Security Enhancements and Fixes in PHP 5.3.2:
Improved LCG entropy. (Rasmus, Samy Kamkar)
Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)
Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)

Key Bug Fixes in PHP 5.3.2 include:
Added support for SHA-256 and SHA-512 to php's crypt.
Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check.
Fixed bug #51059 (crypt crashes when invalid salt are given).
Fixed bug #50940 Custom content-length set incorrectly in Apache sapis.
Fixed bug #50847 (strip_tags() removes all tags greater then 1023 bytes long).
Fixed bug #50723 (Bug in garbage collector causes crash).
Fixed bug #50661 (DOMDocument::loadXML does not allow UTF-16).
Fixed bug #50632 (filter_input() does not return default value if the variable does not exist).
Fixed bug #50540 (Crash while running ldap_next_reference test cases).
Fixed bug #49851 (http wrapper breaks on 1024 char long headers).
Over 60 other bug fixes.

For users upgrading from PHP 5.2 there is a migration guide available here, detailing the changes between those releases and PHP 5.3.

Further information and downloads:

For a full list of changes in PHP 5.3.2, see the ChangeLog. For source downloads please visit our downloads page, Windows binaries can be found on windows.php.net/download/.

What's new in this release (see below for details):
- Support for Wow64 registry redirection.
- Increased coverage of MSI standard actions.
- Various Wordpad improvements.
- Many shell fixes for better IE support.
- Improved support for typelibs.
- Better GL card detection.
- Various bug fixes.

Changes with Apache 2.2.15

*) SECURITY: CVE-2009-3555 (cve.mitre.org)
mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection
attack when compiled against OpenSSL version 0.9.8m or later. Introduces
the 'SSLInsecureRenegotiation' directive to reopen this vulnerability
and offer unsafe legacy renegotiation with clients which do not yet
support the new secure renegotiation protocol, RFC 5746.
[Joe Orton, and with thanks to the OpenSSL Team]

*) SECURITY: CVE-2009-3555 (cve.mitre.org)
mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
by rejecting any client-initiated renegotiations. Forcibly disable
keepalive for the connection if there is any buffered data readable. Any
configuration which requires renegotiation for per-directory/location
access control is still vulnerable, unless using OpenSSL >= 0.9.8l.
[Joe Orton, Ruediger Pluem, Hartmut Keil ]

*) SECURITY: CVE-2010-0408 (cve.mitre.org)
mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent
when request headers indicate a request body is incoming; not a case of
HTTP_INTERNAL_SERVER_ERROR. [Niku Toivola ]

*) SECURITY: CVE-2010-0425 (cve.mitre.org)
mod_isapi: Do not unload an isapi .dll module until the request
processing is completed, avoiding orphaned callback pointers.
[Brett Gervasoni , Jeff Trawick]

*) SECURITY: CVE-2010-0434 (cve.mitre.org)
Ensure each subrequest has a shallow copy of headers_in so that the
parent request headers are not corrupted. Elimiates a problematic
optimization in the case of no request body. PR 48359
[Jake Scott, William Rowe, Ruediger Pluem]

*) mod_reqtimeout: New module to set timeouts and minimum data rates for
receiving requests from the client. [Stefan Fritsch]

*) mod_proxy_ajp: Really regard the operation a success, when the client
aborted the connection. In addition adjust the log message if the client
aborted the connection. [Ruediger Pluem]

*) mod_negotiation: Preserve query string over multiviews negotiation.
This buglet was fixed for type maps in 2.2.6, but the same issue
affected multiviews and was overlooked.
PR 33112 [Joergen Thomsen ]

*) mod_cache: Introduce the thundering herd lock, a mechanism to keep
the flood of requests at bay that strike a backend webserver as
a cached entity goes stale. [Graham Leggett]

*) mod_proxy_http: Make sure that when an ErrorDocument is served
from a reverse proxied URL, that the subrequest respects the status
of the original request. This brings the behaviour of proxy_handler
in line with default_handler. PR 47106. [Graham Leggett]

*) mod_log_config: Add the R option to log the handler used within the
request. [Christian Folini ]

*) mod_include: Allow fine control over the removal of Last-Modified and
ETag headers within the INCLUDES filter, making it possible to cache
responses if desired. Fix the default value of the SSIAccessEnable
directive. [Graham Leggett]

*) mod_ssl: Fix a potential I/O hang if a long list of trusted CAs
is configured for client cert auth. PR 46952. [Joe Orton]

*) core: Fix potential memory leaks by making sure to not destroy
bucket brigades that have been created by earlier filters.
[Stefan Fritsch]

*) mod_authnz_ldap: Add AuthLDAPBindAuthoritative to allow Authentication to
try other providers in the case of an LDAP bind failure.
PR 46608 [Justin Erenkrantz, Joe Schaefer, Tony Stevenson]

*) mod_proxy, mod_proxy_http: Support remote https proxies
by using HTTP CONNECT.
PR 19188. [Philippe Dutrueux , Rainer Jung]

*) worker: Don't report server has reached MaxClients until it has.
Add message when server gets within MinSpareThreads of MaxClients.
PR 46996. [Dan Poirier]

*) mod_ssl: When extracting certificate subject/issuer names to the
SSL_*_DN_* variables, handle RDNs with duplicate tags by
exporting multiple varialables with an "_n" integer suffix.
PR 45875. [Joe Orton, Peter Sylvester ]

*) mod_authnz_ldap: Failures to map a username to a DN, or to check a user
password now result in an informational level log entry instead of
warning level. [Eric Covener]

