ziproxy-announce Mailing List for ziproxy
Brought to you by:
dmcabrita
Menu
▾
▴
ziproxy-announce — ziproxy announcements
You can subscribe to this list here.
| 2003 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
(1) |
Aug
|
Sep
(1) |
Oct
(2) |
Nov
(1) |
Dec
(1) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
(1) |
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
(1) |
| 2005 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(1) |
| 2006 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(1) |
Jun
(1) |
Jul
(2) |
Aug
(1) |
Sep
|
Oct
(2) |
Nov
(10) |
Dec
(21) |
| 2007 |
Jan
(8) |
Feb
(24) |
Mar
(6) |
Apr
(61) |
May
(79) |
Jun
(92) |
Jul
(119) |
Aug
(41) |
Sep
(4) |
Oct
(1) |
Nov
(2) |
Dec
(2) |
| 2008 |
Jan
(3) |
Feb
|
Mar
(1) |
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
(1) |
Nov
(2) |
Dec
|
| 2009 |
Jan
|
Feb
(3) |
Mar
(1) |
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
(3) |
Oct
|
Nov
|
Dec
(1) |
| 2010 |
Jan
(1) |
Feb
|
Mar
(2) |
Apr
(1) |
May
(1) |
Jun
(2) |
Jul
(3) |
Aug
(3) |
Sep
(1) |
Oct
|
Nov
|
Dec
|
| 2012 |
Jan
|
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2013 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2014 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(1) |
| 2021 |
Jan
|
Feb
|
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Daniel M. C. <da...@gm...> - 2021-03-19 19:17:08
|
------------------------------------------------------------------------------ Ziproxy 3.3.2 released 2021-03-19 Only bugfixes related to compilation issues: Corrected -fnocommon compilation issues in OpenBSD. Added compatibility with giflib 5+ API changes. ------------------------------------------------------------------------------ |
|
From: Daniel M. C. <da...@gm...> - 2014-12-03 12:56:27
|
------------------------------------------------------------------------------ Ziproxy 3.3.1 released 2014-12-03 Fixed stdndup-related compilation error. ------------------------------------------------------------------------------ |
|
From: Daniel M. C. <da...@gm...> - 2013-01-06 03:21:57
|
------------------------------------------------------------------------------ Ziproxy 3.3.0 released 2013-01-06 Added option to remove alpha channel after a specified average opacity threshold. New option: AlphaRemovalMinAvgOpacity ------------------------------------------------------------------------------ |
|
From: Daniel M. C. <da...@gm...> - 2012-02-08 15:13:54
|
------------------------------------------------------------------------------ Ziproxy 3.2.1 released 2012-02-08 This version fixes compilation problems with the newer libpng 1.5.x. ------------------------------------------------------------------------------ |
|
From: Daniel M. C. <da...@gm...> - 2010-09-07 04:06:13
|
--------------------------------------------------------------------------------
Ziproxy 3.2.0 released
2010-09-07
This version brings SASL support, licensing update to reflect the new
licensing terms of legacy code (in practice GPL restrictions prevail, though)
and some polishing.
New features:
* Changed HTTP authentication code to a modular one.
* Added SASL support for HTTP authentication.
Bugfixes/changes:
* Fixed Nameservers-related code which prevented compilation in certain
OSes/arch compinations (ex.: glibc+gcc+ARM).
* Nameservers support may be enable/disabled at compilation time.
