Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pkgin: download mismatch: /var/db/pkgin/cache/git-docs-2.6.4.tgz #319

Closed
nifoc opened this issue Jan 29, 2016 · 3 comments
Closed

pkgin: download mismatch: /var/db/pkgin/cache/git-docs-2.6.4.tgz #319

nifoc opened this issue Jan 29, 2016 · 3 comments
Assignees

Comments

@nifoc
Copy link

nifoc commented Jan 29, 2016

Zone: base-64-lts 15.4.0

[root@d8e33a09-cdd2-6f63-f355-a59483b86f44 ~]# uname -a
SunOS d8e33a09-cdd2-6f63-f355-a59483b86f44 5.11 joyent_20151112T202630Z i86pc i386 i86pc Solaris
[root@d8e33a09-cdd2-6f63-f355-a59483b86f44 ~]# pkgin -v
pkgin 0.9.3 for SunOS-5.11 x86_64 (using SQLite 3.9.2)
[root@d8e33a09-cdd2-6f63-f355-a59483b86f44 ~]# pkgin in git-docs
calculating dependencies... done.

nothing to upgrade.
1 packages to be installed (605K to download, 2209K to install):

git-docs-2.6.4

proceed ? [Y/n] y
downloading packages...
git-docs-2.6.4.tgz                                                                                                100%  605KB 605.2KB/s 605.2KB/s   00:00
pkgin: download mismatch: /var/db/pkgin/cache/git-docs-2.6.4.tgz

Among other things, this causes the build-essential to not install, because it depends on git-docs.

I tried running pkgin clean, but that didn't help.

@nifoc
Copy link
Author

nifoc commented Jan 29, 2016

I think the package repository (2015Q4/x86_64) is currently being updated.

Might that be the cause?

@jperkin jperkin self-assigned this Jan 30, 2016
@jperkin
Copy link
Collaborator

jperkin commented Jan 30, 2016

Yeh, unfortunately there is always a window during rsync where things may get out of sync. Normally this window is very very small so not usually noticed, but 2015Q4 had an OpenSSL rebuild over the past few days which causes a large number of packages to be rebuilt, slowing down the rsync and causing the mismatch between the packages and pkg_summary.xz depending on what has currently been synced.

Unfortunately there's no good solution to this, short of atomically switching out the entire packages directory, which isn't currently practical, but may be something we'll need to implement anyway.

@nifoc
Copy link
Author

nifoc commented Jan 31, 2016

Thanks for the explanation, that makes perfect sense!

I'm going to close this, because everything is working again now.

