summaryrefslogtreecommitdiff
path: root/sysutils
AgeCommit message (Collapse)AuthorFilesLines
2018-08-28cdrtools: fix build w/ clangtnn1-5/+10
2018-08-28Update to 20180807aryoon3-11/+12
* Add NetBSD tag to MESSAGE. Changelog: * Revert license
2018-08-26Update to 20180522.5b12791. From the git log:schmonz2-7/+7
- Missing .gitignore rule for autoconf detritus. - Give a sensible error message about misordered dumps. - Convert to and from a new 'sortable' dump format. - Factor out dump-file handling. (NFC) - Remove unused variables spotted by -Wall. - Revise parsing of /proc/net/tcp[6] for magic HTTP auth. - Fix mmap(2) error checks - Fix pathname-lookup failure on 'agedu -H /'. - Add a --numeric option, modifying HTML multifile output.
2018-08-23intel-microcode-netbsd: uncomment LICENSEmaya1-2/+2
2018-08-23Add intel's microcode license.maya1-2/+2
2018-08-22py-kazoo: updated to 2.5.0adam2-13/+12
2.5.0: Performance recipe: Give TreeCache standalone queue Doc Correctly document supported versions Add license to Wheel minor tweaks to contributing.md Features recipe: allow non ephemeral locking Chore drop python 2.6 compatible gevent remove debian packaging stop bundling virtualenv remove python 3.3 from tox remove easy_install instructions Bug Fixes Pass watch as keyword arg instead of positional arg need gevent >= 1.2, not > 1.1 Remove use of "async" as a variable core: - Fix gevent 1.3b1+ timeout import - Correctly fire multiple callbacks - resolve race in IAsyncResult.wait() recipe: - conn hangs when TreeCache refreshing - Unexpected exceptions break TreeCache Refactor Unify queue factory in various handlers
2018-08-22Recursive bump for perl5-5.28.0wiz146-252/+292
2018-08-21p5-Monitoring-Plugin: update to 0.40.wiz2-10/+9
0.40 25th July 2018 - improve --extra-opts error handling (#18) - fix handling named arguments (#17) - Allow negation of command line arguments using '--no'-prefix (#13) - Fix plugin-name processing in ALRM handler. (#12) - Fixed regex in plugin_exit() that handles hyphen for LONGOUTPUT (#11) - Support LONGTEXT output in plugin_exit (#10) - convert empty perfdata values to 'U' (daku3649 #5) - fix output when there is only long plugin output (pdugas)
2018-08-19*: reset maintainer for drochnerwiz3-7/+6
2018-08-19py-psutil: updated to 5.4.7adam2-8/+8
5.4.7: Enhancements * [macOS] psutil.OSX constant is now deprecated in favor of new psutil.MACOS. * [Linux] added psutil.STATUS_PARKED constant for Process.status(). * [Linux] add disk_io_counters() dual implementation relying on /sys/block filesystem in case /proc/diskstats is not available. Bug fixes * [macOS] Process.memory_maps() may fail with EINVAL due to poor task_for_pid() syscall. AccessDenied is now raised instead. * [macOS] Process.threads() incorrectly return microseconds instead of seconds. * [Linux, macOS, BSD] net_if_stats() may return ENODEV. * [Windows] psutil.Process().connections() may sometime fail with MemoryError. * [Linux] disk_io_stats() may report inflated r/w bytes values. * [Linux] Process.status() is unable to recognize "idle" and "parked" statuses (returns '?'). * [Linux] disk_io_counters() can report inflated IO counters due to erroneously counting base disk device and its partition(s) twice. * [Linux] sensors_temperatures() may fail with ValueError.
2018-08-17 Update sysutils/pciutils to 3.6.2.msaitoh3-13/+13
2018-08-12 Martin Mares <mj@ucw.cz> * Released as 3.6.2. * Added "-P" and "-PP" switches to lspci, which display the path through bridges to each device. * Fixed a couple of bugs in computation of bus topology. It was previously used only for the tree display, but we re-use it for computing the paths. * As usually, updated pci.ids to the current snapshot of the database.
