2009/02/24: version 3.0.0 = tag release-3-0-0
6754: Fix local file access bug in internal http server
- this is an urgent security related bug-fix and effects
all MLDonkey versions >= 2.8.4
6752: Optimized implementation of the ip_set module (cbah)
6736: Add/fix some copyright texts
- Drop maintainership
- Fix a reference to /usr/pkg that was committed by accident in a file
[hi joerg!]
- Remove MESSAGE because it's about NetBSD 1.6 and older
- Add USE_DESTDIR support
1.3.0: released 2005-08-03
- disable Van Jacobson compression by default [Pokrywka]
- prototype packet buffering and reordering [Cameron/Anonymous]
- comply with RFC2637 on echo wait and idle wait parameters [Brox]
- new pptpd-logwtmp-strip-domain option [Cameron]
- defer writes to pty until pppd has set it up properly [Cameron]
- process initial packet length header properly [Beregszaszi]
- ignore ENETDOWN and ENXIO on sendto in bcrelay [Cameron]
- add section on debugging to pptpd.8 [Mueller]
1.2.3: released 2005-02-17
- error check critical dup2 calls [Cameron]
- performance, use writev() if available, avoiding memcpy() [Sundberg]
- compilation fix for gcc old versions [Cameron]
1.2.2: released 2005-01-05
- fix deadlock hang due to syslog(3) called by signal handler [Cameron]
- turn off logging to stderr, to prevent loopback [Hall]
* From schedctl(8) of NetBSD-5-RC2, setting of priority for the process running
at SCHED_OTHER policy is not allowed, so change to skip if SCHED_OTHER is specified.
* Use sched_get_priority_min() instead of hard coded DEFAULT_SCHED_PARAM (= 0).
* Ajust return code as the "Returns:" section in this function's comment.
sched_setscheduler(3) return the previous policy if succeed, it may not be 0.
Bump PKGREVISION.
9.9.1 [STABLE] 2009/01/22 fixes and M17N extension
9.9.0 [STABLE] 2008/11/24 stable version
9.9.0 CAPSKEY and HTMUX
9.8.6 restriction (MITM, VSAP) and fixes (SSL, CFI, HTTP cache)
9.8.2 name based reverse proxy and NAT based transparent proxy
9.8.2 porting to Windows Mobile/CE, SSH/Telnet gateway
9.8.1 minor fixes and mail routing to MX
9.8.0 clustering of origin/proxy servers, SSL Server Name Indication
Hopefully this fixes PR pkg/40441 as well.
- Add USE_DESTDIR support
- Silence a pkglint warning
- Drop maintainership
Changes:
* cleanup: #ifdefed dump_a_txt() properly so it will not be compiled
if --disable-master-dump was specified.
* implement "base template" ($=) feature.
* portability and readability fixes from Victor Duchovni
* added configure test for inline and __inline keywords, and only
use #warning keyword if __GNUC__ is defined (more portability fixes
from Victor Duchovni)
* misc type conversions here and there, and change alignment in
mempool.c to be sizeof(void*) instead of sizeof(int), to help
64bit platforms. Thanks to Mike Quintero for an excellent
bugreport.
