Age | Commit message (Collapse) | Author | Files | Lines |
|
overflow vulnerability in the HTML parser code affecting "ls" command on
malicious HTTP server.
See http://lists.netsys.com/pipermail/full-disclosure/2003-December/014824.html
Version 2.6.10 - 2003-12-11
* security fixes in html parsing code.
* fxp between ftps session is now possible (unencrypted yet).
* fixed a rare bug with access to freed memory in ftp.
* fixed a bug in mirror, now it does not incorrectly append directory name
when target directory is the root.
* fixed compilation on AIX.
* Polish translation updated.
|
|
Changes:
5.1.0 (2003-11-09)
* GNU TLS support (alternative to OpenSSL),
* Small licence change,
* Portability fixes (MacOS X)
5.0.1 (2002-11-04)
* Small bug fixes,
* Better error messages with invalid options
5.0.0 (2002-10-11)
* Now uses getnameinfo/getaddrinfo. Two consequences:
- you can compile only on a recent Unix
- you have IPv6 support
* With -v, now able to separate kernel (TCP) and application latency
* Now displays the standard deviation for repeated tests. Warning:
this may break some scripts which parse the output of echoping.
4.2.0 (2001-03-16)
* New -a and -A options to control the proxy/cache (disable caching).
Fixes bug/wish #232324
* Support for microsecond wait (uses usleep)
* New option (-p) to set socket priority (Linux only)
* New option (-P) to set IP Type of Service octet
* Bug fixes: #230384 (SSL records are different from text lines)
|
|
Changes:
o More translation files
o bugfixes, etc.
Review Changelog for a complete list of changes.
|
|
|
|
|
|
Changes since 0.40:
*** 0.42 October 26, 2003
Fixed compilation problems on panther (Mac OS 10.3).
Fixed a bug in Net::DNS::Resolver::Recurse which allowed an endless
loop to arise in certain situations. (cpan #3969, patch
by Rob Brown)
Applied Mike Mitchell's patch implementing a presistant UDP socket.
See the Net::DNS::Resolver documentation for details.
*** 0.41 October 3, 2003
Added some documentation about modifying the behavior of Net::DNS::Resolver.
** 0.40_01 September 26, 2003
Fixed some uninitialized value warnings when running under windows.
Fixed a bug in the test suite that caused 00-version.t to fail with
certain versions of ExtUtils::MakeMaker. Thanks to David James, Jos
Boumans and others for reporting it.
Reply handlers in Net::DNS::Nameserver are now passed the peerhost.
(Assen Totin <assen@online.bg>)
Reply handlers in Net::DNS::Nameserver can now tweak the header bits
that the nameserver returns. [Olaf]
The AD header bit is now documented, and twiddleable. [Olaf]
The change log has been trimmed, entries for versions older than 0.21
have been removed.
** NOTICE **
Net::DNS::Resolver::axfr_old() has been removed from the package.
An exception will be thrown if you attempt to use this method. Use
axfr() or axfr_start() instead.
|
|
Notable changes:
* portability fixes for Darwin/Tru64.
* license updates
* version format change
|
|
Various changes, including:
* forbid mget of filenames that aren't in or below the local cwd.
* improve auto-fetch transfers
* improve www/proxy authentication support
* improve http response header parsing
* change UCB-licensed code from 4-clause to 3-clause
|
|
|
|
Changes:
o Don't install linc-cleanup-sockets (Michael)
o Unix socket length fix (Masahiro)
|
|
|
|
* Wget 1.9.1 is a bugfix release with no user-visible changes.
* Changes in Wget 1.9.
** It is now possible to specify that POST method be used for HTTP
requests. For example, `wget --post-data="id=foo&data=bar" URL' will
send a POST request with the specified contents.
** IPv6 support is available, although it's still experimental.
** The `--timeout' option now also affects DNS lookup and establishing
the TCP connection. Previously it only affected reading and writing
data. Those three timeouts can be set separately using
`--dns-timeout', `--connection-timeout', and `--read-timeout',
respectively.
