SSL-Explorer 0.2.13 released
22067
SSL-Exploerer version 0.2.13 has been released. SSL-Explorer is the world's first open-source, browser based SSL VPN solution. This unique remote access security solution provides users and businesses alike with a means of securely accessing network resources from outside the network perimeter using only a standard web browser.    The 0.2.13 release provides a number of important bug fixes to many areas of the system (see change log below). This release also includes a number of performance improvements that provide improved web server responses.  SSL-Explorer: Enterprise Edition product page:  http://3sp.com/showSslExplorer.do   SSL-Explorer: Community Edition product page:  http://3sp.com/showSslExplorerCommunity.do   SSL-Explorer SourceForge.net project page:  http://sourceforge.net/projects/sslexplorer/   ================= =   CHANGE LOG    = =================  SSL-Explorer 0.2.13 - April 27, 2007  All Editions  Bug Fixes       o Webfolders require re-authentication      o Installer Step-4 Available Interfaces      o Installer Step 5 configure proxies port exception inconsistent      o User can enter a negative shutdown delay      o Lack of extension description causes name to not be displayed in application creation      o When removing access right a NPE occurs.      o Selecting no user database throws exception      o Session password entered when launching resource throws exception      o Actions for account now available in Accounts listing rather than Account edit page.      o Default icon/list resource view only works for favourites      o Setting Authentication order in IE7 or Firefox 2 does not work correctly      o Exception in Network Places displays user password, plus cannot determine certain file types      o System Configuration, Windows Integration - AD tab not working      o Network Places NullPointerException when trying to paste nothing      o In Access Rights, creating any access right gives you an error in the information section      o Replacement Proxy - ClassNotFoundException on MultipartForm      o User prevented from entering javascript or HTTP header injection in SSL-Explorer redirect URLs      o Unable to Create another account immediately after creating a new one      o Problems with AD accounts that have different username/sAMAccountNames      o Install Wizard Import certificate requiring an alias is not mandatory      o HTML Applications Broken      o Vista /   Java 6 Fatal JVM Crash      o When opening 2 different web forwards, the forward that was opened first gives 404 errors for all links      o MSJVM support not working      o Resolved concurrent modification exception in web forward POST request that contains URI parameters      o Policy associations removed when user database changes      o Ip restrictions - the ability to recover from an ip restricted state      o Options to disable weak SSL cipher suites      o Performance improvements   Enterprise Edition  Bug Fixes      o Comma separated CN not found with any groups when authenticating with AD via LDAP       o Audit event name inconsistencies      o Some auditing events don't appear in reports.      o Mail check socket timeout is treated as disconnection      o Force PIN change at next logon doesn't mandate the PIN be different      o Brandless Logon incorrectly displays welcome text      o Drive Mapping causes errors when installed and unlicensed      o When using LDAP, entering a valid user with any invalid password logs you on
196081
Latest PEAR Releases:File_Cabinet 0.1.0Validate_IE 1.0.0Net_SMTP 1.2.11pearweb_phars 1.4.1PHP_CompatInfo 1.6.0PHP_CompatInfo 1.6.1VFS 0.2.0Structures_DataGrid_DataSource_Array 0.1.4Services_OpenSearch 0.2.0
86222
In brief Exploit circulating for unpatched vuln
386281
(InfoWorld) - Microsoft has quietly released a patch aimed at improving the performance of Internet Explorer 7's phishing filter ahead of the company's regular patching schedule, which occurs on the second Tuesday of every month. The update was made available last week on on Microsoft's Web site, according to a blog entry on IEBlog, which is written by the IE team at Microsoft. This update addresses an issue some users experience when navigating to a page with multiple frames or where frames are being navigated simultaneously, according to the post by IE Program Manager Steve Reynolds. This kind of navigation occurs when the IE phishing filter, which attempts to block access to sites that may try to defraud Web users, evaluates a Web page when a user navigates to it. The result is multiple simultaneous evaluations for the same page, Reynolds wrote in his post. In addition to being available on Microsoft's Web site now, the company also will release the patch later this month for Windows XP and Windows Server 2003. Phishing filter performance is not the only complaint IE 7 users have had since the final version was released in October. Frequent crashes and other performance problems such as excessive memory consumption that results in slow page loads have been reported.
739150
Platform-independent tool for Authenticode signing of EXE/CAB files - uses OpenSSL and libcurl. It also supports timestamping.   Includes padding fix and support for signing of already signed files.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
364472
Asa Dotzler writes &quot;We took one more important change into the builds last night, moving from a blacklist to a whitelist for external protocol handlers, so today&#39;s builds are the new candidate 1.0PR builds.
202255
OK, we had an extended breather from our last look at BIND's zone file pri.example.org. It's time to finish up and get a sense of what these records mean. To go off-topic a little, recently, I had the task of setting up two OpenLDAP servers and putting together a test environment for a project with several developers and several applications including some LAMP applications. Without a working knowledge of DNS, the project would have gone amuck.
706136
Latest PHPClasses.org Releases:PHPThreaderVery Simple CaptchaPHP ThreaderMultiCurl class libraryPersistenciaOfile classSecurity_TokenPHP poppassd clientTree AJAXClass Treeview
674304
Mike Wallner has thrown together some stats for the latest edition of the pecl/http package to test its response performance.   The results surprised me, because it clearly shows that the performance drop for starting the PHP engine and doing the neccessary negotiation to provide caching is not that bad.   There's a chart of the results as well as a full PDF with all of the stats the graph maps out. He includes the legend to make the graph easier to understand.
472605
Latest PHPClasses.org Releases:Simple CAPTCHA ClasssynDirectorycache_TSLinkMeInSimple HTTP browserImgManClasse UploadSingleton Interfacebib_servercaText n caMathgMemCacheClasse PrestazioniText To SpeechAutoForm
250610
Blog: Critical patches include those for Internet Explorer, Outlook Express and Windows Mail,  Win 32 API, and the Schannel Security Package.
215473
Latest PEAR Releases:MDB2_Driver_ibase 1.2.1HTML_AJAX 0.5.0PHP_CompatInfo 1.3.0PHP_LexerGenerator 0.2.2Auth 1.3.2HTML_QuickForm_Livesearch 0.3.1Net_GeoIP 1.0.0RC1PHP_CompatInfo 1.3.1Services_Delicious 0.5.0MDB2_Driver_mysqli 1.2.2MDB2_Driver_mysql 1.2.2MDB2 2.2.2MP3_Playlist 0.5.1alpha1MDB2_Driver_pgsql 1.2.2MDB2_Driver_oci8 1.0.2File_Bittorrent 1.0.2
420080
An update to Firefox fixes a number of security flaws in the browser.
153198
Latest PECL Releases:htscanner 0.6.1zip 1.8.3htscanner 0.6.2sam 1.0.0ingres 1.4.1
424439
10.3.7 fixes bugs, fills security holes
140782
Latest PHPClasses.org Releases:My TwitterMEMPDO Connection FactorySimple RPN InterpreterPHP Dial GaugeColor CAPTCHApaging_classDigiOz Indexertc_mydbTextSQLgAjaxThe One Hundred Gamebasic_dbHTML DocumentMyACL