summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2013-11-16Update to 0.4.17 (released 2012). Changes:shattered3-11/+10
- Integrated NetBSD ioctl driver (modified) from Rui Paulo. - Fixed buffer overflow in draw_rate, exposed in 64 sistems due to extended precision in floating point values. - Include Becker's changes for trend support and set trend support on by default. - Integrate FreeBSD's driver patch. - Do not blink leds when an interface is offline - Do not require 'link_up' in solaris_kstat (but use it if present), since on OpenSolaris many nic drivers seem to be broken. - Fix the installation path of wmndrc.
2013-11-14Update COMMENT and DESCR to describe new features added betweenapb2-19/+16
sslh-1.7a and 1.15.
2013-11-13Changes 13.2.0:adam3-7/+20
* Twisted now includes a HostnameEndpoint implementation which uses IPv4 and IPv6 in parallel, speeding up the connection by using whichever connects first (the 'Happy Eyeballs'/RFC 6555 algorithm). * Improved support for Cancellable Deferreds by kaizhang, our GSoC student. * Improved Twisted.Mail documentation by shira, our Outreach Program for Women intern. * twistd now waits for the application to start successfully before exiting after daemonization. * SSL server endpoint string descriptions now support the specification of chain certificates. * Over 70 closed tickets since 13.1.0.
2013-11-12Update to 1.08wen2-6/+6
Upstream changes: 1.08 November 8, 2013 ! #15703 add no_index for examples to prevent CPAN pollution [githumb.com/sergeyromanov] 1.07 November 7, 2013 ! #89948 Remove warning when Content-Id is not present
2013-11-12Update to 2.67roy2-8/+6
2013-11-12Changes 3.6.20:adam2-6/+6
These are security releases in order to address CVE-2013-4475 (ACLs are not checked on opening an alternate data stream on a file or directory) and CVE-2013-4476 (Private key in key.pem world readable).
2013-11-11Fix MAKE_JOBS build. Wouldn't it be nice if automake emitted correctdholland2-1/+19
makefiles?
2013-11-09v1.3.3 - Oct 28, 2013pettai2-6/+6
-------------------------- Bugfixes: * Improved zone loading error messages * Correct control socket permissions * Improved log syntax documentation * Fixed wrong assertions in DDNS prerequisites checking * Fixed processing of some malformed DNS packets * Fixed notify messages being ignored in some cases v1.3.2 - Sep 30, 2013 --------------------- Bugfixes: * Configuration option for EDNS0 max UDP payload. * Max UDP payload from EDNS0 affected TCP responses. * Fixed build on SLE 10. * knotc reload did not close files included from config.
2013-11-08Add the kde packages split out of kdenetworkmarkd1-1/+9
2013-11-08Match client version found in reality.joerg1-2/+2
2013-11-08On NetBSD, SIOCGIFINDEX exists, but ip_mreqn doesn't.joerg2-4/+22
2013-11-08-kdenetwork4.joerg1-2/+1
2013-11-08Upate sslh to 1.15.obache6-13/+110
Based on PR pkg/48320 by Nils Ratusznik. Pkgsrc change: * add startup script. ChangeLog: v1.15: 27JUL2013 Added --transparent option for transparent proxying. See README for iptables magic and capability management. Fixed bug in sslh-select: if number of opened file descriptor became bigger than FD_SETSIZE, bad things would happen. Fixed bug in sslh-select: if socket dropped while defered_data was present, sslh-select would crash. Increased FD_SETSIZE for Cygwin, as the default 64 is too low for even moderate load. v1.14: 21DEC2012 Corrected OpenVPN probe to support pre-shared secret mode (OpenVPN port-sharing code is... wrong). Thanks to Kai Ellinger for help in investigating and testing. Added an actual TLS/SSL probe. Added configurable --on-timeout protocol specification. Added a --anyprot protocol probe (equivalent to what --ssl was). Makefile respects the user's compiler and CFLAG choices (falling back to the current values if undefined), as well as LDFLAGS. (Michael Palimaka) Added "After" and "KillMode" to systemd.sslh.service (Thomas Weißschuh). Added LSB tags to etc.init.d.sslh (Thomas Varis). v1.13: 18MAY2012 Write PID file before dropping privileges. Added --background, which overrides 'foreground' configuration file setting. Added example systemd service file from Archlinux in scripts/ https://projects.archlinux.org/svntogit/community.git/tree/trunk/sslh.service?h=packages/sslh (Sébastien Luttringer) v1.12: 08MAY2012 Added support for configuration file. New protocol probes can be defined using regular expressions that match the first packet sent by the client. sslh now connects timed out connections to the first