Age | Commit message (Collapse) | Author | Files | Lines |
|
- Fix for PR #29437 opened by luiszuccolo(at)ciudad.com.ar, thanks for the PR !
> FreeRADIUS 1.0.2 ; $Date: 2005/02/13 01:03:20 $, urgency=medium
> * Novell eDirectoty support. Patch from Novell.
> * localweb & Trapeze dictionary updates.
> * EAP-SIM fixes.
> * Make "Strip-User-Name = No" work.
> * Don't declare zero-length arrays in rlm_passwd
> * Bug fix to make udpfromto code work
> * radrelay shouldn't dump core if it can't read a VP from the
> detail file.
> * Only initialize the random pool once.
> * In rlm_sql, don't escape characters twice.
> * Fix MD4 calculation on big-endian machines.
> * In rlm_ldap, only claim Auth-Type if a plain text password is present.
> * Treat Quintium VSAs like Cisco VSAs
> * Locking fixes in threading code
> * rlm_krb5 includes /usr/include/et for Fedora Core
> * Fix post-auth REJECT stanza processing for rejections from external
> processes or home RADIUS servers
> * Fix building on gcc-4.0 by not trying to access static auth_port from
> other files.
> * Fix building SNMP support on Solaris 9, which needs -lkstat
|
|
Changes unknown (I tested this on Linux).
|
|
Also fix string constants quoting for flow-export's PostgreSQL and MySQL
support.
Bump PKGREVISION to 2.
|
|
PKGREVISION++
|
|
definition of the abs() macro. Based on a suggestion by Roland Illig.
|
|
|
|
|
|
|
|
|
|
|
|
Submitted by Alexander Mayr in PR 29349.
Changes between 0.8.6 - 0.8.9:
2004-12-28 Markus Kern <mkern@users.berlios.de>
* Fixed crash on firewalled source abortion.
2004-12-19 Markus Kern <mkern@users.berlios.de>
* Fixed unchecked FST_PLUGIN->session access in fst_download.c
* Fixed url decoder memmove overrun.
2004-11-27 Markus Kern <mkern@users.berlios.de>
* Added windows installer.
2004-11-11 Markus Kern <mkern@users.berlios.de>
* Finalized multi-supernode connection code.
* Fixed NULL pointer crash on some corrupt search results.
2004-09-03 Markus Kern <mkern@users.berlios.de>
* Fixed abuse of gethostbyname in HTTP client.
2004-06-19 Markus Kern <mkern@users.berlios.de>
* Fixed remote DoS on HTTP server (not exploitable).
* Fixed remote DoS on HTTP client (not exploitable).
2004-06-16 HEx <hex@users.berlios.de>
* Use default nodes file if cache runs out of nodes.
|
|
Submitted by Alexander Mayr (maintainer) in PR 29349.
Changes between 0.11.7 - 0.11.8:
giftd 0.11.8:
* Shares are now keyed by pathname instead of by hash. (Hashes
weren't guaranteed to exist, could collide for identical files,
and no lookup function was provided in any case).
* Handle syncing properly. Share objects are no longer freed
without letting plugins know, and plugin-specific data is no
longer leaked.
* ImageMagick support removed and replaced by Jef Pokanzer's
image_size. This fixes a multitude of problems related to
dependencies, performance, stability and security.
* The --index-only option no longer tries to bind to the interface
port.
* Avoid aborting on transfers >=2Gb. Such transfers still don't
work, though, but this is a stdio limitation and cannot be portably
solved.
giftd 0.11.7:
* Filter LOCATE requests so that they are not delivered to protocol plugins
which do not have a registered hash handler for the hash type being
searched for.
* Preserve extension when renaming downloaded files because the file name
is already used.
* Removed requirement for state files having leading dot on Windows.
* Fixed bug which prevented completed dir from being shared if no sharing
root was set.
* Added meta data extraction for bittorrent files.
* Added check to not share incoming dir if not specifically allowed by
config.
* Fixed some bugs which could lead to shares db corruption.
* Added saving of download paused state across restarts.
libgift 0.11.8.1:
* Fixed a serious bug in TCP buffering introduced in 0.11.8.
libgift 0.11.8:
* The SI suffixes k, M and G multiply configuration values by 2^10,
2^20 and 2^30 respectively.
libgift 0.11.7:
* Fixed VA_COPY bug in strobj which led to crashes on AMD64 (possibly other
platforms?)
* Fixed fd leak in platform_child() implementation.
* Fixed a bug where we possibly send SIGTERM to random processes
in platform_cleanup().
libgiftproto 0.11.8:
* Synchronized the version to match giftd.
libgiftproto 0.11.7:
* Synchronized the version to match giftd.
|
|
|
|
in some file, use subst.mk and remove the patch.
|
|
|
|
It seems to be the origin of the security problem reported in
http://www.python.org/security/PSF-2005-001/.
Instead of fixing this dead end (unused in the pkgsrc tree) just
remove it.
|
|
Bump PKGREVISION.
|
|
because the configuration created by the user might still be in that
directory.
|
|
pkgsrc changes:
- depend on tsocks to allow torification of other applications
- create a user for this application to run as
- install a suitable rc script
ChangeLog says:
o Bugfixes on 0.0.9:
- Fix an assert bug that took down most of our servers: when
a server claims to have 500 GB of bandwidthburst, don't
freak out.