--------------------------------------------------------------------------------
|
|
From: Luis D. L. Q. <lui...@gm...> - 2010-08-24 22:02:18
|
Hello Just wondering if ziproxy is able to compress SWF files, cause in my logs no compressiion for that kind and there are much traffic that could be saved. Regards LD |
|
From: Daniel M. C. <da...@gm...> - 2010-08-22 02:46:08
|
------------------------------------------------------------------ Legacy Ziproxy 1.3d_r2 release 2010-08-21 An old version of Ziproxy, version 1.3d, was released as 1.3d_r2 under a 2-clause BSD license and is available for anyone interested (check the download section). Ziproxy 1.3d was the last version developed by the former maintainer, Juraj Variny, who agreed to make his code available under this new licensing terms. The pertinent public announcement e-mail follows: [Ziproxy-users] Ziproxy license change From: Juraj Variny <xxxxxx@xxxxxxxxx> To: zip...@li... Date: 21-08-2010 06:38:25 Hello ziproxy users and developers, following announcement is result of agreement between me and Daniel Mealha Cabrita and it means that my code in ziproxy is now dual licensed under both GPL and NetBSD licenses, for everyone. If you don't know what it means, it will not affect you. I hereby testify that ziproxy-1.3d, released at 2004-09-30, contains only source code and documentation written by me and source code previously in public domain, without exception. I am re-releasing ziproxy-1.3d under NetBSD 2-clause BSD license, under these terms: * Copyright (c) Juraj Variny, 2004 * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * THIS SOFTWARE IS PROVIDED BY JURAJ VARINY * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE * POSSIBILITY OF SUCH DAMAGE. Best regards, Juraj Variny ------------------------------------------------------------------ |
|
From: Juraj V. <ri...@gm...> - 2010-08-19 19:32:08
|
Hello ziproxy users and developers, following announcement is result of agreement between me and Daniel Mealha Cabrita and it means that my code in ziproxy is now dual licensed under both GPL and NetBSD licenses, for everyone. If you don't know what it means, it will not affect you. I hereby testify that ziproxy-1.3d, released at 2004-09-30, contains only source code and documentation written by me and source code previously in public domain, without exception. I am re-releasing ziproxy-1.3d under NetBSD 2-clause BSD license, under these terms: * Copyright (c) Juraj Variny, 2004 * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * THIS SOFTWARE IS PROVIDED BY JURAJ VARINY * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE * POSSIBILITY OF SUCH DAMAGE. Best regards, Juraj Variny |
|
From: Daniel M. C. <da...@gm...> - 2010-07-17 22:52:31
|
--------------------------------------------------------------------------------
Ziproxy 3.1.3 released.
Bugfixes only:
* Fixed non-POSIX behavior which brought problems with eglibc.
* Fixed Safari HTTP authentication problem.
--------------------------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2010-07-02 04:50:43
|
-------------------------------------------------------------------------------- 5 years later, same maintainer still Yup, that was 5 years ago. I usually don't like to mark every single event but, since it's a round half-decade, why not. In 2005-06-12 I took over Ziproxy's development and since then I've been the project's maintainer. Soon after that, in 2005-06-17, a modest 1.4.0 bugfix version was released. The ChangeLog says how much the code has changed since then. Ironically, and somewhat fitting, today another bureaucratic bugfix version was released. I'm not particularly inspired to write today so, for the ones willing to read something more, there's a Sourceforge interview/blog entry published few weeks ago, available at: http://sourceforge.net/blog/add-zip-to-your-web-surfing-with-ziproxy/ yours, the current Ziproxy maintainer, D.M.C. -------------------------------------------------------------------------------- |
|
From: Daniel M. C. <da...@gm...> - 2010-07-02 04:50:39
|
--------------------------------------------------------------------------------
Ziproxy 3.1.2 released.
Minor bugfixes and improvements:
* Ziproxy avoids unnecessary image processing now, thus saving CPU.
* Fixed daemonization code: no more stdin/stdout kludges.
--------------------------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2010-06-15 10:32:32
|
--------------------------------------------------------------------------------
Ziproxy 3.1.1 released.
Security fixes in this version
A number of bugs appeared in the 3.1.0 version and are now fixed.
* Fixed security vulnerability (heap-related) in PNG decoder.
(new bug from 3.1.0)
* Fixed problem with certain imagens being corrupted after alpha
optimization processing (RGBA/YUVA)
(new bug from 3.1.0)
* Transparent channels were not correctly loaded in certain PNG pictures,
resulting in corrupted or blank images. Fixed.
