summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2013-09-02Revbump after cairo updateadam52-98/+104
2013-09-02Update to 0.20.4:wiz2-7/+6
0.20.4 ====== Changes since 0.20.3: - Fix warnings in gtk-doc run. - Some minor improvements to the documentation. - Make the user-agent ASCII-only to fix issues with discovery when g_get_application_name () returned a translated string. - Force HTTP version to be 1.1 in SOAP requests. - Fix potential crashes in XML parsing. - Fix potential memory leak in gupnp_service_proxy_send_action_valist. - Some codestyle fixes. - Add gupnp_device_info_list_dlna_device_class_identifier () to retrieve the content of <dlna:X_DLNADOC> nodes. Bugs fixed in this release: - https://bugzilla.gnome.org/show_bug.cgi?id=704953 - https://bugzilla.gnome.org/show_bug.cgi?id=702555 - https://bugzilla.gnome.org/show_bug.cgi?id=704094 - https://bugzilla.gnome.org/show_bug.cgi?id=700947 All contributors to this release: Ludovic Ferrandis <ludovic.ferrandis@intel.com> Jens Georg <mail@jensge.org> Sébastien Bianti <sebastien.bianti@linux.intel.com> Bastien Nocera <hadess@hadess.net>
2013-09-02Update to 0.14.4:wiz2-7/+6
0.14.4 ====== - Fix gtk-doc warnings. - Use SO_REUSEPORT on FreeBSD and Debian/kFreeBSD. - Fix discovery issue with some devices when g_get_application_name returned a non-ASCII translated version of the name. - Fix a compiler warning about parentheses. - Use GNOME_COMPILE_WARNINGS for a safe set of strict compiler warnings. - Remove the use of INCLUDES which has been deprecated for a while. All contributors to this release: Jens Georg <jensg@openismus.com> Bastien Nocera <hadess@hadess.net>
2013-09-01Fixes dependency, PR pkg/48169obache1-2/+5
* from requires.txt of egg-info, coherence>=0.6.4 is required * python gtk2 module is used in various location Bump PKGREVISION.
2013-09-01avoid -Werror=format problems in grilorichard2-1/+17
2013-09-01Update to 3.0rc1ryoon4-44/+25
* Fix build with lua 5.2. Changelog: Main changes for LuaSocket 3.0-rc1 are IPv6 support and Lua 5.2 compatibility. * Added: Compatible with Lua 5.2 - Note that unless you define LUA_COMPAT_MODULE, package tables will not be exported as globals! * Added: IPv6 support; - Socket.connect and socket.bind support IPv6 addresses; - Getpeername and getsockname support IPv6 addresses, and return the socket family as a third value; - URL module updated to support IPv6 host names; - New socket.tcp6 and socket.udp6 functions; - New socket.dns.getaddrinfo and socket.dns.getnameinfo functions; * Added: getoption method; * Fixed: url.unescape was returning additional values; * Fixed: mime.qp, mime.unqp, mime.b64, and mime.unb64 could mistaking their own stack slots for functions arguments; * Fixed: Receiving zero-length datagram is now possible; * Improved: Hidden all internal library symbols; * Improved: Better error messages; * Improved: Better documentation of socket options. * Fixed: manual sample of HTTP authentication now uses correct "authorization" header (Alexandre Ittner); * Fixed: failure on bind() was destroying the socket (Sam Roberts); * Fixed: receive() returns immediatelly if prefix can satisfy bytes requested (M Joonas Pihlaja); * Fixed: multicast didn't work on Windows, or anywhere else for that matter (Herbert Leuwer, Adrian Sietsma); * Fixed: select() now reports an error when called with more sockets than FD_SETSIZE (Lorenzo Leonini); * Fixed: manual links to home.html changed to index.html (Robert Hahn); * Fixed: mime.unb64() would return an empty string on results that started with a null character (Robert Raschke); * Fixed: HTTP now automatically redirects on 303 and 307 (Jonathan Gray); * Fixed: calling sleep() with negative numbers could block forever, wasting CPU. Now it returns immediately (MPB); * Improved: FTP commands are now sent in upper case to help buggy servers (Anders Eurenius); * Improved: known headers now sent in canonic capitalization to help buggy servers (Joseph Stewart); * Improved: Clarified tcp:receive() in the manual (MPB); * Improved: Decent makefiles (LHF). * Fixed: RFC links in documentation now point to IETF (Cosmin Apreutesei).
