CVS log for pkgsrc/audio/icecast/Makefile

Up to [cvs.NetBSD.org] / pkgsrc / audio / icecast

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

*: recursive bump for icu 76 shlib major version bump

*: revbump for icu downgrade

*: recursive bump for icu 76.1 shlib bump

revbump after icu and protobuf updates

*: recursive bump for gnutls p11-kit option

(existing installations need the bl3.mk included, but it's now only
optionally included)

*: recursive bump for icu 74.1

*: bump for openssl 3

revbump after textproc/icu update

massive revision bump after textproc/icu update

*: bump PKGREVISION for libunistring shlib major bump

revbump for textproc/icu update

revbump for icu and libffi

revbump for boost-libs

revbump for boost-libs

revbump for textproc/icu

*: Recursive revbump from textproc/icu-68.1

Revbump for icu

revbump after updating security/nettle

revbump after boost update

icecast: skip configure.in in portability check

Already patched in configure.

*: recursive bump for libffi

all: migrate homepages from http to https

pkglint -r --network --only "migrate"

As a side-effect of migrating the homepages, pkglint also fixed a few
indentations in unrelated lines. These and the new homepages have been
checked manually.

*: Recursive revision bump for openssl 1.1.1.

*: Recursive revbump from devel/boost-libs

Recursive revbump from boost-1.71.0

*: recursive bump for nettle 3.5.1

Recursive revbump from boost-1.70.0

icecast: update to 2.4.4.

Icecast 2.4.4
-----------------------------------------------------------------------------
We are releasing Icecast 2.4.4, an important bugfix-only release.
We recommend upgrading for increased stability and compatibility!

## Fixes

- Fix: Fixed segfault in htpasswd auth if no filename is set
- Fix: Do not report hashed user passworts in user list.
- Fix two mistakes in the default config's comments
- Add log message for succesful streamlist requests
- Fix: update_from_master() for receiving HTTP/1.1
- Fix: Spelling, thanks to Ukikie
- Fix: Fixed a segfault when xsltApplyStylesheet() returns error
- Fix: Do not segfaul on bad Opus streams
- Fix: Corrected response and fixed TLS for 416 Request Range Not Satisfiable
  responses
- Fix: TLS for ICECAST_PROTOCOL_SHOUTCAST source clients
  and investigating the bug.
- Fix: global listener count could be negative under certain circumstances
  Thanks a lot to Simeon Völkel (0xBD4E031CDB4043C9) for reporting
  and investigating the bug.
- Fix: Send "Content-Length: 0" on 100-continue
- Fix: Do not send 100-continue in plain text over TLS sockets
- Fix: Added needed code to announce Opus streams as such to yp.
- Fix: Avoid invalid locking in signal handlers.
- Workaround: avoid libspeex printing warnings on Opus streams.
- Fix: Fixed regression introduced by r19250.
  The fix checks if the source client is actually
  known before printing it's IP-Address.
- Fix: do not allow unescaped strings in XML output.

## Known issues

-   HTTP PUT implementation currently doesn't support chunked encoding yet.
-   HTTP PUT with "Expect: 100-Continue" receives first a "100" and soon
    after a "200", instead of the "200" at the end of transmission.
-   Caution should be exercised when using `<on-connect>` or
    `<on-disconnect>`, as there is a small chance of stream file descriptors
    being mixed up with script file descriptors, if the FD numbers go above
    1024. This will be further addressed in the next Icecast release.
-   Don't use comments inside `<http-headers>` as it will
    prevent processing of further `<header>` tags.
-   Webinterface shows Login when using just `stream_auth`.

icecast: update to 2.4.3nb10.

Check some return values, fixes core dump when ssl_ctx is NULL.

revbump for boost 1.69.0

revbump after boost-libs update

revbump for boost-libs update

Revbump after boost update

Revbump for boost update

Recursive revbump from boost update

Revbump after boost update

Revbump post boost update

Bump PKGREVISION for security/openssl ABI bump.

Changes 2.4.3:
Fixes CVE-2005-0837.
The vulnerability, identified as CVE-2005-0837, allows an attacker to acces the raw XSLT template file by appending a dot “.” to the URL. Due to the way how Windows handles file names ending with a dot, it only affects Icecast versions < 2.4.3 running on Windows. Icecast on other operating systems, like Linux, wasn’t affected at any time by this issue. If you haven’t modified the default XSLT files of a Windows installation, then no information disclosure of real value could have happened. We expect that most, of the comparatively few, Windows installations have unmodified template files and thus, while technically vulnerable, only expose those unmodified templates. To be clear, no runtime information can be accessed this way.

