------------------------------------------------------------------------------ PACKAGE : zorp VERSION : 3.0.8 SUMMARY : new stable release DATE : Nov 3, 2005 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of Zorp GPL (3.0.8) has been released. For latest fixes in the 3.0.x branch you are recommended to upgrade to this version. CHANGES: Core: * Fixed a possible Python traceback whenever a ZoneListener or CSZoneListener referred to a non-existant service. * Fixed a possible deadlock in processing UDP traffic. * Added round_robin parameter to FailoverChainer to make it possible to explicitly speicify round-robin and failover behaviour when establishing server connections. * Fixed umbrella behaviour for zones which had no inbound or outbound service list. zorpctl: * Fixed a possible segmentation fault in "zorpctl szig". Ftp: * Added a log message about rejected login attempts for anonymous-only FTP connections. * Fixed a possible memory leak active data connection establishment. * Fixed a possible deadlock in data session initiation. Ldap: * Fixed a possible parse error in long SEARCH requests. Pssl: * Changed all cipher suites to explicitly disallow not-authenticating algorithms such as anonymous-DH. Http: * Added countermeasures for various request/response smuggling attacks. * Fixed an interoperability problem to automatically reconnect when the server drops the connection while to proxy is waiting for the client. UPGRADE: Upgrading using apt: ~~~~~~~~~~~~~~~~~~~~ Make sure the following line is in your /etc/apt/sources.list file: deb http://apt.balabit.com/zorp-gpl-os zorp-os-3.0/3.0 \ common-gpl zorp-gpl zorp-os zorp-os-extra then issue the following commands as root: # apt-get update; apt-get -u upgrade The latest upgrades will be downloaded and installed.