Commit graph

331584 commits

Author SHA1 Message Date
mef
c2683be470 (geography/libmemphis02) The patch added has no effict, remove/revert 2021-01-18 12:14:02 +00:00
mef
4d1296deca (geography/libmemphis02) The patch added has no effict, remove/revert 2021-01-18 12:13:14 +00:00
nia
49213f101c doc: Added devel/robin-map version 0.6.3 2021-01-18 12:01:37 +00:00
nia
02024f47e1 add devel/robin-map
The robin-map library is a C++ implementation of a fast hash map and hash
set using open-addressing and linear robin hood hashing with backward shift
deletion to resolve collisions.
2021-01-18 12:01:10 +00:00
mef
87b47a3067 (geography/libmemphis02) The patch added has no effict, remove/revert 2021-01-18 11:41:16 +00:00
nia
700934e0cb syslog-ng: Explicitly disable systemd 2021-01-18 10:19:47 +00:00
adam
870f94f624 Updated databases/py-sqlalchemy, devel/py-faker 2021-01-18 10:19:18 +00:00
adam
2b3504bbf2 py-faker: updated to 5.6.1
5.6.1
* Fix transliteration for ``ru_RU`` ``person`` provider. Thanks @valestel.

5.6.0
* Add ``address``, ``bank``, ``geo`` and ``person`` provider for ``en_IE``. Thanks @NiL.
* Add ``person`` provider for ``ga_IE``. Thanks @NiL.

5.5.1
* Fix lorem provider ``sentence`` method.

5.5.0
* Add elements caching and other optimizations. Thanks @prescod.
* Add ``use_weighting`` parameter for improved performance. Thanks @prescod.

5.4.1
* Remove empty string from  ``ar_AA`` Person Provider.

5.4.0
* Add ``da_DK`` address provider. Thanks @JoseNavy.

5.3.0
* ``json`` and ``fixed_width`` now allow for strings to be fixed or pinned to a static value by prepending ``@``. Thanks @johnbrandborg.

5.2.0
* Add ``en_IN`` address + phone number provider. Thanks @pulkitgupta2k.

5.1.0
* Add ``en_IN`` person provider. Thanks @pulkitgupta2k.
2021-01-18 10:19:00 +00:00
adam
16806a9f49 py-sqlalchemy: updated to 1.3.22
1.3.22

oracle

[oracle] [bug]

Fixed regression which occured due to 5755 which implemented isolation level support for Oracle. It has been reported that many Oracle accounts don’t actually have permission to query the v$transaction view so this feature has been altered to gracefully fallback when it fails upon database connect, where the dialect will assume “READ COMMITTED” is the default isolation level as was the case prior to SQLAlchemy 1.3.21. However, explicit use of the Connection.get_isolation_level() method must now necessarily raise an exception, as Oracle databases with this restriction explicitly disallow the user from reading the current isolation level.
2021-01-18 09:50:36 +00:00
fox
3e8473bca9 chat/ircd-hybrid: Updates to 8.2.38
Changes since 8.2.37:

-- Noteworthy changes in version 8.2.38 (2021-01-17)
* Backwards compatibility mode for ircd-hybrid 8.2.22 and below has been removed
* Minimum supported version of the Anope IRC services is now 2.0.8
* Fixed displaying issue with channel MODE messages
* Characters valid for user names for local clients are now [A-Za-z0-9._-]. 'Special'
  characters like }|{'^]\[$, that were allowed previously, are no longer valid.
  Also user names may not begin with '.', '_', or '-'.
* The 'general::dots_in_ident' configuration directive has been renamed to
  'general::specials_in_ident' and now covers the '-' and '_' characters in
  addition to '.'
* Fixed issue with clients connected from IPv6 localhost that, depending on the
  system's getaddrinfo() implementation, could lead to a crash of remote servers
2021-01-18 09:45:53 +00:00
micha
b4dd610164 doc: Updated games/doomlegacy to 1.48.8nb1 2021-01-18 09:43:31 +00:00
micha
4ba6e9a58e games/doomlegacy: Build fix
Remove "-march=native" option.
This should unbreak bulk builds on 32-bit ARM architectures.

Bump PKGREVISION.
2021-01-18 09:41:07 +00:00
nia
17b23f8b5a forked-daapd: Require avahi on !NetBSD 2021-01-18 09:39:29 +00:00
nia
136f884c63 vamp-plugin-sdk: build dependent packages with same toolchain 2021-01-18 09:34:30 +00:00
nia
68b4167a8b mozjs78: create PLIST.Linux
based on missing files in latest CentOS 7 build published to pkgsrc-bulk
2021-01-18 09:27:31 +00:00
nia
483b07fb19 samba4: add missing entries to PLIST.Linux 2021-01-18 09:24:32 +00:00
nia
d3837215ba libusb1: require gcc>=4.7 for -std=c11 2021-01-18 09:22:19 +00:00
rjs
035a7ad863 Updated lang/sbcl to 2.1.0. 2021-01-17 23:01:53 +00:00
rjs
77056c4d59 Update to version 2.1.0.
Changes since version 2.0.7

