summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2016-02-13Update ruby-twitter to 5.16.0.tsutsui2-9/+9
pkgsrc changes: - remove unnecesary OVERRIDE_GEMSPEC for ruby-http - add a new OVERRIDE_GEMSPEC for equalizer-0.0.11 (briefly tested with net/ruby-tw) No CHANGELOG.md entry (and no announcement) in upstream. (one notable change in github is "Update http dependency to ~> 1.0")
2016-02-13Update to 96.0.0ryoon3-693/+915
96.0.0 (2016/2/10) Breaking Changes Google App Engine Google App Engine components updated to 1.9.32. Please visit the following release notes for details: Python - https://cloud.google.com/appengine/docs/python/release-notes Java - https://cloud.google.com/appengine/docs/java/release-notes The gcloud preview app gen-config command now offers to automatically update the runtime field in app.yaml if necessary. IAM The gcloud beta iam command group has launched. Emulators The Pub/Sub emulator now supports Gzip-encoded requests. Google Compute Engine The gcloud compute copy-files|scp commands on Windows now treat path arguments with a drive prefix as local files. Configurations The config configurations delete command now takes multiple configuration names. Containers kubectl is updated to v1.1.7. Bugfix on the gcloud container clusters get-credentials when run from a client without edit permissions. Misc. Changes The default floating point output format precision is 6. Exponent notation is used for abs(n) < 1e-04 and abs(n) >= 1e+09. The arrow and page up/down/home/end keys now work in the Windows help pager. 95.0.0 (2016/2/3) Breaking Changes Use gcloud compute networks create --mode=legacy to create non-subnet networks. Google Compute Engine gcloud compute copy-files and gcloud compute ssh on Windows now use standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone winkeygen.exe generates PuTTY and ssh compatible keys. The Windows PuTTY executables are up to date at version 0.66. Google Compute Engine subnets Added gcloud compute networks subnets. Added --mode flag to gcloud compute networks create. Added --subnet flag to gcloud compute instances create and gcloud compute instance-templates create. Added --local-traffic-selector flag to gcloud compute vpn-tunnels create. Google App Engine Added support for streaming logs when the use_cloud_build=1 property is set. Moved the nodejs install script into the docker image. Projects gcloud projects update|undelete|delete have been moved to beta. gcloud --format Added nested table formatting by --format="table(field1,listField2:format=FORMAT-STRING)" where FORMAT-STRING can be any format (json, table, ...). Try: gcloud compute instances list --format="table[box](name, disks:format='table[no-heading](deviceName:sort=1, kind)')" Added list field aggregation formatting (similar to nested formatting) by --format="table(listField2:format=FORMAT-STRING)". When the main table has no columns each nested format is aggregated into a single list. Try: gcloud compute instances list --format="table(disks:format='table[box](deviceName:sort=1, kind)')" 94.0.0 (2016/1/27) Google Compute Engine Added gcloud alpha compute url-maps list-cache-invalidations command. Google App Engine Google App Engine components updated to 1.9.31. Please visit the following release notes for details: Python - https://cloud.google.com/appengine/docs/python/release-notes Java - https://cloud.google.com/appengine/docs/java/release-notes Added --runtime flag to gcloud preview app gen-config to specify a runtime when a directory identifies as multiple runtimes. This flag can be used in conjunction with --custom. Google Container Engine gcloud container cluster describe and list commands now notify the user when their cluster versions are about to go out of support or are unsupported. Google Cloud Logging gcloud beta logging write and gcloud beta logging logs delete commands now use the V2beta1 API. The gcloud beta logging write command now uses the global resource descriptor (which translates to "custom.googleapis.com" service in V1). Cloud Dataproc gcloud beta dataproc clusters create now supports --tags and --metadata flags to set instance tags and metadata on all instances in the Dataproc cluster. PubSub Emulator A new --host flag can be used to specify the address the emulator should bind as. The flag can be left unspecified, set to "localhost", a hostname, or an explicit IP address. Projects Added commands get-iam-policy, set-iam-policy, add-iam-policy-binding, and remove-iam-policy-binding for the gcloud beta projects surface. Added the gcloud projects list command that can be used to list projects. 93.0.0 (2016/1/20) kubectrl upgraded to 1.1.4. gcloud beta dataproc cluster create now supports --properties flag to set properties for installed packages. Datastore emulator's DATASTORE_LOCAL_HOST environment variable changed to DATASTORE_EMULATOR_HOST. gcloud source repos clone now supports --dry-run flag to show equivalent git command. 