summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2012-05-231.6.13pettai3-7/+8
* New -S option for ldns-verify-zone to chase signatures online. * New -k option for ldns-verify-zone to validate using a trusted key. * New inception and expiration margin options (-i and -e) to ldns-verify-zone. * New ldns_dnssec_zone_new_frm_fp and ldns_dnssec_zone_new_frm_fp_l functions. * New ldns_duration* functions (copied from OpenDNSSEC source) * fix ldns-verify-zone to allow NSEC3 signatures to come before the NSEC3 RR in all cases. * Zero the correct flag (opt-out) when creating NSEC3PARAMS. * Canonicalize RRSIG's Signer's name too when validating, because bind and unbound do that too. * bugfix #433: Allocate rdf using ldns_rdf_new in ldns_dname_label * bugfix #432: Use LDNS_MALLOC & LDNS_FREE i.s.o. malloc & free * bugfix #431: Added error message for LDNS_STATUS_INVALID_B32_EXT * bugfix #427: Explicitely link ssl with the programs that use it. * Fix reading \DDD: Error on values that are outside range (>255). * bugfix #429: fix doxyparse.pl fails on NetBSD because specified path to perl. * New ECDSA support (RFC 6605), use --disable-ecdsa for older openssl. * fix verifying denial of existence for DS's in NSEC3 Opt-Out zones.
2012-05-22Update "wireshark" package to version 1.6.8. Changes since 1.6.7:tron2-6/+6
- The following vulnerabilities have been fixed: o wnpa-sec-2012-08 Infinite and large loops in the ANSI MAP, ASF, BACapp, Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 dissectors have been fixed. Discovered by Laurent Butti. (Bugs 6805, 7118, 7119, 7120, 7121, 7122, 7124, 7125) Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7. o wnpa-sec-2012-09 The DIAMETER dissector could try to allocate memory improperly and crash. (Bug 7138) Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7. o wnpa-sec-2012-10 Wireshark could crash on SPARC processors due to misaligned memory. Discovered by Klaus Heckelmann. (Bug 7221) Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7. - The following bugs have been fixed: o User-Password - PAP decoding passwords longer than 16 bytes. (Bug 6779) o The MSISDN is not seen correctly in GTP packet. (Bug 7042) o Wireshark doesn't calculate the right IPv4 destination using source routing options when bad options precede them. (Bug 7043) o BOOTP dissector issue with DHCP option 82 - suboption 9. (Bug 7047) o MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW packets. (Bug 7089) o ANSI MAP infinite loop. (Bug 7119) o HCIEVT infinite loop. (Bug 7122) o Wireshark doesn't decode NFSv4.1 operations. (Bug 7127) o LTP infinite loop. (Bug 7124) o Wrong values in DNS CERT RR. (Bug 7130) o Megaco parser problem with LF in header. (Bug 7198) o OPC UA bytestring node id decoding is wrong. (Bug 7226) - Updated Protocol Support ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP, IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA, RADIUS - New and Updated Capture File Support 5View, CSIDS, pcap, pcap-ng
2012-05-22net/netatalk: Fix PLIST for DragonFlymarino1-0/+2
2012-05-22Update bind96 package to 9.6.3.1.ESV.7 (BIND 9.6-ESV-R7).taca3-42/+6
New Features * None Feature Changes * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) [RT #28989] Bug Fixes * The locking strategy around the handling of iterative queries has been tuned to reduce unnecessary contention in a multi-threaded environment. (Note that this may not provide a measurable improvement over previous versions of BIND, but it corrects the performance impact of change 3309 / RT #27995) [RT #29239] * Addresses a race condition that can cause named to to crash when the masters list for a zone is updated via rndc reload/reconfig [RT #26732] * Fixes a race condition in zone.c that can cause named to crash during the processing of rndc delzone [RT #29028] * Prevents a named segfault from resolver.c due to procedure fctx_finddone() not being thread-safe. [RT #27995] * Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering an assertion when flushing cache data. [RT #28571] * Resolves inconsistencies in locating DNSSEC keys where zone names contain characters that require special mappings [RT #28600] * A new flag -R has been added to queryperf for running tests using non-recursive queries. It also now builds correctly on MacOS version 10.7 (darwin) [RT #28565] * Named no longer crashes if gssapi is enabled in named.conf but was not compiled into the binary [RT #28338] * SDB now handles unexpected errors from back-end database drivers gracefully instead of exiting on an assert. [RT #28534]
2012-05-22Update bind97 package to 9.7.6.taca3-42/+6