New in version 2.1.0

    * minor incompatible change: the MAKE-EA internal function, used
      in the assembler, has been removed (affecting some libraries
      defining their own Virtual Operations)
    * new feature: SB-EXT:PRIMITIVE-OBJECT-SIZE can be used to
      interrogate the low-level size in memory of objects. (#1636910,
      reported by anquegi)
    * platform support:
        * pass required -std argument to the compiler on Solaris
          (#1885751, thanks to Jesse Off)
        * better treatment of non-ASCII program arguments on Windows
          (#1907970, reported by Timofei Shatrov)
        * implement the improved TYPEP with structure types on all
          other supported platforms (32-bit PowerPC, ARM, ARM64, MIPS,
          SPARC, RISC-V)
    * enhancement: stream dispatch (to vanilla ANSI / Gray / Simple
      variants) has been rewritten and optimized, fixing a number of
      bugs including:
        * performance of WRITE-SEQUENCE on composite streams (#309136)
        * handling of CLOSE on SYNONYM-STREAM (#1904257, reported by
          Richard M Kreuter)
        * handling of CLOSE on BROADCAST-STREAM with no components
          (#1904722, reported by Richard M Kreuter)
        * loading SB-SIMPLE-STREAMS breaks functionality of other
          stream classes (#1908132)
        * some excessive consing in READ-LINE
    * enhancements related to RUN-PROGRAM:
        * improved the documentation related to the ARGS argument
          (#806733, reported by mon_key)
        * added a PRESERVE-FDS argument
    * bug fix: ensure that TYPE-OF returns something even on internal
      instances, which may become visible in the debugger. (#1908261,
      reported by Philipp Marek)
    * bug fix: iteration variables established by standard forms
      should always be considered used by the compiler. (#719585,
      reported by Roman Marynchak)
    * bug fix: don't allow compiler transformations to weaken the
      requirement against extended (list-form) function names in
      FUNCALL and related operators. (#310069)
    * bug fix: improve automated version number generation in
      branches. (#897867, thanks to Martin Cracauer)
    * bug fix: add possibly-spurious futex wakes when unwinding from a
      call to futex-wait, to avoid deadlocks from interrupted
      waits. (#1038034)
    * bug fixes in the compiler:
        * error on malformed DESTRUCTURING-BIND (#1738638)
        * error on malformed SPECIAL declaration (#1740756)
        * error from use of VALUES type in COERCE (#1887712)
        * enforcement of FTYPE types involving &OPTIONAL (#1903932)
        * checking for proper-list-ness before applying transforms (#1905512)
        * compilation of LAMBDA form including a malformed DEFUN (#1906056)
        * memory fault from VALUES-related handling in high DEBUG code
          (#1906563)
        * transforms handle explicit NIL arguments in :END arguments
          to SEARCH (#1907924)
    * bug fix: return COMPILED-FUNCTION for TYPE-OF on compiled
      functions. (#1906583)
    * some bugs were also closed in this release cycle as obsolete,
      having been fixed by the passage of time or other change in the
      environment:
        * floating point error reporting on OS X (#309454)
        * load-shared-library not working from non-main threads on OS
          X (#592425)
    * optimization: CONSTANTLY on constant arguments returns a more
      efficient function. (#1852585)
    * optimization: perform fewer Lisp/Alien representation
      conversions in callbacks.
    * optimization: perform fewer redundant widetag tests when doing
      type tests of complicated union types.
    * optimization: signed-integer division on machine-word sized
      operands is now implemented using multiplication, affecting
      TRUNCATE, FLOOR, CEILING, MOD and REM. (This optimization was
      already performed on unsigned-integer division)

New in version 2.0.11

    * minor incompatible change: (ARRAY NIL (*)) is not a subtype of
      STRING, as is consistent with a majority of maintained CL
      implementations.
    * minor incompatible change: ARRAY-RANK-LIMIT is decreased from
      65529 to 256
    * optimization: TYPEP on structure types is faster and more
      compact on x86[-64] and ppc64.
    * optimization: LOGCOUNT is faster on arm64.
    * optimization: SIGNUM can be inlined if its argument type is
      known. (#1903533)
    * bug fix: compiler crash in tail call handling. (#1903938)
    * bug fix: crash in traceroot. (#1903419, reported by Michal Herda)
    * bug fix: DESCRIBE called with a string as second argument no
      longer mutates that string. (#1903901, reported by Michal Herda)
    * bug fix: stack clobbering by 256-bit SIMD packs on
      x86-64. (#1901685, reported by Marco Heisig)

New in version 2.0.10

    * minor incompatible change: the funarg given to
      SB-SPROF:MAP-TRACES does not receive a wallclock time with each
      trace.
    * minor incompatible change: INTERNAL-TIME-UNITS-PER-SECOND has
      been increased to 10^6 on 64-bit architectures.
    * minor incompatible change: SIGPIPE is ignored by default again. (#1897624)
    * minor incompatible change: the system code compiled under the
      :LINKAGE-TABLE feature is now unconditionally compiled in, and
      the corresponding entry in *FEATURES* has been removed.
    * enhancement: style-warnings are issued for variables which have
      an assignment but no "for-value reference" (per CLHS glossary
      entry)
    * bug fix: SB-CLTL2:MACROEXPAND-ALL did not expand
      MULTIPLE-VALUE-BIND and MULTIPLE-VALUE-SETQ
    * bug fix: CPUID-based feature detection had an index/mask
      confusion (#1899239)
    * bug fix: fix a deadlock on Windows (#1896802)
    * bug fix: eliminate type errors when wall clocks go back
      (#1028026, #1032111)
    * bug fix: fix EOF handling in read-char-no-hang on concatenenated
      streams (#690408, reported by Willem Broekema)
    * bug fix: fix MAP-INTO on extended sequences (#1855375, thanks to
      James Kalenius)
    * bug fix: SB-GMP can now raise -1, 0 and 1 to the power of a
      bignum. (thanks to Aaron Chen)
    * bug fixes in tests:
        * add a C function declaration (#1897627, thanks to Bob Felts)
        * parse vmmap output more liberally (#1897722, reported by Bob Felts)