92.0.0 (2016/1/13) Because of the rollback of 91.0.0, this release contains all of the changes from 91.0.0 in addition to the changes listed below. Breaking Changes gcloud preview app deploy Changed deployments to set the deployed versions to receive all traffic for their modules by default. To keep the old behavior (traffic split remains the same), use the --no-promote flag or run gcloud config set app/promote_by_default true. Note that your old versions are still running, and must be stopped manually. This behavior will change in a future release. Removed deprecated --set-default flag. Please use --promote instead. gcloud preview app deploy: Removed deprecated --env-vars flag. The output of the gcloud preview app modules list command has been changed to include the traffic split percentage instead of the 'default version' field. Removed deprecated gcloud preview app modules cancel-deployment command. This command is no longer necessary due to recent improvements in the Deployment API. Removed deprecated gcloud preview app modules download command. This command is no longer necessary due to recent improvements in the Deployment API. Removed deprecated gcloud preview app run command. Please use dev_appserver.py instead. Changed behavior of the --zone/-z flag in the gcloud dns record-sets command group. This flag can no longer precede the command. For instance, gcloud dns record-sets -z=mz list will not work, but gcloud dns record-sets list -z=mz will. Changed --password-file option for sql instances set-root-password; password now does not include trailing newline from password file. This matches the documented behavior, but not the previous behavior. (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419) Removed meta/active_configuration from the results of gcloud config list since it is not a property that can be set. You can continue to use the gcloud config configurations commands to view and manage your configurations. Cloud SDK Added gcloud config proxy settings. Users can configure gcloud to use a proxy via the following settings: gcloud config proxy/address gcloud config proxy/password gcloud config proxy/port gcloud config proxy/type gcloud config proxy/username Added alpha and beta components to Debian packages. Removed unused config properties: app/hosted_registry, app/host, app/admin_host, app/api_host. Google Cloud Logging Migrated to v2beta1 API release. Moved gcloud beta logging sinks commands to v2beta1. Added gcloud beta logging resource-descriptors command to display supported resources from various services. Added gcloud beta logging read command to retrieve log entries using filters. Google Container Engine Added gcloud container clusters resize for resizing Container Engine clusters. Added notifications when node upgrades are available to gcloud container cluster describe and list commands. Google App Engine Fixed bug where initial deployments using --image-url failed. Changed gcloud preview app modules set_default command to use the App Engine Admin API. Changed gcloud preview app modules list command to use the App Engine Admin API.
2016-02-11Add fix for CVE-2015-5177, lifted fromhe3-3/+33
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795429 Bump PKGREVISION.
2016-02-11Avoid too strict requirements (upper limit of dependencies versions), again!leot3-13/+49
Bump PKGREVISION.
2016-02-11Made a mistake with patch checksums.jklos1-2/+2
2016-02-11Change syntax to allow compiling on Leopard machines.jklos2-2/+25
2016-02-11Fix configure to match properly for darwin9 so that PowerPC code is generatedjklos2-7/+16
properly on Leopard systems.
2016-02-09Updated net/syncthing to 0.12.18abs2-7/+7
v0.12.18 - Add -paths option to print config, key, database paths (@calmh) - Minor refactoring
2016-02-09Update 3.8.2 to 3.8.3mef3-22/+17
--------------------- 2015-05-28 wimpunk * [r183] ., release: Removing unneeded release directory 2015-03-23 wimpunk * [r182] ddclient: Reverting to the old perl requirements like suggested in #75 The new requirements were added when adding support for cloudflare. By the simple fix suggested by Roy Tam we could revert the requirements which make ddclient back usable on CentOS and RHEL. * [r181] ddclient: ddclient: made json optional As suggested in pull 7 on github by @abelbeck and @Bugsbane it is better to make the use of JSON related to the use of cloudflare. * [r180] ddclient: ddclient: reindenting cloudflare Indenting cloudflare according to the vim tags * [r179] ddclient: ddclient: correction after duckdns merge Correcting duckdns configuration after commit r178 * [r178] ddclient: Added simple support for Duckdns www.duckdns.org Patch provided by gkranis on github. Merge branch 'gkranis' 2015-03-21 wimpunk * [r177] README.md: Added duckDNS to the README.md * [r176] sample-etc_rc.d_init.d_ddclient.ubuntu: update ubuntu init.d script Merge pull request #9 from gottaloveit/master * [r175] Changelog, Changelog.old: Renamed Changelog to Changelog.old Avoiding conflicts on case insensitive filesystems * [r174] ddclient: Add missing config line for CloudFlare Merge pull request #19 from shikasta-net/fixes * [r173] ddclient: Merge pull request #22 from reddyr/patch-1 loopia.se changed the "Current Address:" output string to "Current IP Address:" * [r172] ddclient: fixed missing ) for cloudflare service hash Merge pull request #16 from adepretis/master 2015-01-20 wimpunk * [r171] README.md, ddclient, sample-etc_ddclient.conf: Adding support for google domain Patch gently provided through github on https://github.com/wimpunk/ddclient/pull/13 2014-10-08 wimpunk * [r170] README.md, ddclient, sample-etc_ddclient.conf: Added support for Cloudflare and multi domain support for namecheap Pull request #7 from @roberthawdon See https://github.com/wimpunk/ddclient/pull/7 for more info. 2014-09-09 wimpunk * [r169] ddclient: Bugfix: allowing long username-password combinations Patch provided by @dirdi through github. 2014-08-20 wimpunk * [r166] ddclient: Fixing bug #72: Account info revealed during noip update * [r165] ddclient: Interfaces can be named almost anything on modern systems. Patch provided by Stephen Couchman through github 2014-06-30 wimpunk * [r164] ddclient: Only delete A RR, not any RR for the FQDN Make the delete command specific to A RRs. This prevents ddclient from deleting other RRs unrelated to the dynamic address, but on the same FQDN. This can be specifically a problem with KEY RRs when using SIG(0) instead of symmetric keys. Reported by: Wellie Chao Bug report: http://sourceforge.net/p/ddclient/bugs/71/ Fixes #71 2014-06-02 wimpunk * [r163] README.md, ddclient: Adding support for nsupdate. Patch provided by Daniel Roethlisberger <daniel@roe.ch> through github. 2014-04-29 wimpunk * [r162] README.md, README.ssl, ddclient: Removed revision information Revision information isn't very usable when switching to git. 2014-03-20 wimpunk * [r161] README.md, README.ssl, ddclient, sample-etc_rc.d_init.d_ddclient.alpine: Added Alpine Linux init script Patch send by Tal on github. * [r160] RELEASENOTE: Corrected release note 2013-12-26 wimpunk * [r159] release/readme.txt: Commiting updated release information * [r158] README.md, RELEASENOTE: Committing release notes and readme information to trunk
2016-02-09Update to 2.16mef2-7/+7
-------------- Explicit ChangeLog not found, but diff src tells two options are added, -Q and -V, ( -V vlan -Q priority ) -Q pri 802.1p priority to set. Should be used with 802.1Q (-V). Defaults to 0. -V num 802.1Q tag to add. Defaults to no VLAN tag.
2016-02-09Update 3.31 to 3.71mef2-8/+7
------------------- lft 3.71 / WhoB 3.71 ---------------------- - WhoB: Autodetect input from STDIN (pipe) without '-f -' - WhoB: Redirect some extraneous output to STDERR lft 3.7 / WhoB 3.7 ---------------------- - Added support for 4-byte ASNs - Added support for whob reading bulk input from stdin using '-f -' lft 3.6 / WhoB 3.6 ---------------------- - Added support for 4-byte ASNs lft 3.5 / WhoB 3.5 ---------------------- - Roy T. provided DNS speed-ups - Added GraphViz output option with -g lft 3.35 / WhoB 3.5 ---------------------- - Roy T. provided some clean-ups to avoid double free()s - Bug fixes only lft 3.33 / WhoB 3.5 ---------------------- - Fixed free(sess->hostname) bug (segfault on unresolvable hostname) - Improved error hanlding of pcap failures related to data link type - Kurt's FreeBSD fix for pcap snprintf - Bug fixes only lft 3.32 / WhoB 3.5 ---------------------- - Added support for several encapsulating protocols such as PPP - no other changes
2016-02-09Update 0.7 to 0.8mef2-7/+7
----------------- Thu 15 Oct 2009: [10]Version 0.8 released; changes include: various smaller fixes.
2016-02-09Add user-destdir supportbouyer3-3/+34
2016-02-09Bug fix for workers busy-waiting for child completion: when read()ing abouyer12-26/+42
non-bloking descriptor after a poll(), don't loop forever on EAGAIN as poll() may return POLLIN for a descriptor which doesn't have data to be read. Bump PKGREVISION. While there add user-destdir support.
2016-02-08Do not use TCP_NOPUSH on Darwin, it adds a 5 second delay after the initialjperkin2-7/+7
handshake. Bump PKGREVISION.
2016-02-07more 64bit time_t fixes. Now compiles without -Wformat warnings.bouyer14-19/+649
Ride previous PKGREVISION bump
2016-02-07make it work where Kerberos does not live in.szptvlfn1-2/+2
2016-02-07Workaround for 64bit time_t bug on i386, causing logs to be filled withbouyer3-3/+19
"(null)" instead of the message. Bump PKGREVISION.
2016-02-07Changes 4.1.4:adam4-90/+13
* Fixed 1315 - socket monitor hangs if bind/setsockopt failed. * Fixed 1399 - assertion failure in tcp.cpp after network reconnect. * Fixed 1632 - build failure using latest libsodium. * Fixed 1644 - assertion failure in msg.cpp:390 on STREAM sockets. * Fixed 1661 - does not handle IPv6 link local addresses.
