summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2017-05-19update openvpn to 2.3.15spz8-54/+33
fixes DoSses: CVE-2017-7478 CVE-2017-7479 fixes PR pkg/52044 relevant excerpt of ChangeLog: OpenVPN Change Log Copyright (C) 2002-2017 OpenVPN Technologies, Inc. <sales@openvpn.net> 2017.05.11 -- Version 2.3.15 David Sommerseth (5): dev-tools: Added script for updating copyright years in files Update copyrights docs: Further improve --reneg-bytes and SWEET32 information git: Merge .gitignore files into a single file Make --cipher/--auth none more explicit on the risks Gert Doering (1): Document --proto udp6, tcp6, etc. Julien Muchembled (1): Fix implicit declarations when HAVE_OPENSSL_ENGINE is unset Steffan Karger (6): Add missing includes in error.h cleanup: merge packet_id_alloc_outgoing() into packet_id_write() Document that OpenVPN 2.3 does not check the CRL signature Introduce and use secure_memzero() to erase secrets Drop packets instead of assert out if packet id rolls over (CVE-2017-7479) Don't assert out on receiving too-large control packets (CVE-2017-7478) 2016.12.06 -- Version 2.3.14 Christian Hesse (1): update year in copyright message David Sommerseth (1): Document the --auth-token option Gert Doering (2): Repair topology subnet on FreeBSD 11 Repair topology subnet on OpenBSD Lev Stipakov (1): Drop recursively routed packets Selva Nair (4): Support --block-outside-dns on multiple tunnels When parsing '--setenv opt xx ..' make sure a third parameter is present Map restart signals from event loop to SIGTERM during exit-notification wait Correctly state the default dhcp server address in man page Steffan Karger (1): Clean up format_hex_ex() 2016.11.02 -- Version 2.3.13 Arne Schwabe (2): Use AES ciphers in our sample configuration files and add a few modern 2.4 examples Incorporate the Debian typo fixes where appropriate and make show_opt default message clearer David Sommerseth (4): t_client.sh: Make OpenVPN write PID file to avoid various sudo issues t_client.sh: Add support for Kerberos/ksu t_client.sh: Improve detection if the OpenVPN process did start during tests t_client.sh: Add prepare/cleanup possibilties for each test case Gert Doering (5): Do not abort t_client run if OpenVPN instance does not start. Fix t_client runs on OpenSolaris make t_client robust against sudoers misconfiguration add POSTINIT_CMD_suf to t_client.sh and sample config Fix --multihome for IPv6 on 64bit BSD systems. Ilya Shipitsin (1): skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-crypto Lev Stipakov (2): Exclude peer-id from pulled options digest Fix compilation in pedantic mode Samuli Seppänen (1): Automatically cache expected IPs for t_client.sh on the first run Steffan Karger (6): Fix unittests for out-of-source builds Make gnu89 support explicit cleanup: remove code duplication in msg_test() Update cipher-related man page text Limit --reneg-bytes to 64MB when using small block ciphers Add a revoked cert to the sample keys 2016.08.23 -- Version 2.3.12 Arne Schwabe (2): Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it. Move ASSERT so external-key with OpenSSL works again David Sommerseth (3): Only build and run cmocka unit tests if its submodule is initialized Another fix related to unit test framework Remove NOP function and callers Dorian Harmans (1): Add CHACHA20-POLY1305 ciphersuite IANA name translations. Ivo Manca (1): Plug memory leak in mbedTLS backend Jeffrey Cutter (1): Update contrib/pull-resolv-conf/client.up for no DOMAIN Jens Neuhalfen (2): Add unit testing support via cmocka Add a test for auth-pam searchandreplace Josh Cepek (1): Push an IPv6 CIDR mask used by the server, not the pool's size Leon Klingele (1): Add link to bug tracker Samuli Seppänen (2): Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes Clarify the fact that build instructions in README are for release tarballs Selva Nair (4): Make error non-fatal while deleting address using netsh Make block-outside-dns work with persist-tun Ignore SIGUSR1/SIGHUP during exit notification Promptly close the netcmd_semaphore handle after use Steffan Karger (4): Fix polarssl / mbedtls builds Don't limit max incoming message size based on c2->frame Fix '--cipher none --cipher' crash Discourage using 64-bit block ciphers
2017-05-19Bump PKGREVISION for cups15 -> cups change.prlw13-6/+6
2017-05-19Switch all cups15 packages to use cups.prlw13-6/+6
2017-05-18Add and enable net/daq.nils1-1/+2
2017-05-18Initial import of daq, version 2.0.6, into pkgsrc.nils6-0/+75
Snort 2.9 introduces the DAQ, or Data Acquisition library, for packet I/O. The DAQ replaces direct calls to libpcap functions with an abstraction layer that facilitates operation on a variety of hardware and software interfaces without requiring changes to Snort. It is possible to select the DAQ type and mode when invoking Snort to perform pcap readback or inline operation, etc. The DAQ library may be useful for other packet processing applications and the modular nature allows you to build new modules for other platforms.
2017-05-18Changes 2.46.1:adam3-51/+41
Fixes a bug where a recently added module was not added to setup.py.
2017-05-17Updated syncthing to 0.14.28.wiz2-7/+7
This is a regularly scheduled stable release. Resolved issues: #1879: It is now possible to create custom event subscriptions via the REST API. #2250: Removing large folders now uses less memory. #3307: The minimum disk space (per folder and for the home disk) can now be set to an absolute value. #3965: Pausing or reconfiguring a folder will no longer start extra scans. Pausing a folder stops scanning. #3996: Ignore patterns can now be set at folder creation time, and for paused folders. #4020: It is no longer possible to configure the GUI/API to listen on a privileged port using the standard settings dialog. #4096: The device allowed subnet list can now include negative ("!") entries to disallow subnets. #4112: Doing "Override changes" now uses less memory.
2017-05-17Update get_iplayer to 3.01prlw12-13/+9
* Fix "Segment not available from server" errors * The --cache-init option. Use --cache-rebuild instead when upgrading. * The SRT subtitles produced by get_iplayer now include <font> tags to preserve the colour information from the TTML originals. * get_iplayer now supports the BBC "bidi" CDN, so additional streams are available for TV programmes. * hvf modes (the default) for TV programmes will now produce files with 320k audio, if available. 320k audio is not available for hls or dvf modes. Full release notes available fromt: https://github.com/get-iplayer/get_iplayer/wiki/release301
2017-05-17Updated p5-Net-DNS to 1.10.wiz2-7/+7
**** 1.10 May 5, 2017 Fix rt.cpan.org #120748 Net::DNS::Resolver::MSWin32 critical issue Thanks to Dmytro Zagashev for his valuable assistence during the investigation which exposed five distinct issues. Feature rt.cpan.org #18819 Perl 5.22.0 puts EBCDIC character encoding back on the agenda. Thanks to Yaroslav Kuzmin for successful test build on os390.
