inet6 option was added. Comment out the option for now; if you want
IPv6, uncomment and turn off other conflicting options. Addresses
PR pkg/45358. While here, update to the latest version of the patch.
No PKGREVISION bump needed.
bug#0001963: Bandwidth summation "total in" and "total out"
are always 0
bug#0002040: ICMP ping errors for Windows 7 with PHP 5.3
bug#0002062: Multiple security vulnerabilities
bug#0002063: Multiple value poller output incorrectly interpreted
as hexadecimal value
bug#0002064: Removing "~" (tilde) by sanitize_uri() conflicts with
Apache UserDir translation
bug#0002066: Graph without host id "Notice: Undefined variable:
host_id"
bug#0002067: Custom time range filter not working
bug#0002068: Missing header include in analyze_database.php
bug#0002071: MySQL table poller_item is dropped always when "Data
Input Method" is changed or added.
bug#0002079: Using input field of a script in graph title does not
work
bug#0002080: Database password containing "@" does not connect
bug#0002083: Adding a new users generates errors in apache logs
bug#0002084: Incorrect normalization of hrStorageTable values
over 2^31
bug#0002086: Incorrect usage of mysql custom tcp port
bug#0002087: PHP recache problems due to missing slashes in reindex
table
bug#0002093: Unit exponent value of 0 not imported with graph
template
bug#0002094: CDEF: "another cdef" references not included in
template export
bug#0002106: Command line add device does not accept "None" for
host template
bug: Update host template cli script help to fix incorrect options
bug: Refresh of Cacti log viewer not working
bug: Problems saving User Graph Permissions in IE9
bug: Bandwidth summation fails if NAN values are present
bug: Special Type Code "host_id" available in Data Queries by Not
Data Input Methods
bug: Do not generate error messages when creating non host based
graphs
bug: Wrong index used for Data Queries using VALUE/REGEXP
bug: Fix issue with title variable replacement failing when no host
is associated with graph
bug: Cacti generating MySQL 1100 Errors when modifying the tree
bug: Resolved "Fatal error: Cannot use string offset as an array"
in lib/data_query.php
feature: Properly support ifHighSpeed replacement variable
feature: Increase granularity of availability options to correct
spine bug
feature: Replace "event count" with last changed date for host
availability
Features:
* Makefile changed for BSD make compatibility.
* dns over ssl support as a client, ssl-upstream yes turns it on.
It performs an SSL transaction for every DNS query.
* dns over ssl support as a server, ssl-service-pem and ssl-service-key files
can be given and then TCP queries are serviced wrapped in SSL.
* lame-ttl and lame-size options no longer exist, it is integrated with the
host info. They are ignored (with verbose warning) if encountered
to keep the config file backwards compatible.
* TCP-upstream calculates tcp-ping so server selection works if there are
alternatives.
* Unbound probes at EDNS1480 if there an EDNS0 timeout.
Bug Fixes:
* Fix for VU#209659 CVE-2011-4528: Unbound denial of service vulnerabilities
from nonstandard redirection and denial of existence
http://www.unbound.net/downloads/CVE-2011-4528.txt
* Fix for tcp-upstream and ssl-upstream for if a laptop sleeps,
causes SERVFAILs. Also fixed for UDP (but less likely).
* Fix quartile time estimate, it was too low.
* Fix double free in unbound-host.
* fix -flto detection on Lion for llvm-gcc.
* [bugzilla: 416 ] Infra cache stores information about ping and lameness
per IP, zone.
* [bugzilla: 415 ] Fix resolve of partners.extranet.microsoft.com with a fix
for the server selection for choosing out of a (particular) list of bad
choices.
* Fix make_new_space function so that the incoming query is not overwritten
if a jostled out query causes a waiting query to be resumed that then fails
and sends an error message.
* fix unbound-anchor for broken strptime on OSX lion, detected in configure.
* Detect if GOST really works, openssl1.0 on OSX fails.
* Implement ipv6%interface notation for scope_id usage.
* better documentation for inform_super.
* Fix for out-of-memory condition in libunbound.
