summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2010-12-13Add quviryoon1-1/+2
2010-12-13Import quvi-0.2.10 as net/quvi.ryoon5-0/+99
The quvi is a command line tool for parsing video download links. It supports Youtube and other similar video websites. libquvi is a library for parsing video download links with C API. It is written in C and intended to be a cross-platform library. You can see the list of supported sites from 'quvi --support'.
2010-12-132.2.19:wiz2-7/+6
2.2.19 Sat Dec 11 2010 Toni Gundogdu Changes: - Set <http://clive.sourceforge.net> as new WWW home - Add man1/clive.1.pod, manify from this from now on - Youtube: Extend format aliases to match quvi IDs - Remove myubo support: dead site - Backup ChangeLog as ChangeLog.pre-gitlog - Generate ChangeLog from gitlog - Rename Evisor.pm to Gaskrank.pm - Rename tests - Remove dangling (and broken) ehrensenf, cctv support - Exclude network tests, can still be found in the repo - gzip release tarball from now on Bugfixes: - Liveleak.pm: token/ID parsing - Youtube.pm: Unknown error (http/404) [#1]
2010-12-12Update to 2.2.18:wiz2-6/+6
2.2.18 Tue Nov 30 2010 legatvs Changes: - Change google test URL - Accept dailymotion swf URLs (related b#3115846)
2010-12-09Added net/pear-Net_IDNA2 version 0.1.0adam1-1/+2
2010-12-09This package helps you to encode and decode punycode strings easily.adam3-0/+20
2010-12-07Fix build on OS X, bump PKGREVISION. Note dhcpcd runs but something inabs3-1/+51
OS X seems to be eating the dhcp server's responses, even with the OS X interface config set to manual.
2010-12-07Add patch from roy@ to enable building on Darwin. Bump PKGREVISIONabs3-2/+105
2010-12-06Added net/samba35 version 3.5.6adam1-1/+2
2010-12-06Samba provides file and print services for Microsoft Windows clients.adam27-0/+1291
These services may be hosted off any TCP/IP-enabled platform. The Samba project includes not only an impressive feature set in file and print serving capabilities, but has been extended to include client functionality, utilities to ease migration to Samba, tools to aid interoperability with Microsoft Windows, and administration tools.
2010-12-06Seems like Darwin also supports ACLsadam1-2/+2
2010-12-06Update to KDE SC 4.5.4markd3-7/+10
4.5.4 brings bugfixes and translation updates
2010-12-04Update ruby-addressable pacakge to 2.2.2.taca3-8/+7
=== Addressable 2.2.2 - fixed issue with percent escaping of '+' character in query strings
2010-12-03add ads, ldap, pam, and winbind to default pkg optionsjmcneill3-4/+6
bump pkg revision
2010-12-02Update to 2.32.2:wiz2-6/+6
Changes in libsoup from 2.32.1 to 2.32.2: * Fixed a regression in 2.32.0 that caused evolution-exchange to get stuck and stop updating. [#634422] * Fixed a regression in 2.32.0 with apps using asynchronous sessions from multiple threads (in particular, gupnp) [#635101] * Fixed the regression test for #631525 to not cause spurious "make check" failures on some machines.
2010-12-02Update bind96 package to bind-9.6.2pl3 (9.6.2-P3).taca2-6/+6
http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories CVE: CVE-2010-3613 CERT: VU#706148 BIND: cache incorrectly allows a ncache entry and a rrsig for the same type CVE: CVE-2010-3614 CERT: VU#837744 BIND: Key algorithm rollover bug in bind9
2010-12-02Update bind97 package to bind-9.7.2pl3 (9.7.2-P3).taca2-6/+6
http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories CVE: CVE-2010-3613 CERT: VU#706148 BIND: cache incorrectly allows a ncache entry and a rrsig for the same type CVE: CVE-2010-3614 CERT: VU#837744 BIND: Key algorithm rollover bug in bind9 CVE: CVE-2010-3615 CERT: VU#510208 BIND: allow-query processed incorrectly
2010-12-01Update to 1.1.2.1. Main motivation is to avoid warnings with perl 5.12.bouyer5-37/+50
Other changes are mainly improvements in backend to support more OS, more OS variants or versions.