2016-02-06Removed the automatic setting of PKGNAME to ocaml-${DISTNAME} fromjaapb1-2/+1
ocaml.mk. It was becoming more trouble than it was worth: only a minority of packages used it, and it only made Makefiles more confusing. (I've left out some packages: these will be updated forthwith)
2016-02-06Update "youtube-dl" to version 2016.02.05.1. Changes since 2016.01.23:tron3-8/+11
[youtube] added vcodec/acodec/abr for multiple itags [utils] Add more items to mimetype2ext (#8293) [utils] Reorder items in mimetype2ext alphabetically [youtube] Prefer info from YouTube than _formats (#8293) [common] Keep full codec name from m3u8 manifests [facebook] Add shortcut and reformat _VALID_URL [facebook:post] Add extractor (Closes #8321) [vevo] extract all formats and bypass geo restriction [vevo] extract metadata and formats from api if videoinfo is empty [cspan] Fix clip/prog id extraction (#8317) [vevo] fallback to youtube video only if vevo video is geo restricted [cspan] Extract from path when no qualities (Closes #8317) [instagram] Make description optional (Closes #8326) [daum.net] Fixes #8331 [extractor/common] Auto calculate tbr when missing [spankbang] Fix formats extraction [spankbang] Fix title extraction (Closes #8329) [extractor/common] detect media playlist in _extract_m3u8_formats [cbsnews] extract all formats [cbsnews] Remove unused import [utils] fix dfxp2srt text extraction(fixes #8055) [ndr:embed:base] Add missing ext for m3u8 [ok] Add support for mobile URLs (Closes #8345) [bbc] Add another title regex (Closes #8340) [bbc] Add another description regex [bbc] Add test for #8147 [ffmpeg] fix adding metadata when using m3u8_native(fixes #8350) [youtube:user] Require 'https?://' in the url (fixes #8356) [azubu] Add extractor for live streams (closes #8343) [cspan] Unescape path (Closes #8365) [extractor/common] Restrict checks when auto calculating tbr [espn] Improve video id extraction (Closes #8368) [daum] Fix copy-paste mistake [daum] Fix add view_count, comment_count to test [daum.net] Move the request to ClipInfoXml.do [daum.net] Support VodPlayer.swf URLs (closes #8173) [daum] Add 'thumbnail' to all _TESTS [facebook] Support alternative webpage form [youtube] Move decrypt_sig out of _parse_dash_manifest [daum.net] Support for playlists, user channels [downloader/f4m] Prefer bootstrap url attribute over inline bootstrap [matchtv] Add extractor (Closes #8313) [options] Add missing closing parenthesis [common] _parse_dash_manifest() from youtube.py [downloader/fragment] Do not report total bytes estimation and eta [downloader/f4m] Add live stream flag to context [common] Modify _parse_dash_manifest for use in Facebook [downloader/fragment] Remove superfluous whitespace [facebook] Add support for DASH manifests [youtube] Pass self._formats to _parse_dash_manifest [common] Fix for youtube [common] Prefer the manifest than formats_dict in determining codecs [downloader/f4m] Do not update fragment list while test [youtube] Remove '(v|a)codec': 'none' entries [common] Rename to namespace [common] Remove unused arguments [common] Add _extract_dash_manifest_formats [facebook] Add md5 for the test case with DASH [generic] Add support for Limelight API [limelight] fix format sorting and make m3u8 and f4m extraction [npo] Add extension for m3u8 [viidea] Skip download for the test case requiring ffmpeg [vgtv] Fix test_VGTV_2 [screenwavemedia] Fix HLS extension and test_TeamFour [tv2] Fix test_TV2 [senateisvp] Fix test_SenateISVP and test_SenateISVP_1 [nrktv] Fix _TESTS [nbc] Use NBC's id and fix _TESTS [nba] Add ext for hls formats and fix test_NBA [schooltv] Add extractor for SchoolTV playlists [schooltv] Improve video id regex [Gamekings] Fix url from .tv to .nl [letv] Fix LetvCloud extraction [Gamekings] Fix viewing of old videos [youtube] Use authentication for entry list base extractor (Closes #8380) [youtube] Filter duplicates in playlists base extractor [test_youtube_lists] Fix TestYoutubeLists.test_youtube_course [test_subtitles] Fix TestRaiSubtitles [xuite] Replace the test case with my uploaded one [FFmpegSubtitlesConvertorPP] delete old subtitle files (fixes #8382) [youtube] Use 'orderedSet' instead of 'set' to preserve the order [gamekings] Add MD5 back [gamekings] add_ie [gamekings] Stricter checks [acast] Fix extraction [acast] Remove ACastBaseIE [allocine] Fix extraction of test_allocine_1 and update tests [bpb] Fix extraction and update tests [allocine] Use xpath_element [vidzi] Fix extraction [vidzi] Fix _TESTS [YoutubeDL] Do not override ie_key in url_transparent [kickstarter] Eliminate the warning message and add_ie [kickstarter] Fix title and test_kickstarter [daum] PEP8 [daum] Do not match a single URL with multiple info extractors [daum] Update test_daum_1 [daum.net:user] Match more URLs (#1952) [vk:uservideos] Improve _VALID_URL (Closes #8389) [test_YoutubeDL] Fix test_youtube_format_selection [ffmpeg] fix adding metadata when using --hls-prefer-native(#8350) [utils] dfxp2srt: make TTMLPElementParser inherit from object [cbsnews] add support for live videos(fixes #7010) [srgssr] use flv as ext for rtmp formats [README.md] Clarify unavailable sequences in output format [kuwo] Check for georestriction [generic] extract m3u8 formats when mpegurl content type detected [youtube] fix subtitle extraction(fixes #8415) [youtube] fix subtitle order [test_subtitles] update youtube subtitles tests [arte.tv:+7] Fix extraction (fixes #8427)
2016-02-04Updated net/syncthing to 0.12.17abs2-11/+11
v0.12.17 - Handle null case for invalid ng-model value (#2392, @tpng) - Use dialer in relay checks (#2732, @AudriusButkevicius) Plus some minor line shuffling for pkglint
2016-02-04Fix build on NetBSD-current, where it warns about the unportablewiz2-1/+26
'%m' format string. From coypu.
