Commit graph

18342 commits

Author SHA1 Message Date
tron
03ccbec1b5 net/bind914: Fix build under NetBSD-current
This package automatically enabled the "blacklist" option under recent
enough versions of NetBSD. However in NetBSD-current the "blacklist"
library has been replaced by the "blocklist" library which BIND currently
doesn't support. And as result the build failed with the default option
because the "blacklist" could not be found.

Change the option check to only enable this option under NetBSD if the
"blacklist" header file can be found. This fixes the build under
NetBSD-current with the default options.

The correct long term fixed would be:
* Wait for a BIND version which supports "blocklist" instead of "blacklist"
* Add "blocklist" as a package in "pkgsrc" with an appropriate "builtin.mk"
2020-06-30 17:27:06 +00:00
nia
367bb53ed3 wireshark: Use LUA_VERSIONS_ACCEPTED 2020-06-30 15:52:51 +00:00
schmonz
9480415af0 Add sysutils to CATEGORIES to match ucspi-tcp. 2020-06-30 13:33:04 +00:00
schmonz
be12023aa9 Reorder CATEGORIES to mollify pkglint. 2020-06-30 13:32:26 +00:00
adam
86d10657fc rsync: updated to 3.2.1
NEWS for rsync 3.2.1 (22 Jun 2020)

Protocol: 31 (unchanged)

Changes since 3.2.0:

BUG FIXES:

Fixed a potential build issue with the MD5 assembly-language code by removing some non-portable directives.

Use the preprocessor with the asm file to ensure that if the code is unneeded, it doesn't get built.

Avoid the stack getting set to executable when including the asm code.

Some improvements in the SIMD configure testing to try to avoid build issues, such as avoiding a clang++ core dump when ‑g is combined with ‑O2. Note that clang++ is quite buggy in this area, and it does still crash for some folks, so just use ‑‑disable-simd if you need to avoid their buggy compiler (since the configure test is apparently not finding all the compilers that will to crash and burn).

Fixed an issue in the md2man script when building from an alternate dir.

Disable ‑‑atimes on macOS (it apparently just ignores the atime change).

ENHANCEMENTS:

The use of ‑‑backup-dir=STR now implies ‑‑backup.

Added ‑‑zl=NUM as a short-hand for ‑‑compress-level=NUM.

Added ‑‑early-input=FILE option that allows the client to send some data to a daemon's (optional) "early exec" script on its stdin.

Mention atimes in the capabilities list that ‑‑version outputs.

Mention either "default protect-args" or "optional protect-args" in the ‑‑version capabilities depending on how rsync was configured.

Some info on optimizations is now elided from the ‑‑version capabilities since they aren't really user-facing capabilities. You can still see the info (plus the status of a couple extra optimizations) by repeating the ‑‑version option (e.g. ‑VV).

Updated various URLs to be https instead of http.

Some documentation improvements.

PACKAGING RELATED:

If you had to use ‑‑disable-simd for 3.2.0, you might want to try removing that and see if it will succeed or auto-disable. Some buggy clang++ compilers are still not auto disabled, though.

The MD5 asm code is now under its own configure flag (not shared with the SIMD setting), so if you have any issues compiling it, re-run configure with ‑‑disable-asm.

Merged the OLDNEWS.md file into NEWS.md.



NEWS for rsync 3.2.0 (19 Jun 2020)

Protocol: 31 (unchanged)

Changes since 3.1.3:

BUG FIXES:

Avoid a potential out-of-bounds read in daemon mode if argc can be made to become 0.

Fix the default list of skip-compress files for non-daemon transfers.

Fix xattr filter rules losing an 'x' attribute in a non-local transfer.

Avoid an error when a check for a potential fuzzy file happens to reference a directory.

Make the atomic-rsync helper script have a more consistent error-exit.

Make sure that a signal handler's use of exit_cleanup() calls _exit() instead of exit().

Various zlib fixes, including security fixes for CVE-2016-9843, CVE-2016-9842, CVE-2016-9841, and CVE-2016-9840.

Fixed an issue with ‑‑remove-source-files not removing a source symlink when combined with ‑‑copy-links.

Fixed a bug where the daemon would fail to write early fatal error messages to the client, such as refused or unknown command-line options.

Fixed the block-size validation logic when dealing with older protocols.

Some rrsync fixes and enhancements to handle the latest options.

Fixed a problem with the ‑‑link-dest|‑‑copy-dest code when ‑‑xattrs was specified along with multiple alternate-destination directories (it could possibly choose a bad file match while trying to find a better xattr match).

Fixed a couple bugs in the handling of files with the ‑‑sparse option.

Fixed a bug in the writing of the batch.sh file (w/‑‑write-batch) when the source & destination args were not last on the command-line.

Avoid a hang when an overabundance of messages clogs up all the I/O buffers.

Fixed a mismatch in the RSYNC_PID values put into the environment of pre-xfer exec and a post-xfer exec.

Fixed a crash in the ‑‑iconv code.

Fixed a rare crash in the popt_unalias() code.

ENHANCEMENTS:

Various checksum enhancements, including the optional use of openssl's MD4 & MD5 checksum algorithms, some x86-64 optimizations for the rolling checksum, some x86-64 optimizations for the (non-openssl) MD5 checksum, the addition of xxHash checksum support, and a negotiation heuristic that ensures that it is easier to add new checksum algorithms in the future. The environment variable RSYNC_CHECKSUM_LIST can be used to customize the preference order of the negotiation, or use ‑‑checksum-choice (‑‑cc) to force a choice.

Various compression enhancements, including the addition of zstd and lz4 compression algorithms and a negotiation heuristic that picks the best compression option supported by both sides. The environment variable RSYNC_COMPRESS_LIST can be used to customize the preference order of the negotiation, or use ‑‑compress-choice (‑‑zc) to force a choice.