2013-08-31Don't use IP_PKTINFO on NetBSD.joerg2-1/+24
2013-08-31Needs msgfmt.joerg1-2/+2
2013-08-31Be consistent about rslparse.joerg3-1/+42
2013-08-30Don't try to use IP_PKTINFO on NetBSD.joerg2-1/+15
2013-08-30Don't use IP_PKTINFO on NetBSD.joerg2-1/+15
2013-08-30Keep in sync with the openvpn main package. Bump revision.joerg2-5/+6
2013-08-30Keep distinfo in sync with openvpn main package. Bump revision.joerg2-5/+6
2013-08-28Bugfix from upstream: do not send error when value is just on limitmanu3-3/+44
https://bugzilla.redhat.com/show_bug.cgi?id=913085
2013-08-26Update scamper to 20130824. Scamper's homepage (and code) has shifted.markd4-18/+18
PR pkg/48156 * add a sc_warts2json utility program that prints out JSON renderings of trace, ping, and dealias objects in scamper warts files. this is useful when developing simple analysis programs in perl. the initial implementation of JSON output for ping and trace was supplied by Internap. Thanks a lot Internap! * add a sc_speedtrap utility program that resolves a set of IPv6 interfaces for aliases (which interfaces belong to the same router). documented in sc_speedtrap(1) man page. http://www.caida.org/~mjl/pubs/speedtrap.pdf * add a sc_ipiddump utility program that prints out all IPIDs received in ping and dealias objects. documented in sc_ipiddump(1) man page. in ping and dealias objects. documented in sc_ipiddump(1) man page. in scamper: * output json objects with -O json * add -O debugfileappend, causing the debugfile to be appended to rather than truncated * do not output debugging information to stderr if NDEBUG was specified * drain fds that are not used by any measurement but have not been closed yet * improve the use of poll() * allow a control socket client to specify its mixing priority * correctly interpret the neighbour discovery cache sysctl on MacOS. * fix build on MacOS systems without IPFW. * fixes prompted by clang static analysis. * fixes prompted by clang static analysis. in sc_analysis_dump: * improvements to the comment header printed automatically at the start * add -M option to print out MPLS headers in ICMP extensions. * add -Q option to print out Quoted IP TTL * add -T option to print out the IP TTL of the response packet in scamper-ping * implement stats function so that the stats printed are not junk * add an -M <mtu> option which causes scamper to send a PTB in response to a packet larger than the given size. * add a -P icmp-time option which causes ping to send ICMP timestamp requests. requests. in scamper-sting: * various improvements in the hole filling phase. * add -U <userid> in scamper-dealias: * implement IPv6 support for Ally and RadarGun which is induced by sending ICMP echo packets larger than a given pseudo MTU size (causing a responses to be fragmented and thus an ID field revealed. * implement IPv6 support for Mercator * be more strict in declaring two interfaces to be aliases: infer the byte ordering by determining if the shortest distance in a sequence of ID values is in byte-swapped or not, and then using that byte ordering mode.
