summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2021-05-08Revbump all Go packages after go116 updatebsiegert28-50/+56
2021-05-08py-kompu: shuffle PYTHON_VERSIONS_INCOMPATIBLEadam1-3/+4
2021-05-08py-flower: updated to 0.9.7adam3-28/+25
0.9.7: Unknown changes. Mark as broken, because it is not yet compatible with Celery 5.0.
2021-05-08py-prometheus_client: updated to 0.10.1adam2-7/+7
0.10.1 [BUGFIX] Support lowercase prometheus_multiproc_dir environment variable in mark_process_dead. 0.10.0 [CHANGE] Python 2.6 is no longer supported. [CHANGE] The prometheus_multiproc_dir environment variable is deprecated in favor of PROMETHEUS_MULTIPROC_DIR. [FEATURE] Follow redirects when pushing to Pushgateway using passthrough_redirect_handler. [FEATURE] Metrics support a clear() method to remove all children. [ENHANCEMENT] Tag support in GraphiteBridge.
2021-05-08py-eventlib: removed; 8 years old; does not work with latest Django/Celeryadam7-109/+1
2021-05-07py-lexicon: updated to 3.6.0adam3-10/+15
3.6.0 Added Vendor pynamecheap project for namecheap provider Annotate public API with types Check mypy types during CI Add the RFC2136 DynDNS provider (named ddns) Use Lexicon specific exceptions in code: AuthenticationError for authentication problems Modified Implement the base provider as an ABC class Improve plesk provider for wildcard domains or subdomains Use poetry-core instead of poetry for the builds Switch to GitHub-native Dependabot Deleted Remove dependency of plesk provider to xmltodict Remove some Python 2 specific code Remove deprecated type parameter in providers public methods
2021-05-07Backport patch from upstream for better Intel CPU reportbouyer3-7/+22
Bump PKGREVISION
2021-05-07py-celery: updated to 5.0.5adam3-37/+21
5.0.5 ===== - Ensure keys are strings when deleting results from S3 - Fix a regression breaking `celery --help` and `celery events` 5.0.4 ===== - DummyClient of cache+memory:// backend now shares state between threads This fixes a problem when using our pytest integration with the in memory result backend. Because the state wasn't shared between threads, 6416 results in test suites hanging on `result.get()`. 5.0.3 ===== - Make `--workdir` eager for early handling - When using the MongoDB backend, don't cleanup if result_expires is 0 or None - Fix passing queues into purge command - Restore `app.start()` and `app.worker_main()` - Detaching no longer creates an extra log file - Result backend instances are now thread local to ensure thread safety - Don't upgrade click to 8.x since click-repl doesn't support it yet. - Restore preload options 5.0.2 ===== - Fix _autodiscover_tasks_from_fixups - Flush worker prints, notably the banner - **Breaking Change**: Remove `ha_policy` from queue definition. This argument has no effect since RabbitMQ 3.0. Therefore, We feel comfortable dropping it in a patch release. - Python 3.9 support - **Regression**: When using the prefork pool, pick the fair scheduling strategy by default - Preserve callbacks when replacing a task with a chain - Fix max_retries override on `self.retry()` - Raise proper error when replacing with an empty chain 5.0.1 ===== - Specify UTF-8 as the encoding for log files - Custom headers now propagate when using the protocol 1 hybrid messages - Retry creating the database schema for the database results backend in case of a race condition - When using the Redis results backend, awaiting for a chord no longer hangs when setting :setting:`result_expires` to 0 - When a user tries to specify the app as an option for the subcommand, a custom error message is displayed - Fix the `--without-gossip`, `--without-mingle`, and `--without-heartbeat` options which now work as expected. - Provide a clearer error message when the application cannot be loaded. - Avoid printing deprecation warnings for settings when they are loaded from Django settings - Allow lowercase log levels for the `--loglevel` option - Detaching now works as expected - Restore broadcasting messages from `celery control` - Pass back real result for single