Fixes https://www.isc.org/CVE-2011-1907.
--- 9.8.0-P1 released ---
3100. [security] Certain response policy zone configurations could
trigger an INSIST when receiving a query of type
RRSIG. [RT #24280]
for full details):
1) New printers supported in this release:
- Canon inkjet printers (many):
- Epson inkjet printers (many):
- Dye sublimation printers:
Kodak EasyShare G600 Printer Dock
Kodak PD-4000
Kodak PD-6000
Kodak Photo Printer
Kodak Photo Printer 500
Kodak Printer Dock Plus
Kodak Printer Dock Plus S3
2) Corrected color matching profile used for Mac OS X 10.5.x.
sRGB will now be used instead of Generic RGB. Users with work-
flows dependant on the previously used Generic RGB can select
this color profile in the print window by using ColorSync to
choose the profile rather than using VendorMatching.
9) Corrected base density for Photo Paper on printers using Claria
ink (use 20% less ink). The default results in heavy ink
puddling in some cases.
12) A problem whereby certain malformed PPD files would cause the
PostScript driver to crash has been fixed. In addition, the
PostScript driver now runs considerably faster.
config.new, check within $(DESTDIR) rather than the host system.
Resolves DESTDIR-mode build when privoxy is also installed, common in
make replace.
(No revbump because this change only affects a case where the package
failed to build.)
Simply changing \parskip and \parindent leaves a layout that is
untidy; this package (though it is no substitute for a
properly-designed class) helps alleviate this untidiness
QtNetwork
- SSL
* [QTBUG-18338] blacklist fraudulent SSL certificates
Qt for Symbian
- Bearer Management
* [QTBUG-15108] Deadlock between SymbianEngine mutex and
QNetworkConfigurationPrivate mutex in the symbian bearer code
* [QTBUG-17627] qnetworksession.h Q_DECLARE_METATYPE breaks building
QtMobility QtBearer depending applications
- GraphicsView
* [QTBUG-17966] Major regression in QGraphicsView OpenVG backend
- Declarative
* [QTBUG-17503] Export qml debugging symbols on Symbian
- Widgets
* [QTBUG-17786] BC between Qt 4.7.3 and 4.6.3 QTreeView::indexRowSizeHint
doesn't return correct value on Symbian for row when QPushButton widget is
inserted in the treeview
* [QTBUG-4953] QMessageBox can not be closed/dismissed on touch phones if any
widget is fullscreen
- Painting
* [QTBUG-17907] tst_QGraphicsTransform::rotation3d test case from
tests/auto/qgraphicstransfor is failed for some rotation angle on
Symbian^3 devices
* [QTBUG-18154] Symbian's QPixmap::logicalDpi[X\Y]() incorrectly
returns MAXINT
0.68 2011-04-14
- Security:
* Prevent SQL injection in column names, operators, order and group by
(Alex Vandiver)
* Fix distinct_query to catch injection and correctly rewrite to
function => '' (Alex Vandiver)
* Prevent SQL injection via IS
- Fixes:
* There is no need to check $args{column} around our LIKE adjustments
(Alex Vandiver)
* Slightly unify nigh-identical codepaths between Pg and Oracle
(Alex Vandiver)
0.67 2011-02-28
- Features:
* Make ->distinct_column_values use ->simple_query, thus going through our
SQL logging infrastructure (Alex Vandiver)
- Fixes:
* Set raw_values in load_by_hash so the __raw_value method works when the
record is loaded by a collection (Thomas Sibley)
- Tests:
* Author tests for no tabs (Shawn M Moore)
0.66 2011-02-14
- Features:
* Provide a sane way to wrap a function around an aliased column in order_by
* Pass old_value to triggers on column update
- Fixes:
* Respect the 'by' attribute for refers_to columns in create and set
* Use the right FK when using a record object in load_by_cols or
limit [rt.cpan.org #64779]
* Don't encode fields when attempting to limit with IS
* Fix since/till by refactoring columns to use an updated all_columns
- Installation:
* Only run these URI filter tests if we have URI [rt.cpan.org #65047]
0.64 Wed Dec 8 15:21:17 EST 2010
- Installation:
* Minor distribution fixes
0.63 Wed Dec 8 15:14:17 EST 2010
- Features:
* distinct_column_values method, docs and tests
- Fixes:
* Warn about load(arg => value)
* Include column_name in the value passed to reader warning
