Age | Commit message (Collapse) | Author | Files | Lines |
|
ORBit2-2.14.14
- portability
+ Fix build on win32 (Tor)
+ Mac OS/X fixes (Jules Colding)
- bug fixes
+ use ORBIT_SOCKETDIR to propagate the socket dir to children
wherever possible: has two benefits: speeds up ORBit2 launch,
and allows root owned apps to talk to the user's AT. (Mike Gorse)
+ other linc2 fixes (Michael, Mike)
+ Cleanups (JP, Jules Colding, dmacks at netspace org)
|
|
=========================== 0.8.11 ========================
2008-06-02 Tor Lillqvist <tml@novell.com>
Bug 536165 - Make libIDL correctly parse cl's pre-processor output
* lexer.l: Further change needed when using MSVC's cl.exe as the
preprocessor. Patch by Marcelo Vanzin.
2008-05-19 Tor Lillqvist <tml@novell.com>
Bug 522697 - Patch: make libIDL work with Microsoft's compilers
Patch by Marcelo Vanzin, applied with modifications.
* configure.in: Define Automake confitional OS_WIN32.
* Makefile.am: Use --export-symbols libIDL.def on Windows.
* Makefile.msc.in: Significant changes. Build a DLL with the same
name as libtool does. Use pkg-config.
* util.c: Make it work also in the !HAVE_CPP_STDIN && !HAVE_SYMLINK case.
* util.h: Make __IDL_tmp_filename const.
* include/libIDL/IDL.h.in: Rework the dllimport logic. Use
LIBIDL_VAR to decorate imported variables, similar to
GLIB_VAR. Unlike Marcelo's patch, I decided not to decorate
functions. Maybe later I can be convinced it would be a good idea,
but for now just use the .def file to export them and let them be
imported automatically.
* README.win32
* libIDL.def: Update.
2008-03-18 Christian Persch <chpe@gnome.org>
* configure.in: Update glib version req. Bug #517088, patch by
Mart Raudsepp.
|
|
Version 1.0.1
(August 30 2008, from branches/release/1.0.x)
svn://svn.gna.org/svn/clive/tags/1.0.1
User-visible changes:
* minor startup performance improvements
* config: warn/error messages now contain absolute path to config file
* fixed: VGoogle: embedded URL -> video page URL conversion (patch #1097)
* fixed: scan: progress is now immediately flushed to stdout
* console: renamed commands
- q_r_file -> q_import
- q_w_write -> q_export
- q_r_paste -> q_paste
- q_r_recall -> q_recall
Developer-visible changes:
* Youtube: parser no longer attempts to "guess" whether video is available
- Had a long history of detecting errors incorrectly
- Ignorant of non-English errors.
* ~/.clive/passwd: permissions are set to 0600
* added: HACKING file
* import statements are now used conservatively to reduce overhead
- clive.modules.Modules caches the most commonly used imports
* runtime options are no longer passed and copied back and forth
* clive.modules.Modules is now a singleton
* clive.opts.Options is now a singleton
* added: src/clive/singleton.py
* Makefile.am: clean-local: remove dist/ subdir
Known issues:
* Myvideo extraction fails ("error: extraction url not found")
|
|
- Security-related bugs in the NCP dissector, zlib compression code, and
Tektronix .rf5 file parser have been fixed.
- WPA group key decryption is now supported.
- A bug that could cause packets to be wrongly dissected as "Redback
Lawful Intercept" has been fixed.
This update address the security vulnerability reported in CVE-2008-3146.
|
|
- Prevent crash bug in Winbind caused by a race condition
when a child process becomes unresponsive.
- Fix interactive password prompting in the "net" command.
- Documentation clarifications and typographical fixes.
- Correct issues with running Winbind running on a Samba PDC.
- Problems with trusted Windows 2008 domains.
