news

This is a multi-part message in MIME format... ------------=_1208252555-11275-2672 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2008:085 http://www.mandriva.com/security/ _______________________________________________________________________ Package : python Date : April 15, 2008 Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 _______________________________________________________________________ Problem Description: Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow. The updated packages have been patched to prevent this issue. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1721 _______________________________________________________________________ Updated Packages: Mandriva Linux 2007.1: 9ecc4c94fe365970d42278e55bc02b73 2007.1/i586/libpython2.5-2.5-4.3mdv2007.1.i586.rpm 47b7294690cc9a34714394602ec52fe3 2007.1/i586/libpython2.5-devel-2.5-4.3mdv2007.1.i586.rpm eebd7eb038b8b8e8646f660a1979919c 2007.1/i586/python-2.5-4.3mdv2007.1.i586.rpm 35e7b42b7537d448d10266aff4c4d8e8 2007.1/i586/python-base-2.5-4.3mdv2007.1.i586.rpm 8af1b52823f5c185e317ad1284b2466b 2007.1/i586/python-docs-2.5-4.3mdv2007.1.i586.rpm 29a99c607e0890685053959399368dbd 2007.1/i586/tkinter-2.5-4.3mdv2007.1.i586.rpm d1c1500f11921e027dc1e84bd731d86c 2007.1/SRPMS/python-2.5-4.3mdv2007.1.src.rpm Mandriva Linux 2007.1/X86_64: dfea89865b1020c76acc6f3df20613a5 2007.1/x86_64/lib64python2.5-2.5-4.3mdv2007.1.x86_64.rpm 53a6e2ffe62fc8872a45383c237a9144 2007.1/x86_64/lib64python2.5-devel-2.5-4.3mdv2007.1.x86_64.rpm 2f519a0aa522130441d6fc714e6e5a1f 2007.1/x86_64/python-2.5-4.3mdv2007.1.x86_64.rpm 6329e55974fb9dcf0a326a5535bccd7f 2007.1/x86_64/python-base-2.5-4.3mdv2007.1.x86_64.rpm 51abb3bd7c674e075b94313ee2c25e34 2007.1/x86_64/python-docs-2.5-4.3mdv2007.1.x86_64.rpm 819a9ec6f5e5a875f217763405f00734 2007.1/x86_64/tkinter-2.5-4.3mdv2007.1.x86_64.rpm d1c1500f11921e027dc1e84bd731d86c 2007.1/SRPMS/python-2.5-4.3mdv2007.1.src.rpm Mandriva Linux 2008.0: b9282fc19b011a9b43f020f818e6f5d9 2008.0/i586/libpython2.5-2.5.1-5.2mdv2008.0.i586.rpm bc5a47bd0868f980a93a50a66914659b 2008.0/i586/libpython2.5-devel-2.5.1-5.2mdv2008.0.i586.rpm 2e9a41c20c32f8f603e7647fb8c078ad 2008.0/i586/python-2.5.1-5.2mdv2008.0.i586.rpm a754a2f3173faef023ab6ef2b28accd1 2008.0/i586/python-base-2.5.1-5.2mdv2008.0.i586.rpm 7d0e443b4ad27f61168de7324f1abb15 2008.0/i586/python-docs-2.5.1-5.2mdv2008.0.i586.rpm 8a06ec0b5558ad0145157f63be1aa1f8 2008.0/i586/tkinter-2.5.1-5.2mdv2008.0.i586.rpm ea387f81431c29c2ddf572bf81a2d27e 2008.0/i586/tkinter-apps-2.5.1-5.2mdv2008.0.i586.rpm 75d0dc8f3cf8525827277937eb290b5a 2008.0/SRPMS/python-2.5.1-5.2mdv2008.0.src.rpm Mandriva Linux 2008.0/X86_64: 760186761b14ec8caf69d12cbe1addb9 2008.0/x86_64/lib64python2.5-2.5.1-5.2mdv2008.0.x86_64.rpm 8984e11f060c41701d543cdf4c3e5d64 2008.0/x86_64/lib64python2.5-devel-2.5.1-5.2mdv2008.0.x86_64.rpm 959bf382deca1676ef6ba2b3c822e2d9 2008.0/x86_64/python-2.5.1-5.2mdv2008.0.x86_64.rpm ec86c6c883320f391a4ce21723232910 2008.0/x86_64/python-base-2.5.1-5.2mdv2008.0.x86_64.rpm 8bc0bd727053aeb53167afb222e51c9f 2008.0/x86_64/python-docs-2.5.1-5.2mdv2008.0.x86_64.rpm ba4a22d3512b03e3cae9c3bd0fd71a04 2008.0/x86_64/tkinter-2.5.1-5.2mdv2008.0.x86_64.rpm ab687389eb62b10f7982098a6f6c6e21 2008.0/x86_64/tkinter-apps-2.5.1-5.2mdv2008.0.x86_64.rpm 75d0dc8f3cf8525827277937eb290b5a 2008.0/SRPMS/python-2.5.1-5.2mdv2008.0.src.rpm Mandriva Linux 2008.1: a2347d1f0b230414da44a5097e0f8a32 2008.1/i586/libpython2.5-2.5.2-2.1mdv2008.1.i586.rpm ea4af4cfec51a91394898f81f8a7fa00 2008.1/i586/libpython2.5-devel-2.5.2-2.1mdv2008.1.i586.rpm 0ff272fb044538a38b667921f4e3b68d 2008.1/i586/python-2.5.2-2.1mdv2008.1.i586.rpm 39c4d2740ae5ab10c900de38516f22a9 2008.1/i586/python-base-2.5.2-2.1mdv2008.1.i586.rpm 398e79bf4049c5a4daa78e9e6d79c1fa 2008.1/i586/python-docs-2.5.2-2.1mdv2008.1.i586.rpm 19ec255c149be19420f1f92cfd48f7c7 2008.1/i586/tkinter-2.5.2-2.1mdv2008.1.i586.rpm f8f679dca16457be4cfe245c8479ae68 2008.1/i586/tkinter-apps-2.5.2-2.1mdv2008.1.i586.rpm 8a5d085ec03be926d64a0662ee339dfd 2008.1/SRPMS/python-2.5.2-2.1mdv2008.1.src.rpm Mandriva Linux 2008.1/X86_64: 201857de10171d62491b22decde12ed9 2008.1/x86_64/lib64python2.5-2.5.2-2.1mdv2008.1.x86_64.rpm a8338dd0b2ba9885325010d6bab22c07 2008.1/x86_64/lib64python2.5-devel-2.5.2-2.1mdv2008.1.x86_64.rpm 