* It is a rare but possible case that 0 is a valid id
* Ensure encode_base64 doesn't choke on utf8
0.62 Thu May 20 13:58:53 EST 2010
- Features:
* Computed columns let you have the Jifty-DBI scaffolding but without
touching the database
* Column->is_boolean
- Fixes:
* Don't attempt to store undef values in memcached
* Avoid undef warnings
0.61 Mon Jan 4 13:04:20 EST 2010
- Installation:
* Minor distribution fixes
0.60 Mon Jan 4 13:02:17 EST 2010
- Features:
* Allow passing of extra parameters to canonicalizers
* Add an attribute which controls placeholder use for load_by_cols
- Fixes:
* Don't add LOWER() on <= or >= operators, only = and !=
* Better case sensitivity tests
* Expose quote_value() on Jifty::DBI::Handle
* When generating COUT, don't add a DISTINCT unless needed
* Fix t/12prefetch.t's assumptions on row ordering
* When an object "$tree:$path" does not exist, if $path does exist in the
subtree of $tree that corresponds to the subdirectory the user is in,
git now suggests using "$tree:./$path" in addition to the advice to use
the full path from the root of the working tree.
* The "--date=relative" output format used to say "X years, 12 months"
when it should have said "X+1 years".
* The smart-HTTP transfer was broken in 1.7.5 when the client needs
to issue a small POST (which uses content-length) and then a large
POST (which uses chunked) back to back.
* "git clean" used to fail on an empty directory that is not readable,
even though rmdir(2) could remove such a directory. Now we attempt it
as the last resort.
* The "--dirstat" option of "diff" family of commands used to totally
ignore a change that only rearranged lines within a file. Such a
change now counts as at least a minimum but non zero change.
* The "--dirstat" option of "diff" family of commands used to use the
pathname in the original, instead of the pathname in the result,
when renames are involved.
* "git pack-object" did not take core.bigfilethreashold into account
(unlike fast-import); now it does.
* "git reflog" ignored options like "--format=.." on the command line.
* "git stash apply" used to refuse to work if there was any change in
the working tree, even when the change did not overlap with the change
the stash recorded.
* "git stash apply @{99999}" was not diagnosed as an error, even when you
did not have that many stash entries.
* An error message from "git send-email" to diagnose a broken SMTP
connection configuration lacked a space between "hello=<smtp-domain>"
and "port=<smtp-server-port>".
While here, set LICENSE=public-domain.
* 2 April 2011: libmodplug 0.8.8.2
* Improve compatibility with MSVC 2010
* Improve PTM playback (Fix byteswapping)
* Improve S3M support (ignore corrupted data)
* Improve AMF support (bounds checking)
* See git checkins for more information
* 27 May 2010: libmodplug 0.8.8.1
* Add check to make sure Stereo Separation/MixChannels cannot be 0.
* Increment soname due to structure change (addition of new config options)
* 5 April 2010: libmodplug 0.8.8
* Fix 32 to 32 bit "downsampling" on 64bit platforms.
* Fix usage of bigendian in include files
* Fix PSM files on bigendian computers
* Allow configuration of Stereo Separation and MaxMixChannels
* Fix possible problem with misaligned data structure when converting to int32
(load_669)
(Developer only) update to new automake/autoconf.
* Add -liconv as static library requirement in libidn.pc, for MinGW.
* Fix memory leak in idna_to_ascii_4z when idna_to_ascii_4i fails.
* Ran clang-analyze on the code. Fixed some dead assignments/initializations.
* Really distribute win32/libidn4win.mk.
* API and ABI is backwards compatible with the previous version.
NetBSD installation ISO.
Further information can be found here:
http://genericzero.wordpress.com/2009/08/01/install-netbsd-from-a-usb-memory-stick-the-easy-way/
memory stick the easy way
I got tired of having to jump through hoops to install NetBSD on my
Eee PC, so I wrote a simple script to take a NetBSD release ISO and
convert it to an image that can be written to a USB memory stick.
