From Arthur H. Johnson II <arthur@linuxbox.nu>. Somewhat cleaned up by me.
This is a very nice clock that runs in the WindowMaker "dock". Either
digital or analog clock faces can be specified.
the following: a basic data structure to provide reference-counted images,
functions to load images synchronously from disk or progressively from
arbitrary data buffers, and convenience functions to transform pixbufs
and render them to drawables.
From: Tom Knienieder <tom@knienieder.com>
Released under the GPL licence, it comes with the full
C-source code of the library, a flexible command-line utility and a
neat graphical front-end using the Gtk+ toolkit. The supported
formats are:
Acr/Nema 2.0, Analyze (SPM), DICOM 3.0, Ecat/Matrix 6.4,
InterFile3.3 and Gif87a/89a.
The program also allows to read unsupported files without
compression, to print pixel values or to extract/reorder specified
images. It is possible to retrieve the raw binary/ascii image arrays or
to write annimated GIFs for desktop applications. The library could be
used as a framework for your own image formats.
From: Tom Knienieder <tom@knienieder.com>
the following: a basic data structure to provide reference-counted images,
functions to load images synchronously from disk or progressively from
arbitrary data buffers, and convenience functions to transform pixbufs
and render them to drawables.
From: Tom Knienieder <tom@knienieder.com>
data access and a library that provides an implementation of the
interface. The netCDF library also defines a machine-independent
format for representing scientific data. Together, the interface,
library, and format support the creation, access, and sharing of
scientific data. The netCDF software was developed at the Unidata
Program Center in Boulder, Colorado.
From: Tom Knienieder <tom@knienieder.com>
It has been pointed out that there is another bug in the signature
verification code of GnuPG.
* This can easily lead to false positives *
All versions of GnuPG released before today are vulnerable!
To check a detached singature you normally do this:
gpg --verify foo.sig foo.txt
The problem here is that someone may replace foo.sig with a standard
signature containing some arbitrary signed text and its signature,
and then modify foo.txt - GnuPG does not detect this - Ooops.
The solution for this problem ist not easy and needs a change in the
semantics of the --verify command: It will not any longer be
possible to do this:
gpg --verify foo.sig <foo.txt
Instead you have to use this
gpg --verify foo.sig - <foo.txt
The difference here is that gpg sees 2 files on the command lines
and thereby knows that it should check a detached signature. We
really need this information and there is no way to avoid that
change, sorry. You should make sure that you never use the first
form, because this will lead to false positives when foo.sig is not
a detached signature - gnupg does detect the other case and warns
you, but this is not sufficient. If you use GnuPG from other
applications, please change it.
ok markus@
it's so seldom used now).
Remove a few targets that are not really needed (mirror-distfiles, use
mirror-maker instead).
More changes to fake to come, once they've been properly tested.
"Nano 0.9.24 is released. This versions contains the last of the
security fixes for writing files, as well as for a nasty segfault
when nano is unable to open a file for reading, among other fixes.
Nano also now cowardly refuses to open device files, to stop silly
things like trying to open /dev/zero. New features include being
able to use Meta-Meta-<key> as Control-<key>, and some new flags
have been added for Pico compatibility."