90160e5fbf2609cb627e5c473ba505b9 2008.1/x86_64/python-2.5.2-2.1mdv2008.1.x86_64.rpm 6f53f6bfc053d7c4f8aba17cf24e9b09 2008.1/x86_64/python-base-2.5.2-2.1mdv2008.1.x86_64.rpm fc956cd4c279b0b708b7ddf0300dd854 2008.1/x86_64/python-docs-2.5.2-2.1mdv2008.1.x86_64.rpm 10c2c200fb3ba68841111683a4cd2d1d 2008.1/x86_64/tkinter-2.5.2-2.1mdv2008.1.x86_64.rpm 780eb4fde8b103f81af4a1038db720ca 2008.1/x86_64/tkinter-apps-2.5.2-2.1mdv2008.1.x86_64.rpm 8a5d085ec03be926d64a0662ee339dfd 2008.1/SRPMS/python-2.5.2-2.1mdv2008.1.src.rpm Corporate 3.0: 507662f734c26973c04e3443299c00c1 corporate/3.0/i586/libpython2.3-2.3.3-2.6.C30mdk.i586.rpm 1d9310361901c48226dcd4f57ff8fdd1 corporate/3.0/i586/libpython2.3-devel-2.3.3-2.6.C30mdk.i586.rpm 2759e37bcf5ff3f5d8f7c2771cb9c5c2 corporate/3.0/i586/python-2.3.3-2.6.C30mdk.i586.rpm e5f6fe7be314d4fda29604915aef00da corporate/3.0/i586/python-base-2.3.3-2.6.C30mdk.i586.rpm d25cee9658e37217100859b6a660e890 corporate/3.0/i586/python-docs-2.3.3-2.6.C30mdk.i586.rpm bfcd20c1020cf2605084468b3d489c38 corporate/3.0/i586/tkinter-2.3.3-2.6.C30mdk.i586.rpm 64e71a3e92e2bafa19a91314ca24cd78 corporate/3.0/SRPMS/python-2.3.3-2.6.C30mdk.src.rpm Corporate 3.0/X86_64: b509d155a74fd23c23ee0de7f392c80d corporate/3.0/x86_64/lib64python2.3-2.3.3-2.6.C30mdk.x86_64.rpm fafc422d07ae0dbc9a6262db82f6d566 corporate/3.0/x86_64/lib64python2.3-devel-2.3.3-2.6.C30mdk.x86_64.rpm 0e6831dcfb2fa5ebeee2dbc7a2446cd2 corporate/3.0/x86_64/python-2.3.3-2.6.C30mdk.x86_64.rpm 7cb4cb33c9df667389af2acf7ed4516f corporate/3.0/x86_64/python-base-2.3.3-2.6.C30mdk.x86_64.rpm d742fec7cf99137338f9c34eb4f7a236 corporate/3.0/x86_64/python-docs-2.3.3-2.6.C30mdk.x86_64.rpm 28026636183e6b04b3f49e47ec3db488 corporate/3.0/x86_64/tkinter-2.3.3-2.6.C30mdk.x86_64.rpm 64e71a3e92e2bafa19a91314ca24cd78 corporate/3.0/SRPMS/python-2.3.3-2.6.C30mdk.src.rpm Corporate 4.0: 2961bff452ffe89fe03ca816003673c2 corporate/4.0/i586/libpython2.4-2.4.1-5.4.20060mlcs4.i586.rpm fd76f53b14a83d43f620684c01983030 corporate/4.0/i586/libpython2.4-devel-2.4.1-5.4.20060mlcs4.i586.rpm fae94c51aac855a363b952a50797554a corporate/4.0/i586/python-2.4.1-5.4.20060mlcs4.i586.rpm 588102686dae7023e9bf25539e4e2b12 corporate/4.0/i586/python-base-2.4.1-5.4.20060mlcs4.i586.rpm 0e45305806fa29fdd3d05a1f29158b96 corporate/4.0/i586/python-docs-2.4.1-5.4.20060mlcs4.i586.rpm 8306274c8c1a7cdb111c8b1ee0db4917 corporate/4.0/i586/tkinter-2.4.1-5.4.20060mlcs4.i586.rpm e9f7157f6b42fb228b3e74cba3e8d0a2 corporate/4.0/SRPMS/python-2.4.1-5.4.20060mlcs4.src.rpm Corporate 4.0/X86_64: 689360a709e3e2de95300a4eaa9ef1c4 corporate/4.0/x86_64/lib64python2.4-2.4.1-5.4.20060mlcs4.x86_64.rpm 45021f6321ba4922c9c9494a3ac96698 corporate/4.0/x86_64/lib64python2.4-devel-2.4.1-5.4.20060mlcs4.x86_64.rpm 923176fd1fd9cccf9953e6eee50b1acb corporate/4.0/x86_64/python-2.4.1-5.4.20060mlcs4.x86_64.rpm af91588191d79ccbe1e2fd4efe37f1cc corporate/4.0/x86_64/python-base-2.4.1-5.4.20060mlcs4.x86_64.rpm 6a2f4518e0bfa766b1fbe6569c354e4e corporate/4.0/x86_64/python-docs-2.4.1-5.4.20060mlcs4.x86_64.rpm 0da11e3e53f8ee50863061ef077530c9 corporate/4.0/x86_64/tkinter-2.4.1-5.4.20060mlcs4.x86_64.rpm e9f7157f6b42fb228b3e74cba3e8d0a2 corporate/4.0/SRPMS/python-2.4.1-5.4.20060mlcs4.src.rpm Multi Network Firewall 2.0: a31e5592f6ffe93f38db4e152643a54a mnf/2.0/i586/libpython2.3-2.3.3-2.6.M20mdk.i586.rpm ec792a125b774dc32e0705a2ea1876b3 mnf/2.0/i586/libpython2.3-devel-2.3.3-2.6.M20mdk.i586.rpm f4572438fa53a1bbd4a897d442bdaa28 mnf/2.0/i586/python-2.3.3-2.6.M20mdk.i586.rpm 036db5b3815d43302bb0e4a20b5ab7ce mnf/2.0/i586/python-base-2.3.3-2.6.M20mdk.i586.rpm 24e6a4bb249b08ee63b25fe65f5acc59 mnf/2.0/i586/python-docs-2.3.3-2.6.M20mdk.i586.rpm 291662a5b5dff227bbed5af2443799a4 mnf/2.0/i586/tkinter-2.3.3-2.6.M20mdk.i586.rpm ff669a40592d615b743d0f5c83b52c2f mnf/2.0/SRPMS/python-2.3.3-2.6.M20mdk.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFIBEqamqjQ0CJFipgRAlipAJ4ySo/Nvq85TmkZEkXG961CO5ZWsQCgvSQc ivIPYMVOOM10F1l2Shk8zF0= =Q9fp -----END PGP SIGNATURE----- ------------=_1208252555-11275-2672 Content-Type: text/plain; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://www.mandrivastore.com Join the Club : http://www.mandrivaclub.com _______________________________________________________ ------------=_1208252555-11275-2672--

