summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2019-06-12glib-networking: Update to 2.60.3leot5-17/+46
pkgsrc changes: - Add options.mk in order to be able to select between `gnutls' and `openssl'. However, no defaults are changed: `openssl' is considered experimental by upstream at the moment. - Remove dependency to mozilla-rootcerts (default gnutls/openssl certificates are now honored instead, should be part of Makefile,-r1.41 commit, sorry!) Changes: 2.60.3 ====== - Fix clobbering of the thread-default main context after certificate verification failure during async handshakes since 2.60.1 (#85) - Fix GTlsDatabase initialization failures in OpenSSL backend due to uninitialized memory use - Fix minor leak of ALPN protocols 2.60.2 ====== - OpenSSL backend now defaults to system trust store (#62) - Fix client auth failure error with GnuTLS 3.6.7 (#70)
2019-06-12unbound: bump PKGREVISION for previouswiz1-1/+2
a new file is installed -> PLIST change -> bump
2019-06-12fixes PR pkg/54126pettai2-2/+4
2019-06-12filezilla: build fix for 32-bit x86gutteridge1-1/+6
As of version 3.41, Filezilla now requires 64-bit atomic integer ops, handle accordingly. (XXX: Filezilla will presumably also break on other architectures as a result, e.g. macppc.)
2019-06-11glib-networking: remove no longer valid MESON_ARGS and REPLACE_PYTHONleot1-3/+1
There is no longer a way to provide a custom cacert.pem: glib-networking now picks up the default-trust-store-file gnutls ones.
2019-06-11glib-networking: update to 2.60.1.wiz2-8/+7
2.60.1 - April 1, 2019 ====================== - Improve reliability of client auth failure tests (#66) - Fix excessive CPU usage after sync handshake (#69) 2.60.0.1 - March 12, 2019 ========================= - Fix build with OpenSSL pkg-config unavailable (Nirbheek Chauhan) 2.60.0 - March 11, 2019 ======================= This is the first stable release featuring the new OpenSSL backend. Please be advised that this new backend is still experimental and known to not work on some systems, including Debian. Linux distributions are encouraged to stick to the default build options, where OpenSSL is not yet enabled. - Fix build with GnuTLS disabled (Nirbheek Chauhan) - Fix build on Windows (Chun-Wei Fan) 2.59.92 - March 4, 2019 ======================= - Many OpenSSL backend fixes for Windows (Nirbheek Chauhan) - GnuTLS: reject sync operations during handshake to avoid deadlocks (#46) - Temporarily disable DTLS and OpenSSL tests due to #49 and #54 2.59.91 - February 18, 2019 =========================== - Update OpenSSL SSL struct when certificate is changed (#55, Fredrik Ternerot) - Fix tests build when GnuTLS is disabled (#59) - Remove Fedora-specific PROFILE=SYSTEM default cipher list (#61) - Fix some problems with the connection tests (Fredrik Ternerot) 2.59.90 - February 4, 2019 ========================== This release adds an OpenSSL backend, obsoleting the glib-openssl project. Credit to all the contributors to the glib-openssl project, especially Ignacio Casal Quinteiro. Also thanks to Xavier Claessens for helping with the transition. The OpenSSL backend seems to be mature, though it is less well-tested for desktop usage than the GnuTLS backend. It will remain disabled by default at build time due to the GPL-incompatible nature of the OpenSSL license -- and the GPLv2-incompatible nature of the Apache license that will be used by future versions of OpenSSL -- and because the GnuTLS backend is sufficient for Linux distros. Use the OpenSSL backend if you are building an embedded system where (GPLv2+ or LGPLv3+) dependencies are unacceptable (e.g. nettle or GMP, both dependencies of GnuTLS) and you are OK with the GPL-incompatible OpenSSL license. If the OpenSSL backend is enabled at build time, you should probably disable build of the GnuTLS backend, or it will take precedence over the OpenSSL backend at runtime. For example, you could configure with: $ mkdir build && cd build $ meson -Dgnutls=disabled -Dopenssl=enabled .. 2.59.2 - January 7, 2019 ======================== - Add support for application layer protocol negotiation (#47, Scott Hutton) 2.59.1 - November 11, 2018 ========================== This release removes the gnutls-pkcs11 backend, which was disabled in 2.57.2, due to lack of any feedback whatsoever regarding its disablement. If you think it is still useful to you, given that the normal gnutls backend now supports PKCS#11, speak up now. This release also includes several changes to properly support TLS 1.3. Other changes: - Perform certificate verification during, not after, TLS handshake - Dramatically improve the reliability of the non-DTLS tests. (DTLS is still having problems.) - Regenerate test certificates to prepare for OpenSSL support - Several meson build system improvements to prepare for OpenSSL support 2.58.0 - September 2, 2018 ========================== - Updated translations 2.57.92 - August 27, 2018 ========================= - Revert fixes for #4 and #6 due to regression (#43) - Fix installed tests (Sébastien Bacher, !7) 2.57.90 - August 12, 2018 ========================= - Properly check for server errors in connection tests (#4) - Perform certificate verification during, not after, TLS handshake (#6) - Avoid trailing dots in SNI hostnames (#11) - Send fallback SCSV with fallback connection attempts - Fail unsafe rehandshake attempts initiated by API request 2.57.3 - July 16, 2018 ====================== - Fix memory leaks when calling g_tls_connection_gnutls_get_certificate() - Use .so for modules on macOS instead of dylib (Nirbheek Chauhan) - Fix build with MSVCC (Nirbheek Chauhan) 2.57.2 - May 21, 2018 ===================== This release disables build of the gnutls-pkcs11 backend by default. Please direct any complaints to https://gitlab.gnome.org/GNOME/glib-networking/issues/7 - Several meson build system improvements (#794978, #795043, and #795982, Xavier Claessens and Nirbheek Chauhan) 2.57.1 - April 16, 2018 ======================= - Use GnuTLS system trust and remove build option to specify cert bundle (#753260) - Fix criticals when child streams outlast the parent GTlsConnection (#792219) - Fix crash when setting client cert without private key (#793712) - Update tests for compatibility with GnuTLS 3.6.2 (#794286) - Never install GIO modules outside build prefix (#794358) - Don't install test files if installed tests are disabled (#794372) - Fix build with -Dpkcs11=false (#794292, Tom Schoonjans) - Allow building as meson subproject (#794709, Mathieu Duponchelle) - g_tls_certificate_verify() no longer manually verifies certificate activation/expiration time, matching the current behavior of g_tls_database_verify_chain().
2019-06-10py-prometheus_client: updated to 0.7.0adam2-7/+7
0.7.0: [ENHANCEMENT] Multiprocess exposition speed boost [ENHANCEMENT] optimize openmetrics text parsing (~4x perf) [ENHANCEMENT] Add python3.7 support [ENHANCEMENT] Change exemplar length limit to be only for label names+values [BUGFIX] Disable gcCollector for pypy
2019-06-09youtube-dl: Update to 20190608leot3-17/+8
Changes: 2019.06.08 ---------- Core * [downloader/common] Improve rate limit (#21301) * [utils] Improve strip_or_none * [extractor/common] Strip src attribute for HTML5 entries code (#18485, #21169) Extractors * [ted] Fix playlist extraction (#20844, #21032) * [vlive:playlist] Fix video extraction when no playlist is found (#20590) + [vlive] Add CH+ support (#16887, #21209) + [openload] Add support for oload.website (#21329) + [tvnow] Extract HD formats (#21201) + [redbulltv] Add support for rrn:content URLs (#21297) * [youtube] Fix average rating extraction (#21304) + [bitchute] Extract HTML5 formats (#21306) * [cbsnews] Fix extraction (#9659, #15397) * [vvvvid] Relax URL regular expression (#21299) + [prosiebensat1] Add support for new API (#21272) + [vrv] Extract adaptive_hls formats (#21243) * [viki] Switch to HTTPS (#21001) * [LiveLeak] Check if the original videos exist (#21206, #21208) * [rtp] Fix extraction (#15099) * [youtube] Improve DRM protected videos detection (#1774) + [srgssrplay] Add support for popupvideoplayer URLs (#21155) + [24video] Add support for porno.24video.net (#21194) + [24video] Add support for 24video.site (#21193) - [pornflip] Remove extractor - [criterion] Remove extractor (#21195) * [pornhub] Use HTTPS (#21061) * [bitchute] Fix uploader extraction (#21076) * [streamcloud] Reduce waiting time to 6 seconds (#21092) - [novamov] Remove extractors (#21077) + [openload] Add support for oload.press (#21135) * [vivo] Fix extraction (#18906, #19217)
2019-06-09py-rt: Backport upstream patch to fix search() Format='s' and Format='i'leot3-2/+33
At least on RT 4 blank lines can be present at the end of the search response, backport upstream commit bb07009c4f62dd2ac393aab82fded6424eead82f to address that. Bump PKGREVISION
2019-06-09ncdc: update to 1.22.1.wiz2-8/+7
1.22.1 - 2019-06-03 - Fix segfault with ADC client connections 1.22 - 2019-04-30 - Add 'b' and 'B' keys to connections tab (Daniel Kamil Kozar) - Add 'max_ul_per_user' setting to support multiple upload slots per user (Daniel Kamil Kozar) - Add support for TLS ALPN (Denys Smirnov) - Fix build against ncurses with separate libtinfo (Lars Wendler)
2019-06-07dnscrypt-proxy2: Update to 2.0.25nia2-8/+7
* Version 2.0.25 - The example IP address for network probes didn't work on Windows. The example configuration file has been updated and the fallback resolver IP is now used when no netprobe address has been configured. * Version 2.0.24 - The query log now includes the time it took to complete the transaction, the name of the resolver that sent the response and if the response was served from the cache. Thanks to Ferdinand Holzer for his help! - The list of resolvers, sorted by latency, is now printed after all the resolvers have been probed. - The "fastest" load-balancing strategy has been renamed to "first". - On Windows, a nul byte is sent to the netprobe address. This is required to check for connectivity on this platform. Thanks to Mathias Berchtold. - The Malwaredomainlist URL was updated to directly parse the host list. Thanks to Encrypted.Town. - The Python script to generate lists of blacklisted domains is now compatible both with Python 2 and Python 3. Thanks to Simon R. - A warning is now displayed for DoH is requested but the server doesn't speak HTTP/2. - A crash with loaded-balanced sets of cloaked names was fixed. Thanks to @inkblotadmirer for the report. - Resolvers are now tried in random order to avoid favoring the first ones at startup.