** Download speed shown by the progress bar is based on the data
recently read, rather than the average speed of the entire download.
The ETA projection is still based on the overall average.
** It is now possible to connect to FTP servers through FWTK
firewalls. Set ftp_proxy to an FTP URL, and Wget will automatically
log on to the proxy as "username@host".
** The new option `--retry-connrefused' makes Wget retry downloads
even in the face of refused connections, which are otherwise
considered a fatal error.
** The new option `--dns-cache=off' may be used to prevent Wget from
caching DNS lookups.
** Wget no longer escapes characters in local file names based on
whether they're appropriate in URLs. Escaping can still occur for
nonprintable characters or for '/', but no longer for frequent
characters such as space. You can use the new option
--restrict-file-names to relax or strengthen these rules, which can be
useful if you dislike the default or if you're downloading to
non-native partitions.
** Handling of HTML comments has been dumbed down to conform to what
users expect and other browsers do: instead of being treated as SGML
declaration, a comment is terminated at the first occurrence of "-->".
Use `--strict-comments' to revert to the old behavior.
** Wget now correctly handles relative URIs that begin with "//", such
as "//img.foo.com/foo.jpg".
** Boolean options in `.wgetrc' and on the command line now accept
values "yes" and "no" along with the traditional "on" and "off".
** It is now possible to specify decimal values for timeouts, waiting
periods, and download rate. For instance, `--wait=0.5' now works as
expected, as does `--dns-timeout=0.5' and even `--limit-rate=2.5k'.
|
|
|
|
|
|
* bug fixes
|
|
* lots of bug fixes
|
|
|
|
|
|
Recht.
Libsoup is an HTTP library implementation in C. It was originally part
of a SOAP (Simple Object Access Protocol) implementation called Soup, but
the SOAP and non-SOAP parts have now been split into separate packages.
libsoup uses the Glib main loop and is designed to work well with GTK
applications. This enables GNOME applications to access HTTP servers
on the network in a completely asynchronous fashion, very similar to
the Gtk+ programming model (a synchronous operation mode is also
supported for those who want it).
Features:
* Completely Asynchronous
* Connection cache
* HTTP chunked transfer support
* HTTP, SOCKS4, and SOCKS5 authenticated proxy support
* SSL Support using OpenSSL or GnuTLS
* Client support for Digest, NTLM, and Basic authentication
* HTTP server
* Server support for Digest and Basic authentication
|
|
|
|
Netcat is a featured networking utility which reads and writes data across
network connections, using the TCP/IP protocol.
It is designed to be a reliable "back-end" tool that can be used directly
or easily driven by other programs and scripts. At the same time, it is a
feature-rich network debugging and exploration tool, since it can create
almost any kind of connection you would need and has several interesting
built-in capabilities.
This package was provided by Adrian Portelli via pkgsrc-wip.
|
|
|
|
|
|
previous). Bump PKGREVISION.
|
|
- SECURITY: Fix buffer handling bugs.
|
|
|
|
|
|
|
|
======== WiStumler2 ======================
Network stumbler for WaveLAN/IEEE wireless
==========================================
Original code: Isao SEKI <iseki@gongon.com>
Fork&patches: pancake <pancake@phreaker.net>
WiStumbler2 is a fork of original wistumbler caused by the incommunication
of the original author, because seems that development was getting stopped.
In the fork of wistumbler I add some new features and bugfixes.
Diff on wistumbler:
- gtk2 and theme support.
- some gtk widgets wasn't correctly used.
- Support for console mode (no X needed).
- Allow log-saving on the fly (new button).
- Patches some GPS pointers that segfaults.
- Speaker beeps like windows-stumbler. (ear-wardriving)
- FreeBSD port finished.
|
|
stable than the last 1.6.1 version, and connects to a lot more servers, so here
is the update.
Version 1.7.1
-------------
Un-Thesis' Contributions:
* FIXED: A bug that would cause approx 5% download sources to be deleted
unnecessarily.
