Commit graph

8020 commits

Author SHA1 Message Date
kardel
1f8c0dfd98 Added hytctl utility to manage HYT 221/271/939 EEPROMS 2015-09-06 06:50:52 +00:00
wiz
0a1b33af17 + lnav. 2015-09-05 22:12:51 +00:00
wiz
937d9e5be1 Import lnav-0.7.3 as sysutils/lnav.
An advanced log file viewer for the small-scale.  Watch and analyze
your log files from a terminal.

Many logging tools, like Splunk, provide great features but are
optimized for large-scale deployments.  They require installing
and configuring servers before they can be effectively used.  There
is still a need for a robust log file analyzer for the terminal.

Just point lnav to a directory and it will take care of the rest.
File formats are automatically detected and compressed files are
unpacked on the fly.

Log files are a wealth of information, lnav can help highlight the
parts that are important and filter out the noise.
2015-09-05 22:12:04 +00:00
wiedi
aea5fc6bf4 Import rsyslog-elasticsearch as sysutils/rsyslog-elasticsearch
rsyslog module that provides native support for logging to Elasticsearch.
2015-09-05 15:32:19 +00:00
wiz
1cefae3604 Update to 3.01, based on diff by Frederik in private mail.
NEW features of cdrtools-3.01:

This is the first localization step for cdrtools. All programs now (hopefully)
call gettext() for all strings that need localization.

-	The next step will include dgettext() calls for the libraries.

-	The following step will include the extracted strings

-	The last step will include German translations and install support
	for the resulting binary message object files.
2015-09-03 14:43:34 +00:00
he
2bafb593e3 Re-work the entropy patch to put the error section up front, and
the Linux code above the NetBSD code.  No code change, except ensure
to forward-declare the common functions in all cases.
2015-09-01 09:31:46 +00:00
he
27e6fe67ba For consistency, rename HAVE_STRUCT_KINFO_PROC_NETBSD to
HAVE_STRUCT_KINFO_PROC2_NETBSD since that's the variant we're
actually using on NetBSD.  Should result in the same code, so
no revision bump.
2015-09-01 09:00:04 +00:00
wiz
5185da5c0f Update to 1.10.0:
D-Bus 1.10.0 (2015-08-25)
==

The “0x20” release.

This is a new stable branch, recommended for use in OS distributions.

Fixes since 1.9.20:

• distribute test/tap-test.sh.in, even if the tarball was built without
  tests enabled (fd.o #91684, Simon McVittie)
• work around a fd leak in libcap-ng < 0.7.7 (fd.o #91684, Simon McVittie)

Summary of major changes since 1.8.0:

• The basic setup for the well-known system and session buses is
  now done in read-only files in ${datadir} (normally /usr/share).
  See the NEWS entry for 1.9.18 for details.

• AppArmor integration has been merged, with features similar to the
  pre-existing SELinux integration. It is mostly compatible with the
  patches previously shipped by Ubuntu, with one significant change:
  Ubuntu's GetConnectionAppArmorSecurityContext method has been superseded
  by GetConnectionCredentials and was not included.

• The --enable-user-session configure option can be enabled
  by OS integrators intending to use systemd to provide a session bus
  per user (in effect, treating all concurrent graphical and non-graphical
  login sessions as one large session).

• The new listenable address mode "unix:runtime=yes" listens on
  $XDG_RUNTIME_DIR/bus, the same AF_UNIX socket used by the systemd
  user session. libdbus and "dbus-launch --autolaunch" will connect to
  this address by default. GLib ≥ 2.45.3 and sd-bus ≥ 209 have a
  matching default.

• All executables are now dynamically linked to libdbus-1.
  Previously, some executables, most notably dbus-daemon, were statically
  linked to a specially-compiled variant of libdbus. This results in
  various private functions in the _dbus namespace being exposed by the
  shared library. These are not API, and must not be used outside
  the dbus source tree.

• On platforms with ELF symbol versioning, all public symbols
  are versioned LIBDBUS_1_3.

New bus APIs:

• org.freedesktop.DBus.GetConnectionCredentials returns
  LinuxSecurityLabel where supported
• org.freedesktop.DBus.Monitoring interface (privileged)
  · BecomeMonitor method supersedes match rules with eavesdrop=true,
    which are now deprecated
• org.freedesktop.DBus.Stats interface (semi-privileged)
  · now enabled by default
  · new GetAllMatchRules method

New executables:

• dbus-test-tool
• dbus-update-activation-environment

New optional dependencies:

• The systemd: pseudo-transport requires libsystemd or libsd-daemon
• Complete documentation requires Ducktype and yelp-tools
• Full test coverage requires GLib 2.36 and PyGI
• AppArmor integration requires libapparmor and optionally libaudit

Dependencies removed:

• dbus-glib

D-Bus 1.9.20 (2015-08-06)
==

The “Remember Tomorrow” release.

This is a release-candidate for D-Bus 1.10.0. OS distribution vendors
should test it.

Fixes:

• Don't second-guess what the ABI of poll() is, allowing it to be used
  on Integrity RTOS and other unusual platforms (fd.o #90314;
  Rolland Dudemaine, Simon McVittie)

• Don't duplicate audit subsystem integration if AppArmor and SELinux are
  both enabled (fd.o #89225, Simon McVittie)

• Log audit events for AppArmor/SELinux policy violations whenever
  we have CAP_AUDIT_WRITE, even if not the system bus
  (fd.o #83856, Laurent Bigonville)

D-Bus 1.9.18 (2015-07-21)
==

The “Pirate Elite” release.

Configuration changes:

• The basic setup for the well-known system and session buses is now done
  in read-only files in ${datadir}, moving a step closer to systems
  that can operate with an empty /etc directory. In increasing order
  of precedence:

  · ${datadir}/dbus-1/s*.conf now perform the basic setup such as setting
    the default message policies.
  · ${sysconfdir}/dbus-1/s*.conf are now optional. By default
    dbus still installs a trivial version of each, for documentation
    purposes; putting configuration directives in these files is deprecated.
  · ${datadir}/dbus-1/s*.d/ are now available for third-party software
    to install "drop-in" configuration snippets (any packages
    using those directories should explicitly depend on at least this
    version of dbus).
  · ${sysconfdir}/dbus-1/s*.d/ are also still available for sysadmins
    or third-party software to install "drop-in" configuration snippets
  · ${sysconfdir}/dbus-1/s*-local.conf are still available for sysadmins'
    overrides

  ${datadir} is normally /usr/share, ${sysconfdir} is normally /etc,
  and "s*" refers to either system or session as appropriate.

  (fd.o #89280, Dimitri John Ledkov)

Fixes:

• Fix a memory leak when GetConnectionCredentials() succeeds
  (fd.o #91008, Jacek Bukarewicz)

• Ensure that dbus-monitor does not reply to messages intended for others,
  resulting in its own disconnection (fd.o #90952, Simon McVittie)

D-Bus 1.9.16 (2015-05-14)
==

The “titanium barns” release.

Dependencies:

• Automake 1.13 is now required when compiling from git or modifying
  the build system.

Security hardening:

• On Unix platforms, change the default configuration for the session bus
  to only allow EXTERNAL authentication (secure kernel-mediated
  credentials-passing), as was already done for the system bus.

  This avoids falling back to DBUS_COOKIE_SHA1, which relies on strongly
  unpredictable pseudo-random numbers.

  If you are using D-Bus over the (unencrypted!) tcp: or nonce-tcp: transport,
  in conjunction with DBUS_COOKIE_SHA1 and a shared home directory using
  NFS or similar, you will need to reconfigure the session bus to accept
  DBUS_COOKIE_SHA1 by commenting out the <auth> element. This configuration
  is not recommended.

  (fd.o #90414, Simon McVittie)

• When asked for random numbers for DBUS_COOKIE_SHA1, the nonce-tcp:
  transport, UUIDs or any other reason, fail if we cannot obtain entropy
  (from /dev/urandom or CryptGenRandom()) or an out-of-memory condition
  occurs, instead of silently falling back to low-entropy pseudorandom
  numbers from rand(). (fd.o #90414; Simon McVittie, Ralf Habacker)

Enhancements:

• Add dbus_message_iter_get_element_count()
  (fd.o #30350; Christian Dywan, Simon McVittie)

• Introduce new internal DBusSocket and DBusPollable types so we can
  stop treating the Windows SOCKET type as if it was int. DBusSocket
  is specifically a socket, cross-platform. DBusPollable is whatever
  _dbus_poll() can act on, i.e. a fd on Unix or a SOCKET on Windows.
  (fd.o #89444; Ralf Habacker, Simon McVittie)

• All regression tests now output TAP <https://testanything.org/>
  (fd.o #89846, Simon McVittie)

• Internal APIs consistently use signed values for timestamps
  (fd.o #18494, Peter McCurdy)

• Improve diagnostics when UpdateActivationEnvironment calls are rejected
  (fd.o #88812, Simon McVittie)

• Clean up a lot of compiler warnings
  (fd.o #17289, fd.o #89284; Ralf Habacker, Simon McVittie)

Fixes:

• Add locking to DBusCounter's reference count and notify function
  (fd.o #89297, Adrian Szyndela)

• Ensure that DBusTransport's reference count is protected by the
  corresponding DBusConnection's lock (fd.o #90312, Adrian Szyndela)

• Correctly release DBusServer mutex before early-return if we run out
  of memory while copying authentication mechanisms (fd.o #90021,
  Ralf Habacker)

• Make dbus-test-tool and dbus-update-activation-environment portable
  to Windows (fd.o #90089, Ralf Habacker)

• Correctly initialize all fields of DBusTypeReader (fd.o #90021;
  Ralf Habacker, Simon McVittie)

• Fix some missing \n in verbose (debug log) messages (fd.o #90004,
  Ralf Habacker)

• Clean up some memory and fd leaks in test code and tools
  (fd.o #90021, Ralf Habacker)

• Fix a NULL dereference if the dbus-daemon cannot read a configuration
  directory for a reason that is not ENOENT (fd.o #90021, Ralf Habacker)

• CMake generates a versioned shared library even if the revision is 0,
  as it usually is on the development branch. (fd.o #89450, Ralf Habacker)

D-Bus 1.9.14 (2015-03-02)
==

The “don't stand in the poison cloud” release.

Dependencies:

• dbus-daemon and dbus-daemon-launch-helper now require libdbus. They
  were previously linked to a static version of libdbus.

• The tests no longer require dbus-glib in order to exercise the libdbus
  shared library; they are always linked to libdbus now.

Build-time configuration:

• The new --enable-user-session option, off by default, can be enabled
  by OS integrators intending to use systemd to provide a session bus
  per user (in effect, treating all concurrent graphical and non-graphical
  login sessions as one large session)

Enhancements:

• All executables are now linked dynamically to libdbus.
  (fd.o #83115; Bertrand SIMONNET, Simon McVittie, Ralf Habacker)

• On platforms that support them (GNU libc and possibly others),
  libdbus now has versioned symbols for its public API.
  All public symbols (visible in the header files) are currently
  versioned as LIBDBUS_1_3; private symbols starting with _dbus or
  dbus_internal have a version that changes with each release, and
  must not be used by applications. (also fd.o #83115)

• New listenable address mode "unix:runtime=yes" which listens on
  a real filesystem (non-abstract) socket $XDG_RUNTIME_DIR/bus
  (fd.o #61303; Colin Walters, Alexander Larsson, Simon McVittie)

• Add optional systemd units for a per-user bus listening on
  $XDG_RUNTIME_DIR/bus (fd.o #61301; Simon McVittie, Colin Walters)

• On Unix platforms, both libdbus and "dbus-launch --autolaunch"
  default to connecting to $XDG_RUNTIME_DIR/bus if it is a socket
  (also fd.o #61301)

• New dbus-update-activation-environment tool uploads environment
  variables to "dbus-daemon --session" and optionally "systemd --user",
  primarily as a way to keep the per-user bus compatible with
  distributions' existing X11 login scripts (also fd.o #61301)

• <includedir/> elements in dbus-daemon configuration are now silently
  ignored if the directory does not exist. (fd.o #89280, Dimitri John Ledkov)

• Add microsecond-resolution timestamps to the default output of
  dbus-monitor and dbus-send (fd.o #88896; Ralf Habacker, Simon McVittie)

Fixes:

• Fix a race condition in the 'monitor' test introduced in 1.9.10
  (fd.o #89222, Simon McVittie)

D-Bus 1.9.12 (2015-02-19)
==

The “monster lasagna” release.

Dependencies:

• Ducktype and yelp-tools are now required to build complete documentation
  (they are optional for normal builds).

Enhancements:

• D-Bus Specification version 0.26
  · GetConnectionCredentials can return LinuxSecurityLabel or WindowsSID
  · document the BecomeMonitor method

• On Linux, add LinuxSecurityLabel to GetConnectionCredentials
  (fd.o #89041; Tyler Hicks, Simon McVittie)

• On Linux, add support for AppArmor mediation of message sending and
  receiving and name ownership (paralleling existing SELinux mediation
  support), and eavesdropping (a new check, currently AppArmor-specific)
  (fd.o #75113; John Johansen, Tyler Hicks, Simon McVittie)

• In dbus-send and dbus-monitor, pretty-print \0-terminated bytestrings
  that have printable ASCII contents; we previously only did this for
  unterminated bytestrings (fd.o #89109, Simon McVittie)

• Add a guide to designing good D-Bus APIs (fd.o #88994, Philip Withnall)

• On Windows, add WindowsSID to GetConnectionCredentials
  (fd.o #54445, Ralf Habacker)

• Improve clarity of dbus-monitor --profile output and add more columns
  (fd.o #89165, Ralf Habacker)

• Add a man page for dbus-test-tool, and build it under CMake as well
  as Autotools (fd.o#89086, Simon McVittie)

• If dbus-daemon was compiled with --enable-verbose, add a D-Bus API
  to control it at runtime, overriding the DBUS_VERBOSE environment variable
  (fd.o #88896, Ralf Habacker)

Fixes:

• Reduce the number of file descriptors used in the fd-passing test,
  avoiding failure under the default Linux fd limit, and automatically
  skip it if the rlimit is too small (fd.o #88998, Simon McVittie)

D-Bus 1.9.10 (2015-02-09)
==

The “sad cyborgs” release.

Security fixes merged from 1.8.16:

• Do not allow non-uid-0 processes to send forged ActivationFailure
  messages. On Linux systems with systemd activation, this would
  allow a local denial of service: unprivileged processes could
  flood the bus with these forged messages, winning the race with
  the actual service activation and causing an error reply
  to be sent back when service auto-activation was requested.
  This does not prevent the real service from being started,
  so the attack only works while the real service is not running.
  (CVE-2015-0245, fd.o #88811; Simon McVittie)

Enhancements:

• The new Monitoring interface in the dbus-daemon lets dbus-monitor and
  similar tools receive messages without altering the security properties
  of the system bus, by calling the new BecomeMonitor method on a
  private connection. This bypasses the normal <allow> and <deny> rules
  entirely, so to preserve normal message-privacy assumptions, only root
  is allowed to do this on the system bus. Restricted environments,
  such as Linux with LSMs, should lock down access to the Monitoring
  interface. (fd.o #46787, Simon McVittie)

• dbus-monitor uses BecomeMonitor to capture more traffic, if the
  dbus-daemon supports it and access permissions allow it.
  It still supports the previous approach ("eavesdropping" match rules)
  for compatibility with older bus daemons. (fd.o #46787, Simon)

• dbus-monitor can now log the message stream as binary data for later
  analysis, with either no extra framing beyond the normal D-Bus headers,
  or libpcap-compatible framing treating each D-Bus message
  as a captured packet. (fd.o #46787, Simon)

Other fixes:

• Fix some CMake build regressions (fd.o #88964, Ralf Habacker)

• On Unix, forcibly terminate regression tests after 60 seconds to
  prevent them from blocking continuous integration frameworks
  (fd.o #46787, Simon)

D-Bus 1.9.8 (2015-02-03)
==

The “all the types of precipitation” release.

Dependencies:

• full test coverage now requires GLib 2.36
• full test coverage now requires PyGI (PyGObject 3,
  "import gi.repository.GObject") instead of the
  obsolete PyGObject 2 ("import gobject")

Enhancements:

• add GLib-style "installed tests" (fd.o #88810, Simon McVittie)

• better regression test coverage, including systemd activation
  (fd.o #57952, #88810; Simon McVittie)

Fixes:

• fatal errors correctly make the dbus-daemon exit even if <syslog/> is
  turned off (fd.o #88808, Simon McVittie)

• TCP sockets on Windows no longer fail to listen approximately 1 time
  in 256, caused by a logic error that should have always made it fail but
  was mitigated by incorrect endianness for the port number
  (fd.o #87999, Ralf Habacker)

• fix some Windows build failures (fd.o #88009, #88010; Ralf Habacker)

• on Windows, allow up to 8K connections to the dbus-daemon instead of the
  previous 64, completing a previous fix which only worked under
  Autotools (fd.o #71297, Ralf Habacker)

• on Windows, if the IP family is unspecified only use IPv4,
  to mitigate IPv6 not working correctly (fd.o #87999, Ralf Habacker)

• fix some unlikely memory leaks on OOM (fd.o #88087, Simon McVittie)

• lcov code coverage analysis works again (fd.o #88808, Simon McVittie)

• fix an unused function error with --disable-embedded-tests (fd.o #87837,
  Thiago Macieira)

D-Bus 1.9.6 (2015-01-05)
==

The “I do have a bread knife” release.