Added a ‑‑debug=NSTR option that outputs details of the new negotiation strings (for checksums and compression). The first level just outputs the result of each negotiation on the client, level 2 outputs the values of the strings that were sent to and received from the server, and level 3 outputs all those values on the server side too (when the server was given the debug option).

The ‑‑debug=OPTS command-line option is no longer auto-forwarded to the remote rsync which allows for the client and server to have different levels of debug specified. This also allows for newer debug options to be specified, such as using ‑‑debug=NSTR to see the negotiated hash result, without having the command fail if the server version is too old to handle that debug item. Use ‑M‑‑debug=OPTS to send the options to the remote side.

Added the ‑‑atimes option based on the long-standing patch (just with some fixes that the patch has been needing).

Added ‑‑open-noatime option to open files using O_NOATIME.

Added the ‑‑write-devices option based on the long-standing patch.

Added openssl & preliminary gnutls support to the rsync-ssl script, which is now installed by default. This was unified with the old stunnel-rsync helper script to simplify packaging. Note that the script accepts the use of ‑‑type=gnutls for gnutls testing, but does not look for gnutls-cli on the path yet. The use of ‑‑type=gnutls will not work right until gnutls-cli no longer drops data.

Rsync was enhanced to set the RSYNC_PORT environment variable when running a daemon-over-rsh script. Its value is the user-specified port number (set via ‑‑port or an rsync:// URL) or 0 if the user didn't override the port.

Added the proxy protocol daemon parameter that allows your rsyncd to know the real remote IP when it is setup behind a proxy.

Added negated matching to the daemon's refuse options setting by using match strings that start with a ! (such as !compress*). This lets you refuse all options except for a particular approved list, for example. It also lets rsync refuse certain options by default (such as write-devices) while allowing the config to override that, as desired.

Added the early exec daemon parameter that runs a script before the transfer parameters are known, allowing some early setup based on module name.

Added status output in response to a signal (via both SIGINFO & SIGVTALRM).

Added ‑‑copy-as=USER option to give some extra security to root-run rsync commands into/from untrusted directories (such as backups and restores).

When resuming the transfer of a file in the ‑‑partial-dir, rsync will now update that partial file in-place instead of creating yet another tmp file copy. This requires both sender & receiver to be at least v3.2.0.

Added support for RSYNC_SHELL & RSYNC_NO_XFER_EXEC environment variables that affect the early, pre-xfer, and post-xfer exec rsync daemon parameters.

Optimize the ‑‑fuzzy ‑‑fuzzy heuristic to avoid the fuzzy directory scan until all other basis-file options are exhausted (such as ‑‑link-dest).

Have the daemon log include the normal-exit sent/received stats when the transfer exited with an error when possible (i.e. if it is the sender).

The daemon now locks its pid file (when configured to use one) so that it will not fail to start when the file exists but no daemon is running.

Various man page improvements, including some html representations (that aren't installed by default).

Made ‑V the short option for ‑‑version and improved its information.

Pass the ‑4 or ‑6 option to the ssh command, making it easier to type than ‑‑rsh='ssh ‑4' (or the ‑6 equivalent).

Added example config for rsyncd SSL proxy configs to rsyncd.conf.

More errors messages now mention if the error is coming from the sender or the receiver.

PACKAGING RELATED:

Add installed binary: /usr/bin/rsync-ssl

Add installed man page: /usr/man/man1/rsync-ssl.1

Tweak auxiliary doc file names, such as: README.md, INSTALL.md, & NEWS.md.

The rsync-ssl script wants to run openssl or stunnel4, so consider adding a dependency for one of those options (though it's probably fine to just let it complain about being unable to find the program and let the user decide if they want to install one or the other).

If you packaged rsync + rsync-ssl + rsync-ssl-daemon as separate packages, the rsync-ssl package is now gone (rsync-ssl should be considered to be mainstream now that Samba requires SSL for its rsync daemon).

Add build dependency for liblz4-dev, libxxhash-dev, libzstd-dev, and libssl-dev. These development libraries will give rsync extra compression algorithms, extra checksum algorithms, and allow use of openssl's crypto lib for (potentially) faster MD4/MD5 checksums.

Add build dependency for g++ or clang++ on x86_64 systems to enable the SIMD checksum optimizations.

Add build dependency for either python3-cmarkcfm or python3-commonmark to allow for patching of man pages or building a git release. This is not required for a release-tar build, since it comes with pre-built man pages. Note that cmarkcfm is faster than commonmark, but they generate the same data. The commonmark dependency is easiest to install since it's native python, and can even be installed via pip3 install ‑‑user commonmark if you want to just install it for the build user.

Remove yodl build dependency (if it was even listed before).

DEVELOPER RELATED:

Silenced some annoying warnings about major() & minor() by improving an autoconf include-file check.

Converted the man pages from yodl to markdown. They are now processed via a simple python3 script using the cmarkgfm or commonmark library. This should make it easier to package rsync, since yodl has gotten obscure.

Improved some configure checks to work better with strict C99 compilers.

Some perl building/packaging scripts were recoded into awk and python3.

Some defines in byteorder.h were changed into static inline functions that will help to ensure that the args don't get evaluated multiple times on "careful alignment" hosts.

Some code typos were fixed (as pointed out by a Fossies run).
2020-06-30 11:56:14 +00:00
jperkin
0fd1f260bb pure-ftpd: SunOS needs _XOPEN_SOURCE=600 for CMSG bits. 2020-06-30 11:10:26 +00:00
nia
339e76d0ce get_iplayer: Update to 3.26
get_iplayer 3.26 Release Notes

Changes in 3.26

     * Restored download of programme credits - broken by BBC changes.

     * Restored channel names to --pid-recursive-list output - broken by BBC
       changes.

     * Restored subtitle colours - broken by BBC changes.

     * Media streams mislabelled as belonging to the defunct BBC Store are no
       longer ignored - a few may contain valid content.