2010-11-30We don't actually need c++adam1-2/+2
2010-11-30Added net/knock version 0.5adam1-1/+2
2010-11-30knockd is a port-knock server. It listens to all traffic on an ethernet (or PPP)adam6-0/+353
interface, looking for special "knock" sequences of port-hits. A client makes these port-hits by sending a TCP (or UDP) packet to a port on the server. This port need not be open - since knockd listens at the link-layer level, it sees all traffic even if it's destined for a closed port. When the server detects a specific sequence of port-hits, it runs a command defined in its configuration file. This can be used to open up holes in a firewall for quick access.
2010-11-30Add an patch for OpenSSL without MD2 support.obache2-1/+44
PR#43975.
2010-11-30Changes 2.1.4:adam10-80/+75
* Fix problem with special case route targets ('remote_host') The init_route() function will leave &netlist untouched for get_special_addr() routes ("remote_host" being one of them). netlist is on stack, contains random garbage, and netlist.len will not be 0 - thus, random stack data is copied from netlist.data[] until the route_list is full.
2010-11-29update to 2.20.3drochner3-8/+9
changes: translation updates
2010-11-29update to 0.2.1.27drochner2-7/+6
changes: -fix incompatibility with the recent openssl security fix (CVE-2010-3864) -update ip->geo db -add a directory authority -bugfixes
2010-11-29bump PKGREV for e-d-s updatedrochner1-2/+2
2010-11-29Honor PKG_SYSCONFDIR.ghen1-1/+3
2010-11-29Add and enable modpcapagc1-1/+2
2010-11-29Initial import of modpcap version 0.0.5 into the packages collection.agc5-0/+117
A small C program to modify PCAP files to forge them and use them for test and so on. It allows you to change IP address, Mac address, time of the capture, Mbit/second, Packets/second.
2010-11-29Bump PKGREVISION from evolution-data-server shlib bump.obache1-2/+2
2010-11-27Update to dnsmasq-2.55 with the following changes:roy2-7/+7
* Allow the empty domain "." in dhcp domain-search (119) options. * Fix corruption of the domain when a name from /etc/hosts overrides one supplied by a DHCP client. * Fix regression which caused configuration like --address=/.domain.com/1.2.3.4 to be rejected. * Many new options added and improved.
2010-11-27Update to dhcpcd-5.2.9 with the following changes:roy3-7/+8
* syntax in 50-ypbind hook has been fixed * man page corrections * Compile correctly on Debian kFreeBSD * invoke-rc.d now detected by configure correctly * report hwaddr used by dhcpcd when debug is enabled * Fix detecting inet address for INFORM support * document reason RELEASE in dhcpcd-run-hooks * Support RTM_CHGADDR in the upcoming NetBSD-6 This is used to work out if the hwaddr has changed as the interface does not go down/up unlike other OSes * ntp hook no longer attempts to restart ntpd if 1st attempt failed
2010-11-23Update to 2.2.17:wiz2-6/+6
2.2.17 Sat Nov 06 2010 legatvs Changes: - toUnits: fix hi-speed issue, thanks to Thomas Klausner for the report - Makefile.PL: Use VERSION_FROM - Use 'version' module
2010-11-23Update to 4.1.2:wiz3-8/+9
--- 4.1.2 2010/11/02 Move yaz-config man pages to section 1. More documentation about SOLR. tcp comstack: change behavior for @-specs (anyaddr). @ listens on AF_INET (IPV4) peers, and @6 listens to AF_INET6 (ipv6) peers. Previously @ listened on AF_INET6 which accepted both IPV4 and IPV6 peers on some Linux systems. However, in general that does not work so YAZ can not rely on that to work. Debian changed behavior in this respect from Debian lenny to Debian squeeze (still testing as of Oct 2010). Refer to: http://www.mail-archive.com/debian-devel@lists.debian.org/msg277726.html zoomsh: remove "debugging" output. Was added by mistake in 4.1.0.