Nolobe Introduces Interarchy 9.0.1 - Published on 04/15/08 Nolobe Introduces Interarchy 9.0.1, the latest update to the award-winning file transfer application for Mac OS X. Continuing to raise the bar in file transfer technology Interarchy 9 introduces over one hundred new and improved features, including a brand new protocol built upon SSH, numerous enhancements to the product's interface, plus much more. Version 9.0.1 is a maintenance update to the advanced file transfer program. Perth, Australia - Nolobe today introduced Interarchy 9.0.1, an update to the award-winning file transfer application for Mac OS X. Interarchy 9.0.1 is a maintenance update to the advanced file transfer program. Detailed information on all update improvements can be found at Nolobe's website. Interarchy 9 - Advanced File Transfer Made Easy: Continuing to raise the bar in file transfer technology Interarchy 9 introduces over one hundred new and improved features, including a brand new protocol built upon SSH, numerous enhancements to the product's interface, plus much more. "For close to 15 years Interarchy has led the way with its advanced file transfer capabilities," said Matthew Drayton, founder and CEO of Nolobe. "Interarchy 9 builds on this by adding a number of exciting new features to enhance our customers' productivity." The new SSH protocol is a major addition to Interarchy's already comprehensive set of supported protocols. SSH provides a number of advantages over incumbent protocols such as FTP and SFTP. Not only is it faster than SFTP but it offers much greater flexibility. "Interarchy's SSH protocol offers significant speed improvements, especially when mirroring. We are talking seconds versus minutes for large websites. This is a big deal." adds Drayton. "Better yet, SSH puts us in the driving seat. Users will no longer will we be shackled by the limitations of SFTP or FTP." Pricing and Availability: Interarchy 9 is available at a suggested retail price of $59 USD. Interarchy 9 can be purchased directly from The Nolobe Store. A $29 USD upgrade offer is available to all registered owners of Interarchy 8.5.4 or earlier. Interarchy 9.0.1 is available free of charge to all registered Interarchy 9 customers. Volume discounts are also available. For details visit The Nolobe Store or send an email. Interarchy 9 requires Mac OS X 10.4.11 or later. Nolobe Website: http://nolobe.com/ Interarchy 9.0.1: http://nolobe.com/interarchy/ Release Notes: http://nolobe.com/interarchy/releasenotes/ Direct Download Link: http://downloads.nolobe.com/interarchy-901.dmg Purchase Link: http://store.nolobe.com Upgrade Link: http://store.nolobe.com/upgrade Nolobe specializes in developing advanced yet user friendly Mac software. Nolobe's flagship application, Interarchy, the world's most advanced (and award winning) file transfer program, is now joined by Iris, a powerful, intuitive, and easy-to-use image editor. Nolobe - Sophistication Simplified. Nolobe, the Nolobe logo, Interarchy, Iris, and "Sophistication Simplified" are trademarks of Nolobe Pty Ltd. Copyright © 2008, all rights reserved. All other trademarks are the property of their respective owners. ### Matthew Drayton CEO 0438778069 matthew ( -at -) nolobe.com ******* Member wishes to have this product reviewed by the media ******* ******* Trackback URL: http://prmac.com/release-trackback.php?id=1819&a=ODM= Link To Article: http://prmac.com/release-id-1819.htm *******