task chains - Ensure group tasks a deeply serialized - Fix chord element counting - Restore the `celery shell` command 5.0.0 ===== - **Breaking Change** Remove AMQP result backend - Warn when deprecated settings are used - Expose retry_policy for Redis result backend - Prepare Celery to support the yet to be released Python 3.9 5.0.0rc3 ======== - More cleanups of leftover Python 2 support 5.0.0rc2 ======== - Bump minimum required eventlet version to 0.26.1. - Update Couchbase Result backend to use SDK V3. - Restore monkeypatching when gevent or eventlet are used. 5.0.0rc1 ======== - Allow to opt out of ordered group results when using the Redis result backend - **Breaking Change** Remove the deprecated celery.utils.encoding module. 5.0.0b1 ======= - **Breaking Change** Drop support for the Riak result backend - **Breaking Change** pytest plugin is no longer enabled by default Install pytest-celery to enable it. - **Breaking Change** Brand new CLI based on Click 5.0.0a2 ======= - Bump Kombu version to 5.0 5.0.0a1 ======= - Removed most of the compatibility code that supports Python 2 - Modernized code to work on Python 3.6 and above
2021-05-07py-kombu: updated to 5.0.2adam4-77/+12
5.0.2 Bump required amqp version to 5.0.0. 5.0.1 Removed kombu.five from the reference documentation since it no longer exists Adjusted the stable documentation’s version in Sphinx’s configuration since that was overlooked in the latest release 5.0.0 BREAKING CHANGE: Dropped support for Python 2 Add an SQS transport option for custom botocore config 4.6.11 Revert incompatible changes in Default_channel should reconnect automatically 4.6.10 Doc improvement. set _connection in _ensure_connection Fix for the issue reuse connection [bug fix] 4.6.9 Prevent failure if AWS creds are not explicitly defined on predefined. Raise RecoverableConnectionError in maybe_declare with retry on and. Fix for the issue possible fix for Fix: make SQLAlchemy Channel init thread-safe Added integration testing infrastructure for RabbitMQ Initial redis integration tests implementation SQLAlchemy transport: Use Query.with_for_update() instead of deprecated Fix Consumer Encoding Added Integration tests for direct, topic and fanout exchange types Added TTL integration tests Added integration tests for priority queues fix 100% cpu usage on linux while using sqs Modified Mutex to use redis LuaLock implementation Fix: eliminate remaining race conditions from SQLAlchemy Channel Fix connection imaybe_declare Fix for issue Ensure connection when connecting to broker update pyamqp to 2.6 with optional cythonization
2021-05-07py-amqp: updated to 5.0.6adam3-15/+12
5.0.6 ===== - Change the order in which context.check_hostname and context.verify_mode get set in SSLTransport._wrap_socket_sni. Fixes bug introduced in 5.0.3 where setting context.verify_mode = ssl.CERT_NONE would raise "ValueError: Cannot set verify_mode to CERT_NONE when check_hostname is enabled." Setting context.check_hostname prior to setting context.verify_mode resolves the issue. - Remove TCP_USER_TIMEOUT option for Solaris - Pass long_description to setup() - Fix for tox-docker 2.0 - Moved to GitHub actions CI 5.0.5 ===== - Removed mistakenly introduced code which was causing import errors 5.0.4 ===== - Add missing load_default_certs() call to fix a regression in v5.0.3 release. 5.0.3 ===== - Change the default value of ssl_version to None. When not set, the proper value between ssl.PROTOCOL_TLS_CLIENT and ssl.PROTOCOL_TLS_SERVER will be selected based on the param server_side in order to create a TLS Context object with better defaults that fit the desired connection side. - Change the default value of cert_reqs to None. The default value of ctx.verify_mode is ssl.CERT_NONE, but when ssl.PROTOCOL_TLS_CLIENT is used, ctx.verify_mode defaults to ssl.CERT_REQUIRED. - Fix context.check_hostname logic. Checking the hostname depends on having support of the SNI TLS extension and being provided with a server_hostname value. Another important thing to mention is that enabling hostname checking automatically sets verify_mode from ssl.CERT_NONE to ssl.CERT_REQUIRED in the stdlib ssl and it cannot be set back to ssl.CERT_NONE as long as hostname checking is enabled. - Refactor the SNI tests to test one thing at a time and removing some tests that were being repeated over and over. 5.0.2 ===== - Whhels are no longer universal. - Added debug representation to Connection and *Transport classes - Reintroduce ca_certs and ciphers parameters of SSLTransport._wrap_socket_sni() - Fix infinite wait when using confirm_publish 5.0.1 ===== - Require vine 5.0.0. 