2017-05-17version 2017.05.14wiz3-8/+17
Core + [extractor/common] Respect Width and Height attributes in ISM manifests + [postprocessor/metadatafromtitle] Add support regular expression syntax for --metadata-from-title (#13065) Extractor + [mediaset] Add support for video.mediaset.it (#12708, #12964) * [orf:radio] Fix extraction (#11643, #12926) * [aljazeera] Extend URL regular expression (#13053) * [imdb] Relax URL regular expression (#13056) + [francetv] Add support for mobile.france.tv (#13068) + [upskill] Add support for upskillcourses.com (#13043) * [thescene] Fix extraction (#13061) * [condenast] Improve embed support * [liveleak] Fix extraction (#12053) + [douyu] Support Douyu shows (#12228) * [myspace] Improve URL regular expression (#13040) * [adultswim] Use desktop platform in assets URL (#13041) version 2017.05.09 Core * [YoutubeDL] Force --restrict-filenames when no locale is set on all python versions (#13027) Extractors * [francetv] Adapt to site redesign (#13034) + [packtpub] Add support for authentication (#12622) * [drtv] Lower preference for SignLanguage formats (#13013, #13016) + [cspan] Add support for brightcove live embeds (#13028) * [vrv] Extract DASH formats and subtitles * [funimation] Fix authentication (#13021) * [adultswim] Fix extraction (#8640, #10950, #11042, #12121) + Add support for Adobe Pass authentication + Add support for live streams + Add support for show pages * [turner] Extract thumbnail, is_live and strip description + [nonktube] Add support for nonktube.com (#8647, #13024) + [nuevo] Pass headers to _extract_nuevo * [nbc] Improve extraction (#12364) version 2017.05.07 Common * [extractor/common] Fix typo in _extract_akamai_formats + [postprocessor/ffmpeg] Embed chapters into media file with --add-metadata + [extractor/common] Introduce chapters meta field Extractors * [youtube] Fix authentication (#12820, #12927, #12973, #12992, #12993, #12995, #13003) * [bilibili] Fix video downloading (#13001) * [rmcdecouverte] Fix extraction (#12937) * [theplatform] Extract chapters * [bandcamp] Fix thumbnail extraction (#12980) * [pornhub] Extend URL regular expression (#12996) + [youtube] Extract chapters + [nrk] Extract chapters + [vice] Add support for ooyala embeds in article pages + [vice] Support vice articles (#12968) * [vice] Fix extraction for non en_us videos (#12967) * [gdcvault] Fix extraction for some videos (#12733) * [pbs] Improve multipart video support (#12981) * [laola1tv] Fix extraction (#12880) + [cda] Support birthday verification (#12789) * [leeco] Fix extraction (#12974) + [pbs] Extract chapters * [amp] Imporove thumbnail and subtitles extraction * [foxsports] Fix extraction (#12945) - [coub] Remove comment count extraction (#12941)
2017-05-17Changes in version 0.3.0.7 - 2017-05-15adam2-9/+9
Tor 0.3.0.7 fixes a medium-severity security bug in earlier versions of Tor 0.3.0.x, where an attacker could cause a Tor relay process to exit. Relays running earlier versions of Tor 0.3.0.x should upgrade; clients are not affected. o Major bugfixes (hidden service directory, security): - Fix an assertion failure in the hidden service directory code, which could be used by an attacker to remotely cause a Tor relay process to exit. Relays running earlier versions of Tor 0.3.0.x should upgrade. This security issue is tracked as TROVE-2017-002. Fixes bug 22246; bugfix on 0.3.0.1-alpha. o Minor features: - Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2 Country database. o Minor features (future-proofing): - Tor no longer refuses to download microdescriptors or descriptors if they are listed as "published in the future". This change will eventually allow us to stop listing meaningful "published" dates in microdescriptor consensuses, and thereby allow us to reduce the resources required to download consensus diffs by over 50%. Implements part of ticket 21642; implements part of proposal 275. o Minor bugfixes (Linux seccomp2 sandbox): - The getpid() system call is now permitted under the Linux seccomp2 sandbox, to avoid crashing with versions of OpenSSL (and other libraries) that attempt to learn the process's PID by using the syscall rather than the VDSO code. Fixes bug 21943; bugfix on 0.2.5.1-alpha.
2017-05-15Update net/py-lexicon to 2.1.4.fhajny2-7/+7
2.1.4 - Improve error handling in dnsmadeeasy provider 2.1.3 - Switch print to logging - Organize imports as documented in PEP-8
2017-05-15Add a patch for CVE-2017-6508 from upstream.kim2-2/+12
2017-05-14Add PRINT_PLIST_AWK logic in order to dynamically generate ${PLIST.doc}leot1-1/+4
entries. XXX: Probably `share/examples/rc.d/tor' entry should not be in PLIST, XXX: but we can wait for the next tor update in order to get rid of it.
2017-05-13Introduce ${PLIST.doc}.alnsn2-10/+13
It should fix a build with PKG_OPTIONS.tor=-doc.
2017-05-12Requires libiconv. Sort includes and put them where they belong.jperkin1-10/+10
2017-05-10Changes in Apache Libcloud 2.0.0adam3-413/+1565
-------------------------------- Common ~~~~~~ - Fix OpenStack drivers not correctly setting URLs when used with identity API, would default to 127.0.0.1 and service catalog URLs were not adhered to. - Fix Aliyun ECS, Load balancer and storage adapters when using unicode UTF-8 characters in the names of resources in 2.0.0rc2 < it would fail as a MalformedResponseError, Python 2.7 element tree was raising a unicode error - Refactor the test classes to use the full libcloud.http and libcloud.common.base modules, with Connection, Response all used with requests_mock. This increases our test coverages and catches bugs in drivers' custom parse_body and auth modules - Rename libcloud.httplib_ssl to libcloud.http now that we don't use httplib
2017-05-10Import dhcpcd-7.0.0-rc1 with the following changes:roy2-8/+8
* Default to use VLANID>0 for IAID instead of MAC address * BSD: Add support for RTA_LABEL * Stop sharing the DHCPv6 port in master mode with other processes * Fix some prefix delegation issues when the carrier drops or addresses become stale * Fix a crash when starting dhcpcd with -n * Fix test for preferring a fake lease over a real one * Show to real address lifetimes being added when adding IPv6 addresses * Install dhcpcd-definitions.conf to the correct directory * Restore the -G, --nogateway option
2017-05-09Requires termcap.jperkin1-1/+2
2017-05-09Update sniproxy to 0.5.0wiedi3-7/+24
2017-04-26 Dustin Lundquist <dustin@null-ptr.net> 0.5.0 Release * Transparent proxy support * Use accept4() on Linix * Run as group specified in config
2017-05-03Convert CXXFLAGS setting C++ standard to USE_LANGUAGES.jperkin8-44/+20
2017-05-03chmod the right files, the .sh are just an identical wrapper nowspz1-4/+4
2017-05-02Update to 4.1.16ryoon2-7/+7
Changelog: Apr 25, 2017 Features zone parser can parse acronyms for algorithms ED25519 and ED448. Fix 1243: Option to make NSD emit really minimal responses, minimal-responses: yes in nsd.conf. Bugfixes Calculate new udb index after growing the array, fix from Chaofeng Liu. Fix missing _t to _type conversion for disable-radix-tree option. Printout serial error with hint it may be too big. Fix 1228: OpenSSL include is not guarded with HAVE_SSL Patch for expire state in multi-master when masters includes broken master, from Manabu Sonoda. minor manpage fix.