- Don't crash as badly if we have spawned the max allowed number
of dnsworkers, or we're out of file descriptors.
- Block more file-sharing ports in the default exit policy.
- MaxConn is now automatically set to the hard limit of max
file descriptors we're allowed (ulimit -n), minus a few for
logs, etc.
- Give a clearer message when servers need to raise their
ulimit -n when they start running out of file descriptors.
- SGI Compatibility patches from Jan Schaumann.
- Tolerate a corrupt cached directory better.
- When a dirserver hasn't approved your server, list which one.
- Go into soft hibernation after 95% of the bandwidth is used,
not 99%. This is especially important for daily hibernators who
have a small accounting max. Hopefully it will result in fewer
cut connections when the hard hibernation starts.
- Load-balance better when using servers that claim more than
800kB/s of capacity.
- Make NT services work (experimental, only used if compiled in).
|
|
patch-BitTorrent::Rerequester.py
o Chase latest CVS version
- Add {show_infopage,infopage_redirect,scrape_allowed}
options to tracker
- Try to resolve IPs when possible
patch-BitTorrent::track.py
o Chase latest CVS version
- Add {show_infopage,infopage_redirect,scrape_allowed}
options to tracker
- Try to resolve IPs when possible
patch-BitTorrent::zurllib.py
o A better fix for the python 2.4 issue: there are still some minor
adjustments required but the port is quite useable again
patch-btcompletedir.py
o Chase latest CVS version
- Add {show_infopage,infopage_redirect,scrape_allowed}
options to tracker
- Try to resolve IPs when
Bump PKGREVISION.
|
|
|
|
|
|
|
|
* Added NetBSD 1.6.2 support (untested)
|
|
- no changelog available
|
|
Migrate WET_USE_SSL to PKG_OPTIONS.wget=ssl (on by default, as previously).
|
|
Changes:
- Nmap now prints a warning message on Windows if Winpcap is not found
(it then reverts to raw sockets mode if available, as usual).
- documentation fixes and updates.
|
|
|
|
There are many FTP clients around these days. Most are console based, some
feature a graphical user interface. What most clients are missing is support
for latest or not so common technologies like ZeroConf, TLS/SSL or FXP (just
to name a few), accompanied by a decent user interface, that tries to support
the user instead of frustrating him.
KFTPGrabber tries to make a complete FTP client solution with support for
plugins, scripting and everything else the users needs, based on the
latest technologies KDE provides.
Here are some of the features:
- Multiple FTP sessions (tabs)
- Transfer queue
- TLS/SSL support for encrypted connections (implicit and explicit)
- Partial X509 certificate support for authentication
- FXP transfer support (site-to-site)
- OTP (one time password) support - s/key, md5, rmd160, sha1
- Drag&Drop support
- Site bookmarking
- Encrypted bookmark support (password can be saved to KWallet)
- Distributed FTP support (PRET)
- SSCN and CPSV support
- Skiplist
- ZeroConf (aka. Rendezvous) support for local site discovery
- Bookmark sharing with Kopete contacts (KDE >= 3.3)
- Bookmark import plugins
- Support for SFTP protocol [experimental]
|
|
before using it.
Bump PKGREVISION.
|
|
Fix the rc.d script: add rcvar definition and no need to source /etc/rc.subr
twice.
Bump PKGREVISION to 7.
|
|
Really lots of changes since last packaged version (0.83).
Unfortunately there is now changes list included with the distribution file
even if it is stated otherwise.
See http://www.switch.ch/misc/leinen/snmp/perl/changes.html.
Among remarkable things please note IPv6 support and of course many
bug fixes.
|
|
within NetBSD-current's bsd.own.mk, which conflicts with its usage in
pkgsrc. The package that use USE_PAM have been converted to use the
bsd.options.mk framework. This should fix PR pkg/29257.
|
|
- Thanks to diro (at) nixsys.bz for reporting this in PR# 25955 and testing the
patch.
|
|
Changes:
- Nmap now ships with and installs (in the same directory as other
data files such as nmap-os-fingerprints) an XSL stylesheet for
rendering the XML output as HTML. This stylesheet was written by
Benjamin Erb ( see http://www.benjamin-erb.de/nmap/ for examples).
It supports tables, version detection, color-coded port states, and
more. The XML output has been augmented to include an
xml-stylesheet directive pointing to nmap.xsl on the local
filesystem. You can point to a different XSL file by providing the
filename or URL to the new --stylesheet argument. Omit the
xml-stylesheet directive entirely by specifying --no-stylesheet.
The XML to HTML conversion can be done with an XSLT processor such
as Saxon, Sablot, or Xalan, but modern browsers can do this on the
fly -- simply load the XML output file in IE or Firefox. Some
features don't currently work with Firefox's on-the-fly rendering.