2013-08-26Make pid dir configurable.fhajny3-4/+28
2013-08-26Changes in 3.1.5fhajny3-33/+35
============================================= Release Highlights ================== server ------ bug fixes 25713 fix crash in the delegate mechanism leading to various crashes, and intra-cluster incompatibility between RabbitMQ 3.1.4 and other members of the 3.1.x series (since 3.1.4) 25700 25710 prevent (harmless) errors being logged when pausing in pause_minority mode (since 3.1.0) LDAP plugin ----------- bug fixes 25703 prevent channel crash when attempting to retrieve LDAP attribute that does not exist (since 2.7.0) Changes in 3.1.4 ============================================= Security Fixes ============== server ------ 25686 ensure DLX declaration checks for publish permission (since 2.8.0) management plugin ----------------- 24803 update to a later version of Mochiweb that fixes a directory traversal vulnerability allowing arbitrary file access on Windows (since 2.1.0) Release Highlights ================== server ------ bug fixes 25638 fix resource leak with mirrored queues when whole clusters stop (since 3.0.0) 25624 fix queue crash in mirrored queue handling of messages during promotion (since 2.6.0) 25615 25670 fix race conditions in mirrored queues when different cluster nodes start and stop near-simultaneously (since 2.6.0) 25617 fix corrupt_cluster_status_files error after abrupt node shutdown (since 3.0.0) 25645 fix mirrored queue sync failure in the presence of un-acked messages not at the head of the queue (since 3.1.0) 25640 fix race condition leading to channel crash with low prefetch count repeated basic.consume and basic.cancel (since 3.1.0) 25625 fix memory leak of mirrored queue messages during promotion (since 2.6.0) 25649 allow hipe compilation on Erlang R16B01 25659 allow offline cluster node removal with a node which is not second from last (since 3.0.0) 25648 make `rabbitmqctl join_cluster' idempotent (since 3.0.0) 25651 improve `rabbitmqctl cluster_status' handling of partition info when cluster nodes are in the process of stopping (since 3.1.0) 25689 ensure launch of subprocesses to monitor disk space and file handles works correctly when clink shell is installed on Windows (since 2.1.0) 25594 fix rabbit_error_logger crash during failed startup (since 1.4.0) 25631 fix bug in shutdown sequence that could lead to spurious INTERNAL_ERRORs being sent to clients (since 3.1.0) erlang client ------------- bug fixes 25632 fix broken error handling in amqp_network_connection that could lead to a crash during broker shutdown (since 2.4.0) 25688 fix bug in challenge-response auth handling (since 2.3.0) enhancements 25674 add amqp_rpc_{client,server}:start_link() STOMP plugin ------------ bug fixes 25691 fix connection crash on consumer cancellation notification (since 3.0.0) build and packaging ------------------- bug fixes 25668 add ssl support to OS X standalone package 25584 ensure that VERSION is set correctly when building src packages (since 2.7.0)
2013-08-23update to 3.7.3drochner4-124/+6
change: putty security fixes were integrated (was patched in pkgsrc)
2013-08-22Update to 1.06wen2-6/+6
Upstream changes: 1.06 August 21, 2013 ! #87935 skip all MIME-Parser tests if it is not installed ! #87787 Use of uninitialized value $ns in Lite.pm 1.05 August 18, 2013 ! #87848 Fix manifest, fix invalid http version from release blunder
2013-08-22Update unworkable from 0.51 to 0.53agc5-100/+38
Changes from previous version: Changes (from 0.51 to 0.53): * Bug fixes Update provided by Leonardo Taccari in PR/pkg 48124 - thanks!