configured protocol instead of 'ssh' (just make sure ssh is the first defined protocol). sslh now tries protocols in the order in which they are defined (just make sure sslh is the last defined protocol). v1.11: 21APR2012 WARNING: defaults have been removed for --user and --pidfile options, update your start-up scripts! No longer stop sslh when reverse DNS requests fail for logging. Added HTTP probe. No longer create new session if running in foreground. No longer default to changing user to 'nobody'. If --user isn't specified, just run as current user. No longer create PID file by default, it should be explicitely set with --pidfile. No longer log to syslog if in foreground. Logs are instead output to stderr. The four changes above make it straightforward to integrate sslh with systemd, and should help with launchd. v1.10: 27NOV2011 Fixed calls referring to sockaddr length so they work with FreeBSD. Try target addresses in turn until one works if there are several (e.g. "localhost:22" resolves to an IPv6 address and an IPv4 address and sshd does not listen on IPv6). Fixed sslh-fork so killing the head process kills the listener processes. Heavily cleaned up test suite. Added stress test t_load script. Added coverage (requires lcov). Support for XMPP (Arnaud Gendre). Updated README.MacOSX (Aaron Madlon-Kay). v1.9: 02AUG2011 WARNING: This version does not work with FreeBSD and derivatives! WARNING: Options changed, you'll need to update your start-up scripts! Log format changed, you'll need to update log processing scripts! Now supports IPv6 throughout (both on listening and forwarding) Logs now contain IPv6 addresses, local forwarding address, and resolves names (unless --numeric is specified). Introduced long options. Options -l, -s and -o replaced by their long counterparts. Defaults for SSL and SSH options suppressed (it's legitimate to want to use sslh to mux OpenVPN and tinc while not caring about SSH nor SSL). Bind to multiple addresses with multiple -p options. Support for tinc VPN (experimental). Numeric logging option. v1.8: 15JUL2011 Changed log format to make it possible to link connections to subsequent logs from other services. Updated CentOS init.d script (Andre Krajnik). Fixed zombie issue with OpenBSD (The SA_NOCLDWAIT flag is not propagated to the child process, so we set up signals after the fork.) (François FRITZ) Added -o "OpenVPN" and OpenVPN probing and support. Added single-threaded, select(2)-based version. Added support for "Bold" SSH clients (clients that speak first) Thanks to Guillaume Ricaud for spotting a regression bug. Added -f "foreground" option. Added test suite. (only tests connexions. No test for libwrap, setsid, setuid and so on) and corresponding 'make test' target. Added README.MacOSX (thanks Aaron Madlon-Kay) Documented use with proxytunnel and corkscrew in README.
2013-11-07Update to KDE SC 4.11.3markd44-895/+950
bugfixes, many new features, improved stability and performance.
2013-11-07Update bind99 to 9.9.4pl1 (BIND 9.9.4-P1).taca2-6/+6
Security Fixes Treat an all zero netmask as invalid when generating the localnets acl. A Winsock library call on some Windows systems can return an incorrect value for an interface's netmask, potentially causing unexpected matches to BIND's built-in "localnets" Access Control List. (CVE-2013-6230) [RT #34687]
2013-11-07Update bind98 to 9.8.6pl1 (BIND 9.8.6-P1).taca2-6/+6
Security Fixes Treat an all zero netmask as invalid when generating the localnets acl. A Winsock library call on some Windows systems can return an incorrect value for an interface's netmask, potentially causing unexpected matches to BIND's built-in "localnets" Access Control List. (CVE-2013-6230) [RT #34687]
2013-11-07Update bind96 to 9.6.3.1.ESV.10pl1 (BIND 9.6-ESV-R10-P1).taca2-6/+6
Security Fixes Treat an all zero netmask as invalid when generating the localnets acl. A Winsock library call on some Windows systems can return an incorrect value for an interface's netmask, potentially causing unexpected matches to BIND's built-in "localnets" Access Control List. (CVE-2013-6230) [RT #34687]
2013-11-06Link explicitly against libm.joerg2-1/+15
2013-11-06Match PLIST expection for the gconf schema locationjoerg1-1/+2
2013-11-05Link agent.so correctly against libperl.so.joerg3-3/+20
2013-11-05Update mikutter to 0.2.2.1410.obache2-6/+6
* Image preview * catch up Tumblr spec chane * Fixes 100% CPU when network is disconnected. * Fixes display past tweets in threads. * Fixes rare crash handling list.