- Difficulty joining an NT4 or Windows 2000 AD domain.
|
|
|
|
GCC 3.x. This should fix PR pkg/39421.
|
|
minor bugfixes
|
|
DIST_SUBDIR dance. Noted by joerg.
|
|
Changes since 3.0.708:
- Split --debug into --verbose and --no-daemon
- Include launchd config and instructions for running darkstat
on Mac OS X. Contributed by Damien Clauzel.
- Implement PPPoE decoding on ethernet iface. (--pppoe)
- Web: Add automatic reload button. Thanks Dennis!
- Web: Add a graph legend with min/avg/max.
- Web: Remove hashtable stats pages.
|
|
Pkgsrc changes:
o Canonicalize HOMEPAGE
o Adjust dependencies to match Makefile.PL
Upstream changes (at least I *think* these are the ones for 0.99 and 1.00):
======================================
9999-99-99 99:99:99.999999Z (untagged)
======================================
2007-01-06 18:12:47 (r64) by rcaputo; DNS.pm M
By the power of PAUSEskull, this is a fine morning! Release 1.00!
2007-01-06 18:11:52 (r63) by rcaputo; DNS.pm M
Expose the underlying Net::DNS::Resolver with a get_resolver()
accessor. Thanks to Chris Williams for kinda suggesting it. :)
2006-11-06 19:23:35 (r62) by rcaputo; Makefile.PL M
Set a LICENSE. Cheap kwalitee points!
2006-10-17 16:35:24 (r61) by rcaputo; t/06_hosts.t M
Don't try to call a method on a failed request. Resolves rt.cpan.org
21190 by Alexandr Ciornii.
2006-10-17 15:05:34 (r60) by rcaputo; Makefile.PL M
Some rt.cpan.org tickets refer to issues in Net::DNS. Require the
latest version of that dependency in the hopes that some things are
fixed. Too bad I don't have test cases for those issues... there's no
way for me to tell if anything's fixed by this simple change.
=========================
2006-05-21 20:45:46 v0_99
=========================
2006-05-21 20:45:11 (r58) by rcaputo; DNS.pm M
Bump up the version.
2006-05-21 20:44:39 (r57) by rcaputo; DNS.pm M
Fix shutdown(). It was not performing nearly enough cleanup.
Replace some post() calls with call() to avoid race conditions. In
general, method interfaces should use call() rather than post() so
that they affect internal structures synchronously.
2006-05-21 20:43:08 (r56) by rcaputo
t/02_tag_args.t M; t/03_api_3.t M; t/05_api_4.t M; t/06_hosts.t M
Turn on ASSERT_DEFAULT for some of the tests. Add _stop handlers so
they don't fail with all POE asserts on.
2006-03-24 03:58:51 (r55) by rcaputo; DNS.pm M
Belatedly bump up the version.
|
|
Pkgsrc changes:
o Add commented-out HOMEPAGE as an addition, using search.cpan.org
Upstream changes:
Changes for 1.16
- Fixed minor bug in scanner.t where the number of tests
to skip when nmap was not found was incorrect.
- Repackaged to remove all the ._* files from the package.
- Fixed POD errors and added more documentation
Changes for 1.14
- Added cache_scan() to save the output of a parsescan()
to a file before parsing.
- Added new tests for servicefp fingerpriting and cache_scan().
- Ran PerlTidy against module and other tools
- Updated documentation
Changes for 1.13
- Added fingerprint() to Service object (thanks jpomiane)
- Added documentation.
Changes for 1.12
- Added references to Google Code Project page.
Changes for 1.11
- Added parsing of distance information.
- Fixed bug #1671876 on tcp_service() always returning null
- Added ignoring of taskend,taskbegin and taskprogress information.
- Added tests for nmap 4.20.
- Changed lisence to MIT.