(new bug from 3.1.0)
* Fixed "bashisms" in example statistics generator script. Should work
with any Bourne-like shell now.
* Added temporary workaround for data corruption when libjasper decides to
send warnings in certain, rare, circumstances.
A definitive fix will come later.
* PNG loader code reorganization and cleanup.
* Misc code optimizations in image optimization routines.
Upgrade is recommended.
--------------------------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2010-06-03 05:09:18
|
--------------------------------------------------------------------------------
Ziproxy 3.1.0 released.
Some interesting improvements in this version:
* Image recompression core rewritten. Improved decision-taking routines.
In practice, that means more compression in average and code less prone
to bugs.
* Added full support for transparency
(affects PNG and JP2K targets).
* Added detection and removal of useless alpha channel
(certain pictures with alpha channel may be recompressed to JPEG now).
* Added palette and transparency optimization routines
(affects lossless compression: PNG targets).
More compression in certain cases.
* Added option to convert images to grayscale for more compression.
New option: ConvertToGrayscale
--------------------------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2010-05-21 03:21:09
|
-------------------------------------------------------------------------------- Ziproxy 3.0.1 released. Security fix release This version fixes a security vulnerability related to atypical huge picture files (>4GB of size once expanded). Upgrade is recommended. This vulnerability was reported by Stefan Cornelius from Secunia Research -------------------------------------------------------------------------------- |
|
From: Daniel M. C. <da...@gm...> - 2010-04-19 07:44:28
|
--------------------------------------------------------------------------------
Ziproxy 3.0.0 released.
As expected, lots of changes in this version.
The code suffered cleanups, some mummified relics are now gone and certain
parts were reimplemented.
Compared to the previous stable version (2.7.2), the changes are the
following.
Note: for details, check the ChangeLog file in the sources
* Improvements:
o IP ToS marking support.
With this provision you may now do Level-7 traffic shaping based
on certain (configurable) characteristics of the HTTP traffic, thus ensuring
HTTP QoS (that is, decent browsing experience) even during massive and
concurrent downloads of video, ISO images and other bulk data.
The new ToS-related options are: TOSMarking, TOSFlagsDefault,
TOSFlagsDiff, TOSMarkAsDiffURL, TOSMarkAsDiffCT, TOSMarkAsDiffSizeBT.
o Added full support for files >2GB.
This affects AccessLog mostly, and fixes two very specific
situations where downloads were limited to 2GB.
The limit now is (worst case) >81 PB.
o Changed the time measurement system.
File transfers >35 minutes had their time incorrectly reported.
The limit now is (worst case) >290000 years.
o New daemon-related options.
New options: RunAsUser, RunAsGroup, PIDFile
New CLI options: --pid-file, --stop-daemon, --user, --group
o Added support for simultaneous user connection limit.
New option: MaxActiveUserConnections
o Now transfers interrupted with SIGTERM as logged aswell.
Added 'X' flag support to AccessLog.
o Improvements on the daemon fail routines.
o Access log code rewritten from scratch and simplified.
o New error/warning log subsystem.
Much improved verbosity.
Added support for logging errors into a file instead of simply
dumping them to stderr.
New option: LogError
o New lossless Content-Type configuration system.
Now it's possible to specify the full mime-type instead of
just "application/" subtypes.
Now also possible to specify pattern-matches (such
as "text/*blah")
New option: LosslessCompressCT
New related options: TOSMarkAsDiffCTAlsoXST,
URLReplaceDataCTListAlsoXST, LosslessCompressCTAlsoXST.
* Bug fixes:
o Several bugs involving garbage to output and/or crashing were
fixed.
o Fixed compilation errors while compiling with libpng 1.4.
o Under certain circumstances, PNG pictures were not recompressed.
Fixed.
This bug typically affected non-x86-32 architectures.