     * Fixed hash initialisation in Pvr class (@praxilian)

     * Added new --cuesheet-offset option (synonym: --tracklist-offset) that
       can be used to apply a positive or negative offset to track times in
       cue sheet or track list. If you find track times off by a consistent
       amount after download, use --cuesheet-only with --cuesheet-offset=<n>
       or --tracklist-only with --tracklist-offset=<n> (where n = offset in
       seconds) to generate a new cue sheet or track list with adjusted track
       times.

     * The default value of the --thumbnail-size option is now 1920, which
       downloads a 1920x1080 image. The previous default was 192, which
       downloaded a 192x108 image. This larger default size should work
       better on TVs and larger devices, but it will still scale down for
       smaller devices and media manager software.

          * If you have added --thumbnail-size to your preferences, it will
            continue to be used.

          * This change will add ~200KB to the size of tagged output files,
            compared to the previous default.

          * If you wish to restore the previous default thumbnail size:

   get_iplayer --prefs-add --thumbnail-size=192

     * Thumbnail size is now automatically limited to 1280 when
       --thumbnail-square is used, in order to avoid distorted images.

     * The @wrt atom in metadata tags (iTunes: Composer field) is now set to
       "BBC Sounds" for radio programmes. The value is still set to "BBC
       iPlayer" for TV programmes.

     * The --tag-utf8 option is now ignored and will be removed in the next
       release. It hasn't served any useful purpose for some time. To remove
       it from your preferences if necessary:

   get_iplayer --prefs-del --tag-utf8

     * The minimum version of Perl nominally required for get_iplayer is now
       5.16, in line with recent changes in requirements for the Mojolicious
       module. This requirement is not yet enforced in get_iplayer code since
       some combinations of older Perl and Mojolicious versions will still
       work. This only concerns Linux users doing manual installations, and
       who for some reason attempt to install new versions of Mojolicious
       with obsolete versions of Perl, so it is unlikely to apply to you.

     * get_iplayer previously allowed a PVR run to continue even if the
       previous run might still be active, as long as 12 hours had elapsed
       since the previous run was launched, on the presumption that after 12
       hours the previous run must be hung. That is no longer the case.

          * If an invalid (e.g., due to disk write error) PVR lockfile is
            found, get_iplayer deletes the lockfile and exits with an error
            and an instruction for you to check if get_iplayer PVR is already
            running before restarting.
          * If a valid PVR lockfile is found and the previous run is still
            active, get_iplayer will now always exit with an error regardless
            of whether or not 12 hours has elapsed. It now prints the process
            ID associated with the running PVR so that you can check the
            process status if necessary.
          * get_iplayer is not prone to hanging as it sometimes was when it
            relied on rtmpdump and ffmpeg for downloading, so this change
            should have little effect on you. One possible exception is if
            you try to use get_iplayer in Windows Subsystem for Linux v1 (WSL
            1), where AtomicParsley always hangs and thus hangs every PVR
            run. Don't use get_iplayer on WSL 1. AtomicParsley does work with
            WSL 2.
2020-06-29 15:06:38 +00:00
adam
65611cd5e8 terraform-provider-aws: updated to 2.68.0
v2.68.0:

FEATURES:
New Data Source: aws_efs_access_points
New Resource: aws_wafv2_web_acl_logging_configuration

ENHANCEMENTS:
data-soruce/aws_ami: Add arn attribute
data-source/aws_customer_gateway: Add arn attribute
data-source/aws_ebs_snapshot: Add arn attribute
data-source/aws_vpc_endpoint: Add arn attribute
data-source/aws_vpc_endpoint_service: Add arn attribute
data-source/aws_vpn_gateway: Add arn attribute
resource/aws_ami: Add arn attribute and plan-time validations to architecture, volume_type and virtualization_type arguments
resource/aws_ami_copy: Add arn attribute
resource/aws_ami_from_instance: Add arn attribute
resource/aws_customer_gateway: Add arn attribute and plan-time validations for bgp_asn, ip_address, and type arguments
resource/aws_default_network_acl: Add arn attribute and plan-time validations for ingress and egress configuration block arguments
resource/aws_ebs_snapshot: Add arn attribute
resource/aws_ebs_snapshot: Support resource import
resource/aws_ebs_snapshot_copy: Add arn attribute
resource/aws_ec2_traffic_mirror_session: Add arn attribute
resource/aws_ecs_service: Support deployment_controller configuration block type argument value of EXTERNAL (support external deployments)
resource/aws_ecs_task_definition: Add efs_volume_configuration configuration block authorization_config, transit_encryption, and transit_encryption_port arguments (support EFS Access Points and transit encryption)
resource/aws_elasticsearch_domain: Ultrawarm can now be enabled without re-creating the resource
resource/aws_glue_catalog_database: Add arn attribute
resource/aws_iot_policy: Support resource import
resource/aws_iot_topic_rule: Add error_action configuration block
resource/aws_network_acl: Add arn attribute and plan-time validations for ingress and egress configuration block arguments
resource/aws_placement_group: Add arn attribute
resource/aws_ses_receipt_filter: Add arn attribute and plan-time validations for all arguments
resource/aws_vpn_connection: Add arn attribute
resource/aws_vpc_endpoint: Add arn attribute
resource/aws_vpc_endpoint_service: Add arn attribute
resource/aws_vpn_gateway: Add arn attribute

