Small bug fixes for port order on mdns advertisement on intel macs, playlists based on bitrate. Primarly, though, this release is to apply fix for CVE-2008-1771. Thanks to Nico Golde for bringing it to light.
0.2.4.1
Security updates for two DOS and one format string vulnerability.
the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
and other POSIX unixes. It may eventually support Win32 as well.
Some random features that it supports:
Supports the Roku SoundBridge (query/browse/index support)
Supports periodic rescans of the database
Can advertise shoutcast streams
Supports password-protected shares
Is web-configurable and managable
Support dynamic playlists, like iTunes "Smart playlists"
Probably other things I've forgotten
All is not perfect, however. Currently, there are several drawbacks to it:
database is indexed by inode, so all music must be on one filesystem
browse by artist is slow on Roku, times out (with large databases ~10K songs)
Probably other things I've forgotten
