This version fixes problems in the SNMP and LDAP dissectors revealed by
the PROTOS test suite. The SCTP checksum code for CRC32C was updated to
match the new (version 3) draft specification. Additionally, the layout
of the capture dialog was vastly improved.
NCP type 0x2222 packet type support was added to the randpkt utility, and
a script to recreate packets from core dumps (pkt-from-core.py) was added
to the source distribution.
SNA over Ethernet and HiPath HDLC support was added. Dissectors receiving
updates include 802.11w, 802.11, AARP, AFS, ARP, COPS, DCE RPC, EAP/EAPOL,
GIOP, ICQ, iSCSI/SCSI, ISIS, LAPD, LDAP, M3UA, NBNS, NDMP, OSPF, Q.931,
RADIUS, Raw IP, RX, SDB, SMB, SNMP, SSL, TCP, TPKT, UCP, WSP, and YP.
Support for the AiroPeek and pflog file formats was also enhanced.
--- 9.2.1rc1 released ---
1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
an invalid pointer.
1206. [bug] SERVFAIL and NOTIMP responses to a EDNS should trigger
a non-EDNS retry.
1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
of the message. [RT #2449]
1204. [bug] libbind: res_nupdate() failed to update the name
server addresses before sending the update.
1201. [bug] Require that if 'callbacks' is passed to
dns_rdata_fromtext(), callbacks->error and
callbacks->warn are initialized.
1200. [bug] Log 'errno' that we are unable to convert to
isc_result_t. [RT #2404]
1198. [bug] OPT printing style was not consistant with the way the
header fields are printed. The DO bit was not reported
if set. Report if any of the MBZ bits are set.
1197. [bug] Attempts to define the same acl multiple times were not
detected.
1196. [contrib] update mdnkit to 2.2.3.
1195. [bug] Attempts to redefine builtin acls should be caught.
[RT #2403]
1194. [bug] Not all duplicate zone definitions were being detected
at the named.conf checking stage. [RT #2431]
1193. [bug] Best effort parsing didn't handle packet truncation.
1191. [bug] A dynamic update removing the last non-apex name in
a secure zone would fail. [RT #2399]
1189. [bug] On some systems, malloc(0) returns NULL, which
could cause the caller to report an out of memory
error. [RT #2398]
1188. [bug] Dynamic updates of a signed zone would fail if
some of the zone private keys were unavailable.
1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
EOL token when reading to end of line.
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
unless RES_INIT is set when calling res_*init().
1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
when res_*init() is called.
1183. [bug] Handle ENOSR error when writing to the internal
control pipe. [RT #2395]
1182. [bug] The server could throw an assertion failure when
constructing a negative response packet.
1176. [doc] Document that allow-v6-synthesis is only performed
for clients that are supplied recursive service.
[RT #2260]
1175. [bug] named-checkzone failed to call dns_result_register()
at startup which could result in runtime
exceptions when printing "out of memory" errors.
[RT #2335]
1174. [bug] Win32: add WSAECONNRESET to the expected errors
from connect(). [RT #2308]
1173. [bug] Potential memory leaks in isc_log_create() and
isc_log_settag(). [RT #2336]
1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
table of RR types in ARM.
1170. [bug] Don't attempt to print the token when a I/O error
occurs when parsing named.conf. [RT #2275]
1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
1167. [contrib] nslint-2.1a3 (from author).
1166. [bug] "Not Implemented" should be reported as NOTIMP,
not NOTIMPL. [RT #2281]
1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
1164. [bug] Empty masters clauses in slave / stub zones were not
handled gracefully. [RT #2262]
1162. [bug] The allow-notify option was not accepted in slave
zone statements.
1161. [bug] named-checkzone looped on unbalanced brackets.
[RT #2248]
1160. [bug] Generating Diffie-Hellman keys longer than 1024
bits could fail. [RT #2241]
1156. [port] The configure test for strsep() incorrectly
succeeded on certain patched versions of
AIX 4.3.3. [RT #2190]
1154. [bug] Don't attempt to obtain the netmask of a interface
if there is no address configured. [RT #2176]
1152. [bug] libbind: read buffer overflows.
1144. [bug] rndc-confgen would crash if both the -a and -t
options were specified. [RT #2159]
1142. [bug] dnssec-signzone would fail to delete temporary files
in some failure cases. [RT #2144]
1141. [bug] When named rejected a control message, it would
leak a file descriptor and memory. It would also
fail to respond, causing rndc to hang.