2017-05-02Updated tor to 0.3.0.6.wiz2-11/+9
Changes in version 0.3.0.6 - 2017-04-26 Tor 0.3.0.6 is the first stable release of the Tor 0.3.0 series. With the 0.3.0 series, clients and relays now use Ed25519 keys to authenticate their link connections to relays, rather than the old RSA1024 keys that they used before. (Circuit crypto has been Curve25519-authenticated since 0.2.4.8-alpha.) We have also replaced the guard selection and replacement algorithm to behave more robustly in the presence of unreliable networks, and to resist guard- capture attacks. This series also includes numerous other small features and bugfixes, along with more groundwork for the upcoming hidden-services revamp. Per our stable release policy, we plan to support the Tor 0.3.0 release series for at least the next nine months, or for three months after the first stable release of the 0.3.1 series: whichever is longer. If you need a release with long-term support, we recommend that you stay with the 0.2.9 series. Below are the changes since 0.2.9.10. For a list of only the changes since 0.3.0.5-rc, see the ChangeLog file. o Major features (directory authority, security): - The default for AuthDirPinKeys is now 1: directory authorities will reject relays where the RSA identity key matches a previously seen value, but the Ed25519 key has changed. Closes ticket 18319. o Major features (guard selection algorithm): - Tor's guard selection algorithm has been redesigned from the ground up, to better support unreliable networks and restrictive sets of entry nodes, and to better resist guard-capture attacks by hostile local networks. Implements proposal 271; closes ticket 19877. o Major features (next-generation hidden services): - Relays can now handle v3 ESTABLISH_INTRO cells as specified by prop224 aka "Next Generation Hidden Services". Service and clients don't use this functionality yet. Closes ticket 19043. Based on initial code by Alec Heifetz. - Relays now support the HSDir version 3 protocol, so that they can can store and serve v3 descriptors. This is part of the next- generation onion service work detailled in proposal 224. Closes ticket 17238. o Major features (protocol, ed25519 identity keys): - Clients now support including Ed25519 identity keys in the EXTEND2 cells they generate. By default, this is controlled by a consensus parameter, currently disabled. You can turn this feature on for testing by setting ExtendByEd25519ID in your configuration. This might make your traffic appear different than the traffic generated by other users, however. Implements part of ticket 15056; part of proposal 220. - Relays now understand requests to extend to other relays by their Ed25519 identity keys. When an Ed25519 identity key is included in an EXTEND2 cell, the relay will only extend the circuit if the other relay can prove ownership of that identity. Implements part of ticket 15056; part of proposal 220. - Relays now use Ed25519 to prove their Ed25519 identities and to one another, and to clients. This algorithm is faster and more secure than the RSA-based handshake we've been doing until now. Implements the second big part of proposal 220; Closes ticket 15055. o Major features (security): - Change the algorithm used to decide DNS TTLs on client and server side, to better resist DNS-based correlation attacks like the DefecTor attack of Greschbach, Pulls, Roberts, Winter, and Feamster. Now relays only return one of two possible DNS TTL values, and clients are willing to believe DNS TTL values up to 3 hours long. Closes ticket 19769. o Major bugfixes (client, onion service, also in 0.2.9.9): - Fix a client-side onion service reachability bug, where multiple socks requests to an onion service (or a single slow request) could cause us to mistakenly mark some of the service's introduction points as failed, and we cache that failure so eventually we run out and can't reach the service. Also resolves a mysterious "Remote server sent bogus reason code 65021" log warning. The bug was introduced in ticket 17218, where we tried to remember the circuit end reason as a uint16_t, which mangled negative values. Partially fixes bug 21056 and fixes bug 20307; bugfix on 0.2.8.1-alpha. o Major bugfixes (crash, directory connections): - Fix a rare crash when sending a begin cell on a circuit whose linked directory connection had already been closed. Fixes bug 21576; bugfix on 0.2.9.3-alpha. Reported by Alec Muffett. o Major bugfixes (directory authority): - During voting, when marking a relay as a probable sybil, do not clear its BadExit flag: sybils can still be bad in other ways too. (We still clear the other flags.) Fixes bug 21108; bugfix on 0.2.0.13-alpha. o Major bugfixes (DNS): - Fix a bug that prevented exit nodes from caching DNS records for more than 60 seconds. Fixes bug 19025; bugfix on 0.2.4.7-alpha. o Major bugfixes (IPv6 Exits): - Stop rejecting all IPv6 traffic on Exits whose exit policy rejects any IPv6 addresses. Instead, only reject a port over IPv6 if the exit policy rejects that port on more than an IPv6 /16 of addresses. This bug was made worse by 17027 in 0.2.8.1-alpha, which rejected a relay's own IPv6 address by default. Fixes bug 21357; bugfix on commit 004f3f4e53 in 0.2.4.7-alpha. o Major bugfixes (parsing): - Fix an integer underflow bug when comparing malformed Tor versions. This bug could crash Tor when built with --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with -ftrapv by default. In other cases it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix on 0.0.8pre1. Found by OSS-Fuzz. - When parsing a malformed content-length field from an HTTP message, do not read off the end of the buffer. This bug was a potential remote denial-of-service attack against Tor clients and relays. A workaround was released in October 2016, to prevent this bug from crashing Tor. This is a fix for the underlying issue, which should no longer matter (if you applied the earlier patch). Fixes bug 20894; bugfix on 0.2.0.16-alpha. Bug found by fuzzing using AFL (http://lcamtuf.coredump.cx/afl/). o Major bugfixes (scheduler): - Actually compare circuit policies in ewma_cmp_cmux(). This bug caused the channel scheduler to behave more or less randomly, rather than preferring channels with higher-priority circuits. Fixes bug 20459; bugfix on 0.2.6.2-alpha. o Major bugfixes (security, also in 0.2.9.9): - Downgrade the "-ftrapv" option from "always on" to "only on when --enable-expensive-hardening is provided." This hardening option, like others, can turn survivable bugs into crashes--and having it on by default made a (relatively harmless) integer overflow bug into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); bugfix on 0.2.9.1-alpha. o Minor feature (client): - Enable IPv6 traffic on the SocksPort by default. To disable this, a user will have to specify "NoIPv6Traffic". Closes ticket 21269. o Minor feature (fallback scripts): - Add a check_existing mode to updateFallbackDirs.py, which checks if fallbacks in the hard-coded list are working. Closes ticket 20174. Patch by haxxpop. o Minor feature (protocol versioning): - Add new protocol version for proposal 224. HSIntro now advertises version "3-4" and HSDir version "1-2". Fixes ticket 20656. o Minor features (ciphersuite selection): - Allow relays to accept a wider range of