2019-06-07net/unifi: Update to 5.10.24gdt2-7/+7
Note that mongodb does not build, and hence this was tested with mongodb 3.4.4. This is a minor update, from .23. Upstream does not apear to publish change information, and this is opaque proprietary software.
2019-06-06py-lexicon: updated to 3.2.6adam3-9/+15
3.2.6: Added provider specific dependency to setup.py Futher pylint and python3 import Pylint Add gratisdns provider 3.2.5: Update appveyor.yml Update test_route53.py Update CONTRIBUTING.md Fix configuration of route53 tests Update test running instructions to include top-level directory Fix line too long Use the logger.warning instead of the logger.warn shortcut Skip dnsimple accounts without a plan
2019-06-05pkglint fallout; no code changes intended.hauke1-3/+3
2019-06-05Remove netatalk 3.0.8, as discussed a while ago on tech-pkg.hauke24-929/+1
The branch has long been unmaintained upstream (we kept it longer because early 3.1.x had serious teething problems), and has security issues.
2019-06-04syncthing: update to 1.1.4triaxx2-8/+7
upstream changes: ----------------- Bugfixes #4613: Progress emitter doesn't start from config change if disabled at startup #5338: Version restore not possible with custom versioning path set #5421: WebGui: Locally Changed Items vanish when clicking 10|25|50 #5578: Filesystem watcher error when watching disk root directory on Windows #5641: Syncthing gets stuck in a high CPU "Failed Files" state - Possibly a symlink issue? #5649: Checking block content on unexpected request results doesn't work for the last block #5654: Incorrect file info passed as argument to delete existing dir/symlink #5704: Failure to fsync() files should not be fatal Enhancements #1634: Use copy instead of rename for version folder on other file systems #4531: GUI folder/device status rows should handle longer values nicer #4586: Versioner file tagging is inconsistent #4631: In-GUI restoration should be possible from trashcan versioner #5419: File versioning across drives #5659: Old sync errors should not linger while retrying Other issues #5505: Leaking goroutines through model and leveldb #5706: Spurious test failures on Windows
2019-06-04Updated net/synergy to 1.10.2abs2-7/+7
v1.10.2-stable ============== Bug fixes: - #6495 Event queue memory leak in server cleanup - #6471 Unable to stop core retry loop in config app - #6460 TLS memory leak on Linux server when using client - #6407 Enterprise config app shows auto-config elements - #6403 Mouse cursor movement drifts over time - #6392 Hostname alert shows unnecessarily on every open - #6373 Compile fails on BSD Unix with dl error Enhancements: - #6485 Readme for master branch with download help - #6475 Change master branch to current version - #6470 CI solution with on-demand containers - #6397 Remember last server used in Auto Config - #6375 Support for Qt 5.11 framework on Windows
2019-06-02Update for new openssl API.rjs5-3/+214
Should fix PR pkg/53407.
2019-06-02freeDiameter: update to 1.3.2.wiz3-11/+11
1.3.2 This new version adds better compilation compatibility with a wider range of system versions and improvements to the whitelist extension (acl_wl). Note: 1.3.1 was exactly the same as 1.3.0 but fixes a version number problem only...