Security hardening:

• Do not allow calls to UpdateActivationEnvironment from uids other than
  the uid of the dbus-daemon. If a system service installs unsafe
  security policy rules that allow arbitrary method calls
  (such as CVE-2014-8148) then this prevents memory consumption and
  possible privilege escalation via UpdateActivationEnvironment.

  We believe that in practice, privilege escalation here is avoided
  by dbus-daemon-launch-helper sanitizing its environment; but
  it seems better to be safe.

• Do not allow calls to UpdateActivationEnvironment or the Stats interface
  on object paths other than /org/freedesktop/DBus. Some system services
  install unsafe security policy rules that allow arbitrary method calls
  to any destination, method and interface with a specified object path;
  while less bad than allowing arbitrary method calls, these security
  policies are still harmful, since dbus-daemon normally offers the
  same API on all object paths and other system services might behave
  similarly.

Other fixes:

• Add missing initialization so GetExtendedTcpTable doesn't crash on
  Windows Vista SP0 (fd.o #77008, Илья А. Ткаченко)

D-Bus 1.9.4 (2014-11-24)
==

The “extra-sturdy caramel” release.

Fixes:

• Partially revert the CVE-2014-3639 patch by increasing the default
  authentication timeout on the system bus from 5 seconds back to 30
  seconds, since this has been reported to cause boot regressions for
  some users, mostly with parallel boot (systemd) on slower hardware.

  On fast systems where local users are considered particularly hostile,
  administrators can return to the 5 second timeout (or any other value
  in milliseconds) by saving this as /etc/dbus-1/system-local.conf:

  <busconfig>
    <limit name="auth_timeout">5000</limit>
  </busconfig>

  (fd.o #86431, Simon McVittie)

• Add a message in syslog/the Journal when the auth_timeout is exceeded
  (fd.o #86431, Simon McVittie)

• Send back an AccessDenied error if the addressed recipient is not allowed
  to receive a message (and in builds with assertions enabled, don't
  assert under the same conditions). (fd.o #86194, Jacek Bukarewicz)

D-Bus 1.9.2 (2014-11-10)
==

The “structurally unsound flapjack” release.

Security fixes:

• Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
  so that CVE-2014-3636 part A cannot exhaust the system bus'
  file descriptors, completing the incomplete fix in 1.8.8.
  (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)

Enhancements:

• D-Bus Specification version 0.25
  · new value 'const' for EmitsChangedSignal annotation
    (fd.o #72958, Lennart Poettering)
  · new ALLOW_INTERACTIVE_AUTHORIZATION flag, for PolicyKit and similar
    (fd.o #83449; Lennart Poettering, Simon McVittie)
  · annotate table of types with reserved/basic/container, and for
    basic types, fixed/string-like
  · clarify arbitrary limits by quoting them in mebibytes

• New API: add accessors for the ALLOW_INTERACTIVE_AUTHORIZATION flag
  (fd.o #83449, Simon McVittie)

• Add dbus-test-tool, a D-Bus swiss army knife with multiple subcommands,
  useful for debugging and performance testing:
  · dbus-test-tool spam: send repeated messages
  · dbus-test-tool echo: send an empty reply for all method calls
  · dbus-test-tool black-hole: do not reply to method calls
  (fd.o #34140; Alban Crequy, Simon McVittie, Will Thompson)

• Add support for process ID in credentials-passing on NetBSD
  (fd.o #69702, Patrick Welche)

• Add an example script to find potentially undesired match rules
  (fd.o #84598, Alban Crequy)

• Document the central assumption that makes our use of credentials-passing
  secure (fd.o #83499, Simon McVittie)

• Replace the dbus-glib section of the tutorial with a GDBus recommendation,
  and add some links to GDBus and QtDBus documentation (fd.o #25140,
  Simon McVittie)

Fixes:

• Use a less confusing NoReply message when disconnected with a reply pending
  (fd.o #76112, Simon McVittie)

• Make the .pc file relocatable by letting pkg-config do all variable
  expansion itself (fd.o #75858, Руслан Ижбулатов)

• Fix a build failure on platforms with kqueue, which regressed in 1.9.0
  (fd.o #85563, Patrick Welche)

• Consistently save errno after socket calls (fd.o #83625, Simon McVittie)

• In dbus-spawn, when the grandchild process exits due to a failed exec(),
  do not lose the exec() errno (fd.o #24821, Simon McVittie)

• Do not fail the tests if a parent process has leaked non-close-on-exec
  file descriptors to us (fd.o #73689, fd.o #83899; Simon McVittie)

• Do not fail the tests on Unix platforms with incomplete
  credentials-passing support, but do fail if we can't pass credentials
  on a platform where it is known to work: Linux, FreeBSD, OpenBSD, NetBSD
  (fd.o #69702, Simon McVittie)

• Detect accept4, dirfd, inotify_init1, pipe2, and Unix fd passing
  when building with cmake, and expand test coverage there
  (fd.o #73689; Ralf Habacker, Simon McVittie)

D-Bus 1.9.0 (2014-10-01)
==

The “tiered cheeses” release.

Requirements:

• Support for the systemd: (LISTEN_FDS) pseudo-transport on Linux now
  requires either the libsystemd or libsd-daemon shared library, dropping the
  embedded convenience copy of sd-daemon (fd.o #71818, Simon)

Build-time configuration changes:

• The Stats interface is now enabled by default, and locked-down to
  root-only on the system bus. Configure with --disable-stats
  to disable it altogether on memory- or disk-constrained systems,
  or see ${docdir}/examples/ to open it up to non-root users on the
  system bus or restrict access on the session bus.
  (fd.o #80759; Simon McVittie, Alban Crequy)

• The CMake build system now builds the same shared library name as Autotools
  on at least Linux and Windows:
  - on Linux (and perhaps other Unix platforms), it previously built
    libdbus-1.so, but now builds libdbus-1.so.3.* with development
    symlink libdbus-1.so and SONAME/symlink libdbus-1.so.3
  - on Windows, it previously built either libdbus-1.dll (release) or
    libdbus-1d.dll (debug), but now builds libdbus-1-3.dll, copied to
    libdbus-1.dll for compatibility with older applications.
  (fd.o #74117, Ralf Habacker)

Enhancements:

• D-Bus Specification version 0.24
  · document how to quote match rules (fd.o #24307, Simon McVittie)
  · explicitly say that most message types never expect a reply
    regardles of whether they have NO_REPLY_EXPECTED
    (fd.o #75749, Simon McVittie)

• on Unix platforms, disable Nagle's algorithm on TCP connections to improve
  initial latency (fd.o #75544, Matt Hoosier)

• use backtrace() if it is in -lexecinfo instead of libc, as on NetBSD
  (fd.o #69702, Patrick Welche)

• in dbus-monitor, print more information about file descriptors
  (fd.o #80603, Alban Crequy)

• do not install system bus configuration if built for Windows
  (fd.o #83583; Ralf Habacker, Simon McVittie)

• Add GetAllMatchRules to the Stats interface (fd.o #24307, Alban Crequy)

• Add a regression test for file descriptor passing (fd.o #83622,
  Simon McVittie)

Fixes:

• fix an incorrect error message if a Unix socket path is too long
  (fd.o #73887, Antoine Jacoutot)

• in an MSYS/Cygwin environment, pass Unix-style filenames to xmlto,
  fixing documentation generation (fd.o #75860, Руслан Ижбулатов)

• in Unix with X11, avoid giving dbus-launch a misleading argv[0]
  in ps(1) (fd.o #69716, Chengwei Yang)

• avoid calling poll() with timeout < -1, which is considered invalid
  on FreeBSD and NetBSD (fd.o #78480, Jaap Boender)

• be portable to BSD-derived platforms where O_CLOEXEC is unavailable in libc
  (like Mac OS X 10.6), or available in libc but unsupported by the kernel
  (fd.o #77032; rmvsxop, OBATA Akio, Patrick Welche)

• Fix include path for test/internal/*.c with cmake (Ralf Habacker)

• Documentation improvements
  (fd.o #80795, #84313; Thomas Haller, Sebastian Rasmussen)

• in dbus-monitor, do not leak file descriptors that we have monitored
  (fd.o #80603, Alban Crequy)

• Set the close-on-exec flag for the inotify file descriptor, even
  if built with CMake or older libc (fd.o #73689, Simon McVittie)

• Remove some LGPL code from the Windows dbus-daemon
  (fd.o #57272, Ralf Habacker)
2015-08-30 15:08:00 +00:00
taca
8399b7786d Fix ignoring configuration file, tools.conf.
* Specify sysconfdir as configure's command line option.
* Do not patch lib/guestApp/Makefile.in but lib/guestApp/Makefile.am.

Bump PKGREVISION.
2015-08-29 15:42:36 +00:00
wiz
fd2fff350a Simplify. Fix packaging on NetBSD. 2015-08-28 11:25:51 +00:00
wiz
aed1b936f8 Update to 4.8.14. Reduce package options to simplify package maintenance.
Let me know if you need one of the removed options.

Version 4.8.14

- Core

  * Minimal version of GLib is 2.14.0
  * Add new panel binding "!SelectExt" to select/unselect files with the same extension as the current file (#3228)
  * Speed up of directory size calculation (#3247)
  * Support of italic text (#3065)

- Editor

  * New syntax highlighting support:
    - puppet (#3266)

- Viewer

  * Rewrite mcview's rendering and scrolling (#3250, #3256)
    - no more partial lines at the top and failure to scroll when Up or Down is pressed;
    - better handling of CJK characters;
    - handle combining accents;
    - improved nroff support;
    - more conventional scrolling behavior at the end of the file.
  * Use VIEW_SELECTED_COLOR in plain mode (#3405)
  * In !QuickView panel, don't pass any chars to command line to avoid unexpected command execution (#3253)

- Misc

  * Code cleanup (#3265, #3262)
  * Bind poedit to Edit action for .po files (#3287)
  * Better grammar mcedit user menu (#3246)

- Fixes

  * Fail to build against musl libc (#3267)
  * Error compiling with glib 2.20.3 (#3333)
  * Overwrite of the PROMPT_COMMAND bash variable (#2027)
  * contrib/*.?sh are not recreated after rerun of configure (#3181)
  * File rename handles zero-length substitutions incorrectly (#2952)
  * Lose files on "Skip" when "Cannot preallocate space for target file" (#3297)
  * Info panel can't obtain file system statistics on Solaris (#3277)
  * "Shell patterns" broken beyond repair (#2309)
  * File selection by patterns uses bytes instead of unicode characters (#2743)
  * Copy files dosn't work as expected, when copying to a directory with the special symbol in its name (#3235)
  * Wrong order of old_colors table items (#3404)
  * Input line: Alt+Backspace on one-letter word erases too much (#3390)
  * "Directory scanning" window is too narrow (#3162)
  * No Help for User Menu (#3409)
  * mcedit: paste from clipboard does not work (#3339)
  * mcviewer: hang when viewing broken man page (#2966)
  * mcview hex: incorrect highlight when search string not found (#3263)
  * mcview hex edit: UTF-8 chars are not updated (#3259)
  * mcview hex edit: can't enter certain UTF-8 characters (#3260)
  * mcview hex edit: CJK overflow (#3261)
  * mcedit: status line doesn't show full path to file (#3285)
  * Freeze when copying from one FTP location to another (#358)


Version 4.8.13

- Core

  * New engine of user-friendly interruption of long-time operations (#2136)

- Editor

  * Improvements of syntax highlighting:
    * CMake (#3216)
    * PHP (#3230)
  * Translate language names in the spelling assistant dialogue (#3233)

- Viewer

  * Add separate normal(default) colour pair for viewer (#3204)
  * Dealing with utf-8 man pages in view/open (#1539)
  * "Goto line" is 1-based now (#3245)

- Misc

  * Code cleanup (#3189, #3223, #3242)
  * Add new skins: gray-green-purple256 and gray-orange-blue256 (#3190)

- Fixes

  * First Backspace/Delete is ignored after mouse click in an input widget (#3225)
  * Recursive find file doesn't work on Samba share (#3097)
  * Recursive find file doesn't work on Windows NFS share (#3202)
  * Incorrect file counter in move operation (#3196, #3209)
  * "Directory scanning" window is too narrow (#3162)
  * Colon is not recognized inside escape seq in prompt (#3241)
  * Quick view doesn't grab focus on mouse click (#3251)
  * fish subshell: overridden prompt (#3232, #3237)
  * mcviewer: broken switch between raw and parse modes (#3219)
  * mcviewer: incorrect percentage in mcview hex mode (#3258)
  * RAR VFS incorrectly recognizes UnRAR version (#3240)
  * viewbold and viewselected are missing from some skins (#3244)
  * Incorrect enconding name for manual page (#3239)
  * "User menu -> View manual page" doesn't do coloring (#3243)


Version 4.8.12

- Core

  * Speed up of file find (#2290)
  * If cwd is a symlink it is kept at startup (#3093)
  * Improve support of Zsh (#3121, #3124, #3125, #3177)
  * Launch external editor/viewer without passing line number (#3117)
  * Exit without confirmation by default (#3132)
  * Simple user-friendly skin selector (#2165, #3178)
  * Use Joliet and RockRidge in ISO9660 image view action (#3187)

- VFS

  * Use .zip extension as preferred way to recognize ZIP archives (#2857)

- Editor

  * Configurable selection reset on CK_Store (#3111)

- Misc

  * Code cleanup (#3113, #3151)
  * Adjust script permissions to installed ones (#2274)
  * Fix name of FSF in add source files (#3167)
  * Skin cleanups (#3180, #3184)
  * Do not consider "String not found" message as error (#3179)

- Fixes

  * Broken build with NCurses (#3114)
  * Incorrect tilde expansion in copy/rename/move dialog (#3131)
  * Advanced chown: Escape on user list accepts value (#3150)
  * Toggling hidden files using mouse doesn't update the other panel (#3156)
  * Question mark in delete confirmation is on its own line (#3123)
  * Popup dialogs wander upwards upon resize (#3173)
  * Keypad '*' doesn't work with numlock off (#3133)
  * Some inconsistencies in "Learn keys" UI (#3134)
  * Unconventional behavior of "Display bits" dialog (#3152)
  * Shift-Fn keys don't work in 256-color mode of tmux (#2978)
  * mcedit: format paragraph produces inconsistent wrapping (#3119)
  * mcedit: file out-of-date check on saving is botched (#3142)
  * mcedit: 1st line is shifted after paragraph format (#1666)
  * mcedit: trailing newline check applied too early when exiting (#3140)
  * Inconsistency of the arrow's direction in the panel header line across skins (#3157)
  * Possible segfault while passing messages to widgets (#3116)
  * Possible segfault when freeing a VFS (#3116)
  * Segfault in cpio VFS while reading corrupted RPM (#3116)
  * Segfault in sftpfs VFS when trying to view a file (#3176)
  * Incorrect handling of filenames with unrar v5 (#3073)
  * FISH VFS: remote panel confused by filenames with '%' (#2983)
  * iso9660: xorriso shows only one depth (#3122)
  * Nicedark skin looks bad on black-on-white terminals (#3154)
  * Incorrect definition of "topmiddle" and "bottommiddle" characters (#3183)


Version 4.8.11

- Core

  * Live update of panels size when editing layout (#3060)
  * Support "Compute totals" option in move file operation (#2075)

- VFS

  * rpm extfs
    - show dependency version (#2812)
    - support tar payload (#3064)
    - improve support for EPOCH tag (#1588)
    - add support for PREINPROG/POSTINPROG/PREUNPROG/POSTUNPROG, VERIFYSCRIPTPROG and TRIGGERSCRIPTS/TRIGGERSCRIPTPROG tags (#1588)

- Editor

  * Support "bracketed paste mode" of xterm (#2661)
  * Clarify Java syntax highlighting (#3057)

- Misc

  * Print warnings about unknown '--with-' / '--enable-' configure options (#3029)
  * Code cleanup and refactoring (#3051, #3066)

- Fixes

  * FTBFS on GNU Hurd (#3053, #3071)
  * Segfault while moving files (#3059, #3105)
  * Broken handling of mc command line arguments (#3047)
  * Copy/move doesn't work if num_history_items_recorded=0 (#3076)
  * No subdir path completion in current dir, if stub is not starting with './' (#3018)
  * Deprecated "find -perm +xxx" syntax is used (#3089)
  * Home, End, Shift-Fn keys don't work in tmux (#2978)
  * Improper [en|dis]abling of layout dialog split adjustment buttons (#3061)
  * Bogus strings in 'Confirmation' config dialog (#2271)
  * "Configure options" first entry not highlighted (#3084)
  * "Setup saved to ~/.config/mc/ini" message is misleading (#3096)
  * F3 doesn't work on .so files in FreeBSD 9.x (#3101)
  * Typo in mc.lib: "less=%filename +%linenog" instead of "+%lineno" (part of #3044)
  * Wrong order of filename and line number for external editor (part of #3044)
  * mcedit: tabs are lost when text is pasted (#1797 as part of #2661)
  * mcedit: question on large file treats Escape as Yes (#3107)
  * Broken case-sensitive search in editor/viewer/diffviewer (#3069)
  * Changes to files in nested .zip archives are lost (#3070)
  * Incorrect handling of filenames with spaces with unrar v5 (#3073)
  * iso9660 VFS: filenames truncating in ISO file listing (#3091)
  * vfs_path_from_str_flags() doesn't support VPF_STRIP_HOME (#3098)
  * Bright colors are used as background colors in 16-color skins (#3050)
  * Various defects in documentation (#3052, #3092)