ciphersuites, including chacha20-poly1305 and AES-CCM. Closes the other part of 15426. - Clients now advertise a list of ciphersuites closer to the ones preferred by Firefox. Closes part of ticket 15426. o Minor features (controller): - Add "GETINFO sr/current" and "GETINFO sr/previous" keys, to expose shared-random values to the controller. Closes ticket 19925. - When HSFETCH arguments cannot be parsed, say "Invalid argument" rather than "unrecognized." Closes ticket 20389; patch from Ivan Markin. o Minor features (controller, configuration): - Each of the *Port options, such as SocksPort, ORPort, ControlPort, and so on, now comes with a __*Port variant that will not be saved to the torrc file by the controller's SAVECONF command. This change allows TorBrowser to set up a single-use domain socket for each time it launches Tor. Closes ticket 20956. - The GETCONF command can now query options that may only be meaningful in context-sensitive lists. This allows the controller to query the mixed SocksPort/__SocksPort style options introduced in feature 20956. Implements ticket 21300. o Minor features (diagnostic, directory client): - Warn when we find an unexpected inconsistency in directory download status objects. Prevents some negative consequences of bug 20593. o Minor features (directory authorities): - Directory authorities now reject descriptors that claim to be malformed versions of Tor. Helps prevent exploitation of bug 21278. - Reject version numbers with components that exceed INT32_MAX. Otherwise 32-bit and 64-bit platforms would behave inconsistently. Fixes bug 21450; bugfix on 0.0.8pre1. o Minor features (directory authority): - Add a new authority-only AuthDirTestEd25519LinkKeys option (on by default) to control whether authorities should try to probe relays by their Ed25519 link keys. This option will go away in a few releases--unless we encounter major trouble in our ed25519 link protocol rollout, in which case it will serve as a safety option. o Minor features (directory cache): - Relays and bridges will now refuse to serve the consensus they have if they know it is too old for a client to use. Closes ticket 20511. o Minor features (ed25519 link handshake): - Advertise support for the ed25519 link handshake using the subprotocol-versions mechanism, so that clients can tell which relays can identity themselves by Ed25519 ID. Closes ticket 20552. o Minor features (entry guards): - Add UseEntryGuards to TEST_OPTIONS_DEFAULT_VALUES in order to not break regression tests. - Require UseEntryGuards when UseBridges is set, in order to make sure bridges aren't bypassed. Resolves ticket 20502. o Minor features (fallback directories): - Allow 3 fallback relays per operator, which is safe now that we are choosing 200 fallback relays. Closes ticket 20912. - Annotate updateFallbackDirs.py with the bandwidth and consensus weight for each candidate fallback. Closes ticket 20878. - Display the relay fingerprint when downloading consensuses from fallbacks. Closes ticket 20908. - Exclude relays affected by bug 20499 from the fallback list. Exclude relays from the fallback list if they are running versions known to be affected by bug 20499, or if in our tests they deliver a stale consensus (i.e. one that expired more than 24 hours ago). Closes ticket 20539. - Make it easier to change the output sort order of fallbacks. Closes ticket 20822. - Reduce the minimum fallback bandwidth to 1 MByte/s. Part of ticket 18828. - Require fallback directories to have the same address and port for 7 days (now that we have enough relays with this stability). Relays whose OnionOO stability timer is reset on restart by bug 18050 should upgrade to Tor 0.2.8.7 or later, which has a fix for this issue. Closes ticket 20880; maintains short-term fix in 0.2.8.2-alpha. - Require fallbacks to have flags for 90% of the time (weighted decaying average), rather than 95%. This allows at least 73% of clients to bootstrap in the first 5 seconds without contacting an authority. Part of ticket 18828. - Select 200 fallback directories for each release. Closes ticket 20881. o Minor features (fingerprinting resistence, authentication): - Extend the length of RSA keys used for TLS link authentication to 2048 bits. (These weren't used for forward secrecy; for forward secrecy, we used P256.) Closes ticket 13752. o Minor features (geoip): - Update geoip and geoip6 to the April 4 2017 Maxmind GeoLite2 Country database. o Minor features (geoip, also in 0.2.9.9): - Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2 Country database. o Minor features (infrastructure): - Implement smartlist_add_strdup() function. Replaces the use of smartlist_add(sl, tor_strdup(str)). Closes ticket 20048. o Minor features (linting): - Enhance the changes file linter to warn on Tor versions that are prefixed with "tor-". Closes ticket 21096. o Minor features (logging): - In several places, describe unset ed25519 keys as "<unset>", rather than the scary "AAAAAAAA...AAA". Closes ticket 21037. o Minor features (portability, compilation): - Autoconf now checks to determine if OpenSSL structures are opaque, instead of explicitly checking for OpenSSL version numbers. Part of ticket 21359. - Support building with recent LibreSSL code that uses opaque structures. Closes ticket 21359. o Minor features (relay): - We now allow separation of exit and relay traffic to different source IP addresses, using the OutboundBindAddressExit and OutboundBindAddressOR options respectively. Closes ticket 17975. Written by Michael Sonntag. o Minor features (reliability, crash): - Try better to detect problems in buffers where they might grow (or think they have grown) over 2 GB in size. Diagnostic for bug 21369. o Minor features (testing): - During 'make test-network-all', if tor logs any warnings, ask chutney to output them. Requires a recent version of chutney with the 21572 patch. Implements 21570. o Minor bugfix (control protocol): - The reply to a "GETINFO config/names" request via the control protocol now spells the type "Dependent" correctly. This is a breaking change in the control protocol. (The field seems to be ignored by the most common known controllers.) Fixes bug 18146; bugfix on 0.1.1.4-alpha. - The GETINFO extra-info/digest/<digest> command was broken because of a wrong base16 decode return value check, introduced when refactoring that API. Fixes bug 22034; bugfix on 0.2.9.1-alpha. o Minor bugfix (logging): - Don't recommend the use of Tor2web in non-anonymous mode. Recommending Tor2web is a bad idea because the client loses all anonymity. Tor2web should only be used in specific cases by users who *know* and understand the issues. Fixes bug 21294; bugfix on 0.2.9.3-alpha. o Minor bugfixes (bug resilience): - Fix an unreachable size_t overflow in base64_decode(). Fixes bug 19222; bugfix on 0.2.0.9-alpha. Found by Guido Vranken; fixed by Hans Jerry Illikainen. o Minor bugfixes (build): - Replace obsolete Autoconf macros with their modern equivalent and prevent similar issues in the future. Fixes bug 20990; bugfix on 0.1.0.1-rc. o Minor bugfixes (certificate expiration time): - Avoid using link certificates that don't become valid till some time in the future. Fixes bug 21420; bugfix on 0.2.4.11-alpha o Minor bugfixes (client): - Always recover from failures in