2019-06-01gallery-dl: Update to 1.8.5leot3-8/+14
Changes: 1.8.5 ----- ### Additions - Support for - `keenspot` (#223) - `sankakucomplex` (#258) - `folders` option for `deviantart` to add a list of containing folders to each file's metadata (#276) - `captcha` option for `kissmanga` and `readcomiconline` to control CAPTCHA handling (#279) - `filename` metadata for files downloaded with youtube-dl (#291) ### Changes - Adjust `wallhaven` extractors to new page layout: - use API and add `api-key` option - removed traditional login support - Provide original filenames for `patreon` downloads (#268) - Use e-hentai.org or exhentai.org depending on input URL (#278) ### Fixes - Fix pagination over `sankaku` popular listings (#265) - Fix folder and collection extraction on `deviantart` (#271) - Detect "AreYouHuman" redirects on `readcomiconline` (#279) - Miscellaneous fixes for `hentainexus`, `livedoor`, `ngomik`
2019-05-31net: Add rt4-clileot1-1/+2
2019-05-31rt4-cli: Import rt4-cli-4.4.4 as net/rt4-clileot4-0/+44
rt allows you to interact with an RT server over HTTP, and offers an interface to RT's functionality that is better-suited to automation and integration with other tools.
2019-05-31grpc: updated to 1.21.2adam3-30/+8
Release v1.21.2 This is the 1.21.2 patch release for the PHP extension only. Please do not use this release for other language. PkgSrc: Fix linking with c-ares.
2019-05-31libcares: comment patchadam2-3/+5
2019-05-31libcares: switch to CMake - needed for grpc; bump revisionadam8-106/+29
2019-05-29Reset revision after gstreamer1 updateadam2-5/+2
2019-05-29py-pypiserver: added version 1.3.0adam7-1/+94
pypiserver is a minimal PyPI compatible server for pip or easy_install. It is based on bottle and serves packages from regular directories. Wheels, bdists, eggs and accompanying PGP-signatures can be uploaded either with pip, setuptools, twine, pypi-uploader, or simply copied with scp.
2019-05-28*: Remove per-package MESSAGE.{rcd,smf} handling.jperkin2-12/+2
This is now centralised in mk/pkgformat so no need to do it manually.
2019-05-28freeDiameter: update to 1.3.0.wiz4-28/+19
freediameter (1.3.0) Many thanks to Thomas Klausner for his contribution of several important extensions. freediameter (1.2.1) UNRELEASED; urgency=low * New extension: rt_randomize (load-balancing on possible destinations) * New contrib: Gx extension. * rt_redirect.fdx and rt_load_balance.fdx improvement: use a hash table. Thanks Thomas. * New hook HOOK_MESSAGE_SENDING to give a last chance to edit messages before they are sent. This will be mostly used for enforcing interoperability constraints on non-compliant peers. * Simplified log output. Old output can be recovered with DEBUG_WITH_META build option. * Updated the internal counters for finer control on the load. * Fixes in message expiry mechanism. * Bug fixes in error messages generation and various parts. * Improvements on shutdown sequence handling. * Improvements to the dict_dcca_* extensions. * Improved default CMake configuration. * Improved build for MacOSX * Fixes for a few newer operating systems compatibility. * Fixed default secure Diameter port number 5868 instead of5658 (errata of RFC 6733) -- Sebastien Decugis <sdecugis@freediameter.net> Sat, 30 Jan 2016 23:38:03 +0800
2019-05-27py-Socks: updated to 1.7.0adam2-7/+7
1.7.0: Bump version
2019-05-27Revbump all Go packages after go112 update.bsiegert13-24/+26
2019-05-27py-grpcio-tools: updated to 1.21.1adam2-7/+7
Sync with py-grpcio
2019-05-26py-grpcio: updated to 1.21.1adam3-8/+11
Release v1.21.1 This is the 1.21.1 patch release of gRPC Core. This patch is for gRPC-Python only. gRPC Python pkgs for 1.21.0 release could not be uploaded to PyPi due to the issue 19105.
2019-05-26grpc: updated to 1.21.1adam2-7/+7
Release v1.21.1 This is the 1.21.1 patch release of gRPC Core. This patch is for gRPC-Python only. gRPC Python pkgs for 1.21.0 release could not be uploaded to PyPi.
