Commit graph

7434 commits

Author SHA1 Message Date
ryoon
c777602309 Update to 5.18
Changelog:
2014-03-26  11:25  Christos Zoulas <christos@zoulas.com>

	* release 5.18

2014-03-15  17:45  Christos Zoulas <christos@zoulas.com>

        * add fmtcheck(3) for those who don't have it

2014-03-14  15:12  Christos Zoulas <christos@zoulas.com>

	* prevent mime entries from being attached to magic
	  entries with no descriptions

	* adjust magic strength for regex type

	* remove superfluous ascmagic with encoding test

2014-03-06  12:01  Christos Zoulas <christos@zoulas.com>

	* fix regression fix echo -ne "\012\013\014" | file -i -
	  which printed "binary" instead of "application/octet-stream"

	* add size_t overflow check for magic file size

2014-02-27  16:01  Christos Zoulas <christos@zoulas.com>

	* experimental support for matching with CFD CLSID

2014-02-18  13:04  Kimmo Suominen (kimmo@suominen.com)

	* Cache old LC_CTYPE locale before setting it to "C", so
	  we can use it to restore LC_CTYPE instead of asking
	  setlocale() to scan the environment variables.
2014-04-04 21:38:38 +00:00
obache
5def0460c0 revert.
It may hide build failure on NetBSD, but not resolve real issues,
furthermore, it may introduce build failure for other platforms.
2014-04-03 13:02:59 +00:00
wiz
55cb367941 Remove obsolete patch. 2014-04-03 09:10:44 +00:00
wiz
0741105f52 Update to 1.8.0:
D-Bus 1.8.0 (2014-01-20)
==

The “Wolverine distrusts my printer” release.

This starts a new stable branch. The 1.6.x branch is now considered to be
outdated, and will only receive fixes for serious bugs such as security
flaws. The 1.4.x and 1.2.x branches no longer have upstream support and
are unlikely to get any more releases, but if distributors still need to
support them, please share security patches via upstream.

Summary of changes since 1.6.x:

• libdbus always behaves as if dbus_threads_init_default() had been called
  (thread-safety by default)
• new dbus-run-session tool, replacing certain misuses of dbus-launch
• dbus-monitor can talk to outdated versions of dbus-daemon again
• new org.freedesktop.DBus.GetConnectionCredentials method
• GetConnectionUnixProcessID also works correctly on Windows, returning
  the Windows process ID
• GetConnectionWindowsSID returns the correct SID on Windows
• expat is required, libxml2 can no longer be used as a substitute
• the userDB cache is required, and cannot be disabled
• a 64-bit integer type (either int, long, long long or _int64) is required
• better systemd-journald integration on Linux
• fixed long-standing fd and array leaks when failing to parse a message
• fixed referenced-but-never-freed parent nodes (effectively memory leaks)
  when using certain object-path allocation patterns, notably in Avahi
• better defaults for Windows support
• better CMake support
• better portability to mingw32, FreeBSD, NetBSD, QNX and Hurd
• the source language for the man pages is now Docbook XML

Enhancements since 1.7.10:

• Enhance the CMake build system to check for GLib and compile/run
  a subset of the regression tests (fd.o #41252, #73495; Ralf Habacker)

Fixes since 1.7.10:

• don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fd.o #72840,
  Ralf Habacker)

• fix compilation of systemd journal support on older systemd versions where
  sd-journal.h doesn't include syslog.h (fd.o #73455, Ralf Habacker)

• fix compilation on older MSVC versions by including stdlib.h
  (fd.o #73455, Ralf Habacker)

• Allow <allow_anonymous/> to appear in an included configuration file
  (fd.o #73475, Matt Hoosier)

Test behaviour changes since 1.7.10:

• If the tests crash with an assertion failure, they no longer default to
  blocking for a debugger to be attached. Set DBUS_BLOCK_ON_ABORT in the
  environment if you want the old behaviour.

• To improve debuggability, the dbus-daemon and dbus-daemon-eavesdrop tests
  can be run with an external dbus-daemon by setting
  DBUS_TEST_DAEMON_ADDRESS in the environment. Test-cases that require
  an unusually-configured dbus-daemon are skipped.

D-Bus 1.7.10 (2014-01-06)
==

The “weighted companion cube” release.

This is a release candidate for D-Bus 1.8.

D-Bus Specification 0.23:

• don't require messages with no INTERFACE to be dispatched
  (fd.o #68597, Simon McVittie)

• document "tcp:bind=..." and "nonce-tcp:bind=..." (fd.o #72301,
  Chengwei Yang)

• define "listenable" and "connectable" addresses, and discuss
  the difference (fd.o #61303, Simon McVittie)

Enhancements:

• support printing Unix file descriptors in dbus-send, dbus-monitor
  (fd.o #70592, Robert Ancell)

• don't install systemd units if --disable-systemd is given
  (fd.o #71818, Chengwei Yang)

Fixes:

• don't leak memory on out-of-memory while listing activatable or
  active services (fd.o #71526, Radoslaw Pajak)

• fix undefined behaviour in a regression test (fd.o #69924, DreamNik)

• escape Unix socket addresses correctly (fd.o #46013, Chengwei Yang)

• on SELinux systems, don't assume that SECCLASS_DBUS, DBUS__ACQUIRE_SVC
  and DBUS__SEND_MSG are numerically equal to their values in the
  reference policy (fd.o #88719, osmond sun)

• define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW < 4 headers
  (fd.o #71366, Matt Fischer)

• define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h and
  winsock2.h (fd.o #71405, Matt Fischer)

• do not return failure from _dbus_read_nonce() with no error set,
  preventing a potential crash (fd.o #72298, Chengwei Yang)

• on BSD systems, avoid some O(1)-per-process memory and fd leaks in kqueue,
  preventing test failures (fd.o #69332, fd.o #72213; Chengwei Yang)

• fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix sockets,
  which doesn't do anything anyway on at least Linux and FreeBSD
  (fd.o #69492, Simon McVittie)

• fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL from
  sendmsg() with SCM_CREDS (retrying with plain send()), and looking
  for credentials more correctly (fd.o #69492, Simon McVittie)

• ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
  getting mixed up in XDG/systemd "user sessions" (fd.o #61301,
  Simon McVittie)

• refresh cached policy rules for existing connections when bus
  configuration changes (fd.o #39463, Chengwei Yang)

D-Bus 1.7.8 (2013-11-01)
==

The “extreme hills” release.

Dependencies:

• If systemd support is enabled, libsystemd-journal is now required.

Enhancements:

• When activating a non-systemd service under systemd, annotate its
  stdout/stderr with its bus name in the Journal. Known limitation:
  because the socket is opened before forking, the process will still be
  logged as if it had dbus-daemon's process ID and user ID.
  (fd.o #68559, Chengwei Yang)

• Document more configuration elements in dbus-daemon(1)
  (fd.o #69125, Chengwei Yang)

Fixes:

• Don't leak string arrays or fds if dbus_message_iter_get_args_valist()
  unpacks them and then encounters an error (fd.o #21259, Chengwei Yang)

• If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
  disallowed method calls to the audit log, fixing a regression in 1.7.6
  (fd.o #49062, Colin Walters)

• path_namespace='/' in match rules incorrectly matched nothing; it
  now matches everything. (fd.o #70799, Simon McVittie)

D-Bus 1.7.6 (2013-10-09)
==

The “CSI Shrewsbury” release.

Build-time configuration changes:

• Directory change notification via dnotify on Linux is no longer
  supported; it hadn't compiled successfully since 2010 in any case.
  If you don't have inotify (Linux) or kqueue (*BSD), you will need
  to send SIGHUP to the dbus-daemon when its configuration changes.
  (fd.o #33001, Chengwei Yang)

• Compiling with --disable-userdb-cache is no longer supported;
  it didn't work since at least 2008, and would lead to an extremely
  slow dbus-daemon even it worked. (fd.o #15589, #17133, #66947;
  Chengwei Yang)

• The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
  assertions. It has been renamed to DBUS_DISABLE_ASSERT to be consistent
  with the Autotools build system. (fd.o #66142, Chengwei Yang)

• --with-valgrind=auto enables Valgrind instrumentation if and only if
  valgrind headers are available. The default is still --with-valgrind=no.
  (fd.o #56925, Simon McVittie)

Dependencies:

• Platforms with no 64-bit integer type are no longer supported.
  (fd.o #65429, Simon McVittie)

• GNU make is now (documented to be) required. (fd.o #48277, Simon McVittie)

• Full test coverage no longer requires dbus-glib, although the tests do not
  exercise the shared library (only a static copy) if dbus-glib is missing.
  (fd.o #68852, Simon McVittie)

Enhancements:

• D-Bus Specification 0.22
  · Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fd.o #54445, Simon)
  · Fix example .service file (fd.o #66481, Chengwei Yang)
  · Don't claim D-Bus is "low-latency" (lower than what?), just
    give factual statements about it supporting async use
    (fd.o #65141, Justin Lee)
  · Document the contents of .service files, and the fact that
    system services' filenames are constrained
    (fd.o #66608; Simon McVittie, Chengwei Yang)

• Be thread-safe by default on all platforms, even if
  dbus_threads_init_default() has not been called. For compatibility with
  older libdbus, library users should continue to call
  dbus_threads_init_default(): it is harmless to do so.
  (fd.o #54972, Simon McVittie)

• Add GetConnectionCredentials() method (fd.o #54445, Simon)

• New API: dbus_setenv(), a simple wrapper around setenv().
  Note that this is not thread-safe. (fd.o #39196, Simon)

• Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer connection,
  like --address=ADDRESS in previous versions) and dbus-send --bus=ADDRESS
  (connect to a given bus, like dbus-monitor --address=ADDRESS).
  dbus-send --address still exists for backwards compatibility,
  but is no longer documented. (fd.o #48816, Andrey Mazo)

• Windows-specific:
  · "dbus-daemon --nofork" is allowed on Windows again. (fd.o #68852,
    Simon McVittie)

Fixes:

• Avoid an infinite busy-loop if a signal interrupts waitpid()
  (fd.o #68945, Simon McVittie)

• Clean up memory for parent nodes when objects are unexported
  (fd.o #60176, Thomas Fitzsimmons)

• Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
  documented. Previously, it assumed its second parameter was TRUE.
  (fd.o #69165, Chengwei Yang)

• Escape addresses containing non-ASCII characters correctly
  (fd.o #53499, Chengwei Yang)

• Document <servicedir> search order correctly (fd.o #66994, Chengwei Yang)

• Don't crash on "dbus-send --session / x.y.z" which regressed in 1.7.4.
  (fd.o #65923, Chengwei Yang)

• If malloc() returns NULL in _dbus_string_init() or similar, don't free
  an invalid pointer if the string is later freed (fd.o #65959, Chengwei Yang)

• If malloc() returns NULL in dbus_set_error(), don't va_end() a va_list
  that was never va_start()ed (fd.o #66300, Chengwei Yang)

• fix build failure with --enable-stats (fd.o #66004, Chengwei Yang)

• fix a regression test on platforms with strict alignment (fd.o #67279,
  Colin Walters)

• Avoid calling function parameters "interface" since certain Windows headers
  have a namespace-polluting macro of that name (fd.o #66493, Ivan Romanov)

• Assorted Doxygen fixes (fd.o #65755, Chengwei Yang)

• Various thread-safety improvements to static variables (fd.o #68610,
  Simon McVittie)

• Make "make -j check" work (fd.o #68852, Simon McVittie)

• Fix a NULL pointer dereference on an unlikely error path
  (fd.o #69327, Sviatoslav Chagaev)

• Improve valgrind memory pool tracking (fd.o #69326,
  Sviatoslav Chagaev)

• Don't over-allocate memory in dbus-monitor (fd.o #69329,
  Sviatoslav Chagaev)

• dbus-monitor can monitor dbus-daemon < 1.5.6 again
  (fd.o #66107, Chengwei Yang)

• Unix-specific:
  · If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fd.o #69026, Chengwei Yang)
  · If socket() or socketpair() fails with EINVAL or EPROTOTYPE,
    for instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fd.o #69073; Pino Toscano, Chengwei Yang)
  · Fix a file descriptor leak on an error code path.
    (fd.o #69182, Sviatoslav Chagaev)
  · dbus-run-session: clear some unwanted environment variables
    (fd.o #39196, Simon)
  · dbus-run-session: compile on FreeBSD (fd.o #66197, Chengwei Yang)
  · Don't fail the autolaunch test if there is no DISPLAY (fd.o #40352, Simon)
  · Use dbus-launch from the builddir for testing, not the installed copy
    (fd.o #37849, Chengwei Yang)
  · Fix compilation if writev() is unavailable (fd.o #69409,
    Vasiliy Balyasnyy)
  · Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fd.o #60340,
    Simon McVittie)
  · Make autogen.sh work on *BSD by not assuming GNU coreutils functionality
    (fd.o #35881, #69787; Chengwei Yang)
  · dbus-monitor: be portable to NetBSD (fd.o #69842, Chengwei Yang)
  · dbus-launch: stop using non-portable asprintf (fd.o #37849, Simon)
  · Improve error reporting from the setuid activation helper (fd.o #66728,
    Chengwei Yang)

• Windows-specific:
  · Remove unavailable command-line options from 'dbus-daemon --help'
    (fd.o #42441, Ralf Habacker)
  · Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fd.o #66060, Ralf Habacker)
  · Fix insufficient dependency-tracking (fd.o #68505, Simon McVittie)
  · Don't include wspiapi.h, fixing a compiler warning (fd.o #68852,
    Simon McVittie)

• Internal changes:
  · add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fd.o #66142, Chengwei Yang)
  · improve verbose-mode output (fd.o #63047, Colin Walters)
  · consolidate Autotools and CMake build (fd.o #64875, Ralf Habacker)
  · fix various unused variables, unusual build configurations
    etc. (fd.o #65712, #65990, #66005, #66257, #69165, #69410, #70218;
    Chengwei Yang, Vasiliy Balyasnyy)

D-Bus 1.7.4 (2013-06-13)
==

The “but is your thread-safety thread-safe?” release.

Security fixes:

• CVE-2013-2168: Fix misuse of va_list that could be used as a denial
  of service for system services. Vulnerability reported by Alexandru Cornea.
  (Simon)

Dependencies:

• The Windows version of libdbus now contains a C++ source file, used
  to provide global initialization when the library is loaded.
  gcc (mingw*) users should ensure that g++ is also installed.

• The libxml2-based configuration reader (which hasn't worked for 2.5 years,
  and was never the recommended option) has been removed. Expat is now a
  hard dependency.

Enhancements:

• It should now be safe to call dbus_threads_init_default() from any thread,
  at any time. Authors of loadable modules and plugins that use libdbus
  should consider doing so during initialization.
  (fd.o #54972, Simon McVittie)

• Improve dbus-send documentation and command-line parsing (fd.o #65424,
  Chengwei Yang)

Unix-specific:
  · dbus-run-session: experimental new tool to start a temporary D-Bus
    session, e.g. for regression tests or a text console, replacing
    certain uses of dbus-launch which weren't really correct
    (fd.o #39196, Simon)

Other fixes:

• In dbus-daemon, don't crash if a .service file starts with key=value
  (fd.o #60853, Chengwei Yang)

• Unix-specific:
  · Fix a crash similar to CVE-2013-2168 the first time we try to use syslog
    on a platform not defining LOG_PERROR, such as Solaris or QNX.
    This regressed in 1.7.0. (Simon)
  · Fix an assertion failure if we try to activate systemd services before
    systemd connects to the bus (fd.o #50199, Chengwei Yang)
  · Avoid compiler warnings for ignoring the return from write()
    (Chengwei Yang)

• Windows-specific:
  · Under cmake, install runtime libraries (DLLs) into bin/ instead of lib/
    so that Windows finds them (fd.o #59733, Ralf Habacker)

D-Bus 1.7.2 (2013-04-25)
==

The “only partially opaque” release.

Configuration changes:

• On non-QNX Unix platforms, the default limit on fds per message in the
  session bus configuration has reduced from 4096 to 1024. The default
  limit used on the system bus was already 1024. On QNX, both limits are
  reduced further, to 128.

Enhancements:

• D-Bus Specification 0.21
  · Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fd.o #63072,
    Simon McVittie)

Fixes:

• Diagnose incorrect use of dbus_connection_get_data() with negative slot
  (i.e. before allocating the slot) rather than returning junk
  (fd.o #63127, Dan Williams)

• Fix a cmake build regression since 1.7.0 (fd.o #63682; Ralf Habacker,
  Simon McVittie)

• Unix-specific:
  · On Linux, link successfully with glibc 2.17 (fd.o #63166, Simon McVittie)
  · Under systemd, log to syslog only, not stderr, avoiding duplication
    (fd.o #61399, #39987; Colin Walters, Dagobert Michelsen)
  · Under systemd, remove unnecessary dependency on syslog.socket
    (fd.o #63531, Cristian Rodríguez)
  · Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fd.o #63071, Dagobert Michelsen)
  · Allow use of systemd-logind without the rest of systemd
    (fd.o #62585, Martin Pitt)
  · When built with CMake, link to librt and use the right path for
    meinproc's XSLT stylesheets (fd.o #61637, Ralf Habacker)
  · Reduce the default limit on number of fds per message to 128 under
    QNX, working around an arbitrary OS limit (fd.o #61176, Matt Fischer)

• Windows-specific:
  · Do not claim that all bus clients have the dbus-daemon's credentials;
    pick up local TCPv4 clients' credentials (process ID and security
    identifier, i.e. user) using GetExtendedTcpTable() (fd.o #61787,
    Ralf Habacker)

D-Bus 1.7.0 (2013-02-22)
==

The "Disingenuous Assertions" release.

This is a new development release, starting the 1.7.x branch. D-Bus 1.6
remains the recommended version for long-term-supported distributions
or the upcoming GNOME 3.8 release.

Build-time configuration changes:

• The --with-dbus-session-bus-default-address configure option is no longer
  supported. Use the new --with-dbus-session-bus-connect-address and
  --with-dbus-session-bus-listen-address options instead. On Windows, you
  usually want them to have the same argument; on Unix, the defaults are
  usually correct.

• Similarly, the DBUS_SESSION_BUS_DEFAULT_ADDRESS CMake variable is no longer
  supported; use the new DBUS_SESSION_BUS_LISTEN_ADDRESS and
  DBUS_SESSION_BUS_CONNECT_ADDRESS variables instead.

• cmake/cross-compile.sh has been removed. Instead, please use a
  cross-toolchain file (-DCMAKE_TOOLCHAIN_FILE) as documented at
  <http://www.vtk.org/Wiki/CMake_Cross_Compiling>; or use Autotools
  as documented in "info automake Cross-Compilation", and set
  PKG_CONFIG_PATH appropriately.

Requirements:

• Man pages now require xmlto (or either xmlto or meinproc, if using CMake).
• man2html is no longer used.

Enhancements:

• D-Bus Specification 0.20
  · actually say that /org/freedesktop/DBus is the object that
    implements o.fd.DBus (fd.o #51865, Colin Walters)
  · various reorganisation for better clarity (fd.o #38252, Simon McVittie)
  · stop claiming that all basic types work just like INT32 (strings don't!)