2013-08-19Update net/libquvi-scripts to 0.4.17.ryoon3-15/+13
* Fix PR pkg/48122 from Leonardo Taccari. Changes: v0.4.17 (2013-08-04) / Toni Gundogdu Toni Gundogdu: - FIX: website/dailymotion.lua: Parse video_url (PORTpt9) [ce1b525] - FIX: website/guardian.lua: Multiple patterns (PORTpt9) [165792e] - Mark website/break.lua as FIXME [dce1940] - Mark website/charlierose.lua as FIXME [827dff0] 13 files changed, 83 insertions(+), 66 deletions(-) v0.4.16 (2013-06-18) / Toni Gundogdu Toni Gundogdu: - BACKPORTpt9: Remove website/academicearth.lua [0c8f7d9] - FIX: BACKPORTpt9: website/break.lua: path pattern [a8fec0f] - FIX: website/myspass.lua:63: bad argument #3 to format [3265307] - FIX: website/spiegel.lua: title pattern [20e95ca] - FIX: website/tagtele.lua: title pattern [a56f48e] - liveleak.lua: Improve support for 3rd party embedded content [efde9c3] - website/guardian.lua: Check for expired content [22ff394] - website/tagtele.lua: Parse thumbnail URL [c7ca1aa] 17 files changed, 126 insertions(+), 180 deletions(-) v0.4.15 (2013-05-09) / Toni Gundogdu Toni Gundogdu: - FIX: website/101greatgoals.lua: embedded URL patterns [b9daced] - FIX: website/academicearth.lua: Look for YouTube embed URL [cb19406] - FIX: website/bikeradar.lua: Look for embedURL [4fe8db9] - FIX: website/funnyordie.lua: media stream URL pattern [4d0fc7c] - FIX: website/gaskrank.lua: media stream URL pattern [1fbb469] - FIX: website/guardian.lua: all patterns [2e73b5b] - FIX: website/sevenload.lua: all patterns [7ea5976] - FIX: website/spiegel.lua: choose_default [c583258] - FIX: website/ted.lua: Check for extern media [00f4301] - FIX: xhamster.lua: title pattern [ef9a614] - Remove website/yfrog.lua [e667492] - website/arte.lua: Unmark as "FIXME" [494dcde] - website/bikeradar.lua: Unmark as "FIXME" [aa496bf] - website/clipfish.lua: r.categories: Add proto_rtmp [bb40acd] - website/golem.lua: Mark as "FIXME" [8edbe5c] - website/spiegel.lua: Parse thumbnail URL [a345ae6] - website/spiegel.lua: Parse title from page instead [1763969] 48 files changed, 365 insertions(+), 501 deletions(-) v0.4.14 (2013-03-19) / Toni Gundogdu Martin Herkt: - Add website script for wimp.com [3639d67] - website utils: add base64 decoder [0eff56e] 5 files changed, 118 insertions(+), 6 deletions(-) v0.4.13 (2013-03-03) / Toni Gundogdu Toni Gundogdu: - FIX: ard.lua: Assign self.script_dir to package.path [64cab0d] - Rename ard.lua to ardmediathek.lua [7a9bdb1] 4 files changed, 174 insertions(+), 173 deletions(-) v0.4.12 (2013-02-10) / Toni Gundogdu Thomas Weißschuh: - Add ard.lua [c0add2d] Toni Gundogdu: - FIX: tvlux.lua: Update patterns, parse thumb URL [85f1dea] - FIX: wdrmaus.lua:101: invalid escape sequence [ef57874] - Move fastjizz.lua under FIXME [e2d1f7f] - Move mgnetwork.lua under FIXME [1912cd7] 13 files changed, 242 insertions(+), 65 deletions(-) v0.4.11 (2013-02-01) / Toni Gundogdu Guido Leisker: - Add support for myspass.de [2b79f18] - Add support for wdrmaus.de [86d1c64] Toni Gundogdu: - beeg.lua: Update title pattern [be81501] - FIX: 1tvru.lua: title and media URL patterns [763338c] - FIX: gaskrank.lua: media stream URL pattern [8c067a5] - FIX: gen-news.sh: Find the closest tagname [89d31bc] - FIX: lego.lua: All patterns [787be3d] - FIX: metacafe.lua: Key parsing [4735455] - FIX: theonion.lua: thumbnail URL pattern [8d6ee06] - gaskrank.lua: Parse thumbnail URL [1e15082] 71 files changed, 398 insertions(+), 821 deletions(-) v0.4.10 (2012-11-22) / Toni Gundogdu Toni Gundogdu: - FIX: audioboo.lua: multiple patterns [b182505] - FIX: break.lua: multiple patterns [6357cd1] - FIX: dailymotion.lua: title pattern [bc35f74]
2013-08-19Update net/p5-umph to 0.2.5.ryoon2-7/+6