2019-05-26wget: Fix https:// handling with OpenSSL 1.1.1leot3-2/+51
Backport upstream commit 14e3712b8c39165219fa227bd11f6feae7b09a33 to fix https:// handling when openssl.cnf file is not found. PKGREVISION++
2019-05-26tightvncviewer: Add LICENSEleot1-1/+2
2019-05-26Set USE_GCC_RUNTIME=yes so building with pkgsrc gcc picks up gcc runtimeabs1-1/+2
2019-05-26ncdc: downgrade to 1.21 because of a segfault bugwiz2-7/+8
See https://code.blicky.net/yorhel/ncdc/issues/96
2019-05-25mikutter: update to 3.8.8.tsutsui4-11/+37
pkgsrc changes: - pull upstream patch for ticket #1323 (insert newline to each attached image URL) Upstream changelog: mikutter 3.8.8 * <>& in Twitter messages are not converted from HTML entity references * thanks cob odo * keep world account settings even if restoring account fails on loading the world * pluggaloid 1.1.2
2019-05-25filezilla: fix libfilezilla dependency patternwiz1-2/+2
2019-05-25filezilla: update to 3.42.1.wiz3-8/+21
3.42.1 (2019-06-08) - OS X: Fix a compatibility issue with macOS 10.13 3.42.0 (2019-05-02) - Fixed a potential crash if the first-launch welcome dialog is shown at an inopportune moment - Fixed display of subject and issuer details in the certificate verification dialogs with some certificates - Official binaries are now built againt GnuTLS 3.6.7, minimum required GnuTLS version to build FileZilla is now 3.5.7 3.42.0-rc1 (2019-04-26) - Switching from using a master password to not saving passwords at all no longer requires entering the master password - *nix: Fixed support for internationalized domain names on systems having AI_IDN when using SFTP - Fixed an assertion after importing a manipulated queue file - When importing sites, any imported passwords are now immediately protected/deleted depending on the password protection settings - The ability to import Site Manager entries from antique FileZilla 2, last updated over a dozen years ago, has been removed 3.42.0-beta1 (2019-04-21) - Building and running FileZilla now depends on libfilezilla >= 0.16.0 (https://lib.filezilla-project.org/) - Limit the maximum length of site, bookmark and filter names to prevent display issues and crashes due to some operating systems badly handling long texts - When displaying message boxes, insert zero-width spaces into long unbroken words to prevent display issues and crashes due to some operating systems badly handling long texts - Fix crash in the external IP address resolver - Fix some assertions if a server sends bad file sizes - Large refactoring of the socket code - The thread pool from libfilezilla is now used for all worker threads
2019-05-24syncthing: Update to 1.1.3. Add an rc.subr script.nia3-13/+69
ok gdt Bugfixes #5332: Duplicate Files Names in Out of Sync List #5456: Folder marked as "Up to Date" with failed items #5578: Filesystem Watcher Error on v1.1.0 #5624: Simple Syncthing invocations take a long time to run #5676: Systemd circular dependency prevents startup #5531: Flush to database based on size instead of entries #5571: Dir/symlink updates overwrite conflicts & unscanned files #5599: Default folder in v1.1.0 isn’t created with useLargeBlocks = true #5482: minHomeDiskFreePct is still present in fresh configs #5493: Monitor bug: TERM signaling not passed to syncthing process #5557: Hashing performance degradation when using large blocks Enhancements #1223: Mention license in "About" dialog #5554: Unnecessary time precision in pendingFolder/pendingDevice config entries #4921: Syncthing should guard against running old versions with new config #5065: Add support for TLS1.3 #5346: Systemd unit should declare after=multiuser.target #5560: Change "Introduced by" icon #5569: Outdated copyright notes in "About" dialog #5365: .desktop files: desktop-entry-lacks-keywords-entry #5445: User/group ownership following parent dir Other issues: #1101: Syncthing has no easter eggs #5480: Better describe exposed volumes in our Docker image #5077: TestWatchIgnore is flaky (OpenBSD (-current) Test failed) #5246: TestParentDeletion fails on OpenBSD #5311: Update prometheus/common/expfmt to pass tests on go1.11 #5454: build.go setup problems with gomodules #5495: Dockerhub Docker builds fail continously #5515: Missing string from Transifex API Changes Change #5479 introduces the new copyOwnershipFromParent folder configuration option. The default, false, matches the old behavior of not copying ownership information. Since change #5405, large (variable size) blocks are enabled by default for newly created folders.
2019-05-23all: replace SUBST_SED with the simpler SUBST_VARSrillig21-60/+60
pkglint -Wall -r --only "substitution command" -F With manual review and indentation fixes since pkglint doesn't get that part correct in every case.
