Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
Wireshark 3.6.6 Release Notes
What’s New
Note: This is the last release branch with support for 32-bit Windows.
Updates will no longer be available after May 22, 2024 for that
platform. Issue 17779[1]
The Windows installers now ship with Npcap 1.60. They previously
shipped with Npcap 1.55.
Bug Fixes
The following bugs have been fixed:
• TLS: RSA decryption fails with Extended Master Secret and
renegotiation Issue 18059[2].
• "dfilter" file on Windows adds carriage returns, and requires
line feeds Issue 18082[3].
• Npcap bundled version needs a bump to v1.60 for Windows 11
compatibility Issue 18084[4].
• "Browse" button in Prefs/Name Resolution/MaxMind crashes
Wireshark on macOS Issue 18088[5].
• TFTP: some packets are not recognized as TFTP packets with 3.6.5
Issue 18122[6].
New and Updated Features
New Protocol Support
There are no new protocols in this release.
Updated Protocol Support
DTLS, F5 Capture Information, F5 Ethernet Trailer, FlexRay, MBIM,
TFTP, TLS, and ZigBee ZCL
|
|
2.6.1
- BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
- BUG/MINOR: ssl_ckch: Free error msg if commit changes on a CA/CRL entry fails
- BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
- BUG/MEDIUM: ssl_ckch: Don't delete CA/CRL entry if it is being modified
- BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
- BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a CA/CRL entry
- BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
- BUG/MEDIUM: ssl_ckch: Rework 'commit ssl ca-file' to handle full buffer cases
- BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
- BUG/MEDIUM: httpclient: Don't remove HTX header blocks before duplicating them
- BUG/MEDIUM: httpclient: Rework CLI I/O handler to handle full buffer cases
- MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
- MEDIUM: httpclient: Don't close CLI applet at the end of a response
- REGTESTS: abortonclose: Add a barrier to not mix up log messages
- REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
- BUG/MINOR: ssl_ckch: Use right type for old entry in show_crlfile_ctx
- BUG/MINOR: ssl_ckch: Dump CRL transaction only once if show command yield
- BUG/MINOR: ssl_ckch: Dump CA transaction only once if show command yield
- BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
- BUG/MINOR: ssl_ckch: Init right field when parsing "commit ssl crl-file" cmd
- BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
- BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cafile I/O handler
- BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_crlfile I/O handler
- REGTESTS: http_abortonclose: Extend supported versions
- REGTESTS: restrict_req_hdr_names: Extend supported versions
- BUILD: compiler: implement unreachable for older compilers too
- BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
- BUG/MINOR: trace: Test server existence for health-checks to get proxy
- BUG/MINOR: checks: Properly handle email alerts in trace messages
- REGTESTS: healthcheckmail: Update the test to be functionnal again
- REGTESTS: healthcheckmail: Relax health-check failure condition
- BUG/MINOR: h3: fix frame type definition
- BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
- BUG/MINOR: server: do not enable DNS resolution on disabled proxies
- BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
- BUG/MEDIUM: mux-quic: fix flow control connection Tx level
- BUG/MINOR: mux-quic: fix memleak on frames rejected by transport
- BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
- BUG/MEDIUM: stconn: Don't wakeup applet for send if it won't consume data
- BUG/MEDIUM: cli: Notify cli applet won't consume data during request processing
- BUG/MEDIUM: mux-quic: fix segfault on flow-control frame cleanup
- BUG/MINOR: qpack: support header litteral name decoding
- MINOR: qpack: add comments and remove a useless trace
- BUG/MINOR: h3/qpack: deal with too many headers
- BUG/BUILD: h3: fix wrong label name
- BUG/MINOR: quic: Stop hardcoding Retry packet Version field
- BUG/MINOR: quic: Wrong PTO calculation
- BUG/MINOR: task: fix thread assignment in tasklet_kill()
- BUG/MEDIUM: stream: Properly handle destructive client connection upgrades
- MINOR: stream: Rely on stconn flags to abort stream destructive upgrade
- BUG/MINOR: log: Properly test connection retries to fix dontlog-normal option
- BUG/MINOR: quic: Unexpected half open connection counter wrapping
- BUG/MINOR: quic_stats: Duplicate "quic_streams_data_blocked_bidi" field name
- BUG/MINOR: quic: purge conn Rx packet list on release
- BUG/MINOR: quic: free rejected Rx packets
- BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
- BUG/MINOR: quic: Acknowledgement must be forced during handshake
- BUG/MEDIUM: mworker: use default maxconn in wait mode
- REGTESTS: ssl: add the same cert for client/server
|
|
No upstream ChangeLog.
|
|
No upstream ChangeLog.
|
|
No upstream ChangeLog.
|
|
Fixed YouTube regex for extended URLs
|
|
|
|
camlp4 is an outdated way to build packages with caml and does not work
with pkgsrc ocaml versions for more than a year.
Remove camlp4 and all packages using it.