Version 4.8.10

- Core

    * Do not link GModule if it is not required (save space on embedded systems) (#2995)
    * Behavior of the 'Right' key in the 'Directory hotlist' was changed: now 'Right' key is used only to enter into the group (#3045)

- Misc

    * Code cleanup (#3035)

- Fixes

    * Build failure on Cygwin (#3041)
    * Broken NCurses detection (#3043)
    * Broken handling of mc command line arguments (#3047)
    * Cannot enter into zip archive in tar one (#3034)
    * Cannot open some jar files
    * mcedit: file descriptor leak (#3040)
    * mcedit: paragraph format doesn't respect multibyte characters (#2713)
    * Crash after entering a wrong SFTP password (#3036)


Version 4.8.9

- VFS

    * extfs: support unrar-5 (#3015)
    * extfs: use xorriso (if exists) for writing into ISO images (#3027)

- Editor

    * Support unlimited file size (#1743)

- Misc

    * Lot of code cleanups (#2990, #2071, #2164, #2998, #3003, #3005, #3022)
    * Display additional info while viewing (by F3) *.iso files (#2006)
    * New skins:
        - modarin256: set of 256-color skins from Oliver Lange (#2737)

- Fixes

    * Fail to link if system lib does not contain strverscmp (#2992)
    * Segfault when mc's temporary directory doesn't belong to the correct user (#3021)
    * Race condition when creating temporary directory (#3025)
    * Mouse doesn't work in screen and tmux (#3011)
    * Incorrect file size in copy/move overwrite query dialog (#3000)
    * Garbage in subshell prompt (#3001)
    * Incorrect WLabel redraw after text change (#2991)
    * Find File: "All charsets" options don't work (#3026)
    * When an unknown key is pressed, it is interpreted as garbage (#2988)
    * Segfault on creating new file in external editor (#3020)
    * Rotating dash is not removed when mc finishes reading the directory (#2163)
    * mcedit: word completion failed if word to be completed is begun from begin of file (#2245)
    * mcview: broken switch between raw and parse modes (#2968)
    * Hex viewer: continue search doesn't work (#2706)
    * sftpfs: broken SSH aliases (#2923)


Version 4.8.8

- Core

    * Make copy/move progress dialog window wider up to 2/3 of screen width (#2076)
    * Ask file name before create new file in editor (#2585)
    * Support newer extended mouse protocol SGR-1006 instead of URXVT-1015 (#2956)
    * Allow skip directory scanning before file operation. Print directory count and size in addition to directory name (#2101)
    * Add jump support to target line in some external editors and viewers (#2206)

- Editor

    * Update syntax highlighting:
        - Jal programming language (#2855)
        - gplink configuration files (.lkr extension) (#2855)
        - Makefile with .mak extension (#2896)
        - ZSH configuration files (#2950)
        - Fortran (#2962)

- Misc

    * Code cleanup (#2944, #2954)
    * Report real compiler in MC_CHECK_ONE_CFLAG instead of 'gcc'
    * Hints files now translated via Transifex (#2980)

- Fixes

    * Segfault in file operation due to unhandled regexp error (#2493)
    * Tab completion vs. spaces and escaping (#55)\
    * Special chars are not escaped in autocompletion of filenames (#2626)
    * Buttons in the 'Directory hotlist' window are placed incorrectly (#2958)
    * Mouse doesn't select text in subshell in native console (#2964)
    * Mouse click below non-droppeddown menubar activates menu box (#2971)
    * Insufficient quoting and wrong message in user menu (#2947)
    * mcedit: floating point exception (division by zero) (#2953)
    * mcedit: broken autocompletion (#2957)
    * mcview: broken magic mode (#2976)
    * Broken opening of .war archives (#2974)


Version 4.8.7

- Core

    * Minimal GLib version is 2.12.0
    * Implementation of suspend/resume in copy/move file operations (#2111)
    * Start of widget subsystem reimplementation (#2919)

- VFS

    * uc1541 extfs plug-in updated up to version 2.5 (#2935)

- Editor

    * Reset selection after text paste (only in non-persistent selection mode) (#2660)
    * Don't indent blank lines (#303).
    * Add .psgi as Perl syntax highlighting (#2912)
    * Place cursor after inserted chars (#319)
    * Add option in ini file to save spelling language (spell_language=NONE for disable aspell support) (#2914)

- Misc

    * Code cleanup (#2888, #1950)
    * Minimal "check" utility version is 0.9.8
    * Remove the empty contrib/dist/debian/ since it maintained separately in Debian (#2871)
    * mc.ext updates:
        - add support of SVG images (#2895)
        - add support of .asm file extension (#2892)
        - add support of .hh file extension (#2892)
        - all file extension for source files now are case insensitive (#2892)
        - add support of JNG and MNG images (#2893)
        - add support of Gnumeric's spreadsheets (#2894)
        - add support of .war archives (#2891)
        - make a choice between arj and unarj archivers (#2890)
        - make a choice between 7z and 7za archivers (#2890)
        - add support of ape, aac and wvm4a media formats (#2767)
        - add support of cbr and cbz comic books (#2739)
        - add support of epub e-book format (#2739)
        - add support of PAR archives (#2739)
        - use libreoffice instead of ooffice, if found, to open ODT files (#2723)
        - use dvicat if dvi2tty not found to view DVI files (#1686)
        - use 'see' utility as default pdf viewer, if found (#1686)
        - use 'see' utility to view images in console (#1686)
    * Highlight OGV files as media (#2934)
    * Added new translations:
        - Persian (fa)
        - Croatian (hr)

- Fixes

    * Build failure on Cygwin (#2917)
    * Fail to check ncurses library if --with-ncurses-inc and --with-ncurses-libs options are used (#2926)
    * Crash on Solaris while trying to copy a file (#2906)
    * CVE-2012-4463: Does not sanitize MC_EXT_SELECTED variable properly (#2913)
    * Attributes of existing directories are never preserved when copying (#2924)
    * Broken path completion on paths starting with ~/ (#2898)
    * Terminal settings are not changed when window is resized (#2198)
    * Enter into symlink to compressed patch shows empty patch (#2910)
    * Test failure on Cygwin due to incorrect linkage flag (#2918)
    * Non-portable test (#2883)


Version 4.8.6

- Fixes

    * mcedit: two-columns extra offset of cursor after tab character (#2881)
    * diffviewer: cannot open file if name contains '$' (#2873)


Version 4.8.5

- Core

    * Implemented case-insensitive patterns in mc.ext bindings (#2250)

- Editor

    * Code refactoring and cleanup (#1977)

- Diff viewer

    * Bidirectional merge (F5 merge left-to-right, F15 - merge right-to-left) (#2863)

- Misc

    * Syntax highlighting news and updates:
        - update assembler.syntax: x86 AMD64 registers highlighting (#2542)
        - new cmake.syntax: preliminary and incomplete syntax file for CMakeLists.txt files (#2084)
        - new dlink.syntax: syntax highlighting for D-Link switches command set (#2649)
        - update properties.syntax: more nice look-and-feel (#1869)
    * mc.ext enhancement (#2103):
        - use chm_http text-mode handler for CHM files
        - play sounds only from videos in text mode
        - use pdftotext -layout -nopgbrk switches
        - try to use elinks before links for HTML
        - soffice2html text-mode handler for SXW files
        - wvHtml text-mode handler for doc files
        - xlhtml text-mode handler for XLS files
        - ppthtml text-mode handler for PPT/PPS files
        - open=view+pager fallback (noX) for PostScript, PDF, OD[PST] and DVI
        - standarized $DISPLAY checks
    * File extension support:
        - SQLite database files (#2103)
        - compiled Java files (*.class) (#2103)
        - m4a for MP4 containers with audio data in the Advanced Audio Coding (AAC) or its own Apple Lossless (ALE, ALAC) formats (#2869)
        - .ogm extension was deprecated in favor of .ogv (#2664)

- Fixes

    * Bad EXTHELPERSDIR substitution if --prefix is not set (#2849)
    * Partially broken loading of user-defined keymap file (#2848)
    * Enter on directory named '~' goes to the home one (#2874)
    * Cannot Copy/Move files with filename encoding change (#2791)
    * Cannot view compressed files named like log.1.gz (with digit in name) (#2852)
    * Panel is not refreshed if panel history is called using mouse (#2854)
    * Duplicate entities in panel with 'tree view' mode (#2835)
    * Broken synchronization with filelist and tree panels (#2862)
    * Standalone mcedit doesn't load saved file position (#2853)
    * mcedit segfaults when aspell (en) dictionary is not installed (#2856)
    * mcedit segfaults after "Back from declaration" call (#2859)
    * mcedit: unable to save changes in "Safe save" mode(#2832)
    * Segfault when viewing HTML files with "mc -v" (#2858)
    * Broken 'Enter' action on a rpm file containing space character in filename (#2838)
    * extfs: uc1541 broken handling (#2864)
    * mc.ext: OGV format handled as audio (#2869)


Version 4.8.4

- Core

    * Use xdg-open by default in mc.ext.in if present to open files, fallback on current scheme otherwise (#2118)
    * Improve of mouse event handling in dialogs (#2817)
    * Show extended info about compiled-in paths for internal/external macros in the "mc -F" output (2495)

- VFS

    * Added SFTP support (#1535)

- Editor

    * Multieditor: allow edit many files in one mcedit window (#2261, #2839)
    * Aspell support for spell check (#2788)

- Viewer

    * Handle CK_FileNext/CK_FilePrev actions inside mcviewer (#2814)

- Misc

    * Tweak and cleanup of code in case of --disable-charset option usage (#2827)
    * File extension support:
        - .gem - rubygems (#2797)
        - .cpio.xz - compressed cpio archives (#2798)
        - .webm - WebM video (#2746)
        - .lib - gputils artifacts (#2751)

- Fixes

    * Build failure on FreeBSD 6 (#2808)
    * src/filemanager/filegui.c does not compile on Solaris due to missing macros (#2825)
    * Loss of data on copy to full partition (#2829)
    * Crash at Chown command (#2784)
    * Crash when creating relative symlink (#2787)
    * Misinterpretation of dirs as command line arguments (#2783, #2805)
    * Number of panelized files was limited to 127 (#2813)
    * CK_History removes CK_HistoryNext entries (#2313)
    * URL with port was stored wrong in history (#2833)
    * Can't find 00 (zeroes) in patterns in hex search (#2795)
    * Hotkey conflicts in 'Search' dialog (#2843)
    * Error message when entering into compressed tar and cpio archives (#2785)
    * Garbage directory listing in ftpfs (#2800)
    * Incomplete sand256 skin (#2807)
    * mcedit scripts are installed as data files (#1437)
    * Fails to build from source with --enable-tests (#2786)
    * Tests failure on PowerPC,S390,S390x (#2804)
    * Fail to compile if --without-vfs configure option specified (#2834)
    * do_panel_cd: FTBFS with --enable-tests on [kfreebsd-i386,kfreebsd-amd64,ia64,armhf] (#2803)


Version 4.8.3

- Misc

    * Code cleanup (#2780)

- Fixes

    * Broken support of XDG_* shell variables (#1851)
    * Segmentation fault while background copying (#2663)
    * MC ignores second directory argument (#2762)
    * Interpretation of LANG variable needs to be case insensitive (#2386)
    * Cannot copy zero-length files with "Preallocate space" option (#2755)
    * Problem in the Copy operation with unchecked the "Preserve attributes" option (#2278)
    * * Cursor position reset after update when panel is panelized, but doesn't (#2766)
    * File selection reset after exit from the archive in the root (#2776)
    * Hotlist: broken newly added entries if old-style path is present (#2753)
    * Can't rebind Fx keys in the file manager (#2384)
    * "justified" menu alignment (#2756)
    * The last (or single) word of hyperlinks in the interactive help don't act on mouse clicks (#2763)
    * 'cd' command is not working in shell link (#2758)
    * mc hangs on switching screens (#2608)
    * Case sensitive search with SEARCH_TYPE_PCRE is broken (#2764)
    * mcedit can't run w/o file as parameter (#2754)
    * mcedit can't record input char (#2757)
    * mcedit: save file on top of existing directory changes dir's permissions (#2761)
    * Unable to edit gzipped files (#2759)
    * mcedit hangs up on replace with regexp contains '^' or '$' (#1868)
    * Segfault after open incorrect archive (#2775)
    * mcdiff crashes if one panel is not in the listing mode (#2769)
    * The password for vfs sessions remains in input history (#2760)
    * Showing directory sizes is broken in VFS'es (#2765)
    * Stale symlinks in vfs (#2777)
    * Active VFS directories list contain incorrect current path (#2779)
    * Date not set properly in manpage (#2692)
    * Empty texinfo rule in mc.ext (#2774)
    * Test failure if 'HOME' contains trailing slashes (#2768)


Version 4.8.2

- Core

    * Added new flag -X (--no-x11) to allow dont't use X11 to get the state of modifiers Alt, Ctrl, Shift (#86)
    * Support of '~' as home dir in 'Start at:' field in 'Find File' dialog (#2694)
    * Support of '~' as home dir in hotlists (#2747)
    * Learn of 'Back Tab' is possible now in 'Learn keys' dialog (#2628)
    * Optional '0x' prefix for hexadecimal search (#2705)
    * Dynamically resize panels (#2465)
    * New bindings (ScrollLeft, ScrollRight) for scroll long filenames in panels (#2731)

- VFS

    * Internal VFS reorganization (#2695)

- Editor

    * Added as.syntax (#2708)

- Viewer

    * Added action bindings for backward search (#2105)

- Misc

    * Added hotkeys for all radio/check-buttons in search/replace dialogs (#2704)
    * New file bindings:
        - .m4v, .ts - video (#2702)
        - djv - DjVu? (#2645)
    * Simplify mc.menu - remove LZMA|LZ and change p7 to 7z (#2703)
    * Updated list of known browsers: gnome-moz-remote mozilla firefox konqueror opera (#2725)
    * Added MC_HOME environment variable to set up home directory of MC (as part of #2738)
    * Lot of code cleanup (#2740)

- Fixes

    * Compile failure of 4.8.1 on xBSD because "Undefined symbols: _posix_fallocate" (#2689)
    * MC deletes the wrong file because of forced panel reload before file operation (#2736)
    * Cannot chdir to directory if directory name contains the dollar sign (#2451)
    * Incorrect panel size after change panel split type (#2521)
    * Wrong total bytes counter for subdirs in copy/move dialog (#2503)
    * Display corruption in panels after window shrink (#2684)
    * Command line is unaccessible from tree panel (#2714)
    * Extra confirmation before delete an empty hotlist group (#1576)
    * Can't open an edit zero-length file from VFS in mcedit (#2710)
    * mcedit crashes when ~/.config is a file (#2738)
    * mcedit: reset selection after END/HOME/PgDn/PgUp (#2726)
    * 'make check' fails on arm and alpha (-z muldefs) (#2732)


Version 4.8.1

- Core

    * Use posix_fallocate64() when copying files/moving to a new mount point (#2610)
    * Faster startup (#2637)
    * Support of extended mouse clicks beyond 223 (#2662)

- VFS

    * Added exit point ("..") at the top of file list (after external panelization) (#275, #278)

- Editor

    * Lex/Flex sources (extension .l) handled by yxx.syntax file. Yacc/Bison syntax completed with all symbols (#1647)
    * Updated syntax files:
        - lua

- Misc

    * Updated skins:
        - sand256 (#2640)
        - xoria256 (#2641)
    * Added ability to move MC config files to specified place instead of multiple places in $HOME (#2636)
    * Added configure option --with-homedir (default value: XDG) (#2636)
    * Respect traditional placement of user preferences on Mac OS X (#2658 as part of #2636)
    * A few useful additions to filehighlight.ini (#2646)

- Fixes

    * Doesn't compile when using --disable-nls (#2639)
    * Can't compile on OpenIndiana (Solaris) (#2643)
    * Moving content of bindings to mc.ext during 4.7 -> 4.8 upgrade breaks mc
    * Free space on filesystems >2TB is not displayed properly (#2338)
    * Not all errors are skipped after "Ignore all" choose (#71)
    * Input field in password mode is fully masked with asterisks (#2653)
    * In "Copy File" dialog the "preserve Attributes" checkbox is always unchecked for filesystems mounted with FUSE (#2254)
    * Command line cursor misplaced after a resize in viewer/editor (#2678)
    * Save of some learned keys is broken (#2676)
    * Editor sometimes shows two dots instead of letter (#2372)
    * Editor: word completion should ignore the current word (#2614)
    * Viewer sometimes shows two dots instead of letter (#1730)
    * Viewer shows two dialogs when searcj hot found (#2677)
    * Cannot navigate over spftp servers (#2634)
    * mc adds spaces at the beginning of all files/dirs on ftp servers (#2635)
    * VFS: broken SMB (#2652)
    * man page lies about mc.keymap (#2675)
    * mc does not preserve file mtime when copying over ssh (#2625)


Version 4.8.0

- Misc
    * Code cleanup (#2620)
    * License version updated to GPL3+ (#1551)
    * Added new translation:
        - Interlingua

- Fixes
    * Viewer: cursor position is not restored in hex mode (#2543)
    * fish: broken panels drawing after entering password (#2611)
    * fish: content of modified file is appended instead of overwritten in the remote host (#2632)
    * extfs: broken navigation in archives if current path is encoded (#2621)
    * extfs: strange error message when opening a 7z file if p7zip is not installed (#2598)


Version 4.8.0-pre2

- Core

    * Added -g/--oldmouse option to support of NORMAL/BUTTON_EVENT mouse type (useful for screen/tmux) (#2601)

- VFS

    * New extfs plugin: gitfs (#2467)
    * patchfs enchancement: join several hunks of the same file into one VFS entry (#2573)

- Misc

    * mc.ext: use "include" for $EDITOR entries (#1689)
    * New file bindings:
        - .3gp - video (#2583)

- Fixes

    * Cannot compile 4.8.0-pre1 and 4.7.5.3 on Solaris (#2587)
    * Recent autoconf displays warnings about missing AC_LANG_SOURCE (#2589)
    * Duplication of variable declarations (#2576)
    * Incorrect TTY layer initialization (#2601)
    * Wrong Backspace key behavior in QuickSearch mode if BS key is mapped to CdParentSmart action (#2522)
    * M-o works unexpectedly on symlink shortcuts (#2590)
    * Panelize doesn't honour current sorting (#2175)
    * Hintbar jumps to the top of the screen and overwrites main menu (#2593)
    * File size column is bogus for widths above 9 (#2580)
    * Hex search: incorrect length usage in hexadecimal search (#2579)
    * Editor: Incorrect Pascal syntax highlighting (#2531)
    * Editor: mouse clicks are ignored on the bottom line (#2591)
    * Editor: extended keybingings are broken (#2586)
    * Viewer: Fixed search finds bold/underlined strings twice and highlight search results (#265)
    * Broken listing in ExtFS VFS module (#81)
    * File name length is limited in tar archive (#2201)
    * Crash when copying symlink over ssh (#2582)
    * Broken panels recode (#2595)
    * ftp failures - leading white space in file name (#2594)
    * FISH hangs while copiyng a lot of small files (#2605)


Version 4.8.0-pre1

WARNING: Configuration files was moved from your $HOME/.mc directory into
XDG_CONFIG_* directories to respect FDO standard
(http://standards.freedesktop.org/basedir-spec/basedir-spec-0.7.html).
To get more information, see ticket #1851.