2019-05-23wireshark: updated to 3.0.2adam3-10/+10
3.0.2: What’s New • The Windows installers now ship with Qt 5.12.3. They previously shipped with Qt 5.12.1. • The Windows installers now ship with Npcap 0.995. They previously shipped with Npcap 0.992. • The macOS packages are now notarized[1]. Bug Fixes The following vulnerabilities have been fixed: • wnpa-sec-2019-19[2] Wireshark dissection engine crash. Bug 15778[3]. The following bugs have been fixed: • Add (IETF) QUIC Dissector. Bug 13881[4]. • Wireshark Hangs on startup initializing external capture plugins. Bug 14657[5]. • [oss-fuzz] ERROR: Adding ospf.v3.prefix.options.nu would put more than 1000000 items in the tree — possible infinite loop. Bug 14978[6]. • Wireshark can call extcap with empty multicheck argument. Bug 15065[7]. • CMPv2 KUR message disection gives unexpected value for serialNumber under OldCertId fields. Bug 15154[8]. • "(Git Rev Unknown from unknown)" in version string for official tarball. Bug 15544[9]. • External extcap does not get all arguments sometimes. Bug 15586[10]. • Help file doesn’t display for extcap interfaces. Bug 15592[11]. • Buildbot crash output: randpkt-2019-03-14-4670.pcap. Bug 15604[12]. • Building only libraries on windows fails due to CLEAN_C_FILES empty. Bug 15662[13]. • Statistics→Conversations→TCP→Follow Stream - incorrect behavior. Bug 15672[14]. • Wrong NTP timestamp for RTCP XR RR packets (hf_rtcp_xr_timestamp field). Bug 15687[15]. • ws_pipe: leaks pipe handles on errors. Bug 15689[16]. • Build issue in Wireshark - 3.0.1 on RHEL6. Bug 15706[17]. • ISAKMP: Segmentation fault with non-hex string for IKEv1 Decryption Table Initiator Cookie. Bug 15709[18]. • extcap: non-boolean call arguments can be appended without value on selector Reload. Bug 15725[19]. • Incorrectly interpreted format of MQTT PUBLISH payload data. Bug 15738[20]. • print.c: Memory leak in ek_check_protocolfilter. Bug 15758[21]. • IETF QUIC dissector incorrectly parses retry packet. Bug 15764[22]. • Bacnet(app): fix wrong value for id 183 (logging-device → logging-object). Bug 15767[23]. • The SMB2 code to look up decryption keys by session ID assumes it’s running on a little-endian machine. Bug 15772[24]. • tshark -G folders leaves mmdbresolve process behind. Bug 15777[25]. • Dissector bug, protocol TLS - failed assertion "data". Bug 15780[26]. • WSMP : header_opt_ind field is not correctly set.
2019-05-22samba4: updated to 4.10.4adam2-7/+7
Changes since 4.10.3: * BUG 13938: s3: SMB1: Don't allow recvfile on stream fsp's. * BUG 13882: py/provision: Fix for Python 2.6. * BUG 13873: netcmd: Fix 'passwordsettings --max-pwd-age' command. * BUG 13938: s3:smbd: Don't use recvfile on streams. * BUG 13861: s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot". * BUG 13896: vfs_ceph: Explicitly enable libcephfs POSIX ACL support. * BUG 13940: vfs_ceph: Fix cephwrap_flistxattr() debug message. * BUG 13895: ctdb-common: Avoid race between fd and signal events. * BUG 13943: ctdb-common: Fix memory leak in run_proc. * BUG 13892: lib: Initialize getline() arguments. * BUG 13903: winbind: Fix overlapping id ranges. * BUG 13902: lib util debug: Increase format buffer to 4KiB. * BUG 13927: nsswitch pam_winbind: Fix Asan use after free. * BUG 13929: s4 lib socket: Ensure address string owned by parent struct. * BUG 13936: s3 rpc_client: Fix Asan stack use after scope. * BUG 10097: s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO. * BUG 10344: smb2_tcon: Avoid STATUS_PENDING completely on tdis. * BUG 12845: smb2_sesssetup: avoid STATUS_PENDING responses for session setup. * BUG 13698: smb2_tcon: Avoid STATUS_PENDING completely on tdis. * BUG 13796: smb2_sesssetup: avoid STATUS_PENDING responses for session setup. * BUG 13843: dbcheck: Fix the err_empty_attribute() check. * BUG 13858: vfs_snapper: Drop unneeded fstat handler. * BUG 13862: vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check. * BUG 13863: smb2_server: Grant all 8192 credits to clients. * BUG 13919: smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling. * BUG 13872: s3/vfs_glusterfs: Dynamically determine NAME_MAX. * BUG 13918: s3: modules: ceph: Use current working directory instead of share path. * BUG 13831: winbind: Use domain name from lsa query for sid_to_name cache entry. * BUG 13865: memcache: Increase size of default memcache to 512k. * BUG 13857: docs: Update smbclient manpage for "--max-protocol". * BUG 13861: 'net ads join' to child domain fails when using "-U admin@forestroot". * BUG 13937: s3:utils: If share is NULL in smbcacls, don't print it. * BUG 13939: s3:smbspool: Fix regression printing with Kerberos credentials. * BUG 13860: ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd. * BUG 13888: ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake". * BUG 13930: ctdb-daemon: Never use 0 as a client ID. * BUG 13943: ctdb-common: Fix memory leak. * BUG 13904: s3:debug: Enable logging for early startup failures.
