2009/02/24: version 3.0.0 = tag release-3-0-0
6754: Fix local file access bug in internal http server
- this is an urgent security related bug-fix and effects
all MLDonkey versions >= 2.8.4
6752: Optimized implementation of the ip_set module (cbah)
6736: Add/fix some copyright texts
- Drop maintainership
- Fix a reference to /usr/pkg that was committed by accident in a file
[hi joerg!]
- Remove MESSAGE because it's about NetBSD 1.6 and older
- Add USE_DESTDIR support
1.3.0: released 2005-08-03
- disable Van Jacobson compression by default [Pokrywka]
- prototype packet buffering and reordering [Cameron/Anonymous]
- comply with RFC2637 on echo wait and idle wait parameters [Brox]
- new pptpd-logwtmp-strip-domain option [Cameron]
- defer writes to pty until pppd has set it up properly [Cameron]
- process initial packet length header properly [Beregszaszi]
- ignore ENETDOWN and ENXIO on sendto in bcrelay [Cameron]
- add section on debugging to pptpd.8 [Mueller]
1.2.3: released 2005-02-17
- error check critical dup2 calls [Cameron]
- performance, use writev() if available, avoiding memcpy() [Sundberg]
- compilation fix for gcc old versions [Cameron]
1.2.2: released 2005-01-05
- fix deadlock hang due to syslog(3) called by signal handler [Cameron]
- turn off logging to stderr, to prevent loopback [Hall]
* From schedctl(8) of NetBSD-5-RC2, setting of priority for the process running
at SCHED_OTHER policy is not allowed, so change to skip if SCHED_OTHER is specified.
* Use sched_get_priority_min() instead of hard coded DEFAULT_SCHED_PARAM (= 0).
* Ajust return code as the "Returns:" section in this function's comment.
sched_setscheduler(3) return the previous policy if succeed, it may not be 0.
Bump PKGREVISION.
9.9.1 [STABLE] 2009/01/22 fixes and M17N extension
9.9.0 [STABLE] 2008/11/24 stable version
9.9.0 CAPSKEY and HTMUX
9.8.6 restriction (MITM, VSAP) and fixes (SSL, CFI, HTTP cache)
9.8.2 name based reverse proxy and NAT based transparent proxy
9.8.2 porting to Windows Mobile/CE, SSH/Telnet gateway
9.8.1 minor fixes and mail routing to MX
9.8.0 clustering of origin/proxy servers, SSL Server Name Indication
Hopefully this fixes PR pkg/40441 as well.
- Add USE_DESTDIR support
- Silence a pkglint warning
- Drop maintainership
Changes:
* cleanup: #ifdefed dump_a_txt() properly so it will not be compiled
if --disable-master-dump was specified.
* implement "base template" ($=) feature.
* portability and readability fixes from Victor Duchovni
* added configure test for inline and __inline keywords, and only
use #warning keyword if __GNUC__ is defined (more portability fixes
from Victor Duchovni)
* misc type conversions here and there, and change alignment in
mempool.c to be sizeof(void*) instead of sizeof(int), to help
64bit platforms. Thanks to Mike Quintero for an excellent
bugreport.
* bugfix: combined dataset - improper return of query() routine in some
cases
* internal code reorg:
- move firstword[_lc]() to _util.c
- use two structs instead of a set of 2-element arrays in dnset
* bugfix: lowercase base zone names given on command line and in `combined'
dataset, or else they wont be recognized in queries
- Drop maintainership
- Use an option group for libnet version
- Add USE_DESTDIR support
v1.23 Feb 23 2008
- fixed remotely triggerable NULL dereference in ip_fragment.c
- fix DLT_PRISM_HEADER linkoffset calculation
- check for DATA_FRAME_IS_QOS in wireless frames
- free queued tcp segments with too old seq
v1.22 Jul 22 2007
- in TCP stream, the byte with absolute offset 0 was treated as urgent data;
fixed
- DLT_IEEE802_11_RADIO handling
- added a few missing checks for failed malloc
v1.21 May 10 2006
- more externals to access libnids' intrinsics from the outside
- nids_unregister_*()
- UDP checksumming fix (0 is not an error according to RFC768)
- nids_params.tcp_workarounds
- nids_params.multiproc and queue_limit: merged a patch which creates a
separate thread for packet capture;
- in killtcp.c, send two more RST packets (required because of MS05-019
patch)
- glibc 2.4 syslog.h disaster workaround
Adds support for Signature Version 2 for increased security with EC2, SQS, SDB
Add support for Regions in EC2
Fixes Issue 172, Issue 178, Issue 180, Issue 181, Issue 182
Fixes issue 165, issue 172, issue 173, issue 174, issue 176, issue 177
Adds initial support for CloudFront (ahem) service
Fixes stupid and dangerous copy/paste error in SDB support.