• The "source code" for the man pages is now Docbook XML, eliminating
  the outdated duplicate copies used when building with CMake.
  (fd.o #59805; Ralf Habacker, Simon McVittie)

Fixes:

• In the activation helper, when compiled for tests, do not reset the system
  bus address, fixing the regression tests. (fd.o #52202, Simon)

• Fix building with Valgrind 3.8, at the cost of causing harmless warnings
  with Valgrind 3.6 on some compilers (fd.o #55932, Arun Raghavan)

• Merge <servicehelper> from system-local.conf if necessary (fd.o #51560,
  Krzysztof Konopko)

• Under CMake, prefer xmlto over meinproc (fd.o #59733, Ralf Habacker)

• Stop duplicating CMake's own logic to find libexpat
  (fd.o #59733, Ralf Habacker)

• Don't assume CMake host and build system are the same (fd.o #59733,
  Ralf Habacker)

• Avoid deprecation warnings for GLib 2.35 (fd.o #59971, Simon McVittie)

• Unix-specific:
  · Check for functions in libpthread correctly, fixing compilation on
    (at least) OpenBSD (fd.o #47239, Simon)
  · Don't leak temporary fds pointing to /dev/null (fd.o #56927,
    Michel HERMIER)
  · Update sd-daemon.[ch] from systemd (fd.o #60681)
  · Add partial support for QNX (fd.o #60339, fd.o #61176; Matt Fischer)

• Windows-specific:
  · The default session bus listening and connecting address is now
    "autolaunch:", which makes D-Bus on Windows interoperate with itself
    and GDBus "out of the box". Use the configure options and cmake variables
    described above if you require a different autolaunch scope.
    (fd.o #38201, Simon McVittie)
  · Avoid a CMake warning under Cygwin (fd.o #59401, Ralf Habacker)

• Create session.d, system.d directories under CMake (fd.o #41319,
  Ralf Habacker)
2014-04-03 09:09:06 +00:00
wiz
8630caeac3 Update to 1.0.35:
Changes since version 1.0.34:

   A bug in tarsnap 1.0.34 which could cause tarsnap to crash
   (segmentation fault or bus error) when encountering network
   glitches or outages is fixed.

   When tarsnap encounters "insane" filesystems (procfs and other
   similar synthetic filesystems which are not reasonable to
   archive), it now archives the filesystem mount point but by
   default does not recurse into the filesystem. Previous releases
   (since 1.0.26) did not archive the synthetic filesystem mount
   point.

Changes since version 1.0.33:

   Tarsnap now supports both IPv4 and IPv6.

   Tarsnap is now more resilient against short network glitches
   when it first connects to the Tarsnap server.

   Tarsnap now supports platforms with mandatory structure alignment
   (e.g., ARM OABI).

   Tarsnap now restores terminal settings if killed with ^C while
   reading a password or passphrase.

   Multiple minor bug fixes and cleanups.
2014-04-02 12:04:50 +00:00
wiz
b851af6106 + py-setproctitle 2014-03-31 14:03:18 +00:00
wiz
6d3ec77ad0 Import py27-setproctitle-1.1.8 as sysutils/py-setproctitle.
The library allows a process to change its title (as displayed by
system tools such as ps and top).

Changing the title is mostly useful in multi-process systems, for
example when a master process is forked: changing the children's
title allows to identify the task each process is busy with.  The
technique is used by PostgreSQL and the OpenSSH Server for example.
2014-03-31 14:03:03 +00:00
jakllsch
04ccb69a42 Consistently use DIOCGDINFO. 2014-03-30 23:58:19 +00:00
imil
d3f42ea644 Updated salt to 2014.1.1, numerous bug and security fixes
Details:

  * http://docs.saltstack.com/en/latest/topics/releases/0.16.4.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.0.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.1.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.2.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.3.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.4.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.5.html
  * http://docs.saltstack.com/en/latest/topics/releases/2014.1.1.html
2014-03-30 12:31:17 +00:00
prlw1
4a4c082b66 Fix build with gcc 4.8. 2014-03-29 09:05:51 +00:00
drochner
e567eae78d add patch from upstream (XSA-89) to fix:
Processing of the HVMOP_set_mem_access HVM control operations does not
check the size of its input and can tie up a physical CPU for extended
periods of time.
bump PKGREV
2014-03-28 16:07:08 +00:00
ryoon
c098f16246 Update to 4.87
Changelog:
4.85		September 27, 2011
		John Dzubera <Zube@CS.ColoState.EDU> kindly provided a patched
		Solaris 9 test system with the lgrp_root conflict and I was
		able to devise an automatic work-around for the conflict.  The
		special note in .../dialects/sun/machine.h was removed and
		the 17.28.1 FAQ entry was modified to reflect the update.

		Added a Solaris 11 work-around for a typedef problem with
		<sys/mutex.h>.  Carson Gaspar <carson@taltos.org> reported
		the problem and supplied the work-around.

		Added support for FreeBSD 7.4 and 8.2; tested on systems
		provided by Larry Rosenman <ler@lerctr.org>.

		Added support for 32 bit Solaris 11 lsof with mods supplied
		by Jan Wortelboer <J.H.P.Wortelboer@uva.nl>.

		Added Solaris 11 support for using an alternate genunix
		location.  Bill Goodridge <bill@its.brooklyn.cuny.edu>
		reported the alternate location.

		Added further Linux cross configuration support to lsof's
		Configure script.  The additional support was supplied by
		Grant Erickson <erick205@umn.edu>.  See the descriptions of
		the LINUX_* environmen  variables in 00XCONFIG for more
		information.  Tested lsof on Linux kernel 2.6.32 and picked
		some lint that surfaced during the test.

		Added fixes and changes for Apple Mac OS X 10.6, provided by
		Allan Nathanson <ajn@apple.com>.  Allan also provided a test
		system.

		Tested on FreeBSD 6.4 i386, using a test system provided by
		Terry Kennedy <TERRY@tmk.com>.  Updated for recent FreeBSD ZFS
		changes on an 8.2 amd64 test system also provided by Terry.

		Changed documentation to indicate FreeBSD 7.x is no longer
		supported, since I no longer have a test system.

		Made some changes to the lsof man page, suggested by Navid
		<evi1m4chine@googlemail.com>.

		Added compensation for Solaris 10 systems that have patch
		144488-10.  The patch requires that the new header file
		<sys/socket_proto.h> be included while _KERNEL is defined.
		Brett Bartick <Brett.bartick@nomura.com> reported the problem
		first, followed by Stuart Anderson <anderson@ligo.caltech.edu>.
		Michael Hocke <michael.hocke@nyu.edu> suggested a work-around
		which I refined to limit it to the specific Solaris 10 instance
		and then tested on a system provided by Charles Stephens
		<cfs@cowlabs.com>

		Added the +|-e option for Linux.  It exempts file systems
		named by path from function calls that might block in the
		kernel -- i.e., stat(2) and lstat(2), and when the +e form
		is used, readlink (2).  The new packager of lsof for the
		Linux Fedora and RHEL distributions, Peter Schiffer
		<pschiffe@redhat.com>, asked for the feature so it could
		be used with Clearcase file systems, whose implementation
		can block stat(2) calls.  I consider this feature very risky
		and easy to misuse -- e.g., specifying the file system as
		'/' would exempt all file systems.  I don't intend to
		propagate this option to any other UNIX dialect that lsof
		currently supports.

		Made FreeBSD 9 adjustment.

		Fixed a Linux bug that prevented the display of paths for
		abstact UNIX sockets.  Masatake Yamato <yamato@redhat.com>
		reported the bug and supplied a patch.

		Added compensation for the removal of RPC header files from
		GlibC 2.14 for Linux.  Marek Behun <kabel@blackhole.sk>
		reported the problem and supplied a patch.

		Added support for Linux Netlink protocol.  Masatake Yamato
		requested the support and supplied a patch.  Peter Schiffer
		<pschiffe@redhat.com> provided a test system.

		Corrected Linux UDP6-lite path.  The error was reported by
		Masatake Yamato and he also supplied a patch.

4.86		April 10, 2012
		Lsof for AIX is no longer supported on any versions of that
		operating system.

		Added information about the clang compiler for FreeBSD to the
		FAQ.

		Corrected an arg.c bug in the accumulation of +|-e option
		values, reported by Peter Schiffer <pschiffe@redhat.com>.
		This correction was supplied as a patch to revision 4.85.

		Enabled FreeBSD 10 support and tested it there on a system
		provided by Larry Rosenman <ler@lerctr.org>.

		Updated for latest Solaris 11 with patches supplied by
		Carson Gaspar <carson@taltos.org>.  Carson supplied a test
		system.

		Adjusted Linux file system search method to compensate for
		NFS mounts that have duplicate device numbers.  The problem
		was reported by Peter Schiffer <pschiffe@redhat.com>, who
		provided a test system.

		At the request of Peter Schiffer <pschiffe@redhat.com>, added
		support for Linux SCTP socket files.  Peter provided a test
		system.  Applied a warning patch supplied by Peter.

		Added support for Mac OS X 10.7 (Lion), provided by Allan
		Nathanson <ajn@apple.com>.  Allan also supplied a test
		system.

		Enabled FreeBSD 8.3 support and tested it there on a system
		provided by Larry Rosenman <ler@lerctr.org>.

		Corrected the FAQ information on ZFS with Solaris 10 after
		Steven Blackmon <stblackm@cisco.com> and Prasad Jampala
		<jampalp@cisco.com> pointed out that it was incorrect --
		i.e., outdated by the libctf changes at revision 4.83.