* Other changes:
o Deprecated options (still work):
ZiproxyTimeout (see: ConnTimeout)
AccessLogFileName (see: AccessLog)
Compressible (see: LosslessCompressCT)
o Obsoleted options:
LogPipe
MSIETest
LogFile (see: DebugLog)
AccessLogUserPOV
NetdTimeout
o Removed all Russian translations.
Note: That due to lack of maintainer.
--------------------------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2010-03-26 09:53:48
|
--------------------------------------------------------------------- Ziproxy April Fools' 2010 released. That's a real release! Honest! It's a modified version of 2.7.9_BETA3 for the pranksters among us. For details, access the following page: http://ziproxy.sourceforge.net/aprilfools/ Ziproxy - BOFH's best friend. --------------------------------------------------------------------- |
|
From: Daniel M. C. <da...@gm...> - 2010-03-08 22:30:05
|
---------------------------------------------------------------------
Ziproxy 2.7.9_BETA3 released.
Again, lots of changes in this version:
* Improvements:
o Added native UID/GID change support for daemon.
New options: RunAsUser, RunAsGroup
New CLI options: --user, --group
o Added native PID file support for daemon control.
New option: PIDFile
New CLI options: --pid-file, --stop-daemon
o Access log code rewritten from scratch and simplified.
o Improved daemon error verbosity.
o Added support for simultaneous user connection limit.
New option: MaxActiveUserConnections
o Improvements on the daemon fail routines.
Now avoids unnecessary daemon abortions and busy loops.
o Now transfers interrupted with SIGTERM as logged aswell.
Added 'X' flag support to AccessLog.
o Minor tweaking in the hash-generation functions, to reduce the
likehood of hash collisions.
o Added GCC-specific optimizations to ziproxylogtool, giving between
5%-15% speedup.
Such optimizations are innocuous to other compilers.
* Bug fixes:
o Several bugs involving garbage to output and/or crashing were
fixed.
o Fixed compilation errors while compiling with libpng 1.4.
* Other changes:
o The following option was deprecated:
ZiproxyTimeout (see: ConnTimeout)
o The following options were obsoleted:
AccessLogUserPOV, NetdTimeout
For more detailed information on the changes made, see the ChangeLog file.
---------------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2010-01-03 11:45:47
|
---------------------------------------------------------------------
Ziproxy 2.7.9_BETA2 released.
Lots of changes in this version:
* Improvements:
o Added full support for files >2GB.
This affects AccessLog mostly, and fixes two very specific
situations where downloads were limited to 2GB.
The limit now is (worst case) >81 PB.
o Changed the time measurement system.
File transfers >35 minutes had their time incorrectly reported.
The limit now is (worst case) >290000 years.
o New error/waning reporting subsystem.
Added messages to situations previously unreported.
Added more verbosity to such messages.
Added support for obsolete/deprecated/conflict/etc options from
config file.
More uniform error messages.
Added support for logging errors into a file instead of simply
dumping them to stderr.
New option: LogError
o New lossless Content-Type configuration system.
Now it's possible to specify the full mime-type instead of
just "application/" subtypes.
Now also possible to specify pattern-matches (such
as "text/*blah")
New option: LosslessCompressCT
New related options: TOSMarkAsDiffCTAlsoXST,
URLReplaceDataCTListAlsoXST, LosslessCompressCTAlsoXST.
Deprecated option: Compressible (still functional)
o Added "G" flag support to AccessLog.
* Bug fixes:
o Under certain circumstances, PNG pictures were not recompressed.
Fixed.
This bug typically affected non-x86-32 architectures.
* Other changes:
o Changed default value of MinUncompressedGzipStreamEval from 250000
(~250kB) to 10000000 (~10MB).
This avoids trigging of MaxUncompressedGzipRatio if ISO9660 images
are compressed while streaming.
o Obsoleted LogPipe option.
o Obsoleted MSIETest option.
o Obsoleted LogFile option
See new option: DebugLog option
o Removed all Russian translations.
Note: That due to lack of maintainer.
o Deprecated AccessLogFileName (still works).
See new option: AccessLog.