To use the script, simply feed it an ISO and tell it where to write
the resulting image:
$ sh mkmemstick.sh i386cd-5.0.1.iso i386memstick-5.0.1.img
The resulting image can be written to a memory stick using dd(1):
$ dd if=i386memstick-5.0.1.img of=/dev/sd0d
Please note that this script depends on the sysutils/cdrtools package
for extracting the contents of the release ISO.
Hopefully this will be integrated with the build process so these
images are available for those who cannot prepare an image due to lack
of access to a NetBSD machine.
* aria2-metalink option is removed. This is enabled by default already.
Changelog:
aria2 1.11.1
============
Release Note
------------
This release fixes the bug that aria2 does not work on platforms which
have kqueue() system call due to invalid timeout parameter. The
--show-console-readout option was added. This option toggles the
appearance of console readout.
Changes
-------
* Added --show-console-readout option. This option toggles
appearance of console readout.
* Fixed the bug that microsecond part of timeval overwlows in
waitData(). This bug affects platforms which have kqueue() system
call. Those systems are FreeBSD, OpenBSD, NetBSD and Darwin (Mac OS
X).
aria2 1.11.0
============
Release Note
------------
This release adds JSON-RPC interface. The JSON-RPC and XML-RPC shares
same APIs. The JSON-RPC also supports JSONP. 2 new options were added:
--retry-wait and --async-dns-server. The downloads added by
aria2.addTorrent and aria2.addMetalink RPC method are now saved to the
file specified in --save-session option. The proxy options and related
environment variables now accept https:// and ftp:// scheme. This
release fixes the bug that causes segmentation fault when unpausing
downloads in some situations. MinGW32 build now looks for USERPROFILE
and the combination of HOMEDRIVE and HOMEPATH to get user's home
directory and doesn't check permission of .netrc file.
Changes
-------
* Updated gettext to 0.18
* Added JSON-RPC support. --enable-xml-rpc was deprecated and
--enable-rpc should be used instead. Similarly, --xml-rpc-*
options were replaced with --rpc-* options. We are implementing
JSON-RPC based on JSON-RPC 2.0 draft spec.
* Fixed rounding error in DownloadEngine::run(). This fixes the bug
that executeCommand() with Command::STATUS_ALL is not called in
every interval correctly because of rounding error in timer.
* Refresh buckets at DHT initialization without checking serialized
time. Checking serialized time does not work if you stop aria2 as
soon as it started DHT. The serialized time in dht.dat will be
updated, but buckets are not updated and still old. When you
restart aria2 again soon, it does not refresh buckets because
serialized time is recent.
* Save downloads added by aria2.addTorrent or aria2.addMetalink in
--save-session file. Uploaded data are saved as file named hex
string of sha1 hash of uploaded data plus extension(".torrent" for
torrent and ".meta4" for metalink). For example,
0a3893293e27ac0490424c06de4d09242215f0a6.torrent. The directory
where these files are saved is specified by --dir option. These
file paths are written in --save-session file.
* Fixed the bug that causes segmentation fault when unpause
RequestGroup which has resolved BtDependency.
* Look for USERPROFILE and the combination of HOMEDRIVE and HOMEPATH
to get user's home directory in MinGW32 build. Usually HOME
environment variable is defined in *nix like OSes, but not in
Windows. So in MinGW32 build, if HOME is not defined, we also look
for USERPROFILE and the combination of HOMEDRIVE and HOMEPATH.
* Fixed the bug that DownloadContext::basePath_ is not escaped.
* Added Date, Expires and Cache-Control response header field to RPC
response.
* Added --async-dns-server option. This option accepts comma
separated list of DNS server addresses used in asynchronous DNS
resolver. Usually asynchronous DNS resolver reads DNS server
addresses from /etc/resolv.conf. When this option is used, it uses
DNS servers specified in this option instead of ones in
/etc/resolv.conf. You can specify both IPv4 and IPv6 address. This
option is useful when the system does not have /etc/resolv.conf and
user does not have the permission to create it.
* Accept https:// and ftp:// in proxy options and environment variables.
* Fixed overflow in the calculation of progress percentage for file
allocation and hash check when off_t is 32bit.
* Accept HTTP 304 reply as success when If-None-Match request-header
field is specified using --header option. When --conditional-get
is used, --allow-overwrite is now required to overwrite existing
file.