[RT #2139, #2164]
1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
to the -s option. [RT #2138]
1136. [bug] CNAME records synthesized from DNAMEs did not
have a TTL of zero as required by RFC2672.
[RT #2129]
1125. [bug] rndc: -k option was missing from usage message.
[RT #2057]
1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
are now documented. [RT #2052]
1123. [bug] dig +[no]fail did not match description. [RT #2052]
1109. [bug] nsupdate accepted illegal ttl values.
1108. [bug] On Win32, rndc was hanging when named was not running
due to failure to select for exceptional conditions
in select(). [RT #1870]
1081. [bug] Multicast queries were incorrectly identified
based on the source address, not the destination
address.
1072. [bug] The TCP client quota could be exceeded when
recursion occurred. [RT #1937]
1071. [bug] Sockets listening for TCP DNS connections
specified an excessive listen backlog. [RT #1937]
1070. [bug] Copy DNSSEC OK (DO) to response as specified by
draft-ietf-dnsext-dnssec-okbit-03.txt.
1014. [bug] Some queries would cause statistics counters to
increment more than once or not at all. [RT #1321]
1012. [bug] The -p option to named did not behave as documented.
988. [bug] 'additional-from-auth no;' did not work reliably
in the case of queries answered from the cache.
[RT #1436]
995. [bug] dig, host, nslookup: using a raw IPv6 address as a
target address should be fatal on a IPv4 only system.
changes from 1.2 to 1.3, to quote feico's message:
>It does add little functionality over version 1.2, but the code
>quality is a lot higher and many bugs/misfeatures and loose ends
>have been fixed.
<shell@shellhung.org>.
Notable changes since version 1.0901:
- Net::FTP::I Don't call sysread multiple times after calling select() as it
may block.
- Net::POP3 Patches from Ville Skytta for various cleanup and use Digest::MD5.
- Net::Cmd, Net::NNTP, Net::POP3, Net::SMTP
Add support for returning tied filehandles from some operations.
- Net::FTP Allow tied handles to be passed to get/put.
- Net::Cmd Pod changes from Robin Barker.
- Net::FTP Don't do EBCDIC translation on a binary transfer.
- Net::FTP Fix docs for anonymous login.
- Net::SMTP Support binding to a local port/address
- Net::Netrc Support exscaping in the netrc file.
*5.0.pre2 (beta release)*
NOTE WELL: this release is an beta release. Please let us know
immediately about any bugs you find so we can fix them before the
real 5.0 releas.
New:
- Much of the agent internals were completely rewritten and sports
a new module API to make your life easier. See the
agent/mibgroup/testhandler.c file for example code that makes
use of some of the new functionality.
(Also see http://www.net-snmp.org/tutorial/new-agent/ which has
some incomplete documentation)
- The agent supports multiple SNMPv3 contexts and mib modules can
now register themselves under different contexts. (see the -n
option in the snmpcmd manual page for details on specifying
context strings in requests)
- The proxy code has been completely rewritten and now supports
the use of SNMPv3 contexts to help select which proxied host you
wish to talk to.
- All the tools take --configToken=value options now. (see -H
output from any command for what configTokens it accepts)
- All the tools can speak over many different transport layers
now, including UDP/TCP (ipv4 and ipv6), AAL5pvc, and IPX. See
./configure --help for details on enabling them.
Note: the -p and -T flags to all the applications have been
removed. Use hostname strings like "tcp:localhost:9999"
instead. See the snmpcmd manual page for details.
- snmptrapd now acts as an agentx subagent and implements portions
of the NOTIFICATION-LOG-MIB.
- kerberos authenticated and encrypted SNMPv3 is now possible.
See ./configure --help for details on enabling the ksm security module.
- The AgentX subagent protocol implementation has many new
features and fixes.
- mib2c was completely rewritten and has a much improved
configuration file specification.
- A "net-snmp-config" script will get installed which can report
how the various tools were built (which libraries they were
linked against, etc).
- new perl specific configure options --with-perl-modules &
--enable-embedded-perl. See ./configure --help for details.
- The beginnings of some new Perl modules (alpha level quality)
are in the perl directory, including:
- NetSNMP::agent which allows perl scripts to become net-snmp
master or subagents
- AnyData::SNMP is available that implements a perl DBI
interface to map SQL commands to SNMP. Included is a "snmpsh"
shell where SQL commands can be typed, aliases created, etc.