Support for EBS, QueryWithAttributes, lots of bugfixes.
--- 3.0.44 2009/02/17
List supported encodings in man page for yaz-iconv.
Fixed missing SSL libs for --libs output
Re-established OID record syntax application-xml. Nobody should use it
but we don't want to change soname because of this symbol being absent.
**** 0.65 January 26, 2009
Fix rt.cpan.org #41076
When the AAAA object was constructed with new_from_hash with an
address containing the "::" shorthand notation normalization was
not done properly.
Fix rt.cpan.org #42375
Typo in Win32.pm Registry root.
**** 0.64 December 30, 2008
Feature rt.cpan.org #36656
Added support for the APL record (RFC 3123)
The module consists of a list of Address Prefix Item objects
as defined in the Net::DNS::RR::APL::ApItem class.
NOTE: Class and its interface may be subject to change.
Fix rt.cpan.org #11931 Wrong nameserver list handling in
Net::DNS::Resolver::Win32
The init method has been rewritten to be based on WIN32::IPhelper for
the selection of the domain and the IP addresses. This is believed to
be more portable than trying to fetch the data from the registry.
We still trying to get the searchlist from the registry.
WARNING: If you use Perl under WIN32 (eg ActivePerl or Strawberry Perl)
then your module dependency graph has changed drastically
Fix IPv6 modules
When IO::Socket::INET6 was available but Socket6 was not the code would
recurse to infinity.
Fix rt.cpan.org #21757 and Feature: Connectivity during test
Addition of --no-IPv6-tests and --IPv6-tests option in Makefile.PL.
Note: This causes two questions to be asked when building the
Makefile instead of one.
Besides the test suites are constructed so that all the connectivity testing
happen in 001-connectivity.t and inavailability of connectivity over a certain
transport is signalled over files t/online.disabled and t/IPv6.disabled respectivly.
Both files are removed by t/99-cleanup
Fix rt.cpan.org #34511
Priming query logic contained unneeded recursion.
Now also fals back to hardcoded hints if there are no nameservers whatsoever.
Fix rt.cpan.org #38390 and 37089
Added CD and AD bit control to the resolver.
The CD flag defaults to being unset and the AD flags is set by default
whenever DNSSEC is available.
Both flags default to unset in absence of DNSSEC.
Fix rt.cpan.org #37282
Improved error reporting during client disconnect from the nameserver
NOTE rt.cpan.org # 40249
Release 0.62 introduced a feature to parse data inside a packet only
when needed. This can the following to happen:
Eception: corrupt or incomplete data at
/usr/lib/perl5/Net/DNS/RR.pm line 510.
caught at -e line 1
This may happen when you have undefined your packet data before all the
sections have been fully parsed. Such as in:
$packet = Net::DNS::Packet->new(\$data);
undef($data);
The workaround is to force parcing by calling the methods that
parse the data. e.g.
$packet = Net::DNS::Packet->new(\$data);
$packet->answer; $packet->additional; $packet->authority;
undef ($data)
Fix rt.cpan.org # 41076 and # 41071
Net::DNS::RR->new_from_hash function would not normalize the content
of the data so that a method getting a string representation would
get inconsistent results depending on whether a RR was created from
a string of from a hash.
Fix rt.cpan.org # 41296
Compression buggy for large packets. Fix by Kim Minh.
Fix rt.cpan.org # 35752
Perl 5.10.0 gave a number of issues on several platforms, prefering
XSLoader over Dynaloader seemed to fix those.
Bug rt.cpan.org #34510
Buggy setting of "Recursion too deep, aborted" corrected.
Feature (rt.cpan.org #39284)
The ReplyHandler now also receives a variable with an annonymous has with the connection details. Variables
supplied to the Reply handler are: $qname, $qclass, $qtype, $peerhost, $query, $conn
The hash referenced by $conn contains the following buckets: sockhost, sockport, peerhost, and peerport.
Feature t/08-online.t and t/10-recurse.t
In particular environments a query for a.t. will resolve and or
middleboxes will replace DNS packet content for queries to the root.
A bunch of test is skipped when this (broken) environment is
detected.
Feature/Bug rt.cpan.org #22019
The initial fix for rt 22019 was to strip a trailing dot from all
attributes that where povided as argument for the
Net::DNS::RR::new_from_hash function. We have introduced
Net::DNS::stripdot, a function that will strip the dots of domain
names, taking into account possible escapes (e.g. labels like
foo\\\..). As a side effect the new_from_string method will now
convert possible spaces that are not trapped by some of the
new_from_string functions and convert them to \032 escapes.