extend_info_from_node(), in an attempt to prevent any recurrence of bug 21242. Fixes bug 21372; bugfix on 0.2.3.1-alpha. - When clients that use bridges start up with a cached consensus on disk, they were ignoring it and downloading a new one. Now they use the cached one. Fixes bug 20269; bugfix on 0.2.3.12-alpha. o Minor bugfixes (code correctness): - Repair a couple of (unreachable or harmless) cases of the risky comparison-by-subtraction pattern that caused bug 21278. o Minor bugfixes (config): - Don't assert on startup when trying to get the options list and LearnCircuitBuildTimeout is set to 0: we are currently parsing the options so of course they aren't ready yet. Fixes bug 21062; bugfix on 0.2.9.3-alpha. o Minor bugfixes (configuration): - Accept non-space whitespace characters after the severity level in the `Log` option. Fixes bug 19965; bugfix on 0.2.1.1-alpha. - Support "TByte" and "TBytes" units in options given in bytes. "TB", "terabyte(s)", "TBit(s)" and "terabit(s)" were already supported. Fixes bug 20622; bugfix on 0.2.0.14-alpha. o Minor bugfixes (configure, autoconf): - Rename the configure option --enable-expensive-hardening to --enable-fragile-hardening. Expensive hardening makes the tor daemon abort when some kinds of issues are detected. Thus, it makes tor more at risk of remote crashes but safer against RCE or heartbleed bug category. We now try to explain this issue in a message from the configure script. Fixes bug 21290; bugfix on 0.2.5.4-alpha. o Minor bugfixes (consensus weight): - Add new consensus method that initializes bw weights to 1 instead of 0. This prevents a zero weight from making it all the way to the end (happens in small testing networks) and causing an error. Fixes bug 14881; bugfix on 0.2.2.17-alpha. o Minor bugfixes (crash prevention): - Fix an (currently untriggerable, but potentially dangerous) crash bug when base32-encoding inputs whose sizes are not a multiple of 5. Fixes bug 21894; bugfix on 0.2.9.1-alpha. o Minor bugfixes (dead code): - Remove a redundant check for PidFile changes at runtime in options_transition_allowed(): this check is already performed regardless of whether the sandbox is active. Fixes bug 21123; bugfix on 0.2.5.4-alpha. o Minor bugfixes (descriptors): - Correctly recognise downloaded full descriptors as valid, even when using microdescriptors as circuits. This affects clients with FetchUselessDescriptors set, and may affect directory authorities. Fixes bug 20839; bugfix on 0.2.3.2-alpha. o Minor bugfixes (directory mirrors): - Allow relays to use directory mirrors without a DirPort: these relays need to be contacted over their ORPorts using a begindir connection. Fixes one case of bug 20711; bugfix on 0.2.8.2-alpha. - Clarify the message logged when a remote relay is unexpectedly missing an ORPort or DirPort: users were confusing this with a local port. Fixes another case of bug 20711; bugfix on 0.2.8.2-alpha. o Minor bugfixes (directory system): - Bridges and relays now use microdescriptors (like clients do) rather than old-style router descriptors. Now bridges will blend in with clients in terms of the circuits they build. Fixes bug 6769; bugfix on 0.2.3.2-alpha. - Download all consensus flavors, descriptors, and authority certificates when FetchUselessDescriptors is set, regardless of whether tor is a directory cache or not. Fixes bug 20667; bugfix on all recent tor versions. o Minor bugfixes (documentation): - Update the tor manual page to document every option that can not be changed while tor is running. Fixes bug 21122. o Minor bugfixes (ed25519 certificates): - Correctly interpret ed25519 certificates that would expire some time after 19 Jan 2038. Fixes bug 20027; bugfix on 0.2.7.2-alpha. o Minor bugfixes (fallback directories): - Avoid checking fallback candidates' DirPorts if they are down in OnionOO. When a relay operator has multiple relays, this prioritizes relays that are up over relays that are down. Fixes bug 20926; bugfix on 0.2.8.3-alpha. - Stop failing when OUTPUT_COMMENTS is True in updateFallbackDirs.py. Fixes bug 20877; bugfix on 0.2.8.3-alpha. - Stop failing when a relay has no uptime data in updateFallbackDirs.py. Fixes bug 20945; bugfix on 0.2.8.1-alpha. o Minor bugfixes (hidden service): - Clean up the code for expiring intro points with no associated circuits. It was causing, rarely, a service with some expiring introduction points to not open enough additional introduction points. Fixes part of bug 21302; bugfix on 0.2.7.2-alpha. - Resolve two possible underflows which could lead to creating and closing a lot of introduction point circuits in a non-stop loop. Fixes bug 21302; bugfix on 0.2.7.2-alpha. - Stop setting the torrc option HiddenServiceStatistics to "0" just because we're not a bridge or relay. Instead, we preserve whatever value the user set (or didn't set). Fixes bug 21150; bugfix on 0.2.6.2-alpha. o Minor bugfixes (hidden services): - Make hidden services check for failed intro point connections, even when they have exceeded their intro point creation limit. Fixes bug 21596; bugfix on 0.2.7.2-alpha. Reported by Alec Muffett. - Make hidden services with 8 to 10 introduction points check for failed circuits immediately after startup. Previously, they would wait for 5 minutes before performing their first checks. Fixes bug 21594; bugfix on 0.2.3.9-alpha. Reported by Alec Muffett. - Stop ignoring misconfigured hidden services. Instead, refuse to start tor until the misconfigurations have been corrected. Fixes bug 20559; bugfix on multiple commits in 0.2.7.1-alpha and earlier. o Minor bugfixes (IPv6): - Make IPv6-using clients try harder to find an IPv6 directory server. Fixes bug 20999; bugfix on 0.2.8.2-alpha. - When IPv6 addresses have not been downloaded yet (microdesc consensus documents don't list relay IPv6 addresses), use hard- coded addresses for authorities, fallbacks, and configured bridges. Now IPv6-only clients can use microdescriptors. Fixes bug 20996; bugfix on b167e82 from 19608 in 0.2.8.5-alpha. o Minor bugfixes (memory leak at exit): - Fix a small harmless memory leak at exit of the previously unused RSA->Ed identity cross-certificate. Fixes bug 17779; bugfix on 0.2.7.2-alpha. o Minor bugfixes (onion services): - Allow the number of introduction points to be as low as 0, rather than as low as 3. Fixes bug 21033; bugfix on 0.2.7.2-alpha. o Minor bugfixes (portability): - Use "OpenBSD" compiler macro instead of "OPENBSD" or "__OpenBSD__". It is supported by OpenBSD itself, and also by most OpenBSD variants (such as Bitrig). Fixes bug 20980; bugfix on 0.1.2.1-alpha. o Minor bugfixes (portability, also in 0.2.9.9): - Avoid crashing when Tor is built using headers that contain CLOCK_MONOTONIC_COARSE, but then tries to run on an older kernel without CLOCK_MONOTONIC_COARSE. Fixes bug 21035; bugfix on 0.2.9.1-alpha. - Fix Libevent detection on platforms without Libevent 1 headers installed. Fixes bug 21051; bugfix on 0.2.9.1-alpha. o Minor bugfixes (relay): - Avoid a double-marked-circuit warning that could happen when we receive DESTROY cells under heavy load. Fixes bug 20059; bugfix on 0.1.0.1-rc. - Honor DataDirectoryGroupReadable when tor is a relay. Previously, initializing the keys would reset the DataDirectory to 0700 instead of 0750 even if DataDirectoryGroupReadable was set to 