* Fix --enable-allsymbols, it depended on link specifics of the target platform, or fptr_wlist assertion failures could occur.
* updated contrib/unbound_munin_ to family=auto so that it works with
munin-node-configure automatically.
* Fix classification of NS set in answer section, where there is a
parent-child server, and the answer has the AA flag for dir.slb.com.
* [bugzilla: 408 ] accept patch from Steve Snyder that comments out unused
functions in lookup3.c.
* fix various compiler warnings.
* max sent count. EDNS1480 only for rtt < 5000. No promiscuous fetch if
sentcount > 3, stop query if sentcount > 16. Count is reset when referral
or CNAME happens. This makes unbound better at managing large NS sets,
they are explored when there is continued interest (in the form of queries).
* remove uninit warning from cachedump code.
* Fix parse error on negative SOA RRSIGs if badly ordered in the packet.
* fix infra cache comparison.
* Fix to constrain signer_name to be a parent of the lookupname.
* robust checks for next-closer NSEC3s.
* iana portlist updated.
(Ok'ed by wiz@)
Drop ${PHP_BASE_VARS} from PKGVERSION by default.
It used to be required to support multiple php version.
But after PHP version based ${PHP_PKG_PREFIX} was introduced,
such trick is not required anymore.
In addition to this, such version name schme invokes unwanted version bump
when base php version is bumped, plus, such version scheme is hard to
use for DEPENDS pattern.
To avoid downgrading of package using such legacy version scheme,
PECL_LEGACY_VERSION_SCHEME is introduced.
If it is defined, current version scheme is still used for currently
supported PHP version (5 and 53), but instead of ${PHP_BASE_VARS},
current fixed PHP base version in pkgsrc is used to avoid unwanted version bump
from update of PHP base package.
With newer PHP (54, or so on), new version scheme will be used if
it is defined.
This trick will not be required and should be removed after php5 and php53 will
be gone away from pkgsrc.
This is the latest stable release of Samba 3.5.
Major enhancements in Samba 3.5.12 include:
o Fix race condition in Winbind (bug 7844).
o The VFS ACL modules are no longer experimental but production-ready.
See full release notes at http://www.samba.org/samba/history/samba-3.5.12.html
Major enhancements in Samba 3.6.1 include:
o Fix smbd crashes triggered by Windows XP clients (bug #8384).
o Fix a Winbind race leading to 100% CPU load (bug #8409).
o Several SMB2 fixes.
o The VFS ACL modules are no longer experimental but production-ready.
Full release notes at http://www.samba.org/samba/history/samba-3.6.1.html
Major enhancements in Samba 3.6.0 include:
- Changed security defaults:
client ntlmv2 auth = yes
client use spnego principal = no
send spnego principal = no
- SMB2 support (fully functional with one omission)
- Internal Winbind passdb changes
- New Spoolss code
- ID Mapping Changes
- Endpoint Mapper
- Internal restructuring
- SMB Traffic Analyzer (http://holger123.wordpress.com/smb-traffic-analyzer/)
- NFS quota backend on Linux
Full release notes at http://www.samba.org/samba/history/samba-3.6.0.html
== Changes
Changes for version 1.1.0:
* Added MIB support to ObjectId and Varbind, so that to_s can return symbolic information
* Added to_str method to ObjectId to return a numeric OID string (old to_s behavior)
* TrapListener can now support multiple community strings
Changes for version 1.0.4:
* New option handling and added lower-case versions of all options
* Added SNMP::VERSION constant
* Experimental support for IPv6
* Removed support for installation with setup.rb
== 1.5.2 - 4-Nov-2011
* The Net::Ping::HTTP class now defaults to using HEAD instead of GET
for its ping test. You can alter this via the get_request accessor.
Thanks got to Balazs Kutil for the patch.
* Added the ssl_verify_mode accessor to the Net::Ping::HTTP class, which
defaults to VERIFY_NONE. This fixes possible warnings resulting from
missing SSL certificates when using https. Thanks go to Balazs Kutil
for the patch.
