NSD 3.2.12
Bugfixes
Fix for VU#624931 CVE-2012-2978: NSD denial of service
vulnerability from non-standard DNS packet from any host on
the internet.
NSD 3.2.11
Features
Fallback to AXFR if IXFR is unknown at the primary. NSD considers
IXFR unknown at the primary if there is a negative response
for the IXFR RRtype. This does not override the value for
'allow-axfr-fallback'.
Allow for reading in new DNSKEY algorithm mnemonics (RFC5155,
RFC5702, RFC5933, and RFC6605 (ECDSA)).
Zone statistics, enable with --enable-zone-stats. This stores
the BIND8 stats per zone in a configurable statistics file.
This option does not scale and should therefore not be enabled
when serving many zones.
Support for TLSA RRtype (DANE).
Bugfixes
Fix for qtype ANY for a wildcard domain in NSEC signed zone:
Don't add the wildcard domain NSEC into the answer section.
Instead, put the wildcard expanded NSEC into the answer section
and keep the wildcard domain NSEC in the authority section.
Fix for accept spinning reported by OpenBSD.
Fix restart failed due to bad ixfr packet because of zone
removed from nsd.conf.
Bugfix #453: typo in nsdc man page.
Operational notes
NSD uses the query name for dname compression again (Fix#235
had as side effect that this didn't happen anymore and is hereby
undone).
On DragonFly, this package always halted on the configure stage with the
message, "configure: error: unrecognized options: --with-libintl-prefix"
We couldn't find the source of this obsolete configure option, it didn't
come from mldonkey and devel/gettext-lib isn't a dependency. Adding
--disable-option-checking changed allowed this to be a warning rather than
a fatal error and also allows a successful build.
Background: DragonFly doesn't have libintl in base.
Mosh is a Remote terminal application that allows roaming, supports
intermittent connectivity, and provides intelligent local echo and
line editing of user keystrokes.
Mosh is a replacement for SSH. It's more robust and responsive,
especially over Wi-Fi, cellular, and long-distance links.
GnuTLS deprecated gnutils_transport_set_lowat function in version 2.12.0
and finally removed it with version 3.0, breaking any packages that
still reference it.
The lowat feature is now disabled permanently I think.
The patch uses the GNUTLS_VERSION_NUMBER macro to appropriately conceal
the function reference. The same patch is widely seen on the 'net with
other packages that use GnuTLS.
DragonFly doesn't define AT_SYMLINK_FOLLOW. The added patch will
appropriately disable linkat support.
No revbump necessary - this patch doesn't change the binary on systems
for which it has already built.
Transmission 2.60 (2012/07/05)
Fix issues when adding magnet links
Improved scraping behavior for certain trackers
Fix bug where cleared statistics might not save
Updated versions of miniupnpc and libuTP
Fixed compilation issues with Solaris and FreeBSD
Other minor fixes
Web Client
Notification of downloading and seeding completion (requires browser support of notifications)
Re-add select all and deselect all buttons to the file inspector tab
Qt
Add Basque translation
Transmission 2.52 (2012/05/19)
Fix bug with zero termination of multiscrape strings
Update the bundled libnatpmp and miniupnp port forwarding libraries
GTK+
Fix minor bug in Ubuntu app indicator support
Transmission 2.51 (2012/04/08)
Update the bundled libnatpmp and miniupnp port forwarding libraries
Add environment variable options to have libcurl verify SSL certs
Support user-specified CXX environment variables during compile time
GTK+
Fix crash when adding torrents on systems without G_USER_DIRECTORY_DOWNLOAD
Honor the notification sound setting
Add a tooltip to files in the torrents' file list
Fix broken handling of the Cancel button in the "Open URL" dialog
Improve support for Gnome Shell and Unity
Catch SIGTERM instead of SIGKILL
Qt
Progress bar colors are now similar to the Mac and Web clients'
Improve the "Open Folder" behavior
Web Client
Fix global seed ratio progress bars
Fix sometimes-incorrect ratio being displayed in the inspector
If multiple torrents are selected, show the aggregate info in the inspector
Upgrade to jQuery 1.7.2
Daemon
Show magnet link information in transmission-remote -i
Transmission 2.50 (2012/02/14)
Fix crash when adding some magnet links
Improved support for downloading webseeds with large files
Gracefully handle incorrectly-compressed data from webseed downloads
Fairer bandwidth distribution across connected peers
Use less CPU when calculating undownloaded portions of large torrents
Use the Selection Algorithm, rather than sorting, to select peer candidates
Use base-10 units when displaying bandwidth speed and disk space
If the OS has its own copy of natpmp, prefer it over our bundled version
Fix Fails-To-Build error on Solaris 10 from use of mkdtemp()
Fix Fails-To-Build error on FreeBSD from use of alloca()
Fix Fails-To-Build error when building without a C++ compiler for libuTP
GTK+
Fix regression that broke the "--minimized" command-line argument
Instead of notify-send, use the org.freedesktop.Notifications DBus API
Fix a handful of small memory leaks
Qt
Fix FTB when building without libuTP support on Debian
Web Client
Filtering by state and tracker
Sorting by size
Larger, easier-to-press toolbar buttons
Fix the torrent size and time remaining in the inspector's details tab
Bundle jQuery and the stylesheets to avoid third-party CDNs
Upgrade to jQuery 1.7.1
Fix runtime errors in IE 8, IE 9, and Opera
Revise CSS stylesheets to use SASS
Minor interface tweaks
Daemon
Fix corrupted status string in transmission-remote
To make this work properly rework the readline detection to not use LIBS
but instead use the new @LIBREADLINE@ AC_SUBST (This stops _everything_
being linked to libreadline!).