@nifoc nifoc closed this as completed Jan 31, 2016
jperkin pushed a commit that referenced this issue Aug 4, 2016
- 1.4.40
  * [mod_ssi] enhance support for ssi vars (thx fbrosson)
  * add handling for lua 5.2 and 5.3 (fixes #2674)
  * use libmemcached instead of deprecated libmemcache
  * add force_assert for more allocation results
  * [mod_cgi] use MAP_PRIVATE to mmap temporary file (fixes #2715)
  * [core] do not send SIGHUP to process group unless server.max-workers is used (fixes #2711)
  * [mod_cgi] edge case chdir "/" when docroot "/" (fixes #2460)
  * [mod_cgi] issue trace and exit if execve() fails (closes #2302)
  * [configparser] don't continue after parse error (fixes #2717)
  * [core] never evaluate else branches until the previous branches are ready (fixes #2598)
  * [core] fix conditional cache handling
  * [core] improve conditional enabling (thx Gwenlliana, #2598)
  * [mod_compress] case-insensitive content-codings (fixes #2645)
  * [plugins] don't include dlfcn.h if not needed (fixes #2548)
  * [mod_fastcgi] 404 for X-Sendfile file not found (fixes #2474)
  * [mod_cgi] send 500 if CGI ends and there is no response (fixes #2542)
  * [mod_cgi] consolidate CGI cleanup code
  * [mod_cgi] simplify mod_cgi_handle_subrequest()
  * [mod_cgi] kill CGI if fail to write request body
  * [mod_proxy] use case-insensitive comparision to filter headers, send Connection: Close to backend (fixes #421)
  * [mod_dirlisting] dir-listing.hide-dotfiles = "enabled" by default (fixes #1081)
  * [mod_secdownload] fix buffer overflow in secdl_verify_mac (reported by Fortify Open Review Project)
  * [mod_fastcgi,mod_scgi] fix leaking file-descriptor when backend spawning failed (reported by Fortify Open Review Project)
  * [core] improve array API to prevent memory leaks
  * [core] refactor array search; raise array size limit to SSIZE_MAX
  * [core] fix memory leak in configparser_merge_data
  * [core] provide array_extract_element and use it
  * [core] configparser: error on duplicate keys in array merge (fixes #2685)
  * [core] more careful parse of $SERVER["socket"] config str (prepare #2204)
  * [core] accept $SERVER["socket"] without port, use server.port as fallback (fixes #2204)
  * [mod_magnet] define lua_pushglobaltable (for lua5.1) and use it (fixes #2719)
  * [ssl] support disabling ssl.verifyclient.activate in SNI callback (fixes #2531)
  * restart (some) syscalls after SIGCHLD interrupted them; should fix LDAP problems (fixes #2464)
  * [core] log remote address on request timeouts (fixes #652)
  * [autobuild] use AC_CANONICAL_HOST instead of AC_CANONICAL_TARGET (fixes #1866)
  * [core] fix request_start in keep-alive requests to mark time when received first byte (fixes #2412)
  * [core] truncate pidfile on exit (fixes #2695)
  * consistent inclusion of config.h at top of files (fixes #2073)
  * [core] add generic vector implementation
  * [core] replace array weakref with vector
  * [base64] fix crash due to broken force_assert
  * [unittests] add test_buffer and test_base64 unit tests
  * [buffer] refactor buffer_path_simplify (fixes #2560)
  * validate return values from strtol, strtoul (fixes #2564)
  * [mod_ssi] Add SSI vars SCRIPT_{URI,URL} and REQUEST_SCHEME (fixes #2721)
  * [config] warn if server.upload-dirs has non-existent dirs (fixes #2508)
  * [mod_proxy] accept LF delimited headers, not just CRLF (fixes #2594)
  * [core] wait for grandchild to be ready when daemonizing (fixes #2712, thx pasdVn)
  * [core] respond 411 Length Required if request has Transfer-Encoding: chunked (fixes #631)
  * [core] fixed the loading for default modules if they are specified explicitly
  * [core] lighttpd -tt performs preflight startup checks (fixes #411)
  * [stat] mimetype.xattr-name global config option (fixes #2631)
  * [mod_webdav] allow Depth: Infinity lock on file (fixes #2296)
  * [mod_status] use snprintf() instead of sprintf()
  * pass buf size to li_tohex()
  * use li_[iu]tostrn() instead of li_[iu]tostr()
  * [stream] fstat() after open() to obtain file size
  * [core] clean up srv before exiting for lighttpd -[vVh]
  * [mod_fastcgi,mod_scgi] check for spawning on same unix socket (fixes #319)
  * [mod_cgi] always set QUERY_STRING (fixes #1339)
  * [mod_auth] send charset="UTF-8" in WWW-Authenticate (fixes #1468)
  * [mod_magnet] rename var for clarity (fixes #1483)
  * [mod_extforward] reset cond_cache for scheme (fixes #1499)
  * [mod_webdav] readdir POSIX compat (fixes #1826)
  * [mod_expire] reset caching response headers for error docs (fixes #1919)
  * [mod_status] page refresh option (fixes #2170)
  * [mod_status] table w/ count of con states (fixes #2427)
  * [mod_dirlisting] class for dir <tr> (fixes #2304)
  * [core] define __STDC_WANT_LIB_EXT1__ (fixes #2722)
  * [core] setrlimit max-fds <= rlim_max for non-root (fixes #2723)
  * [mod_ssi] config ssi.conditional-requests
  * [mod_ssi] config ssi.exec (fixes #2051)
  * [mod_redirect,mod_rewrite] short-circuit if blank replacement (fixes #2085)
  * [mod_indexfile] save physical path to env (fixes #448, #892)
  * [core] open fd when appending file to cq (fixes #2655)