2010-11-23Add Debian's "wget" 1.12 backport of the fix for CVE-2010-2252.tron8-2/+178
2010-11-21Update "wireshark" package to version 1.4.2. Changes since version 1.4.1:tron2-7/+6
- The following vulnerabilities have been fixed. See the security advisory for details and a workaround. - Nephi Johnson of BreakingPoint discovered that the LDSS dissector could overflow a buffer. (Bug 5318) Versions affected: 1.2.0 to 1.2.12 and 1.4.0 to 1.4.1. - The ZigBee ZCL dissector could go into an infinite loop. (Bug 5303) Versions affected: 1.4.0 to 1.4.1. - The following bugs have been fixed: - File-Open Display Filter is overwritten by Save-As Filename. (Bug 3894) - Wireshark crashes with "Gtk-ERROR **: Byte index 6 is off the end of the line" if click on last PDU. (Bug 5285) - GTK-ERROR can occur in packets when there are multiple Netbios/SMB headers in a single frame. (Bug 5289) - "Tshark -G values" crashes on Windows. (Bug 5296) - PROFINET I&M0FilterData packet not fully decoded. (Bug 5299) - PROFINET MRP linkup/linkdown decoding incorrect. (Bug 5300) - [lua] Dumper:close() will cause a segfault due later GC of the Dumper. (Bug 5320) - Network Instruments' trace files sometimes cannot be read with an error message of "Observer: bad record: Invalid magic number". (Bug 5330) - IO Graph Time of Day times incorrect for filtered data. (Bug 5340) - Wireshark tools do not detect and read some ERF files correctly. (Bug 5344) - "editcap -h" sends some lines to stderr and others to stdout. (Bug 5353) - IP Timestamp Option: "flag=3" variant (prespecified) not displayed correctly. (Bug 5357) - AgentX PDU Header 'hex field highlighting' incorrectly spans extra bytes. (Bug 5364) - AgentX dissector cannot handle null OID in Open-PDU. (Bug 5368) - Crash with "Gtk-ERROR **: Byte index 6 is off the end of the line". (Bug 5374) - ANCP Portmanagment TLV wrong decoded. (Bug 5388) - Crash during startup because of Python SyntaxError in wspy_libws.py. (Bug 5389) - Updated Protocol Support AgentX, ANCP, DIAMETER, HTTP, IP, LDSS, MIME, NBNS, PROFINET, SIP, TCP, Telnet, ZigBee - New and Updated Capture File Support Endace ERF, Network Instruments Observer.
2010-11-18Include desktopdb.mk. Bump PKGREVISION.wiz1-2/+3
2010-11-18Add patch from PR 43815 to fix build on some Linuces.wiz2-1/+33
2010-11-171.6.7pettai2-6/+6
* EXPERIMENTAL ecdsa implementation, please do not enable on real servers. * GOST code enabled by default (RFC 5933). * bugfix #326: ignore whitespace between directives and their values. * Header comment to advertise ldns_axfr_complete to check for successfully completed zone transfers. * read resolv.conf skips interface labels, e.g. %eth0. * Fix drill verify NSEC3 denials. * Use closesocket() on windows. * Add ldns_get_signing_algorithm_by_name that understand aliases, names changed to RFC names and aliases for compatibility added. * bugfix: don't print final dot if the domain is relative. * bugfix: resolver search continue when packet rcode != NOERROR. * bugfix: resolver push all domains in search directive to list. * bugfix: resolver search by default includes the root domain. * bugfix: tcp read could fail on single octet recv. * bugfix: read of RR in unknown syntax with missing fields. * added ldns_pkt_tsig_sign_next() and ldns_pkt_tsig_verify_next() to sign and verify TSIG RRs on subsequent messages (section 4.4, RFC 2845). * bugfix: signer sigs nsecs with zsks only. * bugfix #333: fix ldns_dname_absolute for name ending with backslash.