2018-08-16revbump after boost-libs updateadam35-55/+70
2018-08-16*: Recursive bump for poppler-0.67wiz2-4/+4
2018-08-16dbus: update to 1.12.10.wiz3-9/+10
Fix pkglint warnings while here. dbus 1.12.10 (2018-08-02) ========================= The “beam deflection” release. Fixes: • Prevent reading up to 3 bytes beyond the end of a truncated message. This could in principle be an information leak or denial of service on the system bus, but is not believed to be exploitable to crash the system bus or leak interesting information in practice. (fd.o #107332, Simon McVittie) • Fix build with gcc 8 -Werror=cast-function-type (fd.o #107349, Simon McVittie) • Fix warning from gcc 8 about suspicious use of strncpy() when populating struct sockaddr_un (fd.o #107350, Simon McVittie) • Fix a minor memory leak when a DBusServer listens on a new address (fd.o #107194, Simon McVittie) • Fix an invalid NULL argument to rmdir() if a nonce-tcp DBusServer runs out of memory (fd.o #107194, Simon McVittie) • Don't use misleading errno-derived error names if getaddrinfo() or getnameinfo() fails with a code other than EAI_SYSTEM (fd.o #106395, Simon McVittie) • Skip tests that require working TCP if we are in a container environment where 127.0.0.1 cannot be resolved (fd.o #106812, Simon McVittie)
2018-08-15sysutils/syslog-ng: Update to 3.17.2.fhajny4-14/+16
3.17.2 ====== ## Bugfixes - Fix a bug in flow-control - Fix template function evaluation in debugger 3.17.1 ====== ## Features - Client side failback mode - New linux-audit() source as SCL - Decorating generated configuration - Introduce ewmm() source - Add parsing of Cisco unified call manager - Mandatory parameters for cfg-block (SCL) ## Bugfixes - dqtool cat print backlog items - Rewind backlog in case of stateless LogProtoClient - Filter out incorrectly parsed sudo logs - Minor fixes related to client-lib-dir, loggen and eventlog - Minor stats-query fixes and refactor - Reliable disk buffer non-empty backlog - Fix pip package versions on older distro releases (dbld) - Fix a groupset/groupunset and map-value-pairs() crash - Make g_atomic_counter_set() atomic and update minimum glib version to 2.26 - Aligning java related SCLs with mandatory parameters - Loggen minor fixes - grab-logging should be installed as a header - Fix possible underflow of memory_usage (afsql, logqueue-fifo) - Fix SELinux module version inconsistency - Fix CMake unit test compilation (no-pie) - Fix possible crash in syslog-parser() - Disable ack for mark mode - Fixing a Telegram destination bug with bot id - All drivers should support inner destination or source plugins - Fix default file and directory creation ownership - Fix global "center;;received" counter when systemd-journal() is used - Link everything to libsecret-storage - Inform about the right dns-cache() configuration (warning message typo) - Adjusting window size for internal mark mode - Fix memory leaks in disk-buffer() - Fix undefined behavior in log multiplexer - Fix static linking mode (autotools) - Fix internal mark mode infinite loop with old ivykis - Fix missing normalize flags - Keep JVM running on reload if once configured - Fix a race condition (suspend) in LogSource - Add `@requires json-plugin` to the cim() parser - Added exclude_kmsg option to system source - Fix padding template function - Leak & invalid memory access - FreeBSD 11.2 builderror SOCK_STREAM - Add ref-counted TLSVerifier struct (use after free fix) ## Other changes - Improve loggen's file message parser - syslog-ng-debun improvements - Goodbye "goto relex" (refactor) - Refactor the callback registration mechanism of WildcardFileReader - Extended Linux capabilities detection (pkg-config) - Add atomic gssize - Lower the message level of `@requires` to debug - macOS warning elimination - Remove a misleading rewrite-related debug message - Minor updates to SELinux policy installer script - More robust GLib detection (CMake) - Logthreaded nonfunctional changes - Confgen and pragma improvements - Flush before stopping syslog-ng (functional tests) - Port unit tests into criterion (test_filters_netmask6, test_findeom, csv_parser, patternDB) - Libtest refactors - Add missing files to the source tarball - Better python binary detection
2018-08-14Also replace /command/svc with ${PREFIX}/bin/svc. Ride previous bump.schmonz1-1/+2
2018-08-14svscanboot resets PATH, but doesn't include ${PREFIX}/bin orschmonz1-2/+7
${PREFIX}/sbin (reported by jmcneill@). Fix and bump PKGREVISION.
2018-08-14Set myself as the maintainer.pgoyette1-3/+2
Don't include lang/perl5/module.mk - we're not building a perl module, just building an application that uses perl.