BUG FIXES:
resource/aws_batch_compute_environment: Ensure desired_vcpus is fully optional and wait for updates
resource/aws_batch_compute_environment: Remove resource from Terraform state when not found instead of returning error
resource/aws_cloudtrail: Properly configure single event_selector with no data_resource and read_write_type of ReadOnly or WriteOnly
resource/aws_cloudtrail: Prevent InvalidEventSelectorsException error when removing all event_selector configuration
resource/aws_default_route_table: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_default_route_table: Ensure empty string ("") validation in cidr_block and ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_ecs_service: Add plan-time validation and prevent panics with empty type argument in ordered_placement_strategy configuration block
resource/aws_ecs_task_definition: Prevent showing API ordering differences in container_definitions environment variables during update plans
resource/aws_elasticsearch_domain: Ensure empty string ("") validation in ebs_options volume_type argument continues to work for Terraform 0.11 support
resource/aws_iot_policy: Ensure name argument updates recreate the resource
resource/aws_route: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_route: Ensure empty string ("") validation in destination_cidr_block and destination_ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_route_table: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_route_table: Ensure empty string ("") validation in cidr_block and ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_spot_fleet_request: Prevent crash with missing placement information
resource/aws_vpc_endpoint: Skip ModifyVpcEndpoint API call on tags only updates
resource/aws_vpc_endpoint: Wait for acceptance when auto_accept is enabled
resource/aws_wafv2_web_acl: Prevent unexpected UpdateWebACL API errors on tags only updates
2020-06-29 12:12:59 +00:00
leot
e66702a498 rclone: Update to 1.52.2
Changes:
1.52.2
------
* Bug Fixes
    * build
        * Fix docker release build action (Nick Craig-Wood)
        * Fix custom timezone in Docker image (NoLooseEnds)
    * check: Fix misleading message which printed errors instead of
      differences (Nick Craig-Wood)
    * errors: Add WSAECONNREFUSED and more to the list of retriable Windows
      errors (Nick Craig-Wood)
    * rcd: Fix incorrect prometheus metrics (Gary Kim)
    * serve restic: Fix flags so they use environment variables
      (Nick Craig-Wood)
    * serve webdav: Fix flags so they use environment variables
      (Nick Craig-Wood)
    * sync: Fix --track-renames-strategy modtime (Nick Craig-Wood)
* Drive
    * Fix not being able to delete a directory with a trashed shortcut
      (Nick Craig-Wood)
    * Fix creating a directory inside a shortcut (Nick Craig-Wood)
    * Fix --drive-impersonate with cached root_folder_id (Nick Craig-Wood)
* SFTP
    * Fix SSH key PEM loading (Zac Rubin)
* Swift
    * Speed up deletes by not retrying segment container deletes
      (Nick Craig-Wood)
* Tardigrade
    * Upgrade to uplink v1.1.1 (Caleb Case)
* WebDAV
    * Fix free/used display for rclone about/df for certain backends
      (Nick Craig-Wood)
2020-06-29 12:12:19 +00:00
adam
af339ec927 terraform: updated to 0.12.28
v0.12.28:
BUG FIXES:
build: build the 0.12 version of Terraform with Go 1.12.13, rather than 0.13 Terraform's 1.14.2

v0.12.27:
BUG FIXES:
backend/remote: fix panic when there's a connection error to the remote backend
2020-06-29 12:11:59 +00:00
leot
4d7709f2ff gallery-dl: Update to 1.14.2
Changes:
1.14.2
------
### Additions
- [artstation] add `date` metadata field (#839)
- [mastodon] add `date` metadata field (#839)
- [pinterest] add support for board sections (#835)
- [twitter] add extractor for liked tweets (#837)
- [twitter] add option to filter media from quoted tweets (#854)
- [weibo] add `date` metadata field to `status` objects (#829)

### Fixes
- [aryion] fix user gallery extraction (#832)
- [imgur] build directory paths for each file (#842)
- [tumblr] prevent errors when using `reblogs=same-blog` (#851)
- [twitter] always provide an `author` metadata field (#831, #833)
- [twitter] don't download video previews (#833)
- [twitter] improve handling of deleted tweets (#838)
- [twitter] fix search results (#847)
- [twitter] improve handling of quoted tweets (#854)
- fix config lookups when multiple locations are involved (#843)
- improve output of `-K/--list-keywords` for parent extractors (#825)
- call `flush()` after writing JSON in `DataJob()` (#727)
2020-06-29 11:39:07 +00:00
yyamano
d4c84e526f Enable async and lwt options to fix www/ocaml-cohttp build errors.
Bump PKGREVISION.
OK'ed by jaapb and gdt.
2020-06-29 10:15:07 +00:00
otis
edc8b5937c dnscheck: Do not install perllocal.pod
Do not install perllocal.pod to avoid file conflict.
2020-06-26 21:08:55 +00:00
otis
4e5afbabea net-snmp: Do not install perllocal.pod
Do not install perllocal.pod to avoid file conflict.
2020-06-26 07:47:22 +00:00
jperkin
7828c378c8 net-snmp: Requires curses for bin/snmpps. 2020-06-25 10:54:42 +00:00
schmonz
3948870bde Retire 'djbware-errno-hack' and associated options.mk cleverness.
Instead:

1. Package makefiles including their own options.mk
2. Packages say "SUBST_CLASSES+=djberrno" to get the hack, if needed
3. Packages adjust SUBST_FILES.djberrno, if needed

Should fix bulk build failures due to multiple inclusions of options.mk
and/or incorrect definitions of DJB_ERRNO_HACK.

Approved during the freeze by wiz@.
2020-06-25 05:42:36 +00:00
ryoon
d9d861f2ec minitube: Fix previous to use qt5-tools as TOOL_DEPENDS 2020-06-22 11:49:01 +00:00
ryoon
8b2d419c9c minitube: lrelease from x11/qt5-tools is required to build
Bump PKGREVISON.
2020-06-22 11:46:43 +00:00
taca
2025b02403 net/ruby-addressable: add "USE_LANGUAGES= # none"
Add "USE_LANGUAGES=	# none" for a pure ruby package.
2020-06-21 15:48:47 +00:00
nia
800e85fcf5 tcpreplay: Update to 4.3.3
05/20/2020 Version 4.3.3
    - Increase cache buffers size to accomodate VLAN edits (#594)
    - Correct L2 header length to correct IP header offset (#583)
    - Fix warnings from gcc version 10 (#580)
    - Heap Buffer Overflow in randomize_iparp (#579)
    - Use after free in get_ipv6_next (#578)
    - Heap Buffer Overflow in git_ipv6_next (#576)
    - Call pcap_freecode() on pcap_compile() (#572)
    - Increase max snaplen to 262144 (#571)
    - Fix divide by zero in fuzzing (#570)
    - Unique IP repeats at very high iteration counts (#566)
    - Fails to compile on FreeBSD amd64 13.0 (#558)
    - Heap Buffer Overflow in do_checksum (#556) (#577)
    - Attempt to correct corrupt pcap files, if possible (#557)
    - Fix GCC v10 warnings (#555)
    - Remove some duplicated SOURCES entries (#551)
    - Expand /dev/bpfX hard limit to fix macOS Mojave (#550)
    - Implement --loopdelay-ms when using --loop=0 (#546)
    - Heap overflow packet2tree and get_l2len (#530)