1. Fixes bug 19953; bugfix on 0.0.2pre16. Patch by "redfish". o Minor bugfixes (testing): - Fix Raspbian build issues related to missing socket errno in test_util.c. Fixes bug 21116; bugfix on 0.2.8.2. Patch by "hein". - Remove undefined behavior from the backtrace generator by removing its signal handler. Fixes bug 21026; bugfix on 0.2.5.2-alpha. - Use bash in src/test/test-network.sh. This ensures we reliably call chutney's newer tools/test-network.sh when available. Fixes bug 21562; bugfix on 0.2.9.1-alpha. o Minor bugfixes (tor-resolve): - The tor-resolve command line tool now rejects hostnames over 255 characters in length. Previously, it would silently truncate them, which could lead to bugs. Fixes bug 21280; bugfix on 0.0.9pre5. Patch by "junglefowl". o Minor bugfixes (unit tests): - Allow the unit tests to pass even when DNS lookups of bogus addresses do not fail as expected. Fixes bug 20862 and 20863; bugfix on unit tests introduced in 0.2.8.1-alpha through 0.2.9.4-alpha. o Minor bugfixes (util): - When finishing writing a file to disk, if we were about to replace the file with the temporary file created before and we fail to replace it, remove the temporary file so it doesn't stay on disk. Fixes bug 20646; bugfix on 0.2.0.7-alpha. Patch by fk. o Minor bugfixes (Windows services): - Be sure to initialize the monotonic time subsystem before using it, even when running as an NT service. Fixes bug 21356; bugfix on 0.2.9.1-alpha. o Minor bugfixes (Windows): - Check for getpagesize before using it to mmap files. This fixes compilation in some MinGW environments. Fixes bug 20530; bugfix on 0.1.2.1-alpha. Reported by "ice". o Code simplification and refactoring: - Abolish all global guard context in entrynodes.c; replace with new guard_selection_t structure as preparation for proposal 271. Closes ticket 19858. - Extract magic numbers in circuituse.c into defined variables. - Introduce rend_service_is_ephemeral() that tells if given onion service is ephemeral. Replace unclear NULL-checkings for service directory with this function. Closes ticket 20526. - Refactor circuit_is_available_for_use to remove unnecessary check. - Refactor circuit_predict_and_launch_new for readability and testability. Closes ticket 18873. - Refactor code to manipulate global_origin_circuit_list into separate functions. Closes ticket 20921. - Refactor large if statement in purpose_needs_anonymity to use switch statement instead. Closes part of ticket 20077. - Refactor the hashing API to return negative values for errors, as is done as throughout the codebase. Closes ticket 20717. - Remove data structures that were used to index or_connection objects by their RSA identity digests. These structures are fully redundant with the similar structures used in the channel abstraction. - Remove duplicate code in the channel_write_*cell() functions. Closes ticket 13827; patch from Pingl. - Remove redundant behavior of is_sensitive_dir_purpose, refactor to use only purpose_needs_anonymity. Closes part of ticket 20077. - The code to generate and parse EXTEND and EXTEND2 cells has been replaced with code automatically generated by the "trunnel" utility. o Documentation (formatting): - Clean up formatting of tor.1 man page and HTML doc, where <pre> blocks were incorrectly appearing. Closes ticket 20885. o Documentation (man page): - Clarify many options in tor.1 and add some min/max values for HiddenService options. Closes ticket 21058. o Documentation: - Change '1' to 'weight_scale' in consensus bw weights calculation comments, as that is reality. Closes ticket 20273. Patch from pastly. - Clarify that when ClientRejectInternalAddresses is enabled (which is the default), multicast DNS hostnames for machines on the local network (of the form *.local) are also rejected. Closes ticket 17070. - Correct the value for AuthDirGuardBWGuarantee in the manpage, from 250 KBytes to 2 MBytes. Fixes bug 20435; bugfix on 0.2.5.6-alpha. - Include the "TBits" unit in Tor's man page. Fixes part of bug 20622; bugfix on 0.2.5.1-alpha. - Small fixes to the fuzzing documentation. Closes ticket 21472. - Stop the man page from incorrectly stating that HiddenServiceDir must already exist. Fixes 20486. - Update the description of the directory server options in the manual page, to clarify that a relay no longer needs to set DirPort in order to be a directory cache. Closes ticket 21720. o Removed features: - The AuthDirMaxServersPerAuthAddr option no longer exists: The same limit for relays running on a single IP applies to authority IP addresses as well as to non-authority IP addresses. Closes ticket 20960. - The UseDirectoryGuards torrc option no longer exists: all users that use entry guards will also use directory guards. Related to proposal 271; implements part of ticket 20831. o Testing: - Add tests for networkstatus_compute_bw_weights_v10. - Add unit tests circuit_predict_and_launch_new. - Extract dummy_origin_circuit_new so it can be used by other test functions. - New unit tests for tor_htonll(). Closes ticket 19563. Patch from "overcaffeinated". - Perform the coding style checks when running the tests and fail when coding style violations are found. Closes ticket 5500.
2017-05-01Update net/youtube-dl to 20170501leot3-8/+14
Changes: version 2017.05.01 Core + [extractor/common] Extract view count from JSON-LD * [utils] Improve unified_timestamp + [utils] Add video/mp2t to mimetype2ext * [downloader/external] Properly handle live stream downloading cancellation (#8932) + [utils] Add support for unicode whitespace in clean_html on python 2 (#12906) Extractors * [infoq] Make audio format extraction non fatal (#12938) * [brightcove] Allow whitespace around attribute names in embedded code + [zaq1] Add support for zaq1.pl (#12693) + [xvideos] Extract duration (#12828) * [vevo] Fix extraction (#12879) + [noovo] Add support for noovo.ca (#12792) + [washingtonpost] Add support for embeds (#12699) * [yandexmusic:playlist] Fix extraction for python 3 (#12888) * [anvato] Improve extraction (#12913) * Promote to regular shortcut based extractor * Add mcp to access key mapping table * Add support for embeds extraction * Add support for anvato embeds in generic extractor * [xtube] Fix extraction for older FLV videos (#12734) * [tvplayer] Fix extraction (#12908) version 2017.04.28 Core + [adobepass] Use geo verification headers for all requests - [downloader/fragment] Remove assert for resume_len when no fragments downloaded + [extractor/common] Add manifest_url for explicit group rendition formats * [extractor/common] Fix manifest_url for m3u8 formats - [extractor/common] Don't list master m3u8 playlists in format list (#12832) Extractor * [aenetworks] Fix extraction for shows with single season + [go] Add support for Disney, DisneyJunior and DisneyXD show pages * [youtube] Recognize new locale-based player URLs (#12885) + [streamable] Add support for new embedded URL schema (#12844) * [arte:+7] Relax URL regular expression (#12837)
2017-04-30Old web site didn't work. Here is one that does.darcy1-2/+2
2017-04-30Recursive revbump from boost updateryoon37-72/+74
2017-04-29We do not need the inline removal patches since this can be achievedschwarz4-34/+5
more easily with the existing substituion in Makefile (which initially had only been used for the Sunpro compiler).
