<snip>
Cdrdao changes:
o SECURITY FIX: cdrdao now gives up its root privileges after setting
up real-time scheduling, as well as before saving settings through
the --save option. This fixes a potential local root exploit when
cdrdao is installed with the +s chmod flag. Using --save now also
forces an early exit after the settings are saved.
o Added MP3 and Ogg Vorbis file support (through respectively the
libmad and libvorbis libraries). cdrdao will decode the MP3 and
Ogg files into temporary WAV files that will be deleted upon exit
(unless the new option --keep is used). The directory used to
store those temporary WAV files can be specified with the --tmpdir
option (default is /tmp).
o Improved native CUE file support: replaced old incomplete existing
parser with the one from Matthias Czapla's excellent
cue2toc. Added support for cutting binary files.
o Added --rspeed option to manually set the device reading speed. Be
warned not all devices support this.
o Packaged scsilib library upgraded from cdrtools 2.01 (previously
was from 2.01a31).
o Added --no-mode2-mixed option. Don't read a MODE2 disk as
MODE2_FORM_MIXED, only read MODE2_FORM1 or MODE2_FORM2 (Matthieu
Castet).
o Added help for little-known drive-info command.
GCDMaster changes:
o MP3 and Ogg Vorbis support: you can drag and drop .mp3, .m3u and
.ogg files from Nautilus into the sample display window.
o Switched to gtkmm24 API. Improved file browsers.
o CUE files support.
o Sound output now uses libao library.
o Added 'Select All' item in menu.
o Added 'Eject' button to progress dialog.
o Bug fixes (sample selection weirdness, couldn't close window during
play, problems with gcdmaster command-line argument, crashes with
multiple project windows, drive status not reported correctly).
<snip>
Note that the FreeBSD ports doesn't install cdrdao setuid root so you are
not vulnerable by default.
- Fix building on FreeBSD 7.
- Turn on the usage of mlockall(2) again as it no longer causes negative side
effects on FreeBSD >= 502113.
Requested by: will [1]
Approved by: portmgr (linimon)
Security: http://vuxml.freebsd.org/d51a7e6e-c546-11d9-9aed-000e0c2e438a.html
This adds some new _experimental_ pipelined HTTP code which typically
makes portsnap 3-10 times faster at downloading updates. This
experimental code is disabled by default; to enable it, run portsnap
with the (undocumented) -x option. (e.g., "portsnap -x fetch")
I am not currently aware of any problems with this new code, but it has
had less than 24 hours of testing; I would definitely like to know if
it breaks anything.
If portsnap is run without the -x option, this version should behave
exactly the same way as the previous version.
Approved by: simon