See the perl/AnyData_SNMP/INSTALL file for details.
- Beginning (alpha level quality) support for embedding perl
subroutines directly within the net-snmp agent.
- Much of the code is getting documented with "doxygen" style
documentation. Run "make docs" if you have doxygen installed.
- RMON support is available. See agent/mibgroup/Rmon/README for details.
all dependencies on packages depending on "png" which contain shared
libraries, all for the (imminent) update to the "png" package.
[List courtesy of John Darrow, courtesy of "bulk-build".]
- Additional fix for zlib double-free bug. (Martin Pool, Andrew
Tridgell) (CVE CAN-2002-0059)
- Merge in changes from zlib 1.1.3 to zlib 1.1.4. (Jos Backus)
(Note that rsync still uses a custom version of zlib; you can
not just link against a system library. See zlib/README.rsync)
- Additional test cases for --compress. (Martin Pool)
v0.49 Fix compilation problems on several platforms.
v0.48 Draw names in red (GTK) or bold (Curses) if host doesn't
respond.
v0.47 Fixed a (believed-) non-exploitable bufferoverflow.
Thanks Damian.
v0.46 Included patch to be able to specify outgoing interface
address.
v0.45 People are pressuring me to release new versions with their
changes. That's fine. Now this version just adds dynamic
switching between numeric / dns names, and some minor
stuff I forgot. This release serves as a code-sycn-release.
new version with even more new stuff in about two weeks!
I'm afraid I don't know how to fix the MaxOS-X compilation
problems in the source. Help wanted...
v0.44 David Stone adds the "last" column to the gtk version.
v0.43 Compile fixes.
- Make sure that supplementary groups are removed from a server
process after changing uid and gid. (Ethan Benson) (Debian bug
#132272, CVE CAN-2002-0080)
- Fix zlib double-free bug. (Owen Taylor, Mark J Cox) (CVE
CAN-2002-0059)
- Fixed problem that in many cases caused the error message
unexpected read size of 0 in map_ptr
and resulted in the wrong data being copied.
- Fixed compilation errors on some systems caused by the use of
"unsigned int64" in rsync.h.
- Fixed problem on systems such as Sunos4 that do not support realloc
on a NULL pointer; error was "out of memory in flist_expand".
- Fix for rsync server processes hanging around after the client
unexpectedly disconnects. (Colin Walters) (Debian bug #128632)
- Cope with BSD systems on which mkdir() will not accept a trailing
slash.
- Merge in changes from zlib 1.1.2 to zlib 1.1.3. (Note that
rsync still uses a custom version of zlib; you can not just link
against a system library. See zlib/README.rsync)
- Command to initiate connections is only shown with -vv, rather
than -v as in 2.5.2. Output from plain -v is more similar to
what was historically used so as not to break scripts that try
to parse the output.
- Added --no-whole-file and --no-blocking-io options (Dave Dykstra)
- Made the --write-batch and --read-batch options actually work
and added documentation in the man page (Jos Backus)
- If the daemon is unable to fork a child to accept a connection,
print an error message. (Colin Walters)
20020227/PB:
libipv6addr.c: fixed a bug in ipv6addr_setoctett.c regarding num limit (oops..)
ipv6calc.c: move structure definitions to...
libmac.h: add related structure definition ipv6calc.c
libipv6addr.h: add related structure definition from ipv6calc.c
libipv4addr.*: new for handling IPv4 addresses
ipv4_to_6to4addr.*: new for handling conversion IPv4 -> IPv6to4
librfc3056.*: library for conversion IPv4 -> IPv6to4
libipv6calc.c: fix array index bug of compat[] (oops..)
tag release 0.39
20020226/PB:
add original getopt tarball into samplecode, fill related READMEs
tag release 0.38
20020224/PB:
move nibble string function to librfc1886
minor fixes
restore original samplecode files and remove CVS id to prevent CVS changes
add original getopt code to samplecode
tag release 0.37
20020224/PB:
minor Makefile fixes
fix getopt Makefile
minor cosmetic fix in test script
cosmetic cleanups
some code cleanup and minor redesign, some optimizing
fixes stupid help call bugs
format options can be used now in more functions
add support of "printstart" and "printend" in "ip6int", "bitstring"
extend "showinfo", add "machine_readable" for easier postprocessing
20020223/PB:
complete limited support of bistring labels
change examples to 6bone dummy address (3ffe:ffff:...)
add a trailling dot on ip6.[int|arpa] output
migrate getopt patch for OpenBSD submitted by Vladimir Kotal <vlada at openbsd dot cz>
minor Makefile fixes
tag release 0.37pre1
Pure-FTPd is a free (GPL), secure, production-quality and standard-conformant
FTP server based upon Troll-FTPd. It doesn't provide useless bells and whistles,
but focuses on efficiency and ease of use. It provides simple answers to common
needs, plus unique useful features for personal users as well as hosting
providers.