(This is required by new ruby-amqp package.)
amq-client is a fully-featured, low-level AMQP 0.9.1 client that runs on Ruby
1.8.7, 1.9.2, REE, Rubinius and JRuby.
It's sweet spot is in serving as foundation for higher-level, more opinionated
AMQP libraries.
It can be used directly by applications code when performance and access to
advanced AMQP protocol features is more important that API convenience.
(This is required by new ruby-amqp package.
amq-protocol is an AMQP 0.9.1 serialization library for Ruby. It is not an
AMQP client: amq-protocol only handles serialization and deserialization.
If you want to write your own AMQP client, this gem can help you with that.
Changes from previous:
----------------------
0.30 2011.08.27
- Default to GET method if we've no data to POST (Lubomir Rintel)
- repository update (Lubomir Rintel)
- Slow down with requests if we're approaching the rate limit (Lubomir Rintel)
- Make it possible to turn API errors into exceptions (Lubomir Rintel)
0.29 2011.05.07
always_Authorization for private respo
0.28 2011.03.06
use official GitHub API request instead of screen-scraping for 'comments' issues by spang (Christine Spang)
0.27 2011.02.17
requires HTTP::Request::Common; (RT 65787 by JQUELIN)
0.26 2011.01.20
fix Makefile.PL
0.25 2011.01.19
partial implementation of Pull Request API (doy)
0.24 2011.01.01
Organizations API (fayland)
update Auth to 'Basic Auth' (fayland)
0.23 2010.11.04
Moose has deprected 'excludes', '-excludes' is preferred (datamuc)
Changes from previous:
----------------------
0.21 Wed Mar 28 14:34:18 2007
- Fix RT Tickets:
- 14535: Fix spanner clean() docs (reported by carbon at pobox.com).
- 25898: Undef dereference with empty object (patch by Adam Tomason).
- 30777: Add short_list_range() method (patch by Josef Kutej).
- 48308: clean() or list() before add() causes error (reported by David Cawley).
- 50042: spanner add() did not accept non-object (patch by Tomo.M).
- 52571: "::" not accepted as valid IPv6 address (reported by Tim Wilde).
It implicitly update isc-dhclient4, isc-dhcpd4 and isc-dhcrelay4 to 4.2.3p1.
Changes since 4.2.3
! Add a check for a null pointer before calling the regexec function.
Without out this check we could, under some circumstances, pass
a null pointer to the regexec function causing it to segfault.
Thanks to a report from BlueCat Networks.
[ISC-Bugs #26704].
CVE: CVE-2011-4539
dnscap is a network capture utility designed specifically for DNS
traffic. It produces binary data in pcap(3) format. This utility is
similar to tcpdump(1), but has a number of features tailored to DNS
transactions and protocol options.
OARC likes to use dnscap for DITL data collections. Some of its
features include:
+ Understands both IPv4 and IPv6
+ Captures UDP, TCP, and IP fragments.
+ Collect only queries, responses, or both (-s option)
+ Collect for only certain source/destination addresses (-a -z -A -Z
options)
+ Periodically creates new pcap files (-t option)
+ Spawns an upload script after closing a pcap file (-k option)
+ Will start and stop collecting at specific times (-B -E options)
0.4.2 Tue Nov 29 2011 Toni Gundogdu
Changes:
- Add mgnetwork.lua, mutantmonkey <mutantmonkey@mutantmonkey.in> (#78)
- Remove foundrymusic.lua
Fixes:
- tube8.lua: media URL parsing, Tomas Janousek <tomi@nomi.cz> (#80)
- Multiple: potential "attempt to index ... (a nil value)"
- dailymotion.lua: no match: video plugin params
- videobash.lua: media URL parsing (#81)
0.4.1 Sun Nov 06 2011 Toni Gundogdu
Changes:
- ted.lua: Handle off-site media
Fixes:
- ted.lua: thumbnail URL pattern
- xhamster.lua: title pattern
- yfrog.lua: title pattern
- ted.lua: media URL check
0.99.20:
The primary focus of this release is a fix of SEGV regression in
ospfd, which was introduced in 0.99.19. It also features a series of
minor improvements, including better RFC compliance in bgpd, better
support of FreeBSD and some enhancements to isisd.