2017-04-29updated the download and home page URLs for sipsakschwarz1-3/+3
2017-04-28Requires C99 for some math functions.jperkin1-2/+2
2017-04-27Update net/py-lexicon to 2.1.2.fhajny3-8/+11
2.1.2 - Initial implementation of a provider for PowerDNS 2.1.1 - Changes to testing framework
2017-04-27Update net/youtube-dl to 20170426leot3-11/+17
Changes: version 2017.04.26 Core * Introduce --keep-fragments for keeping fragments of fragmented download on disk after download is finished * [YoutubeDL] Fix output template for missing timestamp (#12796) * [socks] Handle cases where credentials are required but missing * [extractor/common] Improve HLS extraction (#12211) - Extract m3u8 parsing to separate method - Improve rendition groups extraction - Build stream name according stream GROUP-ID - Ignore reference to AUDIO group without URI when stream has no CODECS - Use float for scaled tbr in _parse_m3u8_formats * [utils] Add support for TTML styles in dfxp2srt * [downloader/hls] No need to download keys for fragments that have been already downloaded * [downloader/fragment] Improve fragment downloading - Resume immediately - Don't concatenate fragments and decrypt them on every resume - Optimize disk storage usage, don't store intermediate fragments on disk - Store bookkeeping download state file + [extractor/common] Add support for multiple getters in try_get + [extractor/common] Add support for video of WebPage context in _json_ld (#12778) + [extractor/common] Relax JWPlayer regular expression and remove duplicate URLs (#12768) Extractors * [iqiyi] Fix extraction of Yule videos * [vidio] Improve extraction and sort formats + [brightcove] Match only video elements with data-video-id attribute * [iqiyi] Fix playlist detection (#12504) - [azubu] Remove extractor (#12813) * [porn91] Fix extraction (#12814) * [vidzi] Fix extraction (#12793) + [amp] Extract error message (#12795) + [xfileshare] Add support for gorillavid.com and daclips.com (#12776) * [instagram] Fix extraction (#12777) + [generic] Support Brightcove videos in <iframe> (#12482) + [brightcove] Support URLs with bcpid instead of playerID (#12482) * [brightcove] Fix _extract_url (#12782) + [odnoklassniki] Extract HLS formats version 2017.04.17 Extractors * [limelight] Improve extraction LimelightEmbeddedPlayerFlash media embeds and add support for channel and channelList embeds * [generic] Extract multiple Limelight embeds (#12761) + [itv] Extract series metadata * [itv] Fix RTMP formats downloading (#12759) * [itv] Use native HLS downloader by default + [go90] Extract subtitles (#12752) + [go90] Extract series metadata (#12752) version 2017.04.16 Core * [YoutubeDL] Apply expand_path after output template substitution + [YoutubeDL] Propagate overridden meta fields to extraction results of type url (#11163) Extractors + [generic] Extract RSS entries as url_transparent (#11163) + [streamango] Add support for streamango.com (#12643) + [wsj:article] Add support for articles (#12558) * [brightcove] Relax video tag embeds extraction and validate ambiguous embeds' URLs (#9163, #12005, #12178, #12480) + [udemy] Add support for react rendition (#12744) version 2017.04.15 Extractors * [youku] Fix fileid extraction (#12741, #12743) version 2017.04.14 Core + [downloader/hls] Add basic support for EXT-X-BYTERANGE tag (#10955) + [adobepass] Improve Comcast and Verison login code (#10803) + [adobepass] Add support for Verizon (#10803) Extractors + [aenetworks] Add support for specials (#12723) + [hbo] Extract HLS formats + [go90] Add support for go90.com (#10127) + [tv2hu] Add support for tv2.hu (#10509) + [generic] Exclude URLs with xml ext from valid video URLs (#10768, #11654) * [youtube] Improve HLS formats extraction * [afreecatv] Fix extraction for videos with different key layout (#12718) - [youtube] Remove explicit preference for audio-only and video-only formats in order not to break sorting when new formats appear * [canalplus] Bypass geo restriction version 2017.04.11 Extractors * [afreecatv] Fix extraction (#12706) + [generic] Add support for <object> YouTube embeds (#12637) * [bbccouk] Treat bitrate as audio+video bitrate in media selector + [bbccouk] Skip unrecognized formats in media selector (#12701) + [bbccouk] Add support for https protocol in media selector (#12701) * [curiositystream] Fix extraction (#12638) * [adn] Update subtitle decryption key * [chaturbate] Fix extraction (#12665, #12688, #12690)
2017-04-26Updated syncthing to 0.14.27.wiz2-7/+7
This is a regularly scheduled stable release. Resolved issues since v0.14.26: #219: Devices can now have a list of allowed subnets (advanced config) #234: The transfer rate units can now be changed by clicking on the value #1819: UI text explaining "Introducer" is improved #2267: Advanced config editor can now edit lists of things #2519: Directories created for new folders now obey the user umask setting (on Unixes) #4053: Incoming index updates are consistency checked better
2017-04-24Fix builtin vs ncurses detectionsborrill1-2/+2
2017-04-22Revbump after icu updateadam76-145/+152
2017-04-22Remove dnsdoctor package which is not maintained for long time and dependstaca6-309/+0
on ruby18.
2017-04-22delete dnsdoctor.taca1-2/+1
2017-04-22Update net/py-lexicon to 2.1.0.fhajny3-54/+60
Minor bugfix commits, no changelog released.
2017-04-22Update ruby-addressable to 2.5.1.taca2-7/+7
# Addressable 2.5.1 - allow unicode normalization to be disabled for URI Template expansion - removed duplicate test
2017-04-22Update bind99 to 9.9.10 (BIND 9.9.10).taca4-17/+18
This is maintenance release and please refer release announce in detail: https://kb.isc.org/article/AA-01489.
2017-04-22Update bind910 to 9.10.5 (BIND 9.10.5).taca4-18/+20
This is maintenance release and please refer release announce in detail: https://kb.isc.org/article/AA-01490.
2017-04-19Updated wireshark to 2.2.6.wiz2-7/+7
What's New Bug Fixes The following vulnerabilities have been fixed: * [1]wnpa-sec-2017-12 IMAP dissector crash ([2]Bug 13466) [3]CVE-2017-7703 * [4]wnpa-sec-2017-13 WBMXL dissector infinite loop ([5]Bug 13477) [6]CVE-2017-7702 * [7]wnpa-sec-2017-14 NetScaler file parser infinite loop ([8]Bug 13478) [9]CVE-2017-7700 * [10]wnpa-sec-2017-15 RPCoRDMA dissector infinite loop ([11]Bug 13558) [12]CVE-2017-7705 * [13]wnpa-sec-2017-16 BGP dissector infinite loop ([14]Bug 13557) [15]CVE-2017-7701 * [16]wnpa-sec-2017-17 DOF dissector infinite loop ([17]Bug 13453) [18]CVE-2017-7704 * [19]wnpa-sec-2017-18 PacketBB dissector crash ([20]Bug 13559) * [21]wnpa-sec-2017-19 SLSK dissector long loop ([22]Bug 13576) * [23]wnpa-sec-2017-20 SIGCOMP dissector infinite loop ([24]Bug 13578) * [25]wnpa-sec-2017-21 WSP dissector infinite loop ([26]Bug 13581) The following bugs have been fixed: * T30 FCF byte decoding masks DTC, CIG and NCS. ([27]Bug 1918) * Wireshark gives decoding error during rnsap message dissection(SCCP reassembly). ([28]Bug 3360) * Added IEEE 802.15.4-2003 AES-CCM security modes (packet-ieee802154). ([29]Bug 4912) * Payload in 2 SCCP DT1 messages in the same frame isn't (sub)dissected. ([30]Bug 11130) * IEEE 802.15.4: an area of Payload IEs is dissected twice. ([31]Bug 13068) * Qt UI: Wireshark crash when deleting IO graph string while it's in editing mode. ([32]Bug 13234) * Crash on exit