PPD to /etc/cups/ppd when a printer is added, so now even if the
cupsomatic-ppds are uninstalled, your CUPS setup will still work as long
as the cupsomatic package is still installed.
bug and security fixes, improvements to the efficiency of the server and
utilities, improvements to the documentation, plus the following:
* Security updates - new default configuration does not broadcast
printer information and only allows access from the local system.
* EXPERIMENTAL encryption support - CUPS now optionally supports TLS/SSL
encryption via the OpenSSL library.
* Updated PDF filter to Xpdf 0.91.
* Added PPD files for 9-pin and 24-pin OKIDATA printers.
* Changed all sprintf's that use string formats to snprintf's, even if
the destination buffer is larger than the source string(s); this
protects against buffer overflows caused outside of CUPS...
* Changed all strcpy's to strncpy's between local and global variables,
even if the destination buffer is larger than the source string; this
protects against buffer overflows caused outside of CUPS...
* Added new mime.types rules to allow automatic raw printing of PCL and
ESC/P files; PJL headers are parsed to differentiate between
PostScript and PCL job files. This should eliminate a lot of the
reports of SAMBA printing problems due to the missing "-oraw" or "-l"
options.
* Jobs are now assigned to printers in a class round-robin style. This
should prevent the first server in the class from bearing the brunt of
the jobs.
* The serial backend didn't support the higher baud rates with the old
termios interface. It now supports 57600 and 115200 baud.
* The serial backend now supports different types of flow control;
previously it ignored the flow=XYZ option in the device URI.
* The serial backend now supports DTR/DSR flow control, which is popular
on dot-matrix printers (access with "flow=dtrdsr" in the device URI)
* Added new job-originating-host-name attribute for jobs. The new
attribute provides the hostname or IP address of the machine that
submitted the job.
* Added quota and allow/deny user support for printers and classes.
Remote Intrusion Detection to track down compromised hosts
Purpose: To use intrusion fingerprints to track down compromised hosts.
Scope: TCP/UDP/ICMP (No fragmentation reassembly)
Specs: Program can create somewhat arbitrary UDP/ICMP/TCP packets/streams
and send them to a range of hosts. It also listens promiscuously
for predefined intrusion "fingerprints".
"Pcal" Version 4.7
This is a new release of "Pcal", the PostScript calendar program. The major
new features are the "-H" flag for generating output in HTML table form,
expansion of "%y" in the "include" filename into the last two digits of
every applicable year in "year all" mode, and the addition of build-time
support for A4 size paper.
00/12/21 version 1.6
update copyright:
- 1996 -> 1996-2000
- Sony Computer Science Laboratory --> Laboratories
00/12/20 yscale support to display throughput in Kbps
also requested by hubertf@netbsd.org
add comment in ttt.tcl on how to disable auto-scale
00/12/16 net_read.c:
- additional ppp dlt types
DLT_PPP_BSDOS /* bsd/os specific */
DLT_PPP_SERIAL /* netbsd specific */
- add 802.1Q and PPPoE support
requested by hubertf@netbsd.org
ttt_ipv6.h, net_names.c:
resolve ipv6 related conflicts in linux
report by Shashidhar Patil <shaship@cisco.com>
Post-1.5 version that fixes the timeout-problem when installing via FTP
(the 10-minute timeout was on the whole transfer, not on a single file
inside the package).
Changes since the last packaged snapshot are (from the authors announcements):
Icarus Verilog snapshot 20001216
--------------------------------
This is the last snapshot before the holidays, so I hope it has your
favorite present in it. A lot of PR#s have been dealt with, and for a
brief moment I felt like I was getting ahead of the pending list:-)
I've added support for non-integer times, at least in a few contexts.
The `timescale directives should interact properly with the decimal
point in delays, causing more accurate timing simulations. This should
make vendor-supplied libraries work much better.
I've added support for signed reg variables. Signed expressions should
now generally do the right thing, but this feature needs much more testing,
and many more tests in the test suite. However, I do know that signed
comparisons should work properly. Bug reports for problems with signed
arithmetic are encouraged.
Many people have been having troubles with Cygwin compilation. The
problem was with the latest version of binutils. Venkat came up with a
solution that works with old and new binutils, so you can now compile
with the very latest cygwin software. This should make things a lot
easier for a lot of people.
I've made initial steps toward an HP/UX port. The configure script should
detect the right dl library to use, and the t-dll target should be able
to load loadable targets. I am looking for a volunteer to take responsibility
for the HP/UX port as I have no suitable machines. Said person should
be able to compile Icarus Verilog, manage HP/UX specific portability
issues, and be able to make precompiled packages when the stable release
is out.
I'm still looking for a similar volunteer for FreeBSD/{alpha,i386}.
Some more progress was made on support for PALs. I'm close to choosing
macrocell modes and configuring fuses. Won't be long now, folks.