Bump PKGREVISION.
==============================
Release Notes for Samba 3.5.16
July 2, 2012
==============================
This is the latest stable release of Samba 3.5.
Major enhancements in Samba 3.5.16 include:
o Fix possible memory leaks in the Samba master process (bug #8970).
o Fix uninitialized memory read in talloc_free().
o Fix smbd crash with unknown user (bug #8314).
Changes since 3.5.15:
---------------------
o Jeremy Allison <jra@samba.org>
* BUG 8314: Fix smbd crash with unknown user.
* BUG 8831: Fix inconsistent (with manpage) command-line switch for "help"
in smbtree.
* BUG 8882: Fix processing of %U with vfs_full_audit when "force user"
is set.
* BUG 8897: winbind_krb5_locator only returns one IP address.
* BUG 8910: resolve_ads() code can return zero addresses and miss valid DC
IP addresses.
* BUG 8957: Fix typo in pam_winbindd code.
* BUG 8972: Directory group write permission bit is set if unix extensions
are enabled.
* BUG 8974: Kernel oplocks are broken when uid(file) != uid(process).
* BUG 8989: Send correct responses to NT Transact Secondary when no data and
no params.
* BUG 8994: Fix "winbind normalize names".
o Andrew Bartlett <abartlet@samba.org>
* BUG 8599: Only use SamLogonEx when we can get unencrypted session keys.
* BUG 8943: Slow but responsive DC can lock up winbindd for > 10 minutes
at a time.
o Björn Baumbach <bb@sernet.de>
* BUG 7564: Fix default name resolve order in the manpage.
o John Bradshaw <john@johnbradshaw.org>
* BUG 7938: Fix typo (overrided -> overridden) in Samba3-HOWTO.
o Olaf Flebbe <o.flebbe@science-computing.de>
* BUG 8552: Correct documentation of "case sensitive".
o Björn Jacke <bj@sernet.de>
* BUG 8869: Remove outdated netscape ds 5 schema file.
* BUG 9011: Fix build on HP-UX.
o Volker Lendecke <vl@samba.org>
* Fix uninitialized memory read in talloc_free().
* BUG 8338: OS/X can not deal with a 10-vwv read on normal files.
* BUG 8998: Notify code can miss a ChDir.
* BUG 9000: Fix a Winbind race leading to 100% CPU.
* BUG 9003: Fix posix acl on gpfs.
o Matthieu Patou <mat@matws.net>
* BUG 8975: Make sure that Winbind can coredump.
o Karolin Seeger <kseeger@samba.org>
* BUG 7930: Add hint that setting "profile acls = yes" on normal shares can
cause trouble.
o Richard Sharpe <realrichardsharpe@gmail.com>
* BUG 8822: Fix building out-of-tree vfs modules.
* BUG 8970: Fix possible memory leaks in the Samba master process.
o Simo Sorce <idra@samba.org>
* BUG 8915: Fix pam_winbind build against newer iniparser library.
=============================
Release Notes for Samba 3.6.6
June 25, 2012
=============================
This is is the latest stable release of Samba 3.6.
Major enhancements in Samba 3.6.6 include:
o Fix possible memory leaks in the Samba master process (bug #8970).
o Fix uninitialized memory read in talloc_free().
o Fix joining of XP Pro workstations to 3.6 DCs (bug #8373).
Changes since 3.6.5:
--------------------
o Michael Adam <obnox@samba.org>
* BUG 8738: SMB2 server will not release unused shares.
* BUG 8749: Sign non guest sessions in SessionSetup.
* BUG 8921: Fix race writing registry values.
o Jeremy Allison <jra@samba.org>
* BUG 8373: Fix joining of XP Pro workstations to 3.6 DCs.