WARNING: VFS paths now handled as vfsprefix1://vfsdata/vfsprefix2://vfsdata
(see #2361). Also, 'bindings' user file was renamed to 'mc.ext', so you need
search in this file all

    Open=file.ext#vfsprefix

and replace them to

    Open=file.ext/vfsprefix://

After this you should rename your 'bindings' file to 'mc.ext'.
Old-style paths are handled just in 'Directory hotlist' dialog, but you couldn't
mix URL-like and old style path elements in one path string. Support of old-style
paths will be removed in next major release (probably in 4.9, who knows...)

WARNING: keybinding names was renamed to provide some unification (see #2511).
The correspondence of old and new keybinging names are described in doc/keybind-migration.txt
file and in doc/keybindMigration web page.

Be aware.

- Core

    * Added 256 colours support (#2169, #2173, #2475)
    * Changed default text in filtered view (alt-!) to input command line (if not empty)
      or stay old behaviour (current file under cursor) (#2266)
    * Added simple swap mode that means the swap of panel locations, in addition to current swap
      of panel content (#2368)
    * Cofiguration files now moved to directory specified in XDG_CONFIG_HOME environment variable (#1851)
    * Panel options are read now from [Panels] section only. [Midnight-Commander] section is not read (#2305)
    * "Show mini info" checkbox was moved from the "Layout" dialog window to the "Panel options" one (#2305)
    * Select files by shift-left/right in file panel (#2534)
    * Added support of skip all errors on multi-file/dir operation (#71)
    * 'Find Files' improvements:
        - support relative ignored directories (#2275);
        - handle of ignored directories in dialog window (#2275);
        - "Search for content" checkbox is enabled by default (#2462)
    * Added hardlinks detection for filehighlight (#2478)
    * Unification of keybind names (#2511):
        - most of keybinding names are changes to unify that names. Table of old and new names
          is available in doc/keybind-migration.txt;
        - improve of key rebinding: previously, to rebind some keys, used must redefine the entire section
          where that bindings are placed in user keymap file. New merge algorithm doesn't require that
          and allows rebind only wanted keys;
        - added --nokeymap command line option to disable external keymaps
    * Sources in 'lib' directory now independent to sources in 'src' one (#2501)
    * Added configure parameter --enable-mclib for build libmc.so shared library (#2501)
    * Added new engine for universal event system (as part of #2501)
    * Optimized loading and saving of configurations and histories (#2541, #2545)
    * Reimplemented i18n support in 'Chmod' dialog window (#2557)

- VFS

    * VFS structure changes (as part of #2501):
        - moved from lib/vfs/mc-vfs to lib/vfs;
        - split VFS-modules by directories and moved to src/vfs;
        - lib/vfs/vfs-impl.h was merged into lib/vfs/vfs.h
    * VFS now used URL-like paths (#2361)

- Editor

    * New engine of the editor macro (#323)
    * Multiply repeat of the recorded actions (#323)
    * Call extermal scripts from the editor (#323, #2512)
    * Added REDO action (#25)
    * Group UNDO by action (#27)
    * Selection is not reset after execute user menu (#2463)
    * Vertical selection is not reset after copy/move (#2504)
    * More intuitive word left/right action (now the cursor stop beside EOL/BOL) (#2483)
    * Duble-click marks the current word. Added action MarkWord to mark word, MarkLine
      to mark current line (#2499)
    * Regexp search&replace: support escape sequences in replacement string (#1882)

- Misc

    * Minor enhancement in mc.ext:
    * added -C key to nm utility in View action for static libraries (#2485)
    * New file bindings:
        - .torrent: view using ctorrent (#2562);
        - .mts: handle as videofile (#2566)
    * Added new entries in cedit.menu: "Sort selection", "Upper case", "Lower case"
    * New skins:
        - Xoria256 (#2469)
        - mc-4.6 (#2524)
    * Updated skins:
    * Nice dark (#1791)
    * Added support for check unit test framework (http://check.sourceforge.net) (as part of #2501)
    * Added -F/--datadir-info option to show extended information about used data dirs (#2495)
    * Added --configure-options to easy update & reconfigure existing mc (#2495)
    * Language-specific man pages and hint and help files are not installed
      if mc is built with --disable-nls option (#2514)
    * Added new translation:
        - Esperanto
    * Code cleanup (#2481, #2515, #2518, #2560, #2570)

- Fixes

    * Build failure on DragonFly BSD (#2516)
    * Broken Del & Backspace in dialogs (in locale CP866) (#1634)
    * Screen and input corruption under xterm in non-UTF locales (#1668)
    * Alt-Backspace shortcut doesn't work (#2455)
    * Broken command autocompletion (#2458)
    * Swap panels doesn't respect sort options (#2368)
    * File list format of panel is initialized incorrectly after switch back from quick view
      or info mode to file list one (#2390)
    * Main menu is not drawn correctly after change of it visibility and activity (#2466)
    * MC switches to left panel after call of command history using mouse (#2459)
    * Find file: don't check content regexp if search for content is not used (#2464)
    * Find file: broken lynx-like navigation in panelization of search result (#2491)
    * Dialog trims leading spaces in input field (#2544)
    * Panelize content is lost when doing F5/F6/F8 on a file on the other panel (#2312)
    * Color of panel header cannot be set in the command line (#2170)
    * ctrl-g key closes file panels (#2520)
    * Incorrect files mark by mouse (#2556)
    * Editor: incorrect restore selection after UNDO (#2456)
    * Editor: segfault after getting the previous char in utf8 (#2484)
    * Editor: incorrect detection of the word boundary (added '{', '}' as end of word) (#2500)
    * Bold and selected colors of viewer cannot be set in the command line (#2489)
    * Viewer: fixed  incorrect starting offset for 'search again' (#2294)
    * Viewer: fixed problems while displaying UTF-8 manual pages (#1629)
    * Diff viewer: quick left/right movements don't work in non-default key maps (#2509)
    * AI_ADDRCONFIG is not optional for RFC 3493 non-compliant systems (#2401)
    * FTP directories containing @ result severe security risks (eg. deletion of homedir) (#2220)
    * Builtin ftp client can't download files with apostrophe in a file name (#2251)
    * Unable to show FTP listing if password contains # (#2360)
    * FTP: fixed access to file names starting with space (#81)
    * Bashisms in extfs (#2569)
    * Browsing *.deb files is broken with latest Perl (#2552)
    * isoinfo adds ";1" to the end of file name when Joliet without Rock Ridge is used (#2471)
    * patchfs incorrectly works with filenames containing spaces (#2572)
    * cd to ~ processed incorrectly in the command line if more than one space is separating
      the "cd" and "~" (#2120)
2015-08-28 07:47:08 +00:00
joerg
8d524706a4 Not MAKE_JOBS_SAFE. 2015-08-27 19:07:13 +00:00
wiz
3c462c8869 Update to 4.4.2:
* Major changes in release 4.4.2, 2009-05-16

** Bug Fixes

#26537: find -prune now makes sure it has valid stat() information.

** Translations

Updated the Slovenian translation.

* Major changes in release 4.4.1, 2009-04-21

** Bug Fixes

On some systems without support for a boolean type (for example some
versions of the AIX C compiler), find's regular expression
implementation fails to support case-insensitive regular expression
matching, causing -iregex to behave like -regex.  This is now fixed.

#25764: remove duplicate entry for 'proc' in updatedb's $PRUNEFS.

#25154: Allow compilation with C compilers that don't allow
declarations to follow statements.

#25144: Misleading error message when argument to find -user is an
unknown user or is missing.

#24283: -printf %TY causes NULL pointer dereference on Solaris.

#24169: find would segfault if the -newerXY test was not followed by
any argument.

#23996: integer overflow on some platforms when parsing "-used 3".

#23663: crash in some locales for -printf %AX (this problem seems to
have affected only the CVS code for 4.5.x, and not any public
releases, but it was a problem with the original fix for bug #22662)

#22662: find -printf %AX appends nanoseconds in the right place now.

** Functional Enhancements to find

If the POSIXLY_CORRECT environment variable is set, the system's
definition of "yes" and "no" responses are used to interpret the
response to questions from -ok and -okdir.  The default is still to
use information from the findutils message translations.

** Documentation Enhancements

Both the Texinfo manual and the find manual page now include a more
precise description of how your locale configuration affects the
interpretation of regular expressions and how your response to prompts
from the -ok action are interpreted.

Added a worked example describing how to find the shallowest instances
of a given directory name (or names) in a directory hierarchy.

The file README-CVS has been renamed to README-hacking and improved.

** Translations

Updated translations: Catalan, French, German, Indonesian, Irish,
Dutch, Polish, Slovenian, Swedish, Vietnamese, Chinese (simplified),
Lithuanian.

* Major changes in release 4.4.0, 2008-03-15

The 4.4.0 release of findutils is a stable release, succeeding the
final release in the previous development series, 4.3.13.  However,
since many users will have previously been using the previous stable
release series, this section describes the changes between the 4.2.33
release (which was the final 4.2.x release) and 4.3.0.

Some items in the lists of changes are prefixed by bug numbers (though
some of them are simply enhancements, not bugs).

Apart from the changes in version number and development versus stable
status, the only differences between 4.3.13 and 4.4.0 are bug fixes
#15472 and #20873.

It's possible that some of the bug fixes mentioned as fixed are in
fact fixes for bugs both introduced and fixed in 4.3.x (and thus not
present in 4.2.x at all).  While I have tried not to list those, some
may have slipped through.


** Functional enhancements to locate

*** slocate compatibility

The slocate database format is supported, both for reading by locate
and writing by updatedb.

Preliminary changes intended to eventually allow setuid operation of
locate have also been made.  For the moment, please don't install GNU
locate as a set-user-ID program (except for testing purposes; if you
do so, please make sure that untrusted users cannot execute the
set-user-ID locate program).

Use of an slocate database which was built with a nonzero security
mode (at the moment, GNU updatedb will not do this) forces locate's
"-e" option to be turned on, and that has an effect on the "-S" option
which is probably surprising for most users.

*** Other changes

Locate can now read old-format locate databases generated on machines
with a different byte order.  It does this by guessing the byte order,
so the result is not completely reliable.  If you need to share
databases between machines of different architectures, you should use
the LOCATE02 format (which has other advantages, as explained in the
documentation).

A new option, --max-database-age, has been added to locate.

Translation of locate --limit problems is improved.

The /proc filesystem is excluded from the locate database (by
default; change PRUNEPATHS to modify this behaviour).

** Functional enhancements to find

*** fts

By default, find now uses the fts() function to search the file
system.  The use of fts greatly increases find's ability to search
extremely deep directory hierarchies.

You can tell that the version of find you are using uses FTS, because
the output of "find --version" will include the word "FTS".

Currently two binaries for 'find' are built.  The configure option
--without-fts can be used to select whether 'find' uses fts:

				  With fts	Without fts
default configuration		  find		oldfind
configure --with-fts		  find		oldfind
configure --without-fts		  ftsfind	find

New tests, -readable, -writable, -executable.  These check that a file
can be read, written or executed respectively.

*** Changes to printf

The -printf action (and similar related actions) now support %S,
which is a measurement of the sparseness of a file.

*** Changes to -perm

The test "-perm /000" now matches all files instead of no files.  For
over a year find has been issuing warning messages indicating that
this change will happen.  We now issue a warning indicating that the
change has already happened (in 4.3.x only, there is no plan to make
this change in the 4.2.x series).

*** Time stamp resolution

The tests -newer, -anewer, -cnewer, -mtime, -atime, -ctime, -amin,
-cmin, -mmin and -used now support sub-second time stamps, including
the ability to specify times with non-integer arguments.

The -printf format specifiers also support sub-second time stamps:
  atime   ctime  mtime
  %a      %c     %t
  %AS     %CS    %TS
  %AT     %CT    %TT
  %A+     %C+    %T+
  %AX     %CX    %TX

*** Changes to -prune

The -prune action now always evaluates as true (this is also a
bug fix).

*** New tests

The new test -newerXY supports comparison between status times for
files.  One of the status times for a file being considered (denoted
X) is checked against a reference time (denoted Y) for the file whose
name id the argument.  X and Y can be:

   a 	Access time
   B	Birth time (st_birthtime, currently unsupported)
   c	Change time
   m	Modification time
   t	Valid only for the reference time; instead of comparison
	against a file status time, the argument is a time string.
	Not yet supported.

For example, -newermm is equivalent to -newer, and -neweram is true if
the file being considered was accessed more recently than the
reference file was modified.  The -newerXY test supports subsecond
timestamps where these are available.  The X=B variant is not yet
implemented.

#11668: FreeBSD extensions for time specification are now implemented.

*** Other changes to find

#20688: The warning printed by -name or -iname when the pattern to
match contains a slash can now be silenced by -nowarn.  This warning
was originally introduced unconditionally in 4.2.21.

For find, debug output can now be enabled at runtime with the -D
option.  This causes the printing of various sorts of information
about find's internal state and progress.

The find option -nowarn cannot itself produce a warning (this used to
happen with commands like "find . -name quux -nowarn -print").

You now get a more helpful error message when you use command lines
which have missing expressions, such as
      find . ( )
      find . !
      find . -a
      find . \( -not \)
      find . \( -true -a


*** Standards conformance

POSIX will standardise -path, so the documentation no longer claims
that -wholename is the 'canonical' test, and -ipath no longer
generates a warning.

When the POSIXLY_CORRECT environment variable is set, "find -perm
+a+w" is rejected as invalid.  Some other similar mode strings
starting with '+' which are not valid in POSIX are also rejected.

Find now follows POSIX rules for determining where directories end and
expressions start.  This means that "find \(1 \!2 \, \)" now searches
in the four named directories, rather than trying to parse an
expression. (Savannah bug #15235).

#21039: Setting the POSIXLY_CORRECT environment variable now turns off
warnings by default, because POSIX requires that only diagnostic
messages (and -ok prompts) are printed on STDERR, and diagnostic
messages must also result in a nonzero exit status.

#20803: POSIX requires that -prune always returns true.  Previously it
returned false when -depth was in effect and true otherwise.

** Functional ehnahcements to xargs

While there are a number of bug fixes in xargs in this release (as
compared to the previous stable release), there are no functional
enhancements as such.

** Performance Enhancements

*** Cost-based optimiser

Find now has a rudimentary cost-based optimiser.  It has an idea of
the basic cost of each test (i.e. that -name is very cheap while -size
is more expensive).  It re-orders tests bearing in mind the cost of
each test and its likely success.  Predicates with side effects (for
example -delete or -exec) are not reordered.  The optimiser is not
yet enabled by default, but the new option -O controls the query
optimisation level.  To see this in action, try
  find -D opt -O3 . -type f -o -type c -o -size 555 -name Z
and compare the optimised query with:
  find -D opt -O3 . -size 555 -o -type c -o -type f -name Z
and
  find -D opt     . -size 555 -o -type c -o -type f -name Z

Over time, as optimisations are proven to be robust and correct, they
will be moved to lower optimisation levels.  Some optimisations have
always been performed by find (for example -name is always done early
if possible).

** Security Fixes

#20014: Findutils-4.3.7 includes a patch for a potential security
problem in locate.  When locate read an old-format database, it read
file names into a fixed-length buffer allocated on the heap without
checking for overflow.  Although overflowing a heap buffer is often
somewhat safer than overflowing a buffer on the stack, this bug still
has potential security implications.

