changes since 0.11:
0.12 Mon Oct 18 05:22:54 PM 2004
- 0.80 came out today. Updated code to work with the new
version, this however breaks backwards compatibility.
- Updated tests for all the changes.
0.12 Thu Aug 12 02:12:55 PM 2004
- Fixed an issue in Makefile.PL which was causing problems
with Solaris make implementation thanks to
Mike Brudenell <pmb1 [] york * ac * uk>.
- Added taint checking to scan(). It now croaks if
a file path passed in is tainted. This only happens
under -T. Reported by
Mark Martinec <Mark * Martinec [] ijs * si>
- Added "+" overload for the status object. Also reported
by Mark Martinec <Mark * Martinec [] ijs * si>
- Added tests for the above changes.
4.11.0
------
HTTP CONNECT method is now supported. This means that if this feature is
enabled on your HTTP proxy server, you can use it to connect to your
favourite IM servers. You can also specify a user/pass pair if your
proxy requires authentification.
Applied a patch by Alexander Kanevskiy that fixed a weird behaviour of
the LJ import friend option in the accounts dialog.
In the multi-contact selection window not all contacts were shown unless
arranging users into groups was on in the configuration dialog.
GG used to disconnect when setting its status to N/A. Fixed that.
When LJ import friends feature was off deleting LJ friends from the list
was reflected server-side. Not it happens only if LJ friend
synchronization is on.
Now centericq only saves postponed messages if they contain at least one
character other than space, tab or a line-feed.
Centericq used to hang right at the start on some machines. Fixed that.
Sending Cyrillic letters over Yahoo! seems to be fixed now.
Centericq now sets its own title text in xterm and screen. The aim of
the messages in the title is to inform the user upon events receiving
and such.
Applied a patch by shaky that introduced status modes with descriptions
into GG.
RSS feed contact-list items now support specifying of login and password
for basic HTTP authorization.
The AOL TOC firetalk library was updated. Some major bugs were fixed by
this update. Cheers.
Jabber registration got broken in the previous version because of the
Jabber non-blocking connection patch. It has been fixed by the patch
author in this version :)
4.12.0
------
Fixed an MSN group management problem. Libmsn din't send a space character,
so group operations had no effect or led to disconnects.
With no SSL library found during the build the source failed to compile.
Fixed that.
Jabber server messages used to come from a nick that was similar to
the server name with an "@" sign at the end. That was unnecesary, so it's
not added anymore.
Added the --no-xtitles (-T) commmand line parameter, which disables
changing window titles in xterm and screen.
In LJ, if the whole friends name list grew more than 512, the LJ contact
got garbled. Fixed that. Now there musn't be any lenght limitation for the
records of info files.
The configure script now checks if libcurl has SSL support enabled in
order to avoid MSN malfunctions. It requires libcurl with SSL, so just
provide the MSN module with it if you want to use it.
A GNOME URL handler for web-published ical calendar files, which integrates
with the Evolution groupware suite. It allows you to subscribe to a published
calendar simply by clicking on a 'webcal:' URL.
at startup due to problems when calling sigaction(2). During the build,
there was a hidden warning:
server.o(.text+0x109): In function `main':
/home/jmmv/NetBSD/pkgsrc/mail/evolution-data-server/work/evolution-data-server-1.0.2/src/server.c:129: warning: reference to compatibility sigemptyset(); include <signal.h> for correct reference
that was actually referring to a fatal error at runtime.
This fixes lots of problems in Evolution 2.0, where the address book and
the calendar were not working at all. Probably fixes more errors in this
and other programs.
Bump PKGREVISION to 1.
testing, and using exploit code. This release includes 18 exploits and 27
payloads; many of these exploits are either the only ones publicly available
or just much more reliable than anything else out there. The Framework will
run on any modern system that has a working Perl interpreter, the Windows
installer includes a slimmed-down version of the Cygwin environment.
convenient classes for writing small assembly programs. Only that instead of
having to remember confusing assembly mnemonics and requiring the developer
to remember how to use complex tools like assemblers and linkers, everything
is done the easy way: in Python. InlineEgg is oriented - but not limited -
to developing shellcode (sometimes called eggs) for use in exploits.
But it is needed to build.
So use BUILD_DEPENDS instead of DEPENDS.
(This is the way the xorg-fonts* packages do it.)
Also bump PKGREVISIONs for these.
(Okayed by maintainer, Juan RP.)
the name) renders the checksum invalid (even though the material
contents of the tarball are unchanged).
Luckily, we can switch from the .tar.bz2 distribution to the .tar.gz
one. It's a little larger, but it get around this problem. We will
switch back to the .tar.bz2 one once 4.73 is released, which ought to
happen in a few weeks.
Changes:
- Fixed problem when filtering the last of a list of EHLO responses
- Send NOOPs to the server when receiving data slowly from client
to prevent timeouts on the server side.
- Made the log line always keep the status, rather than dropping of
the end in the case of many recipeints.
Changes:
- Implemented a huge OS fingerprint database update. The number of
signatures have increased more than 20% to 1,353 and many of the
existing ones are much improved. Notable updates include the fourth
edition of Bell Lab's Plan9, Grandstream's BugeTone 101 IP Phone,
and Bart's Network Boot Disk 2.7 (which runs MS-DOS). Oh, and Linux
kernels up to 2.6.8, dozens of new Windows fingerprints including XP
SP2, the latest Longhorn warez, and many modified Xboxes, OpenBSD
3.6, NetBSD up to 2.0RC4, Apple's AirPort Express WAP and OS X 10.3.3
(Panther) release, Novell Netware 6.5, FreeBSD 5.3-BETA, a bunch of
Linksys and D-Link consumer junk, the latest Cisco IOS 12.2
releases, a ton of miscellaneous broadband routers and printers, and
much more.