- Points to new website http://nmapparser.wordpress.com
Changes for 1.06
- Added patch for new OS fingerprint (Thanks Okan Demirmen)
- New os_fingerprint() method for Nmap::Parser::Host::OS
- Updated documentation
- Updated scan.pl to also read xml files (good for debugging)
Changes for 1.05
- Major speed improvements (less compile time)
- Major reduction in unwanted memory usage
- Redundant functions (or less used functions) are now created
dynamically. (AUTOLOAD)
- Documentation fixes
Changes for 1.00
- To see the changes, please read over the new documentation
- Internal code is much (MUCH) cleaner and readable
- removed 'ducttape' fixes and made stable & roubust changes
- improved performance, removed unwanted code (legacy)
- complete overhaul of internal code - new Framework
- support for IPv6 addresses
- data overwrite (overflow) protection
- better support for multiple instances
- fixed some minor bugs
- process owner information obtained
- all OS accuracy information obtained
- some functions now take new parameters (more concise)
- some functions renamed for clarity
- new shortcut functions (for doing repetitive tasks easier)
- Removed parsing filters (finally)
- All indexes now start at 0 (not at 1).
- Removed internal OS generic matching function since this is given by
nmap now in the osclass tags
- Removed the use of constants for indexes
- Nmap::Parser::Host::Service object
provides OO interface to service information for a given port
- Nmap::Parser::Host::OS object
provides OO interface to OS signature information for a given host
- Nmap::Parser::Session replaces old Nmap::Parser::ScanInfo package
- Nmap2SQLite security script included
- removed old security tools
- rewrote scan.pl (from scanhost.pl)
- rewrote old tools to fit new framework
- Fully updated documentation
|
|
Pkgsrc changes:
o Canonicalize MASTER_SITES and HOMEPAGE
Upstream changes:
1.03 Fri Mar 21 17:20:00 CET 2008
- added support for IP_HDRINCL with IPv6 raw sockets (Linux only)
=> in fact, it should have worked before, but it appears to be a regression
1.02 Tue Feb 19 12:11:21 CET 2008
- bugfix: due to Socket6 update, AF_INET6 definition has changed
1.01 Sun Feb 17 19:08:15 CET 2008
- update: portability patches for other Unix systems (untested), concerning
IP_HDRINCL constants and the like
- update: license string (lc(Artistic)), to make CPANTS happy
|
|
No version bump.
|
|
Pkgsrc changes:
o Add a patch to handle all BSD systems the same in test 03
o Added a commented-out build dependency, Test::Distribution
does not appear to work for this package (and is optional anyway)
Upstream changes:
2008.01.01 - 0.16 - Sebastien Aperghis-Tramoni (SAPER)
- [BUGFIX] A typo prevented the new function names from working.
- [TESTS] Added new tests: 21-next_ex.t, 22-open.t, 23-srcstr.t,
50-poe-component-pcap.t
- [TESTS] Added support for user prefered device. See README.
- [TESTS] Improved small bits of the tests here and there.
2007.12.02 - 0.15 - Sebastien Aperghis-Tramoni (SAPER)
- [BUGFIX] CPAN-RT#30745: Fix WinPcap support.
- [BUGFIX] CPAN-RT#25076: Fix next_ex().
- [API] Now providing "pcap_"-prefixed aliases for all functions.
Documentation was changed to use these names instead of the old ones.
- [CMD] pcapinfo(1) no longer need IO::Interface.
- [TESTS] CPAN-RT#30903: Fix t/03-openlive.t failure on Linux.
- [DOC] CPAN-RT#27369: Several documentation fixes.
- [DOC] CPAN-RT#31111: Document that pcap_stats() does not work
on savefiles.
|
|
- KES reported a build problem. Turns out I need to install gtk-1.2
on my development sytem, otherwise my release script causes the
build to break.
- changed some docs to advertise the new mailing list.
- added documentation for the Mac OS X compilation problem.
- added -Wno-pointer-sign to the compiler options.
- Nico Lichtmaier's cleanup-gtk patch. (now mtr uses a more modern
dialect of gtk).
- as possible after opening the sockets, it still had some
sprintf calls, which have now been converted into snprintf.
|
|
Changes unknown, but this version starts and runs on amd64.
|
|
Noticed by Zafer Aydogan via private mail.
|
|
pkgsrc changes:
- Move more definitions to Makefile.common, drop some that had default values.