2016-02-04Add bl3.mk file, provided by coypu.wiz1-0/+13
2016-02-04Bump PKGREVISION for vala update to 0.30.wiz2-4/+4
2016-02-03Updated package to newest version, 4.0.4. Changes include:jaapb5-342/+356
* GnuTLS: compatibility with GnuTLS-3.4.2 * Nethttpd_plex: the post_add_hook was not called by accident (since OCamlnet-4); this is now fixed. * Nethtml: new option case_sensitive * GnuTLS: initializing the library on-demand. This avoids that /dev/random is kept open all the time since program start, and works around incompatibilities with Netplex. (Thomas Calderon found the problem.) * GnuTLS: setting DH parameters on certificates (this was forgotten in previous releases). (Thomas Calderon found the problem.) * GnuTLS: supporting GnuTLS versions where SRP is disabled. Supporting GnuTLS-3.4. * OpenBSD build: fix linker option (Christopher Zimmermann) * Equeue: There is a new method request_proxy_notification, which is only used by Uq_engines.qseq_engine (but unfortunately needs to appear in the public type of the object). This new method permits that chains of Uq_engines.qseq_engine pairs can now be arbitrarily long without consuming too much memory and without the danger of getting stack overflows. This fixes issues where notification chains got too long. In particular, we saw a stack overflow when retrieving a video stream via HTTP. The stream was sent with many chunks, resulting in a long Uq_engines.qseq_engine chain. Implementers of engines can simply define request_proxy_notification as no-ops. * Nethttp.set_content_range: this function generated an incorrect header (the "bytes" word was missing). (Török Edwin) * _oasis is generated from _oasis.in * Netplex: the Netplex socket directory has a different default if not specified in the config file. * Netshm: the POSIX specifier has now two args * IPv6: automatically enabled if there is a global IPv6 address * Unicode tables: Moved them to a separate netunidata library. This library needs to be linked in for getting access to the tables (this is no longer the default). * Renamings: Http_client, Ftp_client etc. => Nethttp_client, Netftp_client Mimestring => Netmime_string Xdr => Netxdr * Netmime: moved functions to Netmime_header and Netmime_channels * Netmech_scram: Removed the check that passwords only consist of ASCII chars. The user can now call Netsaslprep.saslprep. * Removed: rpc-auth-dh, nethttpd-for-netcgi2 * Http_client: the authentication mechanisms are now encapsulated in a first-class module HTTP_MECHANISM. So far, there is Digest authentication in this form. The signature of HTTP_MECHANISM is similar to SASL_MECHANISM. Another visible change is that the insecure Basic authentication is no longer enabled for non-TLS-secured connections. This can be changed back by setting flags, though. Some fixes in the design improve Digest authentication for proxy connections. * Netpop: implementating SASL authentication for POP3. Moved Netpop into netclient. * Netsmtp: implementing SASL authentication for SMTP. Moved Netsmtp into netclient. * Adding a framework for SASL, and a number of mechanisms (PLAIN, CRAM-MD5, DIGEST-MD5, SCRAM-SHA1). * fcgi/scgi/ajp connectors: exporting a handle_connection function, and unifying existing such functions (Christopher Zimmermann) * adding support for modular cryptography (symmetric ciphers and digests) * SCRAM is now implemented with the new crypto providers * removing dependency on Cryptokit * removed library netgssapi; now part of netsys/netstring * removed library netmech-scram; now part of netstring Ocamlnet-4 adds: - new library netgss-system - new library nettls-gnutls - removed equeue-ssl and rpc-ssl - X.500 modules Netasn1, Netdn, Netx509 - Crypto definitions Netsys_crypto_types, Netsys_crypto - TLS modules Netsys_tls, Nettls_support - Support for SASL and GSSAPI - Moved many functions from Uq_engines to new modules in the equeue library (Uq_client, Uq_server, Uq_multiplex, Uq_transfer)
2016-02-02Update net/socat to 1.7.3.1.leot2-7/+7
Changes: ####################### V 1.7.3.1: security: Socat security advisory 8 A stack overflow in vulnerability was found that can be triggered when command line arguments (complete address specifications, host names, file names) are longer than 512 bytes. Successful exploitation might allow an attacker to execute arbitrary code with the privileges of the socat process. This vulnerability can only be exploited when an attacker is able to inject data into socat's command line. A vulnerable scenario would be a CGI script that reads data from clients and uses (parts of) this data as hostname for a Socat invocation. Test: NESTEDOVFL Credits to Takumi Akiyama for finding and reporting this issue. Socat security advisory 7 MSVR-1499 In the OpenSSL address implementation the hard coded 1024 bit DH p parameter was not prime. The effective cryptographic strength of a key exchange using these parameters was weaker than the one one could get by using a prime p. Moreover, since there is no indication of how these parameters were chosen, the existence of a trapdoor that makes possible for an eavesdropper to recover the shared secret from a key exchange that uses them cannot be ruled out. Futhermore, 1024bit is not considered sufficiently secure. Fix: generated a new 2048bit prime. Thanks to Santiago Zanella-Beguelin and Microsoft Vulnerability Research (MSVR) for finding and reporting this issue.