Pullup ticket #4712 - requested by kim
audio/icecast: security update

Revisions pulled up:
- audio/icecast/Makefile                                        1.59
- audio/icecast/PLIST                                           1.17
- audio/icecast/distinfo                                        1.20
- audio/icecast/patches/patch-aa                                1.6
- audio/icecast/patches/patch-ab                                1.10
- audio/icecast/patches/patch-ac                                1.5
- audio/icecast/patches/patch-ad                                deleted

---
   Module Name:    pkgsrc
   Committed By:   kim
   Date:           Tue May 12 07:49:16 UTC 2015

   Modified Files:
           pkgsrc/audio/icecast: Makefile PLIST distinfo
           pkgsrc/audio/icecast/patches: patch-aa patch-ab patch-ac
   Removed Files:
           pkgsrc/audio/icecast/patches: patch-ad

   Log Message:
   Upgrade to icecast-2.4.2.

   Addresses a security issue with "stream_auth" (not used by default).
   http://lists.xiph.org/pipermail/icecast-dev/2015-April/002460.html

Upgrade to icecast-2.4.2.

Addresses a security issue with "stream_auth" (not used by default).
http://lists.xiph.org/pipermail/icecast-dev/2015-April/002460.html

Recursive PKGREVISION bump for OpenSSL API version bump.

Recursive PKGREVISION bump for libgcrypt-1.6.0 shlib major bump.

update to 2.3.3
changes:
-fixed 3 security issues:
 -Improved HTTPS cipher handling and added support for chained certificates
 -Allow the source password to be undefined
 -Prevent error log injection of control characters by substituting
  non-alphanumeric characters with a '.' (CVE-2011-4612)
-Bugfixes
-Sources can now be authenticated via URL, like listeners
-XSL update

pkgsrc change:
don't set the "chroot" flag in the installed sample config file -- this
configuration doesn't work without further work because the web server
misses its data files in the sandbox

approved by The Maintainer

Bump PKGREVISION of all packages which create users, to pick up change of
sysutils/user_* packages.

PKGREVISION bumps for the security/openssl 1.0.1d update.

recursive bump from cyrus-sasl libsasl2 shlib major bump.

"user-destdir" is default these days

Recursive PKGREVISION bump for libxml2 buildlink addition.

recursive bump from gettext-lib shlib bump.

Recursive PKGREVISION bump for jpeg update to 8.

when switching to the "icecast" uid/gid, drop root's supplementary
group memberships,
bump PKGREVISION

Recursive dependency bump for libspeex  (it is backward-compatible,
but also has API additions).

DESTDIR support.

Upgrade to icecast-2.3.2

Per the process outlined in revbump(1), perform a recursive revbump
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@

Update MASTER_SITES. From Zafer Aydogan.

Make it easier to build and install packages "unprivileged", where
the owner of all installed files is a non-root user.  This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.

(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
    unprivileged.mk.  These two variables are lists of other bmake
    variables that define package-specific users and groups.  Packages
    that have user-settable variables for users and groups, e.g. apache
    and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
    etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
    so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
    and ${UNPRIVILEGED_GROUP}.

(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.

Whitespace cleanup, courtesy of pkglint.
Patch provided by Sergey Svishchev in private mail.

tv@ pointed out that curl-7.16.0 had a shlib major bump --
increase its BUILDLINK_ABI_DEPENDS, and bump PKGREVISIONs
of dependencies.

Sorry for not finding this earlier.

Fixed some pkglint warnings by removing the "@" at the start of shell
commands.

Modify packages that set PKG_USERS and PKG_GROUPS to follow the new
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.

Recursive revision bump / recommended bump for gettext ABI change.

Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mk
automatically detects whether we want the pkginstall machinery to be
used by the package Makefile.

Update to 2.3.0. Slightly based on PR 31558 by Eric Schnoebelen.

**** New features for 2.3.0 ****

- Streaming support for ogg speex, ogg flac, ogg midi

- intro file support - per mount settable
   Intro files will play when a listener first connects to a stream.  This
   is designed for station jingles and the like.  If you don't broadcast
   in ogg vorbis, you must make sure the bitrate/samplerate/number of
   channels match up to your stream.

- on-demand relays, global and per-relay settable
   On demand relays only connect to the relayed content when there are
   listeners attached to the relay.  This can save bandwidth in certain cases.