* bugfix: combined dataset - improper return of query() routine in some
cases
* internal code reorg:
- move firstword[_lc]() to _util.c
- use two structs instead of a set of 2-element arrays in dnset
* bugfix: lowercase base zone names given on command line and in `combined'
dataset, or else they wont be recognized in queries
- Drop maintainership
- Use an option group for libnet version
- Add USE_DESTDIR support
v1.23 Feb 23 2008
- fixed remotely triggerable NULL dereference in ip_fragment.c
- fix DLT_PRISM_HEADER linkoffset calculation
- check for DATA_FRAME_IS_QOS in wireless frames
- free queued tcp segments with too old seq
v1.22 Jul 22 2007
- in TCP stream, the byte with absolute offset 0 was treated as urgent data;
fixed
- DLT_IEEE802_11_RADIO handling
- added a few missing checks for failed malloc
v1.21 May 10 2006
- more externals to access libnids' intrinsics from the outside
- nids_unregister_*()
- UDP checksumming fix (0 is not an error according to RFC768)
- nids_params.tcp_workarounds
- nids_params.multiproc and queue_limit: merged a patch which creates a
separate thread for packet capture;
- in killtcp.c, send two more RST packets (required because of MS05-019
patch)
- glibc 2.4 syslog.h disaster workaround
Adds support for Signature Version 2 for increased security with EC2, SQS, SDB
Add support for Regions in EC2
Fixes Issue 172, Issue 178, Issue 180, Issue 181, Issue 182
Fixes issue 165, issue 172, issue 173, issue 174, issue 176, issue 177
Adds initial support for CloudFront (ahem) service
Fixes stupid and dangerous copy/paste error in SDB support.
Support for EBS, QueryWithAttributes, lots of bugfixes.
--- 3.0.44 2009/02/17
List supported encodings in man page for yaz-iconv.
Fixed missing SSL libs for --libs output
Re-established OID record syntax application-xml. Nobody should use it
but we don't want to change soname because of this symbol being absent.
**** 0.65 January 26, 2009
Fix rt.cpan.org #41076
When the AAAA object was constructed with new_from_hash with an
address containing the "::" shorthand notation normalization was
not done properly.
Fix rt.cpan.org #42375
Typo in Win32.pm Registry root.
**** 0.64 December 30, 2008
Feature rt.cpan.org #36656
Added support for the APL record (RFC 3123)
The module consists of a list of Address Prefix Item objects
as defined in the Net::DNS::RR::APL::ApItem class.
NOTE: Class and its interface may be subject to change.
Fix rt.cpan.org #11931 Wrong nameserver list handling in
Net::DNS::Resolver::Win32
The init method has been rewritten to be based on WIN32::IPhelper for
the selection of the domain and the IP addresses. This is believed to
be more portable than trying to fetch the data from the registry.
We still trying to get the searchlist from the registry.
WARNING: If you use Perl under WIN32 (eg ActivePerl or Strawberry Perl)
then your module dependency graph has changed drastically
Fix IPv6 modules
When IO::Socket::INET6 was available but Socket6 was not the code would
recurse to infinity.
Fix rt.cpan.org #21757 and Feature: Connectivity during test
Addition of --no-IPv6-tests and --IPv6-tests option in Makefile.PL.
Note: This causes two questions to be asked when building the
Makefile instead of one.
Besides the test suites are constructed so that all the connectivity testing
happen in 001-connectivity.t and inavailability of connectivity over a certain
transport is signalled over files t/online.disabled and t/IPv6.disabled respectivly.
Both files are removed by t/99-cleanup
Fix rt.cpan.org #34511
Priming query logic contained unneeded recursion.
Now also fals back to hardcoded hints if there are no nameservers whatsoever.
Fix rt.cpan.org #38390 and 37089
Added CD and AD bit control to the resolver.
The CD flag defaults to being unset and the AD flags is set by default
whenever DNSSEC is available.
Both flags default to unset in absence of DNSSEC.
Fix rt.cpan.org #37282
Improved error reporting during client disconnect from the nameserver
NOTE rt.cpan.org # 40249
Release 0.62 introduced a feature to parse data inside a packet only
when needed. This can the following to happen:
Eception: corrupt or incomplete data at
/usr/lib/perl5/Net/DNS/RR.pm line 510.
caught at -e line 1
This may happen when you have undefined your packet data before all the
sections have been fully parsed. Such as in:
$packet = Net::DNS::Packet->new(\$data);
undef($data);
The workaround is to force parcing by calling the methods that
parse the data. e.g.
$packet = Net::DNS::Packet->new(\$data);
$packet->answer; $packet->additional; $packet->authority;
undef ($data)
Fix rt.cpan.org # 41076 and # 41071
Net::DNS::RR->new_from_hash function would not normalize the content
of the data so that a method getting a string representation would
get inconsistent results depending on whether a RR was created from
a string of from a hash.