For more detailed information on the changes made, see the ChangeLog file.
---------------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2009-12-14 03:00:33
|
--------------------------------------------------------------------- Ziproxy 2.7.9_BETA released. This release brings a major - and exciting - new feature: IP ToS marking support. With this provision you may now do Level-7 traffic shaping based on certain (configurable) characteristics of the HTTP traffic, thus ensuring HTTP QoS (that is, decent browsing experience) even during massive and concurrent downloads of video, ISO images and other bulk data. The new ToS-related options are: TOSMarking, TOSFlagsDefault, TOSFlagsDiff, TOSMarkAsDiffURL, TOSMarkAsDiffCT, TOSMarkAsDiffSizeBT. Note: Marking packets is only part of the job, you still need a a router/traffic shaper aware of the different TOSes in order to priorize the traffic accordingly. This beta version adds only ToS capability, more changes/features will appear in next beta releases. As always, feedback from testers is appreciated. --------------------------------------------------------------------- |
|
From: Daniel M. C. <da...@gm...> - 2009-09-30 03:23:02
|
------------------------------------------------------------------------
Ziproxy 2.7.2 released.
Really minor fixes this time:
* LogFile timer was not properly initialized and the first measurement was
always wrong. Fixed.
* Fixed minor mistakes in acknowledgment texts.
------------------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2009-09-28 04:16:28
|
------------------------------------------------- Ziproxy is 7 years old Considering the official project birthday, 2002-09-24, Ziproxy is now 7 years old, alive and kicking. Nowadays Ziproxy provides acceleration for a variety of situations, being that ISPs, private WAN networks, generic acceleration services or simply people who need some extra speed for their network connections. Ziproxy is a honest solution, providing what it claims to: realistic HTTP acceleration. Certain commercial software (I won't mention the names, but you probably know who they are) claim absurd numbers such as "up to 200x acceleration" obviously using unrealistic metrics (such as raw bitmap size divided by compressed size). Funny to know that such software even hide the fact they use JPEG 2000 for their "extra quality algorithm" (as if they invented the algorithm themselves). In real world, when compared to Ziproxy, such software offer either lower image quality or lower compression. Everyone is free to do the test themselves. So here we are: debunking the myth that commercial software is necessarily better than free (FOSS) software! yours, the current Ziproxy maintainer, D.M.C. ------------------------------------------------- |
|
From: Daniel M. C. <da...@gm...> - 2009-09-13 03:11:05
|
------------------------------------------------------------
Ziproxy 2.7.1 released.
Minor fixes this time:
* Fixed HTTP/0.9 simple response support (which was broken for aeons and
nobody noticed).
* Gunzipped data smaller than the compressed was being treated as corruped
and data was simply forwarded as is.
But that's not necessarily true (a certain website thought it was a good
idea to gzip jpegs, for example) and in certain cases processing was not
applied because of that.
Fixed.
* Implemented workaround for buggy sites which send:
Content-Encoding: ISO-8859-1 (violates RFC 2616).
Fixes certain pages which appeared as binary garbage in the browser.
------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2009-08-17 02:02:28
|
hi there, This message is intended to the Ziproxy package maintainers (FreeBSD, Debian Linux etc etc). I have TWO requests here: 1. - I wish to improve the Ziproxy's website and add more convenient information about downloading/installing Ziproxy for the OSes which already have a maintained package (instead of merely providing a link to the source code). That would be for the users' convenience. In order to do that, I would like to ask for information on: 1.1 - The OS (FreeBSD, Knoppix etc) and version. 1.2 - If the package is not in the main/default repository, which one is that. 1.3 - The instructions (or a link) on how to install Ziproxy in that specific OS (eg.: $ apt-get install ziproxy) 1.4 - The WWW link (or the packager's e-mail address, if you're brave enough) where to click in cases of problems concerning the packaging. 2. - It's possible that for certain OSes a certain patching is required before compilation. There may be certain GNU-isms or Linux-isms in the source code and/or supporting building scripts (Makefile & friends), that may happen because I use a GNU/Linux OS for development. Still, Ziproxy is (or at least meant to be) an UN*X software, regardless its licensing terms. So, I will appreciate feedback concerning compatibility/compilation issues from non-Linux packagers and, if possible (that would be truly nice), patches fixing such kind of problems aswell. (I sure hope nobody's compiling Ziproxy with the help of ixemul.library -- ok, obscure joke here) .dan |
|
From: Daniel M. C. <da...@gm...> - 2009-04-14 03:28:06
|
------------------------------------------------------------
Ziproxy 2.7.0 released.
