This release fixes three security and stability-related issues:
- Matevz Pustisek discovered a buffer overflow in the Etheric dissector.
(CAN-2005-0704)
- The GPRS-LLC dissector could crash if the "ignore cipher bit" option was
enabled. (CAN-2005-0705)
- Diego Giago discovered a buffer overflow in the 3GPP2 A11 dissector. This
flaw was later reported by Leon Juranic. (CAN-2005-0699)
- Leon Juranic discovered a buffer overflow in the IAPP dissector.
- A bug in the JXTA dissector could make Ethereal crash.
- A bug in the sFlow dissector could make Ethereal crash.
Everyone is encouraged to upgrade.
New and updated features:
=========================
- Tree view item context menus now let you browse to the display filter
reference and wiki pages for a particular protocol.
- Online help has been expanded.
- VoIP call analysis (including nifty connection diagrams) has been added.
- GSS-API decryption has been greatly enhanced.
New protocol support:
=====================
AgentX, BUDB, DTP, G.723, IDP, INAP, KINK, Realplayer Data Protocol, Retix
Spanning Tree Protocol, RTCP-XR, XML, XNS, SPP
Updated protocol support:
=========================
3GPP2 A11, ACSE, AMR, ATM, BER, BSSGP, BUTC, CDP, CLNP, CoSine L2, DAAP,
DCE/RPC, DCOM, DIAMETER, DNP, DNS, Etheric, FCP, FW-1, Gnutella, GPRS, GSM A,
GSM MAP, H.225, H.245, H.248, H.450, HTTP, IAX2, ICQ, IEEE 802.11, IEEE 802.3
Slow Protocols, IP, iSCSI, ISUP, Juniper, JXTA, Kerberos, L2TP, LDAP, MIP,
MPLS, NDMP, NSIP, NTP, OSPF, OXID, PostgreSQL, RADIUS, RDT, Redback, RMCP,
RTP, RTSP, SCSI, SCTP, SDP, SPNEGO, SSL, STUN, TCAP, TCP, TZSP
New and updated capture file support:
=====================================
DBS Etherwatch, Lucent/Ascend, Nettl, Tcpdump (Redback)
How ugly: a hypot(near0, near0) can result in a NaN if round-off error
somehow makes the a^2+b^2 result negative. Work around it with an
"#ifdef __INTERIX"-only fix.
but disable this if the package name in the pkg-vulnerabilities file contains
a meta-character. This speeds up the check-vulnerable target from:
[9:28:06] agc@sys3 ...pkgsrc/misc/libutf 11 > time make check-vulnerable
1.821u 1.988s 0:02.57 147.8% 0+0k 0+0io 0pf+0w
[9:28:17] agc@sys3 ...pkgsrc/misc/libutf 12 >
to
[9:28:27] agc@sys3 ...pkgsrc/misc/libutf 13 > time make check-vulnerable
0.273u 0.233s 0:00.33 151.5% 0+0k 0+0io 0pf+0w
[9:28:30] agc@sys3 ...pkgsrc/misc/libutf 14 >
(with caches filled, on a fairly fast machine - P4 2.8 GHz, 2GB RAM).
the freeze for the bug fixes, which are:
-Fixed string realocation bug in ezmlm-manage. Thanks Tom Moertel.
-Tweaked the subscriber log search subject to differentiate it from the
complete subscriber log.
and ${CFLAGS}. This fixes the build of net/djbdns, as well as any
other of these packages passing down PKG_SYSCONFDIR via CFLAGS, as
well as being more generally correct for arbitrary user-defined
CFLAGS. Suggested by jlam.
For consistency across djbware in pkgsrc:
* In math/djbfft's and sysutils/daemontools's do-configure targets,
remove leading @ from ${ECHO} lines; from the former, also remove
unneeded single quotes from one such line.
* Rename net/publicfile's pre-build and sysutils/service-config's
post-patch targets to do-configure.
* In sysutils/checkpassword's do-configure target, reorder creation
of conf-cc, conf-ld, and conf-home.
All of the affected packages have been verified to compile.
XXX These packages probably have enough build goo in common to
XXX warrant an mk/djbware.mk. I'll investigate this post-freeze.
Includes the following changes from sylpheed:
v1.0.3:
* A buffer overflow which occurred when replying to a message with
certain headers which contain non-ascii characters was fixed.
* A memory leak of the composition window was fixed.
v1.0.2:
* The incompatibility of PGP signature between gnupg-1.2 and 1.4
which occurred when trailing spaces appeared was fixed.
* The generation of References header was modified so that it is
generated even if a replied message doesn't have Message-Id.
* The documents were update
Also includes sylpheed-claws changes:
Updated translations: Brazilian Portuguese,
French, German, Italian, Serbian, Simplified
Chinese, Slovak and Spanish.
Bug fixes, including the following:
o bug 698 'Clicking OK without username
'crashes' account edit window'
o fix occasional late segfaults when quitting
o use quoted-printable instead of 7bit or 8bit to
encode "^From " and avoid mail corruption
on the MTA, as specified by RFC 3156
o fix signing/encrypting still on after privacy
system has been disabled
o fix mimeinfo memory leaks
o don't automatically send out return receipts
if offline
o don't use SIZE parameter in MAIL FROM: if
server doesn't support it
For further details of the numbered bugs listed above consult
www.thewildbeast.co.uk/sylpheed-claws/bugzilla/index.cgi
on some systems, e.g. solaris, will simply drop long lines. These longs
lines are found in the flattened up and down dependency lists in the bulk
cache files. Instead, use sed to deal with this.
Fixes problems noted in Solaris bulk builds. Patch tested on NetBSD-2.0
and Solaris-2.9
- works per the specification and
- works on LP64 machines as well as ILP32 machines.
Designed to work anywhere where sizeof(L) >= sizeof(P).
Cannot use %p, as we want to feed back the patch to the SR people,
who maintain SR also on some very old systems.
package, since the end of 2003. Furthermore, its functionality was
integrated in GNOME 2.6, which makes this package obsolete.
Ok'ed by maintainer, minskim@.
While here, pull in a patch from CVS (which already is in 0.8.8) to make
tunesbrowser be able to play aac files. Bump PKGREVISION to 2.
Closes PR pkg/29653 by Antoine Reilles.