Fix rt.cpan.org # 41296
Compression buggy for large packets. Fix by Kim Minh.
Fix rt.cpan.org # 35752
Perl 5.10.0 gave a number of issues on several platforms, prefering
XSLoader over Dynaloader seemed to fix those.
Bug rt.cpan.org #34510
Buggy setting of "Recursion too deep, aborted" corrected.
Feature (rt.cpan.org #39284)
The ReplyHandler now also receives a variable with an annonymous has with the connection details. Variables
supplied to the Reply handler are: $qname, $qclass, $qtype, $peerhost, $query, $conn
The hash referenced by $conn contains the following buckets: sockhost, sockport, peerhost, and peerport.
Feature t/08-online.t and t/10-recurse.t
In particular environments a query for a.t. will resolve and or
middleboxes will replace DNS packet content for queries to the root.
A bunch of test is skipped when this (broken) environment is
detected.
Feature/Bug rt.cpan.org #22019
The initial fix for rt 22019 was to strip a trailing dot from all
attributes that where povided as argument for the
Net::DNS::RR::new_from_hash function. We have introduced
Net::DNS::stripdot, a function that will strip the dots of domain
names, taking into account possible escapes (e.g. labels like
foo\\\..). As a side effect the new_from_string method will now
convert possible spaces that are not trapped by some of the
new_from_string functions and convert them to \032 escapes.
For information: The internal storage of domain names is using
presentation format without trailing dots.
Bug
@EXPORT and @EXPORT_OK moved to a BEGIN block so that Net::DNS::SEC
can make use of exported functions
Feature/Bug
The Notify handler introduced in 0.63 did not set the OPCODE on the
reply appropriately. This has been solved generically by allowing the
"Headermask" that is returned as 4th element by the reply or notify
handler in the nameserver also allows for the opcode to be set.
e.g. as in return ("NXDOMAIN",[],[],[],{ opcode => "NS_NOTIFY_OP" }
);
Pkgsrc changes:
o Add new required dependencies
Upstream changes:
0.50 Wed Jan 21 10:42:00 GMT 2009
- add support for an expires header when putting an object to
Net::Amazon::S3::Client::Object
- make all the classes immutable
- add query_string_authentication_uri() to
Net::Amazon::S3::Client::Object, suggested by Meng Wong
0.49 Tue Jan 13 09:04:42 GMT 2009
- add support for listing a bucket with a prefix to
Net::Amazon::S3::Client::Bucket
feature 2.1 release. It could make netatalk1 package obsolete.
* Use RCD_SCRIPTS instead of substituting a Makefile to be fix pkglint
errors.
* Move PKG_OPTION part to options.mk
* From patch-aa, remove last change which made by
configure/gnu-configure.mk.
* Change content of MESSAGE from covered by pkginstall framework to
caution about migration from netatalk 1.x.
Approved by MAINTAINER and PKGREVISION.
--- 3.0.42 2009/02/02
YAZ' RPM spec works for both SUSE Linux Enterprise and RedHat Fedora.
Added member named_result_sets for init handler struct for the GFS. This
allows a server to disable named result sets.
Removed OID record syntax application-xml.
Added support for rule-based transliterator for ICU wrapper of YAZ.
Fixed bug #1902: yaz-icu XML output.
Make YAZ checks Emacs friendly.
BITSTRING value shows value. Bug #2346.
ISO2709 decoding: skip control characters from indicator data.
Omit sort key by default in yaz-icu's output.
Allow combined single char options (again) for YAZ' options function.
Utility yaz-marcdump got option to display YAZ version (-V).
Allow YAZ to use ICU 3.4.
Added new ICU test case which illustrates removal of diacritics.