5.0.0 ===== - Stop to use deprecated method ssl.wrap_socket. 5.0.0b1 ======= - Dropped Python 3.5 support. - Removed additional compatibility code. 5.0.0a1 ======= - Dropped Python 2.x support. - Dropped Python 3.4 support. - Depend on :pypi:`vine` 5.0.0a1. Code Cleanups & Improvements: 2.6.1 ===== - Fix buffer overflow in frame_writer after frame_max is increased. `frame_writer` allocates a `bytearray` on intialization with a length based on the `connection.frame_max` value. If `connection.frame_max` is changed to a larger value, this causes an error like `pack_into requires a buffer of at least 408736 bytes`. 2.6.0 ===== - Implement speedups in cython - Updated some tests & code improvements - Separate logger for Connection.heartbeat_tick method - Cython generic content - Improve documentation a_global parameter of basic_qos() method. - Fix saving partial read buffer on windows during socket timeout. - Fix deserialization of long string field values that are not utf-8. - Added simple cythonization of abstract_channel.py - Speedups of serialization.py are more restrictive
2021-05-07remmina: Update to 1.4.13ryoon2-8/+7
Changelog: List of changes: Resolve "Can't build Remmina-v1.4.12 on openSUSE versions" !2217 @antenore Adding wayland include dirs !2218 @antenore Use freerdp_settings_get|set API !2216 @akallabeth Fixing Can't build Remmina-v1.4.12 on openSUSE versions / SPICE !2219 @antenore Fixed typo in reconnection attempt in the norwegian translation !2221 @ragnarstolsmark Change "The news are turned off" to the more grammatically correct "News is... !2220 @ncguk rdp: Allow autoreconnect for ERRINFO_GRAPHICS_SUBSYSTEM_FAILED !2222 @Fantu Disable cert file auth when libssh < 0.9.0 !2223 @antenore Removing redundant subtitle !2224 @antenore Removing redundant ssh_userauth_none !2225 @antenore
2021-05-06Improves NetBSD suport: use (and parse) /var/run/dmesg.boot if present,bouyer10-2/+474
use pcictl if present, use NetBSD sysctls when present. Bump PKGREVISION
2021-05-06rabbitmq: updated to 3.8.16adam3-11/+11
RabbitMQ 3.8.16 release The RabbitMQ team is pleased to announce the release of RabbitMQ 3.8.16. This is a maintenance release that follows-up to 3.8.15 to reintroduce AWS peer discovery plugin that was unintentionally excluded. Release notes can be found in the change log. This release requires Erlang/OTP 23.2 and is the first release to support Erlang 24. Binary builds and packages of the new release can be found on GitHub, Cloudsmith, or Package Cloud. See RabbitMQ installation guides to learn more. We encourage all users of earlier versions of RabbitMQ to upgrade to this latest release. As always, we welcome any questions, bug reports, and other feedback on this release, as well as general suggestions for features and enhancements in future releases. Contact us via the rabbitmq-users Google group or RabbitMQ community Slack. RabbitMQ 3.8.15 release The RabbitMQ team is pleased to announce the release of RabbitMQ 3.8.15. This is a maintenance release that includes two security patches. Release notes can be found in the change log. This is the last release to support Erlang/OTP 22. We encourage all users to consult release notes but skip this release and upgrade to 3.8.11 or later. As always, we welcome any questions, bug reports, and other feedback on this release, as well as general suggestions for features and enhancements in future releases. Contact us via the rabbitmq-users Google group or RabbitMQ community Slack.
