pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/trunk]: pkgsrc/security/stunnel Update to 5.46
details: https://anonhg.NetBSD.org/pkgsrc/rev/e28aab069236
branches: trunk
changeset: 309030:e28aab069236
user: ryoon <ryoon%pkgsrc.org@localhost>
date: Thu Jun 07 18:54:20 2018 +0000
description:
Update to 5.46
Changelog:
Version 5.46, 2018.05.28, urgency: MEDIUM
* New features
- The default cipher list was updated to a safer value:
"HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK".
* Bugfixes
- Default accept address restored to INADDR_ANY.
Version 5.45, 2018.05.21, urgency: MEDIUM
* New feature sponsored by https://loadbalancer.org/
- Implemented delayed deallocation of service sections
after configuration file reload.
* Other new features
- OpenSSL DLLs updated to version 1.0.2o.
- Deprecated the sslVersion option.
- The "socket" option is now also available in service sections.
- Implemented try-restart in the SysV init script (thx to
Peter Pentchev).
- TLS 1.3 compliant session handling for OpenSSL 1.1.1.
- Default "failover" value changed from "rr" to "prio".
- New "make check" tests.
* Bugfixes
- A service no longer refuses to start if binding fails for
some (but not all) addresses:ports.
- Fixed compression handling with OpenSSL 1.1.0 and later.
- _beginthread() replaced with safer _beginthreadex().
- Fixed exception handling in libwrap.
- Fixed exec+connect services.
- Fixed automatic resolver delaying.
- Fixed a Gentoo cross-compilation bug (thx to Joe Harvell).
- A number of "make check" framework fixes.
- Fixed false postive memory leak logs.
- Build fixes for OpenSSL versions down to 0.9.7.
- Fixed (again) round-robin failover in the FORK threading model.
Version 5.44, 2017.11.26, urgency: MEDIUM
* New features
- Signed Win32 executables, libraries, and installer.
* Bugfixes
- Default accept address restored to INADDR_ANY.
- Fixed a race condition in "make check".
- Fixed removing the pid file after configuration reload.
Version 5.43, 2017.11.05, urgency: LOW
* New features
- OpenSSL DLLs updated to version 1.0.2m.
- Android build updated to OpenSSL 1.1.0g.
- Allow for multiple "accept" ports per section.
- Self-test framework (make check).
- Added config load before OpenSSL init (thx to Dmitrii Pichulin).
- OpenSSL 1.1.0 support for Travis CI.
- OpenSSL 1.1.1-dev compilation fixes.
* Bugfixes
- Fixed a memory fault on Solaris.
- Fixed round-robin failover in the FORK threading model.
- Fixed handling SSL_ERROR_ZERO_RETURN in SSL_shutdown().
- Minor fixes of the logging subsystem.
diffstat:
security/stunnel/Makefile | 4 ++--
security/stunnel/distinfo | 14 +++++++-------
security/stunnel/patches/patch-ac | 14 +++++++-------
security/stunnel/patches/patch-configure | 16 ++++++++--------
4 files changed, 24 insertions(+), 24 deletions(-)
diffs (86 lines):
diff -r d0e1c0bd00af -r e28aab069236 security/stunnel/Makefile
--- a/security/stunnel/Makefile Thu Jun 07 16:34:45 2018 +0000
+++ b/security/stunnel/Makefile Thu Jun 07 18:54:20 2018 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.108 2017/08/11 01:30:23 schmonz Exp $
+# $NetBSD: Makefile,v 1.109 2018/06/07 18:54:20 ryoon Exp $
-DISTNAME= stunnel-5.42
+DISTNAME= stunnel-5.46
CATEGORIES= security
MASTER_SITES= http://www.stunnel.org/downloads/
diff -r d0e1c0bd00af -r e28aab069236 security/stunnel/distinfo
--- a/security/stunnel/distinfo Thu Jun 07 16:34:45 2018 +0000
+++ b/security/stunnel/distinfo Thu Jun 07 18:54:20 2018 +0000
@@ -1,10 +1,10 @@