  * [config] server.listen-backlog option (fixes #1825, #2116)
  * [core] retry tempdirs on partial write, ENOSPC (fixes #2588)
  * [core] compile with upcoming openssl 1.1.0 release (fixes #2727)
  * [core] improve dynamic handler control flow logic
  * [core] defer reading request body until handle subrequest (fixes #2541)
  * [core] always poll for client POLLHUP/POLLERR events (fixes #399)
  * [mod_fastcgi,mod_scgi,mod_proxy] handlers can read response before sending req body (fixes #131, #2566)
  * [mod_cgi] asynchronous send of request body to CGI
  * [core] compile with upcoming openssl 1.1.0 release (fixes #2727)
  * [core] set REDIRECT_STATUS to error_handler_saved_status (fixes #1828)
  * [core] server.error-handler new directive for error pages (fixes #2702)
  * [core] support IPv6 in $HTTP["remote-ip"] CIDR cond match (fixes #2706)
  * [core] http_response_send_file() shared code (#2017)
  * [mod_fastcgi] use http_response_xsendfile() (fixes #799, fixes #851, fixes #2017, fixes #2076)
  * [mod_scgi] X-Sendfile feature (fixes #2253)
  * [mod_cgi] X-Sendfile feature (fixes #2313)
  * [mod_webdav] lseek,read if fs can not mmap (#2666, fixes #962)
  * [mod_compress] use mmap and trap SIGBUS (#2666, fixes #1879)
  * fallback to lseek()/read() if mmap() fails (#fixes 2666)
  * [mod_auth] skip blank lines and comment lines (fixes #2327)
  * [core] fallback to write if sendfile not supported (fixes #471, #987)
  * [core] preserve PATH_INFO case on case-insensitive fs (fixes #406)
  * [mod_ssi, mod_cml] set DOCUMENT_ROOT to basedir (fixes #2383)
  * [core] cmd line opt to shutdown after idle time limit (fixes #2696)
  * [core] lighttpd -1 handles single request on stdin socket (fixes #1584)
  * [mod_fastcgi,mod_scgi] IPv6 support (fixes #2372)
  * [mod_status] add JSON output option (fixed #2432)
  * [mod_webdav] map COPY/MOVE Destination to aliases (fixes #1787)
  * [mod_webdav] improve PROPFIND,PROPPATCH (#1818, #1953)
  * [core] reset response headers, write_queue for error docs
  * build with libressl
  * static build instructions using SCons or make
  * [mod_auth] preserve WWW-Authenticate for error docs (fixes #2730)
  * check close() return code after writing to file
  * adjustments for openssl 1.1.0 pre-release
  * [config] support include file glob (fixes #1221)
  * [mod_evasive] 302 redirect option if limit reached (fixes #2199)
  * [build] enhancements for cross-compiling (fixes #2276)
  * [mod_accesslog] report aborted con state with %X (fixes #1890)
  * [mod_ssi] fix SSI statement parser
  * [mod_ssi] include relative to alias,userdir (fixes #222)
  * [mod_ssi] add PCRE_* options to constrain regex
  * [mod_ssi] more flexible quoting (fixes #1768)
  * [core] wrap IPv6 literal in "[]" in redirect URL
  * [mod_ssi] fix parse of tag across buf boundary (fixes #2732)
  * [mod_cgi,mod_scgi] X-Sendfile sets file_started (fixes #2733)
  * [mod_fastcgi] no chunked response w/ X-Sendfile (fixes #2733)
  * [config] opts for http header parsing strictness (fixes #551,
  fixes #1086, fixes #1184, fixes #2143, #2258, #2281, fixes #946,
  fixes #1330, fixes #602, #1016)
  * [config] normalize IP strings in lighttpd.conf
  * [build_cmake] use MODULE on Mac OS X (fixes #1761)
  * [config] server.bsd-accept-filter option
  * [mod_webdav] create file w/ LOCK request if ENOENT
  * [core] buffer large responses to tempfiles (fixes #758, fixes #760, fixes #933, fixes #1387, #1283, fixes #2083)
  * [core] stream response to client (#949)
  * [TLS] release openssl buffers as used (fixes #1265, fixes #1283, #881)
  * [config] config options to stream request/response (#949, #376)
  * [core] option to stream request body to backend (fixes #376)
  * [core] option to stream response body to client (fixes #949, #760, #1283, #1387)
  * drain backend socket/pipe bufs upon FDEVENT_HUP
  * remove excess calls to joblist_append()
  * defer choosing "Transfer-Encoding: chunked"
  * asynchronous, bidirectional streaming options
  * fix errors detected by Coverity Scan
  * [cygwin] fix mod_proxy and mod_fastcgi ioctl use
  * [mod_webdav] remove excess SQL param to UNLOCK
  * graceful shutdown without unnecessary 1 sec delay
  * [core] disable Nagle algorithm (TCP_NODELAY)
  * [core] add declarations to fdevent.h (#2373)
  * [tests] remove dependency on CGI.pm
  * [TLS] fix return value checks during cert init
  * [core] fix server.max-request-size to be precise (fixes #2131)
  * [mod_webdav] fix proppatch mem leak, other fixes (#fixes 1334, #fixes 2000)
  * [autobuild] CMake check for struct tm tm_gmtoff (fixes #2014)
  * [mod_uploadprogress] fix mem leak (#1858)
  * [core] make server.max-request-size scopeable (fixes #1901)
  * [mod_fastcgi,mod_scgi] check for spawning on same unix socket (#319)
  * [mod_accesslog] %a %A %C %D %k %{}t %{}T (fixes #1145, fixes
  #1415, fixes #2081)
  * [mod_access] new directive url.access-allow (fixes #1421)
  * [core] fdevent_libev: update use of ev_timer
  * [mod_cgi] handle local redirect response (fixes #2108)
jperkin pushed a commit that referenced this issue Aug 24, 2016
Changes from 3.2.2 to 3.2.3
Improvements