New in version 2.0.9

    * incompatible change: HPPA and DEC Alpha architecture support has
      been removed.
    * minor incompatible change: the compiler signals a warning at
      compile-time when an initform of T, NIL or 0 does not match a
      STANDARD-CLASS slot's declared type.
    * minor incompatible change: the runtime no longer uses SIGPIPE
      internally, so the signal is deliverable to user code as is
      customary. Ignoring the signal - in lieu of the OS default of
      process termination - is obtainable via (SB-SYS:ENABLE-INTERRUPT
      SB-UNIX:SIGPIPE :IGNORE).
    * platform support:
        * a number of obsolete portability layers (particularly on the
          Windows platform) have been removed in favour of direct
          calling of the native interfaces.
        * RUN-PROGRAM now accepts a :WINDOW argument to control
          whether a subprocess window should be displayed. (Thanks to
          Luis Borges de Oliveira)
        * the use of futexes implied by :SB-FUTEX is now implemented on FreeBSD.
    * bug fix: SB-SPROF can distinguish between SBCL-internal assembly routines.
    * bug fix: SB-SPROF has better output in its reports for anonymous
      functions.
    * optimization: CALL-NEXT-METHOD with supplied arguments in
      required positions is now faster if the supplied arguments are
      EQL to the original arguments.

New in version 2.0.8

    * platform support:
        * added support for NetBSD/aarch64;
        * threads on Linux now have OS-visible names;
        * removed unnecessary emulation of pthread functions on Windows;
        * work around a sigwait() bug on Mac OS X;
        * allow safepoint build on Mac OS X, though it probably
          doesn't work very well (reported by Chris Wagner, #1382811)
        * removed stub support for HPUX.
    * optimization: SB-THREAD:MAKE-THREAD is faster on most platforms.
    * optimization: faster RATIONAL when the result is a RATIO.
    * optimization: improved cross-type comparisons (float/ratio/bignum).
    * bug fix: EQUALP on pathnames was wrong
    * bug fixes: fix compiler issues in:
        * COUNT (#1889391)
        * VECTOR-LENGTH (#1888919)
        * constant-folding (#1888384)
        * FIND and POSITION (#1887316)
2021-01-17 23:00:18 +00:00
rhialto
702896ca95 Remove "mismatch" flag also in the other place.
Also, remove check for empty +INSTALLED_INFO which seems no longer needed.
2021-01-17 20:18:42 +00:00
pin
9990a9c937 doc: Added sysutils/dust version 0.5.4 2021-01-17 19:33:17 +00:00
pin
36d9a9dd06 Add dust 2021-01-17 19:32:45 +00:00
pin
b538f098ad sysutils/dust: import package
du + rust = dust. Like du but more intuitive.

Dust is meant to give you an instant overview of which directories are using
disk space without requiring sort or head.
It will print a maximum of one 'Did not have permissions message'.

Dust will list a slightly-less-than-the-terminal-height number of the biggest
subdirectories or files and will smartly recurse down the tree to find the
larger ones.
There is no need for a '-d' flag or a '-h' flag.
The largest subdirectories will be colored.

Apparent-size is calculated slightly differently in dust to gdu.
In dust each hard link is counted as using file_length space. In gdu only the
first entry is counted.
2021-01-17 19:31:37 +00:00
riastradh
baeed320b9 kramdown-rfc2629: Patch to work with kramdown 2.0.
That's what we have as textproc/ruby-kramdown; it seems to function
with that.
2021-01-17 17:26:15 +00:00
maya
23ad232dfc g/c gcc48, gcc49, gcc5 logic 2021-01-17 16:05:48 +00:00
gdt
9059c4ed54 gpsd: Add BUILD_DEPENDS on docbook-xsl
(Missing dependency noticed via bulk build.)
2021-01-17 15:55:34 +00:00
taca
ce5a71e332 doc: Updated devel/php-gearman to 2.1.0 2021-01-17 15:50:38 +00:00
taca
0c6f2af51a devel/php-gearman: update to 2.1.0
2.1.0 (2021-01-16)

* PHP 8.0.x is now supported.
2021-01-17 15:50:15 +00:00
taca
0db4fe58ad doc: Updated mail/pear-Mail_Mime to 1.10.10 2021-01-17 15:45:25 +00:00
taca
0e5c212676 mail/pear-Mail_Mime: update to 1.10.10
1.10.10 (2021-01-17 03:34 UTC)

Changelog:

* Compatibility fixes for PHP 5.2 and 5.3 [alec]
* Corrected soft line breaks handling to be RFC compliant [ixs]
* Corrected line breaks for lines ending in dots and length more than 74 [ixs]
2021-01-17 15:45:04 +00:00
maya
9c62045f83 If the base GCC isn't enough, and GCC_REQD=4.5 to 6, use gcc6.
gcc4.8,4.9,5 have bugs preventing them from being useful within pkgsrc
for the primary use case that finds them handy:
glibc + FORTIFY + those GCC versions = build failures.

Additionally, requiring fewer versions of GCC is an improvement for
the vast majority of use-cases considered.

We might want to bump this further than gcc6 later on, but this is a
big improvement for CentOS builds.
2021-01-17 15:32:00 +00:00
wiz
76d0ceed92 icinga2: fix build/package on macOS
From MAINTAINER Edgar Fuß.
2021-01-17 13:22:26 +00:00
wiz
5cff1ff336 google-i18n-address: fix MASTER_SITES 2021-01-17 11:37:12 +00:00
otis
6befe00959 archivers/zziplib: Use portable switches for ln
Backport of upstream change. See
eaba986ff3
2021-01-17 09:36:45 +00:00
jnemeth
1f42346578 doc: Updated comms/asterisk15 to 15.7.4 2021-01-17 08:32:50 +00:00
jnemeth
a0ca5c0404 asterisk15: Update to asterisk 15.7.4.
-----

The Asterisk Development Team would like to announce security
releases for Asterisk 13, 15 and 16. The available releases are
released as versions 13.28.1, 15.7.4 and 16.5.1.