* Fix PR pkg/48136 from Leonardo Taccari. Changes: v0.2.5 (2012-11-25) Toni Gundogdu: - FIX: playlist ID pattern [d25d7f2] - Manual: Revise FILES section [062d7db] test suite: - Add favorites.t [32297af] - Add playlist.t [1a4737d] - Add uploads.t [e2ff823] - Rename umph-Pod.t [6de116d] v0.2.4 (2012-11-24) Toni Gundogdu: - Add --user-agent option [23f8926] - FIX: Do not strip playlist prefix [a8f81cd] - FIX: Playlist ID length check [322d270] v0.2.3 (2012-04-24) Toni Gundogdu: - DOC: Add note about "Play all" playlists [54dbe5c] - Do not include duplicate media URLs [fc562cc] - FIX: Parse media URL properly [09723d3] - FIX: Strip playlist prefix properly [f206aad] v0.2.2 (2012-04-23) Toni Gundogdu: - Accept URLs with playlist ID param [82f3060] - Add --export-format, depr. --json, --csv [f90195d] - Add --export-response [9e288fe] - Use YouTube API returned error message [a7b95f6] v0.2.1 (2012-04-15) Toni Gundogdu: - FIX: Strip playlist prefix "PL" if found (#3) [95966bb] - FIX: Synopsis [9772a58] - Trim --version output [6d3c2d6]
2013-08-18Update ruby-tw to 0.4.8.tsutsui2-6/+6
Changes from History.txt: === 0.4.8 2013-08-10 * show Fav/RT count === 0.4.7 2013-08-09 * modify DM send dialog * declare license in gemspec === 0.4.6 2013-07-28 * unescape HTML in Tw::Client#show_status === 0.4.5 2013-07-27 * fix listname regex, could contain '-' * thank you for contributing @takano32 === 0.4.4 2013-07-14 * silent if --format option === 0.4.3 2013-07-02 * notify switch user
2013-08-18Spell "TOOL_DEPENDS" correctly, not as "TOOLS_DEPENDS".apb1-2/+2
2013-08-172.36.2richard2-7/+6
====== * proxy/gnome: Fix "automatic" mode, which was mistakenly being treated as "none" (Dan) * proxy/gnome: Use this in Unity sessions as well as GNOME ones. (#698936, Iain Lane) * proxy/libproxy: Fix handling of SOCKS proxies (#699359, Dan)
2013-08-17Update "youtube-dl" package to version 20130817. A changelog is nottron2-6/+6
available as usual but it fixes video downloads from Youtube for me.
2013-08-16Update "youtube-dl" package to version 20130815 . A changelog is nottron2-6/+6
available as usual but the update is problem necessary because of Google's attempt to block Microsoft's Windows Phone Youtube App.
2013-08-16Fix for bison-3 syntax.jperkin2-1/+44
2013-08-16revbump from libnotify bumped to 0.7 and dependency changed from libnotify07.obache6-15/+16
2013-08-16Update chrony to version 1.29. For a full list of changeshannken11-99/+132
since 1.24 see file NEWS in the distfile. Security fixes since 1.24: * Fix crash when processing crafted commands (CVE-2012-4502) (possible with IP addresses allowed by cmdallow and localhost) * Don't send uninitialized data in SUBNETS_ACCESSED and CLIENT_ACCESSES replies (CVE-2012-4503) (not used by chronyc) Reviewed by: Joerg Sonnenberger <joerg@netbsd.org>
2013-08-16Switch to use libnotify07.obache1-3/+4
Bump PKGREVISION.
2013-08-16Switch to use libnotify07.obache5-5/+42
Bump PKGREVISION.
2013-08-16Switch to use libnotify07.obache3-4/+21
Bump PKGREVISION.
2013-08-15Don't try to build and use netdns.a. It would result in duplicatejoerg2-1/+15
declarations during linking with clang. Thanks to uwe@ for the help.
2013-08-15Consistently declare types with struct.joerg6-1/+71
2013-08-15Revbump after updating lang/lua to 5.2.2.obache1-1/+2
2013-08-14Changes 3.6.18:adam2-6/+6
* BUG 9777: vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and doesn't cope with directories being modified whilst reading. * BUG 9678: Windows 8 Roaming profiles fail. * BUG 9636: Fix parsing linemarkers in preprocessor output. * BUG 9880: Use of wrong RFC2307 primary group field. * BUG 9983: Fix output of syslog-facility check. * BUG 10064: Linux kernel oplock breaks can miss signals.