This bug also affected the following previous findutils releases:

 - All releases prior to 4.2.31
 - Findutils 4.3.0 to 4.3.6.

This bug has been assigned CVE number CVE-2007-2452.

** Bug Fixes

#22057: Actually rename the old locate database to the new one
 atomically, instead of just claiming the rename is atomic in a
 comment.

#22056: -Xtime tests are off by one second (e.g. rm -f x; touch x;
 find x -mtime 0 should print x).

#21960: xargs should collect the exit status of child processes even
 if the total count of unreaped children has not yet reached the
 maximum allowed.

#21568: Switch to checking the gnulib code out with native git, not
 CVS.  This affects mainly those who check findutils code out of CVS.

#20970: Trailing slash on directory arguments breaks -name.  "find
 foo/ -name foo" now correctly matches foo and printf foo/.  See POSIX
 interp
 http://www.opengroup.org/austin/interps/uploads/40/14959/AI-186.txt

#20865: Using both -delete and -prune without explicitly using -depth
 is now an error.  Traditionally, -delete has always turned -depth on
 anyway, so this is not a functional change.  However, using -depth
 (implicitly or explicitly) makes -prune a no-op.  This change is
 intended to avoid nasty surprises for people who test with "-print"
 and then change it to "-delete" when they are happy.

#20834: Avoid segmentation violation for -execdir when $PATH is unset.
 Assume that the PATH is safe in this situation.

#20802: If -delete fails, find's exit status will now be non-zero.
 However, find still skips trying to delete ".".

#20547: The version information printed by find, xargs, locate,
 updatedb, frcode and code now complies with the GNU Project's coding
 standards.

#20310: configure uses hosts's support status for "sort -z" when
 generating the updatedb script for use on the target.  This is
 inappropriate when cross-compiling, so avoid doing that.

#20273: When xargs is successful without consuming all of stdin (for
 example, with the -E option), and stdin is seekable, xargs now
 correctly restores the file position, even on platforms where exit()
 does not follow the POSIX rules of doing likewise.  Likewise for find
 (for example, with the -ok action).

#20157: Avoid segfault in locate when run as root.  This is caused by
 a buffer overrun, but at this time no exploit mechanism is known.

#20139: find -[acm]time -N (wrongly) includes files from N days ago,
 as well as (correctly) from less than N days ago.

#20005: Tests -mtime -n and -mtime +n incorrectly treated like -mtime
 n.

#19948: Fixed an assertion failure on IRIX 6.5 (O_NOFOLLOW is defined
 to 0 there).

#19923: Fixed an array overrun in groups[] array of 'locate' when run
 by or as root.  This bug appears not to be exploitable.  If locate is
 not installed setuid, the bug is not exploitable.  For setuid
 installations, it is conceivable that there could be an information
 leak if the user uses the -d option or the -e option, though the
 maintainer has been unable to provoke this on an x86 system.

#19871: Typos in find.1

#19871: Spurious .R directives in man page produced error messages from
 GNU troff.  This is now fixed (they are corrected to .B).

#19806: The -samefile predicate might get fooled by inode reuse.  We
 now hold open a file descriptor on the reference file to prevent
 this.

#19768: Better detection of corrupted old-style locate databases
 (e.g. if the database is too short to include a complete bigram
 table).

#19766: The frcode and code programs now detect write errors more
 reliably.

#19658: When cross-compiling, "make clean" no longer deletes the
 generated file doc/regexprops.texi, because there is no way to
 regenerate it.

#19634: Test suite now passes (again) if "." is on your $PATH.

#19619: Findutils builds once again on Cygwin.

#19605: Issue an error message (and later return nonzero exit status)
 if a symbolic link loop was encountered during directory traversal.

#19596: Correct the comparison in the find man page and Texinfo manual
 between %b and %s (the divisor is 512 not 1024).

#19484: bigram.c and code.c fail if the first pathname recorded begins
 with a space

#19483: Inconsistent option highlighting in updatedb man page

#19416: The result of I/O operations in print-related actions is now
 checked, and failures are reported.  Any failure will cause find's
 exit status to be nonzero.  The predicate itself will continue to
 return true.

#19391: When xargs knows that the system's actual exec limit is larger
 than the compiled-in ARG_MAX, use the system's limit without
 generating an assertion failure.

#19371: Fix compilation failure on systems which #define open to
 open64 (and similarly with the close system call).  This fixes
 Savannah bug #19371, affecting AIX 5.3.

#18714: In the POSIX locale, vertical tabs and form feeds are not
 field separators.

#18713: Quoted but empty arguments which occur last on an xargs input
 line are no longer ignored, but instead produce an empty argument.

#18466: we now avoid this bug by limiting "-execdir ...+" to just one
 argument for the time being.  There is a performance penalty for
 doing this.  We hope to make a better fix in a later release.

#18414: Tests for "find -readable" are skipped for the superuser, as
 on some systems (e.g. Cygwin with an Administrative user) users can
 read mode-000 files.

#18384: excess bracket in xargs --help

#18320: Zero bytes in input should give warning

#18222: find -printf '%H %P' once again prints the right result if
 more than one start point was given on the command line.

#18203: A duplicate report of bug #17478.

#17782: find -execdir now correctly puts the prefix "./" before the
 expansion of "{}" rather than at the start of the argument it appears
 in.  Please note that if you use the -exec or -execdir actions with a
 shell, then you may be vulnerable to shell code injection attacks, so
 don't do that.  It's not a security defect in find - you should not
 be passing untrusted data (such as file names chosen by other people)
 to the shell.

#17478: Error messages from find can garble the console.

#17477: find -printf '%' (that is, where the format has a trailing %)
 now generates an error message.

#17437: Corrected the handling of X in symbolic permissions (such as
 -u+w,a+X).

#17396: find -mtime -atime -ctime does not support fractional part
 (see "Functional changes" below)

#17372: The fts-based find executable (the default configuration uses
 fts) is now much faster when -maxdepth is used on filesystems with
 high fanouts.

#16738: "find .... -exec ... {} +" now works if you have a large
 environment and many files must be passed to the -exec action.  The
 same problem affected the -execdir action, though since the number of
 files in a given directory will normally be smaller, the problem was
 worse for -exec.

#16579: Updatedb now works if it is running as a user whose login
 shell is not actually a shell.

#16378: Assertion failure if stat() returns 00000 as the mode of a
 file.  This apparently can happen occasionally with broken NFS
 servers.

#15800: If find finds more subdirectories within a parent directory
 than it previously expected to based on the link count of the parent,
 the resulting error message now gives the correct directory name
 (previously an error message was issued but it specified the wrong
 directory).

#15531: The -prune action now behaves correctly when applied to a
 file.

#15472: Error messages that print ino_t values are no longer truncated
 on platforms with 64-bit ino_t.

#15384: Find misbehaves when parent directory is not readable.

#14748: find -perm /zzz gives wrong result when zzz evaluates to an
 all-zero mask

#14535: correctly support case-folding in locate (that is, "locate
 -i") for multi-byte character environments such as UTF-8.  Previously,
 if your search string contained a character which was outside the
 single-byte-encoding range for UTF-8 for example, then the
 case-folding behaviour failed to work and only exact matches would be
 returned.

** Documentation Fixes

#20873: Indicate that * matches / and leading dot in filenames for
"find -path".

#18554: Documented the construct -exec sh -c 'foo "$@" bar' {} +

#15360: The global effect of options (other than -daystart and
 -follow) is now explained more clearly in the manual page.

The locatedb.5 man page now documents the (default) LOCATE02 format
more clearly, and also documents the slocate database format.

The maximum and default values applying to the -s option of xargs are
now documented more clearly in the manual page.

** Compilation Fixes

If you configure the source code and then run the tests with "make
check", the test suite fails rather than defaulting to testing the
system binaries.

#19416: _FORTIFY_SOURCE warn_unused_result warnings

#19948: Assertion failure O_NOFOLLOW != 0 on IRIX 6.5

#19965: Compilation failure on OSF/1 4.0; non-declaration of uintmax_t

#19965: Fixed a compilation failure on OSF/1 4.0 (no definition of the
 type uintmax_t).

#19966: Findutils should now build on systems which have the modf()
 and fabs() functions in the maths library, -lm.  This includes some
 versions of HP-UX and Solaris.

#19966: find should link against -lm for modf() and fabs()

#19967: Build successfully with C compilers that don't support the GCC
 construct __attribute__((__noreturn__)).

#19967: Use of __attribute((__noreturn__)) makes compilation fail with
 some non-GCC compilers

#19970: Cannot cast from pointer to bool using gnulib's <stdbool.h>

#19970: Compile correctly on C89 systems where the "_Bool" type is not
 provided, taking into account the limitations of the gnulib
 replacement for stdbool.h.

#19979: Compilation errors on BeOS

#19980: Don't use the functions putw() or getw() since these are not
 in current POSIX.  Use the gnulib version of wcwidth() where the
 system does not provide it.

#19981: Don't call setgroups if the function isn't available.

#19983: Now compiles on DEC C V5.9-005 on Digital UNIX V4.0 (or at
 least, should).

#20128: Fix compilation error of find/tree.c on AIX with GCC.

#20263: Compilation fix for DEC Alpha OSF/1 cc, which forbids the
 ordering comparison of function pointers.

#20594: Allow fine-tuning of the default argument size used by xargs
 and find at ./configure time.

* Major changes in the 4.3.x release series

Release notes for the 4.3.x releases follow, though the changes are
mostly listed above (except bugfixes for bugs introduced in 4.3.x).
The previous stable release was 4.2.33, though 4.3.0 was actually
derived from 4.2.27.

* Major changes in release 4.3.13, 2008-02-14

** Bug Fixes

#22057: Actually rename the old locate database to the new one
atomically, instead of just claiming the rename is atomic in a
comment.

#22056: -Xtime tests are off by one second (e.g. rm -f x; touch x;
find x -mtime 0 should print x).

#21960: xargs should collect the exit status of child processes even if
the total count of unreaped children has not yet reached the maximum
allowed.

** Documentation Fixes

Documented various useful techniques with invoking "sh -c" from
xargs in the Texinfo documentation.

** Translations

Updated the German, Irish, Dutch, Polish and Vietnamese translations.


* Major changes in release 4.3.12, 2007-12-19

** Bug Fixes

#15384: Find misbehaves when parent directory is not readable.

** Documentation Fixes

More examples in the xargs manual page, including a portable analogue
for BSD's "xargs -o".

** Translations

Updated translations: Polish, Dutch, Portuguese, Swedish, Vietnamese.


* Major changes in release 4.3.11, 2007-12-02

** Functional changes

When the POSIXLY_CORRECT environment variable is set, "find -perm
+a+w" is rejected as invalid.  Some other similar mode strings
starting with '+' which are not valid in POSIX are also rejected.

The -prune action now always evaluates as true (this is also a
bugfix).


** Bug Fixes

#21568: Switch to checking the gnulib code out with native git, not
CVS.  This affects mainly those who check findutils code out of CVS.
This is not the first time this bug has been fixed (the previous fix
used "cvs update -D", which git-cvspserver silently does not
support).

#21039: Setting the POSIXLY_CORRECT environment variable now turns off
warnings by default, because POSIX requires that only diagnostic
messages (and -ok prompts) are printed on STDERR, and diagnostic
messages must also result in a nonzero exit status.

#20970: Trailing slash on directory arguments breaks -name.  "find
foo/ -name foo" now correctly matches foo and printf foo/.  See POSIX
interp http://www.opengroup.org/austin/interps/uploads/40/14959/AI-186.txt

#20865: Using both -delete and -prune without explicitly using -depth
is now an error.  Traditionally, -delete has always turned -depth on
anyway, so this is not a functional change.   However, using -depth
(implicitly or explicitly) makes -prune a no-op.  This change is
intended to avoid nasty surprises for people who test with
"-print" and then change it to "-delete" when they are happy.

#20803: POSIX requires that -prune always returns true.  Previously it
returned false when -depth was in effect and true otherwise.

#20802: If -delete fails, find's exit status will now be non-zero.
However, find still skips trying to delete ".".

** Documentation Fixes
#21635: Some of the documentation files had missing copying
conditions.   The missing files now have copying headers, and these
are compatible with each other (GNU FDL 1.2).

#21634: No copy of FDL 1.2 included with the source code

#21633: Missing copyright/license header in some documentation.

#21628: find -perm /000 matches all files rather than none, since
findutils-4.3.3.  The Texinfo documentation is now consistent with the
manual page on this point.

#21270: Formatting fixes to the xargs.1 manual page, including making
options bold instead of italic and making OPTIONS a section header
rather than a subsection.

* Major changes in release 4.3.10, 2007-11-13

** Bug Fixes

#21568: findutils gnulib code does not match the date in
import-gnulib.config.  We now check out the gnulib code via
git-cvs-pserver.

* Major changes in release 4.3.9, 2007-11-11

** Licensing

Findutils version 4.3.9 is released under version 3 of the GNU General
Public License.

** Bug Fixes

#20834: Avoid segmentation violation for -execdir when $PATH is
unset.  Assume that the PATH is safe in this situation.

#20310: configure uses hosts's support status for "sort -z" when
generating the updatedb script for use on the target.  This is
inappropriate when cross-compiling, so avoid doing that.

#20263: Compilation fix for DEC Alpha OSF/1 cc, which forbids the
ordering comparison of function pointers.

#20139: find -[acm]time -N (wrongly) includes files from N days ago,
as well as (correctly) from less than N days ago.

#20273: When xargs is successful without consuming all of stdin (for
example, with the -E option), and stdin is seekable, xargs now
correctly restores the file position, even on platforms where exit()
does not follow the POSIX rules of doing likewise.  Likewise for find
(for example, with the -ok action).

#20547: The version information printed by find, xargs, locate,
updatedb, frcode and code now complies with the GNU Project's coding
standards.

#20662: Avoid memory leak in find -name and other places affected by
gnulib dirname module.  The leak had been present since 4.3.1.

#20751: Avoid memory corruption in find -ls that has been present
since 4.3.1.

#20871: Assertion failure introduced in 4.3.3, when oldfind is invoked
in a directory where the parent directory lacks search permission.

** Enhancements

#20594: Allow fine-tuning of the default argument size used by xargs
and find at ./configure time.

#20688: The warning printed by -name or -iname when the pattern to
match contains a slash can now be silenced by -nowarn.  This warning
was originally introduced unconditionally in 4.2.21.

Translation of locate --limit problems is improved.

POSIX will standardise -path, so the documentation no longer claims
that -wholename is the 'canonical' test, and -ipath no longer
generates a warning.

** Documentation Fixes

Point out more explicitly that the subsecond timestamp support
introduced by findutils-4.3.3 introduces a change in the format of
several fields.

Also explain that when reporting a bug, you should check the most
recent findutils release first.

Introduced doc/find-maint.texi, a maintenance manual for findutils.

Added an extra worked example for find (copying a subset of files).

The locate command's manual page now has a HISTORY section.

#20951: Very bad/unclear/confusing documentation of security checks in
find -execdir

#20865: Better documentation on the fact that -delete implies -depth
and that -delete interacts badly with -prune.

#20552: Fixed typos, formatting and section ordering issues in the
find manual page.

#20529: removed spurious 'o' in description of "xargs -a" in
doc/find.texi.

#20232: The --max-database-age option of locate was added in release
4.3.3, but this file (NEWS) did not previously mention this fact.

** Translations

Updated Dutch translation.


* Major changes in release 4.3.8, 2007-06-12

** Bug Fixes

#20157: Avoid segfault in locate when run as root.  This is caused by
a buffer overrun, but at this time no exploit mechanism is known.

* Major changes in release 4.3.7, 2007-06-09

** Functional changes

Locate can now read old-format locate databases generated on machines
with a different byte order.  It does this by guessing the byte order,
so the result is not completely reliable.  If you need to share
databases between machines of different architectures, you should use
the LOCATE02 format (which has other advantages, as explained in the
documentation).

** Security Fixes

#20014: Findutils-4.3.7 includes a patch for a potential security
problem in locate.  When locate read an old-format database, it read
file names into a fixed-length buffer allocated on the heap without
checking for overflow.  Although overflowing a heap buffer is often
somewhat safer than overflowing a buffer on the stack, this bug still
has potential security implications.

This bug also affected the following previous findutils releases:

 - All releases prior to 4.2.31
 - Findutils 4.3.0 to 4.3.6.

This bug has been assigned CVE number CVE-2007-2452.

** Bug Fixes

#20128: Fix compilation error of find/tree.c on AIX with GCC.

#20005: Tests -mtime -n and -mtime +n incorrectly treated like -mtime n.

#19983: include_next causes compilation failure in findutils 4.3.6 on
non-GCC compilers

#19981: Don't call setgroups if the function isn't available.  This
fixes Savannah bug# 19981.

#19980: Don't use the functions putw() or getw() since these are not
in current POSIX.  Use the gnulib version of wcwidth() where the
system does not provide it.

#19979: Compilation errors on BeOS

#19970: Cannot cast from pointer to bool using gnulib's <stdbool.h>

#19967: Use of __attribute((__noreturn__)) makes compilation fail with
some non-GCC compilers

#19966: find should link against -lm for modf() and fabs()

#19965: Compilation failure on OSF/1 4.0; non-declaration of uintmax_t

#19948: Assertion failure O_NOFOLLOW != 0 on IRIX 6.5

#19871: Typos in find.1

#19596: Fixed this bug again, this time in the Texinfo manual (the
discussion should compare %b with %s/512, not %s/1024).