These releases are available for immediate download at

https://downloads.asterisk.org/pub/telephony/asterisk/releases

The following security vulnerabilities were resolved in these versions:

* AST-2019-004: Crash when negotiating for T.38 with a declined stream
  When Asterisk sends a re-invite initiating T.38 faxing, and the endpoint
  responds with a declined media stream a crash will then occur in Asterisk.

* AST-2019-005: Remote Crash Vulnerability in audio transcoding
  When audio frames are given to the audio transcoding support in Asterisk the
  number of samples are examined and as part of this a message is output to
  indicate that no samples are present. A change was done to suppress this
  message for a particular scenario in which the message was not relevant. This
  change assumed that information about the origin of a frame will always exist
  when in reality it may not.

For a full list of changes in the current releases, please see the ChangeLogs:

https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-15.7.4

The security advisories are available at:

https://downloads.asterisk.org/pub/security/AST-2019-004.pdf
https://downloads.asterisk.org/pub/security/AST-2019-005.pdf

-----

The Asterisk Development Team would like to announce security
releases for Asterisk 13, 15 and 16, and Certified Asterisk 13.21.
The available releases are released as versions 13.27.1, 15.7.3,
16.4.1 and 13.21-cert4.

These releases are available for immediate download at

https://downloads.asterisk.org/pub/telephony/asterisk/releases

The following security vulnerabilities were resolved in these versions:

* AST-2019-002: Remote crash vulnerability with MESSAGE messages
  A specially crafted SIP in-dialog MESSAGE message can cause Asterisk to crash.

* AST-2019-003: Remote Crash Vulnerability in chan_sip channel driver
  When T.38 faxing is done in Asterisk a T.38 reinvite may be sent to an
  endpoint to switch it to T.38. If the endpoint responds with an improperly
  formatted SDP answer including both a T.38 UDPTL stream and an audio or video
  stream containing only codecs not allowed on the SIP peer or user a crash will
  occur. The code incorrectly assumes that there will be at least one common
  codec when T.38 is also in the SDP answer.

For a full list of changes in the current releases, please see the ChangeLogs:

https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-15.7.3

The security advisories are available at:

https://downloads.asterisk.org/pub/security/AST-2019-002.pdf
https://downloads.asterisk.org/pub/security/AST-2019-003.pdf


-----

The Asterisk Development Team would like to announce security
releases for Asterisk 15 and 16. The available releases are released
as versions 15.7.2 and 16.2.1.

These releases are available for immediate download at

https://downloads.asterisk.org/pub/telephony/asterisk/releases

The following security vulnerabilities were resolved in these versions:

* AST-2019-001: Remote crash vulnerability with SDP protocol violation
  When Asterisk makes an outgoing call, a very specific SDP protocol violation
  by the remote party can cause Asterisk to crash.

For a full list of changes in the current releases, please see the ChangeLogs:

https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-15.7.2

The security advisory is available at:

https://downloads.asterisk.org/pub/security/AST-2019-001.pdf

-----

The Asterisk Development Team would like to announce the release
of Asterisk 15.7.1.

This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk

The release of Asterisk 15.7.1 resolves an issue reported by the
community and would have not been possible without your participation.

Thank you!

The following issue is resolved in this release:

Bugs fixed in this release:
-----------------------------------
 * ASTERISK-28222 - Regression: MWI polling no longer works

      (Reported by abelbeck)

For a full list of changes in this release, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-15.7.1

-----

The Asterisk Development Team would like to announce the release
of Asterisk 15.7.0.

This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk

The release of Asterisk 15.7.0 resolves several issues reported by the
community and would have not been possible without your participation.

Thank you!

The following issues are resolved in this release:

Security bugs fixed in this release:
-----------------------------------
 * ASTERISK-28127 - Buffer overflow for DNS SRV/NAPTR records
      (Reported by Jan Hoffmann)
 * ASTERISK-28013 - res_http_websocket: Crash when reading HTTP
      Upgrade requests
      (Reported by Sean Bright)