    It is now possible to use HDF5 with the new shared library naming scheme (>= 1.8.10, hdf5.dll instead of hdf5dll.dll) on Windows (gh-540). Thanks to Tadeu Manoel.
    Now :program: ptdump sorts output by node name and does not print a backtrace if file cannot be opened. Thanks to Zbigniew Jędrzejewski-Szmek.

Bugs fixed

    Only run tables.tests.test_basics.UnicodeFilename if the filesystem encoding is utf-8. Closes gh-485.
    Add lib64 to posix search path. (closes gh-507) Thanks to Mehdi Sadeghi.
    Ensure cache entries are removed if fewer than 10 (closes gh-529). Thanks to Graham Jones.
    Fix segmentation fault in a number of test cases that use index.Index (closes gh-532 and gh-533). Thanks to Diane Trout.
    Fixed the evaluation of transcendental functions when numexpr is compiled with VML support (closes gh-534, PR #536). Thanks to Tom Kooij.
    Make sure that index classes use buffersizes that are a multiple of chunkshape[0] (closes gh-538, PR #538). Thanks to Tom Kooij.
    Ensure benchmark paths exist before benchmarks are executed (PR #544). Thanks to rohitjamuar.

Other changes

    Minimum Cython version is now v0.21

Changes from 3.2.1.1 to 3.2.2
Bug fixed

    Fix AssertionError in Row.__init_loop. See gh-477.
    Fix issues with Cython 0.23. See gh-481.
    Only run tables.tests.test_basics.UnicodeFilename if the filesystem encoding is utf-8. Closes gh-485.
    Fix missing missing PyErr_Clear. See gh-#486.
    Fix the C type of some numpy attributes. See gh-494.
    Cast selection indices to integer. See gh-496.
    Fix indexesextension._keysort_string. Closes gh-497 and gh-498.

Changes from 3.2.1 to 3.2.1.1

    Fix permission on distributed source distribution

Other changes

    Minimum Cython version is now v0.21

Changes from 3.2.0 to 3.2.1
Bug fixed

    Fix indexesextension._keysort. Fixes gh-455. Thanks to Andrew Lin.

Changes from 3.1.1 to 3.2.0
Improvements

    The nrowsinbuf is better computed now for EArray/CArray having a small chunkshape in the main dimension. Fixes #285.

    PyTables should be installable very friendly via pip, including NumPy being installed automatically in the unlikely case it is not yet installed in the system. Thanks to Andrea Bedini.

    setup.py has been largely simplified and now it requires setuptools. Although we think this is a good step, please keep us informed this is breaking some installation in a very bad manner.

    setup.py now is able to used pkg-config, if available, to locate required libraries (hdf5, bzip2, etc.). The use of pkg-config can be controlled via setup.py command line flags or via environment variables. Please refer to the installation guide (in the User Manual) for details. Closes gh-442.

    It is now possible to create a new node whose parent is a softlink to another group (see gh-422). Thanks to Alistair Muldal.

    link.SoftLink objects no longer need to be explicitly dereferenced. Methods and attributes of the linked object are now automatically accessed when the user acts on a soft-link (see gh-399). Thanks to Alistair Muldal.

    Now ptrepack recognizes hardlinks and replicates them in the output (repacked) file. This saves disk space and makes repacked files more conformal to the original one. Closes gh-380.

    New pttree script for printing HDF5 file contents as a pretty ASCII tree (closes gh-400). Thanks to Alistair Muldal.

    The internal Blosc library has been downgraded to version 1.4.4. This is in order to still allow using multiple threads inside Blosc, even on multithreaded applications (see gh-411, gh-412, gh-437 and gh-448).

    The print_versions() function now also reports the version of compression libraries used by Blosc.

    Now the setup.py tries to use the ‘-march=native’ C flag by default. In falls back on ‘-msse2’ if ‘-march=native’ is not supported by the compiler. Closes gh-379.

    Fixed a spurious unicode comparison warning (closes gh-372 and gh-373).

    Improved handling of empty string attributes. In previous versions of PyTables empty string were stored as scalar HDF5 attributes having size 1 and value ‘0’ (an empty null terminated string). Now empty string are stored as HDF5 attributes having zero size

    Added a new cookbook recipe and a couple of examples for simple threading with PyTables.

    The redundant utilsextension.get_indices() function has been eliminated (replaced by slice.indices()). Closes gh-195.

    Allow negative indices in point selection (closes gh-360)

    Index wasn’t being used if it claimed there were no results. Closes gh-351 (see also gh-353)

    Atoms and Col types are no longer generated dynamically so now it is easier for IDEs and static analysis tool to handle them (closes gh-345)

    The keysort functions in idx-opt.c have been cythonised using fused types. The perfomance is mostly unchanged, but the code is much more simpler now. Thanks to Andrea Bedini.

    Small unit tests re-factoring:

        print_versions() and tests.common.print_heavy() functions

            moved to the tests.common module

        always use print_versions() when test modules are called as scripts

        use the unittest2 package in Python 2.6.x

        removed internal machinery used to replicate unittest2 features

        always use tests.common.PyTablesTestCase as base class for all test cases

        code of the old tasts.common.cleanup() function has been moved to tests.common.PyTablesTestCase.tearDown() method

        new implementation of tests.common.PyTablesTestCase.assertWarns() compatible with the one provided by the standard unittest module in Python >= 3.2

        use tests.common.PyTablesTestCase.assertWarns() as context manager when appropriate