Perhaps some Mozilla wizard can fix that in either the XSL or the
browser itself. I hate having things work better in IE :). It is
often more convenient to have the stylesheet loaded from a URL
rather than the local filesystem, allowing the XML to be rendered on
any machine regardless of whether/where the XSL is installed. For
privacy reasons (avoid loading of an external URL when you view
results), Nmap uses the local filesystem by default. If you would
like the latest version of the stylesheet load from the web when
rendering, specify
--stylesheet http://www.insecure.org/nmap/data/nmap.xsl .
- Fixed fragmentation option (-f). One -f now sets sends fragments
with just 8 bytes after the IP header, while -ff sends 16 bytes to
reduce the number of fragments needed. You can specify your own
fragmentation offset (must be a multiple of 8) with the new --mtu
flag. Don't also specify -f if you use --mtu. Remember that some
systems (such as Linux with connection tracking) will defragment in
the kernel anyway -- so test first while sniffing with ethereal.
These changes are from a patch by Martin Macok
(martin.macok(a)underground.cz).
- Nmap now prints the number (and total bytes) of raw IP packets sent
and received when it completes, if verbose mode (-v) is enabled. The
report looks like:
Nmap finished: 256 IP addresses (3 hosts up) scanned in 30.632 seconds
Raw packets sent: 7727 (303KB) | Rcvd: 6944 (304KB)
- Fixed (I hope) an error which would cause the Windows version of
Nmap to abort under some circumstances with the error message
"Unexpected error in NSE_TYPE_READ callback. Error code: 10053
(Unknown error)". Problem reported by "Tony Golding"
(biz(a)tonygolding.com).
- Added new "closed|filtered" state. This is used for Idlescan, since
that scan method can't distinguish between those two states. Nmap
previously just used "closed", but this is more accurate.
- Null, FIN, Maimon, and Xmas scans now mark ports as "open|filtered"
instead of "open" when they fail to receive any response from the
target port. After all, it could just as easily be filtered as open.
This is the same change that was made to UDP scan in 3.70. Also as
with UDP scan, adding version detection (-sV) will change the state
from open|filtered to open if it confirms that they really are open.
- Fixed a bug in ACK scan that could cause Nmap to crash with the
message "Unexpected port state: 6" in some cases. Thanks to Glyn
Geoghegan (glyng(a)corsaire.com) for reporting the problem.
- Change IP protocol scan (-sO) so that a response from the target
host in any protocol at all will prove that protocol is open. As
before, no response means "open|filtered", an ICMP protocol
unreachable means "closed", and most other ICMP error messages mean
"filtered".
- Patched a Winpcap issue that prevented read timeouts from being
honored on Solaris (thus slowing down Nmap substantially). The
problem report and patch were sent in by Ben Harris
(bjh21(a)cam.ac.uk).
- Changed IP protocol scan (-sO) so that it sends valid ICMP, TCP, and
UDP headers when scanning protocols 1, 6, and 17, respectively. An
empty IP header is still sent for all other protocols. This should
prevent the error messages such as "sendto in send_ip_packet:
sendto(3, packet, 20, 0, 192.31.33.7, 16) => Operation not
permitted" that Linux (and perhaps other systems) would give when
they try to interpret the raw packet. This also makes it more
likely that these protocols will elicit a response, proving that the
protocol is "open".
- The windows build now uses header and static library files from
Winpcap 3.1Beta4. It also now prints out the DLL version you are
using when run with -d. I would recommend upgrading to 3.1Beta4 if
you have an older Winpcap installed.
- Added an NTP probe and matches to the version detection database
(nmap-service-probes) thanks to a submission from Martin
Macok (martin.macok@underground.cz).
- Applied several Nmap service detection database updates sent in by
Martin Macok (martin.macok(a)underground.cz).
|
|
* use modern automake rather than 1.4 (James Henstridge)
* Fix a couple of warnings from sparse (Kjartan Maraas)
* Fix parsing of 'const octet' (Jules Colding)
|
|
|
|
- Use libnet 1.1.x branch
- No changelog available
- Addresses PR# 29056
|
|
|
|
|
|
* bug fixes
+ Fix mem leak on exception overwrite (Michael)
+ Fix demarshalling CORBA_any containing null or void values (Michael)
+ IDL generation (esp. skelimpl) fixes (Jules Colding)
+ Ongoing Win32 port work (Tor Lillqvist)
+ Fix linking on Darwin (Hans Petter Jansson)
|
|
|
|
- Bump to nb3
- Thanks to Antoine Reilles for supplying the patch
|
|
- Bump to nb4
- Thanks to Antoine Reilles for supplying the patch
|
|
- Lots of changes and bugfixes, see distrib/ChangeLog
|
|
- Use "mountcritremote" as requirement in "adsl.sh" because packages might
reside on a NFS mount filesystem as pointed out by Luke Mewburn.
Bump package revision after these fixes.
|
|
work around the limitations of the security-patched SimpleXMLRPCServer
|
|
prototype of abs() in "stdlib.h" after de-__P-ing "stdlib.h".
|
|
|
|
target that appears later in the Makefile. Also move inclusion of
buildlink3.mk files above target definitions, as per style guidelines.
|