Bugs fixed in this release:
-----------------------------------
 * ASTERISK-28076 - bridging: Asterisk crashes when receiving an
      empty realtime text frame
      (Reported by Emmanuel BUU)
 * ASTERISK-28084 - app_queue: QueueMemberStatus Event flooding AMI
      (Reported by Andrej)
 * ASTERISK-28077 - res_pjsip: improve realtime performance on
      CLI 'pjsip show contacts'
      (Reported by Alexei Gradinari)
 * ASTERISK-27920 - app_queue: Queue member considered inuse
      after immediately hanging up during dialing.
      (Reported by Cao Minh Hiep)
 * ASTERISK-26094 - stasis: Playing MOH to bridge with ARI does not work
      (Reported by Cameron)
 * ASTERISK-28065 - res_odbc: missing SQL error diagnostic
      (Reported by Alexei Gradinari)
 * ASTERISK-28057 - chan_sip: SipNotify via AMI behaves
      differently to CLI
      (Reported by Peter Katzmann)
 * ASTERISK-28045 - configure script does not enforce libunbound2 version
      (Reported by Samuel Galarneau)
 * ASTERISK-28070 - testsuite: Sniffer assumes pjmedia will use
      ports below 10000
      (Reported by Joshua C. Colp)
 * ASTERISK-27854 - rtp: Crash in off-nominal case where RTP
      instance can't be set up
      (Reported by Lei Fu)
 * ASTERISK-28059 - PJSIP: Update bundled PJPROJECT to version 2.8
      (Reported by Joshua C. Colp)
 * ASTERISK-27121 - res_pjsip_mwi: Memory leak on reload
      (Reported by Sergej Kasumovic)
 * ASTERISK-28047 - chan_pjsip: Declined video stream is added
      when no video codecs configured and session refresh with removed
      video stream occurs
      (Reported by Will)
 * ASTERISK-28049 - res_pjproject build failure
      (Reported by Jaco Kroon)
 * ASTERISK-28034 - chan_sip unstable with TLS after asterisk
      start or reloads
      (Reported by David Hajek)
 * ASTERISK-28029 - [patch] res_musiconhold : music on hold will
      not start if previous hold just reached end of file
      (Reported by Frederic LE FOLL)
 * ASTERISK-28005 - channel.c: ARI ring only once
      (Reported by Hajek Michal)
 * ASTERISK-28032 - Realtime queuemembers are not updated during
      retry phase
      (Reported by lvl)
 * ASTERISK-27988 - alembic: PJSIP
      "mwi_subscribe_replaces_unsolicited" field is integer not boolean
      (Reported by Joshua C. Colp)
 * ASTERISK-28020 - res_pjsip_transport_websocket: Properly set
      'received' for IPv6
      (Reported by Sean Bright)
 * ASTERISK-28022 - res_pjsip realtime: uri column in
      ps_contacts table can be too short
      (Reported by Florian Floimair)

Improvements made in this release:
-----------------------------------
 * ASTERISK-28046 - Remove stale nonoptreq references

      (Reported by Walter Doekes)

For a full list of changes in this release, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-15.7.0

-----

The Asterisk Development Team would like to announce security
releases for Asterisk 15 and 16. The available releases are released
as versions 15.6.2 and 16.0.1.

These releases are available for immediate download at

https://downloads.asterisk.org/pub/telephony/asterisk/releases

The following security vulnerabilities were resolved in these versions:

  There is a buffer overflow vulnerability in dns_srv and dns_naptr functions of
  Asterisk that allows an attacker to crash Asterisk via a specially crafted DNS
  SRV or NAPTR response. The attacker???s request causes Asterisk to segfault
  and crash.

For a full list of changes in the current releases, please see the ChangeLogs:

https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-15.6.2

The security advisory is available at:

https://downloads.asterisk.org/pub/security/AST-2018-010.pdf

-----

The Asterisk Development Team would like to announce security
releases for Asterisk 13, 14 and 15, and Certified Asterisk 13.21.
The available releases are released as versions 13.23.1, 14.7.8,
15.6.1 and 13.21-cert3.

These releases are available for immediate download at

https://downloads.asterisk.org/pub/telephony/asterisk/releases

The following security vulnerabilities were resolved in these versions:

* AST-2018-009: Remote crash vulnerability in HTTP websocket upgrade
  There is a stack overflow vulnerability in the res_http_websocket.so module of
  Asterisk that allows an attacker to crash Asterisk via a specially crafted
  HTTP request to upgrade the connection to a websocket. The attacker???s
  request causes Asterisk to run out of stack space and crash.

For a full list of changes in the current releases, please see the ChangeLogs:

https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-15.6.1

The security advisory is available at:

https://downloads.asterisk.org/pub/security/AST-2018-009.pdf

-----

The Asterisk Development Team would like to announce the release
of Asterisk 15.6.0.

This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk

The release of Asterisk 15.6.0 resolves several issues reported by the
community and would have not been possible without your participation.

Thank you!

The following issues are resolved in this release:

