------------------------------------------------------------------------------ PACKAGE : zorp VERSION : 3.1.14 SUMMARY : new stable release DATE : May 29, 2008 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of Zorp GPL (3.1.14) has been released. For latest fixes in the 3.1.x branch you are recommended to upgrade to this version. CHANGES: zorp 3.1.14 Thu, 29 May 2008 09:32:31 +0200 Changes since version 3.1.12 Core: * Added reload functionality. ` * Fixed a compatibility issue with Python 2.5. * Fixed a possible abnormal program termination that occasionally occurred when using inband authentication. * Fixed various memory leaks. * DBIface interfaces with two alias IP addresses could bind only to one of the addresses. This behavior has been corrected. * The frequency of e-mail alerts that Zorp sends to the administrator if it detects deadlock is limited to avoid spamming the administrators mailbox. * Fixed a possible abnormal program termination in the blob subsystem. * Fixed an abnormal program termination that occurred when the client failed to authenticate to ZAS using the GSSAPI authentication method. * When the client application terminated while copying multiple large file transfers (e.g., SFTP), the threads handling the transfers were not properly closed, leading to memory leaks. This has been corrected. * Zorp creates a core file when a deadlock is detected. * Time intervals in the PermitTime policy are correctly validated. Http: * Implemented a new proxy attribute called reset_on_close. If this option is enabled, the proxy sends an RST message instead of a normal FIN message whenever a connection is terminated without a proxy generated error message. This behavior causes some client applications to automatically reconnect to the server. * Added a new attribute (self.max_auth_time) to invalidate cached one-time-passwords. If the time specified in this attribute expires, Zorp requests a new authentication from the client browser even if it still has a password cached. * Corrections in the handling of one-time passwords. * The proxy exits with an RST packet when a timeout occurs. Ftp: * Fixed a possible abnormal program termination. Other: * The ´zorpctl --help´ command did not display every option (e.g., the ´-v´ option). UPGRADE: Upgrading using apt: ~~~~~~~~~~~~~~~~~~~~ Make sure the following line is in your /etc/apt/sources.list file: deb http://apt.balabit.com/zorp-gpl-os zorp-os-3.1/3.1 \ common-gpl zorp-gpl zorp-os zorp-os-extra then issue the following commands as root: # apt-get update; apt-get -u dist-upgrade The latest upgrades will be downloaded and installed.