2019-05-22grpc: updated to 1.21.0adam3-9/+27
Release v1.21.0 Core Service Config Changes to set channel in transient failure on invalid service config. Add a backup poller to c-ares resolver to take better advantage of c-ares query timeout/retry logic. Pass WSA_FLAG_NO_HANDLE_INHERIT flag to the WSASocketA() to avoid handle leaking on the Windows in case of using CreateProcess() on the server. Add fallback-at-startup into xds. Retire the GRPC_ARENA_INIT_STRATEGY env variable. Fix gevent segfault with C-Ares as DNS resolver. Explicitly call getsockname after accept for unix sockets to get the sun_path. RBE Windows c-core build. Loosen the dependency on the googleapis-common-protos-types gem. pick_first: don't go into TRANSIENT_FAILURE upon empty update when in IDLE. Add guard to the tv_nsec field of gpr_now return value. Re-enable ALPN check in gRPC C core SSL stack. C++ Global config variables migration. Make cc_grpc_library compatible with native proto_library and cc_proto_library rules. Add alarm in callback streaming test. Make C++ Channel Interceptors work for lame channels.
2019-05-21*libnice: Update *libnice to 0.1.16.wiz5-14/+12
libnice 0.1.16 (2019-05-09) =========================== Add API to make it easier to implement ICE trickle Add async closing of agent, to cleanly close TURN allocations Add Google non-standard NOMINATION STUN attribute Fix tests on Windows Fix some racy tests
2019-05-20youtube-dl: Update to 20190520leot2-7/+7
Changes: 2019.05.20 ---------- Core + [extractor/common] Move workaround for applying first Set-Cookie header into a separate _apply_first_set_cookie_header method Extractors * [safari] Fix authentication (#21090) * [vk] Use _apply_first_set_cookie_header * [vrt] Fix extraction (#20527) + [canvas] Add support for vrtnieuws and sporza site ids and extract AES HLS formats + [vrv] Extract captions (#19238) * [tele5] Improve video id extraction * [tele5] Relax URL regular expression (#21020, #21063) * [svtplay] Update API URL (#21075) + [yahoo:gyao] Add X-User-Agent header to dam proxy requests (#21071)
2019-05-20net/bind914: update to 9.14.2taca4-15/+13
pkgsrc change: remove "USE_CWRAPPERS=no". --- 9.14.2 released --- 5233. [bug] Negative trust anchors did not work with "forward only;" to validating resolvers. [GL #997] 5231. [protocol] Add support for displaying CLIENT-TAG and SERVER-TAG. [GL #960] 5229. [protocol] Enforce known SSHFP fingerprint lengths. [GL #852] 5228. [cleanup] If trusted-keys and managed-keys are configured simultaneously for the same name, the key cannot be rolled automatically. This configuration now logs a warning. [GL #868] 5224. [bug] Only test provide-ixfr on TCP streams. [GL #991] 5223. [bug] Fixed a race in the filter-aaaa plugin accessing the hash table. [GL #1005] 5222. [bug] 'delv -t ANY' could leak memory. [GL #983] 5221. [test] Enable parallel execution of system tests on Windows. [GL !4101] 5220. [cleanup] Refactor the isc_stat structure to take advantage of stdatomic. [GL !1493] 5219. [bug] Fixed a race in the filter-aaaa plugin that could trigger a crash when returning an instance object to the memory pool. [GL #982] 5218. [bug] Conditionally include <dlfcn.h>. [GL #995] 5217. [bug] Restore key id calculation for RSAMD5. [GL #996] 5216. [bug] Fetches-per-zone counter wasn't updated correctly when doing qname minimization. [GL #992] 5215. [bug] Change #5124 was incomplete; named could still return FORMERR instead of SERVFAIL in some cases. [GL #990] 5214. [bug] win32: named now removes its lock file upon shutdown. [GL #979] 5213. [bug] win32: Eliminated a race which allowed named.exe running as a service to be killed prematurely during shutdown. [GL #978] 5211. [bug] Allow out-of-zone additional data to be included in authoritative responses if recursion is allowed and "minimal-responses" is disabled. This behavior was inadvertently removed in change #4605. [GL #817] 5210. [bug] When dnstap is enabled and recursion is not available, incoming queries are now logged as "auth". Previously, this depended on whether recursion was requested by the client, not on whether recursion was available. [GL #963] 5209. [bug] When update-check-ksk is true, add_sigs was not considering offline keys, leaving record sets signed with the incorrect type key. [GL #763] 5208. [test] Run valid rdata wire encodings through totext+fromtext and tofmttext+fromtext methods to check these methods. [GL #899] 5207. [test] Check delv and dig TTL values. [GL #965] 5206. [bug] Delv could print out bad TTLs. [GL #965] 5205. [bug] Enforce that a DS hash exists. [GL #899] 5204. [test] Check that dns_rdata_fromtext() produces a record that will be accepted by dns_rdata_fromwire(). [GL #852] 5203. [bug] Enforce whether key rdata exists or not in KEY, DNSKEY, CDNSKEY and RKEY. [GL #899] 5202. [bug] <dns/ecs.h> was missing ISC_LANG_ENDDECLS. [GL #976] 5190. [bug] Ignore trust anchors using disabled algorithms. [GL #806]