2013-08-14Update mikutter to 0.2.2.1328.obache3-8/+22
(drop dependency on libnotify, optional and alternative selectable). bug fixes.
2013-08-13Update "youtube-dl" package to version 20130809 . A changelog is nottron2-6/+6
available as usual but it fixes video downloads from Youtube for me.
2013-08-13Changes 13.1.0:adam5-54/+29
- trial now has an --exitfirst flag which stops the test run after the first error or failure. - twisted.internet.ssl.CertificateOptions now supports chain certificates. - twisted.internet.endpoints now provides ProcessEndpoint, a child process endpoint. - Factory now has a forProtocol classmethod that constructs an instance and sets its protocol attribute. - twisted.internet.endpoints.connectProtocol allows connecting to a client endpoint using only a protocol instance, rather than requiring a factory. - twisted.trial.unittest.SynchronousTestCase.assertNoResult no longer swallows the result, if the assertion succeeds. - twisted.python.constants.FlagConstant implements __iter__ so that it can be iterated upon to find the flags that went into a flag set, and implements __nonzero__ to test as false when empty. - assertIs and assertIsNot have now been added to twisted.trial.unittest.TestCase. - twisted.trial.unittest.TestCase.failureResultOf now takes an optional expected failure type argument. - The POSIX implementation of twisted.internet.interfaces.IReactorProcess now does not change the parent process UID or GID in order to run child processes with a different UID or GID.
2013-08-13fix fallout from giflib update.joerg2-1/+15
2013-08-13Update to 1.04wen2-7/+6
Upstream changes: 1.04 August 9, 2013 ! #87605 Skip XML::Parser::Lite tests if it is missing [github.com/omega] 1.03 August 4, 2013 ! #87195 Remove DIME::Tools dep until we can work around its issues 1.02 July 30, 2013 ! #87421 1.01 release blew out xml versions. mea culpa. 1.01 July 29, 2013 ! #84168 Test t/02-payload.t fails under Perl 5.17.10 ! #87127 TEST.pl removed from MANIFEST ! revert #85713 - various reports of environment failures 1.0 July 16, 2013 ! #85713 SOAP::Transport::HTTP, 500 error skips parsing of response ! No more Windows 98 client support. Wait, wut? ! Merge SOAP::Transport::TCP back into SOAP::Lite (for now) ! #82416: xop href cid: URI encoded support reported by Michael R. Davis (mrdvt92) ! #85208 bad test plan ! #83750 different headers for mod_perl vs mod_perl2 [Mithun Bhattacharya] 0.716 May 10, 2013 ! #17275 Client unable to detect fatal SOAP failure (e.g. unable to connect to host) ! #81471 Force array context for correct Apache header parsing in SOAP::Transport::HTTP ! #45611 deserializing SOAP message with composite attachment raises exception ! #84168 Test t/02-payload.t fails under Perl 5.17.10 ! #85098 Monkey patch for LWP::Protocol confuses the toolchain ! #78692 / #84724 / #83715 Sending large object (many levels deep) throws error Incorrect parameter ! #78502 t/08-schema.t noisy under 5.17.2 (unescaped left brace in regex is deprecated) ! #78608 Documentation for "+trace" ! #78639 Spelling error reported by Debian tools
2013-08-12Update vino to 2.32.2.obache7-43/+26
Vino 2.32.2 =========== Fixes: - Avoid out-of-bounds memory accesses. - Exit immediately when the server is disabled. - Bind both an IPv4 and an IPv6 socket. Translations: + Daniel Korostil (uk) + Fran Diéguez (gl) + Gheyret T.Kenji (ug) + Wei-Lun Chao (zh_HK, zh_TW) ============== Version 2.32.1 ============== Fixes: + Be compatible with old (< 0.7.0) and new (>= 0.7.0) libnotify Translations: + Joan Duran (ca@valencia) + Thanos Lefteris (el) + Priit Laes (et) + Takayuki KUSANO (ja) + Changwoo Ryu (ko) + Sahran (ug) Vino 2.32.0 =========== Translations: + Baurzhan Muftakhidinov (kk) + Takayuki KUSANO (ja) Vino 2.31.91 ============ Translations: + Fran Diéguez (gl) + krishnababu k (te) + Kristjan Schmidt (eo) + Petr Kovar (cs) Vino 2.31.4 =========== Features: + Improvements on Telepathy tubes stuff + Various internal work on replacing deprecated stuff Translations: + Andika Triwidada (id) + Carles Ferrando (ca@valencia) + Leonid Kanter (ru) + Luca Ferretti (it) + Matej Urbančič (sl) + Priit Laes (et) + Sira Nokyoongtong (th) + Theppitak Karoonboonyanan (th) + Thomas Thurman (en@shaw)