Ok jaapb@
|
|
|
|
prior to 9.0.
ld.elf_so(1) for 9.0 and later support R_PPC_ADDR16_HA (== 6) and
friends:
http://cvsweb.netbsd.org/bsdweb.cgi/src/libexec/ld.elf_so/arch/powerpc/ppc_reloc.c#rev1.58.2.1
Bump revision.
Close PR pkg/38961.
|
|
|
|
Deprecate support for Python 3.6
Add option --download-sections to download video partially
Chapter regex and time ranges are accepted (Eg: --download-sections *1:10-2:20)
Add option --alias
Add option --lazy-playlist to process entries as they are received
Add option --retry-sleep
Add slicing notation to --playlist-items
Adds support for negative indices and step
Add -I as alias for --playlist-index
Makes --playlist-start, --playlist-end, --playlist-reverse, --no-playlist-reverse redundant
--config-location - to provide options interactively
[build] Add Linux standalone builds
[update] Self-restart after update
Merge youtube-dl: Upto commit/8a158a9
Add --no-update
Allow extractors to specify section_start/end for clips
Do not print progress to stderr with -q
Ensure pre-processor errors do not block video download
Fix --simulate --max-downloads
Improve error handling of bad config files
Return an error code if update fails
Fix bug in 3a408f9
[ExtractAudio] Allow conditional conversion
[ModifyChapters] Fix repeated removal of small segments
[ThumbnailsConvertor] Allow conditional conversion
[cookies] Detect profiles for cygwin/BSD by moench-tegeder
[dash] Show fragment count with --live-from-start by flashdagger
[extractor] Add _search_json by coletdjnz, pukkandan
[extractor] Add default parameter to _search_json by coletdjnz, pukkandan
[extractor] Add dev option --load-pages
[extractor] Handle json_ld with multiple @types
[extractor] Import _ALL_CLASSES lazily
[extractor] Recognize src attribute from HTML5 media elements by Lesmiscore
[extractor/generic] Revert e6ae51c
[f4m] Bugfix
[ffmpeg] Check version lazily
[jsinterp] Some optimizations and refactoring by dirkf, pukkandan
[utils] Improve performance using functools.cache
[utils] Send HTTP/1.1 ALPN extension by coletdjnz
[utils] ExtractorError: Fix exc_info
[utils] ISO3166Utils: Add EU and AP
[utils] Popen: Refactor to use contextmanager
[utils] locked_file: Fix for PyPy on Windows
[update] Expose more functionality to API
[update] Use .git folder to distinguish source/unknown
[build] Fix updating homebrew formula
[compat] Add functools.cached_property
[test] Fix FakeYDL signatures by coletdjnz
[docs] Improvements
[cleanup, ExtractAudio] Refactor
[cleanup, downloader] Refactor report_progress
[cleanup, extractor] Refactor _download_... methods
[cleanup, extractor] Rename extractors.py to _extractors.py
[cleanup, utils] Don't use kwargs for format_field
[cleanup, build] Refactor
[cleanup, docs] Re-indent "Usage and Options" section
[cleanup] Deprecate YoutubeDL.parse_outtmpl
[cleanup] Misc fixes and cleanup by Lesmiscore, MrRawes, christoph-heinrich, flashdagger, gamer191, kwconder, pukkandan
[extractor/DailyWire] Add extractors by HobbyistDev, pukkandan
[extractor/fourzerostudio] Add extractors by Lesmiscore
[extractor/GoogleDrive] Add folder extractor by evansp, pukkandan
[extractor/MirrorCoUK] Add extractor by LunarFang416, pukkandan
[extractor/atscaleconfevent] Add extractor by Ashish0804
[extractor/freetv] Add extractor by elyse0
[extractor/ixigua] Add Extractor by HobbyistDev
[extractor/kicker.de] Add extractor by HobbyistDev
[extractor/netverse] Add extractors by HobbyistDev, pukkandan
[extractor/playsuisse] Add extractor by pukkandan, sbor23
[extractor/substack] Add extractor by elyse0
[extractor/youtube] Support downloading clips
[extractor/youtube] Add innertube_host and innertube_key extractor args by coletdjnz
[extractor/youtube] Add warning for PostLiveDvr
[extractor/youtube] Bring back _extract_chapters_from_description
[extractor/youtube] Extract comment_count from webpage
[extractor/youtube] Fix :ytnotifications extractor by coletdjnz
[extractor/youtube] Fix initial player response extraction by coletdjnz, pukkandan
[extractor/youtube] Fix live chat for videos with content warning by coletdjnz
[extractor/youtube] Make signature extraction non-fatal
[extractor/youtube:tab] Detect videoRenderer in _post_thread_continuation_entries
[extractor/BiliIntl] Fix metadata extraction
[extractor/BiliIntl] Fix subtitle extraction by HobbyistDev
[extractor/FranceCulture] Fix extractor by aurelg, pukkandan
[extractor/PokemonSoundLibrary] Remove extractor by Lesmiscore
[extractor/StreamCZ] Fix extractor by adamanldo, dirkf
[extractor/WatchESPN] Support free videos and BAM_DTC by ischmidt20
[extractor/animelab] Remove extractor by gamer191
[extractor/bloomberg] Change playback endpoint by m4tu4g
[extractor/ccc] Extract view_count by vkorablin
[extractor/crunchyroll:beta] Fix extractor after API change by Burve, tejing1
[extractor/curiositystream] Get auth_token from cookie by mnn
[extractor/digitalconcerthall] Fix extractor by ZhymabekRoman