2010-11-17* Fixes for dynamic updates and zone transfers.pettai2-6/+6
* Fixes for CERT and TSIG, DNAME and RRSet. * Fixes for RP records. * Some handling of priming responses with no additional section. * Validation disabled for the DNS class
2010-11-17Fix build problem on NetBSD 4.taca9-53/+57
Previous patch for NetBSD wasn't really for netbsd4 but 4.99.58 and later. So, I changed "#ifdef netbsd4" to "#ifdef NETBSD_STATS_VIA_SYSCTL" and clean up patches. Should be fix PR pkg/43288. It is fix of build problem only, so no PKG_REVISION bump.
2010-11-16update to 2.32.1drochner2-6/+6
changes: -bugfixes -Usernames/passwords specified explicitly in request URIs now override existing cached auth info -Added another workaround for stupid servers that close the connection before returning the full response -Added regression tests
2010-11-15PKGREVISION bumps for changes to gtk2, librsvg, libbonobo and libgnomeabs46-88/+92
2010-11-14Shlib major bumped from 3 to 4 at update of ImageMagick-6.6.4.1.obache1-2/+2
Bump ABI_DEPENDS (and recursive bump).
2010-11-13Follow HTTP redirects to new HOMEPAGEs and/or MASTER_SITES.shattered4-8/+8
2010-11-13Bring in change from 6.0.1:bouyer3-3/+236
Removed all occurrences of the "locked" attribute that was deprecated in Perl 5.12.0. I didn't upgrade the package to 6.0.1 because it causes incompatibilities with net/mrtg PKGREVISON++
2010-11-11Fix a tyop.simonb1-1/+1
2010-11-10Changes 0.65.2:adam1-4/+4
This is a bug-fix release.
2010-11-08Updated net/vsftpd to 2.3.2abs8-95/+120
Changes since 2.0.7 - Remove .postlogin.c.swp (thanks Kaibin Li <kbli@fortinet.com>)! - findlibs repairs for libcap; builds on my Ubuntu 6.06 again. - Apply patch to fix "error: assignment of read-only member '__in'" build error on broken systems where the WIFEXITED() etc. macros write to their argument. Thanks Ingo Terpelle <it@exanto.de>. - Replace spaces in xferlog with underscores, report from Michael Wittauer <michael.wittauer@sonydadc.com>. - Reload default config values before re-parsing config file on SIGHUP. This makes the values correct in the case a setting was removed from the file. - Do not issue an FTP response for a blank line on the control channel. Fixes issues with some broken NAT devices. ProFTPd does the same, so hopefully nothing will break. Report from Frank Bulk <fbulk@mypremieronline.com>. - Replace usage of broken _syscall() with syscall(). Fixes build errors for those without libcap-devel installed. - Add implicit SSL support with implicit_ssl option. - Remove arbitrary restriction on one process model + SSL. - Set a session ID on the SSL context. - Add the skeleton of a built-in ptrace sandbox. Not yet useful for anything other than catching compile errors. Yes, I'm crazy :P - Use PR_SET_PDEATHSIG all over the place so that when the listener is killed, existing sessions are booted too. - Use SSL_peek; makes SSL pipelining work. Note that I never found any SSL client that need it, but still a nice code clean-up. - Change ASCII download behaviour so \r\n does not become \r\r\n. This mirrors proftpd behaviour instead of wu-ftpd. Thanks Paul Abel <pabel@fexcodcc.com>. - Switch all sighandlers to the synchronous ones. Prevents us having to block and unblock signals all the time. - Add a "use alarm" option to synchronous signal handlers, to ensure the race condition against a blocking call does not result in a permanent non-delivery. - Use SIGTERM for privileged parent process shutdown, so they can still update u/wtmp properly. - Do RAND_load_file from /dev/urandom in the child context because I don't trust the OpenSSL API vs. fork(). Different children do have different RNG state; this is defense in depth. - More thoroughly close the remote ends of the priv_sock, ensuring that child death results in no blocking in the parent. This is a matter of tidyness; the SIGCHLD handler will reliably tear down the parent. - Do