MinDiskFreePct==0 (#2600, @calmh) - Edit device after accepting new connection (#1929, @andersonvom) v0.12.8 - Correct type assertion in verbose logger, restart (#2561, @calmh) - Remove Android hacks (#2505, @calmh) - upnp: Use a separate error for the error unmarshalling (@wkennington)
2016-01-17Add forgotten patch to remove one more INITARGS case.joerg1-0/+22
2016-01-17Avoid macro that no longer exists in modular Xorg.joerg2-3/+13
2016-01-17Changes 2016.01.15:adam3-11/+20
* fix signature and media url extraction * Revert "[history] fix signature and media url extraction" * extend _VALID_URL regex * add support for episode pages * Add support for fyi.tv, aetv.com and mylifetime.com * Add shortcut * Fix extraction * Remove import * Add extractor import * Improve _VALID_URL * Add new extractor
2016-01-16Update net/erlang-p1_sip to 1.0.0fhajny4-48/+38
Change to use erlang/module.mk. No upstream changes.
2016-01-16Update net/erlang-p1_stun to 0.9.0.fhajny4-41/+34
Change to use erlang/module.mk. No upstream changes since last revision.
2016-01-16Update net/scamper to 20141211d.leot3-8/+12
Patches provided by Matthew Luckie in PR pkg/50654. ChangeLogs: https://mailman.caida.org/pipermail/scamper-announce/2015-October/000004.html https://mailman.caida.org/pipermail/scamper-announce/2015-December/000005.html https://mailman.caida.org/pipermail/scamper-announce/2016-January/000006.html tbit * add support for initial congestion window (ICW) inferences * add new tests to check response to packets that could have been sent by a blind attacker * add a TCP fast-open implementation, with both experimental and official option values * add support for testing HTTPS and BGP. drop FTP, DNS, and SMTP * add sc_tbitblind driver that was used for IMC 2015 paper trace * add tx timestamp to hop records * add dl option, to replace dlts option removed from scamper. * process UDP responses, if a UDP probe method is used. ping: * add tcp-syn ping method. * fix memory leak when payloads are specified in ping. sc_ipiddump * report IPID values from traceroute measurements, where available * report the source IP address used to probe the destination sc_filterpolicy: * add a new scamper driver to test systems for congruent filtering policy http://www.caida.org/tools/measurement/scamper/man/sc_filterpolicy.1.pdf scamper: * update scamper maximum PPS to 10,000 (from 1000). Its not 2002 anymore. * bind to requested source port with UDP sockets. * set SO_SNDBUF once, when a probe socket is created. * remove dlts option which was only used by traceroute. * drop divert socket from privsep, which was not used in scamper anywhere. * shift socket creation glue from scamper_privsep.c to scamper_udp4.c, scamper_icmp6.c, etc. * fix memory leak when receiving TCP responses in tracelb. * do not use the global address cache in tracelb: use a local one. * in qsort with 3-way partition, do not compare items against themselves. * improve performance of warts_addr_t code * use calloc instead of malloc() -> memset(0) on systems where calloc is available. * do not use the global address cache in ping: most responses are either from the destination, or from the same IP address, so optimize for that.