2013-11-04Wants ncurses.h.joerg1-2/+2
2013-11-02Update "wireshark" package to version 1.10.3. Changes since 1.10.2:tron2-7/+6
- Bug Fixes The following vulnerabilities have been fixed. * wnpa-sec-2013-61 The IEEE 802.15.4 dissector could crash. (Bug 9139) Versions affected: 1.10.0 to 1.10.2, 1.8.0 to 1.8.10 CVE-2013-6336 * wnpa-sec-2013-62 The NBAP dissector could crash. Discovered by Laurent Butti. (Bug 9168) Versions affected: 1.10.0 to 1.10.2, 1.8.0 to 1.8.10 CVE-2013-6337 * wnpa-sec-2013-63 The SIP dissector could crash. (Bug 9228) Versions affected: 1.10.0 to 1.10.2, 1.8.0 to 1.8.10 CVE-2013-6338 * wnpa-sec-2013-64 The OpenWire dissector could go into a large loop. Discovered by Murali. (Bug 9248) Versions affected: 1.10.0 to 1.10.2, 1.8.0 to 1.8.10 CVE-2013-6339 * wnpa-sec-2013-65 The TCP dissector could crash. (Bug 9263) Versions affected: 1.10.0 to 1.10.2, 1.8.0 to 1.8.10 CVE-2013-6340 - The following bugs have been fixed: * new_packet_list: EAP-TLS reassemble does not happen when NEW_PACKET_LIST is toggled. (Bug 5349) * TLS decryption fails with XMPP start_tls. (Bug 8871) * Wrong Interpretation of GTS starting slot. (Bug 8946) * "Follow TCP Stream" shows only the first HTTP req+res. (Bug 9044) * The value of SEND_TO_UE in the DIAMETER Gx dictionary for Packet-Filter-Usage AVP is 0 instead of 1. (Bug 9126) * Crash then try to delete the same entry (length range) twice. (Bug 9129) * Crash if wrong "packet lengths range" entered. (Bug 9130) * Bssgp => SGSN-INVOKE-TRACE use the wrong function... (Bug 9157) * Minor correction to dissection of DLR frames in Ethernet/IP dissector. (Bug 9186) * WebSphere MQ V7 Bug Fix 8322 TSHM_EBCDIC. (Bug 9198) * EDNS0 "Higher bits in extended RCODE" incorrectly decoded in packet-dns.c. (Bug 9199) * Files with pcap-ng Simple Packet Blocks can't be read. (Bug 9200) * Bug in RTP dissector if RTP extension is present. (Bug 9204) * Improve "eHRPD Indicator" NVSE dissection in 3GPP2 A11 Registration Request. (Bug 9206) * "make debian-package" fails, missing wsicon32.xpm. (Bug 9209) * Fix typo in MODCOD list of DVB-S2 dissector. (Bug 9218) * Ring buffer crash when tshark gets too far behind dumpcap. (Bug 9258) * PTP Dissector Wrongfully Reports Malformed Packet. (Bug 9262) * Wireshark lua dissector unable to load for media_type=application/octet-stream. (Bug 9296) * Wireshark crash when dissecting packet with NTLMSSP. (Bug 9299) * Padding in uint64 field in DCERPC protocol wrongly reported. (Bug 9300) * DCERPC data_blobs are not correctly dissected when NDR64 encoding is used. (Bug 9301) * Multiple PDUs in the same DCERPC packet are not correctly decrypted. (Bug 9302) * The tshark summary line doesn't display the frame number or displays it sporadically. (Bug 9317) * Bluetooth: SDP improvements and minor fixes. (Bug 9327) * Duplicate IRC header field abbreviation breaks filter (example: irc.response.command). (Bug 9360) - Updated Protocol Support 3GPP2 A11, Bluetooth SDP, BSSGP, DCERPC, DCERPC NDR, DCERPC NT, DIAMETER, DNS, DVB-S2, Ethernet, EtherNet/IP, H.225, IEEE 802.15.4, IRC, NBAP, NTLMSSP, OpenWire, PTP, RTP, SIP, TCP, WiMax, and XMPP
2013-11-01Substitute SPREAD_* variables in source and example configs.jperkin4-3/+58
Bump PKGREVISION.