This version suffered a major cleanup and contains a number of bugfixes
(incluing security ones) and extra features.
The changes are listed below (relative to 2.6.0 version).
New security fixes/features:
* Added provision for outgoing port restrictions.
New options: RestrictOutPortHTTP, RestrictOutPortCONNECT
This provision mitigates the transparent proxy vulnerability US-CERT
VU#435052
* Added feature against "image bomb" DoS.
New option: MaxUncompressedImageRatio
Other features:
* Added support for custom 403 error pages.
* Added Lanczos component upsampler support to JP2k.
New option: JP2Upsampler
* Added provision for crash (signal) interception and logging (see new
access log flags).
New option: InterceptCrashes
* Added support for content substitution by matching URL + content-type.
New options: URLReplaceDataCT, URLReplaceDataCTList
* Added support for URL blocking.
New option: URLDeny
* Added support for "ICY" SHOUTcast headers. Now icecasts from such
servers are playable.
Bugfixes:
* Fixed a bug which caused crashes in certain, rare, specific situations
while compressing to jp2k.
* Fixed bug in rgb2yuv converter. In certain cases jp2 pictures had some
very wrong colors (like deep red turned into strong pink etc).
* Fixed the type/signedness mess with outgoing Port vars. Ports >= 32768
were not accessible.
Non-standard HTTP/HTTPS ports (non-80/443) were not accessible in
big-endian architectures.
*
* Changed JPG and JP2K default settings to (hopefully) better values.
* Bug which prevented recompression to jp2k when more aggressive
parameters were set to color components, original image was forwarded
instead. Fixed.
* Encoding/decoding jp2 images with alpha channel always fails. Fixed.
Other:
* Obsoleted ModifySuffixes. It was buggy and lost its usefulness a long
ago.
The following config options are obsolete:
ModifySuffixes, MinTextStream
* Flex is no longer required for building Ziproxy.
* Test programs were obsolete and were removed (imgtest, modifytest,
cfgtest) and no longer are a build option.
------------------------------------------------------------
|
|
From: Daniel M. C. <da...@gm...> - 2009-03-15 07:03:27
|
------------------------------------------------------------
Ziproxy 2.6.9_BETA2 released.
New features:
* Added provision for crash (signal) interception and logging (see new
access log flags).
New option: InterceptCrashes
* Added feature against "image bomb" DoS.
New option: MaxUncompressedImageRatio
* Added support for content substitution by matching URL + content-type.
New options: URLReplaceDataCT, URLReplaceDataCTList
* Added support for URL blocking.
New option: URLDeny
* Added support for "ICY" SHOUTcast headers. Now icecasts from such
servers are playable.
Bugfixes:
* Fixed a bug which caused crashes in certain, rare, specific situations
while compressing to jp2k.
* Fixed bug in rgb2yuv converter. In certain cases jp2 pictures had some
very wrong colors (like deep red turned into strong pink etc).
Other:
* Obsoleted ModifySuffixes. It was buggy and lost its usefulness a long
ago.
The following config options are obsolete:
ModifySuffixes, MinTextStream
* Flex is no longer required for building Ziproxy.
* Test programs were obsolete and were removed (imgtest, modifytest,
cfgtest) and no longer are a build option.
* Miscellaneous code cleanup.
------------------------------------------------------------
|
459 messages has been excluded from this view by a project administrator.