Provided by Dawid Szymanski <dawszy@arhea.net> in PR/15762,
slightly modified by me.
* Lose the source port check on incoming packets
* (x)ntpdc compatibility patch
* Virtual IP improvements
* ntp_loopfilter fixes and improvements
* ntpdc improvements
* GOES refclock fix
* JJY driver
* bsdi port fixes
* HP MPE/iX port
* Win/NT port upgrade
* Dynix PTX port fixes
* Document conversion from CVS to BK
* readline support for ntpq
Patch submitted by Lubomir Sedlacik <salo@xtrmntr.org> in private mail.
Changes since 0.19:
0.36: - fix bug relating to ipv6calc.h (changes now in ipv6calc.h.in)
- start preparation for implementing bitstring conversions
0.35: - add new options: --addr_to_ip6arpa|-a
does the same like --addr_to_ip6int|-r, but ends with "ip6.arpa"
instead of "ip6.int"
- addr_to_ip6int now understands "--uppercase|--lowercase"
0.34: - use now "-lcrypto" instead of full defined lib name
- update "COPYING" to current GPLv2, add "LICENSE" with some comments
to make Debian people happy
- add both in spec file
- showinfo now understands "solicited-node link-local multicast",
"ISATAP", SLA on 6bone addresses
- input now understands also "ISATAP" addresses
- Change version numbering to autoconf/configure
- Extend "showinfo" a little bit
- Fix missing scope initialization "base85_to_ipv6addr"
bug found by Greg Daley <greg.daley # eng.monash.edu.au>
- changed: libipv6addr.c/ipv6addr_clear
librfc1924.c/base85_to_ipv6addrstruct
0.28: - Refixing compiling on BSD
- Add a forgotten include in "eui64_to_privacy.c"
0.27: - Migrate files used from Linux kernel for address type resolution
to libipv6addr.*
- add some extended tests (still not catch all)
- "--showinfo" now rudimentary works
0.26: - Create wrapper functions to be independend of byte order storage
in structure "in6_addr"
- "--eui64_to_privacy" now calculate expected results
- Begin of splitting "ipv6calc.h" into several smaller header files
- Some code cleanup
0.25: - Restructure central address structure to use "in6_addr" struct
- Some code cleanup
0.24: - Add option "--eui64_to_privacy" to calculate pseudo random suffices
(experimental, result is not verified)
- Add option "--showinfo" (experimental, not finnished)
- Add option "-d|--debug value"
- Partially new debug code
0.23: - Fix permissions of doc files in spec file
0.22: - ANSI compiling cleanup
- Cleanup special types to ANSI types
0.21: - Fix typo (strings.h -> string.h) at ifinet6_to_compressed.c
0.20: - Activate "--printsuffix" + "--printprefix" for
"--addr_to_uncompressed"
- Change format of "--mac_to_eui64" to described one (now without prefix)
Summary of changes:
- removal of USE_GTEXINFO
- addition of mk/texinfo.mk
- inclusion of this file in package Makefiles requiring it
- `install-info' substituted by `${INSTALL_INFO}' in PLISTs
- tuning of mk/bsd.pkg.mk:
removal of USE_GTEXINFO
INSTALL_INFO added to PLIST_SUBST
`${INSTALL_INFO}' replace `install-info' in target rules
print-PLIST target now generate `${INSTALL_INFO}' instead of `install-info'
- a couple of new patch files added for a handful of packages
- setting of the TEXINFO_OVERRIDE "switch" in packages Makefiles requiring it
- devel/cssc marked requiring texinfo 4.0
- a couple of packages Makefiles were tuned with respect of INFO_FILES and
makeinfo command usage
See -newly added by this commit- section 10.24 of Packages.txt for
further information.