2018-08-13di: update to 4.47.wiz2-7/+7
4.47 [2018-8-12] Fixed bugs located by scan.coverity.com. This should fix a numeric sort bug. Update mkconfig to version 2.0.0 and make changes to support it. Get perl extension build working again. Based on PR 53515 by Brad Lanam.
2018-08-09Updating to zabbix version 3.4.12.he4-11/+12
Pkgsrc changes: * for zabbix-frontend, adjust PLIST Upstream changes: Changes for 3.4.12 3.4.12rc1 was released as 3.4.12 without any changes ------------------------------ Changes for 3.4.12rc1 Bug fixes: ........S. [ZBX-14548] fixed the disk usage counters reading for ESX/ESXi hosts (MVekslers) ..F....... [ZBX-9236] fixed timeselector period used to select 'all' values of particular item (miks) ...G...... [ZBX-13393] fixed agent compilation error on AlphaServer Tru64 5.1B (Andris) ..F....... [ZBX-13165] fixed Y-axis small value gradation issue in graphs (Ivo) ..F....... [ZBX-14575] fixed Norwegian locale key for windows (vmurzins) .......PS. [ZBX-14566] fixed possible data loss due to MariaDB server restart (vso) .......PS. [ZBX-13010] fixed crash of poller processes in ODBC checks, simplified code (Andris, wiper) ....I..... [ZBX-14370] fixed deleting of files after compiling a program (make clean) for Solaris (MVekslers) ..F....... [ZBX-14519] fixed displaying timeline points of days in Problems widget (vasilijs) ..F....... [ZBX-14491] fixed link "show value mappings", which leads to no permission page (vasilijs) ........S. [ZBX-12380] improved function parameter parsing for trigger functions (MVekslers) ..F....... [ZBX-13641] disabled preprocessing update for discovered items (vasilijs) A......... [ZBX-13732] fixed status change for linked template items through parent template if host assigned (agriscenko) ..F....... [ZBX-14432] removed redundant code and improved performance in event details screen (miks) ........S. [ZBX-14410] improved error message handling in zbx_function_find() (MVekslers) ........S. [ZBX-14500] fixed crash when reporting unknown triggers and using $1-$9 macros at the same time (vso) ..F....... [ZBX-12104] added limit ZBX_HISTORY_PERIOD for {ITEM.VALUE} macro resolving in trigger name (gcalenko) ..F....... [ZBX-14402] fixed internal item parameter that does not match documentation (vasilijs) ------------------------------ Changes for 3.4.11 New features: A.F....... [ZBX-1357] added and enabled Norwegian translation to be displayed by default (zalex_ua) A.F....... [ZBX-1357] updated English (United States), French, Hebrew, Japanese, Portuguese (Brazil), Russian, Ukrainian translations; thanks to Zabbix translators (zalex_ua) ------------------------------ Changes for 3.4.11rc1 Bug fixes: ...G...... [ZBX-6046] fixed the functions 'net.if.*' for Solaris with empty 64 bits counters (MVekslers) A.F....... [ZBX-13355] fixed media type a required password field successfully passing validation while being empty and prevented auto-filling stored passwords by browser (Ivo) .D........ [ZBX-14398] improved "Server" parameter description in Zabbix agent configuration file (vso) .......PS. [ZBX-14447] reverted ZBX-13788 fix because of broken server-proxy compatibility between minor versions (wiper) ...G...... [ZBX-12250] fixed logrt[] item to analyze log file from start if no log files match and no log files were seen before (Andris) .......PS. [ZBX-13765] fixed discovered host status update if it was down and a service was discovered on that host (Andris) ...G...... [ZBX-12070] fixed "proc.num" and "proc.mem" items calculation of values when zabbix_agentd called in test mode (Sergejs) ........S. [ZBX-14423] fixed use of initialized variable during application discovery (vso) .......PS. [ZBX-12990] improved "vmware.hv.datastore.size" through usage the performance counters (MVekslers) ------------------------------ Changes for 3.4.10 3.4.10rc1 was released as 3.4.10 without any changes ------------------------------ Changes for 3.4.10rc1 Bug fixes: ..F....... [ZBX-14414] fixed PHP 7.2 error message in the Monitoring->Latest data page (Sasha) A.F....... [ZBX-13712] fixed "Undefined index: master_itemid" and SQL errors in item.update and itemprototypr.update methods; fixed updating of discovered items (Sasha) ..F....... [ZBX-13549] fixed displaying of not monitored triggers in