BIND 9.4.3-P4 is a SECURITY PATCH for BIND 9.4.3. It addresses a
potential cache poisoning vulnerability, in which data in the additional
section of a response could be cached without proper DNSSEC validation.
Changes since 9.4.3-P3:
2772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
validates as secure. [RT #20438]
BIND 9.4.3-P5 is a SECURITY PATCH for BIND 9.4.3. It addresses two
potential cache poisoning vulnerabilities, both of which could allow
a validating recursive nameserver to cache data which had not been
authenticated or was invalid.
CVE identifiers: CVE-2009-4022, CVE-2010-0097
CERT advisories: VU#418861, VU#360341
Changes since 9.4.3-P4:
2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819]
2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]
2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
BIND 9.5.2-P2 is a SECURITY PATCH for BIND 9.5.2. It addresses two
potential cache poisoning vulnerabilities, both of which could allow
a validating recursive nameserver to cache data which had not been
authenticated or was invalid.
CVE identifiers: CVE-2009-4022, CVE-2010-0097
CERT advisories: VU#418861, VU#360341
Changes since 9.5.2-P1:
2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819]
2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]
2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
database. In effect, PostGIS "spatially enables" the PostgreSQL server,
allowing it to be used as a backend spatial database for geographic information
systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS
follows the OpenGIS "Simple Features Specification for SQL" and has been
certified as compliant with the "Types and Functions" profile.
PostGIS/PostgreSQL includes the following functionality:
* Simple Features as defined by the OpenGIS Consortium (OGC)
* Support for Well-Known Text and Well-Known Binary representations of GIS
objects
* Fast spatial indexing using GiST
* Geospatial analysis functions
* PostgreSQL JDBC extension objects corresponding to the geometries
* Support for OGC access functions as defined by the Simple Features
Specification
JBIG-KIT implements a highly effective data compression algorithm for
bi-level high-resolution images such as fax pages or scanned
documents.
JBIG-KIT provides a portable library of compression and decompression
functions with a documented interface. You can very easily include
into your image or document processing software. In addition, JBIG-KIT
provides ready-to-use compression and decompression programs with a
simple command line interface (similar to the converters found in Jef
Poskanzer's PBM graphics file conversion package).
o Directory authority changes:
- Rotate keys (both v3 identity and relay identity) for moria1
and gabelmoo.
o Major bugfixes:
- Stop bridge directory authorities from answering dbg-stability.txt
directory queries, which would let people fetch a list of all
bridge identities they track. Bugfix on 0.2.1.6-alpha.
2010-01-10 John Peacock <john.peacock@havurah-software.org>
* .hgtags:
Tagging version '0.79' using shipit.
[ec386b00d27a] [tip]
* .hgtags:
Removed tag 0.79
[824035a0f02a] [0.79]
* vutil/vutil.c, vutil/vutil.h:
Take the easy road to restore compatibility with Perl v5.10.1
[4ce98cb6eba3]
2010-01-09 John Peacock <john.peacock@havurah-software.org>
* .hgtags:
Tagging version '0.79' using shipit.
[87475097cea8]
* .hgignore:
tweaks to make mercurial happy
[7c5fd8f32175]
* .shipit, Build.PL:
Fixup to make shipit happy
[3dbce4937c28]
* .hgtags:
Rename all of the tags to be consistent
[2c38a17bfdec]
2010-01-06 John Peacock <john.peacock@havurah-software.org>
* .shipit, Build.PL, MANIFEST, MANIFEST.SKIP, README, lib/version.pm,
t/01base.t, t/02derived.t, t/03require.t, t/04lax.t, vperl/vpp.pm,
vutil/lib/version/vxs.pm, vutil/ppport.h:
Restore compatibility with Perl 5.00505 (finally). Bump all VERSION
references.
[05d5b8b44166]
2009-12-27 John Peacock <john.peacock@havurah-software.org>
* vutil/ppport.h, vutil/vutil.c, vutil/vutil.h:
Merge in changes from bleadperl. Tests do not pass with 5.005.
[0b19155e8e21]
2009-12-22 John Peacock <john.peacock@havurah-software.org>
* vutil/ppport.h:
Resolves https://rt.cpan.org/Ticket/Display.html?id=52439
[c7fc26126a1d]
2009-12-20 John Peacock <john.peacock@havurah-software.org>
* t/coretests.pm, vutil/vutil.c, vutil/vutil.h:
All tests passing except the VERSION_MAX ones.
[912515d937e8]
* lib/version.pm, vutil/vutil.c, vutil/vutil.h:
Almost completely transfer the code from scan_version to
prescan_version. Still failing some tests.
[ecd415561454]
2009-12-19 John Peacock <john.peacock@havurah-software.org>
* t/04lax.t, vutil/vutil.c:
Now handles decimal versions, too
[a1138d18495e]
* vutil/vutil.c, vutil/vutil.h:
isVERSION handles dotted-decimal version format
[8d994d73689b]
* MANIFEST, lib/version.pm, t/04lax.t:
New regexes that define the legal version strings under both $LAX,
(current code) and $STRICT (new feature for Perl 5.12.0).