Hi all, We have just published a review of *NEC's AccuSync LCD24WMCX 24" widescreen* - if you could post a link on your site that would be very much appreciated. *Link:* http://www.bit-tech.net/hardware/2008/04/15/nec_accusync_lcd24wmcx_24in_widescreen_lcd/1 *Picture:* http://images.bit-tech.net/content_images/2008/04/nec_accusync_lcd24wmcx_24in_widescreen_lcd/fp_img.jpg *Quote: */"On the whole then, the NEC AccuSync LCD24WMCX has its share of problems with precise editing of photos taken in a photo studio, but it was never intended for that usage model -- NEC has a whole host of displays that deliver colour accuracy far and above this particular screen. And for most usage models---especially gaming and movie playback in particular---the LCD24WMCX will be more than adequate. Given its price point, it's quite an attractive proposition, but you must be aware of the drawbacks of the panel technology used. From our experience, it's one of the better 24-inch TN+Film displays on the market so it represents reasonable value for money for those on a tight budget. Simply put, if you're looking for a relatively cheap 1,920 x 1,200 monitor with lots of inputs to use for gaming, movie playback, Internet browsing and a bit of light image editing, the NEC AccuSync LCD24WMCX is definitely a tempting option. What it isn't though is a screen targeted at those looking for a very colour-accurate display and, if you fall into that camp, there are better PVA or MVA units on the market that will suit your needs." / * *Cheers guys! Tim Smalley www.bit-tech.net

Hi, We've just posted a new article on our website, Hardware Secrets. Title: ASUS M3N-HT Deluxe/Mempipe Motherboard Link: http://www.hardwaresecrets.com/article/545 Category: First Look Summary: The latest nVidia chipset for the AMD platform, nForce 780a, hasn’t been launched yet but we could take a detailed look on an ASUS high-end motherboard featuring this chipset, M3N-HT Deluxe/Mempipe. Here is a snippet: "ASUS M3N-HT Deluxe/Mempipe will be one of the first motherboards to be launched on the market based on the forthcoming nForce 780a chipset – which, by the way, is delaying a lot to be released. But don't think that nForce 780a is simple the AMD version of the nForce 780i – it isn't. One of the main differences between the two is the support for HybridSLI, which features HybridPower, a feature that disables the video cards installed in the system when you are not playing games and generates 2D images – i.e. when you are using Windows, a word processor or a spreadsheet – thru the chipset to save a lot of power, and GeForce Boost, which uses the on-board video to increase 3D performance. The problem is that both features require compatible video cards and so far only two video cards support each feature. Other features from this motherboard include three PCI Express 2.0 x16 slots supporting 3-way SLI and Quad SLI, a passive cooling solution for the memories, an eSATA port, coaxial and optical SPDIF outputs and more." A news post would be highly appreciated. Thanks in advance, Gabriel Torres Editor-in-Chief Hardware Secrets http://www.hardwaresecrets.com ---------------------------------------------------------------------

Fellow Webmasters, Site Owners and Newsposters, Tweaknews.net has released yet another review onto the internet. I was wondering if you could please post it in today's news for me. ---------------------------------------------------------------------------------------- Article Name: Super Talent Pico 8Gb Micro USB2.0 Flash Drive Review ( -at -) Tweaknews.net Article Url: http://www.tweaknews.net/reviews/super_talent_8gb_pico_flash_drive/ Article PIC: http://www.tweaknews.net/reviews/super_talent_8gb_pico_flash_drive/img/email.jpg Article Snippet: "Once this drive is on the market in full force, I can see it becoming one of the most popular USB drives out there. It's fast, it's remarkably small, it's cheap, and its a lot of fun to show your friends how huge (sarcasm) your 8Gb drive is." ------------------------------------------------------------------------------------------ Could you email back saying you posted it, TWEAK IT LIKE YOU MEAN IT!!!! Many Thanks, Nathan Glentworth Owner / Head Editor nathan ( -at -) tweaknews.net www.Tweaknews.net www.Tweaknews.com

Article Title: Gigabyte GA-P31-DS3L Motherboard Reviewed ( -at -) TheTechLounge Quote: "Gigabyte is a solid company. They're at the top of my list, it would seem, so picking a current-generation entry-level motherboard without integrated graphics narrows things down to about half a dozen options, with the GA-P31-DS3L at the front. But is that really enough to base a decision on? Well, if you're reading this, then Jesus, of course not. Here's what to expect: OK performance, dull layout, and Ultra Durability! After a trip to the bench, this board indeed gets a nod for being better than the other P31 motherboards. Here's what that means." Article URL: http://www.thetechlounge.com/article/505/Gigabyte+GAP31DS3L+Motherboard/ Image URL: http://www.thetechlounge.com/files/articles/505/index_197.jpg If you think this article is of interest to your readers, we would greatly appreciate a post in your site's news. Please feel free to

Hello Again, Futurelooks checks out some protection for your ZUNE... Agent18 Dragon Shield Case for the Zune 80GB Review The good people at Agent18 are coming to the rescue of Zune owners as they have developed a fantastic case to go with the Zune 80GB Media Player that we reviewed earlier. Dubbed the Dragon Shield, this polycarbonate case will protect the Zune from all the usual bumps, bruises, and scrapes. This way, you won’t have to worry about the occasional drop or brush up against a harsh surface. Direct Link: http://www.futurelooks.com/agent18-dragon-shield-case-for-the-zune-80gb-review/ A post to your news would be most appreciated! Regards, -The Futurelooks Team- www.futurelooks.com