Bugs fixed in this release:
-----------------------------------
 * ASTERISK-28002 - When T.140 realtime text is negociated, a
      lot of debug traces are generated
      (Reported by Emmanuel BUU)
 * ASTERISK-27881 - PBX calls via chan_sip TCP trunk now get
      authentification error
      (Reported by Ian Gilmour)
 * ASTERISK-28011 - chan_sip: get_refer_info() attempted unlock
      mutex 'peer' without owning it!
      (Reported by Alec Davis)
 * ASTERISK-27944 - res_pjsip_t38: Crash receiving 1xx responses
      other than 100 before 200 for T.38 reINVITE
      (Reported by Joshua Elson)
 * ASTERISK-28007 - rtcp-mux is put in SDP answer regardless of offer
      (Reported by Torrey Searle)
 * ASTERISK-27398 - No joint capabilities with video and audio-only streams
      (Reported by Benjamin Keith Ford)
 * ASTERISK-27973 - app_queue: QUEUESTATUS = CONTINUE instead LEAVEEMPTY
      (Reported by Valentin Safonov)
 * ASTERISK-27997 - pjproject_bundled: Fix for Solaris builds.
      Do not undef s_addr.
      (Reported by Alexander Traud)
 * ASTERISK-27999 - Wrong SRTP use status report
      (Reported by Salah Ahmed)
 * ASTERISK-28001 - res_pjsip_registrar: Improve performance of
      inbound handling
      (Reported by Joshua Colp)
 * ASTERISK-27966 - pjsip: Race condition in 183 re transmission
      can result in a deadlock
      (Reported by Torrey Searle)
 * ASTERISK-15331 - make menuselect fails due to undefined
      symbols (initscr32, w32addch) in menuselect_curses.o
      (Reported by Majdi Bsoul)
 * ASTERISK-14935 - [regression] menuselect compilation failure
      on Solaris 10
      (Reported by Samuel Owens)
 * ASTERISK-12382 - menuselect compilation failure on Solaris 10
      / gcc 3.4.3
      (Reported by rleasure)
 * ASTERISK-9107 - menuselect compilation failure on Solaris 10/gcc-4.1.1
      (Reported by Bob Atkins)
 * ASTERISK-27991 - BuildSystem: Enable Jansson in Solaris 11.
      (Reported by Alexander Traud)
 * ASTERISK-27548 - res_pjsip_endpoint_identifier_ip only
      matches against "generic string" headers
      (Reported by George Joseph)
 * ASTERISK-27990 - res_rtp_asterisk: Requires OpenSSL in
      Developer Mode.
      (Reported by Alexander Traud)
 * ASTERISK-27591 - Frack errors in stasis.c and memory leakage
      (Reported by Siruja Maharjan)
 * ASTERISK-27978 - res_pjsip: Change default transport
      keepalive to preserve behavior
      (Reported by Joshua Colp)
 * ASTERISK-27968 - systemd: asterisk.service
      (Reported by seanchann.zhou)
 * ASTERISK-27880 - [patch] pjproject_bundled: Repair
      ./configure --with-ssl=PATH.
      (Reported by Alexander Traud)
 * ASTERISK-27810 - BASIC-RETRANS: Implement receive
      (Reported by Benjamin Keith Ford)
 * ASTERISK-27972 - res_sorcery_config: Allow object name based matching
      (Reported by Joshua Colp)
 * ASTERISK-25548 - stasis: Improve message type "Use of before
      init/after destruction" error
      (Reported by Joshua Colp)
 * ASTERISK-27967 - srtp: rejecting short sdes lifetimes
      incompatible with obihai ATAs
      (Reported by Nick French)
 * ASTERISK-27961 - res_pjsip: Spurious ERROR logging when
      printing headers in sip_msg
      (Reported by Nick French)
 * ASTERISK-27563 - pjsip modules always get -O2 even when
      DONT_OPTIMIZE is set
      (Reported by George Joseph)
 * ASTERISK-27957 - PJSIP proposes ICE candidates on answer even
      if not in offer
      (Reported by Torrey Searle)
 * ASTERISK-27347 - [patch] pjproject_bundled: Disable TCP/TLS keep-alives.
      (Reported by Alexander Traud)
 * ASTERISK-27938 - [patch] Compile fails with `IPTOS_MINCOST' undeclared.
      (Reported by Alexander Traud)
 * ASTERISK-27955 - res_pjsip_session: sdp group:BUNDLE
      attribute truncated
      (Reported by Kevin Harwell)
 * ASTERISK-27956 -  res_pjsip_pubsub: segfault in function publish_expire
      (Reported by Alexei Gradinari)
 * ASTERISK-27949 - res_pjsip_rfc3326: A lot of endpoints do not
      correctly handle two Reason headers
      (Reported by Ross Beer)
 * ASTERISK-27763 - res_pjsip_session: Initial INVITE with
      audio+fax results in 488 instead of declining stream
      (Reported by Thiago Coutinho)
 * ASTERISK-27657 - res_pjsip_t38: ATA fails with hangupcause
      58(Bearer capability not available)
      (Reported by Jared Hull)
 * ASTERISK-27080 - res_pjsip_t38: Slow T.38 re-invite rejection
      if remote leg has T.38 disabled
      (Reported by Torrey Searle)
 * ASTERISK-26686 - res_pjsip: Lock inversion in transport management
      (Reported by Ross Beer)
 * ASTERISK-27939 - [patch] bridge_softmix_binaural: Enable
      FFTW3 in Solaris 11.
      (Reported by Alexander Traud)

Improvements made in this release:
-----------------------------------
 * ASTERISK-28006 - PJSIP: Missing
      "party=calling"/"party=called" in Remote-Party-ID
      (Reported by Eric Dantie)
 * ASTERISK-27995 - pjproject_bundled: Find shared libraries in
      root --with-ssl=PATH.
      (Reported by Alexander Traud)
 * ASTERISK-27993 - pjsip_wizard example gives wrong info about
      unsupported SRV records
      (Reported by Jonathan Harris)
 * ASTERISK-27970 - res_rtp_asterisk: T.140 packets containing
      backspace or end of line are merged with regular text and it
      causes some UA to break
      (Reported by Emmanuel BUU)

For a full list of changes in this release, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-15.6.0

-----

The Asterisk Development Team would like to announce the release
of Asterisk 15.5.0.

This release is available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk

The release of Asterisk 15.5.0 resolves several issues reported by the
community and would have not been possible without your participation.

Thank you!

The following issues are resolved in this release:

Security bugs fixed in this release:
-----------------------------------
 * ASTERISK-27818 - Username bruteforce is possible when using
      ACL with PJSIP
      (Reported by John)
 * ASTERISK-27807 - iostreams: Potential DoS when client
      connection closed prematurely
      (Reported by Sean Bright)