		Added code to handle a Linux NFS-mounted root.  Jia He
		<hejianet@linux.vnet.ibm.com> reported the need for this.

4.87		January 2, 2013
		Added an entry to 00FAQ about lsof behavior when the
		HASSECURITY and HASNOSOCKSECURITY options are defined.
		Carson Gaspar <carson@taltos.org> pointed out the need
		for this clarification.

		Added a work-around for a missing definition of mach_port_t
		in Darwin 9 (Mac OS/X 10.5.8).  The work-around was supplied
		by Jim Reid <jim@rfc1035.com>.

		Added support for Linux anon_inodefs, provided by Masatake
		YAMATO <yamato@redhat.com>.

		Documented a Solaris 9 and 10 portmap reporting problem
		(+M) in 00FAQ.  The problem was reported by Clint
		Roberts <Clint.Roberts@ttius.com>.  I have no solution
		to the problem, but discuss a possible work-around in
		the answer to this 00FAQ question: "Why doesn't lsof
		report portmap registrations for some Solaris versions?"

		Added FreeBSD support for the oldnfs and newnfs file system
		types.  Daniel Braniss <danny@cs.huji.ac.il> reported the
		need for the addition.

		Added ICMP socket support for Linux with code provided by
		Masatake YAMATO <yamato@redhat.com>.

		Corrected the reporting of process group ID for libproc
		versions of Mac OS X with a patch from Jeff Trawick
		<trawick@gmail.com>.  The patch has not been applied to
		Darwin kmem versions, because of little call for them
		and inadequate test system access.  The patch has been
		tested on Mac OS X 10.8 (Mountain Lion), courtesy of a
		test system provided by Allan Nathanson <ajn@apple.com>.

		Added thread support to those FreeBSD versions that have
		ki_numthreads in their kinfo_proc structure.  This also
		activates the -K option for those FreeBSD versions.  Jeff
		Trawick reported problems with FreeBSD lsof when threads
		are present and this addition solves those problems.

		Made changes to 00FAQ and the distribution, suggested by
		Warren Young <warren@etr-usa.com>.  The 00FAQ changes
		center on sections that discuss the -s option.  The changes
		to the distribution include a ChangeLog file that is either
		a pointer to or a copy of 00DIST, the distribution notes.

		Added support to FreeBSD for using the clang compiler.

		Added Linux support for using the getxattr() call to obtain
		socket protocol identification when it is can't be obtained
		from the /proc/net files that lsof examines.  Masatake YAMATO
		<yamato@redhat.com> developed the kernel patch to getxattr()
		and supplied the lsof patch.
2014-03-27 19:26:40 +00:00
taca
238996d5e9 Allow build with ruby21. 2014-03-26 14:27:22 +00:00
taca
3d45e947a2 Correct depending package's directory. 2014-03-26 13:29:09 +00:00
obache
51e9a7631f Use RUBY_SUFFIX instead of RUBY_VER. 2014-03-26 12:26:08 +00:00
obache
f534f497db fixes build on NetBSD-6, strncat is defined as a macro. 2014-03-25 07:53:35 +00:00
jperkin
5ff3b4a3a7 Various portability fixes. Now builds on SunOS. 2014-03-21 14:19:31 +00:00
wiz
d38544096f Set modulename so cffi doesn't have to invent them.
Fixes PLIST issues with different compilers.
Bump PKGREVISION.
2014-03-21 14:06:01 +00:00
gdt
8fc7198ec7 Add patch to avoid buggy utimensat on NetBSD 6. 2014-03-19 17:50:00 +00:00
gdt
3a311deb1e Add patch from upstream to avoid failures due to clang warnings.
Resolves failure to build on OS X 10.9.

ok wiz@ (as MAINTAINER).
2014-03-19 13:15:13 +00:00
gdt
69a3663061 Move fuse support into a default-off option.
Fuse support being on breaks the build on mac, where our wrappers for
OSXFUSE seem not quite right, and fuse support doesn't work on NetBSD.
ok wiz@ (as MAINTAINER).
2014-03-19 12:54:02 +00:00
taca
b6a0638a80 Add GEM_EXTSDIR support. 2014-03-17 14:30:38 +00:00
ryoon
636b403c5f Fix build under SCO OpenServer 5.0.7/3.2
It has no S_ISSOCK.
2014-03-14 22:30:36 +00:00
taca
0a2b66ab41 Update ruby-facter to 1.7.5.
Changes are not available.
2014-03-14 18:04:25 +00:00
taca
3fd6ec23b1 Update capistrano to 3.1.0.
Changes are too many to write here, please refer CHANGELOG.md.
2014-03-14 18:01:03 +00:00
jperkin
9e7a1ba4b9 Set USE_GCC_RUNTIME=yes for packages which build shared libraries but do
not use libtool to do so.  This is required to correctly depend upon a
gcc runtime package (e.g. gcc47-libs) when using USE_PKGSRC_GCC_RUNTIME.
2014-03-13 11:08:49 +00:00
wiz
a6af694a4e Export getline. Needed for build on NetBSD-5.
Reported by Matthias Ferdinand <mf+ml.pkgsrc-users@netzwerkagentursaarland.de>
on pkgsrc-users.
2014-03-12 19:43:17 +00:00
wiz
62790460ad Update to 5.17, based on patch provided by Matthias
<mf+ml.pkgsrc-users@netzwerkagentursaarland.de> on pkgsrc-users.

Changes:

2014-02-12  18:21  Christos Zoulas <christos@zoulas.com>

	* Count recursion levels through indirect magic

2014-02-11  10:40  Christos Zoulas <christos@zoulas.com>

	* Prevent infinite recursion on files with indirect offsets of 0

2014-01-30  21:00  Christos Zoulas <christos@zoulas.com>

	* Add -E flag that makes file print filesystem errors to stderr
	  and exit.

2014-01-08  17:20  Christos Zoulas <christos@zoulas.com>

	* mime printing could print results from multiple magic entries
	  if there were multiple matches.
	* in some cases overflow was not detected when computing offsets
	  in softmagic.

2013-12-05  12:00  Christos Zoulas <christos@zoulas.com>

	* use strcasestr() to for cdf strings
	* reset to the "C" locale while doing regex operations, or case
	  insensitive comparisons; this is provisional

2013-11-19  20:10  Christos Zoulas <christos@zoulas.com>

	* always leave magic file loaded, don't unload for magic_check, etc.
	* fix default encoding to binary instead of unknown which broke recently
	* handle empty and one byte files, less specially so that
	  --mime-encoding does not break completely.
		`
2013-11-06  14:40  Christos Zoulas <christos@zoulas.com>

	* fix erroneous non-zero exit code from non-existant file and message

2013-10-29  14:25  Christos Zoulas <christos@zoulas.com>

	* add CDF MSI file detection (Guy Helmer)

2013-09-03  11:56  Christos Zoulas <christos@zoulas.com>

	* Don't mix errors and regular output if there was an error
	* in magic_descriptor() don't close the file and try to restore
	  its position

2013-05-30  17:25  Christos Zoulas <christos@zoulas.com>

	* Don't treat magic as an error if offset was past EOF (Christoph Biedl)

2013-05-28  17:25  Christos Zoulas <christos@zoulas.com>

	* Fix spacing issues in softmagic and elf (Jan Kaluza)

2013-05-02  18:00  Christos Zoulas <christos@zoulas.com>

	* Fix segmentation fault with multiple magic_load commands.

2013-04-22  11:20  Christos Zoulas <christos@zoulas.com>

	* The way "default" was implemented was not very useful
	  because the "if something was printed at that level"
	  was not easily controlled by the user, and the format
	  was bound to a string which is too restrictive. Add
	  a "clear" for that level keyword and make "default"
	  void. This way one can do:

		>>13	clear	x
		>>13	lelong	1	foo
		>>13	lelong	2	bar
		>>13	default	x
		>>>13	lelong	x	unknown %x

2013-03-25  13:20  Christos Zoulas <christos@zoulas.com>

	* disallow strength setting in "name" entries

2013-03-06  21:24  Christos Zoulas <christos@zoulas.com>

	* fix recursive magic separator printing

2013-02-26  19:28  Christos Zoulas <christos@zoulas.com>

	* limit recursion level for mget
	* fix pread() related breakage in cdf
	* handle offsets properly in recursive "use"

2013-02-18  10:39  Christos Zoulas <christos@zoulas.com>

	* add elf reading of debug info to determine if file is stripped
	  (Jan Kaluza)
	* use pread()

2013-01-25  18:05  Christos Zoulas <christos@zoulas.com>

	* change mime description size from 64 to 80 to accommodate OOXML.

2013-01-11  14:50  Christos Zoulas <christos@zoulas.com>

	* Warn about inconsistent continuation levels.
	* Change fsmagic to add a space after it prints.

2013-01-10  21:00  Christos Zoulas <christos@zoulas.com>

	* Make getline public so that file can link against it.
	  Perhaps it is better to rename it, or hide it differently.
	  Fixes builds on platforms that do not provide it.

2013-01-07  16:30  Christos Zoulas <christos@zoulas.com>

	* Add SuS d{,1,2,4,8}, u{,1,2,4,8} and document
	  what long, int, short, etc is (Guy Harris)

2013-01-06  11:20  Christos Zoulas <christos@zoulas.com>

	* add magic_version function and constant
	* Redo memory allocation and de-allocation.
	  (prevents double frees on non mmap platforms)
	* Fix bug with name/use having to do with passing
	  found state from the parent to the child and back.

2012-12-19   8:47  Christos Zoulas <christos@zoulas.com>

	* Only print elf capabilities for archs we know (Jan Kaluza)

2012-10-30  19:14  Christos Zoulas <christos@zoulas.com>

	* Add "name" and "use" file types in order to look
	  inside mach-o files.