[extractor/dropbox] Extract the correct mountComponent
[extractor/dropout] Login is not mandatory
[extractor/duboku] Fix for hostname change by mozbugbox
[extractor/espn] Add WatchESPN extractor by ischmidt20, pukkandan
[extractor/expressen] Fix extractor by aejdl
[extractor/foxnews] Update embed extraction by elyse0
[extractor/ina] Fix extractor by elyse0
[extractor/iwara:user] Make paging better by Lesmiscore
[extractor/jwplatform] Look for data-video-jw-id
[extractor/lbry] Update livestream API by flashdagger
[extractor/mediaset] Improve _VALID_URL
[extractor/naver] Add navernow extractor by ping
[extractor/niconico:series] Fix extractor by sqrtNOT
[extractor/npr] Use stream url from json-ld by r5d
[extractor/pornhub] Extract uploader_id field by Lesmiscore
[extractor/radiofrance] Add more radios by bubbleguuum
[extractor/rumble] Detect JS embed
[extractor/rumble] Extract subtitles by fstirlitz
[extractor/southpark] Add southpark.lat extractor by darkxex
[extractor/spotify:show] Fix extractor
[extractor/tiktok] Detect embeds
[extractor/tiktok] Extract SIGI_STATE by dirkf, pukkandan, sulyi
[extractor/tver] Fix extractor by Lesmiscore
[extractor/vevo] Fix extractor by Lesmiscore
[extractor/yahoo:gyao] Fix extractor
[extractor/zattoo] Fix live streams by miseran
[extractor/zdf] Improve format sorting by elyse0
|
|
|
|
This is in contrast to ../net/samba which needs --disable-pie.
|
|
|
|
GitHub CLI 2.12.1
* pr merge: fix merge queue API access for PAT consumers by
* Use go-gh repository.ParseWithHost
* Use go-gh for SSH hostname alias translation
GitHub CLI 2.12.0
* pr merge: add merge queue support
The merge queue feature is currently in beta and available to only some
repositories, but if a base branch has merge queue enabled, gh pr merge
will add any pull request targeting that branch to the associated merge
queue instead of attempting to immediately merge it.
* codespace edit: add ability to interactively choose a codespace
* repo list: fix compatibility with GHES older than v3.3
* repo edit: fix interactive mode compatibility with GHES older than v3.3
* pr create: allow forking of repositories with "internal" visibility
* auth logout: remove confirmation prompt
* repo create: fix "git init" instructions for paths that have spaces
* codespace create: update prebuild availability status display
* Clean up progress indicator if codespace fails to start
* Extract LiveshareSession interface
|
|
pkgsrc changes:
- Now needs Python>=3.9 per upstream
- Further relax py-cryptography needs (seems to runs fine also with older
py-cryptography) because in pkgsrc we do not have yet cryptography>=36.
Changes:
## 15 May 2022: mitmproxy 8.1.0
* Mostly a Bug fix release
* DNS support
* Mitmproxy now requires Python 3.9 or above.
## 19 March 2022: mitmproxy 8.0.0
### Major Changes
* Major improvements to the web interface
* Event hooks can now be async
* New `tls_{established,failed}_{client,server}` event hooks to record
negotiation success/failure
### Security Fixes
* CVE-2022-24766: Fix request smuggling vulnerability reported by @zeyu2001
|
|
|
|
netop is a terminal command line interface that can customize the filter
network traffic rule.
Features
-Use the bpf rule filter
-Multi-rule switching
-Real-time rate
-Total traffic
-Response UI
-Resource occupation is small, rust Written
-Support docker deployment
|
|
Bug fixes:
Double lines when pasting text from Linux to Windows
Address issues with modifiers and dead keys
Fix compilation issues for FreeBSD
Memory leaks in language sync and TLS functionality
Memory leaks in copy/paste and drag and drop functionality
Disable drag and drop by default
|
|
Changes in version 0.4.7.8 - 2022-06-17
This version fixes several bugfixes including a High severity security issue
categorized as a Denial of Service. Everyone running an earlier version
should upgrade to this version.
o Major bugfixes (congestion control, TROVE-2022-001):
- Fix a scenario where RTT estimation can become wedged, seriously
degrading congestion control performance on all circuits. This
impacts clients, onion services, and relays, and can be triggered
remotely by a malicious endpoint. Tracked as CVE-2022-33903. Fixes
bug 40626; bugfix on 0.4.7.5-alpha.
o Minor features (fallbackdir):
- Regenerate fallback directories generated on June 17, 2022.
o Minor features (geoip data):
- Update the geoip files to match the IPFire Location Database, as
retrieved on 2022/06/17.
o Minor bugfixes (linux seccomp2 sandbox):
- Allow the rseq system call in the sandbox. This solves a crash
issue with glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug
40601; bugfix on 0.3.5.11.
o Minor bugfixes (logging):
- Demote a harmless warn log message about finding a second hop to
from warn level to info level, if we do not have enough
descriptors yet. Leave it at notice level for other cases. Fixes
bug 40603; bugfix on 0.4.7.1-alpha.