* BUG 8627: Fix crash bug in dns_create_probe when dns_create_update fails.
* BUG 8723: Add pthread-based aio VFS module.
* BUG 8784: When calculating the share security mask, take priviliges into
account for the connecting user.
* BUG 8811: sd_has_inheritable_components segfaults on an SD that
se_access_check accepts.
* BUG 8837: Fix crash in smbd when deleting directory and veto files are
enabled.
* BUG 8857: Setting traverse rights fails to enable directory traversal when
acl_xattr in use.
* BUG 8882: Broken processing of %U with vfs_full_audit when force user is
set.
* BUG 8897: Make winbind_krb5_locator not only returning one IP address.
* BUG 8910: resolve_ads() code can return zero addresses and miss valid
DC IP addresses.
* BUG 8922: smbclient's tarmode insists on listing excluded directories.
* BUG 8953: Winbind can hang as nbt_getdc() has no timeout.
* BUG 8957: Typo in pam_winbindd code MUST fix.
* BUG 8970: Fix possible memory leaks in the Samba master process.
* BUG 8971: cleanup_timeout_fn() is called too often, on exiting when an
smbd is idle.
* BUG 8972: Directory group write permission bit is set if unix extensions
are enabled.
o Christian Ambach <ambi@samba.org>
* BUG 8406: Fix a return code check in Winbind.
* BUG 8807: Fix crash in dcerpc_lsa_lookup_sids_noalloc() crashes when
groups has more than 1000 groups.
o Andrew Bartlett <abartlet@samba.org>
* BUG 8599: Only use SamLogonEx when we can get unencrypted session keys.
* BUG 8727: Fix smbclients with posix large reads.
* BUG 8943: Slow but responsive DC can lock up Winbind for > 10 minutes
at a time.
o Björn Baumbach <bb@sernet.de>
* BUG 7564: Fix default name resolve order in the manpage.
* BUG 8554, 8612, 8748: Add new printers to registry.
* BUG 8789: Remove whitespace in example samba.ldif.
o Alexander Bokovoy <ab@samba.org>
* BUG 8988: Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute().
o Alejandro Escanero Blanco <aescanero@gmail.com>
* BUG 8798: The primary rid should be in the groups rid array.
o Ira Cooper <samba@ira.wakeful.net>
* BUG 8729: Fix getpass regressions on Solaris/Illumos.
* BUG 8743: Fix configure.developer builds on Solaris.
* BUG 8910: Fix bad bugfix for bug #8910.
* BUG 8952: Fix negative SID->uid/gid cache handling.
* BUG 8995: Use fsp_persistent_id() as persistent_file_id part for SMB2.
o David Disseldorp <ddiss@samba.org>
* BUG 8762: Fix crash in printer_list_set_printer().
o Olaf Flebbe <o.flebbe@science-computing.de>
* BUG 8859: Fix assertion in reg_parse.
o Björn Jacke <bj@sernet.de>
* BUG 8732: Fix compile of krb5 locator on Solaris.
* BUG 8869: Remove outdated netscape ds 5 schema file.
* BUG 8978: Remove dependency on automake for 'make everything'.
o Steve Langasek <steve.langasek@ubuntu.com>
* BUG 8920: Fix null dereference in pdb_interface.
o Volker Lendecke <vl@samba.org>
* Fix uninitialized memory read in talloc_free().
* BUG 8567: Fix segfault in dom_sid_compare.
* BUG 8733: Delete streams on directories (streams_depot).
* BUG 8760: Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY.
* BUG 8836: Fix segfaults on "smbcontrol close-share" in aio_fork.
* BUG 8861: Fix a segfault with debug level 3 on Solaris.
* BUG 8904: Fix Winbind crash triggered by 'wbinfo --lookup-sids ""'.
* BUG 8998: Notify code can miss a ChDir.
o Stefan Metzmacher <metze@samba.org>
* BUG 8139: Ignore SMBecho errors (the server may not support it).
* BUG 8527: db_ctdb_traverse fails to traverse records created within the
current transaction.
* BUG 8311: Winzip occasionally can not read files out of an open winzip
dialog.
* BUG 8739: Fill the sids array of the info in
wbcAuthUserInfo_to_netr_SamInfo3().
* BUG 8749: Sign non guest sessions in SessionSetup.
* BUG 8995: Use fsp_persistent_id() as persistent_file_id part for SMB2.
o Matthieu Patou <mat@matws.net>
* BUG 8599: Set the can_do_validation6 also for trusted domain.
* BUG 8714: Catch with pid filename's change when config file is not
smb.conf.
* BUG 8734: Don't try to do clever thing if the username is not found while
authenticating through Winbind.