Bugs fixed in this release:
-----------------------------------
 * ASTERISK-27783 - res_pjsip_pubsub: apparent crash on shutdown
      (Reported by Kevin Harwell)
 * ASTERISK-27870 - app_confbridge: Conference bridge and
      announcer channels are not removed if conference is ended as
      soon as it starts
      (Reported by Robert Mordec)
 * ASTERISK-27943 - AMI: Action SendText needs to use the correct thread.
      (Reported by Richard Mudgett)
 * ASTERISK-27942 - res_pjsip_messaging doesn't accept
      application/* content-types.
      (Reported by George Joseph)
 * ASTERISK-27909 - cdr: Deadlock with submit_scheduled_batch
      and submit_unscheduled_batch
      (Reported by Denis Lebedev)
 * ASTERISK-27936 - res_pjsip_session doesn't update media when
      a 200 comes in with a different port than a 183
      (Reported by George Joseph)
 * ASTERISK-26987 - pbx_dundi: Asterisk crashes when unloading
      module pbx_dundi.so with dundi peers
      (Reported by Kirsty Tyerman)
 * ASTERISK-27933 - [patch] uuid: Enable UUID in Solaris 11.
      (Reported by Alexander Traud)
 * ASTERISK-27625 - channels: CHECK_BLOCKING is ineffective
      (Reported by Corey Farrell)
 * ASTERISK-27931 - [patch] BuildSystem: Enable ./configure in Solaris 11.
      (Reported by Alexander Traud)
 * ASTERISK-27926 - [patch] bootstrap.sh: find -maxdepth is not
      POSIX compatible.
      (Reported by Alexander Traud)
 * ASTERISK-27903 - menuselect: GCC 8: restrict-qualified
      parameter passed and aliased.
      (Reported by Alexander Traud)
 * ASTERISK-27914 - [patch] tests/test_utils: Repair ./configure
      --with-ssl=PATH.
      (Reported by Alexander Traud)
 * ASTERISK-27705 - chan_iax2: Stops listening for traffic
      (Reported by Kirsty Tyerman)
 * ASTERISK-27908 - [patch] crypto.h: Repair ./configure --with-ssl=PATH.
      (Reported by Alexander Traud)
 * ASTERISK-27905 - [patch] res_srtp: Repair ./configure --with-ssl=PATH.
      (Reported by Alexander Traud)
 * ASTERISK-27888 - SQL fetch error on query which return 0 columns
      (Reported by Alexei Gradinari)
 * ASTERISK-27902 - chan_pjsip isn't updating hangupcause on 4XX responses
      (Reported by George Joseph)
 * ASTERISK-27901 - [patch] ooh323c: GCC 8: output truncated
      before terminating nul.
      (Reported by Alexander Traud)
 * ASTERISK-27872 - res_pjsip: Modified qualify_frequency
      doesn't effect until pjsip reload
      (Reported by Alexei Gradinari)
 * ASTERISK-27094 - res_fax: Deadlock when using Local channels
      and fax gateway
      (Reported by David Brillert)
 * ASTERISK-27848 - rtp: DTMF Breaks With telephony-event/16000
      (Reported by Dominic)
 * ASTERISK-25261 - Manager events for MeetMe have incorrectly
      documented key name 'Usernum' - should be 'User'
      (Reported by Francois Blackburn)
 * ASTERISK-27878 - [patch] tcptls.h: Repair ./configure --with-ssl=PATH.
      (Reported by Alexander Traud)
 * ASTERISK-27876 - [patch] tcptls: Allow OpenSSL configured with no-dh.
      (Reported by Alexander Traud)
 * ASTERISK-27874 - [patch] tcptls: Allow OpenSSL 1.1.x
      configured with enable-ssl3-method no-deprecated.
      (Reported by Alexander Traud)
 * ASTERISK-27845 - Codec-Change Re-INVITE during DTMF can cause
      marker bit error
      (Reported by Torrey Searle)
 * ASTERISK-27831 - res_rtp_asterisk: Add support for
      abs-send-time RTP extension
      (Reported by Joshua Colp)
 * ASTERISK-27863 - config/ast_destroy_realtime_fields:
      successful DELETE is treated as failed
      (Reported by Alexei Gradinari)
 * ASTERISK-27865 - [patch]: tcptls: Repair ./configure --with-ssl=PATH.
      (Reported by Alexander Traud)
 * ASTERISK-27760 - Asterisk ODBC Voicemail Prompt storage fails
      with recent MariaDB version.
      (Reported by Nic Colledge)
 * ASTERISK-27853 - Incorrect error reported when
      leaving/retrieving a ODBC voicemail
      (Reported by Nic Colledge)
 * ASTERISK-27726 - chan_mobile: presents incorrect inbound
      Caller-ID names
      (Reported by Brian)
 * ASTERISK-27861 - [patch] res_pjsip_endpoint_identifier_ip:
      Unregister the module for headers.
      (Reported by Alexander Traud)
 * ASTERISK-27860 - [patch] res_pjsip: Register
      pjsip_transport_management not externally but internally.
      (Reported by Alexander Traud)
 * ASTERISK-27852 - cli: "manager show settings" mislabels HTTP
      timeout as being minutes.
      (Reported by Corey Farrell)
 * ASTERISK-27824 - Fix issues exposed by GCC 8
      (Reported by George Joseph)
 * ASTERISK-27850 - [patch] rtp_engine: Allow Media Formats with
      add_static_payload(-1) on egress again.
      (Reported by Alexander Traud)
 * ASTERISK-27811 - [patch] sip_to_pjsip: Enable python3 compatibility.
      (Reported by Alexander Traud)
 * ASTERISK-27841 - digest over for manager (ami) over http
      fails on too long uris
      (Reported by Jaco Kroon)
 * ASTERISK-26570 - Macro allows an infinite loop of dialplan
      inclusion resulting in a crash
      (Reported by Tzafrir Cohen)
 * ASTERISK-27801 - Asterisk got stuck while enabling "ari set
      debug all on"
      (Reported by shaurya jain)
 * ASTERISK-27795 - chan_sip: one way / no audio with srtp
      (Reported by Florian Kaiser)
 * ASTERISK-27800 - One way audio when calling from Asterisk(sip
      trunk) to another number where both are connected to a SBC using
      TLS+SRTP
      (Reported by Artur Pires)
 * ASTERISK-26806 - pjsip_options: rework to make more efficient
      (Reported by Kevin Harwell)
 * ASTERISK-27814 - translate: interpolated frames are not
      passed through
      (Reported by Kevin Harwell)
 * ASTERISK-27812 - When the  ooh323 debug is on there is no
      ringing signal to incoming calls via H323 trunk.
      (Reported by Dimos)
 * ASTERISK-26893 - No "alert" or "progress" in chan_ooh323 if
      debug is enabled only on the module
      (Reported by Marco Giordani)
 * ASTERISK-27639 - [patch] BuildSystem: Enable IMAP storage on
      FreeBSD and DragonFly BSD.
      (Reported by Alexander Traud)
 * ASTERISK-27804 - bridge_softmix / app_confbridge: Add support
      for combining REMB reports
      (Reported by Joshua Colp)
 * ASTERISK-27418 - app_confbridge: "core show profile bridge"
      does not output "sfu" when video_mode is sfu
      (Reported by Carlos Chavez)
 * ASTERISK-27808 - [patch] chan_vpb: Avoid GNU old-style field
      designator extension.
      (Reported by Alexander Traud)