the same for the SSL slave / consumer channels. - Fix OpenBSD build. - Move SSL data handling into the SSL slave process. Incurs some extra overhead in terms of context switches and copies, but it enables this next item: - By default, require SSL data connections to exhibit SSL session re-use of the control channel. Unlike the cert thing, this _is_ something we can turn on by default as most clients seem to do reuse. Yay. - Change 522 response for SSL connection fail to note when session reuse is required. (v2.1.0pre1 here) - More work on the inbuilt ptrace()-sandbox support. - Clear the idle alarm when starting data transfer if there is no data alarm. - Fix syslog format; don't embed 2nd copy of date, pid. Thanks to Ren - Lock file before truncating it for upload. Fixes various simultaneous upload corruption issues. - Make sure to give 426 error code on uploads if ABOR was received. - Add cmds_denied option to complement cmds_allowed. - Ignore lines in config file containing only white space. - Require write_enable / anon_upload_enable / etc. to process STOU. - FC10 patch (vsftpd-1.0.1-missingok.patch): tweak to logrotate file. - FC10 patch (vsftpd-1.2.1-nonrootconf.patch): bail if the config file is not owned by the currently running user. - FC10 patch (vsftpd-2.0.1-tcp_wrappers.patch): explicitly call openlog() to avoid syslog() bug where some settings are not initialized. - FC10 patch (vsftpd-2.0.3-daemonize_fds.patch): when backgrounding, replace fd 0,1,2 with /dev/null fd. - FC10 patch (vsftpd-2.0.5-correct_comments.patch): comment tweaks in the sample config file. - FC10 patch (vsftpd-2.0.5-fix_unique.patch): use the default filename given by STOU if it is available. - FC10 patch (vsftpd-2.0.5-pam_end.patch): call pam_end() properly so modules can act on errors if they want. - FC10 patch (vsftpd-2.0.5-pasv_dot.patch): Strict RFC compliance for PASV command; add a trailing period. - FC10 patch (vsftpd-2.0.5-uname_size.patch): allow longer usernames. It's not 1990 any more, so trust PAM etc. to not stack-buffer-overflow. - FC10 patch (vsftpd-2.0.5-underscore_uname.patch): permit username to start with underscore or period. - FC10 patch (vsftpd-2.0.6-listen.patch): default listen to YES. - Fix crash on SIGHUP introduced in 2.1.0pre1. Oops. - FC10 patch (vsftpd-2.0.5-bind_denied.patch): retry PASV bind() on EACCES too, which can happen on SELinux systems. - Default resource limit for child processes: 100MB address space. - Finishing touches to the initial sandbox policy; only permit connect() to the host on the control channel being the nicest touch. (v2.1.0pre2 here) - Fix 64-bit build (oops)! Thanks Martin Nagy <mnagy@redhat.com>. - Fix config of SSL built in; not enabled; two process model. Report from Martin. - Shutdown the command connection in the priv parent's SIGTERM handler; kills of children where the PR_SET_PDEATHSIG cannot due to different user ids. (v2.1.0pre3 here) - Fix build on FC10. - Some FAQ tweaks. - Permit fcntl(F_GETFD) in sandbox policy. Needed for FC10. Not sure where it comes from but it is harmless. (My guess would be glibc-2.9's new support for using O_CLOEXEC more). - Fix build warning on 64-bit. - Fix build on OpenBSD again. (v2.1.0pre4 here) - Bring userlist_deny handling inside the max_login_fail accounting. At this point: v2.1.0 released! =============================== - Apply Tavis' RLIMIT_NOFILE trick in the twoprocess model's initial unprivileged child. - Fix build error due to __NR_utimes. - Ugh. Can't use RLIMIT_NOFILE in the SSL case because the process later receives data transfer fd's via recvmsg(). It's a total shame because doing the SSL handshake under even lower privs would be a real boost. (v2.1.1pre1 here) - Fix some declarations occuring in the middle of a block; broke older more strict compilers. - Handle the case where libcap is now libcap.so.2; fixes build on my new