- fallback to file, extends on the intro file handling.
   With this feature, you can specify a "fallback file" which will be played
   in a loop and sent your currently connected listeners in the event of a
   source client disconnect.  This means your listeners stay connected while
   you fix your disconnect problem.  Same rules regarding bitrate/samplerate/
   number of channels apply as with intro files.

- new mount-level settings
   1. public, type/subtype, genre settings, stream description,
      stream url, stream name, bitrate (override what is sent from the source
      client)
   2. mp3 metadata interval
   3. on-[dis]connect scripts can be stated per-mount, invoked at source
      start/stop and take 1 arg which is the mountpoint.

- New URL listener authenticator.
   This delegates your listener authorization to an external application.
   URL calls are made on listener connect/disconnect as well as source
   connect/disconnect.  It is meant for large broadcasters who have existing
   authentication systems that need to be integrated into.  Included is
   an example php-based application that can be used in conjunction with
   the url authenticator to manage a simple subscription-based broadcast.

- HTPasswd authenticator uses in-memory structures now.

- On demand files now can be fed through an authenticator

- Update to admin/web xslt interface

- Icecast can now be installed as a win32 service

**** Fixes for 2.3.0 ****
- real/helix works
- win32 access log correct
- stats client is stable now (curl -X STATS http://admin@host:port/)
- show mountpoints on stats that are inactive but have an active fallback
- more updates over HUP possible
- improved stability under heavy load
- moving clients will no longer sometimes deadlock the server
- avoid small writes to reduce TCP overhead.

pkg changes:
Enable theora, speex. make libxml2 dependency explicit.

The real user name in PKG_USERS does not need to be escaped with double
backslashes anymore. A single backslash is enough. Changed the
definition in all affected packages. For those that are not caught, an
additional check is placed into bsd.pkginstall.mk.

Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.

Bump PKGREVISION because of curl dependency bump.

Update to 2.2.0. Tested by kim@, fixes PR 28835.

****New features for 2.2 (in no particular order):****

- Theora Video support -
Icecast now supports video streaming via theora.  Currently, we require the latest
(alpha 4) version of libtheora.  This is an optional compile, so if you don't
have theora then icecast will safely ignore it

- Shoutcast style source client support -
Icecast now supports the connection protocol used by the Shoutcast DSP source
client.  This is the same connection protocol used by their NSV encoding tools.
This means that not only can you use the Shoutcast DSP to stream to icecast, but
that you can also stream NSV via their tools.

- AAC is added as a supported streaming format -
Not too many source clients support streaming in this format, but we support it.

- Cluster password -
Now you can specify a cluster password as a <mount> option in the config. This
will allow you to cluster multiple servers/mounts into a single listing on the
stream directory.  Note that this is different than "grouping" which groups together
streams coming from the same physical IP and with the same stream name.  Clusters
are meant for relays of the same stream and will only be listed *once* in the stream
directory.  When a listener tunes into a cluster, they will be served an m3u file
with all the clusters for that stream.

- Playlist Log -
This is an option setting that will create an audit trail of metadata that comes through
icecast.  It is a single file that contains information for all mountpoints.

- Range Support for static files -
We now support seeking in files served off the icecast fserve.

- Metadata Update via Admin -
We now support metadata updates via the admin interface for both MP3 AND Ogg Vorbis
streams.

- Per mount hidden stats and YP prevention -
You many now indicate certains mounts to be excluded (i.e. hidden) from the main
status.xsl page.  This is useful when using local private relays.  You can also
override the YP setting (as in disable) on a per-mount basis.  Also useful for
local private relays.

- Multiple example config files -
We now have multiple config files for you to use as a base.  A "simple" one for
quick-start, and a more detailed "advanced" one with all the features, as well
as a "shoutcast compatable" one, which shows how you'd config for using the
shoutcast DSP.

- Relay user/pass -
You can now specify authentication used by a relay.  This is for the case where
you have listener authentication enabled for a mountpoint, and want to connect
a relay to it.

The default location of the pkgsrc-installed rc.d scripts is now
under share/examples/rc.d. The variable name already was named
RCD_SCRIPTS_EXAMPLEDIR.

This is from ideas from Greg Woods and others.

Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism
(as requested by wiz).

Set PTHREAD_AUTO_VARS to "yes" after pthread.buildlink3.mk was changed
not to automatically add pthread-related CFLAGS, LDFLAGS, and LIBS to
the configure and build processes.

Update to 2.1.0, provided by pancake in private mail.

