- Corrected the MacHTTP log format, which didn't work in 5.2.
- All the BARSTYLEs redrawn, and two new BARSTYLEs added, adapted from
an idea by Dave Holle. (You will have to move the new graphics into your
IMAGEDIR in order to use them.)
Fixes several known bugs, as well as a cross-site scripting vulnerability
(discovered by Flavio Veloso of Magnux Software), that could allow
malicious HTML tags to be injected in the reports generated by the Webalizer.
This release also includes several new and updated language files. All users
are encouraged to upgrade as soon as possible.
Not all NetBSD platforms support joysticks. Based on ones which are active
in their GENERIC config's only have those actually compile in NetBSD specific
joystick support. For the rest let the generic joystick support get pulled
in (and then fail to probe so the code will disable it anyways).
Otherwise this fails on any system without <machine/joystick.h>
XXX...This really should be redone at some point since it's messy now and
the original code looks like it had the concept of no joystick support in
the first place.
- replace a hack adding fd_mask definition in autoconf.h with re-writing
configure script. It cause to run configure twice and result "no fd_mask".
- Incorporate three official patches from
http://www.squid-cache.org/Versions/v2/2.4/bugs/.
o SNMP memory leaks
synopsis
The SNMP implementation in Squid had several memory leaks
possibly causing an denial of service.
workaround
Disable the SNMP port if enabled by using "snmp_port 0" in
squid.conf. Or if you only use SNMP for MRTG data
collection running on the same host then use
"snmp_incoming_address 127.0.0.1" to limit reachability
of the SNMP port to only localhost or some other trusted
network.
o Coredump on certain ftp:// style URL's
synopsis
If certain constructed ftp:// style URL's are received then
squid crashes, causing a denial of service and maybe even
remote execution of code.
workaround
Deny forwarding of non-anonymous FTP URLs by inserting
the following rules at the top of squid.conf, prior to
any http_access allow lines.
acl non_anonymous_ftp url_regex -i ftp://[^/@]*@
http_access deny non_anonymous_ftp
o "htcp_port 0" fails to disable the HTCP port
synopsis
"htcp_port 0" fails to completely disable the HTCP port as
documented in squid.conf, instead HTCP will be listening on
a random port number.
Summary of changes:
- removal of USE_GTEXINFO
- addition of mk/texinfo.mk
- inclusion of this file in package Makefiles requiring it
- `install-info' substituted by `${INSTALL_INFO}' in PLISTs
- tuning of mk/bsd.pkg.mk:
removal of USE_GTEXINFO
INSTALL_INFO added to PLIST_SUBST
`${INSTALL_INFO}' replace `install-info' in target rules
print-PLIST target now generate `${INSTALL_INFO}' instead of `install-info'
- a couple of new patch files added for a handful of packages
- setting of the TEXINFO_OVERRIDE "switch" in packages Makefiles requiring it
- devel/cssc marked requiring texinfo 4.0
- a couple of packages Makefiles were tuned with respect of INFO_FILES and
makeinfo command usage
See -newly added by this commit- section 10.24 of Packages.txt for
further information.
- The ippRead() function did not verify that the
attribute name length or string with language value
was not larger than the read buffer.
- The scheduler set the signal handlers before loading
the configuration files the first time; this prevented
the RunAsUser directive from blocking server reloads.
- Added Swedish message catalog.
- The parallel backend now recognizes the /dev/printers
device directory under Linux 2.4.x.
- MacOS X fixes.
- The cupsaddsmb utility sent the server name after the
user information when executing the rpcclient program.
This caused problems with some versions of SAMBA
2.2.x.
- The IPP backend did not pass the requesting user name
when checking on the print job status. This prevented
it from waiting for the job to complete when
communicating with some IPP implementations that
require it.
invokes makeinfo without a leading path which will pick up either the system
one or the pkgsrc depending on the users path. To remain consistant force
the patch to LOCALBASE/bin as the first component when building this as older
versions of makeinfo cannot handle the doc files included here.
- Fixed a bug in hash table tarversing.
- Fixed private message handling.
- Fixed the channel message payload decryption in the function
silc_channel_message_payload_decrypt to not modify the original
buffer before it is verified that the message decrypted correctly.
Otherwise, next time it is called with correct channel key it won't
encrypt since the payload is corrupted.
- Fixed SILC_LOG_ERROR and SILC_LOG_WARNING
- Fixed the event_mode CMODE handler to not crash when mode is changed
and +k mode is set in the channel.
- Added SILC_CLIENT_FILE_KEY_AGREEMENT_FAILED file transfer error than can
occur while key agreement protocol.
- Fixed the file transfer's key agreement payload to include zero port
also if the hostname is NULL because it could not be bound.
- Call file transfer monitor callback now also if error occurs during key
agreement protocol.
- Check that the file exists locally before sending the file transfer
request at all.
Patch contributed by Lubomir Sedlacik <salo@xtrmntr.org> in PR 15630.
SSH Secure Shell 3.0.0 (Build 199)
Copyright (c) 2000-2001 SSH Communications Security Corp - http://www.ssh.com/
This copy of SSH Secure Shell is a non-commercial version.
This version does not include PKI and PKCS #11 functionality.
This program uses RSA BSAFE® Crypto-C by RSA Security Inc.