Improvements made in this release:
-----------------------------------
 * ASTERISK-27929 - [patch] BuildSystem: Enable autotools in Solaris 11.
      (Reported by Alexander Traud)
 * ASTERISK-27752 - Ten seconds of silence after mp3 playback
      (Reported by Sam Wierema)
 * ASTERISK-27910 - [patch] res_rtp_asterisk: Allow OpenSSL
      configured with no-deprecated.
      (Reported by Alexander Traud)
 * ASTERISK-27906 - [patch] res_crypto: Allow OpenSSL configured
      with no-deprecated.
      (Reported by Alexander Traud)
 * ASTERISK-27877 - app_confbridge: Add talking indicator for
      ConfBridgeList AMI response
      (Reported by William McCall)
 * ASTERISK-27873 - documentation: Error on wiki description of
      Asterisk 13 "MeetmeMute" event
      (Reported by Alessandro Polidori)
 * ASTERISK-27846 - ast_coredumper: Fix OUTPUT directory
      (Reported by Ted G)
 * ASTERISK-27867 - [patch] libasteriskssl: Allow OpenSSL 1.0.2
      configured with no-deprecated.
      (Reported by Alexander Traud)
 * ASTERISK-27796 - res_hep: Allow create_address to resolve a
      provided hostname
      (Reported by Sebastian Gutierrez)
 * ASTERISK-27820 - [patch] Add DragonFly BSD.
      (Reported by Alexander Traud)
 * ASTERISK-27793 - cppcheck identifies redundant "if"
      (Reported by Ilya Shipitsin)

For a full list of changes in this release, please see the ChangeLog:
http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-15.5.0
2021-01-17 08:32:40 +00:00
wiz
d02b4b5146 doc: Updated sysutils/hal to 0.5.14nb26 2021-01-17 08:14:22 +00:00
wiz
d86fda8038 hal: remove gtk-doc documentation to fix build with autoconf 2.70
Remove unconditional libblkid include, it is already included for Linux
and not needed on NetBSD.

Bump PKGREVISION.
2021-01-17 08:14:12 +00:00
adam
5374381e8b py-mezzanine: mark as incompatible with Python 2.7 2021-01-17 08:11:20 +00:00
wiz
ec9e221012 py-matplotlib: Bump PKGREVISION for dependency change. 2021-01-17 07:40:29 +00:00
mef
f0e1c9b347 (graphics/py-matplotlib) Modify setup.cfg to use System qhull, also 2021-01-17 05:19:33 +00:00
mef
bbe543dad1 (graphics/py-matplotlib) Add setup.cfg to use System freetype, tks joerg@ 2021-01-17 05:14:41 +00:00
pin
ce98d85bb0 doc: Updated sysutils/onefetch to 2.9.1 2021-01-16 21:53:24 +00:00
pin
0b5c4fdb64 sysutils/onefetch: update to 2.9.1
-Update dependencies and fix serde related build failure @Byron
2021-01-16 21:53:02 +00:00
riastradh
678f9d2fef doc: Fix verb.
Need to use CTYPE=Added, not CCTYPE=Added.
2021-01-16 21:33:54 +00:00
riastradh
5927bca1dd doc: py-google-i18-address, py-dict2xml, py-xml2rfc, ruby-kramdown-rfc2629 2021-01-16 21:25:04 +00:00
triaxx
9a7d53c444 doc: Updated chat/ejabberd to 20.12nb1 2021-01-16 21:19:50 +00:00
adam
d298b01edc Updated devel/py-joblib, devel/py-pyelftools 2021-01-16 21:19:34 +00:00
triaxx
8906079b52 ejabberd: Fix spool directory for ejabberdctl
pkgsrc changes:
---------------
  * The spool directory is set to ${VARBASE}/spool/ejabberd by pkgsrc but
    ejabberdctl used ${VARBASE}/lib/ejabberd
  * Bump revision
2021-01-16 21:19:32 +00:00
adam
84e0173527 py-pyelftools: updated to 0.27
Version 0.27
- Print addend wfor RELA relocations without symbol
- Implement symbol lookup for {GNU,}HashSection
- Major rewrite of expression parsing
- Cashed random access to CUs and DIEs
- GNU expressions
- Support parsing LSDA pointers from FDEs
- Add support for DWA_OP_GNU_push_tls_address in expressions
- Some initial support for AArch64 little-endian
- Support for ELF files with a large number of sections
- Some minimal support for DWARFv1
- Many small bug fixes; see git log.
2021-01-16 21:18:55 +00:00