2013-11-01Revision bump associated with the update of lang/ocaml to version 4.01.jaapb3-6/+6
2013-11-01Updated net/ocamlnet to its latest version, 3.7.3 (and changed maintainerjaapb3-8/+11
e-mail address). Changes include: * Shell.to_file: implement the append flag as documented * The libraries netcamlbox and netmulticore are now only built if completely supported. * Porting netcamlbox and netmulticore to ocaml-4.01: There are new implementations in OCaml for caml_modify and caml_initialize that are incompatible with our usage here. Fortunately, these symbols are now weak, and we can override them. This is done in netsys.outofheap, and for the time being we just use the old implementation from ocaml-4.00. * Porting netsys to ocaml-4.01: O_CLOEXEC is now supported if found * Netsys_sem: fix for systems that don't have Netsys_posix.sysconf_open_max (e.g. Win32). * Http_fs: read method: fixing a problem with resent messages * Http_client: better reaction after "100" responses * Http_client: implementing verbose_response_header, and verbose_response_contents again * Uq_ssl: debugging of payload data (Uq_ssl.Debug.dump_data) * Http_fs: fixing chunked encoding for PUT (this is already done in Http_client) * Nethttp: new function base_code * Http_client: handling the case better that an unknown status code is returned by the server. Before, [response_status] simply raised [Not_found]. Now, the base status is returned instead. * Extending ocamlrpcgen: It supports now six new directives, _lowercase, _uppercase, _capitalize, _prefix, _equals, and _tuple (see documentation).
2013-10-31Fix PKG_USERS usage.jperkin2-7/+10
2013-10-31Update tcpreplay to 3.4.4.minskim10-40/+144
Changes: - Set default timing method to either gtod or abstime (#404) - Fix IPv6 parsing of CIDR's (#405) - Add support for preloading the memory cache (#410) - Generate more useful error when packets are too small (#411) - Update to libopts/Autogen 5.9.9 (#412) - Ship Win32Readme.txt file (#413) - Update copyright notice to 2010 (#416) - Dramatically enhance --portmap option (#417) - Update autotools (#423) - Add support for printing statistics periodically during the run (#424) - Warn user when pcap snaplen < 65535 (#425) - Add 802.1q processing support tcpprep (#428) - Link libnl when newer versions of libpcap require it (#397) - Ship m4 directory (#398) - Upgrade to latest autotools scripts (#400) - Fix error message when running autogen.sh (#401) - Added extensive IPv6 support to tcprewrite & tcpreplay-edit (#11) - Add IPv6 fragroute support (#388) - Add IPv6 decoding support to tcpprep (#11) - Fix compile time error in err.h (#390) - Add --endpoints support in tcpreplay-edit (#393)
2013-10-31Make glib2 optional, but leave it default-on to stay as before.wiz2-4/+10
Based on patch by Jean-Yves Moulin <jym@baaz.fr> with slight changes.
2013-10-30Bump PKGREVISION of packages whose Lua depends changed form, but whosedholland5-10/+10
own PKGNAME is unchanged.