        use the unittest.skipIf() decorator when appropriate

        new :class:tests.comon.TestFileMixin: class

Bugs fixed

    Fixed compatibility problems with numpy 1.9 and 1.10-dev (closes gh-362 and gh-366)
    Fixed compatibility with Cython >= 0.20 (closes gh-386 and gh-387)
    Fixed support for unicode node names in LRU cache (only Python 2 was affected). Closes gh-367 and gh-369.
    Fixed support for unicode node titles (only Python 2 was affected). Closes gh-370 and gh-374.
    Fixed a bug that caused the silent truncation of unicode attributes containing the ‘0’ character. Closes gh-371.
    Fixed descr_from_dtype() to work as expected with complex types. Closes gh-381.
    Fixed the tests.test_basics.ThreadingTestCase test case. Closes gh-359.
    Fix incomplete results when performing the same query twice and exhausting the second iterator before the first. The first one writes incomplete results to seqcache (gh-353)
    Fix false results potentially going to seqcache if tableextension.Row.update() is used during iteration (see gh-353)
    Fix Column.create_csindex() when there’s NaNs
    Fixed handling of unicode file names on windows (closes gh-389)
    No longer not modify sys.argv at import time (closes gh-405)
    Fixed a performance issue on NFS (closes gh-402)
    Fixed a nasty problem affecting results of indexed queries. Closes gh-319 and probably gh-419 too.
    Fixed another problem affecting results of indexed queries too. Closes gh-441.
    Replaced “len(xrange(start, stop, step))” -> “len(xrange(0, stop - start, step))” to fix issues with large row counts with Python 2.x. Fixes #447.

Other changes

    Cython is not a hard dependency anymore (although developers will need it so as to generated the C extension code).

    The number of threads used by default for numexpr and Blosc operation that was set to the number of available cores have been reduced to 2. This is a much more reasonable setting for not creating too much overhead.
jperkin pushed a commit that referenced this issue Oct 5, 2016
v1.1.0
New : contrib/pzstd, parallel version of zstd, by Nick Terrell
added : NetBSD install target (#338)
Improved : speed for batches of small files
Improved : speed of zlib wrapper, by Przemyslaw Skibinski
Changed : libzstd on Windows supports legacy formats, by Christophe Chevalier
Fixed : CLI -d output to stdout by default when input is stdin (#322)
Fixed : CLI correctly detects console on Mac OS-X
Fixed : CLI supports recursive mode `-r` on Mac OS-X
Fixed : Legacy decoders use unified error codes, reported by benrg (#341), fixed by Przemyslaw Skibinski
Fixed : compatibility with OpenBSD, reported by Juan Francisco Cantero Hurtado (#319)
Fixed : compatibility with Hurd, by Przemyslaw Skibinski (#365)
Fixed : zstd-pgo, reported by octoploid (#329)
jperkin pushed a commit that referenced this issue Oct 18, 2016
[3.4.6]: hashie/hashie@v3.4.5...v3.4.6

### Fixed

* [#368](hashie/hashie#368): Since `hashie/mash` can be required alone, require its dependencies - [@jrafanie](https://github.com/jrafanie).

## [3.4.5] - 2016-09-16

[3.4.5]: hashie/hashie@v3.4.4...v3.4.5

### Added

* [#337](hashie/hashie#337), [#331](hashie/hashie#331): `Hashie::Mash#load` accepts a `Pathname` object - [@gipcompany](https://github.com/gipcompany).

### Deprecated

* [#366](hashie/hashie#366): Hashie is no longer tested on Ruby < 2 - [@dblock](https://github.com/dblock).

### Fixed

* [#358](hashie/hashie#358): Fixed support for Array#dig - [@modosc](https://github.com/modosc).
* [#365](hashie/hashie#365): Ensured ActiveSupport::HashWithIndifferentAccess is defined before use in #deep_locate  - [@mikejarema](https://github.com/mikejarema).

### Miscellanous

* [#366](hashie/hashie#366): Added Danger, PR linter - [@dblock](https://github.com/dblock).

## [3.4.4] - 2016-04-29

[3.4.4]: hashie/hashie@v3.4.3...v3.4.4

### Added

* [#349](hashie/hashie#349): Convert `Hashie::Mash#dig` arguments for Ruby 2.3.0 - [@k0kubun](https://github.com/k0kubun).

### Fixed

* [#240](hashie/hashie#240): Fixed nesting twice with Clash keys - [@bartoszkopinski](https://github.com/bartoszkopinski).
* [#317](hashie/hashie#317): Ensure `Hashie::Extensions::MethodQuery` methods return boolean values - [@michaelherold](https://github.com/michaelherold).
* [#319](hashie/hashie#319): Fix a regression from 3.4.1 where `Hashie::Extensions::DeepFind` is no longer indifference-aware - [@michaelherold](https://github.com/michaelherold).
* [#322](hashie/hashie#322): Fixed `reverse_merge` issue with `Mash` subclasses - [@marshall-lee](https://github.com/marshall-lee).
* [#346](hashie/hashie#346): Fixed `merge` breaking indifferent access - [@docwhat](https://github.com/docwhat), [@michaelherold](https://github.com/michaelherold).
* [#350](hashie/hashie#350): Fixed from string translations used with `IgnoreUndeclared` - [@marshall-lee](https://github.com/marshall-lee).
jperkin pushed a commit that referenced this issue Oct 18, 2016
## [1.11.3][] (2016-09-16)

  * Fix known_hosts caching to match on the entire hostlist
    [PR #364](capistrano/sshkit#364) @byroot