Icarus Verilog snapshot 20001129
--------------------------------
few more constant propagation improvements this time, most notably
XOR an XNOR are now fairly complete. These are interesting as they are
generated by comparison operators so show up pretty often. And it is
common to compare numbers to constants. Thus, there are lots of oppor-
tunities for gate elimination!
Synthesis of unary ! now works. Unary ~| (reduction nor) should also
be in good shape now, as should binary || (logical or). Synthesis of
binary && is still a little shaky. Go ahead and file reports if you
trip on it. Binary != was broken with XNF synthesis, so that is also
fixed, along with a few cases of mangled XNF output. And there were
also a few bugs related to the CE of inferred DFFs, that didn't get
connected.
A *big* problem with synthesis occurred with non-blocking assignment.
Icarus Verilog simply failed to synthesize the r-value of the assignment
and all kinds of bad things happened. I fixed this, it's better now.
Whew! Lots of XNF synthesis bugs fixed! This is what happens when users
take the time to submit good bug reports.
There are also some bugs related to dead signal elimination that causes
Icarus Verilog to crash in some synthesis cases. These have been fixed
up so far as I know.
I have slightly improved root module detection of iverilog. If there is
only one module in a source file, it is pretty obvious that it is the root
module, even if it has ports. This is a common case for XNF synthesis
(especially when making small macros with Icarus Verilog) and should save
some typing and confusion.
default certificate directory is now /etc/openssl/certs (matches OpenSSL's
default), but if stunnel uses the pkgsrc OpenSSL, then the default is
${PREFIX}/certs.
Changes from version 3.8 include:
* Updated temporary key generation:
- stunnel is now honoring requested key-lengths correctly,
- temporary key is changed every hour.
* transfer() no longer hangs on some platforms.
Special thanks to Peter Wagemans for the patch.
* Potential security problem with syslog() call fixed.
* use daemon() function instead of daemonize, if available
* added -S flag, allowing you to choose which default verify
sources to use
* relocated service name output logging until after log_open.
(no longer outputs log info to inetd socket, causing bad SSL)
* -V flag now outputs the default values used by stunnel
* Added rigerous PRNG seeding
* PID changes (and related security-fix)
* Man page fixes
* Client SSL Session-IDs now used
* -N flag to specify tcpwrapper service name
* UPGRADE NOTE: this version seriously changes several previous stunnel
default behaviours. There are no longer any default cert file/dirs
compilied into stunnel, you must use the --with-cert-dir and
--with-cert-file configure arguments to set these manually, if desired.
Stunnel does not use the underlying ssl library defaults by default
unless configured with --enable-ssllib-cs. Note that these can always
be enabled at run time with the -A,-a, and -S flags.
Additionally, unless --with-pem-dir is specified at compile time,
stunnel will default to looking for stunnel.pem in the current directory.
- fixed script element handling in framesets
- detect repeated attributes e.g. in tables
- supports Gnu Emacs error parsing
- Word 2000 cleanup
- HTML syntax fixes
with libimapuw (at least on ELF) _need_ to explicitly bring in -lssl -lcrypto.
In the future, when updating a package, _please_ check any packages which depend
on that package to make sure they aren't broken by the change. It took a _long_
time to find out that pine was broken on this machine (a SparcClassic).
pcap-int.h is normally installed, as it is internal to libpcap.
$Id: CHANGES,v 1.54 2000/12/17 16:39:05 dugsong Exp $
v2.3 Sun Dec 17 11:35:38 EST 2000
- Add VRRP parsing to dsniff, from Eric Jackson <shinobi@monkey.org>.
- Require pcap filter argument for tcpkill, tcpnice.
- Add Microsoft PPTP MS-CHAP (v1, v2) parsing to dsniff, based on
anger.c by Aleph One <aleph1@securityfocus.com>.
- Fix pcAnywhere 7, 9.x parsing in dsniff.
- Add -t trigger[,...] flag to dsniff, to specify individual triggers
on the command line.
- Convert most everything to use new buf interface.
- New programs: dnsspoof, msgsnarf, sshmitm, webmitm.
- Fix inverted regex matching in *snarf programs.
- Consistent arpspoof, macof, tcpnice, tcpkill output.
- Rename arpredirect to arpspoof (maintain consistent *sniff, *snarf,
*spoof, *spy nomenclature).
- Consistent pcap filter argument to dsniff, *snarf programs.
- Add trigger for Checkpoint Firewall-1 Session Authentication Agent
(261/tcp), as suggested by Joe Segreti <seg@clark.net>.
- Add SMTP parsing to dsniff, as requested by Denis Ducamp
<Denis.Ducamp@hsc.fr>.
- Add rexec and RPC ypserv parsing to dsniff, as requested by
Oliver Friedrichs <of@securityfocus.com>.
- Add HTTP proxy auth parsing back to dsniff, it got lost in the
shuffle. Reported by Denis Ducamp <Denis.Ducamp@hsc.fr>.
- Add NNTPv2 and other AUTHINFO extensions to dsniff.