Version 2.1.6
(February 19, 2009)
User-visible changes:
* Renamed the following options
- --noproxy => --no-proxy
- --noextract => --no-extract
- --nologin => --no-login
* Butchered --help output
- much less verbose now
- relocated manual page data to clive.pod
* Removed --manual option
* Obsoleted "play" and "rencode" config keys in "commands" section
* Added --exec option which resembles cclive's --exec command
* Removed --play, --noplay, --rencode and --norencode options
- use --exec instead
* Changed --paste short option from '-x' to '-p'
* Removed wmv format (breakcom)
- persistant HTTP/404 (not found) error
Version 2.1.5
(February 6, 2009)
User-visible changes:
* Fixed sevenload support
Version 2.1.4
(February 1, 2009)
User-visible changes:
* Fixed Youtube login which sometimes reported failed attempts as OK
- Youtube defaults web interface language based on users ip
- clive looks for English words in the post-login page to confirm login
* Tweaked --version output
- At least Ubuntu 8.1 sets __attribute__((warn_unused_result)) on fwrite()
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=25509
which means (void)fwrite(...) will *always* generate a warning, so
set -Wno-error to bypass this in Linux.sys.mk
- Ubuntu 8.1 also jumps through hoops to ensure ARG_MAX is *undefined*, so
work around this in tnftp and libnbcompat
Patch provided by Christian Sturm and back to maintainer.
Changes in version 0.2.0.34 - 2009-02-08
o Security fixes:
- Fix an infinite-loop bug on handling corrupt votes under certain
circumstances. Bugfix on 0.2.0.8-alpha.
- Fix a temporary DoS vulnerability that could be performed by
a directory mirror. Bugfix on 0.2.0.9-alpha; reported by lark.
- Avoid a potential crash on exit nodes when processing malformed
input. Remote DoS opportunity. Bugfix on 0.2.0.33.
- Do not accept incomplete ipv4 addresses (like 192.168.0) as valid.
Spec conformance issue. Bugfix on Tor 0.0.2pre27.
o Minor bugfixes:
- Fix compilation on systems where time_t is a 64-bit integer.
Patch from Matthias Drochner.
- Don't consider expiring already-closed client connections. Fixes
bug 893. Bugfix on 0.0.2pre20.
Changes between 1.0.5 and 1.0.6.:
- The following vulnerabilities have been fixed:
* On non-Windows systems, Wireshark could crash if the HOME environment
variable contained sprintf-style string formatting characters.
* Wireshark could crash while reading a malformed NetScreen snoop file.
* Wireshark could crash while reading a Tektronix K12 text capture file.
- The following bugs have been fixed:
* Crash when loading capture file and Preferences: NO Info column
* Some Lua scripts may lead to corruption via out of bounds stack
* Build with GLib 1.2 fails with error: 'G_MININT32' undeclared
* Wrong decoding IMSI with GSM MAP protocol
* Segmentation fault for "Follow TCP stream" (Bug 3119)
* SMPP optional parameter 'network_error_code' incorrectly decoded
* DHCPv6 dissector doesn't handle malformed FQDN
* WCCP overrides CFLOW as decoded protocol (Bug 3175)
* Improper decoding of MPLS echo reply IPv4 Interface and Label Stack Object
* ANSI MAP fix for TRN digits/SMS and OTA subdissection (Bug 3214)
- Updated Protocol Support
* AFS, ATM, DHCPv6, DIS, E.212, RTP, UDP, USB, WCCP, WPS
- New and Updated Capture File Support
* NetScreen snoop
Changes between version 1.0.4 and 1.0.5:
- The following vulnerabilities have been fixed. See the security advisory
for details and a workaround.
* The SMTP dissector could consume excessive amounts of CPU and memory.
* The WLCCP dissector could go into an infinte loop.