2016-02-01Update to 0.10.1:wiz2-7/+7
* Release 0.10.1 (21-Jan-2015) ** Packaging Fixes This release fixes a version-string management failure when the "log publisher" feature was used in a tree built from a release tarball (rather than from a git checkout). This caused a unit test failure, as well as operational failures when using `flogtool tail`. Thanks to Ramakrishnan Muthukrishnan (vu3rdd) for the catch and the patch. (#248)
2016-02-01Fix build on SunOS. Clean up patches while here.jperkin3-3/+30
2016-02-01Changes 1.9.20160113:adam2-7/+7
* --disable-pppconn to disable WanPPPConnection more fixes in DeviceProtection service * improve syslog message for incoming HTTP requests
2016-01-31Update to 4.3.4ryoon3-9/+8
Changelog: ============================= Release Notes for Samba 4.3.4 January 12, 2016 ============================= This is the latest stable release of Samba 4.3. Changes since 4.3.3: -------------------- o Michael Adam <obnox@samba.org> * BUG 11619: doc: Fix a typo in the smb.conf manpage, explanation of idmap config. * BUG 11647: s3:smbd: Fix a corner case of the symlink verification. o Jeremy Allison <jra@samba.org> * BUG 11624: s3: libsmb: Correctly initialize the list head when keeping a list of primary followed by DFS connections. * BUG 11625: Reduce the memory footprint of empty string options. o Douglas Bagnall <douglas.bagnall@catalyst.net.nz> * BUG 11659: Update lastLogon and lastLogonTimestamp. o Ralph Boehme <slow@samba.org> * BUG 11065: vfs_fruit: Enable POSIX directory rename semantics. * BUG 11466: Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix. * BUG 11645: smbd: Make "hide dot files" option work with "store dos attributes = yes". o Günther Deschner <gd@samba.org> * BUG 11639: lib/async_req: Do not install async_connect_send_test. o Stefan Metzmacher <metze@samba.org> * BUG 11394: Crash: Bad talloc magic value - access after free. o Rowland Penny <repenny241155@gmail.com> * BUG 11613: samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given. o Karolin Seeger <kseeger@samba.org> * BUG 11619: docs: Fix some typos in the idmap backend section. * BUG 11641: docs: Fix typos in man vfs_gpfs. o Uri Simchoni <uri@samba.org> * BUG 11649: smbd: Do not disable "store dos attributes" on-the-fly.