- Demote a notice log message about "Unexpected path length" to info
level. These cases seem to happen arbitrarily, and we likely will
never find all of them before the switch to arti. Fixes bug 40612;
bugfix on 0.4.7.5-alpha.
o Minor bugfixes (relay, logging):
- Demote a harmless XOFF log message to from notice level to info
level. Fixes bug 40620; bugfix on 0.4.7.5-alpha.
|
|
2.6.0
- DOC: Fix formatting in configuration.txt to fix dconv
- CLEANUP: tcpcheck: Remove useless test on the stream-connector in tcpcheck_main
- CLEANUP: muxes: Consider stream's sd as defined in .show_fd callback functions
- MINOR: quic: Ignore out of packet padding.
- CLEANUP: quic: Useless QUIC_CONN_TX_BUF_SZ definition
- CLEANUP: quic: No more used handshake output buffer
- MINOR: quic: QUIC transport parameters split.
- MINOR: quic: Transport parameters dump
- DOC: quic: Update documentation for QUIC Retry
- MINOR: quic: Tunable "max_idle_timeout" transport parameter
- MINOR: quic: Tunable "initial_max_streams_bidi" transport parameter
- MINOR: quic: Clarifications about transport parameters value
- MINOIR: quic_stats: add QUIC connection errors counters
- BUG/MINOR: quic: Largest RX packet numbers mixing
- MINOR: quic_stats: Add transport new counters (lost, stateless reset, drop)
- DOC: quic: Documentation update for QUIC
- MINOR: quic: Connection TX buffer setting renaming.
- MINOR: h3: Add a statistics module for h3
- MINOR: quic: Send STOP_SENDING frames if mux is released
- MINOR: quic: Do not drop packets with RESET_STREAM frames
- BUG/MINOR: qpack: fix buffer API usage on prefix integer encoding
- BUG/MINOR: qpack: support bigger prefix-integer encoding
- BUG/MINOR: h3: do not report bug on unknown method
- SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
- SCRIPTS: make publish-release try to launch make-releases-json
- MINOR: htx: add an unchecked version of htx_get_head_blk()
- BUILD: htx: use the unchecked version of htx_get_head_blk() where needed
- BUILD: quic: use inttypes.h instead of stdint.h
- DOC: internal: remove totally outdated diagrams
- DOC: remove the outdated ROADMAP file
- DOC: add maintainers for QUIC and HTTP/3
- MINOR: h3: define h3 trace module
- MINOR: h3: add traces on frame recv
- MINOR: h3: add traces on frame send
- MINOR: h3: add traces on h3s init/end
- EXAMPLES: remove completely outdated acl-content-sw.cfg
- BUILD: makefile: reorder objects by build time
- DOC: fix a few spelling mistakes in the docs
- BUG/MEDIUM: peers/cli: fix "show peers" crash
- CLEANUP: peers/cli: stop misusing the appctx local variable
- CLEANUP: peers/cli: make peers_dump_peer() take an appctx instead of an stconn
- BUG/MINOR: peers: set the proxy's name to the peers section name
- MINOR: server: indicate when no address was expected for a server
- BUG/MINOR: peers: detect and warn on init_addr/resolvers/check/agent-check
- DOC: peers: indicate that some server settings are not usable
- DOC: peers: clarify when entry expiration date is renewed.
- DOC: peers: fix port number and addresses on new peers section format
- DOC: gpc/gpt: add commments of gpc/gpt array definitions on stick tables.
- DOC: install: update supported OpenSSL versions in the INSTALL doc
- MINOR: ncbuf: adjust ncb_data with NCBUF_NULL
- BUG/MINOR: h3: fix frame demuxing
- BUG/MEDIUM: h3: fix H3_EXCESSIVE_LOAD when receiving H3 frame header only
- BUG/MINOR: quic: Fix QUIC_EV_CONN_PRSAFRM event traces
- CLEANUP: quic: remove useless check on local UNI stream reception
- BUG/MINOR: qpack: do not consider empty enc/dec stream as error
- DOC: intro: adjust the numbering of paragrams to keep the output ordered
- MINOR: version: mention that it's LTS now.