Icecast 2.1 11/04/2004
-----------------------------------------------------------------------------
****New features for 2.1 (in no particular order):****

-Listener Authentication-

  Icecast now supports listener authentication.  This provides a mechanism for
  creating/maintaining users and passwords for listeners.  Currently, we only
  have implemented a simple, file-based storage for users and passwords.  New
  authenticators are on the horizon (such as URL-based or possibly MySQL based)
  New admin pages were also added for the maintenance of users/passwords. Please
  check the docs for a more detailed description of this new feature.

-Multi-Level Fallbacks-

  Multi-level fallbacks allow for specifications of a series of fallback mounts
  that you could use, for instance, to set up a series of progressively lower
  bitrate streams that would be cascaded through.  For instance, a modem user
  would connect to the highest bitrate stream, and then could be cascaded
  down to a progressively lower stream until they reach a value they can
  handle.

-Burst-On-Connect-

  This is an new, optional config setting which will send a initial burst of
  data to connecting listeners.  This has the effect of reducing
  (significantly) the startup buffer latency from the end-user perspective.
  This option is enabled by default.


****New Enhancements for 2.1****

-Update to admin interface-

  This interface has been cleaned up quite a bit and made a bit nicer.

-Rewrite of the YP listing code-

  The icecast yp code has received a complete overhaul by karl, and it's a much
  more stable and failure-resistant implementation.

-Lots and lots of bugs fixed-

  Check the ChangeLog for a complete list of these...

- Update to 2.0.2
- Fixes a security issue - upgrade recommended
- Patch submitted in PR 27253 by pancake@phreaker.net, thanks !

Libtool fix for PR pkg/26633, and other issues.  Update libtool to 1.5.10
in the process.  (More information on tech-pkg.)

Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.

Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.

bump PKGREVISIONs since libxslt needs libgcrypt now

Update audio/icecast to 2.0.1.

Changes:

This patch release fixes a overflow buffer which can cause server crashes
under certain circumstances. This release contains ONLY the fix for this
issue. We are still targetting a 2.1.0 release with new features and
functionality in the near future.

PKGREVISION bump after openssl-security-fix-update to 0.9.6m.
Buildlink files: RECOMMENDED version changed to current version.

Convert to buildlink3.

LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globs
relative to ${WRKSRC}.  Remove redundant LIBTOOL_OVERRIDE settings that
are automatically handled by the default setting in bsd.pkg.mk.

Bump PKGREVISION due to xmlcatmgr update to 2.0beta1.  I know; this is a PITA.
This shouldn't be needed if we had non-recursive dependancies *sigh*.

Make sure ICECAST_CHROOTDIR is created before ICECAST_LOGDIR.

Updated to 2.0.0

Share PKGNAME so that we get implicit conflicts through the version number.
There is no need for different PKGNAMEs, which will only make things more
complex in the future (to track dependancies and the like).

This needs CONFLICTS with the new icecast2 package.

Whitespace fixes

Fix sysconfdir conversion:
- Pass --sysconfdir to configure script.
- Make the program honour that directory to search for config files.
- Remove un-needed patch (everything can be done from configure).

s/FILES/EGFILES/ for clarity, and undefine the iteration variable after the
loop has finished.

Use the bsd.pkg.install.mk framework to install the startup shell script
and configuration files into PKG_SYSCONFDIR.

Patch provided by David Ferlier in PR pkg/20940, with more changes by me.
Bump package revision to 1.

Use PTHREAD_* variables to avoid passing the unknown -pthreads flag to the
compiler.  Fixes PR pkg/19501.

s/netbsd.org/NetBSD.org/

buildlink1 -> buildlink2

Convert to use pthread.buildlink.mk.

Merge from pkgsrc-current to buildlink2 branch.

Updated icecast to 1.3.12

This release is a security update and all users are highly encouraged
to upgrade immediately!

(ChangeLog doesn't give exact details, it was updated 2000-03-01)

update to icecast 1.3.11.  from the web site:

	It contains security updates and network fixes for streams
	over 160kbps. It should also help with the stuttering problem
	some users have reported.

Update to 1.3.10. Changelog is pretty silent, but at least some of the
changes since 1.3.7 are security updates (buffer overflow).

Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.

Manually syncing ONLY_FOR_PLATFORM is not the way to go.
Remove ONLY_FOR_PLATFORM, and let it fail while installing the DEPENDS.

Sync ONLY_FOR_PLATFORM with devel/unproven-pthreads.

Add icecast-1.3.7:

Icecast is an Internet based broadcasting system based on the Mpeg
Layer III streaming technology. It is, however, not limited to
streaming mp3 files.  It was originally inspired by Nullsoft's
Shoutcast and also mp3serv by Scott Man ley.

Initial revision