03/12/2019 Version 4.3.2
    - CVE-2019-8381 memory access in do_checksum() (#538)
    - CVE-2019-8376 NULL pointer dereference get_layer4_v6() (#537)
    - CVE-2019-8377 NULL pointer dereference get_ipv6_l4proto() (#536)
    - Rename Ethereal to Wireshark (#545)

12/27/2018 Version 4.3.1
    - Fix checkspell detected typos (#531)

11/10/2018 Version 4.3.0
    - Fix maxOS TOS checksum failure (#524)
    - TCP sequence edits seeding (#514)
    - Fix issues identifed by Codacy (#493)
    - CVE-2018-18408 use-after-free in post_args (#489)
    - CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488)
    - CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486)
    - CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485)
    - CVE-2018-17582 heap-buffer-overflow in get_next_packet (#484)
    - Out-of-tree build (#482)
    - CVE-2018-13112 heap-buffer-overflow in get_l2len (#477 dup #408)
    - Closing stdin on pipe (#479)
    - Second pcap file hangs on multiplier option (#472)
    - Jumbo frame support for fragroute option (#466)
    - TCP sequence edit ACK corruption (#451)
    - TCP sequence number edit initial SYN packet should have zero ACK (#450)
    - Travis CI build fails due to new build images (#432)
    - Upgrade libopts to 5.18.12 to address version build issues (#430)
    - Add ability to change tcp SEQ/ACK numbers (#425)
    - Hang using loop and netmap options (#424)
    - tcpprep -S not working for large cache files (#423)
    - Unable to tcprewrite range of ports with --portmap (#422)
    - --maxsleep broken for values less than 1000 (#421)
    - -T flag breaks traffic replay timing (#419)
    - Respect 2nd packet timing (#418)
    - Avoid non-blocking behaviour when using STDIN (#416)
    - pcap containing >1020 packets produces invalid cache file (#415)
    - manpage typos (#413)
    - Fails to open tap0 on Zephyr (#411)
    - Heap-buffer-overflow in get_l2protocol (#410)
    - Heap-buffer-overflow in packet2tree (#409)
    - Heap-buffer-overflow in get_l2len (#408)
    - Heap-buffer-overflow in flow_decode (#407)
    - Rewrite zero IP total length field to match the actual packet length (#406)
    - Stack-buffer-overflow in tcpcapinfo (#405)
    - tcpprep --include option does not exclude (#404)
    - Negative-size-param memset in dlt_radiotap_get_80211 (#402)
    - tcpeplay --verbose option not working (#398)
    - Fix replay when using --with-testnic (#178)
2020-06-21 15:30:39 +00:00
taca
72b23863a3 net/ruby-twitter: update to 7.0.0
Update ruby-twitter to 7.0.0.


7.0.0
* Add Twitter::DirectMessageEvent (@FabienChaynes)
* Create Twitter::DirectMessageEvent with media (@FabienChaynes)
* Support for DM welcome messages (@FabienChaynes)
* Support for closing Twitter::Streaming::Connection (@okkez)
* Add Twitter::REST::Client#create_direct_message_event (@cyu)
* Add Twitter::REST::Client#premium_search
* Add Twitter::REST::AccountActivity
* Update all direct message methods to return Twitter::DirectMessageEvent
  (@flikglick)
* Correctly handle different Twitter::Error::AlreadyRetweeted error messages
  (@knu)
* Fix proxy setting sample (@nicklegr)
* Add Active Support presence methods on Twitter::NullObject (@davebrace)
* Upload GIFs over 5MB in chunks (@wild_dmitry)
* Track rate limit when searching tweets (@dsalahutdinov1)
* Add quote_count and reply_count attributes to Twitter::Tweet
* Drop support for Ruby 2.0, 2.1, and 2.2
2020-06-21 15:26:53 +00:00
taca
314649a5d8 net/ruby-twitter-text: update to 3.1.0
Update ruby-twitter-text to 3.1.0.


3.1.0

Changed

* Bump nokogiri version (#302)
* Fix auto-link emoji parsing (#304)
* Updates known gTLDs to recognize recent additions by IANA (#308)
* Fix warning about has_rdoc usage (#309)
2020-06-21 15:24:49 +00:00
taca
0078f33824 net/ntp4: update to 4.2.8p14
Updaet ntp4 to 4.2.8p14.

pkgsrc changes:
* Incorporate several changes from NetBSD base.
* few pkglint fixes.


Quote from release announce:

NTP 4.2.8p14 (Harlan Stenn <stenn@ntp.org>, 2020 Mar 03)

Focus: Security, Bug fixes, enhancements.

Severity: MEDIUM

This release fixes three vulnerabilities: a bug that causes causes an ntpd
instance that is explicitly configured to override the default and allow
ntpdc (mode 7) connections to be made to a server to read some uninitialized
memory; fixes the case where an unmonitored ntpd using an unauthenticated
association to its servers may be susceptible to a forged packet DoS attack;
and fixes an attack against a client instance that uses a single
unauthenticated time source.  It also fixes 46 other bugs and addresses
4 other issues.
2020-06-21 15:10:47 +00:00
taca
112a4fd039 net/ruby-ruby_smb: update to 2.0.1
Update ruby-ruby_smb to 2.0.1.