2013-08-12Update samba35 to 3.5.22, security release.taca10-45/+44
============================== Release Notes for Samba 3.5.22 August 05, 2013 ============================== This is a security release in order to address CVE-2013-4124 (Missing integer wrap protection in EA list reading can cause server to loop with DOS). o CVE-2013-4124: All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated if guest connections are allowed. This flaw is not exploitable beyond causing the code to loop allocating memory, which may cause the machine to exceed memory limits. Changes since 3.5.21: --------------------- o Jeremy Allison <jra@samba.org> * BUG 10010: CVE-2013-4124: Missing integer wrap protection in EA list reading can cause server to loop with DOS.
2013-08-12Update samba to 3.6.17, security release.taca18-78/+78
============================== Release Notes for Samba 3.6.17 August 05, 2013 ============================== This is a security release in order to address CVE-2013-4124 (Missing integer wrap protection in EA list reading can cause server to loop with DOS). o CVE-2013-4124: All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated if guest connections are allowed. This flaw is not exploitable beyond causing the code to loop allocating memory, which may cause the machine to exceed memory limits. Changes since 3.6.16: --------------------- o Jeremy Allison <jra@samba.org> * BUG 10010: CVE-2013-4124: Missing integer wrap protection in EA list reading can cause server to loop with DOS.
2013-08-09Patch net/bmon to handle nonzero leading lladdr octets gracefully.riastradh3-3/+32
2013-08-09Fix build on SunOS.fhajny2-1/+17
2013-08-07rl-9.9.3-P2.patch has been updated. From http://ss.vix.su/~vjs/rrlrpz.htmljklos1-3/+3
2013-08-07update to 3.7.2drochner9-82/+220
This is a major update, many fixes and improvements. Main reason for the update was to sync the embedded sftp client with putty after fixes for vulnerabilities.
2013-08-07Update to 0.99.22.3.gdt4-15/+15
Update HOMEPAGE, MASTER_SITES. Set USE_GNU_READLINE to catch up to 2012Q3 devel/readline builtin detection. 0.99.22.3 basically contains a security bugfix for OSPF-API. 0.99.22.2 was not released. 0.99.22.1 contains a few non-security bugfixes. Changes in 0.99.22 since 0.99.21: - [bgpd] The semantics of default-originate route-map have changed. The route-map is now used to advertise the default route conditionally. The old behaviour which allowed to set attributes on the originated default route is no longer supported. - [bgpd] There is now a replace-as option to neighbor ... local-as ... no-prepend. For details, refer to the user documentation. - [zebra] An FPM interface has been added. This provides an alternate interface to routing information and is geared at OpenFlow & co. - [snmp] AgentX is now supported; the old smux backend is considered deprecated. ospf6d has also had OSPFV3-MIB added. - [*] several issues with configuration save/load/apply have been fixed, in particular on ospf "max-metric router-lsa administrative" and "distribute-list", bgpd "no neighbor activate", isisd "metric-style", - [*] a lot of bugs have been fixed, please refer to the git log