Hello Webmasters and News Posters, NEW CONTENT (Audio) - Cyber Acoustics CA-5001 5.1 Speaker Kit QUOTE: "Cyber Acoustics are based out of Asia and claim to have had involvement in the PC audio industry for many years, since the 80`s in fact. Now, that should be plenty of time to get the recipe right, so to speak. The company offers many products from headsets and iPod solutions to full on surround sound systems like the one I`m looking at today. For the purposes of testing I have several systems around my home to provide an adequate representation of where these speakers stand, all things considered. I think that when evaluating speakers in general, it’s a very good idea to try and listen to the same piece of music through several different systems." For more information, please visit - http://www.tweaktown.com/reviews/1388/cyber_acoustics_ca_5001_5_1_speaker_kit/index.html Best Regards, The TweakTown Team http://www.tweaktown.com

Dear Editors A new article has just been posted on the www.ozhardware.com.au website, we would greatly appreciate it if you could post a link to it on your websites news section. The details are: Main Title: D-Link DGL-4500 GamerLounge Router Review ( -at -) OzHardware Brief Intro: The DGL-4500 - A new wireless broadband router from D-Link which continues on from their original gigabit gaming router, the DGL-4100 released in 2005, now with added Xtreme-N 300Mb/s wireless capability. Direct Link: http://www.ozhardware.com.au/Networking/D-Link-DGL-4500-GamerLounge-Router-R eview.html Thank you from the OzHardware Team.

Hi all, We've just posted our review of D-Link's high-end "gaming" router, the DGL-4500. Title: D-Link DGL-4500 Xtreme N Gaming Router ( -at -) Techgage Link: http://techgage.com/article/d-link_dgl-4500_xtreme_n_gaming_router/ Quote: D-Link's DGL-4500 wireless router brings a lot to the table, including dual-band operation, 802.11n support, a killer built-in OLED screen, on top of features perfectly suited for online gamers. Of course, such a feature-packed router doesn't come cheap, so is it worth your hard-earned $180?

Leading Mobile Friend Finding App, Buddy Beacon, Available for iPhone - Published on 04/15/08 Leading publisher of mobile location based applications, uLocate Communications, today announced that an iPhone specific version of its popular Buddy Beacon application is now available. With Buddy Beacon, iPhone users can easily share their location and interact with friends across multiple carriers and online social networking sites. Boston, MA - Leading publisher of mobile location based applications, uLocate Communications, today announced that an iPhone specific version of its popular Buddy Beacon application is now available. With Buddy Beacon, iPhone users can easily share their location with friends, as well as see the locations of friends on the iPhone's map application. Buddy Beacon also gives users the option of connecting with friends directly through the application and up[censored] their status across a variety of online social networking sites, including Facebook. Buddy Beacon for iPhone provides users with essential functions and features that have made the application so popular with users of other mobile devices across virtually all North American carriers. Users are in complete control of the Buddy Beacon experience and can choose when they want to share their location. Buddy Beacon also allows users to easily grow their buddy network by inviting new friends to join, 'nudge' friends to update their location and status from within the application, and more. These features combine with Buddy Beacon's seamless integration with Facebook to provide iPhone users the ultimate friend finding experience. "Buddy Beacon is a revolutionary application that offers users a new way to connect with their friends and family," said Walt Doyle, CEO of uLocate Communications. "We are delighted to provide iPhone users with the most advanced, and useful, friend finding application available." Buddy Beacon for iPhone is available as a free download to all iPhone users by accessing their website from the iPhone's Safari web browser. For more information on Buddy Beacon, please visit their website. uLocate Communications: http://www.ulocate.com Buddy Beacon: http://www.where.com/bb Direct Download Link: http://www.where.com/bb uLocate Communications is the leading publisher of location enabled applications. In addition to developing LBS applications for strategic partners, uLocate operates WHERE, a LBS application platform which is currently available to subscribers on numerous wireless operators. uLocate also operates Buddy Beacon, a leading mobile friend finding application. For more information, please visit their website. ### Dan Gilmartin Vice President of Marketing, uLocate Communications 617-502-3100 x720 dgilmartin ( -at -) ulocate.com ******* ******* ******* Trackback URL: http://prmac.com/release-trackback.php?id=1816&a=ODM= Link To Article: http://prmac.com/release-id-1816.htm *******

Hello News Partner: Benchmark Reviews has released a new article which your readers might enjoy. We would be grateful if you would please share it with them. TITLE: Kingwin RVT-12025 HDT CPU Cooler ( -at -) Benchmark Reviews DESCRIPTION: There are times when Benchmark Reviews will test a product that seems very similar to another that we've already reviewed, with only subtle differences separating them. A much less common occurrence is when we see the exact same product, only wearing a different name. Kingwin is fortunate then to have built their RVT-12025 HDT CPU cooler from an award-winning mold. Designed from the Heat-pipe Direct Touch technology created by Zaward, and later incorporated into the award-winning Xigmatek HDT-S1283 CPU cooler, the new RVT-12025 is a chip off the old block... a very well established block. ARTICLE URL: http://benchmarkreviews.com/index.php?option=com_content&task=view&id=111&Itemid=1 IMAGE URL: http://benchmarkreviews.com/images/reviews/cooling/Kingwin_RVT-12025/frontpage.jpg Thank you for your being a dependable affiliate and posting our news; we appreciate your support. Olin Coles Owner / Editor Benchmark Reviews