- Updated nmap-mac-prefixes with the latest OUIs from the IEEE.
[ http://standards.ieee.org/regauth/oui/oui.txt ]
- Updated nmap-protocols with the latest IP protocols from IANA
[ http://www.iana.org/assignments/protocol-numbers ]
- Added a few new Nmap version detection signatures thanks to a patch
from Martin Maèok (martin.macok(a)underground.cz).
- Fixed a crash problem in the Windows version of Nmap, thanks to a
patch from Ganga Bhavani GBhavani(a)everdreamcorp.com).
- Fixed Windows service scan crashes that occur with the error message
"Unexpected nsock_loop error. Error code 10022 (Unknown error)". It
turns out that Windows does not allow select() calls with all three
FD sets empty. Lame. The Linux select() man page even suggests
calling "select with all three sets empty, n zero, and a non-null
timeout as a fairly portable way to sleep with subsecond precision."
Thanks to Gisle Vanem (giva(a)bgnett.no) for debugging help.
- Added --max_scan_delay parameter. Nmap will sometimes increase the
delay itself when it detects many dropped packets. For example,
Solaris systems tend to respond with only one ICMP port unreachable
packet per second during a UDP scan. So Nmap will try to detect
this and lower its rate of UDP probes to one per second. This can
provide more accurate results while reducing network congestion, but
it can slow the scans down substantially. By default (with no -T
options specified), Nmap allows this delay to grow to one second per
probe. This option allows you to set a lower or higher maximum.
The -T4 and -T5 scan modes now limit the maximum scan delay for TCP
scans to 10 and 5 ms, respectively.
- Fixed a bug that prevented RPC scan (-sR) from working for UDP ports
unless service detection (-sV) was used. -sV is still usually a
better approach than -sR, as the latter ONLY handles RPC. Thanks to
Stephen Bishop (sbishop(a)idsec.co.uk) for reporting the problem and
sending a patch.
- Fixed nmap_fetchfile() to better find custom versions of data files
such as nmap-services. Note that the implicitly read directory
should be ~/.nmap rather than ~/nmap . So you may have to move any
customized files you now have in ~/nmap . Thanks to nnposter
(nnposter(a)users.sourceforge.net) for reporting the problem and
sending a patch.
- Changed XML output so that the MAC address [address] element comes
right after the IPv4/IPv6 [address] element. Apparently this is
needed to comply with the DTD (
http://www.insecure.org/nmap/data/nmap.dtd ). Thanks to Adam Morgan
(adam.morgan(a)Q1Labs.com) and Florian Ebner
(Florian.Ebner(a)e-bros.de) for the problem reports.
- Fixed an error in the Nmap RPM spec file reported by Pascal Trouvin
(pascal.trouvin(a)wanadoo.fr)
- Fixed a timing problem in which a specified large --send_delay would
sometimes be reduced to 1 second during a scan. Thanks to Martin
Macok (martin.macok(a)underground.cz) for reporting the problem.
- Fixed a timing problem with sneaky and paranoid modes (-T1 and -T0)
which would cause Nmap to continually scan the same port and never
hit other ports when scanning certain firewalled hosts. Thanks to
Curtis Doty (Curtis(a)GreenKey.net) for reporting the problem.
- Fixed a bug in the build system that caused most Nmap subdirectories
to be configured twice. Changing the variable holding the name of
subdirs from $subdirs to $nmap_cfg_subdirs resolved the problem --
configure must have been using that variable name for its own internal
operations. Anyway, this should reduce compile time significantly.
- Made a trivial change to nsock/src/nsock_event.c to work around a "a
bug in GCC 3.3.1 on FreeBSD/sparc64". I found the patch by digging
around the FreeBSD ports tree repository. It would be nice if the
FreeBSD Nmap port maintainers would report such things to me, rather
than fixing it in their own Nmap tree and then applying the patch to
every future version. On the other hand, they deserve some sort of
"most up-to-date" award. I stuck Nmap 3.71-PRE1 in the dist
directory for a few people to test, and made no announcement or
direct link. The FreeBSD crew found it and upgraded anyway :). The
gcc-workaround patch was apparently submitted to the FreeBSD folks
by Marius Strobl (marius(a)alchemy.franken.de).
- Fixed (I hope) an OS detection timing issue which would in some
cases lead to the warning that "insufficient responses for TCP
sequencing (3), OS detection may be less accurate." Thanks to Adam
Kerrison (adam(a)tideway.com) for reporting the problem.
- Modified the warning given when files such as nmap-services exist in
both the compiled in NMAPDATADIR and the current working directory.
That message should now only appear once and is more clear.
- Fixed ping scan subsystem to work a little bit better when
--scan_delay (or some of the slower -T templates which include a scan
delay) is specified. Thanks to Shahid Khan (khan(a)asia.apple.com)
for suggestions.
- Taught connect() scan to properly interpret ICMP protocol
unreachable messages. Thanks to Alan Bishoff
(abishoff(a)arc.nasa.gov) for the report.
- Improved the nmapfe.desktop file to better comply with standards.
Thanks to Stephane Loeuillet (stephane.loeuillet(a)tiscali.fr) for
sending the patch.
encoder. Provided by Leonard Schmidt in PR#27269 and PR#27290.
rip is a wrapper for rippers and encoders which provides a common
interface for ripping any CD audio track and encoding it into
MP3, Ogg Vorbis, or FLAC. Manual and CDDB based renaming schemes
are available for naming and tagging your ripped tracks.
are static, so libtool will refuse to create a working module.
Instead, link those libraries into the transcode binary itself (libvout was
already being so linked) and remove them from the module link arguments.