#19416: _FORTIFY_SOURCE warn_unused_result warnings

* Major changes in release 4.3.6, 2007-05-21

** Bug Fixes

#19948: Fixed an assertion failure on IRIX 6.5 (O_NOFOLLOW is defined
to 0 there).

#19923: Fixed an array overrun in groups[] array of 'locate' when run by
or as root.  This bug appears not to be exploitable.  If locate is not
installed setuid, the bug is not exploitable.  For setuid
installations, it is concievable that there could be an information
leak if the user uses the -d option or the -e option, though the
maintainer has been unable to provoke this on an x86 system.

#19871: Spurious .R directives in manpage produced error messages from
GNU troff.  This is now fixed (they are corrected to .B).

#19416: The result of I/O operations in print-related actions is now
checked, and failures are reported.  Any failure will cause find's
exit status to be nonzero.   The predicate itself will continue to
return true.

** Compilation Fixes

A variety of changes were made to allow compilation to succeed on
non-GNU systems.

#19983: Now compiles on DEC C V5.9-005 on Digital UNIX V4.0 (or at
least, should).

#19970: Compile correctly on C89 systems where the "_Bool" type is not
provided, taking into account the limitations of the gnulib
replacement for stdbool.h.

#19967: Build successfully with C compilers that don't support the GCC
 construct __attribute__((__noreturn__)).

#19966: Findutils should now build on systems which have the modf()
and fabs() functions in the maths library, -lm.  This includes some
versions of HP-UX and Solaris.

#19965: Fixed a compilation failure on OSF/1 4.0 (no definition of the
type uintmax_t).


* Major changes in release 4.3.5, 2007-05-05

** Functional changes

Updatedb can now support he generation of file name databases which
are compatible with slocate.  For some time, GNU locate has been able
to read these.

The /proc filesystem is excluded from the locate database (by
default; change PRUNEPATHS to modify this behaviour).

** Bug Fixes

#19806: The -samefile predicate might get fooled by inode reuse.  We
now hold open a file descriptor on the reference file to prevent this.

#19768: Better detection of corrupted old-style locate databases
(e.g. if the database is too short to include a complete bigram
table).

#19766: The frcode and code programs now detect write errors more
reliably.

#19371: Fix compilation failure on systems which #define open to
open64 (and similarly with the close system call).  This fixes
Savannah bug #19371, affecting AIX 5.3.

#19658: When cross-compiling, "make clean" no longer deletes the
generated file doc/regexprops.texi, because there is no way to
regenerate it.

#19391: When xargs knows that the system's actual exec limit is larger
than the compiled-in ARG_MAX, use the system's limit without
generating an assertion failure.

#18203: A duplicate report of bug #17478.

#17478: Error messages from find can garble the console.

#16378: Assertion failure if stat() returns 00000 as the mode
of a file.  This apparently can happen occasionally with broken NFS
servers.

#11668: FreeBSD extensions for time specification are now
implemented.  In fact, these were included in findutils-4.3.3.  The
change was listed as a functional change (whcih it is) and this bug
report was not mentioned.

** Documentation Fixes

The locatedb.5 manpage now documents the (default) LOCATE02 format
more clearly, and also documents the slocate database format.

The maximum and default values applying to the -s option of xargs are
now documented more clearly in the manual page.

* Major changes in release 4.3.4, 2007-04-21

** Bug Fixes

#19634: Test suite now passes (again) if "." is on your $PATH.

#19619: Findutils builds once again on Cygwin.

#19617: Nonexistent start points are (once again) diagnosed in
ftsfind.  This bug affected only findutils-4.3.3.

#19616: Fix leaf optimisation and loop detection (which were
unreliable in findutils 4.3.3).  This bug affected only
findutils-4.3.3.

#19615: find --version no longer claims to be using FTS_CWDFD when it
isn't.  This bug affected only findutils-4.3.3.

#19613: "find -L . -type f" no longer causes an assertion failure when
it encounters a symbolic link loop.  This bug affected only
findutils-4.3.3.

#19605: Issue an error message (and later return nonzero exit status)
 if a symbolic link loop was encountered during directory traversal.

#19484: bigram.c and code.c fail if the first pathname recorded begins
with a space

#19483: Inconsistent option highlighting in updatedb manpage

#18414: Tests for "find -readable" are skipped for the superuser, as
 on some systems (e.g. Cygwin with an Administrative user) users can
 read mode-000 files.

** Translations

Findutils 4.3.4 includes a translation for the Ukranian language.


* Major changes in release 4.3.3, 2007-04-15

Fiundutils-4.3.3 was released on 2007-04-15.

** Bug Fixes

#19596: Correct the comparison in the find manpage between %b and %s
(the divisor is 512 not 1024).

#18714: In the POSIX locale, vertical tabs and form feeds are not
field separators.

#18713: Quoted but empty arguments which occur last on an xargs input
line are no longer ignored, but instead produce an empty argument.

#18554: Documented the construct  -exec sh -c 'foo "$@" bar' {} +

#18466: we now avoid this bug by limiting "-execdir ...+"
to just one argument for the time being.  There is a performance
penalty for doing this.  We hope to make a better fix in a later
release.

#18384: excess bracket in xargs --help

#18320: Zero bytes in input should give warning

#17437: Corrected the handling of X in symbolic permissions (such
as-u+w,a+X).  This change actually occurred in findutils-4.3.2, but
the NEWS file for that release didn't mention it.

#17396: find -mtime -atime -ctime does not support fractional part
(see "Functional changes" below)

#14748: find -perm /zzz gives wrong result when zzz evaluates to an
 all-zero mask

#14535: correctly support case-folding in locate (that is, "locate
-i") for multibyte character environments such as UTF-8.  Previously,
if your search string contained a character which was outside the
single-byte-encoding range for UTF-8 for example, then the
case-folding behaviour failed to work and only exact matches would be
returned.



** Functional changes

The -printf action (and similar related actions) now support %S,
which is a measurement of the sparseness of a file.

The test "-perm /000" now matches all files instead of no files.  For
over a year find has been issuing warning messages indicating that
this change will happen.  We now issue a warning indicating that the
change has already happened (in 4.3.x only, there is no plan to make
this change in the 4.2.x series).

The tests -newer, -anewer, -cnewer, -mtime, -atime, -ctime, -amin,
-cmin, -mmin and -used now support sub-second timestamps, including
the ability to specify times with non-integer arguments.

The -printf format specifiers also support sub-second timestamps:
  atime   ctime  mtime
  %a      %c     %t
  %AS     %CS    %TS
  %AT     %CT    %TT
  %A+     %C+    %T+
  %AX     %CX    %TX


The new test -newerXY supports comparison between status times for
files.  One of the status times for a file being considered (denoted
X) is checked against a reference time (denoted Y) for the file whose
name id the argument.  X and Y can be:

   a 	Access time
   B	Birth time (st_birthtime, currently unsupported)
   c	Change time
   m	Modification time
   t	Valid only for the reference time; instead of comparison
	against a file status time, the argument is a time string.
	Not yet supported.

For example, -newermm is equivalent to -newer, and -neweram is true if
the file being considered was accessed more recently than the
reference file was modified.  The -newerXY test supports subsecond
timestamps where these are available.  The X=B variant is not yet
implemented.

If you configure the source code and then run the tests with "make
check", the test suite fails rather than defaulting to testing the
system binaries.

A new option, --max-database-age, has been added to locate.


* Major changes in release 4.3.2, 2006-11-25

** Bug Fixes

#18222: find -printf '%H %P' once again prints the right result if
more than one start point was given on the command line.

#17782: find -execdir now correctly puts the prefix "./" before the
expansion of "{}" rather than at the start of the argument it appears
in.  Please note that if you use the -exec or -execdir actions with a
shell, then you may be vulnerable to shell code injection attacks, so
don't do that.  It's not a security defect in find - you should not be
passing untrusted data (such as file names chosen by other people) to
the shell.

#17490: find  -regex generated a segfault in findutils-4.3.1, but this
 is fixed in findutils-4.3.2.

#17477: find -printf '%' (that is, where the format has a trailing %)
now generates an error message.

#17372: The fts-based find executable (the default configuration uses
fts) is now much faster when -maxdepth is used on filesystems with
high fanouts.

#15531: The -prune action now behaves correctly when applied to a file.

** Functional changes

The slocate database format is now supported.  Preliminary changes
intended to eventually allow setuid operation of locate have also been
made.  For the moment, please don't install GNU locate as a
set-user-ID program (except for testing purposes; if you do so, please
make sure that untrusted users cannot execute the set-user-ID locate
program).

Use of an slocate database which was built with a nonzero security
mode (at the moment, GNU updatedb will not do this) forces locate's
"-e" option to be turned on, which has an effect on the "-S" option
which is probably surprising for most users.


** Documentation Fixes

The global effect of options (other than -daystart and -follow) is now
explained more clearly in the manual page.   Savannah bug #15360.


* Major changes in release 4.3.1, 2006-08-06

** Bug Fixes

Find now follows POSIX rules for determining where directories end and
expressions start.  This means that "find \(1 \!2 \, \)" now searches
in the four named directories, rather than trying to parse an
expression. (Savannah bug #15235).

You now get a more helpful error message when you use command lines
which have missing expressions, such as
      find . ( )
      find . !
      find . -a
      find . \( -not \)
      find . \( -true -a

Savannah bug #15800: If find finds more subdirectories within a parent
directory than it previously expected to based on the link count of
the parent, the resulting error message now gives the correct
directory name (previously an error message was issued but it
specified the wrong directory).

Savannah bug #16738: "find .... -exec ... {} +" now works if you have
a large environment and many files must be passed to the -exec
action.  The same problem affected the -execdir action, though since
the number of files in a given directory will normally be smaller, the
problem was worse for -exec.

Savannah bug #16579: Updatedb now works if it is running as a user
whose login shell is not actually a shell.

There have also been a number of documentation improvements (includng
Savannah bug #16269).

** Functional changes

For find, debug output can now be enabled at runtime with the -D
option.  This causes the printing of various sorts of information
about find's internal state and progress.

The find option -nowarn cannot itself produce a warning (this used to
happen with commands like "find . -name quux -nowarn -print").

** Performance Enhancements

Find now has a rudimentary cost-based optimiser.  It has an idea of
the basic cost of each test (i.e. that -name is very cheap while -size
is more expensive).  It re-orders tests bearing in mind the cost of
each test and its likely success.  Predicates with side effects (for
example -delete or -exec) are not reordered.  The optimiser is not
yet enabled by default, but the new option -O controls the query
optimisation level.  To see this in action, try
  find -D opt -O3 . -type f -o -type c -o -size 555 -name Z
and compare the optimised query with:
  find -D opt -O3 . -size 555 -o -type c -o -type f -name Z
and
  find -D opt     . -size 555 -o -type c -o -type f -name Z

Over time, as optimisations are proven to be robust and correct, they
will be moved to lower optimisation levels.  Some optimisations have
always been performed by find (for example -name is always done early
if possible).

** Translations

Findutils 4.3.1 includes updated translations for the following
languages:
 Vietnamese, Belarusian, Catalan, Danish, German, Greek, Esperanto,
 Spanish, Estonian, Finnish, French, Irish, Galician, Croatian, Hungarian,
 Indonesian, Italian, Japanese, Korean, Luganda, Malay, Dutch, Polish,
 Portuguese, Brazilian Portuguese, Romanian, Russian, Kinyarwanda,
 Slovak, Slovenian, Serbian, Swedish, Turkish, Chinese (simplified),
 Chinese (traditional), Bulgarian

* Major changes in release 4.3.0, 2005-12-12

The 4.3.x release series are currently 'development' releases.  Please
test it, but think carefully before installing it in a production
system.  New features in findutils-4.3.x are under development; they
may change or go away.

All changes up to and including findutils-4.2.27 are included in this
release.  In addition the following changes are new in this release:

** Functional Changes

By default, find now uses the fts() function to search the file
system.  The use of fts greatly increases find's ability to search
extremely deep directory hierarchites.

You can tell that the version of find you are using uses FTS, because
the output of "find --version" will include the word "FTS".

Currently two binaries for 'find' are built.  The configure option
--without-fts can be used to select whether 'find' uses fts:

				  With fts	Without fts
default configuration		  find		oldfind
configure --with-fts		  find		oldfind
configure --without-fts		  ftsfind	find

New tests, -readable, -writable, -executable.  These check that a file
can be read, written or executed respectively.

* Major changes in release 4.2.27, 2005-12-06

** Warnings of Future Changes

The test -perm /000 currently matches no files, but for greater
consistency with -perm -000, this will be changed to match all files;
this change will probably be made in early 2006.  Meanwhile, a warning
message is given if you do this.

** Bug Fixes

If xargs is invoked with many short arguments on PPC systems running
the Linux kernel, we no longer get an "argument list too long" error
from the operating system.

Fixed a bug in the test suite which caused it to spuriously fail on
systems where ARG_MAX is different to the value used by the Linux
kernel on 32-bit x86-architecture systems.

On systems running the Linux kernel, "find -printf %F" no longer
produces the wrong answer for files on filesystems that have been
remounted elsewhere using "mount --bind". (Savannah bug #14921).

** Documentation Changes

Following some extensive and detailed review comments from Aaron
Hawley, the material in the manual pages and the Texinfo manual are
now synchronised.

The %M format specifier of "find -printf" is now documented, although
it has existed since release 4.2.5.

The 'find' manual page now correctly documents the fact that -regex
defaults to using Emacs-style regular expressions (though this can be
changed).

* Major changes in release 4.2.26, 2005-11-19

** Public Service Announcements

I'd like to point out a second time that the interpretation of '-perm
+mode' has changed to be more POSIX-compliant.  If you want the old
behaviour of the GNU extension you should use '-perm /mode'.  See the
NEWS entry for findutils version 4.2.21 for details.

** Functional Changes

The xargs command now supports a new option (--delimiter) which allows
input items to be separated by characters other than null and
whitespace.  This resolves Savannah support request sr #102914.

Sometimes find needs to read the /etc/mtab file (or perform the
equivalent operation on systems not using /etc/mtab).  If this
information is needed but not available, find now exits with an error
message non-zero status.  If the information is not needed, find will
not spuriously fail.

A new xargs option --delimiter allows the input delimiter to be
changed (previously \0 was the only choice unless you use the -L
option, which changes other semantics too).

** Bug Fixes

If the environment size is too large to allow xargs to operate
normally, 'xargs --help' still works (now).

If the input to xargs is a large number of very short options (for
example, one character each), earlier versions of xargs would fail
with 'Argument list too long'.  However, since this is precisely the
problem that xargs was invented to solve, this is a bug.  Hence on
those systems we now correctly use a shorter command line.  This
problem particularly affected 64-bit Linux systems because of the
larger size of pointers, although 32-bit Linux systems were also
affected (albeit for longer command lines).  In theory the same
problem could affect 'find -exec {} +', but that's much less likely
(even so, the bug is fixed there too).

Bugfix for an unusual failure mode (Savannah bug #14842) where an
attempt to allocate more space for directory contents succeeds but is
incorrectly diagnosed as a failure.  The likelihood of you
experiencing this depends on your architecture, operating system and
resource limits.  This failure has been observed in a directory
containing 35396 entries.

** Documentation Changes

The EXAMPLES section of the find manual page now correctly describes
the symbolic and octal modes for the -perm test.

The documentation and "--help" usage information for the -L, -l, -I
and -i options have been clarified (but the behaviour has not changed).

The documentation now explains more clearly what happens when you use
"-L -type l".

* Major changes in release 4.2.25, 2005-09-03

** Bug Fixes

find -perm /440 (which should succeed if a file is readable by its
owner or group) now works.  Previously there was a bug which caused
this to be treated as "find -perm 440".

Some files in the xargs test suite have been renamed to avoid problems
on operating systems whoch cannot distinguish filenames on the basis
of upper/lower case distinctions.

The software now builds on Cygwin, including the generated file
regexprops.texi.

Findutils should now build once again on systems supporting AFS, but
this support has not recently been fully tested.  Findutils should
also (once again) build on Cygwin.

** Other Changes

The test suite for find is now much more extensive.

* Major changes in release 4.2.24, 2005-07-29

** Documentation Changes

The manual now includes a "Worked Examples" section which talks about
the various ways in which findutils can be used to perform common
tasks, and why some of these alternatives are better than others.

The -I option of xargs (which is required by the POSIX standard) is
now documented.

We now document the fact that find ensures that commands run by -ok
and -okdir don't steal find's input.  Find does this by redirecting
the command's standard input from stdin.

Many documentation readability enhancements and proofreading fixes
were contributed by Aaron Hawley.

** Functional Changes

*** Functional changes in locate

The "--regex" option of locate now assumes the regular expression to
be in the same syntax as is used in GNU Emacs, though this can be
changed with the new option --regextype.  This is a change from the
existing behaviour (which was to use POSIX Basic Regular Expressions).
Since this feature is releatively new anyway, I though it was more
useful to have compatibility between regular expression handling in
find and locate than to maintain the short-lived previous behaviour of
locate.

The locate program now also supports a "--regextype" long option which
controls which regular expression syntax is understood by locate.
This is a long option and has no single-letter 'short option'
equivalent.

*** Functional changes in find

The regular expression syntax understood by "find" can be changed with
the -regextype option; this option is positional, meaning that you can
have several tests, each using a distinct syntax (this is not
recommended practice however).

The default regular expression syntax is substantially the same as
that recognised by GNU Emacs, except for the fact that "." will match
a newline.