2012-09-06  10:40  Christos Zoulas <christos@zoulas.com>

	* make --version exit 0 (Matthew Schultz)
	* add string/T (Jan Kaluza)

2012-08-09  2:15  Christos Zoulas <christos@zoulas.com>

	* add z and t modifiers for our own vasprintf
	* search for $HOME/.magic.mgc if it is there first
	* fix reads from a pipe, and preserve errno

2012-05-15  13:12  Christos Zoulas <christos@zoulas.com>

	* use ctime_r, asctime_r

2012-04-06  17:18  Christos Zoulas <christos@zoulas.com>

	* Fixes for indirect offsets to handle apple disk formats

2012-04-03  18:26  Christos Zoulas <christos@zoulas.com>

	* Add windows date field types
	* More info for windows shortcuts (incomplete)
2014-03-12 18:35:48 +00:00
wiz
df3f6f01e1 Update to 3.01a23:
All:

-	Typo fix in README.compile for the mail address.
	Thanks to Dennis Clarke for the catch!


Libschily:

-	libschily/sleep.c and libschily/usleep.c have been modified to work
	with MinGW.

Cdrecord:

-	The timediff function now in addition prints the time diff in
	hours : minutes : seconds . thausands of a second.

	Thanks to a hint from Donald R Laster Jr from Slackware.

Cdda2wav (Maintained/enhanced by Jörg Schilling, originated by Heiko Eißfeldt heiko@hexco.de):

-	Cdda2wav no longer includes the new paranoia mode "c2check" in the macro
	"proof". This has been done because of a report from Géraud Meyer <graud@gmx.com>
	that gives hints that the drive:
	Type: ROM, Vendor 'TSSTcorp' Model 'CDDVDW SH-222AB ' Revision 'SB00' MMC+CDDA
	does not handle hidden tracks when "c2check" is active.

Mkisofs (Maintained/enhanced by Jörg Schilling since 1997, originated by Eric Youngdale):

-	mkisofs was slightly modified to reduce CPU time requirements.
	It now reads/writes in 64kBytes chunks instead of stdio buffer
	size which is typically 8 kB.

-	Fixed a typo in the mkisofs man page.
	Thanks to a hint from Donald R Laster Jr from Slackware.

-	Mkisofs now in addition prints "-iso-level 3 or more required"
	in case that a large file was skipped because of the current mkisofs settings.

	Thanks to a hint from Donald R Laster Jr from Slackware.

-	A problem in isoinfo has been fixed.
	This problem caused "isoinfo -R -find -ls" to print Jan 1 1970 timestamps
	in case that Rock Ridge was not present.
2014-03-12 09:20:06 +00:00
jperkin
222f8dc36b Import initial SMF support for individual packages. 2014-03-11 14:34:36 +00:00
jperkin
45bc40abb4 Remove example rc.d scripts from PLISTs.
These are now handled dynamically if INIT_SYSTEM is set to "rc.d", or
ignored otherwise.
2014-03-11 14:04:57 +00:00
agc
b0170cd6a2 Update libvirt from 1.2.1 to 1.2.2, including a vulnerability fix for
(CVE-2013-6456) -- LXC device hotplug handling.  For more information
on this CVE, see

	http://secunia.com/advisories/56187


Changes from previous version (not summarised, sorry):