[46076dadb3fb]
2010-01-02 John Peacock <john.peacock@havurah-software.org>
* .hgtags:
Removed tag trunk
[b0d50d9f1a11]
2010-01-03 convert-repo <convert-repo>
* .hgtags:
update tags
[f173c486b889]
2.35 January 10 2010 - Major
+ Added support for Stock charts.
+ Added support for Scatter charts.
+ Improved Pie chart examples.
2.34 January 8 2010 - Major
+ Added support for Pie charts.
! Re-added index.html in docs dir for Debian (and others).
http://rt.cpan.org/Public/Bug/Display.html?id=53346
! Fix for incorrectly encoded string result in repeat_formula().
2.33 January 3 2010 - Major
+ Added support for embedded charts. See insert_chart().
2.32 December 31 2009 - Major
+ Added support for native charts. See Charts.pm.
Column, Bar, Line and Area charts supported.
! Fixed Apache2::Const vars in mod_perl2.pl example.
Thanks to Ryan Perry.
2.31 December 10 2009 - Minor
! Fixed resources in Makefile.PL.
! Updated screenshots of example programs.
2.30 November 25 2009 - Minor
! Updated Pod generator to include screenshots of example programs.
2.29 November 25 2009 - Minor
! Made version 0.19 of OLE::Storage_Lite a prerequisite to avoid
issues when using set_properties with Win 7 or Gnumeric.
2.28 November 22 2009 - Minor
! Fix to NAME section in Example.pm to get CPAN to generate pod docs
for it.
2.27 November 21 2009 - Minor
+ Added autogenerated Examples.pm.
2.26 November 13 2009 - Minor
+ Beta release of defined names.
! Fix for fuzzy images issue reported by Todd Eigenschink.
+ Added 25_position_object.t tests to cover above issue.
! Fixed bug where file size wasn't found for progressive JPEGs.
Reported by Yamashita Junji and Bruce Anderson II.
+ Added set_country() method.
! Fix for UTF8 strings passed to write_url().
Reported by Jon Schutz.
http://rt.cpan.org/Public/Bug/Display.html?id=41048
! Fixed very minor issue with unitialised value for top
border colour in formats. Reported by Franz Fasching.
Version 5.55 DEVELOPMENT
Typo fix. ddascalescu
Version 6.00 2009-11-23
Date::Manip 6.00 is a total rethink of the module, and a nearly complete
rewrite. Please refer to the Date::Manip::Changes5to6 document for a list
of incompatible changes.
*** Massive reorganization and near total rewrite.
*** Broke into several smaller modules
*** Full timezone support
Several config variables deprecated
Added some functionality (suggested by James Elson to improve setting
the "current time". Done with the ForceDate config variable.
*** Converted languages to YAML for much easier maintenance. Patch and
suggestion provided by Evan Carroll
Added much better formats for deltas. Suggested by Jim Hranicky.
Borrowed the _FindWindowsTZName function from the DateTime-TimeZone
module.
Added SetDate config variable (based on a suggestion by Christian Campbell).
Added parse_format which was first suggested by Kim Ryan.
Thanks to Jonathan Hogue for helping test Windows additions.
It also contains a few bug fixes correcting problems in the 5.xx releases:
Fixed a bug where "YYtoYYYY=c" wouldn't work.
VMS bugfix to not call `date` command. Lane
Fixed typo in turkish translation.
Spelling fix in dutch. Bart Van Loon
New Year's Day defined using a recurrence which might push the observed
day to the previous year was broken. Reported by Alan Burlison
I have received many suggestions over time which were automatically
handled during the 6.00 rewrite. Although the changes weren't made
because of the suggestions specifically, I wanted to acknowledge
them since I appreciate the suggestions.
Delta_Format initialization done outside of the function. Eric Boehm
Added $subtract to calculation routines. First suggested by Steve Berlage.
Version 6.01 2009-11-23
*** Fixed a bug where dates were sometimes getting the wrong timezone when
SetDate/ForceDate in effect.
Version 6.02 2009-11-24
A quick fix to make sure that the tests run correctly in other timezones.
Disabled curr_zone_methods when taint checking on. I believe that Date::Manip
is completely taint friendly at this point.
Version 6.03 2009-11-24
Corrects a backward incompatibility with UnixDate. Rene Schickbauer
A couple more corrections to the tests.
Version 6.04 2009-11-25
Fixed a bug where events were not interpreted in the correct timezone if
SetDate/ForceDate used.
Version 6.05
Significant speedups. Thanks to Moritz Lenz and BrowserUK on perlmonks for
suggestions (and a number of other people on perlmonks for suggestions
that I did not end up using, but which provided a great discussion).
Reduced the precision of 1 test to avoid a rounding difference when using
a perl compiled with uselongdouble. Andreas Koenig
Fixed a bug in parse_date where the current time was getting used instead
of the documented 00:00:00
Bug fix where DateCalc didn't work with $mode in some cases.
Fixed Makefile.PL/Build.PL to hanle Win32::TieRegistry requirement.
Changed %z printf behavior back to 5.xx and added %N format. Gilles Lamiral
Fixed bug where non-English Windows versions didn't get the timezone. Thanks
to Rene Schickbauer for testing.