For information: The internal storage of domain names is using
presentation format without trailing dots.
Bug
@EXPORT and @EXPORT_OK moved to a BEGIN block so that Net::DNS::SEC
can make use of exported functions
Feature/Bug
The Notify handler introduced in 0.63 did not set the OPCODE on the
reply appropriately. This has been solved generically by allowing the
"Headermask" that is returned as 4th element by the reply or notify
handler in the nameserver also allows for the opcode to be set.
e.g. as in return ("NXDOMAIN",[],[],[],{ opcode => "NS_NOTIFY_OP" }
);
Pkgsrc changes:
o Add new required dependencies
Upstream changes:
0.50 Wed Jan 21 10:42:00 GMT 2009
- add support for an expires header when putting an object to
Net::Amazon::S3::Client::Object
- make all the classes immutable
- add query_string_authentication_uri() to
Net::Amazon::S3::Client::Object, suggested by Meng Wong
0.49 Tue Jan 13 09:04:42 GMT 2009
- add support for listing a bucket with a prefix to
Net::Amazon::S3::Client::Bucket
feature 2.1 release. It could make netatalk1 package obsolete.
* Use RCD_SCRIPTS instead of substituting a Makefile to be fix pkglint
errors.
* Move PKG_OPTION part to options.mk
* From patch-aa, remove last change which made by
configure/gnu-configure.mk.
* Change content of MESSAGE from covered by pkginstall framework to
caution about migration from netatalk 1.x.
Approved by MAINTAINER and PKGREVISION.
--- 3.0.42 2009/02/02
YAZ' RPM spec works for both SUSE Linux Enterprise and RedHat Fedora.
Added member named_result_sets for init handler struct for the GFS. This
allows a server to disable named result sets.
Removed OID record syntax application-xml.
Added support for rule-based transliterator for ICU wrapper of YAZ.
Fixed bug #1902: yaz-icu XML output.
Make YAZ checks Emacs friendly.
BITSTRING value shows value. Bug #2346.
ISO2709 decoding: skip control characters from indicator data.
Omit sort key by default in yaz-icu's output.
Allow combined single char options (again) for YAZ' options function.
Utility yaz-marcdump got option to display YAZ version (-V).
Allow YAZ to use ICU 3.4.
Added new ICU test case which illustrates removal of diacritics.
Version 2.1.6
(February 19, 2009)
User-visible changes:
* Renamed the following options
- --noproxy => --no-proxy
- --noextract => --no-extract
- --nologin => --no-login
* Butchered --help output
- much less verbose now
- relocated manual page data to clive.pod
* Removed --manual option
* Obsoleted "play" and "rencode" config keys in "commands" section
* Added --exec option which resembles cclive's --exec command
* Removed --play, --noplay, --rencode and --norencode options
- use --exec instead
* Changed --paste short option from '-x' to '-p'
* Removed wmv format (breakcom)
- persistant HTTP/404 (not found) error
Version 2.1.5
(February 6, 2009)
User-visible changes:
* Fixed sevenload support
Version 2.1.4
(February 1, 2009)
User-visible changes:
* Fixed Youtube login which sometimes reported failed attempts as OK
- Youtube defaults web interface language based on users ip
- clive looks for English words in the post-login page to confirm login
* Tweaked --version output
- At least Ubuntu 8.1 sets __attribute__((warn_unused_result)) on fwrite()
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=25509
which means (void)fwrite(...) will *always* generate a warning, so
set -Wno-error to bypass this in Linux.sys.mk
- Ubuntu 8.1 also jumps through hoops to ensure ARG_MAX is *undefined*, so
work around this in tnftp and libnbcompat
Patch provided by Christian Sturm and back to maintainer.
Changes in version 0.2.0.34 - 2009-02-08
o Security fixes:
- Fix an infinite-loop bug on handling corrupt votes under certain
circumstances. Bugfix on 0.2.0.8-alpha.
- Fix a temporary DoS vulnerability that could be performed by
a directory mirror. Bugfix on 0.2.0.9-alpha; reported by lark.
- Avoid a potential crash on exit nodes when processing malformed
input. Remote DoS opportunity. Bugfix on 0.2.0.33.
- Do not accept incomplete ipv4 addresses (like 192.168.0) as valid.
Spec conformance issue. Bugfix on Tor 0.0.2pre27.
o Minor bugfixes:
- Fix compilation on systems where time_t is a 64-bit integer.
Patch from Matthias Drochner.
- Don't consider expiring already-closed client connections. Fixes
bug 893. Bugfix on 0.0.2pre20.