A news post would be great. OCC has published a new review of the Apevia X-QBOII Black Case Here is a quote from the review: Quote: "You may be wondering, what happened to the layout? The motherboard has been flipped upside down to the opposite side of the case. Many pre-built manufacturers use this type of layout, and I like it. It allows for the CPU to be rotated to the bottom of the case where the cold air sinks, thus allowing for better cooling. And in this windowed case, the PCI and PCI-E cards also get rotated, so the exciting top part of the card is shown off, instead of the boring bottom." Title: Apevia X-QBOII Black Case Review Link: http://www.overclockersclub.com/reviews/x_qboii/ Img: http://www.overclockersclub.com/siteimages/articles/x_qboii/5_thumb.jpg

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200804-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: libpng: Execution of arbitrary code Date: April 15, 2008 Bugs: #217047 ID: 200804-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability in libpng may allow for execution of arbitrary code in certain applications that handle untrusted images. Background ========== libpng is a free ANSI C library used to process and manipulate PNG images. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/libpng < 1.2.26-r1 >= 1.2.26-r1 Description =========== Tavis Ormandy of the Google Security Team discovered that libpng does not handle zero-length unknown chunks in PNG files correctly, which might lead to memory corruption in applications that call png_set_read_user_chunk_fn() or png_set_keep_unknown_chunks(). Impact ====== A remote attacker could entice a user or automated system to process a specially crafted PNG image in an application using libpng and possibly execute arbitrary code with the privileges of the user running the application. Note that processing of unknown chunks is disabled by default in most PNG applications, but some such as ImageMagick are affected. Workaround ========== There is no known workaround at this time. Resolution ========== All libpng users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libpng-1.2.26-r1" References ========== [ 1 ] CVE-2008-1382 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1382 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200804-15.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security ( -at -) gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2008 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

Ortabe updates NetFinder to version 3.1.1 with even more features - Published on 04/14/08 Ortabe is delighted to announce the immediate availability of NetFinder 3.1.1. Developed exclusively for Mac OS X Tiger and Leopard, NetFinder is an easy to use, yet advanced file transfer, management and automation tool for remote servers and local files. NetFinder 3 redefines how FTP/SFTP/.Mac/iDisk/WebDAV connectivity integrates seamlessly with Mac OS X technologies like QuickLook, Spotlight, AddressBook, Bonjour and more, offering a powerful yet easy to use application at your fingertips. Sydney, Australia - Ortabe is delighted to announce the immediate availability of NetFinder 3.1.1. Developed exclusively for Mac OS X Tiger and Leopard, NetFinder is an easy to use, yet advanced file transfer, management and automation tool for remote servers and local files. Supporting a number of protocols, including FTP, FTP SSL/TLS, SFTP, WebDAV and iDisk, NetFinder incorporates numerous operating system features to offer the richest user experience in a simple to use interface. Key Features: * ftp, ftps, ftpsi, sftp, http, webdav, idisk, file ... * Simple yet powerful bookmarking system * Label, comment, copy, move, rename, delete, duplicate, new file/folder, zip etc., as easily as the Finder * Manage web sites with simple or advanced mirroring features * iWeb friendly * Automate tasks that take minutes with a single click Netfinder is built from the ground up using Apple's latest technologies. This new update continues to enhance the performance of NetFinder to ensure utmost flexibility. Version 3.1.1 includes various key improvements, optimized for Mac OS X Leopard and a recommended update for all NetFinder customers. Some Key New Features in Version 3.1.1: * Added toolbar support for easy access to often used commands. * Added a View Menu to hide/show various parts of the listing window, including the toolbar. * Added private/public URL mapping configuration preferences * Added "Copy Public URL to Clipboard" feature. * Added WebView command to open a files public URL in the default browser, eg Safari. * Added remaining German localization * Fixed issues causing characters to drop out in a few German localized strings. * Fixed issue in single window mode which would allow a new window to be created when opening the parent window from the Menu. * Improved handling of bad replies from certain FTP servers. Language support: English, Japanese, French and German Minimum Requirements: * Mac OS X Version 10.4 Tiger or later * Universal Binary for PowerPC and Intel * 22.2 MB Hard Drive space * Internet connection "I strongly recommend NetFinder to anyone who want smooth FTP integration into the Mac interface. The best keeps getting better." - 20 May 2008 - MacUpdate review / 5 Stars. "This is a really nice re-write. Easier support for adding shortcuts, single window browsing, more protocols and support for labels on remote files and folders (plus more). Automator support is going to be very handy." - 6 Feb 2008 - VersionTracker review / 5 Stars. "NetFinder has always been my workhorse for FTP, the only one I bought back in the pre-OS 10 days. I'm happy this new version is out - compatible more servers, protocols, and current Macs. It has some nice new features & menu changes. It's been a long wait from 2 to 3 but it's a good update." - 30 Jan 2008 - MacUpdate review / 5 Stars The team at Ortabe are honored by this and will continue to add new features as well as support all the great new technologies that Apple and the internet have to offer. Thank you for taking the time to try out NetFinder. We hope that NetFinder will satisfy all your internet file transfer, management and automation needs. Pricing and Availability: * $24.95 USD - 1 User License * $11.95 USD - Upgrade license from NetFinder 1.x, 2.x * Multi-user discounts are available beginning at 3 seats. * Site licenses are available upon request. * Student licenses and Cross-grades also available. Ortabe Website: http://www.ortabe.com/ NetFinder 3.1.1: http://www.ortabe.com/netfinder/ Download NetFinder 3.1.1: http://www.ortabe.com/downloads/NetFinder_311.dmg Purchase: http://www.ortabe.com/buy/ NetFinder Tour: http://www.ortabe.com/netfinder/tour/ App Icon: http://www.ortabe.com/images/app_netfinder.png Located in beautiful Sydney, Australia, Ortabe is a small privately funded company founded in 2006 by Peter Li. With over 12 years commercial product experience, Ortabe's passion is providing the highest quality software with a keen focus on total customer satisfaction. The software Ortabe writes is used by them everyday, so customers can be guaranteed that their products look good, easy-to-use and provide rock solid reliability. Copyright 1997-2008 Ortabe and Peter Li. All Rights Reserved. Apple, the Apple logo, are registered trademarks of Apple Computer in the U.S. and/or other countries. All other products mentioned are the trademarks of their respective owners. ### Peter Li Founder +61 2 9369 3970 info ( -at -) ortabe.com ******* Member wishes to have this product reviewed by the media ******* ******* Trackback URL: http://prmac.com/release-trackback.php?id=1818&a=ODM= Link To Article: http://prmac.com/release-id-1818.htm *******