* FIXED: aMule 1.1.2 bug in their ZLib implementation (look for "FIXME" in
their code heh).
* FIXED: Removed the undefined VoidList warning in mfc.cpp.
* Added ZLIB support to xMule, based on aMule 1.1.1, which is based on eMule
0.30c.
* Changed target minimum speed for each upload from 3000 bytes/sec to
2KB/sec.
* Implemented nearly 100% of aMule-1,1,2's network modifications that worked.
* Client now masquerades as eMule v0.34 heh.
* Download list now refreshes in *real* time. No more seconds delay.
* Less waiting for downloads! Fixed a broken if statement that was tossing
out some of the early download connections.
DongCheon Park's contributions:
* Updated the Korean translation files for new features in 1.7.x.
Version 1.7.0
-------------
Highlights:
* There are no known exploits in this version.
* Lots of fixed memleaks and cpuleaks.
* Extended support for more eMule v3x protocol changes.
* Enhanced transfer controls.
* Supports every eDonkey server.
malware's contributions:
* FIXED: endless loop in sending UDP packets.
* FIXED: a possibly exploitable bug as noticed by S. Esser from e-matters
(#3 "Servername Format String Vulnerabilities").
* FIXED: new downloads assigned to random category.
* FIXED: Bug rehashing a part file.
* FIXED: Various minor problems found by malloc debuggers.
* FIXED: Bug using MFC CMap.
* Speed up the initial sharing by making KnowFileList a hash map.
* Remove the assign to category context menu entry only if it was
already there.
* Reimplemented hashing thread.
* Removed unused locks. As the NetBSD team pointed out they are
causing problems on their system because it does core dump on
unlocking a mutex that was not locked.
* Made the title for systray the same as for the main dialog.
* Never share a file twice.
* Check size of OP_SERVERSTATUS packet more strictly.
* Do not display the unit for file size twice in shared file list web page.
* Make xmule not to send the MOD_VERSION information. This does avoid a
problem with the LSD mod and other xmules.
* Added check for libm to configure.in.
* Avoid accepting an unrequested hashset.
* Removed memory leak from hashing thread.
* Implemented rescaling of the graph of currently active connections.
* Remove invalid gap information entries which might be caused by
incomplete part.met files.
* Removed all font specifications from the XML resources.
* Do not start a search after adding an ED2K-Link.
* Enable clipping in download list control.
* Possible fix for some problems while ending the program.
* Keep the requested file in sync with the part status in CUpDownClient.
* Imported from eMule:
- Source exchange v2
- Do not swap a source to a stopped file.
- Up-/download auto-priority
- Request of shared files by directory.
- "Obtained Parts" bar in the shared files list
Un-Thesis' contributions:
* FIXED: Bug that kept auto-backtrace from occuring in Linux.
* FIXED: Rare crash occuring in Preferences->Directories.
* FIXED: Optimization and compilation warnings using -O2 with GCC 3.3.x.
* FIXED: Two memleaks in ClientCreditList.cpp.
* FIXED: Several GCC 3.4 problems.
* FIXED: Several Intel C++ problems.
* Added more support for Solaris, thanks to wimms.
* Corrected various Linux-specific #ifdefs.
* Now masquerades as eMule v0.31 in order to use hostile eMule servers.
* Added initial support for GCC 3.2+ AthlonXP optimizations.
* Added initial support for wxGTK 2.5.1.
* Two tweaks to make SuSE builds less CPU-intensive.
* New build system, easier to maintain and automake free. Yay!
* Streamlined included images: now only necessary ones are there.
* Added initial support for JusSx's ed2k+ daemon.
* Added initial support for Hetfield's systray daemon.
* Added initial support for my telnet/ssh/www daemon.
NetBSD team's contributions:
* FIXED: bug with the mutex protecting calls to gethostbyname.
* Try to increase some resource limitation to the permitted maximum.
sepahewe's contributions:
* Fix images in transfer list web page.
