net/tac_plus4: Update to F4.0.4.32HEADmain

Changes since .28:

- Fix buffer length argument to ntop() - Muhammad Muquit
- Fix two missing free()s
- Fix segfault from incorrect pointer returned from value().  Reported
  here:
  http://www.shrubbery.net/pipermail/tac_plus/2014-January/001384.html
- update autoconf bits for autoconf 2.69
- put tac_plus daemon in sbin, where it ought to be
- fix hdr->datalength handling in dump_nas_pak()
- add -m option to specify the client listen queue max and increase
  the default to 64 if the O/S does not define SOMAXCONN
- fix config.h include syntax - David M. Syzdek
- added -U and -Q flags to allow runtime setuid/setgid change - from
  from Robert Drake with some alteration
- Make implicit time_t conversions explicit in expire.c - from David M.
  Syzdek
- initialize newsockfd in main() - from David M. Syzdek
- recent changes in autoconf are causing the + of the package name to
  become -, so just drop it from the tarball name.
- spec file update - from Sten Spans
- add SHA512 support to tac_pwd - from Sten Spans
  XXX needs a configure test to check for sha512 support.
- fix libtacacs link - from Gentoo via Ruben Farrelly
- fix -U decription in manpage
- call correct function for host key look-up by hostname - Adam Dyess
- GC regeerror() from the private regex lib.  Causing segfault
- a bug with quoted strings was that whitespace was not handled
  reasonably.  since quoted strings may also be used for regex, it also
  needs to handle regex atoms.  so, quoted string parsing has been
  changed to only treat \" specially, all other backslash-quoted
  characters are simply copied, including the backslash.  add test
  example to the sample configuration.
- fdes.c: add parens to make OoO explicit and shut-up compiler warnings
- pull do_auth 2.0 and the example config file from github, with
  python3 updates and more.
  https://github.com/helpdeskdan/do_auth
- SafeConfigParser class has been renamed to ConfigParser
- Misc C99 prototype clean-up
- update autoconf to search for libnsl instead of assume.  Debian
  no longer has one, at least not by default.
- Remote pre-authentication format string vulnerability (CWE-134)

0 files changed, 0 insertions, 0 deletions