maps (miks) ..F....... [ZBX-12359] fixed "Automatic icon selection" checkbox not working and displaying two icons at once in map constructor (Ivo) ........S. [ZBX-14333] fixed {ESC.HISTORY} and action log not to display colon without target host when executed on Zabbix server (vso) A.F....... [ZBX-13361] fixed error messages when configuring an existing item to have an update interval (miks) ........S. [ZBX-13043] removed error message for when user has defined media but all of them are disabled (viktors) ........S. [ZBX-14312] fixed possible deadlock in history syncer when housekeeper is deleting events (vso) ..F....... [ZBX-13697] fixed session expiration when changing default authentication method (miks) A.F....... [ZBX-13680] fixed action not being cloned due to existing operation id being submitted (agriscenko) ..F....... [ZBX-13775] fixed map tree widget border color (Andzs) ...G...PS. [ZBX-13782] fixed decoding of Unicode characters in JSON (Andris) ..F....... [ZBX-13767] fixed "undefined index: acknowledges" error on problems page (agriscenko) ..F....... [ZBX-12175] fixed subfilter entries with long names going off the screen (agriscenko, Andzs) ..F....... [ZBX-12644] fixed filter being partially reset when using pagination in availability report page (Ivo) ..F....... [ZBX-12882] fixed in popup window being allowed to select applications from different hosts when editing item mass update form (agriscenko) .......PS. [ZBX-13788] fixed host availability stuck in unknown state after proxy changes (wiper) ........S. [ZBX-12372] fixed duplication of prefix "/" for second parameter "path" in items "web.page.*" (MVekslers) ...G...... [ZBX-14315] fixed validation of "max_depth" in "vfs.dir.size" for agent (MVekslers) ------------------------------ Changes for 3.4.9 3.4.9rc3 was released as 3.4.9 without any changes ------------------------------ Changes for 3.4.9rc3 Bug fixes: ........S. [ZBX-14313] fixed trigger level correlation when multiple tags are set (wiper) ------------------------------ Changes for 3.4.9rc2 Bug fixes: ...G...... [ZBX-13781] fixed possible crash in the function "web.page.get" of Zabbix Agentd (MVekslers) ------------------------------ Changes for 3.4.9rc1 Bug fixes: ..F....... [ZBX-14337] fixed persistent xss in map navigation tree widget (vjaceslavs) ..F....... [ZBX-14336] fixed persistent xss vulnerability in services (vjaceslavs) ..F....... [ZBX-12821] fixed multiple javascript memory leaks (miks) ........S. [ZBX-13755] fixed proxy lastaccess update on 32-bit Zabbix server (vso) ..F....... [ZBX-12425] fixed selection of web items in the "Plain text" screen element (Sasha) ...G...... [ZBX-13781] fixed CRLF injection in Zabbix Agentd (MVekslers) ........S. [ZBX-13766] fixed comparison of two large float numbers in expressions (Sergejs) .......PS. [ZBX-13481] fixed incorrect parsing of BITS data type in SNMP response (vso) .......PS. [ZBX-13744] fixed potential shared memory leak when item is removed (Sergejs) A.F....... [ZBX-13742] fixed parsing of the operator "not" in trigger expression (Sasha) .........T [ZBX-13535] fixed trigger recovery expression for 'High error rate' trigger (vitaly) .........T [ZBX-13278] fixed trigger expression for 'Link down' trigger (vitaly) ...G...... [ZBX-12805] increased command line limit for proc.num checks on hp-ux systems (Andris, wiper) ..F....... [ZBX-13728] fixed problem duration on trigger page being calculated incorrectly (agriscenko) ...G...PS. [ZBX-13660] fixed data types passed to is_ushort() for converting PID, port and process number (Andris) ..F....... [ZBX-12935,ZBX-13539] fixed displaying of floating point values under the "Latest data" page (Sasha) ...G...PS. [ZBX-13579] fixed unnecessary data getting when agent becomes available in the non-collection data period (Sergejs) ..F....... [ZBX-13685] fixed maintenance entries displayed in list when filter is applied (agriscenko) ....I..... [ZBX-12756] improved configure script to check iconv library (MVekslers) ........S. [ZBX-13667] added notification in zabbix server log about 'error' in elasticsearch json response (MVekslers) ..F....... [ZBX-13683] fixed multiselect items not being sorted by name (agriscenko) ........S. [ZBX-13299] fixed autoregistration, discovery and internal notifications