Justinas' contributions:
* Fixed the mfc.h warnings at lines 418, 423,
|
|
|
|
tsocks allows non SOCKS aware applications (e.g telnet, ssh, ftp etc) to use
SOCKS without any modification. It does this by intercepting the calls that
applications make to establish network connections and negotating them through
a SOCKS server as necessary.
tsocks is based on the 'shared library interceptor' concept. Through use of
the LD_PRELOAD environment variable, tsocks is automatically loaded into the
process space of every executed program.
|
|
Addresses PR pkg/23633 by Soren Jacobsen.
Changes:
- shorten DESCR
- style nits
2.6.9:
======
- New setting ftp:ssl-protect-list for encrypting file listings selectively.
- Don't use PRET again if it is not supported.
- Added cls --sort=time option (alias for sort=date).
- Don't set file modification time if it grew while downloading.
- New setting cmd:verify-path-cached.
- Added long options for `open' command.
|
|
Changes:
libIDL 0.8.2:
* Support new versions of flex (Jody Goldberg)
libIDL 0.8.1:
* add '_' prefix escaped keyword support (Nick Lewycky)
* cygwin build support (Masahiro Sakai)
* build fixes (Mark McLoughlin, Thomas Vander Stichele)
* autoconf upgrade (Havoc Pennington)
* BSD portability fix (Jacob Berkman)
|
|
|
|
is received. It is necessary because in the case of a dropped packet,
while it is understandable to return DECOMP_ERROR, it has the side effect
of making NetBSD desactivate the MPPE decompressor on the PPP interface.
A comment in net/if_ppp.c mentions a patent that would prohibit an
automatic failure recovery in that case, so it would need MPPE-specific
code in net/if_ppp.c, which of course is impossible since the MPPE
decompressor is only available as a LKM.
Just ignoring the problem is a bit of a hack, but is a much more nicer
solution that what I used when I first encountered the issue.
Problem reported and patch provided in PR 23593, by Yoshitaka Tokugawa.
|
|
bump PKGREVISION on packages depending on graphics/glu due to latest shlib
changes there.
|
|
Recreate distinfo since tarball on new site is repackaged (same contents
verified). Add DIST_SUBDIR since the name hasn't changed (can be removed
on next update).
|
|
Changelog since 1.2.6 seems to mainly list const fixes.
|
|
* TightVNC 1.2.9
- Unix version: New "Request refresh" button has been implemented in
the viewer's F8 popup menu.
- Unix version: A patch to fix input focus problems in the X11
viewer has been applied, from Greg Breland.
- Unix version: A patch fixing Xvnc crashes on Sparc has been
applied, from the RealVNC distribution.
- Unix version: A problem with incorrect port interpretation has
been fixed, in the vncviewer's -tunnel option handling. Thanks to
Clark Sessions.
- Other minor improvements and bugfixes.
ok'ed by wiz@
|
|
|
|
made unnecessary by tools.mk.
|
|
ossaudio.buildlink2.mk and using it.
reorder WRKSRC to appease pkglint.
bump PKGREVISION.
|
|
so that "make clean" after just-in-time "su" works. Closes
PR pkg/23477 by Adrian Portelli.
|
|
post-install target doesn't get out of sync and creates a symlink
pointing into empty space. Package revision bumped to 1 since
this will modify a binary package.
|
|
systems (NetBSD 1.6ZF).
|
|
Major changes since 1.2.0:
New features:
* RDP 5
* 15, 16 and 24 bit color depths
* Basic clipboard redirection
* Sound
* IPv6
* Attaching to console on Windows 2003
Other changes:
* Updated keymaps
* Increased maximum lengths for usernames and passwords
* Support for specifying geometry in terms of percent of whole screen
|
|
Patch from RedHat Source RPM via itojun (same for zebra commit a minute ago).
While here, fix PLIST.
|
|
|
|
Patch contributed by Bernd Ernesti <bernd@veego.de> in private mail.
XXX why are the .py files dated a few minutes before the pkg was built!?
|