2016-01-30Update mikutter to 3.3.5.tsutsui2-7/+7
Upstream changes: * update lang files (en, zh_TW) * reweeting retweeted tweet didn't work in some case * gyazo preview didn't work
2016-01-27Fix the Solaris SMF method script. Bump PKGREVISION.jperkin3-3/+19
2016-01-26distinfo was missing checksum for patch-zenmap_test_run__tests.py.jklos1-2/+2
2016-01-25Updated net/syncthing to 0.12.16abs2-9/+8
v0.12.16 Don't require restart for usage reporting changes (#2704, @calmh) Restart on Debian package upgrade (@calmh) Avoid spurious scans with inotify package (#2151, @plouj)
2016-01-24Changes 2016.01.23:adam3-14/+38
[downloader/common] report_retry: Don't crash when retries is infinite [cbsnews] Extract subtitles [cbsnews] Simplify subtitles extraction and fix test [arte:future] Fix extraction [arte:future] Make duplicated test matching only [arte:cinema] Add extractor [nuevo] Generalize nuevo extractor and add support for trollvids [nuevo] Simplify nuevo extractors [ruleporn] Add new extractor [nuevo] Improve thumbnail extraction [ruleporn] Rework in terms of nuevo [lovehomeporn] Add extractor [SVTPlay] Add subtitle support [svt] Improve subtitles extraction and add test [options] Clarify language tags [kanalplay] Use IETF language tag [drtv] Use IETF language tag
2016-01-24Update mikutter to 3.3.4.tsutsui2-8/+8
Also take maintainership. Upstream changes: * fill untranslated ja_KanSai locales * avoid methods deprecated by Ruby 2.3
2016-01-24Attempt to bring sanity to how ABI and MACHINE_ARCH are set.jperkin1-2/+2
Previously there were at least 5 different ways MACHINE_ARCH could be set, some statically and some at run time, and in many cases these settings differed, leading to issues at pkg_add time where there was conflict between the setting encoded into the package and that used by pkg_install. Instead, move to a single source of truth where the correct value based on the host and the chosen (or default) ABI is determined in the bootstrap script. The value can still be overridden in mk.conf if necessary, e.g. for cross-compiling. ABI is now set by default and if unset a default is calculated based on MACHINE_ARCH. This fixes some OS, e.g. Linux, where the wrong default was previously chosen. As a result of the refactoring there is no need for LOWER_ARCH, with references to it replaced by MACHINE_ARCH. SPARC_TARGET_ARCH is also removed.
2016-01-24update nmap options ndiff and zenmap and corresponding PLIST entries,richard6-5/+51
as well as getting the test facility to run. okay'd pettai@ No PKGREVISION for now as default installation remains unchanged.
2016-01-24Use hardcoded py27ryoon1-9/+9
2016-01-22The previous update to the isc-dhcp packages replaced @PREFIX@ andjperkin4-11/+14
@PKG_SYSCONFDIR@ with hardcoded paths to /usr/pkg, possibly due to SUBST_STAGE being set to post-patch. Revert that change, move SUBST_STAGE to pre-configure, and perform some minor cleanup while here. Bump PKGREVISION of all packages, ignoring pkglint's error that this shouldn't be done in Makefile.common.
2016-01-21Modify setup.py requirements in order to be less restrictive regarding versionleot3-2/+36
dependencies. Bump PKGREVISION.
2016-01-20Adjust rc script to use correct pidfile.roy1-1/+11
2016-01-20Update to dhcpcd-6.10.1 with the following changes:roy2-7/+7
* Add -P, --printpidfile to print the pidfile dhcpcd will use to stdout * Fix a crash when a non active interface departs * Add the -1, --oneshot option which causes dhcpcd to exit once an interface has been configured * Fix delegation activating interfaces
2016-01-20Update bind99 to 9.9.8pl3 (BIND 9.9.8-P3).taca2-7/+7
Security Fixes * Specific APL data could trigger an INSIST. This flaw was discovered by Brian Mitchell and is disclosed in CVE-2015-8704. [RT #41396] * Named is potentially vulnerable to the OpenSSL vulnerabilty described in CVE-2015-3193. * Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. This flaw is disclosed in CVE-2015-8000. [RT #40987] * Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. This flaw is disclosed in CVE-2015-8461. [RT#40945] New Features * None Feature Changes * Updated the compiled in addresses for H.ROOT-SERVERS.NET. Bug Fixes * Authoritative servers that were marked as bogus (e.g. blackholed in configuration or with invalid addresses) were being queried anyway. [RT #41321]
2016-01-20Update bind910 to 9.10.3pl3 (BIND 9.10.3-P3).taca2-7/+7
Security Fixes * Specific APL data could trigger an INSIST. This flaw was discovered by Brian Mitchell and is disclosed in CVE-2015-8704. [RT #41396] * Certain errors that could be encountered when printing out or logging an OPT record containing a CLIENT-SUBNET option could be mishandled, resulting in an assertion failure. This flaw was discovered by Brian Mitchell and is disclosed in CVE-2015-8705. [RT #41397] * Named is potentially vulnerable to the OpenSSL vulnerabilty described in CVE-2015-3193. * Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. This flaw is disclosed in CVE-2015-8000. [RT #40987] * Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. This flaw is disclosed in CVE-2015-8461. [RT#40945] New Features * None. Feature Changes * Updated the compiled in addresses for H.ROOT-SERVERS.NET. Bug Fixes * Authoritative servers that were marked as bogus (e.g. blackholed in configuration or with invalid addresses) were being queried anyway. [RT #41321]
2016-01-18Update py-foolscap to 0.10.0:wiz3-9/+12
* Release 0.10.0 (15-Jan-2015) ** Compatibility Fixes This release is compatible with Twisted-15.3.0 through 15.5.0. A change in 15.3.0 triggered a bug in Foolscap which produced a somewhat-infinite series of log messages when run under `twistd`. This release fixes that bug, and slightly changes the semantics of calling `log.msg()` with additional parameters. (#244) Foolscap no longer claims compatibility with python-2.6.x . Twisted-15.5.0 was the last release to offer 2.6 support, and subsequent releases actively throw errors when run against 2.6, so we've turned off Foolscap's automated testing for 2.6. It may remain compatible by accident for a while. (#245)
2016-01-18Revbump all Go packages after the go-1.5.3 security update (hint: staticfhajny3-4/+6
linking).