The leaf optimisation can be disabled with the configure option
"--disable-leaf-optimisation", which is equivalent to specifying
"-noleaf" on all find command lines.  This is useful for systems
having filesystems which do not provide traditional Unix behaviour for
the link count on directories (for example Cygwin and the Solaris 9
HSFS implementation).

** Bug Fixes

*** Bug Fixes for find

The -iregex test now works once again on systems that lack
re_search() (that is, systems on which findutils needs to use the
gnulib version of this function).

find -regex now once again uses GNU Emacs-compatible regular
expressions.

If invoked with stderr closed, the -fprint and -fprintf actions now no
longer cause error messages to be sent into the output file.

If the link count of a directory is less that two, the leaf
optimisation is now disabled for that directory.  This should allow
searching of non-Unix filesystems to be more reliable on systems that
don't take the trouble to make their filesystems look like traditional
Unix filesystems.   Some filesystems don't even take the trouble to
have a link count of less than two and for these, -noleaf is still
required unless --disable-leaf-optimisation was used at configure time.

The "%Y" directive for the -printf action now no longer changes find's
idea of the mode of the file, so this means among other things that
"-printf %Y %y" now works properly.  This is Savannah bug #13973.

* Major changes in release 4.2.23, 2005-06-19

** Documentation Changes

The -L and -I options of xargs are currently incompatible (but should
not be).

Improved the documentation for -execdir and -okdir.

** Functional Changes to updatedb

File names ending in "/" which are specified as an argument to
--prunepaths (or in $PRUNEPATHS) don't work, so we now issue an error
message if the user tries to do that.  The obvious exception of course
is "/" which does work and is not rejected.


* Major changes in release 4.2.22, 2005-06-12

** Security Fixes

If a directory entry searched with "find -L" is a symbolic link to
".", we no longer loop indefinitely.  This problem affected find
versions 4.2.19, 4.2.20 and 4.2.21.  This problem allows users to make
"find" loop indefinitely.  This is in effect a denial of service and
could be used to prevent updates to the locate database or to defeat
file security checks based on find.   However, it should be noted that
you should not use "find -L" in security-sensitive scenarios.

** Other Bug Fixes

None in this release.

** Functional Changes to locate

A locate database can now be supplied on stdin, using '-' as a element
of the database-path. If more than one database-path element is '-',
later instances are ignored.

A new option to locate, '--all' ('-A') causes matches to be limited to
entries which match all given patterns, not entries which match
one or more patterns.

** Documentation Changes

Some typos in the manual pages have been fixed.  Various parts of the
manual now point out that it is good practice to quote the argument of
"-name".  The manpage now has a "NON-BUGS" section which explains some
symptoms that look like bugs but aren't.  The explanations of the "%k"
and "%b" directives to "find -printf" have been imrpoved.


* Major changes in release 4.2.21, 2005-06-07
** Functional Changes to find

The GNU extension "find ... -perm +MODE" has been withdrawn because it
is incompatible with POSIX in obscure cases like "find ... -perm ++r".
Use the new syntax "find ... -perm /MODE" instead.  Old usages will
still continue to work, so long as they don't conflict with POSIX.

If the output is going to a terminal, the -print, -fprint, -printf and
-fprintf actions now quote "unusual" characters to prevent unwanted
effects on the terminal.  See "Unusual Characters in File Names" for
further details.  There is no change to the behaviour when the output
is not going to a terminal.   The locate program does the same thing,
unless the -0 option is in effect (in which case the filenames are
printed as-is).

** Functional Changes to locate

The locate command will now read each locate database at most once.
This means that if you are using multiple databases and are searching
for more than one name, the results will now be printed in a different
order (and if you specified a small limit with --limit, you may get a
different set of results).

A new option '--print' for locate causes it to print the matching
results even if the '--count' or '--statistics' option is in effect.

** Bug Fixes
find /blah/blah/blah -depth -empty now works once again.

The -regex and -iregex tests of find now correctly accept POSIX Basic
Regular Expressions.  (Savannah bug #12999)

The updatedb program now works on systems where "su" does not support
the "-s" option, for example Solaris.

* Major changes in release 4.2.20, 2005-03-17
** Internationalization and Localization
Updated Vietnamese and Dutch translations.

** Bug Fixes
Minor bugfix affecting only those who compile from the CVS repository,
as opposed to those who compile from the source releases.

* Major changes in release 4.2.19, 2005-03-07
** Bug Fixes

find should now no longer hang on systems which lack the O_NOFOLLOW
flag to open(2) and which are clients of an unresponsive NFS server
(Savannah bug #12044).

We now avoid inappropriately failing for "find -L foo" or "find -H
foo" if foo is a symbolic link (Savannah bug #12181).  Previously we
used to fail with the error message "Too many levels of symbolic
links".

"find . -false -exec foo {} +" no longer runs an extra instance of foo
when find exits (Savannah bug #12230).

If the chdir() safety check fails but we can no longer get back to
where we started, exit with an explanatory (fatal) error message.
This does not happen on GNU/Linux and FreeBSD because the safety check
is not needed (the security problem the safety check protects against
is prevented in a cleaner way on those systems).

"make distclean" no longer deletes regex.c (which "make all" needs).

**  Functionality Changes
"find -printf "%h\n" will now print "." for files in the current directory.
Previously it printed nothing (but there was a bug in the %h
implementation anyway).  This fixes Savannah bug #12085.

Should now build (again) on non-C99-compliant systems.

** Documentation enhancements
Fixed some typos and clarified wording in "Working with automounters".

** Internationalization and Localization
New Vietnamese message translation.

* Major changes in release 4.2.18, 2005-02-16
** Bug Fixes
*** "find -depth" was missing out non-leaf directories when they contain
    non-directories.  This affected findutils releases 4.2.15,
    4.2.16 and 4.2.17, but the bug is now fixed.
*** Find no longer hangs on systems which are clients of unresponsive
    NFS servers.
**  Documentation improvements
*** Improvements and corrections to the find.1 manpage, including corrections to the descriptions of -H and -L.

* Major changes in release 4.2.17, 2005-02-08
** Bug Fixes
*** bug #11861 	undefined symbol "basename" on IRIX 5.3
*** bug #11865 	xargs -i regression  (as compared to findutils-4.2.12)
*** bug #11866 	Typo in pred_okdir renders it useless (affecting 4.2.16 only)
*** patch #3723 fix recent process_top_path change (for -execdir on /)
*** Fixing bug #11866 and applying patch #3723 made -execdir work much better.
*** find bar/baz/ugh now works again if baz is a symbolic link (broken
    in 4.2.15).

* Major changes in release 4.2.16, 2005-02-05
**  Functionality Changes
*** Updated the message catalogues for the translated messages.
*** The subfs filesystem is now treated the same as the autofs
    filesystem is.
*** New translations:  Belarusian, Catalan, Greek, Esperanto,
    Finnish, Irish, Croatian, Hungarian, Japanese, Luganda,
    Malay, Romanian, Slovenian, Serbian, Chinese (simplified).

**  Bug Fixes
*** The -execdir action now works correctly for files named on the
    command line.

* Major changes in release 4.2.15, 2005-01-29
**  Functionality Changes
*** locate now supports matching regular expression (--regex).
*** --enable-d_type-optimization (introduced in findutils 4.2.13) is now turned on by default.

* Major changes in release 4.2.14, 2005-01-25
**  Functionality Changes
*** New options -L, -P, -H for locate.  The work in the same was as the same options for find.
**  Bug Fixes
*** Don't include the "findutils/find/testsuite/find.gnu" subdirectory in the
    distributed tar file more than once.
*** Should now build on Solaris once again.
*** -xtype and -printf %Y now work correctly for symbolic links once again
**  Documentation improvements
*** All options for "locate" are now documented

* Major changes in release 4.2.13, 2005-01-23
**  Performance Enhancements
*** On Linux and some other systems, a large performance improvement,
    because we can eliminate many of the calls to lstat() (in extreme
    cases, 99% of them).  Limited testing shows a 2x speedup on NFS
    filesystems.  Other systems which can make use of this enhancement
    include Mac OS X and *BSD.

* Major changes in release 4.2.12, 2005-01-22
**  Functionality Changes
*** find is now POSIX-compliant, as far as I know.
*** -exec ... {} + now works.
*** New actions -execdir and -okdir which are like -exec and -ok but more secure.
*** "locate -w" is now a synonym for "locate --wholepath".
*** An empty path entry in the locate database path (for example "::" in
    $LOCATE_PATH or in the argument to "locate -d") is taken to mean
    the default database, whose name is hard-coded in locate.
**  Bug Fixes
*** If find or xargs cannot write to stdout, for example because
    output is redirected to a file and the disk is full, the
    relevant program will return a non-zero exit status.

* Major changes in release 4.2.11, 2004-12-12
**  Bug Fixes
*** Compilation fix for systems without EOVERFLOW.
*** More helpful error message if you make a mistake with (, ), -o or -a.
**  Functionality Changes
*** If you have unclosed parentheses on the find command line,
    or any of a number of similar problems, find will now produce
    a more helpful error message.
*** locate -b is now a synonym for locate --basename
*** locate now supports a --statistics (or -S) option, which prints some
    statistics about the locate databases.
*** Implemented the -samefile option.
**  Documentation improvements
*** New chapter in the manual, "Security Considerations".
*** Better documentation for -prune (Mainly thanks to 	Stepan Kasal)
**  Bug Fixes
*** locate's options -i and -w now work with the -e option (previously a bug
    prevented this).

* Major changes in release 4.2.10, 2004-12-06
**  Bug Fixes
*** Portability fix for fstype.c: should now compile on UNICOS, and possibly
    also produce useful results on BeOS and Dolphin, perhaps other
    systems too.

* Major changes in release 4.2.9, 2004-12-05
**  Functionality Changes
*** xargs no longer treats a line containing only an underscore as a logical end-of-file.   To obtain the behaviour that was previously the default, use "-E_".
*** xargs now supports the POSIX options -E, -I and -L.   These are synonyms
    for the existing options -e, -i and -l, but the latter three are
    now deprecated.
**  Bug Fixes
*** xargs -n NUM now invokes a command as soon as it has NUM arguments.
    Previously, it waited until NUM+1 items had been read, and then
    invoked the command with NUM arguments, saving the remaining one
    for next time.
*** If "find -L" discovers a symbolic link loop, an error message is issued.
*** If you specify a directory on the find command line, but -prune
    is applied to it, find will no longer chdir() into it anyway.
**  Documentation improvements
*** The precise interpretation of the arguments to the -atime, -ctime
    and similar tests in find has been documented more clearly.

* Major changes in release 4.2.8, 2004-11-24
*** Bugfix to the findutils 4.2.7 automount handling on Solaris.  This
    worked to some extent in findutils-4.2.7, but is much improved in
    findutils-4.2.8.

* Major changes in release 4.2.7, 2004-11-21
**  Functionality Changes
*** xargs can now read a list of arguments from a named file, allowing
    the invoked program to use the same stdin as xargs started with
    (for example ``xargs --arg-file=todo emacs'').
**  Documentation improvements
*** The Texinfo manual now has an extra chapter, "Error Messages".  Most
    error messages are self-explanatory, but some of the ones which
    are not are explained in this chapter.
**  Bug Fixes
*** Avoid trying to link against -lsun on UNICOS, which doesn't need it or
    have it.
*** Bugfix to the findutils 4.2.6 automount handling (which hadn't been enabled
    on Solaris).
*** Reenabled internationalisation support (which had been accidentally
    disabled in findutils-4.2.5).

* Major changes in release 4.2.6, 2004-11-21
**  Bug Fixes
*** find now copes rather better when a directory appears to change just as
    it is about to start examining it, which happens with automount.
    This is because automount mounts filesystems as you change
    directory into them.  This should resolve Savannah bugs #3998,
    #9043.
2015-08-26 12:44:32 +00:00
he
78c01f8f7c Improve the cpu plugin for NetBSD, should get rid of warnings
logged on hosts with hw.ncpu > 1.
PKGREVISION bumped.
2015-08-26 12:19:27 +00:00
leot
87dda80d8f Fix a configure problem with older freetype2 versions (and while here add
LICENSE and fix a warning reported by pkglint(1)).
Reported by Paul ONeill in PR pkg/49878. This closes PR pkg/49878.
2015-08-26 11:31:02 +00:00
fhajny
c3a1eba8f7 Update sysutils/rsyslog to 8.12.0.
Version 8.12.0 [v8-stable] 2015-08-11
- Harmonize resetConfigVariables values and defaults
  see also https://github.com/rsyslog/rsyslog/pull/413
  Thanks to Tomas Heinrich for the patch.
- GT/KSI: fix some issues in signature file format and add conversion tool
  The file format is incompatible to previous format, but tools have been
  upgraded to handle both and also an option been added to convert from
  old to new format.
- bugfix: ommysql did not work when gnutls was enabled
  as it turned out, this was due to a check for GnuTLS functions
  with the side-effect that
  AC_CHECK_LIB, by default, adds the lib to LIBS, if there is no
  explicit action, what was the case here. So everything was now
  linked against GnuTLS, which in turn made ommysql fail.
  Thanks to Thomas D. (whissi) for the analysis of the ommysql/gnutls
  problem and Thomas Heinrich for pointing out that AC_CHECK_LIB might
  be the culprit.
- bugfix omfile: potential memory leak on file close
  see also: https://github.com/rsyslog/rsyslog/pull/423
  Thanks to Robert Schiele for the patch.
- bugfix omfile: potential race in dynafile detection/creation
  This could lead to a segfault.
  Thanks to Tomas Heinrich for the patch.
- bugfix omfile: Fix race-condition detection in path-creation code
  The affected code is used to detect a race condition in between
  testing for the existence of a directory and creating it if it didn't
  exist.  The variable tracking the number of attempts wasn't reset for
  subsequent elements in the path, thus limiting the number of
  reattempts to one per the whole path, instead of one per each path
  element.
  This solution was provided by Martin Poole.
- bugfix parser subsystem: potential misadressing in SanitizeMsg()
  could lead to a segfault
  Thanks to Tomas Heinrich for the patch.
- imfile: files moved outside of directory are now (properly) handled
- bugfix: imfile: segfault when using startmsg.regex if first log line
  doesn't match
  Thanks to Ciprian Hacman for the patch.
- bugfix imfile: file table was corrupted when on file deletion
  This could happen when a file that was statically configured (not via an
  wildcard) was deleted.
- bugfix ompgsql: transaction were improperly handled
  now transaction support is solidly disabled until we have enough requests
  to implement it again. Module still works fine in single insert mode.
  closes https://github.com/rsyslog/rsyslog/issues/399
- bugfix mmjsonparse: memory leak if non-cee-json message is processed
  see also https://github.com/rsyslog/rsyslog/pull/383
  Thanks to Anton Matveenko for the patch
- testbench: remove raciness from UDP based tests
- testbench: added bash into all scripts makign it mandatory
- bugfix testbench: Fixed problem building syslog_caller util when
  liblogging-stdlog is not available.
  Thanks to Louis Bouchard for the patch
- bugfix rscryutil.1: Added fix checking for generate_man_pages condition
  Thanks to Radovan Sroka for the patch
- bugfix freebsd console: \n (NL) is prepended with \r (CR) in console
  output on freebsd only. For more details see here:
  https://github.com/rsyslog/rsyslog/issues/372
  Thanks to AlexandreFenyo for the patch
------------------------------------------------------------------------------
Version 8.11.0 [v8-stable] 2015-06-30
- new signature provider for Keyless Signature Infrastructure (KSI) added
- build system: re-enable use of "make distcheck"
- add new signature provider for Kesless Signature Infrastructure (KSI)
  This has also been added to existing tooling; KSI is kind of v2 of
  the Guardtime functionality and has been added in the appropriate
  places.
- bugfix imfile: regex multiline mode ignored escapeLF option
  Thanks to Ciprian Hacman for reporting the problem
  closes https://github.com/rsyslog/rsyslog/issues/370
- bugfix omkafka: fixed several concurrency issues, most of them related
  to dynamic topics.
  Thanks to Janmejay Singh for the patch.
- bugfix: execonlywhenpreviousissuspended did not work correctly
  This especially caused problems when an action with this attribute was
  configured with an action queue.
- bugfix core engine: ensured global variable atomicity
  This could lead to problems in RainerScript, as well as probably in other
  areas where global variables are used inside rsyslog. I wouldn't outrule
  it could lead to segfaults.
  Thanks to Janmejay Singh for the patch.
- bugfix imfile: segfault when using startmsg.regex because of empty log line
  closes https://github.com/rsyslog/rsyslog/issues/357
  Thanks to Ciprian Hacman for the patch.
- bugfix: build problem on Solaris
  Thanks to Dagobert Michelsen for reporting this and getting us up to
  speed on the openCWS build farm.
- bugfix: build system strndup was used even if not present
  now added compatibility function. This came up on Solaris builds.
  Thanks to Dagobert Michelsen for reporting the problem.
  closes https://github.com/rsyslog/rsyslog/issues/347
- bugfix imjournal: do not pass empty messages to rsyslog core
  this causes a crash of the daemon
  see also https://github.com/rsyslog/rsyslog/pull/412
  Thanks to Tomas Heinrich for the patch.
- bugfix imjournal: cosmetic memory leak
  very small and an shutdown only, so did not affect operations
  see also https://github.com/rsyslog/rsyslog/pull/411
  Thanks to Tomas Heinrich for the patch.
2015-08-26 00:55:33 +00:00
khorben
547bf59783 Fix build when setting CFLAGS 2015-08-25 22:52:25 +00:00
he
a0ed0d0d6c Fix a bug (of my own making) in NetBSD's process plugin which could
lead to null pointer de-reference and crash of collectd.
Bump PKGREVISION.
2015-08-25 16:19:49 +00:00
leot
9d206b557e Update sysutils/testdisk to testdisk-7.0.
Changes:
== 7.0 ==
=== General Improvements ===
Various fix including security fix, thanks to
* Coverity scan (Static Analysis of source code)
* afl-fuzz (security-oriented fuzzer).
* Denis Andzakovic from Security Assessment for reporting an
  exploitable Stack Buffer Overflow

=== TestDisk ===
==== Improvements ====
* exFAT: better support
* ext4: handle 64 bit blocks or 64 KiB blocksize. Fix detection and file
  listing

==== Bug fixes ====
* Avoid erroneous error when writing 512 bytes on hard disk using 4k sector
* FAT, NTFS: avoid NULL pointer dereference if localtime() returns NULL.
  Thanks to Graham Sutherland for reporting this bug.