0.99.19:
This release provides security fixes, which address assorted
vulnerabilities in bgpd, ospfd and ospf6d (CVE-2011-3323,
CVE-2011-3324, CVE-2011-3325, CVE-2011-3326 and CVE-2011-3327).
0.99.18:
This release fixes 2 denial of services in bgpd, which can be remotely
triggered by malformed AS-Pathlimit or Extended-Community
attributes. These issues have been assigned CVE-2010-1674 and
CVE-2010-1675. Support for AS-Pathlimit has been removed with this
release.
The release includes a number of bug-fixes and enhancements, primarily
for ospfd, ospf6d and bgpd.
V0.82 Removed old Changelog file appended at the end as oldest
changes.
2011-03-28 Mark Kamichoff <prox@prolixium.com>
Enable decoding of ICMP extensions for MPLS for curses and
report interfaces. Use the -e flag or press 'e' to enable it.
Includes Makefile patch sent upstream (thanks!).
Changelog (translated by Google from Japanese):
Adjust the duration of the lock, and make additional response
SendTargets.
Added ReadCache / WriteCache as a LUN option for future expansion.
This volatile write cache mode was previously supported with (O_FSYNC)
,but can now be set from the beginning.
It is expected to be stable this year.
New configuration key (LUN option):
# for each LUN number (both enabled by default)
LUN0 Option ReadCache Disable
LUN0 Option WriteCache Disable
pkgsrc changes:
- Set LICENSE
- Add dependency to p5-Class-Gomor, as reported in PR pkg/45674.
Upstream changes:
0.96 Wed Nov 16 23:07:38 CET 2011
- bugfix: default to be compiled against libdnet (and not libdumbnet)
- update: added some die() in example programs
0.95 Sun Mar 13 23:47:10 CET 2011
- new: added ubuntu and standard patchs. See README.
0.94 Fri Jan 14 11:09:49 CET 2011
- bugfix: tohash method in pod
- applied http://rt.cpan.org/Public/Bug/Display.html?id=52359
0.93 Thu Jan 13 11:07:07 CET 2011
- update: makes components more inline with local install
of libdnet
- update: copyright notice
It is used in conjunction with Cisco routers for authorization, authentication,
and accounting services. Tac_plus is configured via a single configuration
file.
This particular version is derived from the original Cisco sources and is
maintained by Shrubbery Networks, Inc.
Fix quota support in configure: for some reasons, configure thinks that
quota support should be disabled if one of
rpc/rpc.h rpc/pmap_prot.h rpcsvc/rquota.h
is missing or unusable, while the code compiles file with one of
them missing, at last on NetBSD.
bump PKGREVISION
Changes from previous:
1.28 Fri Oct 15 13:34:41 BST 2010
- In the test-suite, provide a more explicit report when the
scan identity test (display term == term) fails.
- The displayTerm==term assertion is now case-insensitive, as
it ought always to have been: previously, the test-suite
relied on a specific implementaton detail of the
test-server, which has recently changed causing extraneous
test-suite failures.
- Also in the test-suite for scan, remove the test that all
title-terms are in the general-term list, an assumption that
should never have been made.
1.27 Wed Aug 11 17:13:07 BST 2010
- Support for Index Data build procedures, including making
Debian/Ubuntu and Red Hat packages from clean tarballs.
- No upstream changes -- packaging only.
1.26 Tue Jun 8 16:43:29 BST 2010
- Tweak the test-suite so that it works correctly on Fedora
Core 12 (2.6.31.5-127.fc12.x86_64). For some reason,
attempts to connect to a non-existent host can fail with
ERROR_TIMEOUT and no addinfo, rather than ERROR_CONNECT and
the hostname as addinfo; and the number of terms to request
in a scan needs to be explicitly specified in an option.
- Add "debclean" target to generated Makefile.
- Remove extraneous and misleading old CVS IDs.