not being sent due to uninitialized severity (vso) ....I..... [ZBX-13607] changed ping script to return success also for timeouts (wiper) ..F....... [ZBX-12967] fixed slide show refresh interval multiplier menu not working (agriscenko) ........S. [ZBX-13696] added maximum record limit to old session removal in housekeeper (wiper) ..F....... [ZBX-13642] fixed undefined index in user edit form (agriscenko) ..F....... [ZBX-13668] fixed dynamic widget searching for item key in item prototypes (agriscenko) ..F....... [ZBX-13500] fixed fractional values in triggers being misinterpreted without a leading 0 (agriscenko) ..F....... [ZBX-13561] fixed incorrectly displayed pie graph when first item has no data (Ivo) ..F....... [ZBX-13517] fixed undefined index in pie charts (Ivo) ..F....... [ZBX-13499] fixed checkbox selector in problems table (ashubin, miks) ........S. [ZBX-13598] fixed crash when Zabbix process cannot connect to preprocessing service (viktors, vso) ..F....... [ZBX-13625] fixed blinking in the problem widget (agriscenko) ..F....... [ZBX-13560] fixed acknowledge notifications being visible in the event popup (agriscenko) ..F....... [ZBX-13298] fixed missing graph after faulty graph edit form submission (nikita)
2018-08-08 Update sysutils/intel-microcode-netbsd to 20180807.msaitoh3-11/+18
== 20180807 Release == -- Updates upon 20180703 release -- Processor Identifier Version Products Model Stepping F-MO-S/PI Old->New ---- new platforms ---------------------------------------- WSM-EP/WS U1 6-2c-2/03 0000001f Xeon E/L/X56xx, W36xx NHM-EX D0 6-2e-6/04 0000000d Xeon E/L/X65xx/75xx BXT C0 6-5c-2/01 00000014 Atom T5500/5700 APL E0 6-5c-a/03 0000000c Atom x5-E39xx DVN B0 6-5f-1/01 00000024 Atom C3xxx ---- updated platforms ------------------------------------ NHM-EP/WS D0 6-1a-5/03 00000019->0000001d Xeon E/L/X/W55xx NHM B1 6-1e-5/13 00000007->0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx WSM B1 6-25-2/12 0000000e->00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406 WSM K0 6-25-5/92 00000004->00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx SNB D2 6-2a-7/12 0000002d->0000002e Core Gen2; Xeon E3 WSM-EX A2 6-2f-2/05 00000037->0000003b Xeon E7 IVB E2 6-3a-9/12 0000001f->00000020 Core Gen3 Mobile HSW-H/S/E3 Cx/Dx 6-3c-3/32 00000024->00000025 Core Gen4 Desktop; Xeon E3 v3 BDW-U/Y E/F 6-3d-4/c0 0000002a->0000002b Core Gen5 Mobile HSW-ULT Cx/Dx 6-45-1/72 00000023->00000024 Core Gen4 Mobile and derived Pentium/Celeron HSW-H Cx 6-46-1/32 00000019->0000001a Core Extreme i7-5xxxX BDW-H/E3 E/G 6-47-1/22 0000001d->0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4 SKL-U/Y D0 6-4e-3/c0 000000c2->000000c6 Core Gen6 Mobile BDX-DE V1 6-56-2/10 00000015->00000017 Xeon D-1520/40 BDX-DE V2/3 6-56-3/10 07000012->07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19 BDX-DE Y0 6-56-4/10 0f000011->0f000012 Xeon D-1557/59/67/71/77/81/87 APL D0 6-5c-9/03 0000002c->00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx SKL-H/S/E3 R0 6-5e-3/36 000000c2->000000c6 Core Gen6; Xeon E3 v5 GLK B0 6-7a-1/01 00000022->00000028 Pentium Silver N/J5xxx, Celeron N/J4xxx KBL-U/Y H0 6-8e-9/c0 00000084->0000008e Core Gen7 Mobile CFL-U43e D0 6-8e-a/c0 00000084->00000096 Core Gen8 Mobile KBL-H/S/E3 B0 6-9e-9/2a 00000084->0000008e Core Gen7; Xeon E3 v6 CFL-H/S/E3 U0 6-9e-a/22 00000084->00000096 Core Gen8 CFL-H/S/E3 B0 6-9e-b/02 00000084->0000008e Core Gen8 Desktop
2018-08-06Update salt-docs to 2018.3.2tpaul2-7/+7
Sync salt-docs with current version of salt
2018-08-06Update salt to 2018.3.2tpaul5-13/+133
pkgsrc changes: - Add patch for NetBSD 8 support - Update patches to note they can be removed in the next release - Fix existing patch so it doesn't crash when running with swap enabled Changes: Version 2018.3.2 is a bugfix release for 2018.3.0. The 2018.3.2 release contains only a small number of fixes, which are detailed below. This release fixes two critical issues. The first is Issue #48038, which is a critical bug that occurs in a multi-syndic setup where the same job is run multiple times on a minion. The second issue is #48130. This bug appears in certain setups where the Master reports a Minion time-out, even though the job is still running on the Minion. Both of these issues have been fixed with this release.