2019-05-20net/bind911: update to 9.11.7taca4-47/+40
Update bind911 to 9.11.7, this is maintenance releases. --- 9.11.7 released --- 5233. [bug] Negative trust anchors did not work with "forward only;" to validating resolvers. [GL #997] 5232. [bug] Fix a high-load race/crash in isc_socket_cancel(). [GL #834] 5231. [protocol] Add support for displaying CLIENT-TAG and SERVER-TAG. [GL #960] 5229. [protocol] Enforce known SSHFP fingerprint lengths. [GL #852] 5228. [cleanup] If trusted-keys and managed-keys are configured simultaneously for the same name, the key cannot be rolled automatically. This configuration now logs a warning. [GL #868] 5224. [bug] Only test provide-ixfr on TCP streams. [GL #991] 5222. [bug] 'delv -t ANY' could leak memory. [GL #983] 5221. [test] Enable parallel execution of system tests on Windows. [GL !4101] 5218. [bug] Conditionally include <dlfcn.h>. [GL #995] 5214. [bug] win32: named now removes its lock file upon shutdown. [GL #979] 5213. [bug] win32: Eliminated a race which allowed named.exe running as a service to be killed prematurely during shutdown. [GL #978] 5210. [bug] When dnstap is enabled and recursion is not available, incoming queries are now logged as "auth". Previously, this depended on whether recursion was requested by the client, not on whether recursion was available. [GL #963] 5209. [bug] When update-check-ksk is true, add_sigs was not considering offline keys, leaving record sets signed with the incorrect type key. [GL #763] 5208. [test] Run valid rdata wire encodings through totext+fromtext and tofmttext+fromtext methods to check these methods. [GL #899] 5207. [test] Check delv and dig TTL values. [GL #965] 5205. [bug] Enforce that a DS hash exists. [GL #899] 5204. [test] Check that dns_rdata_fromtext() produces a record that will be accepted by dns_rdata_fromwire(). [GL #852] 5203. [bug] Enforce whether key rdata exists or not in KEY, DNSKEY, CDNSKEY and RKEY. [GL #899] 5197. [bug] dig could die in best effort mode on multiple SIG(0) records. Similarly on multiple OPT and multiple TSIG records. [GL #920] 5194. [bug] Enforce non empty ZOMEMD hash. [GL #899] 5193. [bug] EID and NIMLOC failed to do multi-line output correctly. [GL #899] 5192. [bug] configure --fips-mode failed. [GL #946] 5191. [port] Darwin: dlzexternal/driver.so was not building. [GL #948] 5189. [cleanup] Remove revoked root DNSKEY from bind.keys. [GL #945] 5187. [test] Set time zone before running any tests in dnstap_test. [GL #940] 5185. [bug] PKCS11 build could fail if ECDSA is not supported. [GL #935] 5184. [bug] Missing unlocks in sdlz.c. [GL #936] 5182. [bug] Fix a high-load race/crash in handling of isc_socket_close() in resolver. [GL #834] 5180. [bug] delv now honors the operating system's preferred ephemeral port range. [GL #925] 5179. [cleanup] Replace some vague type declarations with the more specific dns_secalg_t and dns_dsdigest_t. Thanks to Tony Finch. [GL !1498] 5178. [bug] Handle EDQUOT (disk quota) and ENOSPC (disk full) errors when writing files. [GL #902] 5176. [tests] Remove a dependency on libxml in statschannel system test. [GL #926] 5175. [bug] Fixed a problem with file input in dnssec-keymgr, dnssec-coverage and dnssec-checkds when using python3. [GL #882] 5174. [doc] Tidy dnssec-keygen manual. [GL !1557] 5172. [bug] nsupdate now honors the operating system's preferred ephemeral port range. [GL #905] 5170. [test] Added --with-dlz-filesystem to feature-test. [GL !1587] 5168. [test] Do not crash on shutdown when RPZ fails to load. Also, keep previous version of the database if RPZ fails to load. [GL #813] 5167. [bug] nxdomain-redirect could sometimes lookup the wrong redirect name. [GL #892]
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-02 06:33:14 +0000