* Added aria2.removeDownloadResult RPC method. The method signature
is aria2.removeDownloadResult(gid). This method removes
completed/error/removed download denoted by gid from memory. This
method returns "OK" for success.
* Use IP address of control connection to connect to the remote server in
FTP passive mode.
* Don't check permission of .netrc file in MinGW32 build.
* Added --retry-wait option. This option was once existed in aria2
but erased on 2009-09-20. Now it is resurrected once again. We
choose 0 as default value for backward compatibility. Now we retry
HTTP download when remote server returns "503 Service Unavailable"
if --retry-wait > 0. We also added error code 29:
HTTP_SERVICE_UNAVAILABLE.
* Don't show metadata download and paused download in "Download Results".
New in Version 0.2 (released 2011-04-15):
* Bug fixes:
+ extract-account:
- account extraction left temp files if authorized_keys had
the uchg flag set
- if the user didn't actually exist, a bogus tarball would be
created anyway
+ install-account:
- the home directory was assumed to be /home/${USER}, which
meant that root's files weren't installed properly
- If the user already existed, the order of entries in the
passwd database wasn't preserved. This caused problems with
root accounts because getpwuid(0) started returning the
passwd entry for the 'toor' user (breaking "are you root?"
tests in various scripts).
+ sudo-add:
- if sudo-add couldn't find the sudoers file or couldn't read
it, it didn't remove existing entries when adding or
removing a user (adding duplicate entries if adding a user
that was already there, and silently failing when removing a
user)
- if sudo-add could find and read the sudoers file:
* it would remove the wrong existing entry if the username
of the user being added/removed started with the same
characters as another user higher in the sudoers file
(e.g., adding or removing foo would remove user foobar if
foobar was higher in the sudoers file)
* 'sudo-add -r' would only remove the first instance of a
user from sudoers (a particular problem given the above
bug)
- sudo-add wasn't preserving order if the user was already in
sudoers (order can be significant in sudoers)
* Less verbose output.
This fixes some important bugs and is therefore recommended for all users.
Key changes:
* Security: Directory traversal vulnerability with disk redirection (disallow /.. requests)
* New maintainer: Peter Åstrand <astrand@...>
* Brush cache support
* Removed the hardcoded limit of the username length
* Increased domain name length to 255 chars
* Improved compatibility with PulseAudio/padsp
* Cleaned up and documented the return values
* Keyboard fix: avoid stuck keys in certain cases
* Support for new pointers
* License has been changed to GPLv3
* EWMH fixes for 64-bit machines
* RandR support: automatically resize session if using relative screen size
* Improved support for Windows 2008 Session Broker
* Japanese keyboard map has been improved
* New keyboard map: fr-bepo
* Many stability fixes regarding smart card redirection
* Windows 2008 R2 / 7: Fix sound playback when not using other redirections
* Windows 2008 R2 / 7: Solve disk redirection read-only issues
* Windows 2008 R2 / 7: Solve issue with recursive deletion
* Avoid exit when printing, if lpr command terminates early
Security and stability update of firefox36 to 3.6.17.
MFSA 2011-18 XSLT generate-id() function heap address leak
MFSA 2011-16 Directory traversal in resource: protocol
MFSA 2011-15 Escalation of privilege through Java Embedding Plugin
MFSA 2011-14 Information stealing via form history
MFSA 2011-13 Multiple dangling pointer vulnerabilities
MFSA 2011-12 Miscellaneous memory safety hazards (rv:2.0.1/ 1.9.2.17/ 1.9.1.19)
* 5.1.1 install fails if the bsddb in the standard library is not installed,
under Python 2.7.
* Since 5.0.0, we can't find 4.x libraries unless we specify a
"--berkeley-db=/path/to/bsddb" option.
* Support "DB_ENV->get_open_flags()", "DB_ENV->set_intermediate_dir_mode()",
"DB_ENV->get_intermediate_dir_mode()".
* Support "DB->get_dbname()", "DB->get_open_flags()".
* Support "db_full_version()".
* Document "version()". This top-level function has been supported forever.
* Bugfix when calling "DB->get_size()" on a zero length record.
* 'assertEquals()' is deprecated in Python 3.2.
* 'assert_()' is deprecated in Python 3.2.
* Solved 'ResourceWarning' under Python 3.2.