- The following bugs have been fixed:
* Missing CRLF during HTTP POST in the "packet details" window
* Memory assertion in time_secs_to_str_buf() when compiled with GCC 4.2.3
* Diameter dissector fails RFC 4005 compliance
* LDP vendor private TLV type is not correctly shown
* Wireshark on MacOS does not run when there are spaces in its path
* Compilation broke when compiling without zlib
* Memory leak: saved_repoid
* Memory leak: follow_info
* Memory leak: follow_info
* Memory leak: tacplus_data
* Memory leak: col_arrows
* Memory leak: col_arrows
* Incorrect address structure assigned for find_conversation() in WSP
* Memory leak with unistim in voip_calls
* Error parsing the BSSGP protocol
* Assertion thrown in fvalue_get_uinteger when decoding TIPC
* LUA script : Wireshark crashes after closing and opening again a window
used by a listener.draw() function.
- Updated Protocol Support
* ANSI MAP, BSSGP, CIP, Diameter, ENIP, GIOP, H.263, H.264, HTTP, MPEG PES
* PostgreSQL, PPI, PTP, Rsync, RTP, SMTP, SNMP, STANAG 5066, TACACS, TIPC
* WLCCP, WSP
The package update was provided by Matthias Drochner in private e-mail.
* replace hard coded user and mode for hping-suid option with SPECIAL_PERMS.
* replace remaining of hard coded "man" with ${PKGMANDIR}.
* add DESTDIR support.
* merge patch-a{e,g}, both for same file.
* patch to replace __sun__ with __sun for portability, pkglint(1) said.
* also regen other patches with mkpatches(1).
- restart system calls for SIGINFO, will do the status update on the
next return
- handle FETCH_TIMEOUT like SIGALRM, and don't print errors about
writing the output file
- explicitly check for -1 as return from fetchIO_read.
Add support for conditional GET using the 'i' flag. Inspired by
the HTTP support for the same feature in FreeBSD by Murray Stokely, but
mostly rewritten and extended to work for all protocols.
approved by both MAINTAINERs,
+minor cosmetics and a time_t printf format fix on NetBSD-current
(tested against a Cisco VPN 3000 Concentrator with psk)
Upstream changes:
4.024 Mon Jan 26 00:27:32 PST 2009
documentation update
4.023 Fri Jan 16 14:30:40 PST 2009
added the capability to set the CASE of ipV6 text return
values to either upper or lower. Thanks to
Rob Riepel <riepel@networking.Stanford.EDU> for developing
this improvement and providing a comprehensive patch
Collection.
The Perl 5 module Cisco::Abbrev converts between Cisco canonical
interface names (i.e. GigabitEthernet0/1) and the abbreviated forms
often output by their devices (i.e. Gi0/1).
Collection.
The Perl 5 module Net::CIDR::Set represents sets of IP addresses
and allows standard set operations (union, intersection, membership
test etc) to be performed on them. In spite of the name it can
work with sets consisting of arbitrary ranges of IP addresses - not
just CIDR blocks. Both IPv4 and IPv6 addresses are handled - but
they may not be mixed in the same set.
Bug Fixes:
- Initialize xattr data in a couple spots in the hlink code, which avoids a
crash when the xattr pointer's memory happens to start out non-zero.
Also fixed the itemizing of an alt-dest file's xattrs when hard-linking.
- Don't send a bogus "-" option to an older server if there were no short
options specified.
- Fixed skipping of unneeded updates in a batch file when incremental
recursion is active. Added a test for this. Made batch-mode handle
"redo" files properly (and without hanging).
- Fix the %P logfile escape when the daemon logs from inside a chroot.
- Fixed the use of -s (--protect-args) when used with a remote source or
destination that had an empty path (e.g. "host:"). Also fixed a problem
when -s was used when accessing a daemon via a remote-shell.
- Fixed the use of a dot-dir path (e.g. foo/./bar) inside a --files-from
file when the root of the transfer isn't the current directory.
- Fixed a bug with "-K --delete" removing symlinks to directories when
incremental recursion is active.
- Fixed a hard to trigger hang when using --remove-source-files.
- Got rid of an annoying delay when accessing a daemon via a remote-shell.