Dear Webmasters and Newsposters, BurnOutPC.com has just posted their review on the Alphacool LC-Display 240x128. Quote "Alphacool has a very nice product with their LCD Display. Like I said, it has been around for a while but even today it's still very functional and modern. It's cheaper than an external color display to use with Windows Vista for it's sideshow feature and it's better function and performance wise than the Pertelian V5. The display sells for around 100 euros nowadays and the smaller 240x64 ones for 70 euros. The Pertelian sells for around 35 euros, which is half the price of the 240x64 pixels version but the Pertelian doesn't have screen as nice as the Alphacool LC-Display." Direct Link - http://www.burnoutpc.com/modules/smartsection/item.php?itemid=293 Image Link - http://burnoutpc.com/images/reviews/alphalcd/PICT7707.JPG<http://www.burnoutpc.com/images/reviews/clearpuk/PICT7585.JPG> I would highly appreciate it if you could mention this review in your upcoming news post. Thanks a lot, Marien Klootwijk BurnOutPC.com -----------------------------

Baroque (Wii) Review ( -at -) [OC]ModShop Baroque is a great game for those who are in love with anime art. For those in love with gameplay or RPGs in general: I’m sad to report that this game sucks. In fact, it plays so badly that a thousand tiny voices cry out every time the game is turned on. Or that could just be my neurons suffocating from the lack of stimuli. Flash! Bang! Boom! The game starts like a 60's Batman episode with anime characters. And then a split second later, the excitement is over. What happened Baroque? Why are you such a piece of crap? So promising, and yet, such a disappointment. Review URL :: http://www.ocmodshop.com/ocmodshop.aspx?a=1137 Image URL :: http://www.ocmodshop.com/news/thumbnails/34789.gif Thank you for your time and attention as well as your continued interest in OCModShop.com. Alan McCloskey Owner / Managing Editor OCModShop.com Manage your OCModShop subscriptions (and browse previous newsletters) at http://www.ocmsmedia.com/newsletters/user-login.aspx

Large storage at a good price point? We find out if this Hitachi can get the job done without breaking the bank. "The Hitachi came about the DeskStar lineup with their and IBM's merger, with the history behind the DeskStar (I know, I had to bring up the old stuff) I am sure IBM was not to sad to let Hitachi run with it. Obviously those issues are long gone as Hitachi has gained a stellar reputation with their iteration of the DeskStar." http://www.viperlair.com/reviews/storage/hdd/hitds500/

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200804-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Opera: Multiple vulnerabilities Date: April 14, 2008 Bugs: #216022 ID: 200804-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in Opera, allowing for execution of arbitrary code. Background ========== Opera is a fast web browser that is available free of charge. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-client/opera < 9.27 >= 9.27 Description =========== Michal Zalewski reported two vulnerabilities, memory corruption when adding news feed sources from a website (CVE-2008-1761) as well as when processing HTML CANVAS elements to use scaled images (CVE-2008-1762). Additionally, an unspecified weakness related to keyboard handling of password inputs has been reported (CVE-2008-1764). Impact ====== A remote attacker could entice a user to visit a specially crafted web site or news feed and possibly execute arbitrary code with the privileges of the user running Opera. Workaround ========== There is no known workaround at this time. Resolution ========== All Opera users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.27" References ========== [ 1 ] CVE-2008-1761 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1761 [ 2 ] CVE-2008-1762 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1762 [ 3 ] CVE-2008-1764 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1764 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200804-14.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security ( -at -) gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2008 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

TechwareLabs has published a review of the Vizo Sleet RAM Coolers. Here's a clip from the review: Quote: From time to time, we'll notice our system getting hot. This is usually due to the processor overheating, but sometimes the RAM comes into play. Today, Justin examines hot RAM can overheat, and how Vizo's Sleet Ram Coolers can help to drop those temperatures. LINK: http://www.techwarelabs.com/reviews/memory/Vizo_Sleet_Ramsinks/ Title: Vizo Sleet RAM Coolers Review ( -at -) TechwareLabs Image: http://www.techwarelabs.com/reviews/memory/Vizo_Sleet_Ramsinks/images/Vizo_Sleet_DDR_Cooler.jpg A news post would be greatly appreciated!