Ubuntu 9.04. - Enhance 522 error message to point to require_ssl_reuse option. - Fix NASTY regression whereby data transfer timeouts would fire incorrectly under SSL transfers. In addition, the transfer rate caps were not working under SSL transfers. Reported by several people. - Use the login delay machinery for userlist-based denials too. Thanks to Tomas Hoger <thoger@redhat.com> for the patch. - Fix another tedious regression whereby absent per-user config files were causing a session fail rather than being gracefully ignored. - Use the somewhat new CLONE_NEWPID / CLONE_NEWIPC to provide more isolation in the vsftpd low-priv processes (CLONE_NEWNET pending). - Use RLIMIT_NPROC to disallow fork()ing etc. in processes that do not need to create new ones. - Add "isolate" config flag to disable the new weird clone() flags if necessary. At this point: v2.1.1 released! =============================== - Fix compile error in sysdeputil.c on some Linux systems. At this point: v2.1.2 released! =============================== - Fix compile on systems with no RLIMIT_NPROC, oops. - Change some unsigned int to socklen_t's to avoid warnings on various platforms, e.g. AIX. - Add some syscall constants to ptracesandbox.c to fix the build on systems with 2.4 kernel headers. - Look for libs in /lib64 and /usr/lib64 too (Fixes Fedora 11 x86_64 compile). - Fix EACCES mapping, thanks Solar Designer <solar@openwall.com>. - Dont emit a bogus "OOPS: " message upon a QUIT, report from Solar Designer <solar@openwall.com>. - Tweak example vsftpd.conf to add commented out chroot_local_user=YES, from Ivan I. Grushin <mcgru@intrice.ru>. - Where available, use CLONE_NEWNET to isolate the untrusted processes so that they can't do arbitrary connect() and instead have to ask the privileged process for sockets. Moderate code disturbance - hope for no breakage :-/ - Disable implicit activation of one_process_model so that an anonymous setup can benefit from the no-network isolation of the unprivileged process (where available). (vsftpd-2.2.0pre1) - Call pam_get_item(PAM_USER) after authentication in case a PAM module remapped the username. Based on a patch from John McNair <john.mcnair@ihg.com>. - Apply a couple of IPv6 fixes from Corinna Schultz <corinna.schultz@gmail.com>, particularly when MS operating systems are talking on link local addresses. - Handle the error case for accepting a PASV connection in the two process model properly. - Pull in a couple of minor tidyup patches from Openwall. - Add "-o" command line option to specify option, e.g. vsftpd -olisten=NO. Also respect ordering with respect config files, e.g. vsftpd -olisten=NO /etc/vsftpd.conf -olocal_enable=NO Inspiration from Solar / Openwall. (vsftpd-2.2.0pre2) - Revert listen to be "NO" by default and also set max_per_ip / max_clients to 2000 / 50 as a default. Thanks to Solar. - Sanity check for admin: check config files are regular files. - Error out if opening the per-user config file gives an error other than ENOENT. Thanks Solar (who is on fire today ;-) (vsftpd-2.2.0pre3) - Apply some typo fixes from Solar. - Error out on read() errors when reading config files. (vsftpd-2.2.0pre4) - Add tunable_isolate_network to parseconf.c, thanks Stefan Pfetzing <dreamind@dreamind.de>. - Don't try and use CLONE_NEWPID etc. if we get EPERM -- may happen even to root if using linux-vserver. Also thanks to Stefan Pfetzing <dreamind@dreamind.de>. - Couple of typo tweaks from Cristi Terpea <cristi.terpea@fortech.ro>. - Change // style comments to /* style. - Fix pointer aliasing issue in new PAM_USER item support, thanks to Solar. At this point: v2.2.0 released! =============================== - Apply patch to set SSL context timeout to maximum, from Tim Kosse <tim.kosse@filezilla-project.org>. Should prevent data connection failures after a long transfer or idle period. - Apply async-safety signal tweaks