## [1.11.2][] (2016-07-29)

### Bug fixes

  * Fixed a crash occurring when `Host@keys` was set to a non-Enumerable.
    @xavierholt [PR #360](capistrano/sshkit#360)

## [1.11.1][] (2016-06-17)

### Bug fixes

  * Fixed a regression in 1.11.0 that would cause
    `ArgumentError: invalid option(s): known_hosts` in some older versions of
    net-ssh. @byroot [#357](capistrano/sshkit#357)

## [1.11.0][] (2016-06-14)

### Bug fixes

  * Fixed colorized output alignment in Logger::Pretty. @xavierholt
    [PR #349](capistrano/sshkit#349)
  * Fixed a bug that prevented nested `with` calls
    [#43](capistrano/sshkit#43)

### Other changes

  * Known hosts lookup optimization is now enabled by default. @byroot

## 1.10.0 (2016-04-22)

  * You can now opt-in to caching of SSH's known_hosts file for a speed boost
    when deploying to a large fleet of servers. Refer to the
    [README](https://github.com/capistrano/sshkit/tree/v1.10.0#known-hosts-caching) for
    details. We plan to turn this on by default in a future version of SSHKit.
    [PR #330](capistrano/sshkit#330) @byroot
  * SSHKit now explicitly closes its pooled SSH connections when Ruby exits;
    this fixes `zlib(finalizer): the stream was freed prematurely` warnings
    [PR #343](capistrano/sshkit#343) @mattbrictson
  * Allow command map entries (`SSHKit::CommandMap#[]`) to be Procs
    [PR #310](capistrano/sshkit#310)
    @mikz

## 1.9.0

**Refer to the 1.9.0.rc1 release notes for a full list of new features, fixes,
and potentially breaking changes since SSHKit 1.8.1.** There are no changes
since 1.9.0.rc1.

## 1.9.0.rc1

### Potentially breaking changes

  * The SSHKit DSL is no longer automatically included when you `require` it.
    **This means you  must now explicitly `include SSHKit::DSL`.**
    See [PR #219](capistrano/sshkit#219) for details.
    @beatrichartz
  * `SSHKit::Backend::Printer#test` now always returns true
    [PR #312](capistrano/sshkit#312) @mikz

### New features

  * `SSHKit::Formatter::Abstract` now accepts an optional Hash of options
    [PR #308](capistrano/sshkit#308) @mattbrictson
  * Add `SSHKit::Backend.current` so that Capistrano plugin authors can refactor
    helper methods and still have easy access to the currently-executing Backend
    without having to use global variables.
  * Add `SSHKit.config.default_runner` options that allows to override default command runner.
    This option also accepts a name of the custom runner class.
  * The ConnectionPool has been rewritten in this release to be more efficient
    and have a cleaner internal API. You can still completely disable the pool
    by setting `SSHKit::Backend::Netssh.pool.idle_timeout = 0`.
    @mattbrictson @byroot [PR #328](capistrano/sshkit#328)

### Bug fixes

  * make sure working directory for commands is properly cleared after `within` blocks
    [PR #307](capistrano/sshkit#307)
    @steved
  * display more accurate string for commands with spaces being output in `Formatter::Pretty`
    [PR #304](capistrano/sshkit#304)
    @steved
    [PR #319](capistrano/sshkit#319) @mattbrictson
  * Fix a race condition experienced in JRuby that could cause multi-server
    deploys to fail. [PR #322](capistrano/sshkit#322)
    @mattbrictson
jperkin pushed a commit that referenced this issue Oct 22, 2016
## 2.0.3 (2016-08-03)

* [#365](httprb/http#365)
  Add `HTTP::Response#content_length`
  ([@janko-m])

* [#335](httprb/http#335),
  [#360](httprb/http#360)
  Set `Content-Length: 0` header for `nil` bodies.
  ([@britishtea])


## 2.0.2 (2016-06-24)

* [#353](httprb/http#353)
  Avoid a dependency cycle between Client and Connection classes.
  ([@jhbabon])


## 2.0.1 (2016-05-12)

* [#341](httprb/http#341)
  Refactor some string manipulations so they are more performant
  (up to 3-4x faster) and more concise.
  ([@tonyta])

* [#339](httprb/http#341)
  Always use byte methods when writing/slicing the write buffer.
  ([@zanker])


## 2.0.0 (2016-04-23)

* [#333](httprb/http#333)
  Fix HTTPS request headline when sent via proxy.
  ([@Connorhd])

* [#331](httprb/http#331)
  Add `#informational?`, `#success?`, `#redirect?`, `#client_error?` and
  `#server_error?` helpers to `Response::Status`.
  ([@mwitek])

* [#330](httprb/http#330)
  Support custom CONNECT headers (request/response) during HTTPS proxy requests.
  ([@smudge])

* [#319](httprb/http#319)
  Drop Ruby 1.9.x support.
  ([@ixti])


## 1.0.4 (2016-03-19)

* [#320](httprb/http#320)
  Fix timeout regression.
  ([@tarcieri])


## 1.0.3 (2016-03-16)

* [#314](httprb/http#314)
  Validate charset before forcing encoding.
  ([@kylekyle])

* [#318](httprb/http#318)
  Remove redundant string allocations upon header names normalization.
  ([@ixti])
jperkin pushed a commit that referenced this issue Oct 22, 2016
Changes in 2.8.2

Aug 15, 2016 - version 2.8.2

  * Bug

    o 2.8.1 introduced JRuby + SSL connection problem; in some cases it cannot
      connect to trusted TLS server. 2.8.1 failed to load multiple CA
      certificates in a file. #327.