* BUG 8771: Winbind takes up to 20 minutes to change from DC 1 to DC 2.
* BUG 8975: Call dump_core_setup after command line option has been parsed.
o SATOH Fumiyasu <fumiyas@osstech.co.jp>
* BUG 8826: Prepend '/' to filename argument (docs).
o Andreas Schneider <asn@samba.org>
* BUG 8944 and 8567: Don't lookup the system user in pdb.
o Richard Sharpe <realrichardsharpe@gmail.com>
* BUG 8768: Honor SeTakeOwnershipPrivilege when file opened with
SEC_STD_WRITE_OWNER.
* BUG 8797: Correctly handle DENY ACEs when privileges apply.
* BUG 8822: Fix building out-of-tree modules.
* BUG 8945: vfs_acl_common discards errors from writing to the underlying
storage.
* BUG 8970: Fix possible memory leaks in the Samba master process.
o Simo Sorce <idra@samba.org>
* BUG 8915: Fix pam_winbind build against newer iniparser library.
o Joseph Tam <jtam.home@gmail.com>
* BUG 8877: Syslog broken owing to mistyping of debug_settings.syslog.
o Ralph Wuerthner <ralph.wuerthner@de.ibm.com>
* BUG 8845: Move print_backend_init() behind init_system_info().
6 years of changes. 3.5.1 in particular has:
it is time for another version of Ocamlnet. The new release 3.5 focuses on
the system interface, and includes a long list of smaller improvements.
The system interface, Netsys_posix, is extended by:
- Support for POSIX clocks and POSIX timers (with nanosecond resolution)
- Netsys_posix.spawn usses now the posix_spawn call if present on the OS
- Adding support for pollable events (as e.g. provided by Linux via
eventfd). For other OS an emulation is available.
- Support for epoll on Linux
Note that Netsys_posix covers now large parts of POSIX realtime.
Other improvements:
- The code generator for XDR has been improved. A new switch -direct for
ocamlrpcgen can be used to generate direct mappings between OCaml values
and binary representation (in many cases). Speedups up to 50% are
possible for large XDR values.
- The new module Uq_mt allows it to access an event-driven resource from
several kernel threads (e.g. use an RPC client commonly from several
threads).
- The thread-safety of Netplex container functions has been improved.
- Netmulticore condition variables can now be polled, for better
integration into event-based programs.
- Option greedy_accepts for Netplex to support servers that accept
many connections per second. With this improvement, Netplex can
now accept more than 5000 connections/s, and assign them to worker
processes.
Last but not least there is now a new tutorial for Equeue (event systems
and engines). In particular, the section about combining Ocamlnet with Lwt
might be interesting.
Changelog:
aria2 1.15.1
============
Release Note
------------
This release fixes the bug that prevents --bt-lpd-interface from
working. If some options sent by RPC request are not acceptable for
the download type, they are now simply ignored instead of rejecting
RPC request entirely. The aria2 RPC server now returns 4XX error code
if the request is not valid in the HTTP level. To improve packaging,
--with-bashcompletiondir configure option was added. This option
overrides where the aria2c bash_completion file is going to be
installed. All manual pages are now generated by Sphinx.
Changes
-------
* Return appropriate HTTP status code on RPC failure. In this change,
we return 404 if the request path is neither /json-rpc nor /rpc. If
XML feature is not enabled and /rpc is requested, return 404. If
XML parser failed, return 400. JSON parser failure has been handled
well in the existing code.
* Ignore unacceptable options in RPC request instead of throwing
error. This change allows RPC client to send same options for the
different type of downloads.
* Handle sockaddr_in.sin_len and sockaddr_in6.sin6_len. Check
sockaddr_in.sin_len and sockaddr_in6.sin6_len are available and
assign values to them properly. This change fixes unit test error
and most error related to getnameinfo() on netbsd.
* Removed dependency on inet_aton. Implemented inetPton as a
replacement of inet_aton. inetPton is implemented using
net::getBinAddr. This change fixes bug#3525424.
* Added --with-bashcompletiondir configure option. By default,
bash_completion file named aria2c is installed to the directory
$prefix/share/doc/aria2/bash_completion. To change the install
directory of the file, use --with-bashcompletiondir option.
* Converted README.asciidoc into README.rst
* Use Sphinx for aria2 manual page documentation. The source files
for manual pages are placed under doc/manual-src. The manual pages
are generated under doc/manual-src/$LANG/_build. The HTML version
manual page was dropped from the distribution archive.
* Fixed the bug which prevents --bt-lpd-interface from working.
Fixes bug#3520125
- missing this references to ensure template functions are found
- using == as assignment
- unused functions in lex sources
- adding integers to strings instead of formatting them
- class vs struct mismatches