Features:
	bhyve: add a basic driver (Roman Bogorodskiy),
	add LXC from native conversion tool (Cédric Bosdonnat),
	vbox: add support for v4.2.20+ and v4.3.4+ (Jean-Baptiste Rouault),
	Introduce Libvirt Wireshark dissector (Yuto KAWAMURA)
Security:
	CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code (Daniel P. Berrange),
	CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug (Daniel P. Berrange),
	CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug (Daniel P. Berrange),
	CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug (Daniel P. Berrange),
	CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug (Daniel P. Berrange),
	CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code (Eric Blake)
Documentation:
	bhyve: add basic documentation (Roman Bogorodskiy),
	Add docs about use of systemd journal for logging (Daniel P. Berrange),
	Auto-generate the table of contents in logging doc (Daniel P. Berrange),
	Fix heading level in logging docs (Daniel P. Berrange),
	Document the keyboard as a valid input type (Ján Tomko),
	bandwidth: Adjust documentation (John Ferlan),
	remove <auth> from secret XML format (Ján Tomko),
	LXC: added some doc on domxml-from-native with mention of limitations (Cédric Bosdonnat),
	libxl: fix libxlDoDomainSave documentation (Jim Fehlig),
	grammar fixes in formatdomain (Chen Hanxiao),
	maint: fix grammar in conf file (Eric Blake),
	Fix minor typo in governance doc (Justin Clift),
	Write up the project governance process (Daniel P. Berrange),
	man: shm-merge-across-nodes is optional (Ján Tomko),
	docs/page.xls: remove unnecessary namespace attribute (Pavel Hrdina),
	add a permalink to html headers (Dan Kenigsberg),
	storage: Add document for possible problem on volume detection (Osier Yang),
	Add "note" for node-memory-tune (Osier Yang),
	Improve the document for nodesuspend (Osier Yang),
	refer to the correct event ID for DomainEventIOErrorReasonCallback (Claudio Bley),
	Add sample output of Wireshark dissector (Yuto KAWAMURA),
	Add missing space in <clock> documentation (Christophe Fergeau)
Portability:
	build: skip virportallocatortest on cygwin (Eric Blake),
	build: ignore cygwin toolchain droppings (Eric Blake),
	build: avoid ld_preload tests on mingw (Eric Blake),
	build: fix cgroups on non-Linux (Eric Blake),
	build: fix build on 32-bit hosts (Eric Blake),
	maint: update to latest gnulib, for older autoconf (Eric Blake),
	Fix build of portallocator on mingw (Ján Tomko),
	lxc: Don't shadow global symbol "link" (Peter Krempa),
	storage: Fix build with older compilers afeter gluster snapshot series (Peter Krempa),
	spec: add missing dep of libvirt-daemon-config-network (Thierry Parmentelat),
	spec: require libvirt-daemon-driver-interface only when built (Thierry Parmentelat),
	Fixed build with clang. (Cédric Bosdonnat),
	Rename 'index' in virCapabilitiesGetCpusForNode (Ján Tomko),
	qemuxml2argvmock: Mock time() on non-linux platforms too (Michal Privoznik),
	build: Fix 'make rpm' in VPATH with wireshark (Martin Kletzander),
	Remove windows thread implementation in favour of pthreads (Daniel P. Berrange),
	Fix pthread_sigmask check for mingw32 without winpthreads (Daniel P. Berrange),
	Skip check-augeas-lockd when QEMU is disabled (Daniel P. Berrange),
	maint: add configure checks for BSD CPU affinity (Roman Bogorodskiy),
	BSD: implement virProcess{Get,Set}Affinity (Roman Bogorodskiy),
	tests: Fix PCI test data filenames for Windows (Matthias Bolte),
	wireshark: Fix VPATH build (Jiri Denemark),
	Honour prefix in wireshark install dir (Daniel P. Berrange),
	Use AC_PATH_PROG to search for dmidecode (Roman Bogorodskiy)
Bug fixes:
	bhyve: defined domains should be persistent (Roman Bogorodskiy),
	Fix journald PRIORITY values (Daniel P. Berrange),
	spec: Fix braces around macros (Peter Krempa),
	spec: Use correct versions of libgfapi in RHEL builds (Peter Krempa),
	network: unplug bandwidth and call networkRunHook only when appropriate (Laine Stump),
	network: don't even call networkRunHook if there is no network (Laine Stump),
	Fix memory leak in virSCSIDeviceListDel() (Nehal J Wani),
	libxl: queue domain event earlier in shutdown handler (Jim Fehlig),
	virsh: mark CPU usage field names as translatable (Ján Tomko),
	virsh: initialize str to NULL to solve a build issue (Chen Hanxiao),
	virsh: Don't leak buffer if GetFDs fails in cmdCreate (Ján Tomko),
	libvirt-guests: Wait for libvirtd to initialize (Michal Privoznik),
	virSystemdCreateMachine: Set dependencies for slices (Michal Privoznik),
	Ignore additional fields in iscsiadm output (Ján Tomko),
	libxl: always use libxlVmCleanupJob in shutdown thread (Jim Fehlig),
	qemu: adjust maxmem/maxvcpu computation (Eric Blake),
	Fix multiple bugs in LXC domainMemoryStats driver (Daniel P. Berrange),
	Fix misspelled cpuacct.usage_percpu in cgroup mock. (Thorsten Behrens),
	virsh: fix memleak when starting a guest with invalid fd (Jincheng Miao),
	networkRunHook: Run hook only if possible (Michal Privoznik),
	bridge_driver.h: Fix build --without-network (Michal Privoznik),
	Fix conflicting types of virInitctlSetRunLevel (Ján Tomko),
	Fix reset of cgroup when detaching USB device from LXC guests (Daniel P. Berrange),
	Fix path used for USB device attach with LXC (Daniel P. Berrange),
	Don't block use of USB with containers (Daniel P. Berrange),
	storage: gluster: Don't leak private data when storage file init fails (Peter Krempa),
	storage: handle NULL return from virGetStorageVol (Michael Chapman),
	Fix leaks in vircapstest (Ján Tomko),
	AppArmor: Fix the place where the template should be installed (Cédric Bosdonnat),
	Libvirt lose sheepdogs volumes on pool refresh or restart. When restarting sheepdog pool, all volumes are missing. This patch add automatically all volume from the added pool. (Joel SIMOES),
	maint: fix line numbers in check-aclrules reports (Yuri Myasoedov),
	qemu: Use correct permissions when determining the image chain (Peter Krempa),
	virpci: Resolve coverity issues (John Ferlan),
	qemu: keep pre-migration domain state after failed migration (Martin Kletzander),
	qemu: Fix crash in virDomainMemoryStats with old qemu (Jiri Denemark),
	network: disallow <bandwidth>/<mac> for bridged/macvtap/hostdev networks (Laine Stump),
	Honor blacklist for modprobe command (John Ferlan),
	qemu: be sure we're using the updated value of backend during hotplug (Laine Stump),
	Resolve Coverity dead_error_begin (John Ferlan),
	qemu: Fix the error message for scsi host device's shareable checking (Osier Yang),
	xen: fix parsing xend http response (Jim Fehlig),
	storage: Fix the memory leak (Osier Yang),
	Fix buffer size in linuxNodeGetCPUstats (Bing Bu Cao),
	util: Correct the NUMA node range checking (Osier Yang),
	qemu: Avoid crash in qemuDiskGetActualType (Peter Krempa),
	linuxNodeGetCPUStats: Correctly handle cpu prefix (Bing Bu Cao),
	qemu: snapshot: Forbid snapshots when backing is a scsi passthrough disk (Peter Krempa),
	qemu: snapshot: Avoid libvirtd crash when qemu crashes while snapshotting (Peter Krempa),
	lxc: Fix coverity (Martin Kletzander),
	qemu: Don't detach devices if passthrough doesn't work (Jincheng Miao),
	pci: Fix failure paths in detach (Jiri Denemark),
	virSecuritySELinuxSetFileconHelper: Don't fail on read-only NFS (Michal Privoznik),
	Fix possible memory leak in virsh-domain-monitor.c in cmdDomblklist (Pavel Hrdina)
Improvements:
	virsh: add --all flag to 'event' command (Eric Blake),
	virsh: support remaining domain events (Eric Blake),
	bhyve: support domain undefine (Roman Bogorodskiy),
	Add comments describing the different log sources (Daniel P. Berrange),
	Include error domain and code in log messages from errors (Daniel P. Berrange),
	Send virLogMetadata fields onto the journal (Daniel P. Berrange),
	qemu: Enable 'host-passthrough' cpu mode for arm (Oleg Strikov),
	domblkstat: Produce error message that at least sounds like English (Michal Privoznik),
	virDomainBlockStats(Flags): Produce saner error message on empty disk path (Michal Privoznik),
	tests: avoid littering /tmp (Eric Blake),
	sanlock: Truncate domain names longer than SANLK_NAME_LEN (Jiri Denemark),
	maint: Fix minor typo (unkown) (Yuri Chornoivan),
	libxl: Recognise ARM architectures (Ian Campbell),
	virsh: Honour -q in domblklist, vcpupin and emulatorpin (Michal Privoznik),
	spec: make systemd_daemon usage configurable (Eric Blake),
	spec: require device-mapper-devel for storage-disk (Eric Blake),
	spec: explicitly avoid bhyve on Linux (Eric Blake),
	build: use --with-systemd-daemon as configure option (Eric Blake),
	virNetDevVethCreate: Serialize callers (Michal Privoznik),
	network: include plugged interface XML in "plugged" network hook (Laine Stump),
	conf: output actual netdev status in <interface> XML (Laine Stump),
	conf: new function virDomainActualNetDefContentsFormat (Laine Stump),
	conf: re-situate <bandwidth> element in <interface> (Laine Stump),
	conf: make virDomainNetDefFormat a public function (Laine Stump),
	conf: handle null pointer in virNetDevVlanFormat (Laine Stump),
	conf: clarify what is returned for actual bandwidth and vlan (Laine Stump),
	rbd: Set timeout options for librados (Wido den Hollander),
	rbd: Include return statuses from librados/librbd in logging (Wido den Hollander),
	virsh: kill over-engineered asprintf failure recovery (Eric Blake),
	virsh: use more compact VIR_ENUM_IMPL (Eric Blake),
	libxl: handle on_crash coredump actions (Jim Fehlig),
	libxl: add dump dir to libxlDriverConfig object (Jim Fehlig),
	libxl: honor domain lifecycle event configuration (Jim Fehlig),
	Ensure systemd cgroup ownership is delegated to container with userns (Richard Weinberger),
	bhyve: implement node information reporting (Roman Bogorodskiy),
	Add virStringReplace method for substring replacement (Daniel P. Berrange),
	Add virStringSearch method for regex matching (Manuel VIVES),
	virNetServerRun: Notify systemd that we're accepting clients (Michal Privoznik),
	Add a stub for virCgroupGetDomainTotalCpuStats (Ján Tomko),
	maint: update to latest gnulib (Eric Blake),
	virsh: add net-event command (Eric Blake),
	virsh: add event command, for lifecycle events (Eric Blake),
	virsh: common code for waiting for an event (Eric Blake),
	virsh: common code for parsing --seconds (Eric Blake),
	libxl: queue shutdown event on domain shutdown (Jim Fehlig),
	Rename virDomainGetRootFilesystem to virDomainGetFilesystemForTarget (Daniel P. Berrange),
	Introduce new OOM testing support (Daniel P. Berrange),
	Add unit test for virCgroupGetPercpuStats. (Thorsten Behrens),
	Add unit test for virCgroupGetMemoryUsage. (Thorsten Behrens),
	Add unit test for virCgroupGetBlkioIo*Serviced (Thorsten Behrens),
	Widening API change - accept empty path for virDomainBlockStats (Thorsten Behrens),
	Implement lxcDomainBlockStats* for lxc driver (Thorsten Behrens),
	Implement domainGetCPUStats for lxc driver. (Thorsten Behrens),
	Make qemuGetDomainTotalCPUStats a virCgroup function. (Thorsten Behrens),
	Implement domainMemoryStats API slot for LXC driver. (Thorsten Behrens),
	Add util virCgroupGetBlkioIo*Serviced methods. (Thorsten Behrens),
	lxc: Add destroy support for suspended domains (Richard Weinberger),
	libxl: use job functions in libxlDomainSetSchedulerParametersFlags (Jim Fehlig),
	libxl: use job functions in libxlDomainSetAutostart (Jim Fehlig),
	libxl: use job functions in device attach and detach functions (Jim Fehlig),
	libxl: use job functions in vcpu set and pin functions (Jim Fehlig),
	libxl: use job functions in libxlDomainCoreDump (Jim Fehlig),
	libxl: use job functions in domain save operations (Jim Fehlig),
	libxl: use job functions when cleaning up a domain (Jim Fehlig),
	libxl: use job functions in libxlDomain{Suspend,Resume} (Jim Fehlig),