* store server time values and GUDI

* Fix issues with Mac OS X SMB server

  - Set the unicode flag on the Negotiate SMB Header request
  - Check if the Socket is closed before calling IO.select
  - Improve Socket#recv_packet exception handling

* Update related to Win8 errors

  - Change :encryption_required parameter name to a more meaningful name
    according to the context: :session_encrypt_data and
    :tree_connect_encrypt_data.
  - #can_be_encrypted? now returns false with SMB1 packet.
  - Improve exception handling in #recv_encrypt in case an encryption error
    occurs on the server (this will help in detecting the unpatched Win8
    bug).
  - Only enable session encryption if the server supports it. This only
    applies if session_encrypt_data was originally set (forced). If it is
    not set, session encryption will stay disabled even if the server
    supports encryption.

* More fixes
  - Remove the `OEM` flag when initializing the `Net::NTLM::Client`.
    Unicode is the default now and `Net::NTLM::Client` does not handle OEM
    string correctly.
  - Improve error message when an SMB1 `NtCreateAndxResponse` is received
    without extended information.
2020-06-21 14:23:23 +00:00
adam
c6c5de67d5 py-lexicon: updated to 3.3.26
v3.3.26:
More straightforward approach to configure tests suites

v3.3.25:
Allow updating gandi rrset ttl. Previously, a rrset ttl could be set only when creating a new record
Final customizations for hetzner dns api v1. The main fix is, that hetzner does not need the fqdn as record name. This leads to major errors like: record name=sub1.my-fqdn.tld --> record created with final name sub1.my-fqdn.tld.my-fqdn.tld
Delete config.yml delete circleci integration. no longer necessary.
2020-06-20 16:46:38 +00:00
adam
1f62ada13e py-zeroconf: updated to 0.27.1
0.27.1
Improved the logging situation (includes fixing a false-positive "packets() made no progress adding records")

0.27.0
Large multi-resource responses are now split into separate packets which fixes a bad mdns-repeater/ChromeCast Audio interaction ending with ChromeCast Audio crash (and possibly some others) and improves RFC 6762 compliance
Added a warning presented when the listener passed to ServiceBrowser lacks update_service() callback
Added support for finding all services available in the browser example

Backwards incompatible:
Removed previously deprecated ServiceInfo address constructor parameter and property
2020-06-20 16:32:07 +00:00
adam
baab819494 py-smb: updated to 1.2.1
pysmb-1.2.1
- Fix bug in deleteFiles() method which can fail for certain search patterns.

pysmb-1.2.0
- Add new parameter, delete_matching_folders, to deleteFiles() method to
  support deletion of child folders that match the search pattern.

pysmb-1.1.29
- Fix unhandled exception for short NBNS queries
- Fix wildcard file deletion with servers on SMB2 protocol
2020-06-20 16:16:13 +00:00
adam
6523f85fd1 haproxy: updated to 2.1.7
2.1.7
- BUG/MAJOR: http-htx: Don't forget to copy error messages from defaults section
2020-06-20 08:33:32 +00:00
adam
48937d2f96 py-netaddr: updated to 0.7.20
Changes since 0.7.19

* Fixed returning from an iterator on Python 3.7+, by Sergey Kozlov.
* Fixed Python 3.8 SyntaxWarning on using `is not` with a string literal, by Stefan Nordhausen.
* Fixed DeprecationWarnings by using raw strings for escape characters used in regexes, by Sean McGinnis.
* Improved IPGlob documentation, by obkmeta.
* Fixed exception creation in corner cases by explicitly passin error message params as tuples, by
  Matthias Urlichs.
* Stopped manually replacing shebang of an included script.
* Stopped using __file__ in all code that's expected to run in environments that don't support it
  (like PyOxidizer-produced binaries).
* Updated all databases included in the package.

Specific bug fixes addressed in this release

FIXED Issue 182: https://github.com/netaddr/netaddr/issues/182
    - test_ip_splitter_remove_prefix_larger_than_input_range fails with python 3.7

FIXED Issue 206: https://github.com/netaddr/netaddr/issues/206
    - ""is not" with a literal." SyntaxWarning

FIXED Issue 198: https://github.com/netaddr/netaddr/issues/198
    - oui databases are outdated

FIXED Issue 188: https://github.com/netaddr/netaddr/issues/188
    - Avoid use of __file__

Miscellanea

- Python 2 versions older than 2.7 and Python 3 versions older than 3.5 should be considered
  unsupported. No incompatible code has been introduced to the best of our knowledge but
  there's no CI infrastructure in place to verify this and if there are any issues with
  those versions they won't be fixed.
- Consequently, Python 2.7 and 3.5 support should be considered deprecated as 2.7 has
  reached its end-of-life already and 3.5 will hit it soon.
- A CI setup has been introduced which allows us to test on a variety of Python versions
  on all Mac, Linux and Windows.
2020-06-20 07:27:44 +00:00
adam
57350c4256 terraform-provider-aws: updated to 2.67.0
v2.67.0

NOTES:
data-source/aws_secretsmanager_secret: The rotation_* attributes have been deprecated in favor of the new aws_secretsmanager_secret_rotation data source.
resource/aws_secretsmanager_secret: The rotation_* arguments have been deprecated in favor of the new aws_secretsmanager_secret_rotation resource. The new resource, which fixes workflow issues, prevents the existing resource from showing changes when attempting to remove rotation. Removal must be done with the new resource or manually.