from Solar. - Fix crash regression with the pasv_address option enabled. - Typo fix and look for libnsl in /lib64, from Robby Workman <rworkman@slackware.com>. - When asking the client to send us a cert, make sure we broadcast some suitable certificates. Fixes compatibility with the z/OS FTP client when tunable_ssl_request_cert=YES. - Rip out the silly "cached time" concept. Simplifies things and fixes incorrect transfer time bug reported by Rajeev V. Pillai. Explicitly pass around the cached current time in seconds in the one place that needs to avoid repeated gettimeofday() calls (directory listing). - Do the login fail delay in the parent process for cases where we checked a username / password. At this point: v2.2.1 released! =============================== - Change "File receive OK." to "Transfer complete." to placate some broken clients. Thanks Holger Kiehl <Holger.Kiehl@dwd.de>. - Fix erroneous "child died" upon FTP client connect, when under load. Awesome thanks to Holger Kiehl <Holger.Kiehl@dwd.de> for running diagnostic tests on his live server. - Boot the session if an overly long line is encountered. (vsftpd-2.2.2pre1) At this point: v2.2.2 released! =============================== - Add extremely simply HTTP support. It's very experimental, ignorant of HTTP protocol and headers, and likely has all sorts of other issues. The use case it might satisfy is if you need to serve simple static unathenticated content with large levels of paranoia. - Fix port_promiscuous breakage. Report from Soeren <soeren84@fastmail.net>. (v2.3.0pre1) - Minor FAQ update. - Use a larger address space limit if using text_userdb_names=YES - Always use CLONE_NEWNET if possible when in HTTP mode. - Change REST + STOR so that it's possible to overwrite part of file without truncating it. (v2.3.0pre2) - Boot the session if we see a USER where encryption was required. May prevent the transmission of plaintext passwords by buggy clients. Idea from Marcin Hlybin <marcin@rootnode.net>. - Fix failure to transmit a large ASCII file over SSL, if it contains \n -> \r\n fixups. At this point: v2.3.0 released! =============================== - Fix silly regression re: log files being overwritten from the start. - Rename a few file-open functions to make it clearer what they do. At this point: v2.3.1 released! =============================== - Argh! Fix version number. At this point: v2.3.2 released! ===============================
2010-11-07Update proftpd to 1.3.3c.obache8-82/+40
pksrc changes: * Instead of patch&subst to change layout of statedir, pass it to configure instead (and subst for manpages are fixed). * Convert custom mod_wrap library modification to SUBST. * Need to buildlink with security/tcp_wappers for mod_wrap. NEWS: 1.3.3c - Released 29-Oct-2010 -------------------------------- - Bug 3511 - SQLAuthType Backend not properly rejected by mod_sql_sqlite. - Bug 3513 - EPERM error logged unnecessarily for SFTP logins on Linux. - Bug 3517 - mod_quotatab decrements file tally improperly for failed DELE commands. - Bug 3518 - Support SiteMiscEngine directive, for disabling mod_site_misc functionality via proftpd.conf. - Bug 3519 - Inappropriate directory traversal allowed by mod_site_misc. - Bug 3521 - Telnet IAC processing stack overflow. 1.3.3b - Released 09-Sep-2010 -------------------------------- - Bug 3481 - Problem with SFTP directory listings. - Bug 3483 - NULL pointer dereference handling SITE command in mod_quotatab. - Bug 3485 - Disabling IPv6 via -4 or --ipv4 command-line options does not work. - Bug 3487 - Null pointer dereference with EPRT/EPSV/PASV/PORT command during data transfer. - Bug 3482 - ProFTPD corrupts utmpx log files on FreeBSD 9.0/HEAD. - Bug 3491 - Directory pattern not matching as expected. - Bug 3492 - Null pointer dereference during data transfer due to RNFR/RNTO. - Bug 3494 - Null pointer dereference for IPv6-enabled proftpd when no DefaultServer configured. - Bug 3501 - <Anonymous> logins with "AuthAliasOnly on" still handled as anonymous logins. 