due to an invalid frame data sequence state. ([33]Bug 13433) * Access Violation using Lua dissector. ([34]Bug 13457) * Some bytes ignored in every packet in NetScaler packet trace when vmnames are included in packet headers. ([35]Bug 13459) * VOIP RTP stream Find Reverse button doesn't work. ([36]Bug 13462) * Lua dissector: ProtoField int&42; do not allow FT_HEX or FT_OCT, crash when set to FT_HEX_DEC or FT_DEC_HEX. ([37]Bug 13484) * GIOP LocateRequest v1.0 is improperly indicated as "malformed". ([38]Bug 13488) * Bug in ZigBee - Zone Status Change Notification. ([39]Bug 13493) * Packet exception in packet-ua3g and incomplete strings in packet-noe. ([40]Bug 13502) * Wrong BGP capability dissect. ([41]Bug 13521) * Endpoint statistics column labels seem incorrect. ([42]Bug 13526) * Strange automatic jump in packet details for a certain DNS response packet. ([43]Bug 13533) * When a Lua enum or bool preference is changed via context menu, prefs_changed isn't called with Qt Wireshark. ([44]Bug 13536) * IO Graph selects wrong packet or displays "Packet number x isn't displayed". ([45]Bug 13537) * tshark's -z endpoints,ip ignores optional filter. ([46]Bug 13538) * SSL: Handshake type in Info column not always separated by comma. ([47]Bug 13539) * libfuzzer: PEEKREMOTE dissector bug. ([48]Bug 13544) * libfuzzer: packetBB dissector bug (packetbb.msg.addr.valuecustom). ([49]Bug 13545) * libfuzzer: WSP dissector bug (wsp.header.x_wap_tod). ([50]Bug 13546) * libfuzzer: MIH dissector bug. ([51]Bug 13547) * libfuzzer: DNS dissector bug. ([52]Bug 13548) * libfuzzer: WLCCP dissector bug. ([53]Bug 13549) * libfuzzer: TAPA dissector bug. ([54]Bug 13553) * libfuzzer: lapsat dissector bug. ([55]Bug 13554) * libfuzzer: wassp dissector bug. ([56]Bug 13555) * Illegal reassembly of GSM SMS packets. ([57]Bug 13572) * SSH Dissector uses incorrect length for protocol field (ssh.protocol). ([58]Bug 13574) * NBAP malformed packet for short Binding ID. ([59]Bug 13577) * libfuzzer: WSP dissector bug (wsp.header.x_up_1.x_up_proxy_tod). ([60]Bug 13579) * libfuzzer: asterix dissector bug (asterix.021_230_RA). ([61]Bug 13580) * RTPproxy dissector adds multi lines to info column. ([62]Bug 13582) Updated Protocol Support ASTERIX, BGP, BSSGP, BT AVRCP, BT HCI_CMD, BT HFP, BT PBAP, DNS, DOF, EAPOL-MKA, GIOP, GSM SMS, HTTP, ICMP, IEEE 802.11, IEEE 802.15.4, IMAP, ISIS LSP, iSNS, LAPSat, MIH, MySQL, NBAP, NBIFOM, PacketBB, PEEKREMOTE, RPCoRDMA, RTPproxy, SCCP, SIGCOMP, SLSK, SSH, SSL, T.30, TAPA, UA3G, WASSP, WBXML, WLCCP, WSP, and ZigBee ZCL IAS
2017-04-19Updated syncthing to 0.14.26.wiz2-8/+7
This is a regularly scheduled stable release. Resolved issues since v0.14.25: #4035: Symlinks are now properly ignored on Windows. #2344: Discovery errors are more clearly displayed in the GUI. #3913: The language dropdown menu in the GUI is now correctly sorted. Also: When there are items that could not be synced, their full path is displayed in the GUI.
2017-04-19Bump to 0.1.14 to follow libnice.wiz1-2/+1
2017-04-19Updated libnice to 0.1.14.wiz5-17/+17
libnice 0.1.14 (2017-04-03) =========================== Improved RFC compliance Split verbose logs into a separate option Numerous bug fixes Use GnuTLS for hash functions Implement NewReno in PseudoTCP Requires GLib 2.44 GnuTLS 2.12
2017-04-19Remove dependencies on VERSION, which trigger unintended implicit rules againstdsainty2-18/+35
version.c on case-insensitive file systems. Fixes build on Darwin in its out-of-the-box case-insensitive configuration.
2017-04-19Reset MAINTAINER after tonnerre resigned.jperkin2-4/+4
2017-04-18Update net/py-lexicon to 2.0.7.fhajny2-7/+7
- Minor bugfixes.
2017-04-17-lresolv resolv is needed on MacOS later than 10.6, too.schwarz1-2/+2
2017-04-14Update net/mitmproxy to 2.0.1leot4-502/+660
Changes: 15 March 2017: mitmproxy 2.0.1 * bump cryptography dependency * bump pyparsing dependency * HTTP/2: use header normalization from hyper-h2 21 February 2017: mitmproxy 2.0 * HTTP/2 is now enabled by default. * Image ContentView: Parse images with Kaitai Struct (kaitai.io) instead of Pillow. This simplifies installation, reduces binary size, and allows parsing in pure Python. * Web: Add missing flow filters. * Add transparent proxy support for OpenBSD. * Check the mitmproxy CA for expiration and warn the user to regenerate it if necessary. * Testing: Tremendous improvements, enforced 100% coverage for large parts of the codebase, increased overall coverage. * Enforce individual coverage: one source file -> one test file with 100% coverage. * A myriad of other small improvements throughout the project. * Numerous bugfixes. 26 December 2016: mitmproxy 1.0 * All mitmproxy tools are now Python 3 only! We plan to support Python 3.5 and higher. * Web-Based User Interface: Mitmproxy now offically has a web-based user interface called mitmweb. We consider it stable for all features currently exposed in the UI, but it still misses a lot of mitmproxy’s options. * Windows Compatibility: With mitmweb, mitmproxy is now useable on Windows. We are also introducing an installer (kindly sponsored by BitRock) that simplifies setup. * Configuration: The config file format is now a single YAML file. In most cases, converting to the new format should be trivial - please see the docs for more information. * Console: Significant UI improvements - including sorting of flows by size, type and url, status bar improvements, much faster indentation for HTTP views, and more. * HTTP/2: Significant improvements, but is temporarily disabled by default due to wide-spread protocol implementation errors on some large website * WebSocket: The protocol implementation is now mature, and is enabled by default. Complete UI support is coming in the next release. Hooks for message interception and manipulation are available. * A myriad of other small improvements throughout the project. 16 October 2016: mitmproxy 0.18 * Python 3 Compatibility for mitmproxy and pathod (Shadab Zafar, GSoC 2016) * Major improvements to mitmweb (Clemens Brunner & Jason Hao, GSoC 2016) * Internal Core Refactor: Separation of most features into isolated Addons * Initial Support for WebSockets * Improved HTTP/2 Support * Reverse Proxy Mode now automatically adjusts host headers and TLS Server Name Indication * Improved HAR export * Improved export functionality for curl, python code, raw http etc. * Flow URLs are now truncated in the console for better visibility * New filters for TCP, HTTP and marked flows. * Mitmproxy now handles comma-separated Cookie headers * Merge mitmproxy and pathod documentation * Mitmdump now sanitizes its console output to not include control characters * Improved message body handling for HTTP messages: .raw_content provides the message body as seen on the wire .content provides the decompressed body (e.g. un-gzipped) .text provides the body decompressed and decoded body * New HTTP Message getters/setters for cookies and form contents. * Add ability to view only marked flows in mitmproxy * Improved Script Reloader (Always use polling, watch for whole directory) * Use tox for testing * Unicode support for tnetstrings * Add dumpfile converters for mitmproxy versions 0.11 and 0.12 * Numerous bugfixes
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-28 13:52:18 +0000