-$NetBSD: distinfo,v 1.56 2018/02/02 09:41:04 jperkin Exp $
+$NetBSD: distinfo,v 1.57 2018/06/07 18:54:20 ryoon Exp $
-SHA1 (stunnel-5.42.tar.gz) = c9228cb94750bfa4a8f6594d544280002fd43345
-RMD160 (stunnel-5.42.tar.gz) = c40db532d1121681b9ddecfe56bff3e5b8152f54
-SHA512 (stunnel-5.42.tar.gz) = 875af19e8a4fa8e983e98d3e6bea198b789bea9b18933ed74aa1f9ce6922e4c4dd3a4ccae3b74c12de30c39b68c3210c9adb7cd228c7fefc28dff258dcdb4968
-Size (stunnel-5.42.tar.gz) = 649496 bytes
+SHA1 (stunnel-5.46.tar.gz) = 5b6f337e5025c7004cf34f038f579f09fd36c6b0
+RMD160 (stunnel-5.46.tar.gz) = 8fe36d56e5ece75543159e8a7696058f0f3736b9
+SHA512 (stunnel-5.46.tar.gz) = 2000e36d4d011a83e47afcaf19473e083da010d7b3909cb831c51975512257888615b5d64f4a4d78f48529d68c6740ea2be7f7935b0ab86de4535e290f78cc97
+Size (stunnel-5.46.tar.gz) = 706499 bytes
SHA1 (patch-aa) = b247aca629197887fb720f7a02d9b73d60bb0d37
-SHA1 (patch-ac) = 4e5e0a3cfe95b3952741814a1f26bcb99d002fdc
-SHA1 (patch-configure) = ef0430f146c5d6f158a13271f90073ea7c33867b
+SHA1 (patch-ac) = c2a3548f71dd218ed21925ec4631982751fa9d5a
+SHA1 (patch-configure) = 4e67db7176e2953e054370b35fb9955327329b23
SHA1 (patch-stunnel.conf-sample.in) = 9edaabd1bc15d3ff8524178f4a6aba4a7963b015
diff -r d0e1c0bd00af -r e28aab069236 security/stunnel/patches/patch-ac
--- a/security/stunnel/patches/patch-ac Thu Jun 07 16:34:45 2018 +0000
+++ b/security/stunnel/patches/patch-ac Thu Jun 07 18:54:20 2018 +0000
@@ -1,15 +1,15 @@
-$NetBSD: patch-ac,v 1.20 2017/01/24 03:34:28 ryoon Exp $
+$NetBSD: patch-ac,v 1.21 2018/06/07 18:54:20 ryoon Exp $
We'll take care of PKG_SYSCONFSUBDIR ourselves, thanks.
---- src/Makefile.in.orig 2017-01-01 22:17:59.000000000 +0000
+--- src/Makefile.in.orig 2018-05-23 12:54:04.000000000 +0000
+++ src/Makefile.in
-@@ -375,7 +375,7 @@ CLEANFILES = stunnel3
-
+@@ -383,7 +383,7 @@ CLEANFILES = stunnel3
# Additional preprocesor definitions
- stunnel_CPPFLAGS = -I/usr/kerberos/include -I$(SSLDIR)/include \
-- -DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)/stunnel"'
-+ -DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)"'
+ stunnel_CPPFLAGS = -I$(SYSROOT)/usr/kerberos/include \
+ -I$(SSLDIR)/include -DLIBDIR='"$(pkglibdir)"' \
+- -DCONFDIR='"$(sysconfdir)/stunnel"'
++ -DCONFDIR='"$(sysconfdir)"'
# TLS library
stunnel_LDFLAGS = -L$(SSLDIR)/lib64 -L$(SSLDIR)/lib -lssl -lcrypto
diff -r d0e1c0bd00af -r e28aab069236 security/stunnel/patches/patch-configure
--- a/security/stunnel/patches/patch-configure Thu Jun 07 16:34:45 2018 +0000
+++ b/security/stunnel/patches/patch-configure Thu Jun 07 18:54:20 2018 +0000
@@ -1,15 +1,15 @@
-$NetBSD: patch-configure,v 1.3 2018/02/02 09:41:04 jperkin Exp $
+$NetBSD: patch-configure,v 1.4 2018/06/07 18:54:20 ryoon Exp $
Leave pkgsrc to handle security features.
---- configure.orig 2017-05-13 09:03:35.000000000 +0000
+--- configure.orig 2018-05-23 12:54:05.000000000 +0000
+++ configure
-@@ -5827,7 +5827,7 @@ fi
+@@ -6271,7 +6271,7 @@ fi
eval ac_res=\$$as_CACHEVAR
{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
$as_echo "$ac_res" >&6; }
--if test x"`eval 'as_val=${'$as_CACHEVAR'};$as_echo "$as_val"'`" = xyes; then :
-+if test x"`eval 'as_val=${'$as_CACHEVAR'};$as_echo "$as_val"'`" = xDISABLED; then :
- if ${CFLAGS+:} false; then :
- case " $CFLAGS " in
- *" $flag "*)
+-if eval test \"x\$"$as_CACHEVAR"\" = x"yes"; then :
++if eval test \"x\$"$as_CACHEVAR"\" = x"DISABLED"; then :
+
+ if ${CFLAGS+:} false; then :
+
Home |
Main Index |
Thread Index |
Old Index