FEATURES:
New Data Source: aws_ebs_volumes
New Data Source: aws_ec2_local_gateway_virtual_interface
New Data Source: aws_ec2_local_gateway_virtual_interface_group
New Data Source: aws_ec2_local_gateway_virtual_interface_groups
New Data Source: aws_ecr_authorization_token
New Data Source: aws_outposts_outpost
New Data Source: aws_outposts_outpost_instance_type
New Data Source: aws_outposts_outpost_instance_types
New Data Source: aws_outposts_outposts
New Data Source: aws_outposts_site
New Data Source: aws_outposts_sites
New Data Source: aws_secretsmanager_secret_rotation
New Data Source: aws_wafv2_web_acl
New Guide: Resource Tagging
New Resource: aws_ec2_local_gateway_route
New Resource: aws_ec2_local_gateway_route_table_vpc_association
New Resource: aws_ec2_tag
New Resource: aws_secretsmanager_secret_rotation
New Resource: aws_wafv2_web_acl
New Resource: aws_wafv2_web_acl_association

ENHANCEMENTS:
data-source/aws_vpc_dhcp_options: Add arn attribute
data-source/aws_efs_mount_target: Add availability_zone_name, availability_zone_id, mount_target_dns_name, and owner_id attributes
data-source/aws_internet_gateway: Add arn attribute
data-source/aws_lambda_function: Add file_system_config attribute
data-source/aws_workspaces_bundle: Add name and owner as search crieria
resource/aws_ec2_capacity_reservation: Add arn attribute and support for Linux SQL Server values in instance_platform argument
resource/aws_cloudwatch_log_stream: Support resource import
resource/aws_default_vpc_dhcp_options: Add arn attribute
resource/aws_devicefarm_project: Support resource import
resource/aws_ec2_traffic_mirror_target: Add arn attribute
resource/aws_ecs_capacity_provider: Implement API deletion support
resource/aws_efs_mount_target: Add availability_zone_name, availability_zone_id, mount_target_dns_name, and owner_id attributes
resource/aws_efs_mount_target: Add plan time validation for ip_address argument
resource_aws_elasticsearch_domain: Add support for elasticsearch warm storage
resource_aws_elasticsearch_domain: Add plan time validation for cloudwatch_log_group_arn, role_arn, and ebs_options.volume_type
resource/aws_flow_log: Add arn attribute
resource/aws_glue_catalog_table: Add arn attribute
resource/aws_guardduty_detector: Add tags argument and arn attribute
resource/aws_guardduty_ipset: Add tags argument and arn attribute
resource/aws_guardduty_threatintelset: Add tags argument and arn attribute
resource/aws_internet_gateway: Add arn attribute
resource/aws_key_pair: Add arn attribute
resource/aws_lambda_function: Add file_system_config attribute
resource/aws_service_discovery_http_namespace: Add tags argument
resource/aws_service_discovery_private_dns_namespace: Add tags argument
resource/aws_service_discovery_public_dns_namespace: Add tags argument
resource/aws_service_discovery_service: Add tags argument
resource/aws_vpc_dhcp_options: Add arn attribute
resource/aws_wafv2_ip_set: Increase addresses maximum amount of items limit from 50 to 10,000 to match AWS limits

BUG FIXES:
resource/aws_cloudfront_origin_access_identity: Properly trigger resource recreation when deleted outside Terraform
resource/aws_cognito_user_pool_client: Mark client_secret as sensitive
resource/aws_route: Ensure retries occur on read after creation if route not found for EC2 eventual consistency
2020-06-20 06:59:22 +00:00
mef
ceb9782f65 (net/py-ifaddr) fix build for py3, Explicitly read file as UTF-8, tks joerg@ 2020-06-20 02:08:55 +00:00
ryoon
8416a6a642 remmina: Update to 1.4.6
Changelog:
List of changes:

    Hotkey language fixed !2064 (merged) @kingu
    TRANSLATION file for l10n !2065 (merged) @kingu
    Fetch news from remmina.org optional !2066 (merged) @antenore
    allow saving notes in connection profile !2067 (merged) @juarez.rudsatz
    RDP: Improving hardware option parsing !2068 (merged) @antenore
    Rearranged widgets in a new Behavior tab !2069 (merged) @juarez.rudsatz
    Add separator only when there are saved profiles. Fixes #1914 !2070 (merged) @antenore
    Implementing resume all for FTP file transfer, should fix #2210 !2072 (merged) @antenore
    Spelling: Overwrite all file transfers !2073 (merged) @kingu
    Spelling: Options for redirection x2, -: !2074 (merged) @kingu
    Edit or connect using multiple profile files from the command line !2075 (merged) @antenore
    Desktop session files for Remmina kiosk are optional !2076 (merged) @antenore
    Update Ukrainian translation for the desktop file !2077 (merged) @yurchor
    Remove 'translatable="yes"' from the fake label in remmina_spinner.glade !2079 (merged) @yurchor
    Remove 'translatable="yes"' from the fake label !2078 (merged) @yurchor
    Feat/lebowski !2080 (merged) @antenore
2020-06-20 00:11:27 +00:00
hauke
6e611ba654 Resolve PLIST issue. 2020-06-19 19:18:12 +00:00
hauke
bbbc2f6181 INSTALLATION_DIRS: Undo think-o, re-structure. 2020-06-19 10:21:17 +00:00
hauke
db30873727 GC unused INSTALLATION_DIRS 2020-06-19 10:14:58 +00:00
hauke
5de9750052 PKG_SYSCONFDIR fixes.
Install a sample config file. Mention, but do not install lldpd.d
directory.

The config file is not mandatory, adjust rc.d script.
2020-06-19 10:05:07 +00:00
hauke
c3089c35a8 Minor cleanup. 2020-06-18 20:01:17 +00:00
hauke
d55e1b907f Update net/lldpd to v1.0.5
# pkgsrc changes

No OWNDIR needed for daemon's HOME

Add Perl path to LDFLAGS only when it is needed (snmp support)

List INSTALLATION_DIRS explicitly

Set PKG_SYSCONFSUBDIR, so that README.conf actually gets installed

Since editline is fully functional, avoid linking against the GPLv3 readline

# upstream changes

Numerous small changes, see ChangeLog.
2020-06-18 19:40:32 +00:00
bsiegert
1c3a8020dd Add a package for gh-0.10.0. From wip.
gh is GitHub on the command line, and it's now available in beta.
It brings pull requests, issues, and other GitHub concepts to the
terminal next to where you are already working with git and your code.
2020-06-18 18:30:41 +00:00
adam
2e24c28e26 py-ldapdomaindump: updated to 0.9.3
0.9.3:
Unknown changes
2020-06-18 17:02:45 +00:00
taca
c264233607 net/pear-Net_SMTP: update to 1.9.1
Update pear-Net_SMTP to 1.9.1.