=== PhotoRec & QPhotoRec ===
QPhotoRec is a Graphical User Interface (Qt based GUI) version of PhotoRec.
More user friendly, it recognizes the same file formats.

PhotoRec remains recommended for advanced users, it can stop a recovery and
resume it later, it recovers more fragmented files when brute-force technology
is enabled and expert mode is available.

==== Improvements ====
* Reduced false positives for more than 80 file formats.
* .gif: fix filesize detection
* .flv: add Flash filesize detection
* .mpg: detect filesize for MPEG
* .ra: detect filesize for RealAudio3
* Improved algorithm to deal with data fragmentation resulting in a general
  speed increased
* Speedup brute-force mode. Brute-force mode can recover more fragmented
  files, but it's still slow and not 100% reliable. You can enable it in
  PhotoRec Options menu.

New file formats recovered by PhotoRec:
* .3dm: Rhino / openNURBS
* .ari: ARRI Raw Video
* .camrec: Camtasia Studio
* .dad: Micae DVR
* .dcm: Digital Imaging and Communications in Medicine (DICOM)
* .fp12: File Maker Pro 12
* .kra: Krita
* .mlv: Magic Lantern Video
* .notebook: SMART notebook
* .ora: Mypaint
* .red: RED2 video format
* .rlv: Revelation password
* .vbm: Veeam Backup Metadata
* .woff: Web Open Font Format
2015-08-24 19:54:14 +00:00
wiz
6273034c7c Use BUILD_DEPENDS instead of including buildlink3.mk for docbook-xsl. 2015-08-23 20:34:07 +00:00
spz
2d641b65c7 add the security patches for XSA-137, XSA-138, XSA-139 and XSA-140 from
upstream.
2015-08-23 17:02:58 +00:00
spz
fcf436606c Apply patches for XSA-128 to XSA-140 from upstream
do a patch refresh in xentools42

rather than split the patches for pass-through.c over 5 files, delete
xentools42/patches/patch-CVE-2015-2756 and assemble all in
xentools42/patches/patch-qemu-xen-traditional_hw_pass-through.c
2015-08-23 16:17:12 +00:00
wiz
1a8b91542f Bump PKGREVISION for nettle shlib major bump. 2015-08-23 14:30:35 +00:00
wiz
2e62cc868c Update to 1.14.2, from Benedek Gergely on pkgsrc-users.
Changes unknown.
2015-08-22 19:13:37 +00:00
bsiegert
fdf0b425b8 Add a package for py-borg, aka Borg Backup. It is a successor of
sysutils/py-attic, which is no longer being developed upstream.

BorgBackup (short: Borg) is a deduplicating backup program. Optionally,
it supports compression and authenticated encryption.

The main goal of Borg is to provide an efficient and secure way to
backup data. The data deduplication technique used makes Borg suitable
for daily backups since only changes are stored. The authenticated
encryption technique makes it suitable for backups to not fully trusted
targets.
2015-08-22 14:47:55 +00:00
wiz
6952ed1252 Update to 1.0.36.1:
OS X lacks the POSIX-mandated clock_gettime function, and tarsnap is
not using libcperciva's "support broken operating systems" compatibility
mechanism yet.  Add -DPOSIXFAIL_CLOCK_REALTIME to the build.
2015-08-21 18:03:22 +00:00
wiz
bb4ddb9436 Update to 1.0.36:
1. SECURITY FIX: When constructing paths of objects being archived, a buffer
could overflow by one byte upon encountering 1024, 2048, 4096, etc. byte
paths. Theoretically this could be exploited by an unprivileged user whose
files are being archived; I do not believe it is exploitable in practice,
but I am offering a $1000 bounty for the first person who can prove me wrong:
http://www.daemonology.net/blog/2015-08-21-tarsnap-1000-exploit-bounty.html

2. SECURITY FIX: An attacker with a machine's write keys, or with read keys
and control of the tarsnap service, could make tarsnap allocate a large
amount of memory upon listing archives or reading an archive the attacker
created; on 32-bit machines, tarsnap can be caused to crash under the
aforementioned conditions.

3. BUG FIX: Tarsnap no longer crashes if its first DNS lookup fails.

4. BUG FIX: Tarsnap no longer exits with "Callbacks uninitialized" when
running on a dual-stack network if the first IP stack it attempts fails to
connect.

5. tarsnap now avoids opening devices nodes on linux if it is instructed to
archive /dev/.  This change may prevent "watchdog"-triggered reboots.

6. tarsnap -c --dry-run can now run without a keyfile, allowing users to
predict how much Tarsnap will cost before signing up.

7. tarsnap now has bash completion scripts.

8. tarsnap now takes a --retry-forever option.

9. tarsnap now automatically detects and uses AESNI and SSE2.

As usual, there are also many minor build fixes, harmless bug fixes, and code
refactoring / cleanup changes.  For a full listing of changes, consult the
tarsnap git repository: https://github.com/Tarsnap/tarsnap
2015-08-21 14:43:17 +00:00
jperkin
49b4a26e1d Enable build on SunOS if /system/lxproc is available. 2015-08-20 13:38:25 +00:00
he
bab337dacb Fix typo preventing build on NetBSD > 6.99.19. 2015-08-18 07:52:20 +00:00
he
09fcefbc43 Another round of update to collectd:
* Add support for the "irq" plugin on NetBSD.
 * Declare BUILD_DEFS+= VARBASE to silence pkglint.
 * Tweak Makefile.am instead; commit regenerated Makefile.in with automake.
 * Adjust the patch for the df plugin so it builds both in newer (> 6.99.19)
   and older NetBSD (e.g. 6.1.5)
 * Adjust the entropy plugin to use <paths.h> and _PATH_URANDOM
   to silence pkglint.
PKGREVISION bumped to 5.
2015-08-18 07:47:46 +00:00
wiz
c7383780db Bump all packages that depend on curses.bui* or terminfo.bui* since they
might incur ncurses dependencies on some platforms, and ncurses just bumped
its shlib.
Some packages were bumped twice now, sorry for that.
2015-08-18 07:31:00 +00:00
wiz
0eb141f110 Bump PKGREVISION for ncurses shlib bump. 2015-08-17 17:11:19 +00:00
fhajny
16d711d0b5 Update sysutils/puppet to 3.8.2.
Puppet 3.8.1-3.8.2
- Bug fixes
- Minor improvements
- Improvements for future migration to 4.0

Puppet 3.8.0
- Back-end Support for Upgrade Previews
- Logging as JSON
- Bug fixes and improvements

Release notes for 3.8.x:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html

Puppet 3.7.1-3.7.5
- Bug fixes
- Security fix for the POODLE vulnerability in the WEBrick master process

Puppet 3.7.0
- A nearly-final implementation of the Puppet 4 language
- Preview support for a new, fast, natively compiled Facter
- Lots of deprecations to prepare for Puppet 4.0
- Bug fixes and minor improvements

Release notes for 3.7.x:
  https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html

Puppet 3.6.1-3.6.2
- Security fixes for CVE-2014-3248 and CVE-2014-3250.
- Bug fixes.

Puppet 3.6.0
- Improvements to directory environments, and the deprecation
  of config file environments
- Support for purging unmanaged ssh_authorized_key resources
- Support for installing gems for a custom provider as part of a Puppet run
- A configurable global logging level
- A configurable hashing algorithm (for FIPS compliance and other purposes)
- Improvements to the experimental future parser
- Bug fixes and minor improvements

Release notes for 3.6.x:
  https://docs.puppetlabs.com/puppet/3.6/reference/release_notes.html

Puppet 3.5.1
- Bug fixes.

Puppet 3.5.0
- A new way to set up environments, which replaces the popular
  "dynamic environments" pattern
- A cleaner replacement for the classic import nodes/*.pp pattern
- Scriptable configuration with a new puppet config set command
- A new global $facts hash
- Early support for hashes and arrays in fact values
- Improvements to the future parser
- Support for RHEL 7, Ruby 2.1, and Facter 2.0
- Bug fixes and minor improvements

Release notes for 3.5.x:
  https://docs.puppetlabs.com/puppet/3.5/reference/release_notes.html

Puppet 3.4.1-3.4.3
- Bug fixes.
- Security fix for CVE-2013-4969.

Puppet 3.4.0
- Fixes for some high-profile bugs, including the "anchor pattern" issue
  and broken RDoc on Ruby 1.9+
- New certificate autosigning behavior to help quickly and securely
  add new nodes in elastic environments
- Windows improvements, especially for file resources
- Trusted node data in the compiler
- Bug fixes and minor improvements

Puppet 3.3.1-3.3.2
- Bug fixes

Puppet 3.3.0
- Configurable Resource Ordering
- Data in Modules
- YAML Over the Network is Now Deprecated
- Regex Capture Variables from Node Definitions ($1, etc.)
- Redirect Response Handling
- Filebucket Improvements
- Internal Format and API Improvements
- Improvements to Resource Types
- Bug fixes and minor improvements

Puppet 3.2.1-3.2.4
- Bug fixes
- Security fixes for CVE-2013-4761 and CVE-2013-4956
- Security fix for CVE-2013-3567

Puppet 3.2.0
- An optional, experimental "Future" parser
- Ruby 2.0 support
- OpenWRT OS support
- External CA support
- A new modulo (%) operator
- New slow catalog profiling capabilities
- Bug fixes and minor improvements

Release notes for for 3.2.x-3.4.x:
-  https://docs.puppetlabs.com/puppet/3/reference/release_notes.html
2015-08-17 13:20:43 +00:00
joerg
15275ca99b Revert CFLAGS change, breaks the build. 2015-08-16 17:34:45 +00:00
he
0436a9bc99 One more build fix for more modern NetBSD than netbsd-6... 2015-08-16 08:39:02 +00:00
he
2fb06e3473 Do an explicit include of <uvm/uvm_extern.h> so this has a hope
of building on newer NetBSD.  Build fix, so no PKGREVISION bump.
2015-08-16 08:01:58 +00:00
he
2122cd6b93 Add a port of the processes plugin to NetBSD.
Bump PKGREVISION.
2015-08-14 15:39:28 +00:00
he
7a41fe9da6 Include sys/rndio.h if it's available to be able to compile the entropy
plugin on newer NetBSD releases (>= 7.99.9, by the looks of it).
No PKGREVISION bump since this is a configure+build fix.
2015-08-14 12:59:04 +00:00
martin
5487eb2bb9 Bring in a patch from upstream to fix unaligned access in the metadata
journal
2015-08-13 08:57:08 +00:00
gls
53ccbeb7a8 Updated sysutils/fabric to 1.10.2
Upstream changes:
=================

1.10.2 2015-06-19
-----------------

    [Bug] #1273: Fix issue with ssh/config not having a cross-platform default
path. Thanks to @SamuelMarks for catch & patch.

    [Bug] #1286: (also #971, #1032) Recursively unwrap decorators instead of
only unwrapping a single decorator level, when obtaining task docstrings.
Thanks to Avishai Ish-Shalom for the original report & Max Kovgan for the
patch.

    [Bug] #1289: Fix 'NameError: free variable referenced before assignment
in enclosing scope'. Thanks to @SamuelMarks for catch & patch.

    [Bug] #980: (also #1312) Redirect output of cd to /dev/null so users
enabling bash's CDPATH (or similar features in other shells) don't have
polluted output captures. Thanks to Alex North-Keys for the original report &
Steve Ivy for the fix.

    [Bug] #1305: (also #1313) Fix a couple minor issues with the operation of &
demo code for the JobQueue class. Thanks to @dioh and Horst Gutmann for the
report & Cameron Lane for the patch.

    [Bug] #1318: Update functionality added in #1213 so abort error messages
don't get printed twice (once by us, once by sys.exit) but the annotated
exception error message is retained. Thanks to Felix Almeida for the report.

1.10.1 2014-12-19
-----------------

    [Bug] #1226: Update get to ensure that env.user has access to tempfiles
before changing permissions. Also corrected permissions from 404 to 0400 to
match comment. Patch by Curtis Mattoon; original report from Daniel Watkins.

    [Support] #1229: Add some missing API doc hyperlink references. Thanks to
Tony Narlock.

    [Support] #958: Remove the Git SHA portion of our version string
generation; it was rarely useful & occasionally caused issues for users with
non-Git-based source checkouts.

    [Bug] #1180: Fix issue with unicode steam outputs crashing if stream
encoding type is None. Thanks to @joekiller for catch & patch.

    [Bug] #1228: Update the CommandTimeout class so it has a useful str instead
of appearing blank when caught by Fabric's top level exception handling.
Catch & patch from Tomaz Muraus.

    [Support] #1213: Add useful exception message to the implicit SystemExit
raised by Fabric's use of sys.exit inside the abort function. This allows
client code catching SystemExit to have better introspection into the error.
Thanks to Ioannis Panousis.

    [Bug] #1019: (also #1022, #1186) Fix is a tty tests in
environments where streams (eg sys.stdout) have been replaced with objects
lacking a .isatty() method. Thanks to Miki Tebeka for the original report, Lele
Long for a subsequent patch, and Julien Phalip for the final/merged patch.

    [Bug] #1201: Don't naively glob all get targets - only glob actual
directories. This avoids incorrectly yielding permission errors in edge cases
where a requested file is within a directory lacking the read permission bit.
Thanks to Sassa Nf for the original report.

1.10.0 2014-09-04
-----------------

    [Feature] #975: Fabric can now be invoked via python -m fabric in addition
to the typical use of the fab entrypoint. Patch courtesy of Jason Coombs.
(Python 2.7 only)

    [Feature] #1090: Add option to skip unknown tasks. Credit goes to Jonas
Lundberg.

    [Feature] #1098: Add support for dict style roledefs. Thanks to Jonas
Lundberg.

    [Feature] #700: Added use_sudo and temp_dir params to get. This allows
downloading files normally not accessible to the user using sudo. Thanks to
Jason Coombs for initial report and to Alex Plugaru for the patch (#1121).

    [Bug] #1188: Update local to close non-pipe file descriptors in the child
process so subsequent calls to local aren't blocked on e.g.
already-connected network sockets. Thanks to Tolbkni Kao for catch & patch.
2015-08-12 03:26:47 +00:00
he
06c5c58104 Try to fix the build on SunOS, report_bytes isn't used there.
PKGREVISION++.
2015-08-11 14:15:00 +00:00
he
37301e4e46 Port some of the plugins to support NetBSD:
* entropy
 * memory
 * swap
 * disk
by shamelessly copying code from vmstat/iostat/rndctl etc.
Add comments to one patch missing one.
Bump PKGREVISION.
2015-08-11 13:19:21 +00:00
dholland
98c3ab9c52 Build and install fuser on Linux. PR 25673
(not actually tested on Linux; but package is Linux native so I'm expecting
it to work)
2015-08-10 07:31:31 +00:00
dholland
0ec0eb0f86 Make this less netbsd-centric. PR 25673 2015-08-10 07:10:55 +00:00
dholland
da4f7e4860 Remove references to /usr/adm, as nobody has shipped a /usr/adm
directory in their OS for probably some twenty years. Use /var
instead. In particular, fix the defaults for CNF_INFOFILE, CNF_LOGDIR,
and CNF_INDEXDIR to use the configured LOCALSTATEDIR, which in pkgsrc
will be ${VARBASE}/amanda, instead of hardwiring /usr/adm/amanda.

PR 38958.

PKGREVISION -> 9.
2015-08-09 22:50:09 +00:00
khorben
b20037003f Add support for CFLAGS
No functional change intended.
2015-08-09 14:55:58 +00:00
jaapb
7ea12ebae7 Recursive revbump associated with lang/ocaml update. 2015-08-07 11:20:32 +00:00
khorben
88b19a623c Add support for CFLAGS
No functional change intended.
2015-08-06 21:41:43 +00:00
wiz
954432158f Update to 0.12.9:
Major changes in 0.12.9
=======================
* rename newly introduced SpiceImageCompress enum to SpiceImageCompression
  as otherwise it was clashing with the definition used by older spice-server
  releases, breaking QEMU build

Major changes in 0.12.8
=======================
* add LZ4 support
* add audio volume synchronization
* deprecate unused vdi-dev
* add 'preferred-compression' message/capability
* add a new Windows driver escape code to send
  monitors capability from guest to client
2015-08-06 11:07:30 +00:00
youri
df09d80669 + xfce4-gvfs-mount-plugin 2015-07-31 09:03:29 +00:00