2Geom is a C++ 2D geometry library geared towards robust processing of
computational geometry data associated with vector graphics. The primary design
consideration is ease of use and clarity.
Feedback and OK sthen@
"Lame cache can be abused to severely degrade resolver performance"
Exploitation of broken authoritative servers using a flaw in response
processing can cause degradation in BIND resolver performance. The way the
lame cache is currently designed makes it possible for its internal data
structures to grow almost infinitely, which may cause significant delays in
client query processing.
The purpose of a resolver's lame cache is to ensure that if an authoritative
server responds to a resolver's query in a specific broken way, subsequent
client queries for the same <QNAME, QTYPE> tuple do not trigger further
queries to the same server for a configurable amount of time. The lame cache
is enabled by setting the lame-ttl option in named.conf to a value greater
than 0. That option is set to lame-ttl 600; in the default configuration,
which means the lame cache is enabled by default.
Impact:
Authoritative-only BIND 9 servers are NOT vulnerable to this flaw.
A successful attack exploiting this flaw causes a named resolver to spend most
of its CPU time on managing and checking the lame cache. This results in
client queries being responded to with large delays, and increased likelihood
of DNS timeouts on client hosts.
they're annotated with a setuptools_scm[toml] in the requirements list
but there's no warning about it not being present, they just try to
create an egg-info dir with 0.0.0 instead of the proper version.
drop the explicit py-toml deps in those ports which had it previously,
suggested by aja@. ok aja kmos
authentication key in one of the domain labels. While I don't recommend
this construct; echoing said key back to anyone listed is an even worse
idea.
For these known blacklists strip the key label from the domain when
printing.
Behaviour pointed out by and initial diff from Renaud Allard
(renaud <at> allard <dot> it)
OK jasper@
add an XXX comment for now as it needs a patch to cope with resolvd's
comment on the "nameserver" line; this is not new but i only noticed
when testing the update
Credits:
brynet@ for intial port and upstreaming OpenBSD patches.
shamazmazum for providing an upstream for this port and getting it to
run on FreeBSD.
ok brynet@ thfr@
Amnesia: The Dark Descent, a first person survival horror. A game about
immersion, discovery and living through a nightmare. An experience that
will chill you to the core.