New Features * None Feature Changes * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) [RT #28989] Bug Fixes * The locking strategy around the handling of iterative queries has been tuned to reduce unnecessary contention in a multi-threaded environment. (Note that this may not provide a measurable improvement over previous versions of BIND, but it corrects the performance impact of change 3309 / RT #27995) [RT #29239] * Addresses a race condition that can cause named to to crash when the masters list for a zone is updated via rndc reload/reconfig [RT #26732] * Fixes a race condition in zone.c that can cause named to crash during the processing of rndc delzone [RT #29028] * Prevents a named segfault from resolver.c due to procedure fctx_finddone() not being thread-safe. [RT #27995] * Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering an assertion when flushing cache data. [RT #28571] * A new flag -R has been added to queryperf for running tests using non-recursive queries. It also now builds correctly on MacOS version 10.7 (darwin) [RT #28565] * Named no longer crashes if gssapi is enabled in named.conf but was not compiled into the binary [RT #28338] * SDB now handles unexpected errors from back-end database drivers gracefully instead of exiting on an assert. [RT #28534]
2012-05-22Update bind98 to 9.8.3.taca4-44/+10
pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in. Changes from release announce: Security Fixes * Windows binary packages distributed by ISC are now built and linked against OpenSSL 1.0.0i New Features * None Feature Changes * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) [RT #28989] Bug Fixes * The locking strategy around the handling of iterative queries has been tuned to reduce unnecessary contention in a multi-threaded environment. (Note that this may not provide a measurable improvement over previous versions of BIND, but it corrects the performance impact of change 3309 / RT #27995) [RT #29239] * Addresses a race condition that can cause named to to crash when the masters list for a zone is updated via rndc reload/reconfig [RT #26732] * named-checkconf now correctly validates dns64 clients acl definitions. [RT #27631] * Fixes a race condition in zone.c that can cause named to crash during the processing of rndc delzone [RT #29028] * Prevents a named segfault from resolver.c due to procedure fctx_finddone() not being thread-safe. [RT #27995] * Improves DNS64 reverse zone performance. [RT #28563] * Adds wire format lookup method to sdb. [RT #28563] * Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering an assertion when flushing cache data. [RT #28571] * Resolves inconsistencies in locating DNSSEC keys where zone names contain characters that require special mappings [RT #28600] * A new flag -R has been added to queryperf for running tests using non-recursive queries. It also now builds correctly on MacOS version 10.7 (darwin) [RT #28565] * Named no longer crashes if gssapi is enabled in named.conf but was not compiled into the binary [RT #28338] * SDB now handles unexpected errors from back-end database drivers gracefully instead of exiting on an assert. [RT #28534]
2012-05-22Update biind99 package to 9.9.1.taca5-45/+12
pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in. Changes from release announce: Security Fixes * Windows binary packages distributed by ISC are now built and linked against OpenSSL 1.0.0i New Features * None Feature Changes * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) [RT #28989] * A note will be added to the README in future releases to explain that the improved scalability provided by using multiple threads to listen for and process queries (change 3137, RT #22992) does not provide any performance benefit when running BIND on versions of the linux kernel that do not include the 'lockless UDP transmit path' changes that were incorporated in 2.6.39. (Some linux distributors may have provided this functionality under their own version numbering systems). Bug Fixes * The locking strategy around the handling of iterative queries has been tuned to reduce unnecessary contention in a multi-threaded environment. (Note that this may not provide a measurable improvement over previous versions of BIND, but it corrects the performance impact of change 3309 / RT #27995) [RT #29239] * Addresses a race condition that can cause named to to crash when the masters list for a zone is updated via rndc reload/reconfig [RT #26732] * named-checkconf now correctly validates dns64 clients acl definitions. [RT #27631] * Fixes a race condition in zone.c that can cause named to crash during the processing of rndc delzone [RT #29028] * Prevents a named segfault from resolver.c due to procedure fctx_finddone() not being thread-safe. [RT #27995] * Improves DNS64 reverse zone performance. [RT #28563] * Adds wire format lookup method to sdb. [RT #28563] * Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering an assertion when flushing cache data. [RT #28571] * Prevents intermittent named crashes following an rndc reload [RT #28606] * Resolves inconsistencies in locating DNSSEC keys where zone names contain characters that require special mappings [RT #28600] * A new flag -R has been added to queryperf for running tests using non-recursive queries. It also now builds correctly on MacOS version 10.7 (darwin) [RT #28565] * Named no longer crashes if gssapi is enabled in named.conf but was not compiled into the binary [RT #28338] * SDB now handles unexpected errors from back-end database drivers gracefully instead of exiting on an assert. [RT #28534] * Prevents named crashes as a result of dereferencing a NULL pointer in zmgr_start_xfrin_ifquota if the zone was being removed while there were zone transfers still pending [RT #28419] * Corrects a parser bug that could cause named to crash while reading a malformed zone file. [RT #28467] * Ensures that when a client recurses its status fields are consistently set so that named doesn't fail on an INSIST in client.c:exit_check. [RT #28346] * Fixed a problem preventing proper use of 64 bit time values in libbind. [RT # 26542] * isccc/cc.c:table_fromwire could fail to free an allocated object on error, leading to a possible memory leak condition. [RT #28265] * Fixed a build error on systems without ENOTSUP. [RT #28200] * The header file isc/hmacsha.h is now installed when building BIND. [RT #28169] * AAAA responses will no longer be returned in the additional section when filter-aaaa-on-v4 is in use. (Prior to this change, they would be returned for some query types). [RT #27292]
2012-05-20net/libtrace: Fix PLIST for DragonFlymarino1-0/+3
2012-05-20net/zeromq: Add DragonFly supportmarino4-1/+55
With one exception, DragonFly can piggyback on FreeBSD.
2012-05-20net/powerdns: Add DragonFly supportmarino5-1/+60
2012-05-20net/bind98: Fix undefined reference to 'main'marino2-1/+15
Bind98 needs the same fix bind99 received on 23 Mar 2012 to fix the linking of driver.so
2012-05-20PR#45780 net/bind99: Fix chroot operationmarino2-3/+11
DNSSEC related, bind99 needs same fix as bind98
2012-05-20PR#45780 net/bind98: Fix chroot operationmarino2-3/+11
Implemented per PR.
2012-05-19net/citrix-ica: Mark NOT-FOR-DRAGONFLYmarino1-1/+4
This Linux package emits "abort trap" forever in the bulk build. It doesn't seem to build on any platform right now, so mask it until at least its working on NetBSD and preferably on DragonFly too.
2012-05-19net/skype1: Mark NOT-FOR-DRAGONFLYmarino1-1/+4
Source unavailable, see policy: <http://leaf.dragonflybsd.org/mailarchive/users/2012-05/msg00066.html>
2012-05-17net/net-snmp: Fix IPv6 option on DragonFlymarino2-23/+37
Another victim of _KERNEL STRUCTURES...
2012-05-17add a patch by Jan Safranek <jsafranek@users.sourceforge.net> for CVE-2012-2141spz3-3/+24
from https://bugzilla.redhat.com/attachment.cgi?id=580443 : Check out-of-index conditions in ExtendOutput2Table.
2012-05-16net/ed2k-gtk-gui: Fix indirect linking on DragonFlymarino1-2/+2
On a previous commit, I added an LDFLAGS entry to address indirect linking. Since then I use LDFLAGS.DragonFly because the LDFLAGS fix wasn't completely welcomed. Now that a second library has to be added to the indirect link fix, I'm moved both to LDFLAGS.DragonFly.
2012-05-16Update "libtorrent" package to version 0.13.2 and "rtorrent" packagetron13-134/+49
to version 0.9.2. A list of changes is not available unfortunately. But it seems that most of the Solaris related build fixes have been integrated.
2012-05-16Avoid a SIGSEGV, when AFPConfigInit() runs into a problem parsinghauke2-1/+17
afpd.conf and returns NULL.
2012-05-16Add a 'debug' option for building the package with debug switches on.hauke1-2/+12
2012-05-15PR#46318 net/wminet: Fix for DragonFlymarino2-13/+17
2012-05-13Update mikutter to 0.1.1.790, first 0.1.1 unstable release.obache3-7/+8
some improvements and bug fixes.
2012-05-13libresolv is needed on Linux.sbd1-1/+2
2012-05-13Update PLIST.Linuxsbd1-2/+2
2012-05-12PR 46072: netatalk broken with netbsd-6 quotasdholland5-69/+192
Add support for the new libquota. Drop support for the proplib libquota; it's not worth the configure-time hassle. Fix some moderately serious bugs in the original/previous libquota patches; it's clear for example they were never tested with group quotas.