2021-05-06py-zeroconf: updated to 0.30.0adam3-12/+18
0.30.0: Unknown changes
2021-05-05net: +hooglepho1-1/+2
2021-05-05Import warp-tls-3.3.0pho5-0/+222
warp-tls: HTTP over TLS support for Warp via the TLS package SSLv1 and SSLv2 are obsoleted by IETF. We should use TLS 1.2 (or TLS 1.1 or TLS 1.0 if necessary). HTTP/2 can be negotiated by ALPN.
2021-05-05net: +hs-simple-sendfilepho1-1/+2
2021-05-05Import simple-sendfile-0.2.30pho8-0/+97
Cross platform library for the sendfile system call. This library tries to call minimum system calls which are the bottleneck of web servers.
2021-05-05net: +hs-network-byte-orderpho1-1/+2
2021-05-05Import network-byte-order-0.1.6pho5-0/+50
Peek and poke functions for network byte order.
2021-05-05net: +hs-network-infopho1-1/+2
2021-05-05Import network-info-0.2.0.10pho5-0/+52
This library provides simple read-only access to the local computer's networking configuration. It is currently capable of getting a list of all the network interfaces and their respective IPv4, IPv6 and MAC addresses.
2021-05-04regen distinfo and remove unneeded WRKSRC override - seems I happenedjdolecek2-8/+6
to have .gar.gz from the github instead of the 'official' one from master site now it actually builds
2021-05-04qbittorrent: updated to 4.3.5adam3-15/+14
v4.3.5 - BUGFIX: Move cursor to the end when autofilling URL/hash in "Download from URLs" dialog (Chocobo1) - BUGFIX: Sort invalid QDateTime values after valid values (Chocobo1) - BUGFIX: Fix tabChangesFocus attribute in "Edit trackers" dialog (Christoph Rackwitz) - BUGFIX: Update DynDNS register url (zhuangzi926) - BUGFIX: Handle "not enough disk space" error more graciously (glassez) - BUGFIX: Correctly draw progress background with stylesheet (jagannatharjun) - WEBUI: Fix magnet url from the search facility (Chocobo1) - WEBUI: Revise folder monitoring functions (Chocobo1) - WEBUI: Fix magnet url from the browser (brvphoenix) - WEBUI: Allow to specify file indexes in torrents/files API (glassez) - WINDOWS: NSIS: Allow more strings to translated (bovirus, Chocobo1) - WINDOWS: NSIS: Update Italian, German, Estonian, Russian, PortugueseBR translations (bovirus, Henry Water, PriitUring, Долматов Алексей, Felipe) - LINUX: Fix D-Bus Notification `desktop-entry` field (Chocobo1) - MACOS: Don't use executable name as CFBundleName value (Nick Korotysh) - OTHER: Lower Qt requirement to 5.11 (sledgehammer999) - OTHER: Clarify that the license is GPLv2+ (sledgehammer999)
2021-05-03*: Bump PKGREVISION for ghc-9.0.1pho14-21/+28
2021-05-03bump buildlink rev dep for freerdp2, particularly since many CVEs werejdolecek1-2/+2
fixed since 2.0.0rc4
2021-05-03Update net/freerdp2 to version 2.3.2jdolecek3-9/+13
Changes between 2.1.2 and 2.2.0 (newer changes not preset in ChangeLog) # 2020-07-20 Version 2.2.0 Important notes: * CVE-2020-15103 - Integer overflow due to missing input sanitation in rdpegfx channel Noteworty changes: * fix: memory leak in nsc * urbdrc * some fixes and improvements * build * use cmake to detect getlogin_r * improve asan checks/detection * server/proxy * new: support for heartbeats * new: support for rail handshake ex flags * fix: possible race condition with redirects Fixed issues: * #6263 Sound & mic - filter GSM codec for microphone redirection * #6335: windows client title length * #6370 - "Alternate Secondary Drawing Order UNKNOWN" * #6298 - remoteapp with dialog is disconnecting when it loses focus * #6299 - v2.1.2: Can't connect to Windows7
2021-05-03add option for PCSC (smart cards), enable by defaultjdolecek2-5/+13
2021-05-03use libepoll-shim on NetBSD/FreeBSD/OpenBSD to make this actually workjdolecek1-4/+15
fixes 'os specific implementation is missing' error on startup tested on NetBSD
2021-05-03Update to 2.6. Sumary of changes since 2.5:bouyer4-26/+26