	libxl: use job functions in libxlDomainSetMemoryFlags (Jim Fehlig),
	libxl: use job functions in libxlVmStart (Jim Fehlig),
	libxl: Add job support to libxl driver (Jim Fehlig),
	libxl: remove libxlVmReap function (Jim Fehlig),
	libxl: always set vm id to -1 on shutdown (Jim Fehlig),
	qemu: Use virtio network device for aarch64/virt (Oleg Strikov),
	Add a default USB keyboard and USB mouse for PPC64 (Li Zhang),
	xen: format xen config for USB keyboard (Li Zhang),
	qemu: format qemu command line for USB keyboard (Li Zhang),
	qemu: Add USB keyboard capability (Li Zhang),
	conf: Remove the implicit PS2 devices for non-X86 platforms (Li Zhang),
	conf: Add keyboard input device type (Li Zhang),
	conf: Add one interface to add default input devices (Li Zhang),
	network: Taint networks that are using hook script (Michal Privoznik),
	network: Introduce network hooks (Michal Privoznik),
	network_conf: Expose virNetworkDefFormatInternal (Michal Privoznik),
	Add helper for running code in separate namespaces (Daniel P. Berrange),
	Add virFileMakeParentPath helper function (Daniel P. Berrange),
	Move check for cgroup devices ACL upfront in LXC hotplug (Daniel P. Berrange),
	Disks are always block devices, never character devices (Daniel P. Berrange),
	Record hotplugged USB device in LXC live guest config (Daniel P. Berrange),
	qemu: Implement VIR_DOMAIN_TAINT_HOOK (Michal Privoznik),
	virDomainTaintFlags: Introduce VIR_DOMAIN_TAINT_HOOK (Michal Privoznik),
	Add tests for secret XML parsing (Ján Tomko),
	Forgot to add lxcconf2xmldata to dist. (Cédric Bosdonnat),
	Support IPv6 in port allocator (Ján Tomko),
	Split out bind() from virPortAllocatorAcquire (Ján Tomko),
	qemu: snapshot: Add support for external active snapshots on gluster (Peter Krempa),
	qemu: snapshot: Use new APIs to detect presence of existing storage files (Peter Krempa),
	qemu: Switch snapshot deletion to the new API functions (Peter Krempa),
	storage: Add storage file backends for gluster (Peter Krempa),
	storage: add file functions for local and block files (Peter Krempa),
	storage: Add file storage APIs in the default storage driver (Peter Krempa),
	conf: Move qemuSnapshotDiskGetActualType to virDomainSnapshotDiskGetActualType (Peter Krempa),
	conf: Move qemuDiskGetActualType to virDomainDiskGetActualType (Peter Krempa),
	spec: add missing dep of libvirt-daemon-config-nwfilter (Eric Blake),
	lxc from native: removed now remaining useless line (Cédric Bosdonnat),
	Fix stream related spelling mistakes (Philipp Hahn),
	LXC from native: convert blkio throttle config (Cédric Bosdonnat),
	LXC from native: map vlan network type (Cédric Bosdonnat),
	LXC from native: map block filesystems (Cédric Bosdonnat),
	LXC from native: map lxc.arch to /domain/os/type@arch (Cédric Bosdonnat),
	LXC from native: add lxc.cgroup.blkio.* mapping (Cédric Bosdonnat),
	LXC from native: map lxc.cgroup.cpuset.* (Cédric Bosdonnat),
	LXC from native: map lxc.cgroup.cpu.* (Cédric Bosdonnat),
	LXC from native: migrate memory tuning (Cédric Bosdonnat),
	LXC from native: convert lxc.id_map into <idmap> (Cédric Bosdonnat),
	LXC from native: convert macvlan network configuration (Cédric Bosdonnat),
	LXC from native: convert lxc.tty to console devices (Cédric Bosdonnat),
	LXC from native: convert phys network types to net hostdev devices (Cédric Bosdonnat),
	LXC from native: migrate veth network configuration (Cédric Bosdonnat),
	LXC from native: implement no network conversion (Cédric Bosdonnat),
	LXC from native: migrate fstab and lxc.mount.entry (Cédric Bosdonnat),
	LXC from native: import rootfs (Cédric Bosdonnat),
	LXC driver: started implementing connectDomainXMLFromNative (Cédric Bosdonnat),
	Improve virConf parse to handle LXC config format (Cédric Bosdonnat),
	event: pass reason for PM events (Eric Blake),
	event: convert remaining domain events to new style (Eric Blake),
	event: client RPC protocol tweaks for domain lifecycle events (Eric Blake),
	event: prepare client to track domain callbackID (Eric Blake),
	event: server RPC protocol tweaks for domain lifecycle events (Eric Blake),
	event: dynamically manage server-side RPC domain events (Eric Blake),
	qemu: Implement a stub cpuArchDriver.baseline() handler for aarch64 (Oleg Strikov),
	libxl: register for domain events immediately after creation (Jim Fehlig),
	libxl: rename libxlCreateDomEvents to libxlDomEventsRegister (Jim Fehlig),
	vircapstest: Introduce virCapabilitiesGetCpusForNodemask test (Pradipta Kr. Banerjee),
	Handle non-sequential NUMA node numbers (Pradipta Kr. Banerjee),
	storage: gluster: Set volume metadata in a separate function (Peter Krempa),
	qemu: introduce spiceport chardev backend (Martin Kletzander),
	qemu: remove pointless condition (Martin Kletzander),
	qemu: rework '-serial none' (Martin Kletzander),
	conf: introduce spiceport chardev backend (Martin Kletzander),
	rbd: Use rbd_create3 to create RBD format 2 images by default (Wido den Hollander),
	build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command (Laine Stump),
	virNetworkLoadState: Disallow mangled 'floor' element (Michal Privoznik),
	networkStartNetwork: Be more verbose (Michal Privoznik),
	qemu: hyperv: Add support for timer enlightenments (Peter Krempa),
	conf: Enforce supported options for certain timers (Peter Krempa),
	schema: Fix guest timer specification schema according to the docs (Peter Krempa),
	apparmor: Improve profiles (Felix Geyer),
	Add glusterfs to VIR_CONNECT_LIST_STORAGE_POOLS_FILTERS_POOL_TYPE (Christophe Fergeau),
	libxl: remove unneeded locking of driver when restoring (Jim Fehlig),
	libxl: improve subprocess handling (Jim Fehlig),
	libxl: handle domain shutdown events in a thread (Jim Fehlig),
	libxl: remove list of timer registrations from libxlDomainObjPrivate (Jim Fehlig),
	libxl: fix leaking libxlDomainObjPrivate (Jim Fehlig),
	qemu_driver: Introduce <filesystem/> support in device attach/detach (Matthieu Coudron),
	virDomainHostdev{Insert,Delete}: Replace VIR_REALLOC_N by VIR_{APPEND,DELETE}_ELEMENT (Matthieu Coudron),
	qemuxml2argvtest: Set timezone (Michal Privoznik),
	virsh: only report filled values in nodecpustats (Ján Tomko),
	BSD: implement nodeGetCPUStats (Roman Bogorodskiy),
	qemu: blockjob: Print correct file name in error message (Peter Krempa),
	maint: Change the text of the NULLSTR() macro to "<null>" (Peter Krempa),
	qemuxml2argvtest: Test localtime clock basis (Michal Privoznik),
	qemuBuildClockArgStr: Allow localtime clock basis (Michal Privoznik),
	Generate a valid imagelabel even for type 'none' (Ján Tomko),
	event: move event filtering to daemon (regression fix) (Eric Blake),
	rpm: create libvirt-wireshark sub-package (Eric Blake),
	tests: Add test for new virkmod functions (John Ferlan),
	utils: Introduce functions for kernel module manipulation (John Ferlan),
	network: change default of forwardPlainNames to 'yes' (Laine Stump),
	network: only prevent forwarding of DNS requests for unqualified names (Laine Stump),
	virnetdevbandwidthtest: Link with libxml2 (Michal Privoznik),
	spice: don't force user to specify spicevmc channel (Martin Kletzander),
	virnetdevbandwidthtest: Introduce some more tests (Michal Privoznik),
	virnetdevbandwidthtest: fix hard coded /sbin/tc (Cédric Bosdonnat),
	Push nwfilter update locking up to top level (Daniel P. Berrange),
	Add a read/write lock implementation (Daniel P. Berrange),
	tests: Modify the scsi util tests (Osier Yang),
	util: Accept test data path for scsi device's sg_path (Osier Yang),
	tests: Add tests for scsi utils (Osier Yang),
	util: Add one argument for several scsi utils (Osier Yang),
	qemu: Don't fail if the SCSI host device is shareable between domains (Osier Yang),
	virnetdevbandwidthtest: Introduce testVirNetDevBandwidthSet (Michal Privoznik),
	virCommand: Introduce virCommandSetDryRun (Michal Privoznik),
	snapshot: Add support for specifying snapshot disk backing type (Peter Krempa),
	tests: Add more tests for virConnectBaselineCPU (Jiri Denemark),
	cpu: Try to use source CPU model in virConnectBaselineCPU (Jiri Denemark),
	cpu: Fix VIR_CONNECT_BASELINE_CPU_EXPAND_FEATURES (Jiri Denemark),
	tests: Better support for VIR_CONNECT_BASELINE_CPU_EXPAND_FEATURES (Jiri Denemark),
	Reword error message for oversized cpu time fields (Ján Tomko),
	Simplify linuxNodeGetCPUStats (Ján Tomko),
	Add hw random number generator (/dev/hwrng) to cgroup ACL (Pradipta Kr. Banerjee),
	tests: Introduce virnetdevbandwidthtest (Michal Privoznik),
	Add test for linuxNodeGetCPUStats (Ján Tomko),
	Move test-local declarations to nodeinfopriv.h (Ján Tomko),
	qemu: Enable 'host-passthrough' cpu mode for aarch64 (Oleg Strikov),
	Block info query: Add check for transient domain (John Ferlan),
	maint: update to latest gnulib, for mingw improvements (Eric Blake),
	util: Add "shareable" field for virSCSIDevice struct (Osier Yang),
	storage: Fix autostart of pool with "fc_host" type adapter (Osier Yang),
	api: require write permission for guest agent interaction (Eric Blake),
	virtlockd: make re-exec more robust (Michael Chapman),
	build: add $(prefix) to SYSTEMD_UNIT_DIR (Laine Stump),
	spice: expose the QEMU disable file transfer option (Francesco Romani),
	spice: detect if qemu can disable file transfer (Francesco Romani),
	lxc: allow to setup throttle blkio cgroup through virsh (Gao feng),
	Add test for transient disk support in VMX files (Wout Mertens),
	Make syntax check notice assignments w/o surrounding spaces. (Thorsten Behrens),
	maint: align whitespaces with project conventions. (Thorsten Behrens),
	virpcitest: Test virPCIDeviceDetach failure (Jiri Denemark),
	virpcimock: Add PCI driver which always fails (Jiri Denemark),
	virpcitest: More tests for device detach and reattach (Jiri Denemark),
	virpcimock: Mock /sys/bus/pci/drivers_probe (Jiri Denemark),
	pci: Publish some internal code for virpcitest (Jiri Denemark),
	virpcitest: Show PCI device tested by each test (Jiri Denemark),
	pci: Make reattach work for unbound devices (Jiri Denemark),
	qemu: allow to setup throttle blkio cgroup through virsh (Gao feng),
	virsh: add setting throttle blkio cgroup option to blkiotune (Gao feng),
	blkio: Setting throttle blkio cgroup for domain (Gao feng),
	domain: introduce xml elements for throttle blkio cgroup (Gao feng),
	maint: replace remaining virLib*Error with better names (Eric Blake),
	maint: simplify driver registration at startup (Eric Blake),
	maint: clean up error reporting in migration (Eric Blake),
	maint: don't lose error on canceled migration (Eric Blake),
	maint: avoid nested use of virConnect{Ref,Close} (Eric Blake),
	maint: don't leave garbage on early API exit (Eric Blake),
	qemu: Change the default unix monitor timeout (Martin Kletzander),
	storage: Sheepdog: Separate creating of the volume from building (Peter Krempa),
	storage: RBD: Separate creating of the volume from building (Peter Krempa),
	storage: Support deletion of volumes on gluster pools (Peter Krempa),
	conf: Always use VIR_ERR_CONFIG_UNSUPPORTED on enumFromString() failures (Christophe Fergeau)
Cleanups:
	build-sys: Removed unused variable from configure.ac (Christophe Fergeau),
	qemu: remove memset params array to zero in qemuDomainGetPercpuStats (Gao feng),
	util: Fix the indention (Osier Yang),
	virsh: Fix the string breaking style (Osier Yang)
2014-03-07 00:30:11 +00:00
joerg
ddf7e1a7ec Remove impossible check. 2014-03-06 15:46:39 +00:00
joerg
db20bcc6e9 Ignore tautologic pointer checks. 2014-03-06 15:45:45 +00:00
jperkin
374dfca2a5 Fix dependency pattern. 2014-03-03 16:42:00 +00:00
wiz
f14c525815 Add dependency on py-lxml, used by xenapi_create.py.
Dependency reported missing by Kamil Rytarowski <n54@gmx.com> on
pkgsrc-users.