2013-10-29NSD 4.0.0pettai5-39/+50
Features: * documented in doc/NSD-4-features. Change configuration without restart, direct nameserver control with nsd-control, support a higher number of zones. Higher performance (compared to NSD3). * nsdc is gone. Use kill -HUP for reload (also checks if zonefiles have changed and rereads them), and kill -TERM for quit. Or use nsd-control for detailed control. * cron job for nsdc patch is gone. nsd-control write creates zonefiles. * nsd.db has a new format that compacts itself when it is changed, thus nsdc patch is no longer necessary. * nsd.db is memory mapped, NSD needs (part of) that mmap in ram. * tcp-count can go above 1000; epoll/kqueue support with libevent. * nsd-control reconfig for updates with no restart (zones, keys, ..) * nsd-control-setup to create keys for nsd-control (enable nsd-control with remote-control: yes in nsd.conf).
2013-10-29USE_LANGUAGES=c99, fixes build on SunOS.jperkin1-1/+2
2013-10-29USE_LANGUAGES=c99 and add socket libs to fix build on SunOS.jperkin1-1/+4
2013-10-26Follow declared prototype.asau2-1/+17
2013-10-25Fix build on SunOS. Add LICENSE. Patch from Thomas Merkel.jperkin1-2/+3
2013-10-24Fix build on OSX.jperkin2-10/+14
2013-10-24Update puf to 1.0.0. Changeset from Thomas Merkel.jperkin3-20/+7
Changes since puf-0.93.2a: 1.0.0 (16 Oct 2005) - Fixed command line parsing error that caused -d to be taken as -dc - -r[+[+]] doesn't imply -p any more, but it advances -p to -pr[+[+]] - The scope of URL-based switches can be limited with brackets now - The file supplied to -i is now interpreted as a generic command file with one command line switch (incl. argument) or URL per line - Dropped SPEC format - use -O and the new -xy/-xyy switches instead - $http_proxy is now obeyed if no proxies are specified with -y/-iy - Scope of -O switch unified with other URL-based switches - Made -O buffer output when dumping multiple sources to one target - Added support for "-O -" - Added -A, -R, -D, -Dl, -Dr, -xr, -xu, -xs, -xo and -xO switches - Removed -xe switch - -xE now enumerates per occurrence of -P - Vast performance improvements of large downloads - Automatically %-escape [invalid] spaces in URLs - Various bug fixes - Change of versioning scheme to something more reasonable 0.93.3 (20 May 2004) - Don't retry after HTTP errors 403 and 404. Added -xT switch to enforce the old behaviour (for some really broken servers) - Don't spawn a separate process for every DNS lookup, but use a pool of DNS helper processes instead - Added -xh and -dc switches - Fixed file corruption on CygWin
2013-10-24Mark remaining packages not support DESTDIR as BROKEN as decidedwiz1-1/+2
by pkgsrc-pmc. If you are interested in one of these, please fix it before 2013Q4.
2013-10-24Add libnsl on SunOS. Fix from Thomas Merkel.jperkin1-1/+3
2013-10-24Fix build on SunOS. Patch from Sebastian Wiedenroth.jperkin2-1/+14
2013-10-23Fix PLIST for pgsql option.jperkin1-1/+2
2013-10-21Update miniupnpd to 1.8.20130730 (thanks to Sebastian Wiedenroth).fhajny6-39/+126
Way too many changes, see full changelog at: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2013-10-21Update socat to 1.7.2.2 (thanks Sebastian Wiedenroth).fhajny2-6/+6
Changes: - Fix for CVE-2013-3571.
2013-10-21Update ipv6calc to 0.94.1, patches by Sebastian Wiedenroth.fhajny2-6/+7
Too many changes, see full changelog at: http://cvs.deepspace6.net/cgi-bin/cvsweb.cgi/ipv6calc/ChangeLog?rev=1.293
2013-10-21Fix build on SunOSfhajny2-2/+9
2013-10-21Fix build on SunOS.fhajny2-1/+17
2013-10-20Prefix rpath options with -Wl.joerg8-26/+81
2013-10-20curses from modernish NetBSD is fine. Don't (incorrectly) hard-codejoerg4-4/+36
/usr/pkg references for NetBSD.
2013-10-19Update to 0.11wen2-7/+7
Add missing DEPENDS Upstream changes: 0.11 2012-02-13 - needs to actually depend on Path::Class 0.10 2012-02-12 - Fix ::FileHandle on pre-5.14 perls 0.09 2012-02-12 - oops, missed rafl's upload, rerelease with the correct version number
2013-10-19Revbump after updating textproc/icuadam52-99/+104