2016-01-18Updated net/syncthing-gtk to 0.8.1abs3-8/+12
v0.8.1 Added localization support with translations for Czech, German and Slovak languages. Fixes: - Syncthing version of remote node not shown - Missing definition causing UI problems and Appreport madness on Ubuntu (thanks @Newman101) Other: - Added --portable parameter to syncthing-gtk.exe on Windows. - Updated syncthing-inotify version to 0.6.7 - Added support for download placeholders in Nautilus plugin v0.8.0.0.1 Prelease for localization testing. May work. Probably. Added localization support with translations for Czech, German and Slovak languages. Fixes: - Syncthing version of remote node not shown - Missing definition causing UI problems and Appreport madness on Ubuntu (thanks @Newman101) v0.8.0.1 Linux-only release. If you are on Windows, please, use v0.8 Fixes: - Syncthing version of remote node not shown - Missing definition causing UI problems, inotify bugs and Appreport madness on Ubuntu (thanks @Newman101) v0.8 For Syncthing 0.12 and above Additional fixes: - No 'ignore' button on Unknown device message. - Better support for non-ascii characters in user's home path on Windows v0.7.6.2 Prerelease to test with Syncthing v0.12. Most likely working. v0.7.6.1 Fixes: - Typo in Windows installer description (thanks @DennisPS) - Missing image definition causes crash with some GLib versions v0.7.6 Fixes: - window border disappearing (again) on Windows - crash on too recent glib (#198) - crash on too old glib (#201) - inotify (filesystem watcher) not being aware of created directories - Nautilus plugin ignoring some files until view is refreshed
2016-01-17Updated net/syncthing to 0.12.15abs2-7/+7
v0.12.15 - Handle race within the job queue (#1263, @AudriusButkevicius) - Improve API/GUI shutdown handling (#2694, @calmh) - Don't crash on folder remove while pulling (#2705, @calmh) This release uses code signing on Mac OS X. v0.12.14 This is a security update. The Windows builds are now done using Go 1.6beta2, otherwise this is identical to v0.12.13. v0.12.13 This build is a security update. - Add support for themes (#1925, @AudriusButkevicius) - Don't leak sendIndexes on disconnect (#2589, @calmh) - Always run relaying when enabled (#2665, @calmh) - Update 'Edit' menu to 'Action' menu (#2662, @kluppy) v0.12.12 - Update kardianos/osext (#2650, @calmh) - Change default max conflicts to 10 (#2604, @calmh) - Don't conflict copy conflict copies (#2605, @calmh) - Don't allow in use CSRF tokens to expire (#1008, @calmh) - Add relaying to main settings dialog (#2433, @calmh) - Don't resolve destination address until we need to (#2671, @calmh) - More fine grained locking in discovery cache (#2667, @calmh) - Added STNODEFAULTFOLDER envvar to skip default folder creation on new install (#1515, @nrm21) v0.12.11 - Remove windows specialisation from osutil.GetLans (#2192, @AudriusButkevicius) - Ensure loaded config is free of duplicate devices (#2627, @calmh) - Show device ID QR code from edit dialog (#1494, @ironmig) - Don't warn about failed ignores if folder unhealthy (#2630, @AudriusButkevicius) - Detect nonstandard hash algo and stop folder (#2314, @calmh) - Also build linux-arm64, linux-ppc64, linux-ppc64le (@calmh) - Disallow adding duplicate device ID in GUI (@ironmig) v0.12.10 - Don't crash on stat error in ensureDir (#2608, @calmh) - Correctly set default logfile location on Windows (#2608, @calmh) - Consider tempfile when checking for free space (#2598, @andersonvom) - Update kardianos/osext (#1272, @calmh) - Remove fixed footer at first media break (#2454, @andersonvom) - Update mtime of config file before upgrading (#2509, @andersonvom) - Correct GUI asset dir handling (#2621, @calmh) v0.12.9 - Example GUI override address (#2530, @calmh) - Additional output on insufficient error (#2580, @Zillode) - Add command line option to open GUI (#2210, @andersonvom) - Always exit via error select, making sure reader routine is exits (#2547, @AudriusButkevicius) - Don't verify free space for files when folder MinDiskFreePct==0 (#2600, @calmh) - Edit device after accepting new connection (#1929, @andersonvom) v0.12.8 - Correct type assertion in verbose logger, restart (#2561, @calmh) - Remove Android hacks (#2505, @calmh) - upnp: Use a separate error for the error unmarshalling (@wkennington)