- Properly ignore (superfluous) source args on a --read-batch command.
- Improved the manpage's description of the '*' wildcard to remove the
confusing "non-empty" qualifier.
- Fixed reverse lookups in the compatibility-library version of
getnameinfo().
- Fixed a bug when using --sparse on a sparse file that has over 2GB of
consecutive sparse data.
- Avoid a hang when using at least 3 --verbose options on a transfer with a
client sender (which includes local copying).
- Fixed a problem with --delete-delay reporting an error when it was ready
to remove a directory that was now gone.
- Got rid of a bunch of "warn_unused_result" compiler warnings.
- If an ftruncate() on a received file fails, it now causes a partial-
transfer warning.
- Allow a path with a leading "//" to be preserved (CYGWIN only).
Enhancements:
- Made the support/atomic-rsync script able to perform a fully atomic
update of the copied hierarchy when the destination is setup using a
particular symlink idiom.
2009/01/20: version 2.9.7 = tag release-2-9-7
6727: Web_infos: Replace old GeoIP URL with new one
- old code added the new URL, even if GeoIP was not present in web_infos
2009/01/04
6714: BT: Fix bug when computing limits for max_bt_uploaders
6713: GeoIP: New web_infos URL for country list (thx to Choby)
- old URLs are updated to:
http://www.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz
2008/12/13
6689: Allow compilation with Ocaml 3.11.0
2008/09/01
6629: Mail: Move hostname from subject to body (eydaimon)
Updated Mozilla protocol handler to version 2.5
- original source from http://www.informatik.uni-oldenburg.de/~dyna/mldonkey
6628: IP discover: Use http://whatismyip.org, old URL is not working anymore
ProxyTunnel is a program that connects stdin and stdout to a server
somewhere on the network, through a standard HTTPS proxy. We mostly use it
to tunnel SSH sessions through HTTP(S) proxies, allowing us to do many
things that wouldn't be possible without ProxyTunnel.
Provide an option knob for building against dbus.
New features in 0.6.7
* added support for Wi-Fi Protected Setup (WPS)
* added support for EAP-AKA
* added support for using driver_test over UDP socket
* updated management frame protection to use IEEE 802.11w/D7.0
(There are some unclean typecasts in the code, but the cases I've
seen are harmless -- as long as poll intervals, cert lifetimes etc
don't reach into y2037 which would be problematic in any case.)
Unworkable is a BSD-licensed BitTorrent implementation written by
Niall O'Higgins <niallo@p2presearch.com>. Goals of this project
include efficiency, simplicity and high code quality.
Unworkable is single threaded and asynchronous, written in portable
ANSI C using libevent and mmap() for performance.
Changelog:
* A huge number of bug fixes, including a security relavant one (CVE-2008-5081,
low risk)
* Add two new configuration directives "allow-interfaces" and "deny-interfaces"
which can be used to make Avahi ignore certain network interfaces or only use
certain network interfaces.
* A lot of translation updates
Fix PR pkg/40281, by defining _DARWIN_C_SOURCE under darwin
Changes in libsoup from 2.24.2.1 to 2.24.3:
* Fixed SoupCookieJar to not send "Cookie: (null)", which is
(a) wrong, and (b) confusing to some servers.
[bugs.webkit.org #23240]
* Fixed soup_form_decode() to correctly handle forms with
URI-encoded parameter names. [#563302, Evan Nemerson]
* Fixed SoupSession to use Digest auth when both Digest and
Basic are available. (It was mistakenly comparing the
strengths backwards before, choosing the weakest-available
auth instead of the strongest.) [#562339, Pontus Oldberg]
* Fixed a bug in the Client How-To docs. [#562411, Andreas
Bruse]
* What's changed ?
==================
- Make sure sound events are played through the correct devices. (#564370)
- Fixed crash on missed call.
- Do not show the assistant after an upgrade for which Ekiga was already successfully setup.