bug fixes serial number support for more devices better manufacturer reporting parsing of a few partnumbers for better inventory improved inventory for storage, memory and controllers updated PCI & USB database
2021-05-03gupnp: do not define pre-configure target in buildlink3.mkwiz1-2/+4
2021-05-03gupnp: fix pkglint warningwiz1-2/+1
2021-05-02scapy: note upstream PR for patch-test_run__testsgutteridge2-3/+4
2021-05-02*: Use the tools framework for gdbus-codegennia2-6/+4
2021-05-02*: Use the tools framework for itstoolnia5-15/+9
Now it should be more obvious when a package needs it as a dependency, as it will fail loudly if it isn't declared as a tool. While here, some duplicate dependencies on itstool were removed from the MATE packages
2021-05-02simplify the conditional for getting number of CPUs - simply usejdolecek3-9/+20
_SC_NPROCESSORS_ONLN whenever available, this covers also NetBSD; change the #ifdef conditional for HW_NCPU to check for HW_NCPU rather than explicit list of FreeBSD/OpenBSD
2021-05-02Recursive revbump for security/mbedtlsnia2-3/+4
2021-05-01mikutter: update to 4.1.5.tsutsui2-7/+7
Upstream changes: mikutter 4.1.5 https://mikutter.hatenablog.com/entry/2021/05/02/012736 * fix possible crash and code injection in conditions of extract tabs
2021-05-01Add maguropin1-1/+2
2021-05-01net/maguro: import packagepin5-0/+528
Maguro, a fast YouTube downloader. Using the CLI: -Check which streams are available (in no particular order). -Choose a stream to download, and specify the output. Using the Library: -maguro also exposes a library for use in other applications. It is fully-asynchronous, and is (hopefully) intuitive and easy to use. Disclaimer: -This software is created with the purpose of downloading videos with express permission from their creator(s). The creator of this software is not responsible for whether this software is used to download copyrighted YouTube videos.
2021-05-01dbip-country-lite: update to 2021-05.fcambus2-8/+8
No upstream ChangeLog.
2021-05-01dbip-city-lite: update to 2021-05.fcambus2-8/+8
No upstream ChangeLog.
2021-05-01dbip-asn-lite: update to 2021-05.fcambus2-8/+8
No upstream ChangeLog.
2021-04-30py-grpcio py-grpcio-testing py-grpcio-tools: updated to 1.37.1adam6-21/+21
Release v1.37.1 Python Also build python3.6 aarch64 manylinux2014 wheel (backport to v1.37.x).
2021-04-30grpc: updated to 1.37.1adam2-7/+7
Release v1.37.1 Core Fix 25897 to avoid crashes when certificates are not yet updated. [Backport] Fix use-after-unref bug in fault_injection_filter. C++ Enable channelz for xds_interop_client and xds_interop_server.
2021-04-29terraform: updated to 0.12.31adam2-8/+7
0.12.31 (April 26, 2021) ENHANCEMENTS: cli: Update the HashiCorp public key
2021-04-29net/samba4: update to 4.14.4taca12-37/+37
pkgsrc changes: remove extra spaces in some patch files. ============================== Release Notes for Samba 4.14.4 April 29, 2021 ============================== This is a security release in order to address the following defect: o CVE-2021-20254: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token. ======= Details ======= o CVE-2021-20254: The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. Most commonly this flaw caused the calling code to crash, but an alert user (Peter Eriksson, IT Department, Linköping University) found this flaw by noticing an unprivileged user was able to delete a file within a network share that they should have been disallowed access to. Analysis of the code paths has not allowed us to discover a way for a remote user to be able to trigger this flaw reproducibly or on demand, but this CVE has been issued out of an abundance of caution. Changes since 4.14.3 -------------------- o Volker Lendecke <vl@samba.org> * BUG 14571: CVE-2021-20254: Fix buffer overrun in sids_to_unixids().