2012-05-12Add CONFLICTS with new man-pages package. For details, seewiz2-2/+5
man-pages/Makefile.
2012-05-12Changes 0.2:adam2-6/+6
* bugfix: SRV RR handling: fix domain name parsing and crash in case if no port is specified on input for SRV record query * (trivial api) dns_set_opts() now returns number of unrecognized options instead of always returning 0 * dnsget: combine -f and -o options in dnsget (and stop documenting -f), and report unknown/invalid -o options (and error out) * dnsget: pretty-print SSHFP RRs
2012-05-11Updated rabbitmq to 2.8.2.fhajny3-12/+11
Fixes in 2.8.2: - Performance improvements - Disc space monitoring Fixed in 2.8.1 - Fixes a bug in 2.8.0 which prevented RAM nodes from being upgraded.
2012-05-10fix PLIST for an optionally installed file when picking option snmpspz2-3/+6
2012-05-10Updated net/tacacs-shrubbery to 4.0.4.25schwarz9-121/+39
2012-05-10sortjnemeth1-2/+2
2012-05-08Added dnscheck pkgpettai1-1/+2
2012-05-08DNSCheck is a program that was designed to help people check, measure andpettai6-0/+172
hopefully also understand the workings of the Domain Name System, DNS. When a domain (aka zone) is submitted to DNSCheck it will investigate the domain's general health by traversing the DNS from root (.) to the TLD (Top Level Domain, like .SE) to eventually the nameserver(s) that holds the information about the specified domain (like iis.se). Some other sanity checks, for example measuring host connectivity, validity of IP-addresses and control of DNSSEC signatures will also be performed.
2012-05-08Switch distfile to .xzadam2-5/+6
2012-05-07Update mikutter 0.1.1.780, aka 0.1.1pre1.obache3-10/+16
* implement activity tab (not same as Twitter's one, due to missing API) * allow to settting color for all tweets. * add `twitter client' for extraction filter. * some speed up improvements.
2012-05-07handle sys_nomodule toochristos2-7/+8
2012-05-07Set BUILDLINK_ABI_DEPENDS correctly (with +=, not ?=)dholland20-40/+40
It turns out there were a lot of these.
2012-05-07Fix build with latest glib2.dholland5-1/+66
2012-05-07Remove a piece of pkglint.dholland1-2/+2
2012-05-07Build fix for new glib2.dholland2-1/+27
2012-05-06Remove $NetBSD$ from inside patch to make it more likely this will apply.wiz2-4/+4
2012-05-06pkglint cleanup.wiz2-3/+3
2012-05-06regenchristos1-2/+2
2012-05-06we are not arlachristos1-3/+3
2012-05-06fix obvious mistake.christos1-2/+2
2012-05-06The libsoup24 configure script now wants glib2 2.31.7 or greater,jakllsch1-2/+2
mark dependency as such.
2012-05-06Remove ispman and p5-ispman.wiz15-652/+1
Very outdated packages (last touched in 2006) that have config file handling issues; also, ispman is not destdirized.
2012-05-06Update libVNCServer to 0.9.9.obache4-23/+58
0.9.9 - Overall changes: * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility to our http server. Pure JavaScript, no Java plugin required anymore! (But a recent browser...) * Added a GTK+ VNC viewer example. - LibVNCServer/LibVNCClient: * Added support to build for Google Android. * Complete IPv6 support in both LibVNCServer and LibVNCClient. - LibVNCServer: * Split two event-loop related functions out of the rfbProcessEvents() mechanism. This is required to be able to do proper event loop integration with Qt. Idea was taken from Vino's libvncserver fork. * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded with PNG here. * Added suport for serving VNC sessions through WebSockets (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing bi-directional, full-duplex communications channels over a single TCP connection. * Support connections from the Mac OS X built-in VNC client to LibVNCServer instances running with no password. * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most cases, especially with high-color video or 3D workloads. (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf) - LibVNCClient: * Added support to only listen for reverse connections on a specific IP address. * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded devices where only this TLS implementation is available. * Added support to connect to UltraVNC Single Click servers.
2012-05-05updated download archives since original ftp servser seems to have becomeschwarz3-22/+21
unreachable/unavailable. Now using source archive from old Ubuntu archives instead.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-14 12:35:39 +0000