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200804-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Asterisk: Multiple vulnerabilities Date: April 14, 2008 Bugs: #200792, #202733, #213883 ID: 200804-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Asterisk allowing for SQL injection, session hijacking and unauthorized usage. Background ========== Asterisk is an open source telephony engine and tool kit. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/asterisk < 1.2.27 >= 1.2.27 Description =========== Asterisk upstream developers reported multiple vulnerabilities: * The Call Detail Record Postgres logging engine (cdr_pgsql) does not correctly escape the ANI and DNIS arguments before using them in SQL statements (CVE-2007-6170). * When using database-based registrations ("realtime") and host-based authentication, Asterisk does not check the IP address when the username is correct and there is no password provided (CVE-2007-6430). * The SIP channel driver does not correctly determine if authentication is required (CVE-2008-1332). Impact ====== Remote authenticated attackers could send specially crafted data to Asterisk to execute arbitrary SQL commands and compromise the administrative database. Remote unauthenticated attackers could bypass authentication using a valid username to hijack other user's sessions, and establish sessions on the SIP channel without authentication. Workaround ========== There is no known workaround at this time. Resolution ========== All Asterisk users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/asterisk-1.2.27" References ========== [ 1 ] CVE-2007-6170 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6170 [ 2 ] CVE-2007-6430 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6430 [ 3 ] CVE-2008-1332 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1332 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200804-13.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security ( -at -) gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2008 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

TechwareLabs has published a review of the BodyGuardz iPod Protector Film. Here's a clip from the review: Quote: With the high cost of iPods, doesn't it make sense to keep them protected? Sure they come in that black sleeve, but we all lose those 3 weeks into ownership. Today, Michael Bosse looks at BodyGuardz iPod protective films, which bond to the iPod to keep it scratch free. LINK: http://www.techwarelabs.com/reviews/misc/bodyguardz_ipod/ Title: BodyGuardz iPod Protector Film Review ( -at -) TechwareLabs Image: http://www.techwarelabs.com/reviews/misc/bodyguardz_ipod/images/inside_th.jpg A news post would be greatly appreciated!

Hello, OCIA.net has posted their review of the Thermaltake DuOrb CPU / Memory Cooler. Below is a direct quote from the review: "Thermaltake has now carried that same patented design over into the processor realm with its DuOrb CPU Cooler. Utilizing twin 80mm fans just as the VGA Cooler did, this time surrounded by six copper heatpipes rather than two and both an inner aluminum fin and outer copper fin configuration, the DuOrb CPU Cooler takes advantage of the wide wingspan of the DuOrb design to cool not only the processor but also the memory and surrounding socket area." Direct Link: http://www.ocia.net/reviews/ttduorb/page1.shtml Image Link: http://www.ocia.net/images/icons/277.jpg Site Link: http://www.ocia.net A news posting on your site would be greatly appreciated. Thanks in advance for your support! Thanks, OCIA.net Staff http://www.ocia.net

"The Church Of Mac" Featured in upcoming "Macheads" Documentary - Published on 04/14/08 The Reverend Doctor Bobby Newton takes his message to the Big Screen. Former "Mac Genius" Tony Edwards, who portrays the fictional character, The Reverend Doctor Bobby Newton, spiritual leader and technological guide of The Church of Mac, will be featured the upcoming film, "MacHEADS". "MacHEADS" is a documentary about fanaticism and unconditional devotion to a corporate brand. Los Angeles, Calf - Former "Mac Genius" Tony Edwards, who portrays the fictional character, The Reverend Doctor Bobby Newton, spiritual leader and technological guide of The Church of Mac, will be featured the upcoming film, "MacHEADS". "MacHEADS" is a documentary about fanaticism and unconditional devotion to a corporate brand. The film reveals the fascinating characters that make up the Macintosh community. Their stories take us on a journey through Mac history leading up to the Apple revolution and to its present day popularity to pose the ultimate question: Is Apple losing faith as a community and becoming just a ... brand? "MacHEADS" is writer/director, Kobi Shely's first feature length documentary. He received a BA in Film at Hunter College New York and got his experience editing award winning shorts. He was an Assistant editor on the Turner Classic Movies documentary The John Garfield Story and directed Intervention, the short film on awards at San Francisco Brainwash Film Festival. After directing and editing numerous promos and music videos for Israeli television Kobi decided to take the independent road and founded Chimp 65 productions. More information on "MacHEADS" is available at their website. Edwards' segment was recorded during a live appearance as Dr. Bobby at the MacDayLA event in Los Angeles on March 22nd, 2008. "MacHEADS" is scheduled for an international release in mid-2008. The Church of Mac: http://www.thechurchofmac.com/ MacHEADS The Movie: http://www.macheadsthemovie.com The Church of Mac on iTunes: http://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=275144157 MacDayLA Link: http://www.macdayla.com "The Church of Mac" is the spiritual home for computer users of all persuasions seeking irreverent humor as well as Apple news and tips. Video "iPodcasts" by the spiritual leader and technological guide of "The Church of Mac", The Reverend Doctor Bobby Newton, are freely available at the iTunes Store, or on the "The Church of Mac" website. ### Tony Edwards The Reverend Doctor Bobby Newton 818-400-0479 dr.Bobby ( -at -) thechurchofmac.com ******* ******* ******* Trackback URL: http://prmac.com/release-trackback.php?id=1815&a=ODM= Link To Article: http://prmac.com/release-id-1815.htm *******

We got a chance to ask Asetek CEO and founder André Sloth Eriksen a couple of questions on how it all started, how things evolved and where Asetek is heading. And some more personal stuff too. Link: http://www.nordichardware.com/Articles/?skrivelse=533 Quote:"We got a chance to talk to Asetek CEO and founder André Sloth Eriksen and ask him some questions. Not just about how things are going at Asetek at the moment, but also about the past and his own personal view of what really happened, if he's keeping in touch with his roots and how it all started."