2021-04-29bgdata: bump PKGREVISION for dependency removalwiz1-4/+3
pkglint cleanup while here
2021-04-29libgdata: Remove unnecessary dependency on GConfcirnatdan1-2/+1
GConf doesn't seem to be needed as the package doesn't install any schemas GConf itself has been deprecated for more than 8 years. If necessary, GConf should be replace with gsettings and dconf
2021-04-29net/bind916: update to 9.16.15taca2-8/+7
Security release. --- 9.16.15 released --- 5621. [bug] Due to a backporting mistake in change 5609, named binaries built against a Kerberos/GSSAPI library whose header files did not define the GSS_SPNEGO_MECHANISM preprocessor macro were not able to start if their configuration included the "tkey-gssapi-credential" option. This has been fixed. [GL #2634] 5620. [bug] If zone journal files written by BIND 9.16.11 or earlier were present when BIND was upgraded, the zone file for that zone could have been inadvertently rewritten with the current zone contents. This caused the original zone file structure (e.g. comments, $INCLUDE directives) to be lost, although the zone data itself was preserved. This has been fixed. [GL #2623] --- 9.16.14 released --- 5617. [security] A specially crafted GSS-TSIG query could cause a buffer overflow in the ISC implementation of SPNEGO. (CVE-2021-25216) [GL #2604] 5616. [security] named crashed when a DNAME record placed in the ANSWER section during DNAME chasing turned out to be the final answer to a client query. (CVE-2021-25215) [GL #2540] 5615. [security] Insufficient IXFR checks could result in named serving a zone without an SOA record at the apex, leading to a RUNTIME_CHECK assertion failure when the zone was subsequently refreshed. This has been fixed by adding an owner name check for all SOA records which are included in a zone transfer. (CVE-2021-25214) [GL #2467] 5614. [bug] Ensure all resources are properly cleaned up when a call to gss_accept_sec_context() fails. [GL #2620] 5613. [bug] It was possible to write an invalid transaction header in the journal file for a managed-keys database after upgrading. This has been fixed. Invalid headers in existing journal files are detected and named is able to recover from them. [GL #2600] 5611. [func] Set "stale-answer-client-timeout" to "off" by default. [GL #2608] 5610. [bug] Prevent a crash which could happen when a lookup triggered by "stale-answer-client-timeout" was attempted right after recursion for a client query finished. [GL #2594] 5609. [func] The ISC implementation of SPNEGO was removed from BIND 9 source code. It was no longer necessary as all major contemporary Kerberos/GSSAPI libraries include support for SPNEGO. [GL #2607] 5608. [bug] When sending queries over TCP, dig now properly handles "+tries=1 +retry=0" by not retrying the connection when the remote server closes the connection prematurely. [GL #2490] 5607. [bug] As "rndc dnssec -checkds" and "rndc dnssec -rollover" commands may affect the next scheduled key event, reconfiguration of zone keys is now triggered after receiving either of these commands to prevent unnecessary key rollover delays. [GL #2488] 5606. [bug] CDS/CDNSKEY DELETE records are now removed when a zone transitions from a secure to an insecure state. named-checkzone also no longer reports an error when such records are found in an unsigned zone. [GL #2517] 5605. [bug] "dig -u" now uses the CLOCK_REALTIME clock source for more accurate time reporting. [GL #2592] 5603. [bug] Fix a memory leak that occurred when named failed to bind a UDP socket to a network interface. [GL #2575] 5602. [bug] Fix TCPDNS and TLSDNS timers in Network Manager. This makes the "tcp-initial-timeout" and "tcp-idle-timeout" options work correctly again. [GL #2583] 5601. [bug] Zones using KASP could not be thawed after they were frozen using "rndc freeze". This has been fixed. [GL #2523]