2018-08-05Add and enable qpasswd.schmonz1-1/+2
2018-08-05Add qpasswd, a set of password-checking tools for manyschmonz8-0/+183
authentication schemes. The qpasswd tools are meant for use with checkpassword-compatible authentication programs like qmail-popup and qmail-smtpd. Currently, the following auth mechanisms are supported: plain, login, apop, cram-md5, cram-sha1, cram-ripemd, and digest-md5. The tools: - multicheckpw (runs multiple checkpassword programs) - checkqpasswd (for virtual users) - checkpasswd (for system users in /etc/passwd)
2018-08-04Backport fix for NetBSD on bigendian systemssevan3-4/+104
https://www.smartmontools.org/ticket/943 https://www.smartmontools.org/changeset/4628
2018-08-02 Add two officially recommended patch to sysutils/dmidecodemsaitoh2-3/+13
2018-08-01: Avoid OOB read on invalid entry point length Don't let the entry point checksum verification run beyond the end of the buffer holding it (32 bytes). This bug was discovered by Lionel Debroux using the AFL fuzzer and AddressSanitizer. Signed-off-by: Jean Delvare <jdelvare@suse.de> 2018-08-01: Validate structure completeness before decoding Ensure that the whole DMI structure fits in the announced table length before performing any action on it. Otherwise we might end up reading beyond the end of our memory buffer. This bug was discovered by Lionel Debroux using the AFL fuzzer and AddressSanitizer. Its probability is very low, as it requires a DMI table corrupted in one of two very specific ways to trigger. This bug exists since dmidecode version 2.9, although it is hard to test because option --from-dump was only introduced in version 2.10. Signed-off-by: Jean Delvare <jdelvare@suse.de>
2018-08-01Honor LDFLAGS, now builds with PKGSRC_USE_RELRO=yestpaul1-3/+4
Bump PKGREVISION ok <abs>
2018-08-01Offer an 'nbcheckpassword' alternative to pkg_alternatives(8). Bump PKGREVISION.schmonz2-1/+3
2018-08-01Offer an 'nbcheckpassword' alternative to pkg_alternatives(8). Bump PKGREVISION.schmonz2-1/+3
2018-07-31sysutils/consul: Update to 1.2.2fhajny2-7/+7
## 1.2.2 (July 30, 2018) SECURITY: - acl: Fixed an issue where writes operations on the Keyring and Operator were being allowed with a default allow policy even when explicitly denied in the policy. FEATURES: - **Alias Checks:** Alias checks allow a service or node to alias the health status of another service or node in the cluster. - agent: New Cloud Auto-join providers: vSphere and Packet.net. - cli: Added `-serf-wan-port`, `-serf-lan-port`, and `-server-port` flags to CLI for cases where these can't be specified in config files and `-hcl` is too cumbersome. - connect: The TTL of leaf (service) certificates in Connect is now configurable. IMPROVEMENTS: - proxy: With `-register` flag, heartbeat failures will only log once service registration succeeds. - http: 1.0.3 introduced rejection of non-printable chars in HTTP URLs due to a security vulnerability. Some users who had keys written with an older version which are now dissallowed were unable to delete them. A new config option disable_http_unprintable_char_filter is added to allow those users to remove the offending keys. Leaving this new option set long term is strongly discouraged as it bypasses filtering necessary to prevent some known vulnerabilities. - agent: Allow for advanced configuration of some gossip related parameters. - agent: Make some Gossip tuneables configurable via the config file - ui: Included searching on `.Tags` when using the freetext search field. - ui: Service.ID's are now shown in the Service detail page and (only if it is different from the service name) the Node Detail > [Services] tab. BUG FIXES: - acl/connect: Fix an issue that was causing managed proxies not to work when ACLs were enabled. - connect: Fix issue with managed proxies and watches attempting to use a client addr that is 0.0.0.0 or :: - connect: Allow Native and Unmanaged proxy configurations via config file - connect: Fix bug causing 100% CPU on agent when Connect is disabled but a proxy is still running - proxy: Don't restart proxies setup in a config file when Consul restarts - ui: Display the Service.IP address instead of the Node.IP address in the Service detail view. - ui: Watch for trailing slash stripping 301 redirects and forward the user to the correct location. - connect: Fixed an issue in the connect native HTTP client where it failed to resolve service names. ## 1.2.1 (July 12, 2018) IMPROVEMENTS: - acl: Prevented multiple ACL token refresh operations from occurring simultaneously. - acl: Add async-cache down policy mode to always do ACL token refreshes in the background to reduce latency. - proxy: Pass through HTTP client env vars to managed proxies so that they can connect back to Consul over HTTPs when not serving HTTP. - connect: Persist intermediate CAs on leader change. BUG FIXES: - api: Intention APIs parse error response body for error message. - agent: Intention read endpoint returns a 400 on invalid UUID - agent: Service registration with "services" does not error on Connect upstream configuration. - dns: Ensure that TXT RRs dont get put in the Answer section for A/AAAA queries. - dns: Ensure that only 1 CNAME is returned when querying for services that have non-IP service addresses. - api: Fixed issue where `Lock` and `Semaphore` would return earlier than their requested timeout when unable to acquire the lock. - watch: Fix issue with HTTPs only agents not executing watches properly - agent: Managed proxies that bind to 0.0.0.0 now get a health check on a sane IP - server: (Consul Enterprise) Fixed an issue causing Consul to panic when network areas were used - license: (Consul Enterprise) Fixed an issue causing the snapshot agent to log erroneous licensing errors
2018-07-30Add 'inet6' option to control dependency on ucspi-tcp{6,}. Bump version.schmonz2-3/+16
2018-07-29From <URL:http://cr.yp.to/distributors.html>:schmonz1-2/+3
2018.07.29: I hereby place the checkpassword package (in particular, checkpassword-0.90.tar.gz, with SHA-256 checksum 74300364b6be26be08e34f768532e911789827179e680bc89db3525fe415762f) into the public domain. The package is no longer copyrighted.
2018-07-26sortjnemeth1-3/+3
2018-07-25Set LICENSE.schmonz1-1/+2
2018-07-25s/ucspi-tcp/ucspi-tcp6/g in dependencies. Bump PKGREVISIONs.schmonz1-3/+3
2018-07-25decode-dimms: pkglint fixeswiz1-6/+1
2018-07-25Include the GIT_COMMIT id in the new revision string, as well as thepgoyette1-2/+2
date.
2018-07-25Move the revision string substituion stuff to pre-patchpgoyette1-3/+4
Fix the substitution string to include the trailing / within the 's, and add a blank line for readability (thanks jnemeth@ for these two).
2018-07-25Put the REPLACE_PERL back into the Makefile, and remove it from thepgoyette3-10/+6
patch-file.
2018-07-25Remove REPLACE_PERL as it's not doing anythingpgoyette1-2/+6
Edit the tool to have a useful version identifier - avoiding any attempts for repository-management tools to perform substitution on $Revision$ and $Date$
2018-07-25Update the patch again to get it with the correct from-to files.pgoyette2-64/+64
2018-07-25Update distinfo when fixing patch filepgoyette1-2/+2
2018-07-25Fix the file names in the patchpgoyette1-3/+3
2018-07-25Update the patch file to not attempt to change CVS keywordspgoyette2-72/+64
2018-07-25Re-add sysutils/decode-dimmspgoyette1-1/+2
2018-07-25Re-add the decode-dimms package after resolving the various issuespgoyette6-0/+234
related to packaging. Many thanks to maya@ for her extensive help in getting this to work!
2018-07-24s/4.8/4.11bouyer2-3/+3
2018-07-24Add dependency on net/ucspi-tcp for "argv0" command. Bump version.schmonz1-2/+3
2018-07-24sysutils/xen*: invert python version logic, only 2.7 is ok.maya10-21/+21
Mostly so we don't match python37 on xen 4.11, but also because python3 is a moving target and this saves us having to add the next version.