- Depend on py-OpenSSL and py-ZopeInterface.
- Add do-test target.
- Remove patch-aa and install all bin/ script with plain names, not with
${PYVERSSUFFIX} appended. setup.py is now much, much simpler, and rewriting
the patch would be difficult. It doesn't matter anyway, as I tried really
hard to install py-OpenSSL for both python24 and python25 and it just
doesn't work.
|
|
|
|
Rewrite errlist processing to include the full message, not just the
first word.
|
|
Bug Fixes:
- 1870957: Wrong sign could cause out-of-bounds read and potentially a crash.
- Firewalled status was not re-verified after a port change if the previously
used port was open.
- Fixed issue that caused the local peer cache to degenerate.
Improvements:
- Client-side support for tigertree hashes (TTH/THEX).
- Replaced navigation tree by tabs.
- Redesigned download user-interface to make it more accessible.
- Added some selectable pre-defined search filters.
- Bitzi tickets are displayed in full raw indented XML.
- Display Bitzi and ShareMonkey URLs as search result details.
- Topless mode is available at run-time via command-line switch.
- Added default shared filename extensions:
.7z, .bittorrent, .oga, .ogv, .spx, .tbz2
- Removed default shared filename extensions: .doc
- Updated translations: Japanese, Norwegian Bokmal, French.
Under the hood:
- Changed default to dual use of IPv4 and IPv6 instead of IPv4-only.
- Support the "as" (Alternate Source) key in magnet links.
- Eszett is finally normalized to "ss" in search queries.
- Avoid display updates for elements not currently visible.
- Take full advantage of persistent HTTP connections to fetch multiple
files from the same peer through over the same connection if scheduling
permits.
- Improved TLS support and blocking detection.
- Updated list of hostile IP adress ranges, bogons, Geo-IP data,
spam patterns and spam samples.
|
|
|
|
Based on PPR 38486 by Peter Eisch.
http://www.twitter.com provides a web 2.0 type of ubiquitous presence.
This module allows you to set your status, as well as review the statuses of
your friends.
|
|
significant feature enhancements; it also now builds on OpenSolaris
(tested with NexentaOS by development community).
I urge all users to upgrade.
A _partial_ list of changes:
- Added and/or updated Danish, Greek, Spanish, Catalan,
Norwegian Nynorsk, Bulgarian, French, Catalan, and Japanese
translations.
- Man page fixes.
- Fixed: numCommand is less than the value specified in -C option.
- Myriad bug fixes.
- Now uses name attribute in Metalink as local filename in
BitTorrent downloads. BUG#2033999
- Fixed memory leaks in test code.
- Fixed wrong argument passing to BitfieldMan::isBitSet()
- Initialized _directIOAllowed
- Fixed memory leak in gzip decoder and metalink parser state
machine.
- Plug many other memory leaks and fix unmatch malloc/free calls.
- Removed max chunk size check. This change fixes BUG#2040169
- Fixed the bug that causes segmentaion fault when resuming
download using metalink without size tag. Reproducible only
using HTTP URI.
- Removed writable check when socket's send buffer is full in
BitTorrent downloads to lower CPU usage.
- Fixed broken gzip inflation.
Turn off segmented downloading if gzip content is smaller than
or equal to 1MiB and inflate the data on the fly, because HTTP
response header doesn't contain the length of inflated
file we can't determin where the chunk of data should be written.
On the other hand, if gzip content is larger than 1MB, then
turn off on the fly inflation, because some servers returns
"content-type: gzip" for *.tgz, *.gz files.
- Added gzip decompressor via libz.
- Cache last calculated average download/upload speed.
- Supported absolute/relative path in Location header field.
- Use File::exists() instead of File::isFile() to allow non-
regular file such as block special files.
- Added a message "aria2 doesn't verify signature" to log message
when signature file is saved.
- Added the ability to save signature when download is completed
if signature is available. The filename of signature file is
the path to download file followed by ".sig". If it already
exists, then signature will not be saved.
- Improve accuracy of documentation and rename some options to be
more descriptive of their functions/purposes.
- Added the ability to retrieve signature from Metalink file.
A retrieved signature is stored in Signature class and it is
held by DownloadContext class. Note that aria2 doesn't
verify signature.
- Added --bt-seed option. If --bt-seed=true is given at the
command-line, aria2 seeds previously downloaded files
without validating piece hashes.
- Fixed the compile error on Nexenta OS(GNU/Solaris OS).
(Don't define `struct addrinfo' when __sun is defined)
- Fixed the bug that UTF-8 encoded URL is not URL-encoded
- Properly differentiate between ftp errors and actual zero-byte
files (now supports ftp servers which do not recognize SIZE
raw command).
|
|
|
|
of the modules doesn't compile against the portable locking code. Doesn't
affect other platforms, so no revision bump.
|
|
Pkgsrc changes:
o Canonicalize HOMEPAGE
o Add USE_LANGUAGES=c
Upstream changes:
2008-08-17 Hajimu UMEMOTO <ume@mahoroba.org>
* Socket6.pm: Bump version number to 0.21.
* Socket6.xs: Make it buildable on the following environment by
defining WINVER as 0x0501:
- Windows XP SP3
- ActivePerl-5.10.0.1003-MSWin32-x86-285500
- MinGW-5.1.4
- nmake 9.00.21022.08 (shipped with VisualStudio 2008 Express)
Submitted by: "IWAMURO Motonori" <vmi@nifty.com>
|
|
Pkgsrc changes:
o Adjust dependencies to match the package's Makefile.PL
Upstream changes:
0.50 Patches by Michael Hendrick to enable compression and use
of 'warn' instead of print STDERR.
0.49 Patches by Michael Hendrick and Tim Keefer.
0.48 Changes ebay-search.pl to add --currency and --country
0.47 Added more Scripts
0.46 Fixed POD coverage; changed some scripts in a minor way
0.45 Updated listing script to submit picture URL.
0.44 Added dependency on DateTime::Precise
0.43 Changed stuff for new way of specifying pictures when listing items
0.42 Added _last_text variable to have the last original XML response value
|
|
0.44 Thu Mar 27 08:35:59 GMT 2008
- fix bug with storing files consisting of "0" (thanks to
Martin Atkins)
|
|
* better master/slave secrets documentation
* first cut at mtr integration
* use localtime to construct the rawlog filename
New in 2.4:
* SmokeTrace: An Ajax Traceroute tool.
* The 'blazemode' option for the FPing probe, so that the first (slow) ping packet can be ignored.
Ok'ed bouyer@
|
|
Version 1.0.0
(August 9 2008, from branches/release/1.0.x)
svn://svn.gna.org/svn/clive/tags/1.0.0
User-visible changes:
- Major new features:
* added: support for encrypted passwords, see clive(1) (--youtube,--dmotion)
* added: clive-passwd utility for storing encrypted login passwords
* added: --passwd option for using encrypted login passwords
- Minor improvements:
* fixed: some errors were still using "--youtube-user" and "--dmotion-user"
* --version: print pycrypto, pysqlite and newt (? if found, otherwise -)
Developer-visible changes:
* urlgrabber is now the only prerequisite that is needed to run clive:
features that req. other modules are disabled if a module is not found
* added: prerequisite pycrypto
* added: man/clive-passwd.1
* added: src/clive/passwd.py
* added: run-passwd.py
* added: src/clive/modules.py
* fixed: sqlite3 ImportError is now handled (src/clive/cache.py)
* removed: *all* bundled packages
- each dep. is best installed separately for security reasons
* removed: --with-installed-PACKAGE configure options
- now obsolete due to above change
* removed: obsolete configuration scripts
- acinclude.m4, config.guess, config.h.in, config.sub, depcomp, ltmain.sh
* removed: obsolete src/clive/*.py.in files
- src/clive/__init__.py.in remains
* cleanups: INSTALL, README, NEWS, ChangeLog, TODO, configure.ac
* configure.ac: if trunk: use revision for release date string
Version 0.5.0
(August 5 2008, from branches/release/0.5.x)
svn://svn.gna.org/svn/clive/tags/0.5.0
New features, enhancements:
* Added support for break.com
Thanks to Jan Hulsbergen <afoo@gmail.com> for the initial patch
* Added CHANGES file (ChangeLog and NEWS files are no longer updated)
* Added xine,mplayer detection (--write-conf)
* Added --no-login option
* Added --no-proxy option
* Added --no-confirm option (closes sr #2065)
* Replaced --$host-(user|pass) with --$host=$username:$password
* Replaced config $host_(user|pass) with $host_login="$username:$password"
* Revived AC_PROG_RANLIB in configure.ac
* Tweaked program description
Bugfixes
* --check-update: flawed version checking (e.g. 0.5.0 < 0.4.20)
Other
* Trackers now allow anononymous submissions
https://gna.org/projects/clive
* Added clive-users mailing list (General questions and discussion)
https://lists.sourceforge.net/lists/listinfo/clive-users
At the moment anything clive related can be discussed here including
development related issues. clive-dev is likely to be added later.
* Release branches are now used in the development
svn://svn.gna.org/svn/clive/branches
svn://svn.gna.org/svn/clive/trunk
svn://svn.gna.org/svn/clive/tags
* Release numbering is no longer as ad hoc as before
Starting with this release, the project follows the following
release numbering strategy:
major.minor.micro
major = Expected to have new features or entire feature sets
marks compatibility boundaries - may be forward/backward incompatible
minor = New features, usually only few at once
must be backward compatible, not necessarily forward compatible
micro = Bug fixes only or minor enhancements to existing features
must be forward/backward compatible, no new features
|
|
an outdated pkg_check.
|
|
|
|
- avoid returning large fileids on Windows, for better compatibility
with clients such as Linux 2.6.24
- try to prevent races between READDIR and removal of files
|
|
2008/08/04: version 2.9.6 = tag release-2-9-6
6599: Allow values lower than max_upload_slots for BT-max_bt_uploaders
2008/07/29
6593: CryptoPP performance fix for ARM (Marc Pignat)
6592: HTML: Fix invalid html respond when login is invalid
2008/07/17
6571: Runinfo: Include DirectConnect in list of enabled nets
2008/07/02
6558: Fix text relocation warnings on hardened distributions (Davide Pesavento)
6557: BT: Send correct downloaded value when download is stopped to tracker
(Fox Mulder)
|
|
The changes in version 1.23 are
* Support for MIPS, x86_64, sparc, alpha, arm, FreeBSD
* Fix serious sign-extension error in handling IP addresses
* RTC support can be excluded at compile time
* Make sources gcc-4 compatible
* Fix various compiler warnings
* Handle fluctuations in peer distance better.
* Fixed handling of stratum zero.
* Fix various problems for 64-bit systems
* Flush chronyc output streams after each command, to allow it to be
driven through pipes
* Manpage improvements
The changes in version 1.21 are
* Don't include Linux kernel header files any longer : allows chrony to
compile on recent distros.
* Stop trying to use RTC if continuous streams of error messages would
occur (Linux with HPET).
|
|
Updates net/Geomyidae[1] gopher server package to current release (0.12)
which includes the following changes:
- fixes script.cgi user/group permissions security issue [2]
- changes the default logging level from 7 to 15
- updates files/Geomyidae.sh and Geomyidae.8
[1] http://www.r-36.net/
[2] patch by jneitzel@freeshell.org
(I only tested install and deinstall -- reed.)
|
|
|
|
1.10 Fri Jul 25 01:39:08 PDT 2008
- lots of small fixes
1.1001 Fri Aug 1 01:58:09 PDT 2008
- nope, still didn't get it right. left a stray dependency.