|
|
Changelog:
Version 3.1.8
Thursday, April 28, 2022
Features:
+ knotd: optional automatic ACL for XFR and NOTIFY (see
'remote.automatic-acl')
+ knotd: new soft zone semantic check mode for allowing defective zone
loading
+ knotc: added zone transfer freeze state to the zone status output
Improvements:
+ knotd: added configuration check for serial policy of generated
catalogs
Bugfixes:
+ knotd/libknot: the server can crash when validating a malformed TSIG
record
+ knotd: outgoing zone transfer freeze not preserved during server reload
+ knotd: catalog UPDATE not processed if previous UPDATE processing not
finished #790
+ knotd: zone refresh not started if planned during server reload
+ knotd: generated catalogs can be queried over UDP
+ knotd/utils: failed to open LMDB database if too many stale slots
occupy the lock table
Version 3.1.7
Wednesday, March 30, 2022
Features:
+ knotd: new configuration items for restricting minimum and maximum zone
expire and retry intervals (see 'zone.expire-min-interval',
'zone.expire-max-interval', 'zone.retry-min-interval',
'zone.retry-max-interval') #785
+ knotc: added catalog information to zone status
Improvements:
+ knotd: better warning message if SOA serial comparison failed when
loading from zone file
+ knotc: zone status shows all zone events when frozen
+ keymgr: better error message is returned when importing SKR with
insufficient permissions
+ kdig: transfer status is also printed if failed
Bugfixes:
+ knotd: incomplete implementation of the Offline KSK mode in the IXFR
and DDNS processing
+ knotd: catalog zone accepts duplicate members via UPDATE #786
+ knotd: server crashes if catalog database contains orphaned member
zones
+ knotd: old journal is scraped when restoring just the zone file
+ knotd: some planned zone events can be lost during server reload
+ knotd: frozen zone gets thawed during server reload
+ knsupdate: missing section names in the show output
+ knsupdate: inappropriate log message if called from a script
Version 3.1.6
Tuesday, February 8, 2022
Features:
+ knotd: optional D-Bus notifications for significant server and zone
events (see 'server.dbus-event')
+ knotd: new submission configuration option for delayed KSK
post-activation (see 'submission.parent-delay')
+ knotc: new commands for outgoing XFR freeze (see 'zone-xfr-freeze' and
'zone-xfr-thaw')
+ kzonesign: added multithreaded DNSSEC validation mode (see '--verify')
Improvements:
+ kdig: trailing data in reply packet is accepted with a warning
+ kdig: XFR responses are checked if SOA owners match
+ knotd: failed remote operations are logged as info instead of debug
+ knsec3hash: added alternative and more natural parameter semantics
+ knsupdate: interactive mode is newly based on library Editline
+ Dockerfile: added UID argument to facilitate the use of unprivileged
container #783
+ doc: various fixes and improvements
Bugfixes:
+ libknot: inaccurate KNOT_DNAME_TXT_MAXLEN constant value #781
+ knotd: propagation delay not considered before DS push
+ knotd: excessive refresh retry delay when a few early attemps fail
+ knotd: duplicate KSK submission log message during a KSK rollover
+ kdig: dname letter case not preserved in XFR and Dnstap outputs
+ mod-cookies: missing server cookie in responses over TCP
Version 3.1.5
Monday, December 20, 2021
Features:
+ knotd: optional outgoing TCP connection pool for faster communication
with remotes (see 'server.remote-pool-limit' and
'server.remote-pool-timeout')
+ knotd: optional unreachable remote tracking to avoid zone events
clogging (see 'server.remote-retry-delay')
+ knotd: new ZONEMD generation mode for the record removal from the zone
apex #760 (see 'zone.zonemd-generate: remove')
+ mod-dnsproxy: new source address match option (see
'mod-dnsproxy.address')
+ scripts/probe_dump: simple mod-probe client
Improvements:
+ knotd: DS push sets DS TTL equal to DNSKEY TTL
+ knotd: extended zone purge error logging
+ knotd: zone file parsing error message was extended by the file name
+ knotd: improved debug log message when TCP timeout is reached
+ knotd: new configuration check for using the default number of NSEC3
iterations
+ knotd: new configuration check for insufficient RRSIG refresh time
+ mod-geoip: configuration check newly verifies the module configuration
file #778
+ kdig: option +notimeout or +timeout=0 is interpreted as infinity
+ kdig: option +noretry is interpreted as zero retries
+ python/probe: more detailed default output format
+ doc: many spelling fixes (Thanks to Josh Soref)
+ doc: various fixes and improvements
Bugfixes:
+ knotd: imperfect TCP connection closing in the XDP mode
+ knotd: TCP reset packets are wrongly checked for ackno in the XDP mode
+ knotd: only first zone name is logged for multi-zone control operations
#776
+ knotd: minor memory leak when full zone update fails to write to
journal
+ knotc: configuration check doesn't check a configuration database
+ mod-dnstap: incorrect QNAME case restore in some corner cases (Thanks
to Robert Edmonds) #777
|
|
Changelog:
6 May 2022: Wouter
- Merge #209: IXFR out
This adds IXFR out functionality to NSD. NSD can copy IXFRs from
upstream to downstream clients, or create IXFRs from zonefiles.