1.3.3a - Released 01-Jul-2010 -------------------------------- - Bug 3400 - Add Japanese translation. - Bug 3401 - mod_sftp does not compile with pre-0.9.7 OpenSSL. - Bug 3402 - mod_tls does not compile with pre-0.9.7 OpenSSL due to Bug#3349. - Bug 3403 - File upload followed by MLSD leads to wrong file size entries in TransferLog. - Bug 3405 - Multiple SFTPAuthorizedUserKeys stores causes segfault on 64-bit platforms. - Bug 3354 - Renaming a file across mount points to a full disk does not fail as expected. - Bug 3408 - Use <termios.h> instead of <sys/termios.h> where possible. - Bug 3412 - Include files not included after restart due to permissions. - Bug 3409 - Build failure on newer FreeBSD due to utmp/utmpx system changes. - Bug 3417 - Unsafe use of pointer when scanning config for ScoreboardFile. - Bug 3418 - %U sometimes showing up as "(none)" in ExtendedLog. - Bug 3421 - RewriteHome does not work properly for SFTP connections. - Bug 3419 - SSL_shutdown() errors with openssl-0.9.8m. - Bug 3423 - Last line of multiline DisplayLogin file improperly handled. - Bug 3426 - mod_sftp does not log to TransferLog by default. - Bug 3425 - Improperly constructed destination paths for SCP uploads. - Bug 3427 - mod_sftp does not handle recursive SCP uploads properly. - Bug 3432 - ExecBeforeCommand does not interpolate the %F/%f variables properly. - Bug 3434 - TraceLog contains messages even with "Trace DEFAULT:0" configured. - Bug 3435 - Encoding/decoding conversion can cause CPU spike. - Bug 3436 - Support build-time option to disable use of nonblocking open of log files. Use --disable-nonblocking-log-open to get the pre-1.3.3 behavior of opening log files. - Bug 3437 - UseImplicitSSL TLSOption causes PBSZ/PROT commands to fail. - Bug 3439 - Encoding fails if an NLS-enabled proftpd starts in a UTF8 locale. - Bug 3446 - .ftpaccess ignored in some cases. - Bug 3447 - mod_sftp can become confused during large recursive SCP uploads. - Bug 3448 - Ensure that STAT/LSTAT/FSTAT SFTP requests do not use cached/stale data. - Bug 3449 - mod_sftp does not properly handle the O_TRUNC flag in a SFTP OPEN request. - Bug 3450 - mod_sftp does not properly handle the O_APPEND flag in a SFTP OPEN request. - Bug 3451 - WinSCP can't upload files using protocol version 5 with mod_sftp. - Bug 3452 - mod_sftp does not advertise its supported SFTP extensions for protocol version 5. - Bug 3454 - msgfmt(1) options used for generating NLS files are not compatible with Solaris' msgfmt. - Bug 3456 - Problem attempting to recursively download a directory via SCP. - Bug 3458 - mod_sftp incorrectly performs OpenSSL cleanup. - Bug 3459 - mod_radius segfaults during incorrect login due to stale data. - Bug 3460 - REALPATH SFTP request can cause improperly cached directory configuration. - Bug 3462 - ftpasswd script's --delete-user option does not work. - Bug 3463 - ftpasswd script's --delete-group option does not work. - Bug 3465 - SIGSEGV at LIST after CCC. - Bug 3470 - Deferred resolution <Directory> paths not handled properly by mod_sftp. - Bug 3469 - ExtendedLog's %f variable not properly expanded for DELE if path begins with tilde ('~'). - Bug 3467 - mod_ifsession does not merge <Directory> blocks properly. - Bug 3471 - Null values in allow/deny rules causes mod_wrap2 to segfault. - Bug 3472 - mod_sftp publickey authentication fails for large keys. - Bug 3424 - Bad LDAP lookup can cause mod_ldap segfault under some conditions. - Bug 3476 - LIST/NLST of path starting with "-" fails. - Bug 3475 - Add new 'noGetgrouplist' AuthUnixOption to work around buggy libc code. - Bug 3474 - Using SQLite database and SQLLog directive can lead to problems under load.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-04 09:56:58 +0000