Aug 16, 2016 - version 2.8.2.1

  * Bug

    o 2.8.1 introduced another bug that causes NPE from JRuby when JRuby
      program loads httpclient and uses OpenSSL::X509::Store outside of
      httpclient. 2.8.3 fixed this problem. #325

Aug 28, 2016 - version 2.8.2.3

  * Bug

    o 2.8.2 fixed VERIFY_NONE at JRuby but the fix was not enough.

Sep 11, 2016 - version 2.8.2.4

  * Bug

    o 2.8.2 caused unexpected resulting value change of
      OpenSSL::X509::Store#add_cert method. Fixed.

Changes in 2.8.1

Aug 8, 2016 - version 2.8.1

* Changes

    o Use TLSv1.2 always on JRuby #320
    o Do not reset keep-alive connection by configuration change #315
    o Add strict_response_size_check option #316 false by default, meaning it
      behavies like browsers by default.
    o Add MIME type for XML #308

* Bug

    o Direct access to SSLConfig#cert_store in JRuby was broken from 2.7
      #276 #317
    o OpenSSL::SSL::VERIFY_NONE does not work in JRuby #319
    o Allow receiving response body in block when follow_redirects => true. #304
    o Fix blocking issue with request_async when Encoding.default_internal is
      set. #307
    o Apply timeouts for chunked transfer encoding #309

Changes in 2.8.0

Apr 24, 2016 - version 2.8.0

* Changes

    o Force using RSA 2048bit CA cert set

      Use RSA 2048bit CA cert set every time if it runs with OpenSSL (==
      except JRuby.)

      Old openssl (<1.0.1p or <1.0.2d) cannot handle this CA set and causes
      SSL connection failure against some SSL servers including AWS S3
      API. For such case you can manually specify RSA 1024bit CA cert set as a
      workaround.

	c = HTTPClient.new { |c| c.ssl_config.add_trust_ca("cacert1024.pem") }
	c.get("https://www.ruby-lang.org/")

      RSA 1024bit CA cert set is not maintained over years so you should
      consider updating OpenSSL version so that HTTPClient uses RSA 2048 bit
      CA cert set.

Changes in 2.7.2

Apr 22, 2016 - version 2.7.2

* Changes

    o Use RSA 1024bit CA cert when linked to old openssl

      Based on comments to #297 this commit silently (without warning) accepts
      RSA 1024bit certificate set when runtime ruby is liked with old OpenSSL
      (<1.0.1p or <1.0.2d.)

      If you're unsure that your OpenSSL is patched or not, and want to make
      sure to use RSA 2048bit certificate set, please call
      HTTPClient::SSLConfig#add_trust_ca("cacert.pem").

	c = HTTPClient.new { |c| c.ssl_config.add_trust_ca("cacert.pem") }
	c.get("https://www.ruby-lang.org/")

      I'm going to remove RSA 1024bit certificate set and bump httpclient
      version to 2.8.0 soon after I release this as 2.7.2. I believe almost
      all OpenSSL installation is patched quickly these days so it should not
      cause SSL connectivity problem.
jperkin pushed a commit that referenced this issue Jan 16, 2017
v1.6.1
  Version 1.6.1

  Bugfix release

  - Fixed a bug where using google-auth with scoped credentials would fail. (#328)

v1.6.0
  Version 1.6.0

  Release to drop support for Python 2.6 and add support for google-auth.

  - Support for Python 2.6 has been dropped. (#319)
  - The credentials argument to discovery.build and discovery.build_from_document
    can be either oauth2client credentials or google-auth credentials. (#319)
  - discovery.build and discovery.build_from_document now unambiguously use the
    http argument to make all requests, including the request for the discovery
    document. (#319)
  - The http and credentials arguments to discovery.build and
    discovery.build_from_document are now mutually exclusive, eliminating a
    buggy edge case. (#319)
  - If neither http or credentials is specified to discovery.build and
    discovery.build_from_document, then Application Default Credentials will
    be used. The library prefers google-auth for this if it is available, but
    can also use oauth2client's implementation. (#319)
  - Fixed resumable upload failure when receiving a 308 response. (#312)
  - Clarified the support versions of Python 3. (#316)
jperkin pushed a commit that referenced this issue Feb 6, 2017
Upstream Changelog:
Security

    gdImageCreate() doesn't check for oversized images and as such is prone to DoS vulnerabilities. (CVE-2016-9317)
    double-free in gdImageWebPtr() (CVE-2016-6912)
    potential unsigned underflow in gd_interpolation.c
    DOS vulnerability in gdImageCreateFromGd2Ctx()