The options store-ixfr: yes and create-ixfr: yes can be used to
turn this on. Default is turned off. The options ixfr-number and
ixfr-size can be used to tune the number of IXFR transfers and
total data size stored. This is configured per zone, the IXFRs
are served to the hosts that are allowed to perform zone transfers.
And if TSIG is configured, signed with the same key. The content
is stored to file if a zonefile is configured for the zone, in
the zonefile.ixfr and zonefile.ixfr.2, .. files. They contain
readable text format. The number of IXFRs is num.rixfr in
statistics output, also per zone if per zone statistics are enabled.
If offline, nsd-checkzone -i can create ixfr files.
NSD already supports requesting IXFRs, this addition allows NSD
to serve IXFR transfers to clients.
NSD stops responding with NOTIMPL to IXFR requests, also for zones
that do not have IXFR enabled. The clients gets a full zone reply
or a status reply if the serial is up to date.
- set version to 4.5.0 for feature change.
- Tag for 4.5.0rc1 release. It became the 4.5.0 release on 13 May 2022.
14 April 2022: Wouter
- Update cirrus script FreeBSD version.
25 March 2022: Wouter
- Fix spelling error in comment in svcbparam_lookup_key.
2 March 2022: Wouter
- Fix code analyzer zero divide warning.
- Fix code analyzer large value with assertion.
- Fix another code analyzer zero divide warning.
- Fix code analyzer warning about uninitialized temp storage in loop.
10 February 2022: Wouter
- Tag for 4.4.0rc1 release. This became 4.4.0 release on 17 Feb 2022,
the code repository continues with version 4.4.1.
9 February 2022: Wouter
- Fix unit tests for nds-control-setup exit code and the
xfrd-tcp-max default.
7 February 2022: Wouter
- Merge #207 Sync nsd-control-setup with unbound-control-setup to
generate certificates with SANs.
28 January 2022: Wouter
- Fix #206: build with --without-ssl fails.
27 January 2022: Wouter
- current code branch continues as version 4.4.0, because of added
feature.
26 January 2022: Wouter
- Merge #193: Lower memory usage of the XFRD process by default.
Instead of preallocating all elements, they are allocated when used.
There are options for managing the memory usage, defaults are the
same as before. xfrd-tcp-max sets the number of sockets for tcp
connections that xfrd can make to download zone contents. And
xfrd-tcp-pipeline the number of simultaneous transfers over the
same connection.
12 January 2022: Wouter
- Fix to document nsd-checkzone -p in the man page for nsd-checkzone.
7 January 2022: Wouter
- Fix to change file mode before changing file owner for the
nsd-control unix socket file.
3 January 2022: Wouter
- Merge #204 from jonathangray: correct some spelling mistakes.
15 December 2021: Wouter
- Fix #200: nsd-checkzone succeeds even with incorrect serial in SOA
record.
2 December 2021: Wouter
- Fix socket_partitioning unit test for FreeBSD.
- Fix SVCB test to work around older dig with drill.
- Fix unit test to not syslog setlogin failures.
|
|
02/12/2022 Version 4.4.1
- fix support for piping PCAP files from STDIN (#708)
- build failures Debian/kfreebsd (#706)
- bus error when building on armhf (#705)
- typo fixes (#704)
- heap buffer overflow in tcpreplay (#703)
- double free in Juniper DLT (#702)
01/31/2022 Version 4.4.0
- remove obsolete FORCE_ALIGN support to fix macOS 11 compile (#695)
- add a security policy document (#689)
- ability to specify directory of pcap files (#682)
- incorrect PPS rate for long-running sessions (#679)
- option --skipbroadcast not working (#677)
- revert #630 to fix --multiplier issues (#674)
- gcc 9.3 compiler warnings (#670)
- installed netmap not automatically detected (#669)
- latest macOS SDK selected by default (#668)
- heap-buffer-overflow with flow_decode() (#665)
- add feature VLAN Q-in-Q (#625)
- add feature update Ethernet MAC on multicast IP (#563)
|
|
|
|
Upstream change log:
Enchancement:
* resource/reserved_ip: Add support for reserved IP label updates
Documentation:
* resource/instance: Fix typo
* resource/reverse_ip: Fix type
|
|
Upstream change log:
* Reserved IP: Add support for reserved IP label updates
* Bump govultr version from 2.17.1 to 2.17.2
|
|
Remove EOL BIND 9.11.
|
|
|
|
Switch to depends on bind916 instead of EOL bind911.
|
|
--- 9.16.30 released ---
5899. [func] Don't try to process DNSSEC-related and ZONEMD records
in catz. [GL #3380]
5890. [bug] When the fetches-per-server quota was adjusted
because of an authoritative server timing out more
or less frequently, it was incorrectly set to 1
rather than the intended value. This has been
fixed. [GL #3327]
5888. [bug] Only write key files if the dnssec-policy keymgr has
changed the metadata. [GL #3302]
5823. [func] Replace hazard pointers based lock-free list with
locked-list based queue that's simpler and has no or
little performance impact. [GL #3180]
|
|
Change log:
0.6.3 (2022-06-14)
=====
- Fix intltool lock file bug in make distcheck
- Fix read_config memory leaks
- Add option to execute command on icon click (!9)
- Add option to hide signal bar (!8)
- Prefer symbolic icons and fix icon color (!7)
- Icon now shows signal strength(!5)
- remove bogus close function
- autoconf: Some updates
- Translation Updates:
Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Bulgarian,
Catalan, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish,
Dutch, Eastern Armenian, English (Australia), English (Canada),
Estonian, Finnish, French, Galician, German, Greek, Hebrew,
Hungarian, Icelandic, Indonesian, Italian, Japanese, Kazakh, Korean,
Lithuanian, Malay, Norwegian Bokmål, Occitan (post 1500), Polish,
Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak, Slovenian,
Spanish, Swedish, Thai, Turkish, Ukrainian
|
|
|
|
This is needed as a dependency of the update of devel/ocaml-git.
|
|
|
|
Bump PKGREVISION
|
|
Bump PKGREVISION.
|
|
Bump PKGREVISION.
|
|
Bump PKGREVISION.
|
|
23.1.0
Fixing some regressions in 23.0:
- Fix global name of `zmq.EVENT_HANDSHAKE_*` constants
- Fix constants missing when using `import zmq.green as zmq`
Compatibility fixes:
- {func}`zmq.utils.monitor.recv_monitor_msg` now supports async Sockets.
- Fix build with mingw
23.0.0
Changes:
- all zmq constants are now available as Python enums
(e.g. `zmq.SocketType.PULL`, `zmq.SocketOption.IDENTITY`),
generated statically from zmq.h instead of at compile-time.
This means that checks for the *presence* of a constant (`hasattr(zmq, 'RADIO')`)
is not a valid check for the presence of a feature.
This practice has never been robust, but it may have worked sometimes.
Use direct checks via e.g. {func}`zmq.has` or {func}`zmq.zmq_version_info`.
- A bit more type coverage of Context.term and Context.socket
Compatibility fixes:
- Remove all use of deprecated stdlib distutils
- Update to Cython 0.29.30 (required for Python 3.11 compatibility)
- Compatibility with Python 3.11.0b1
Maintenance changes:
- Switch to myst for docs
- Deprecate `zmq.utils.strtypes`, now unused
- Updates to autoformatting, linting
- New wheels for PyPy 3.9
- Manylinux wheels for CPython 3.10 are based on manylinux2014
|
|
Upstream Changelog:
- Release v2.11.2 #patch
- Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.16.0 to 2.17.0 (#261)
- Add GPU fields to plan data source (#264)
- Bump govultr to v2.17.1 (#262)
- Fix acceptance tests (#260)
|
|
|
|
1.0.20210914
Unknown changes
|
|
|
|
Client to ICANN's Centralized Zone Data Service (CZDS) REST API using
both the documented and undocumented API endpoints. Should allow you
to perform almost any action you can in the web interface via this API.
|
|
needs to be converted from kmem to SIOCGIFDATA ioctl.
|
|
Release notes:
- Add GPU fields to plans printer (#269)
- Bump github.com/spf13/viper from 1.11.0 to 1.12.0 (#266)
- Bump govultr version from 2.16.0 to 2.17.1 (#267)
- Release v2.14.1 #patch
- Update instance and kubernetes tag to str pointer (#268)
|
|
Changes:
### 2022.05.18
* Add support for SSL client certificate authentication by coletdjnz and dirkf
* Adds `--client-certificate`, `--client-certificate-key`,
`--client-certificate-password`
* Add `--match-filter -` to interactively ask for each video
* `--max-downloads` should obey `--break-per-input`
* Allow use of weaker ciphers with `--legacy-server-connect`
* Don't imply `-s` for later stages of `-O`
* Fix `--date today`
* Fix `--skip-unavailable-fragments`
* Fix color in `-q -F`
* Fix redirect HTTP method handling by coletdjnz
* Improve `--clean-infojson`
* Remove warning for videos with an empty title
* Run `FFmpegFixupM3u8PP` for live-streams if needed
* Show name of downloader in verbose log
* [cookies] Allow `cookiefile` to be a text stream
* [cookies] Report progress when importing cookies
* [downloader/ffmpeg] Specify headers for each URL by elyse0
* [fragment] Do not change chunk-size when `--test`
* [fragment] Make single thread download work for `--live-from-start` by
Lesmiscore