Last login: Mon Feb 18 00:10:56 2002 from pd9eb5184.dip.t-
NetBSD 1.5.2 (SMAUG) #9: Tue Sep 18 17:12:07 MEST 2001
*** Welcome to smaug.fh-regensburg.de! *** , ,
/( )`
This machine is hooked up to the net to support \ \___ / |
development and evaluation of NetBSD. /- _ `-/ '
Unauthorized access is ILLEGAL! (/\/ \ \ /\
Welcome to / / | ` \
NetBSD V1.5 O O ) / |
Administration: Hubert Feyrer \ `-^--'`< '
<feyrer@smaug.fh-regensburg.de> (_.) _ ) /
`.___/` /
`-----' /
--- NOTICES --- <----. __ / __ \
within the next week. Note <----|====O)))==) \) /====
access to serial console is <----' `--' `.__,' \
revoked! | |
011008 - Broken RAM module removed, \ / (FL)
NetBSD 1.5.2 kernel booted. ______( (_ / \_____
Sorry for the downtime! ,' ,-----' | \
`--{__________) \/
smaug% screen -x bsd3
drwxr-xr-x 3 feyrer cvs 512 Feb 18 00:04 patches
yui# Als
Als: Command not found.
^O^R
^@^@P^@^@^@ ^@^@^@^H^@^@^@þB^BI@^A
^F^@þB^B¼o@^A
^A
þB^BÒo@^A
È^A
þB^BÄo@yui#
yui#
CVS/ Makefile PLIST distinfo.orig
DESCR Makefile.orig distinfo patches/
yui# o@B
o@B: Command not found.
yui#
yui#
yui#
CVS/ Makefile PLIST distinfo.orig
DESCR Makefile.orig distinfo patches/
yui# pwd
/disk1/cvs/pkgsrc/chat/silc-client
Patch submitted by Otto Hilska <mutru@cc.hut.fi> in private mail.
Changes:
v0.8.1 2002-02-17 Timo Sirainen <tss@iki.fi>
* Expected bugfix release :) Worst thing was that I forgot always to
debug why /cat /dev/urandom crashed irssi. Well, found two ways
that could make it happen.
- Irssi was linked with -lcurses AND -lncurses
- Logging could have produced GLib errors with certain conditions
- A few compiler warnings fixes
v0.8.0 2002-02-17 Timo Sirainen <tss@iki.fi>
* I really should make releases more often. Once in every two weeks
used to be nice. Maybe once in a month would be good now. There
was many reasons why this release took this long .. first being
addicted to books, then life stuff, then it took forever to figure
out that irssi was crashing under solaris (and not because of one
of the big changes I made while moving to IRC from solaris box).
And now.. well, after this release I'll start working more with
the yet another irssi rewrite :) The code is getting too ugly
again, and some things need rewriting to support some new features
more easily. It will take a while to get it all done, so I'll try
to keep updating this "stable" irssi as well.
There's too many changes since 0.7.98.3 (and .4 which was just
minor bugfix), about 6600 lines in ChangeLog. I'm not going to
read all that, so I'll just list the biggest changes that I can
remember now.
This version was supposed to be called 0.7.99, but since there
were so many changes, and I originally though of putting 0.8.0
out long time ago, and 0.7.100 would look stupid, I guess it's
time for 0.8.0 :)
+ /UPGRADE - upgrade irssi to new version on-the-fly without
disconnecting from server, so other people won't even notice you
quit from IRC. This ONLY executes the new binary, it does NOT
download/compile/whatever irssi.
+ UTF-8 support with /SET term_type UTF-8, default is "8bit".
It's also automatically detected from system locale (if supported).
+ Fully configurable statusbar. Yes. FULLY. Don't bother asking if
something could be done with it, it can, just ask how. Well,
there's a few things I didn't have time/energy to finish:
window-specific statusbar groups and support for multiple input
lines in screen.
+ Rewritten keyboard handling. No more the CTRL-X and ALT-x handling,
now you can create whatever keyboard combinations your terminal
can send to irssi.
+ Rewritten text buffer (scrollback) handling.
+ Irssi doesn't depend on curses anymore, so it can be installed
anywhere a working terminfo/termcap exists. This also allows us to
use all the possible colors terminal has (curses limits to 64), so
eg. %0 is now always black background, not the default terminal
background (%n).
Several systems have also terminfo/termcap database that doesn't
support colors, so I've added /SET term_force_colors option to
force ANSI-style colors. Note that eg. BitchX does this by default.
Getting rid of curses allows also one great thing for you people
copy&pasting long urls :) If a long word gets split to two lines,
doubleclicking the word selects it from both lines.
+ Rewritten server event redirections. Before it was pretty easy to
mess up irssi's expectations of what server sends, and some things
might have stayd in the buffer forever. Especially notify lists
messed up /WHOIS requests for the notified people. Now all this
should be history and it's a lot easier for scripts to use the
redirections as well.
+ New ICB chat protocol plugin - very basic and doesn't support
nicklist, but works. :)
+ --home and --config parameters to specify alternate ~/.irssi
directory or config file.
+ Scripts can be unloaded separately with /SCRIPT UNLOAD. You can get
a list of runnning scripts with /SCRIPT.
+ /SERVER PURGE [<target>] - purge the output buffer (for given
target). Useful for example if you accidentally paste 100 lines :)
The buffer is automatically purged if you get kicked from channel,
or if you /PART the channel and there's more than 10 lines in
output buffer.
* Better buddy icon transparency (thanks SeanEgan)
* Fixed a little bug with connecting via proxy (thanks
for reminding me of this, Manish Singh)
* Various jabber bug fixes/enhancements (JSeymour)
* Arrow buttons in log viewer and some other dialogs
work (thanks Ben Miller)
* Option to only send auto-response while idle (thanks
Sean Egan)
* Control time between sending auto-responses (thanks
Mark Doliner)