- Added settings migration from Ekiga 2.0.x.
- Allow answering/rejecting calls from the main window even if we use notifications.
- Do not try refreshing SUBSCRIBE requests for which the 200 OK contains an expire time of 0.
- Fixed sending ACK request to incorrect address when particular types of proxies are being used.
- Fixed test for CANCEL receipt on INVITE clearing call.
- Ignore multiple forked CANCEL messages.
- Fixed issue with registration to a non-standard port.
- Fixed restarting timers if get pathological response to a transaction with incorrect Cseq header field.
- Fixed missing route set on SIP commands in a dialog when using outbound proxy.
Pkgsrc changes:
o Adjust dependencies according to new requirements
Upstream changes:
0.48 Thu Dec 4 09:24:23 GMT 2008
- be slightly less strict about bucket names: they can contain uppercase
letters, Amazon just doesn't recommend it (noticed by Simon Elliott,
fixes Brackup)
0.47 Tue Dec 2 08:03:39 GMT 2008
- fix listing with a prefix (spotted by Nobuo Danjou)
0.46 Mon Nov 24 08:53:18 GMT 2008
- refactor request creation into Net::Amazon::S3::Request
and many subclasses
- move to Moose
- add Net::Amazon::S3::Client and subclasses
This module tries to find middle ground between one at a time and
all at once processing of data sets.
The purpose of this module is to avoid the overhead of implementing
an iterative api when this isn't necessary, without breaking forward
compatibility in case that becomes necessary later on.
The API optimizes for when a data set typically fits in memory and
is returned as an array, but the consumer cannot assume that the
data set is bounded.
The API is destructive in order to minimize the chance that resultsets
are leaked due to improper usage.
Upstream changes:
1.36 December 20th 2008
- Add the methodes charset and set_charset to the pureperl fallback ( Boris Zentner )
- Fix: We require CAPI 1.4.5 not 1.4.4 for range_by_ip ( Boris Zentner )
- Add isp_by_addr and org_by_addr to the pureperl fallback ( Boris Zentner )
From www.quagga.net:
Stable release candidate
Most regressions in 0.99 over 0.98 are now believed to be fixed. This
release should be considered a release-candidate for a new stable
series, and we urge any remaining users of 0.98 to test this release
and report any bugs. A blocker meta-bug exists to track critical
regressions.
bgpd: Preliminary UI and Linux-IPv4 support for TCP-MD5 merged
Initial support for TCP-MD5 has been merged. This adds the neighbor
... password command, and some support for setting TCP-MD5 on
pure-IPv4 connections on Linux. On Linux systems with IPv6 available,
passing the -l 0.0.0.0 argument to bgpd may allow TCP-MD5 support to
work. It's not possible at this point to have IPv6 sessions and also
use TCP-MD5 on IPv4 sessions. This will hopefully be rectified in a
future release.
bgpd: Fix double-free crash in bgp_table_finish, seen with rs-client
Though diagnosed with rs-clients, this fix very likely addresses a
number of crashes reported to Quagga bugzilla.
zebra: ignore dead routes in RIB update
This fix may address some issues reported with routes not being
consistent between the zebra RIB and the kernel FIB, remaining after
the fixes in last release.
Solaris: Sync SMF bits with OpenSolaris SFW
The Quagga packaging support for Solaris has been updated to
synchronise with OpenSolaris SFW. Of particular note is that SMF
schema has been updated to match the Sun PSARC approved schema, which
is supported by the OpenSolaris routeadm utility. User's may need to
familiarise themselves with the changed FMRIs, and may need to update
any administrative scripts.
From NEWS:
* Changes in Quagga 0.99.10
- [bgpd] 4-byte AS support added
- [bgpd] MRT format changes to version 2. Those relying on
bgpd MRT table dumps may need to update their tools.
- [bgpd] Added new route-map set statement: "as-path exclude"
- Zebra RIB updates queue has evolved into a multi-level
structure to address RIB consistency issues.