Bump PKGREVISION.
2014-03-02 13:53:18 +00:00
wiedi
d2826d98ed Bulk build wants openssl 2014-02-26 18:20:11 +00:00
wiedi
6affe36669 Adjust path to pci.h in the same way as on netbsd and link network libs on SunOS 2014-02-26 10:31:40 +00:00
joerg
8641f296a1 Fix gtk-doc fallout. 2014-02-24 16:11:13 +00:00
mspo
9d6697b5c7 fix compilation on netbsd current; compile-tested hack for CIRCLEQ vs TAILQ in tcpconns 2014-02-23 16:34:27 +00:00
sno
8283e66f4a Updating package for Perl module Unix::Statgrab from CPAN distribution
Unix-Statgrab from 0.101 to 0.103 in sysutils/p5-Unix-Statgrab

PkgSrc changes:
Generate package using Packager::Utils 0.001

Upstream changes since 0.101:
Revision history for Perl extension Unix::Statgrab.

0.103 2014-02-19
 - learn include paths and linker flags from pkg-config, if available
 - keep configure phase settings persistent for building stage
 - redo meta_add using meta-spec v2 * includes developer deps to please
   ribasushi

0.102 2013-09-28
 - Update repository URI - it's now officially hosted on i-scream.org with
   a mirror on GitHub for issue tracking and easy deal with pull requests
2014-02-23 15:18:19 +00:00
obache
d85e9410c0 Update fkdesk to 2.0p2, apply upstream patches, with fixes build with TCL 8.6,
Itcl 4.0.0 is bundled.
XXX: but not works well yet.

2.0p1  04/16/2004
Compilation of the file libdesk/tixImgXpm.c fails when using a Tk version lower than 8.3.

2.0p2  04/20/2004
Some Linux distributions are using newer "unofficial" versions of Incr Tcl
(Itcl). Though TkDesk 2.0 works with the official Itcl 3.2.1 release, these
newer Itcl installations disable backwards compatibility for some older Itcl
syntax that TkDesk still requires. The typical symptom of this problem is this
error message when TkDesk is started:
Error in startup script: can't rename "itcl_class": command doesn't exist...
2014-02-22 07:53:47 +00:00
prlw1
39e89a5b6d Update xentools42 to 4.2.4
Removed patch-libxc_xc_dom_h: commited as cb08944a

This fixes the following critical vulnerabilities:

- CVE-2013-2212 / XSA-60 Excessive time to disable caching with HVM guests with
PCI passthrough
- CVE-2013-1442 / XSA-62 Information leak on AVX and/or LWP capable CPUs
- CVE-2013-4355 / XSA-63 Information leaks through I/O instruction emulation
- CVE-2013-4361 / XSA-66 Information leak through fbld instruction emulation
- CVE-2013-4368 / XSA-67 Information leak through outs instruction emulation
- CVE-2013-4369 / XSA-68 possible null dereference when parsing vif ratelimiting
 info
- CVE-2013-4370 / XSA-69 misplaced free in ocaml xc_vcpu_getaffinity stub
- CVE-2013-4371 / XSA-70 use-after-free in libxl_list_cpupool under memory press
ure
- CVE-2013-4375 / XSA-71 qemu disk backend (qdisk) resource leak
- CVE-2013-4416 / XSA-72 ocaml xenstored mishandles oversized message replies
- CVE-2013-4494 / XSA-73 Lock order reversal between page allocation and grant t
able locks
- CVE-2013-4553 / XSA-74 Lock order reversal between page_alloc_lock and mm_rwlo
ck
- CVE-2013-4551 / XSA-75 Host crash due to guest VMX instruction execution
- CVE-2013-4554 / XSA-76 Hypercalls exposed to privilege rings 1 and 2 of HVM gu
ests
- CVE-2013-6375 / XSA-78 Insufficient TLB flushing in VT-d (iommu) code
- CVE-2013-6400 / XSA-80 IOMMU TLB flushing may be inadvertently suppressed
- CVE-2013-6885 / XSA-82 Guest triggerable AMD CPU erratum may cause host hang
- CVE-2014-1642 / XSA-83 Out-of-memory condition yielding memory corruption duri
ng IRQ setup
- CVE-2014-1891 / XSA-84 integer overflow in several XSM/Flask hypercalls
- CVE-2014-1895 / XSA-85 Off-by-one error in FLASK_AVC_CACHESTAT hypercall
- CVE-2014-1896 / XSA-86 libvchan failure handling malicious ring indexes
- CVE-2014-1666 / XSA-87 PHYSDEVOP_{prepare,release}_msix exposed to unprivilege
d guests
- CVE-2014-1950 / XSA-88 use-after-free in xc_cpupool_getinfo() under memory pre
ssure

Apart from those there are many further bug fixes and improvements.
2014-02-22 01:28:23 +00:00
prlw1
07c93a98dd Update xenkernel42 to 4.2.4
This fixes the following critical vulnerabilities:

- CVE-2013-2212 / XSA-60 Excessive time to disable caching with HVM guests with PCI passthrough
- CVE-2013-1442 / XSA-62 Information leak on AVX and/or LWP capable CPUs
- CVE-2013-4355 / XSA-63 Information leaks through I/O instruction emulation
- CVE-2013-4361 / XSA-66 Information leak through fbld instruction emulation
- CVE-2013-4368 / XSA-67 Information leak through outs instruction emulation
- CVE-2013-4369 / XSA-68 possible null dereference when parsing vif ratelimiting info
- CVE-2013-4370 / XSA-69 misplaced free in ocaml xc_vcpu_getaffinity stub
- CVE-2013-4371 / XSA-70 use-after-free in libxl_list_cpupool under memory pressure
- CVE-2013-4375 / XSA-71 qemu disk backend (qdisk) resource leak
- CVE-2013-4416 / XSA-72 ocaml xenstored mishandles oversized message replies
- CVE-2013-4494 / XSA-73 Lock order reversal between page allocation and grant table locks
- CVE-2013-4553 / XSA-74 Lock order reversal between page_alloc_lock and mm_rwlock
- CVE-2013-4551 / XSA-75 Host crash due to guest VMX instruction execution
- CVE-2013-4554 / XSA-76 Hypercalls exposed to privilege rings 1 and 2 of HVM guests
- CVE-2013-6375 / XSA-78 Insufficient TLB flushing in VT-d (iommu) code
- CVE-2013-6400 / XSA-80 IOMMU TLB flushing may be inadvertently suppressed
- CVE-2013-6885 / XSA-82 Guest triggerable AMD CPU erratum may cause host hang
- CVE-2014-1642 / XSA-83 Out-of-memory condition yielding memory corruption during IRQ setup
- CVE-2014-1891 / XSA-84 integer overflow in several XSM/Flask hypercalls
- CVE-2014-1895 / XSA-85 Off-by-one error in FLASK_AVC_CACHESTAT hypercall
- CVE-2014-1896 / XSA-86 libvchan failure handling malicious ring indexes
- CVE-2014-1666 / XSA-87 PHYSDEVOP_{prepare,release}_msix exposed to unprivileged guests
- CVE-2014-1950 / XSA-88 use-after-free in xc_cpupool_getinfo() under memory pressure

Apart from those there are many further bug fixes and improvements.
2014-02-22 01:22:49 +00:00
joerg
a3bdbc5275 Fix gtk-doc fallout. 2014-02-21 20:32:12 +00:00
prlw1
efe1037044 Actually use my DIOCGDISKINFO ioctl implementation by regenerating configure. 2014-02-21 01:13:00 +00:00
drochner
3f751c45de from upstream: fix the fix for CVE-2013-6885
makes the workaround for AMD CPU erratum 793 work not only on
64-bit hypervisors but also for 32bit
bump PKGREV
(compile tested only)
2014-02-20 17:37:25 +00:00
wiz
f48fc61167 Update to 0.102:
dbus-glib 0.102 (2014-02-12)
============================

The “I've come to the conclusion that Debian should choose Russ Allbery
to be its new init system” release. [1]

Enhancements:

• Add dbus_g_method_invocation_get_connection (fd.o #55729, Dan Williams)

• Add dbus_g_connection_open_private (fd.o #55730, Dan Williams)

• Better regression tests (fd.o #23633, fd.o #40711, fd.o #41129, fd.o #51511,
  fd.o #68603; Simon McVittie, Dan Williams)

• Get rid of more dead code (fd.o #40711, Simon McVittie)

• dbus-binding-tool: check validity of names (fd.o #7909, Simon McVittie)

Fixes:

• dbus_g_value_build_g_variant: treat GValues containing (G_TYPE_STRING, NULL)
  or (G_TYPE_STRV, NULL) as empty string or empty array instead of asserting
  (fd.o #71811, Xavier Claessens)

• Upload documentation correctly (Simon McVittie)

• Fix under-linking (fd.o #68601, Simon McVittie)

[1] credit: https://twitter.com/keybuk/status/433058371290157056
2014-02-20 10:17:45 +00:00
drochner
7a8a48c307 update a comment 2014-02-19 19:31:08 +00:00
drochner
16644fd8c7 update to 01/22/2014 release from Intel, no changelog available 2014-02-19 19:00:14 +00:00