Fixed

    Fix #354: Signed Integer Overflow gd_io.c
    Fix #340: System frozen
    Fix OOB reads of the TGA decompression buffer
    Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
    Fix potential unsigned underflow
    Fix double-free in gdImageWebPtr()
    Fix invalid read in gdImageCreateFromTiffPtr()
    Fix OOB reads of the TGA decompression buffer
    Fix #68: gif: buffer underflow reported by AddressSanitizer
    Avoid potentially dangerous signed to unsigned conversion
    Fix #304: test suite failure in gif/bug00006 [2.2.3]
    Fix #329: GD_BILINEAR_FIXED gdImageScale() can cause black border
    Fix #330: Integer overflow in gdImageScaleBilinearPalette()
    Fix 321: Null pointer dereferences in gdImageRotateInterpolated
    Fix whitespace and add missing comment block
    Fix #319: gdImageRotateInterpolated can have wrong background color
    Fix color quantization documentation
    Fix #309: gdImageGd2() writes wrong chunk sizes on boundaries
    Fix #307: GD_QUANT_NEUQUANT fails to unset trueColor flag
    Fix #300: gdImageClone() assigns res_y = res_x
    Fix #299: Regression regarding gdImageRectangle() with gdImageSetThickness()
    Replace GNU old-style field designators with C89 compatible initializers
    Fix #297: gdImageCrop() converts palette image to truecolor image
    Fix #290: TGA RLE decoding is broken
    Fix unnecessary non NULL checks
    Fix #289: Passing unrecognized formats to gdImageGd2 results in corrupted files
    Fix #280: gdImageWebpEx() quantization parameter is a misnomer
    Publish all gdImageCreateFromWebp*() functions and gdImageWebpCtx()
    Fix issue #276: Sometimes pixels are missing when storing images as BMPs
    Fix issue #275: gdImageBmpCtx() may segfault for non-seekable contexts
    Fix copy&paste error in gdImageScaleBicubicFixed()

Added

    More documentation
    Documentation on GD and GD2 formats
    More tests
jperkin pushed a commit that referenced this issue Mar 8, 2017
graphics/gd: security fix

Revisions pulled up:
- graphics/gd/Makefile                                          1.113
- graphics/gd/distinfo                                          1.43
- graphics/gd/patches/patch-src_gd__webp.c                      deleted

---
   Module Name:    pkgsrc
   Committed By:   spz
   Date:           Sat Feb  4 23:05:52 UTC 2017

   Modified Files:
           pkgsrc/graphics/gd: Makefile distinfo
   Removed Files:
           pkgsrc/graphics/gd/patches: patch-src_gd__webp.c

   Log Message:
   update of gd to 2.2.4.

   Upstream Changelog:
   Security

       gdImageCreate() doesn't check for oversized images and as such is prone to DoS vulnerabilities. (CVE-2016-9317)
       double-free in gdImageWebPtr() (CVE-2016-6912)
       potential unsigned underflow in gd_interpolation.c
       DOS vulnerability in gdImageCreateFromGd2Ctx()

   Fixed

       Fix #354: Signed Integer Overflow gd_io.c
       Fix #340: System frozen
       Fix OOB reads of the TGA decompression buffer
       Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
       Fix potential unsigned underflow
       Fix double-free in gdImageWebPtr()
       Fix invalid read in gdImageCreateFromTiffPtr()
       Fix OOB reads of the TGA decompression buffer
       Fix #68: gif: buffer underflow reported by AddressSanitizer
       Avoid potentially dangerous signed to unsigned conversion
       Fix #304: test suite failure in gif/bug00006 [2.2.3]
       Fix #329: GD_BILINEAR_FIXED gdImageScale() can cause black border
       Fix #330: Integer overflow in gdImageScaleBilinearPalette()
       Fix 321: Null pointer dereferences in gdImageRotateInterpolated
       Fix whitespace and add missing comment block
       Fix #319: gdImageRotateInterpolated can have wrong background color
       Fix color quantization documentation
       Fix #309: gdImageGd2() writes wrong chunk sizes on boundaries
       Fix #307: GD_QUANT_NEUQUANT fails to unset trueColor flag
       Fix #300: gdImageClone() assigns res_y = res_x
       Fix #299: Regression regarding gdImageRectangle() with gdImageSetThickness()
       Replace GNU old-style field designators with C89 compatible initializers
       Fix #297: gdImageCrop() converts palette image to truecolor image
       Fix #290: TGA RLE decoding is broken
       Fix unnecessary non NULL checks
       Fix #289: Passing unrecognized formats to gdImageGd2 results in corrupted files
       Fix #280: gdImageWebpEx() quantization parameter is a misnomer
       Publish all gdImageCreateFromWebp*() functions and gdImageWebpCtx()
       Fix issue #276: Sometimes pixels are missing when storing images as BMPs
       Fix issue #275: gdImageBmpCtx() may segfault for non-seekable contexts
       Fix copy&paste error in gdImageScaleBicubicFixed()

   Added

       More documentation
       Documentation on GD and GD2 formats
       More tests
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants