Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
|
|
- Removed the dependency on the IO::Socket::INET and IO::Socket::INET6
modules. The IO::Socket module is now used for all socket objects.
- The port information can now be included as part of the transport
address specified with the session() Transport Domain arguments.
- Added support for specifying the scope zone index for IPv6 addresses
as described in RFC 4007 - "IPv6 Scoped Address Architecture".
- The default value for the agent-addr in SNMPv1 Trap-PDUs is now the
IP address associated with the interface on which the trap will be
transmitted.
- Support of the AES privacy protocol was updated to be compliant with
RFC 3826 - "The Advanced Encryption Standard (AES) Cipher Algorithm
in the SNMP User-based Security Model".
- Corrected an issue where any non-blocking SNMPv3 message queued prior
to calling snmp_dispatcher() was sent with an empty contextEngineID.
- The first SNMPv3 discovery message is again being sent with a zero-
length msgUserName as suggested by RFC 3414.
- All sockets are now flagged as non-blocking to prevent a possible
deadlock due to an interaction between recv() and select().
- The sending of messages is now bounded by the receive processing rate
to avoid receive buffer overflows.
- The return value of select() is now checked for both "undef" and -1.
- The "usm.t" tests are now skipped if any of the non-core modules
required by the Net::SNMP::Security::USM module are not present.
|
|
|
|
POE::Component::SNMP uses the Net::SNMP module.
|
|
I got few private comments that one should not use buildlink3.mk but the
standard DEPENDS statement because we do not link against libraries
in this case.
|
|
displayed by man(1).
|
|
|
|
|
|
The netpipes package is a collection of utilities that makes TCP/IP
streams usable in shell scripts.
|
|
|
|
${VARBASE}/db/nsd.db on all platforms and use user/group nsd for the
daemon to run as. Install sample configuration without .sample
extension. Take maintainership. Bump revision.
|
|
|
|
|
|
|
|
|
|
for INSTALL_LIB. As the libraries are installed with the correct
ownership now (LIBOWN and LIBGRP), bumped the PKGREVISION.
|
|
|
|
|
|
|
|
so increment PKGREVISION.
|
|
(NetBSD Version 299000000, not 200040000
|
|
|
|
|
|
|
|
|
|
http://www.security.nnov.ru/Jdocument889.html
Patch from me, reviewed by Adrian Portelli
Bump pkgrevision.
|
|
A lot of changes and bug fixes, including fix for the following
security problem:
http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
|
|
|
|
|
|
it still uses AF_INET6, sockaddr_in6, and getaddrinfo().)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Changes:
2.0.5:
======
- Fixed bug in Linux get_default_gateway function
introduced in 2.0.4, which would cause redirect-gateway
on Linux clients to fail.
- Restored easy-rsa/2.0 tree (backported from 2.1 beta
series) which accidentally disappeared in
2.0.2 -> 2.0.4 transition.
2.0.4:
======
- Security fix -- Affects non-Windows OpenVPN clients of
version 2.0 or higher which connect to a malicious or
compromised server. A format string vulnerability
in the foreign_option function in options.c could
potentially allow a malicious or compromised server
to execute arbitrary code on the client. Only
non-Windows clients are affected. The vulnerability
only exists if (a) the client's TLS negotiation with
the server succeeds, (b) the server is malicious or
has been compromised such that it is configured to
push a maliciously crafted options string to the client,
and (c) the client indicates its willingness to accept
pushed options from the server by having "pull" or
"client" in its configuration file (Credit: Vade79).
CVE-2005-3393
- Security fix -- Potential DoS vulnerability on the
server in TCP mode. If the TCP server accept() call
returns an error status, the resulting exception handler
may attempt to indirect through a NULL pointer, causing
a segfault. Affects all OpenVPN 2.0 versions.
CVE-2005-3409
- Fix attempt of assertion at multi.c:1586 (note that
this precise line number will vary across different
versions of OpenVPN).
- Added ".PHONY: plugin" to Makefile.am to work around
"make dist" issue.
- Fixed double fork issue that occurs when --management-hold
is used.
- Moved TUN/TAP read/write log messages from --verb 8 to 6.
- Warn when multiple clients having the same common name or
username usurp each other when --duplicate-cn is not used.
- Modified Windows and Linux versions of get_default_gateway
to return the route with the smallest metric
if multiple 0.0.0.0/0.0.0.0 entries are present.
2.0.3:
======
- openvpn_plugin_abort_v1 function wasn't being properly
registered on Windows.
- Fixed a bug where --mode server --proto tcp-server --cipher none
operation could cause tunnel packet truncation.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
and now bundled in ruby18-base pacakges.
|
|
Bump PKGREVISION.
|
|
|
|
25.10.2005 Skype for Linux version 1.2.0.18
* bugfix: fixed a bug in networking code that made Skype
vulnerable to remotely induced crash (Skype Security Bulletin
SKYPE-SB/2005-003)
22.09.2005 Skype for Linux version 1.2.0.17
* change: New multilingual EULA in Help.Licence
* change: Call quality improvements
* change: "Find in chat" engine rewritten
* change: Refreshing icons on start tab
* change: Cleaned up RPM packaging
* bugfix: Menu items not disabled when going offline
* bugfix: Crash when a new message was received
* bugfix: Crash when password changed
* bugfix: Crash when chat search string contained "+331234567"
* bugfix: Crash when chat search string contained emoticon
* bugfix: Auth requests from previous user being shown
* bugfix: Crash while history was loading
* bugfix: Find crash when searching for empty text
* bugfix: Auth request remaining on event panel after authorization
Only minimally startup tested as there is a font issue (seen in both old and
new versions) on my NetBSD-3 xorg system...
|