Release Date: 2006-11-03
* Multiple attribute values are not sorted in input forms anymore.
* In the login form only the available SASL mechs are displayed now
in the select field for choosing authentication mechanism.
* If scope is not specified in LDAP URL the search form properly
sets default of search scope to sub.
* Simplified displaying error messages by deleting backward-compatible
code for older versions of python-ldap.
announced by ISC dated 31 October (delivered via e-mail to the
bind-announce@isc.org list today):
Description:
Because of OpenSSL's recently announced vulnerabilities
(CAN-2006-4339, CVE-2006-2937 and CVE-2006-2940) which affect named,
we are announcing this workaround and releasing patches. A proof of
concept attack on OpenSSL has been demonstrated for CAN-2006-4339.
OpenSSL is required to use DNSSEC with BIND.
Fix for version 9.3.2-P1 and lower:
Upgrade to BIND 9.2.3-P2, then generate new RSASHA1 and
RSAMD5 keys for all old keys using the old default exponent
and perform a key rollover to these new keys.
These versions also change the default RSA exponent to be
65537 which is not vulnerable to the attacks described in
CAN-2006-4339.
* The volume probing helper can take up to a minute to run the isoinfo
command against data DVDs, so bump the timeout up to 60 seconds.
* Fix a spurious warning when running lshal
Add two new properties to SCSI block devices. The first is
block.freebsd.cam_path which is a bus,target,lun path to a SCSI device.
This is needed by tools such as cdrecord, and by adding a private freebsd
property, it is much easier to get apps like nautilus-cd-burner working.
The second property is block.freebsd.atapi_cam_device. This property is
actually attached to ATAPI CAM devices, and denotes the CAM block device
associated with this ATAPI block device. This may be useful for programs
that can only operate with CAM-compliant devices.
Finally, update the volume probing code so that blank discs are treated as
volumes. This is sort of crude. We basically say a disc is blank is it
is a disc and contains no data and no audio.
With all of these changes, plus a minor change to nautilus-cd-burner, n-c-b
now works again on FreeBSD.
for memory allocation instead of SER's own one. Stress tests failed to
show any considerable difference in the performance, while system version
provides much better scalability and in future should also provide some
benefits on SMP systems.
Changes the default error page from basically having a reload button
to having the following choices:
- Google cache
- Archival snapshot from the wayback machine
- Ping
- Trace route
- Whois lookup
- Coral cache
WWW: http://www.jaybaldwin.com/News.aspx?id=51
PR: ports/105079
Submitted by: Steven Kreuzer <skreuzer@f2o.org>