changed my version system because I seem to do this alot. now
releasing version 1.1001. I'm hoping I don't have to release
version 1.1002 tomorrow. :)
|
|
CVE-2008-3337 that we already had in patch-ac.
|
|
mailformed queries instead of just dropping them (as this facilitates
DNS spoofing attacks). Bump PKGREVISION.
|
|
--------------------------
From: Steven Bakker steven.bakker ams-ix.net
* globally disable __DIE__ handler in eval using $^S check
* updated to SNMP_Session 1.12
From: Tobi
* make SNMP_Session.pm work on windows even when a __DIE__ handler ist
installed.
|
|
instead of custom setuid root installation.
Part of fixes PR 15107.
|
|
|
|
Pkgsrc changes:
o Add a commented-out HOMEPAGE using search.cpan.org
Upstream changes:
1.34 August 4th 2008
- Add Geo::IP::Record::region_name to the PurePerl API (Boris Zentner)
- Add missing record_by_name function to the PurePerl API
(Boris Zentner)
- Add missing country/country code 'Other' for the pureperl
fallback (Boris Zentner)
- Fix trash of $_ in Geo::Mirror (Boris Zentner)
- Geo::Mirror die, if open failed (Boris Zentner)
- Fix pureperl time_zone for countries with region codes,
but only one time_zone (Boris Zentner)
- Add continent_code to the pureperl and C API (Boris Zentner)
- minimum perl version is 5.6 now (Boris Zentner)
|
|
Patch submitted by Roy Marples.
For more information about the problem see:
http://bugzilla.gnome.org/show_bug.cgi?id=453070
|
|
suggested by Daryl Collins <daryl@internode.com.au> (but revamped and expanded)
|
|
Fix non-priv'ed builds which should fix PR 39260
2008-07-24 - Snort 2.8.2.2
[*] Improvements
* Fix issue with evaluating PCRE rule options with /U modifier that
are followed by a relative content rule option.
* Fix issue with dsize range check.
2008-06-12 - Snort 2.8.2.1
[*] Improvements
* Fix support for pass rules that sometimes did not take precedence
over alert and/or drop rules.
|
|
--- 9.5.0-P2 released ---
2406. [bug] Some operating systems have FD_SETSIZE set to a
low value by default, which can cause resource
exhaustion when many simultaneous connections are
open. Linux in particular makes it difficult to
increase this value. To use more sockets with
select(), set ISC_SOCKET_FDSETSIZE. Example:
STD_CDEFINES="-DISC_SOCKET_FDSETSIZE=4096" ./configure
(This should not be necessary in most cases, and
never for an authoritative-only server.) [RT #18328]
2405. [cleanup] The default value for dnssec-validation was changed to
"yes" in 9.5.0-P1 and all subsequent releases; this
was inadvertently omitted from CHANGES at the time.
2404. [port] hpux: files unlimited support.
2403. [bug] TSIG context leak. [RT #18341]
2402. [port] Support Solaris 2.11 and over. [RT #18362]
2401. [bug] Expect to get E[MN]FILE errno internal_accept()
(from accept() or fcntl() system calls). [RT #18358]
2399. [bug] Abort timeout queries to reduce the number of open
UDP sockets. [RT #18367]
2398. [bug] Improve file descriptor management. New,
temporary, named.conf option reserved-sockets,
default 512. [RT #18344]
2397. [bug] gssapi_functions had too many elements. [RT #18355]
2396. [bug] Don't set SO_REUSEADDR for randomized ports.
[RT #18336]
2395. [port] Avoid warning and no effect from "files unlimited"
on Linux when running as root. [RT #18335]
2394. [bug] Default configuration options set the limit for
open files to 'unlimited' as described in the
documentation. [RT #18331]
2393. [bug] nested acls containing keys could trigger an
assertion in acl.c. [RT #18166]
2392. [bug] remove 'grep -q' from acl test script, some platforms
don't support it. [RT #18253]
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
[RT #18147] [RT #18258]
|