1.9.1 (Release date: 2020-06-06 18:48 UTC)

Changelog:

* Added .gitattributes for nicer packaging
2020-06-18 16:54:25 +00:00
taca
ba5b85a875 net/ruby-net-ping: update to 2.0.8
Update ruby-net-ping to 2.0.8.


2.0.8 (2020-06-17)

Changes

* Fix gem metadata on rubygems (#29)
2020-06-18 16:26:43 +00:00
taca
79c9832a35 net/bind911: update to 9.11.20
Update bind911 to 9.11.20, fixing CVE-2020-8619.


	--- 9.11.20 released ---

5437.	[bug]		Fix a data race in lib/dns/resolver.c:log_formerr().
			[GL #1808]

5434.	[security]	It was possible to trigger an INSIST in
			lib/dns/rbtdb.c:new_reference() with a particular zone
			content and query patterns. (CVE-2020-8619) [GL #1111]
			[GL #1718]

5433.	[test]		Prevent the resolver system test for change #5395
			(max-recursion-queries) from failing on systems without
			IPv6 support. [GL #1873]

5428.	[bug]		Clean up GSSAPI resources in nsupdate only after taskmgr
			has been destroyed. Thanks to Petr Menšík. [GL !3316]

5427.	[bug]		Fix a regression in address/prefix length checking that
			should have been a warning instead of an error.
			[GL #1849]

5415.	[test]		Address race in dnssec system test that led to
			test failures. [GL #1852]

5413.	[test]		Address race in autosign system test that led to
			test failures. [GL #1852]

5412.	[bug]		'provide-ixfr no;' failed to return up-to-date responses
			when the serial was greater than or equal to the
			current serial. [GL #1714]

5409.	[performance]	When looking up NSEC3 data in a zone database, skip the
			check for empty non-terminal nodes; the NSEC3 tree does
			not have any. [GL #1834]

5408.	[protocol]	Print Extended DNS Errors if present in OPT record.
			[GL #1835]

5405.	[bug]		'named-checkconf -p' could include spurious text in
			server-addresses statements due to an uninitialized DSCP
			value. [GL #1812]
2020-06-18 14:06:21 +00:00
otis
78d2d19724 net/powerdns-recursor: Update to 4.3.1
Changelog since 4.3.0:

* Released:
  - 19th of May 2020

* Improvements:
  - Add ubuntu focal target.

* Bug Fixes:
  - Backport of security fixes for:
    - CVE-2020-10995
    - CVE-2020-12244
    - CVE-2020-10030
  - avoid a crash when loading an invalid RPZ.
  - RPZ dumpFile/seedFile: store/get SOA refresh on dump/load.

* misc:
  - Update boost.m4.
2020-06-17 22:55:11 +00:00
nia
7ea3a50ab9 libtelnet: don't accidentally find doxygen outside of pbulk sandboxes 2020-06-17 17:06:55 +00:00
bsiegert
121a05e61b Revbump Go packages after Go 1.14.4 update. 2020-06-17 09:54:00 +00:00
adam
611c39ce58 py-responses: updated to 0.10.15
0.10.15
- Added `assert_call_count` to improve ergonomics around ensuring a mock was called.
- Fix incorrect handling of paths with query strings.
- Add Python 3.9 support to CI matrix.
2020-06-17 06:47:21 +00:00
gdt
49a41b4d2a net/unifi: Update to 5.13.29
Features

    Add L3 switching features for USW-Pro series.

Improvements

    Add support for MongoDB 3.6.
    Auto-optimize enables Wi-Fi AI.
    Prioritize busy times in Wi-Fi AI logic.
    Update Hotspot 2.0 for WFA requirements.
    Add VHT160 option for Japan.
    Show client icons on DPI and statistics pages.
    Improve SSID validation.
    Improve support for USP Plug.
    Allow adopting UBB only if both devices are connected.
    Allow changing VHT mode for 5GHz radio on UBB.
    Adjust speed test statistics to longer intervals.
    Add LTS notifications.
    Add Analytics & Improvements opt-in modal which is displayed post upgrade.
    Add description of SNMPv3 security options.
    Allow sending test emails via Cloud Email service.
    Make timezones dropdown searchable.
    Update IANA timezone database.
    Update inter-VLAN routing Network form.
    Remove OP mode from Port Profiles.
    Add MAC column to Insights/Known Clients.
    Update available IDS/IPS categories to lessen false positives and improve resource use.
    Rename UDM-Beacon to UAP-BeaconHD.
    Improve Property Panel for USW Leaf.
    Handle LCM sync event notifications on UDM.
    Support U-LTE on UDM devices.
    Support WAN failover for UDM devices.
    Add UDM boot sound checkbox.
    Various fixes and improvements in Beta Settings.
    Various performance improvements.
    Update translations and add missing events.

Known issues

    Don't remind me button for LTS notifications doesn't function properly.
    Blocking countries in map is not working, workaround is using the classic settings.
    Incorrect DPI Statistics.
2020-06-16 17:33:11 +00:00
otis
481e85ebe3 net-snmp: Add missing dependency on libpcap and fix build on SmartOS
- Pull in libpcap on platforms without system-wide one
- Adjust LDFLAGS for SunOS
2020-06-16 10:06:04 +00:00
fcambus
f26eaade6c dbip*: update HOMEPAGE to point to specific DB information pages. 2020-06-16 08:43:00 +00:00