* [hls] Fix `byte_range` for `EXT-X-MAP` fragment by fstirlitz
* [http] Fix retrying on read timeout by coletdjnz
* [ffmpeg] Fix features detection
* [EmbedSubtitle] Enable for more video extensions
* [EmbedThumbnail] Disable thumbnail conversion for mkv by evansp
* [EmbedThumbnail] Do not obey `-k`
* [EmbedThumbnail] Do not remove id3v1 tags
* [FFmpegMetadata] Remove `\0` from metadata
* [FFmpegMetadata] Remove filename from attached info-json
* [FixupM3u8] Obey `--hls-prefer-mpegts`
* [Sponsorblock] Don't crash when duration is unknown
* [XAttrMetadata] Refactor and document dependencies
* [extractor] Document netrc machines
* [extractor] Update `manifest_url`s after redirect by elyse0
* [extractor] Update dash `manifest_url` after redirects by elyse0
* [extractor] Use `classmethod`/`property` where possible
* [generic] Refactor `_extract_rss`
* [utils] `is_html`: Handle double BOM
* [utils] `locked_file`: Ignore illegal seek on `truncate` by jakeogh
* [utils] `sanitize_path`: Fix when path is empty string
* [utils] `write_string`: Workaround newline issue in `conhost`
* [utils] `certifi`: Make sure the pem file exists
* [utils] Fix `WebSocketsWrapper`
* [utils] `locked_file`: Do not give executable bits for newly created files by Lesmiscore
* [utils] `YoutubeDLCookieJar`: Detect and reject JSON file by Lesmiscore
* [test] Convert warnings into errors and fix some existing warnings by fstirlitz
* [dependencies] Create module with all dependency imports
* [compat] Split into sub-modules by fstirlitz, pukkandan
* [compat] Implement `compat.imghdr`
* [build] Add `make uninstall` by MrRawes
* [build] Avoid use of `install -D`
* [build] Fix `Makefile` by putnam
* [build] Fix `--onedir` on macOS
* [build] Add more test-runners
* [cleanup] Deprecate some compat vars by fstirlitz, pukkandan
* [cleanup] Remove unused code paths, extractors, scripts and tests by fstirlitz
* [cleanup] Upgrade syntax (`pyupgrade`) and sort imports (`isort`)
* [cleanup, docs, build] Misc fixes
* [BilibiliLive] Add extractor by HE7086, pukkandan
* [Fifa] Add Extractor by Bricio
* [goodgame] Add extractor by nevack
* [gronkh] Add playlist extractors by hatienl0i261299
* [icareus] Add extractor by tpikonen, pukkandan
* [iwara] Add playlist extractors by i6t
* [Likee] Add extractor by hatienl0i261299
* [masters] Add extractor by m4tu4g
* [nebula] Add support for subscriptions by hheimbuerger
* [Podchaser] Add extractors by connercsbn
* [rokfin:search] Add extractor by P-reducible, pukkandan
* [youtube] Add `:ytnotifications` extractor by krichbanana
* [youtube] Add YoutubeStoriesIE (`ytstories:<channel UCID>`) by coletdjnz
* [ZingMp3] Add chart and user extractors by hatienl0i261299
* [adn] Update AES key by elyse0
* [adobepass] Allow cookies for authenticating MSO
* [bandcamp] Exclude merch links by Yipten
* [chingari] Fix archiving and tests
* [DRTV] Improve `_VALID_URL` by vertan
* [facebook] Improve thumbnail extraction by Wikidepia
* [fc2] Stop heatbeating once FFmpeg finishes by Lesmiscore
* [Gofile] Fix extraction and support password-protected links by mehq
* [hotstar, cleanup] Refactor extractors
* [InfoQ] Don't fail on missing audio format by evansp
* [Jamendo] Extract more metadata by evansp
* [kaltura] Update API calls by flashdagger
* [KhanAcademy] Fix extractor by rand-net
* [LCI] Fix extractor by MarwenDallel
* [lrt] Support livestreams by GiedriusS
* [niconico] Set `expected_protocol` to a public field
* [Niconico] Support 2FA by ekangmonyet
* [Olympics] Fix format extension
* [openrec:movie] Enable fallback for /movie/ URLs
* [PearVideo] Add fallback for formats by hatienl0i261299
* [radiko] Fix extractor by Lesmiscore
* [rai] Add `release_year`
* [reddit] Prevent infinite loop
* [rokfin] Implement login by P-reducible, pukkandan
* [ruutu] Support hs.fi embeds by tpikonen, pukkandan
* [spotify] Detect iframe embeds by fstirlitz
* [telegram] Fix metadata extraction
* [tmz, cleanup] Update tests by diegorodriguezv
* [toggo] Fix `_VALID_URL` by ca-za
* [trovo] Update to new API by nyuszika7h
* [TVer] Improve extraction by Lesmiscore
* [twitcasting] Pass headers for each formats by Lesmiscore
* [VideocampusSachsen] Improve extractor by FestplattenSchnitzel
* [vimeo] Fix extractors
* [wat] Fix extraction of multi-language videos and subtitles by elyse0
* [wistia] Fix `_VALID_URL` by dirkf
* [youtube, cleanup] Minor refactoring by coletdjnz, pukkandan
* [youtube] Added piped instance urls by JordanWeatherby
* [youtube] Deprioritize auto-generated thumbnails
* [youtube] Deprioritize format 22 (often damaged)
* [youtube] Fix episode metadata extraction
* [zee5] Fix extractor by Ashish0804
* [zingmp3, cleanup] Refactor extractors
|