*) core: Preserve Port information over internal redirects
PR 35999 [Jonas Ringh ]

*) mod_filter: fix FilterProvider matching where "dispatch" string
doesn't exist.
PR 48054 []

*) Build: fix --with-module to work as documented
PR 43881 [Gez Saunders ]

*) mod_mime: Make RemoveType override the info from TypesConfig.
PR 38330. [Stefan Fritsch]

*) mod_proxy: unable to connect to a backend is SERVICE_UNAVAILABLE,
rather than BAD_GATEWAY or (especially) NOT_FOUND.
PR 46971 [evanc nortel.com]

*) mod_charset_lite: Honor 'CharsetOptions NoImplicitAdd'.
[Eric Covener]

*) mod_ldap: If LDAPSharedCacheSize is too small, try harder to purge
some cache entries and log a warning. Also increase the default
LDAPSharedCacheSize to 500000. This is a more realistic size suitable
for the default values of 1024 for LdapCacheEntries/LdapOpCacheEntries.
PR 46749. [Stefan Fritsch]

*) mod_disk_cache, mod_mem_cache: don't cache incomplete responses,
per RFC 2616, 13.8. PR15866. [Dan Poirier]

*) mod_rewrite: Make sure that a hostname:port isn't fully qualified if
the request is a CONNECT request. PR 47928
[Bill Zajac ]

*) mod_cache: correctly consider s-maxage in cacheability
decisions. [Dan Poirier]

*) core: Return APR_EOF if request body is shorter than the length announced
by the client. PR 33098 [ Stefan Fritsch ]

*) mod_rewrite: Add scgi scheme detection. [André Malo]

*) mod_mime: Detect invalid use of MultiviewsMatch inside Location and
LocationMatch sections. PR 47754. [Dan Poirier]

*) ab, mod_ssl: Restore compatibility with OpenSSL < 0.9.7g.
[Guenter Knauf]

Changes with nginx 0.8.34                                        03 Mar 2010

   *) Bugfix: nginx did not support all ciphers and digests used in client
      certificates.
      Thanks to Innocenty Enikeew.

   *) Bugfix: nginx cached incorrectly FastCGI responses if there was
      large stderr output before response.

   *) Bugfix: nginx did not support HTTPS referrers.

   *) Bugfix: nginx/Windows might not find file if path in configuration
      was given in other character case; the bug had appeared in 0.8.34.

   *) Bugfix: the $date_local variable has an incorrect value, if the "%s"
      format was used.
      Thanks to Maxim Dounin.

   *) Bugfix: if ssl_session_cache was not set or was set to "none", then
      during client certificate verify the error "session id context
      uninitialized" might occur; the bug had appeared in 0.7.1.

   *) Bugfix: a geo range returned default value if the range included two
      or more /16 networks and did not begin at /16 network boundary.

   *) Bugfix: a block used in a "stub" parameter of an "include" SSI
      directive was output with "text/plain" MIME type.

   *) Bugfix: $r->sleep() did not work; the bug had appeared in 0.8.11.

2010-Mar-01: iptables-1.4.7

iptables 1.4.7 has been released. This release supports all new features of the 2.6.33 kernel.

ChangeLog:
mitry V. Levin (1):
libip4tc: Add static qualifier to dump_entry()

Jan Engelhardt (8):
libipq: build as shared library
recent: reorder cases in code (cosmetic cleanup)
doc: fix recent manpage to reflect actual supported syntax
doc: fix limit manpage to reflect actual supported syntax
doc: mention requirement of additional packages for ipset
policy: fix error message showing wrong option
includes: header updates
Lift restrictions on interface names

Patrick McHardy (1):
iptables 1.4.7

Security Enhancements and Fixes in PHP 5.2.13:
Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)
Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)
Improved LCG entropy. (Rasmus, Samy Kamkar)

Key enhancements in PHP 5.2.13 include:
Fixed bug #50940 Custom content-length set incorrectly in Apache sapis. (Brian France, Rasmus)
Fixed bug #50847 (strip_tags() removes all tags greater then 1023 bytes long). (Ilia)
Fixed bug #50661 (DOMDocument::loadXML does not allow UTF-16). (Rob)
Fixed bug #50632 (filter_input() does not return default value if the variable does not exist). (Ilia)
Fixed bug #50540 (Crash while running ldap_next_reference test cases). (Sriram)
Fixed bug #49851 (http wrapper breaks on 1024 char long headers). (Ilia)
Over 30 other bug fixes.

Changes to squid-3.1.0.17 (24 Feb 2010):

- Regression Fix: Non-English error page UTF encoding
- Bug 2616: reduce IdleConnList::removeFD messages
- Bug 1843: multicast-siblings cache_peer option
- Port from 2.7: X509 certificate alias-domain handling
- Add adapted_http_access option
- NTLMv2 support for fake NTLM helper

What's new in this release:
Support for registry symbolic links.
Many MSI fixes.
Build process improvements.
MSXML cleanups and fixes.
A number of MSHTML improvements.
Various bug fixes.

Changes from 1.4.25
Fix request parser to handle packets with splitted rnrn (fixes #2105)
Remove dependency on automake >= 1.11 with m4_ifdef check
mod_accesslog: support %e (fixes #2113, thx presbrey)
Fix mod_cgi cgi.execute-x-only option in global block
mod_fastcgi: x-sendfile2 parse error debugging
Fix mod_proxy dead host detection if connect() fails
Fix fd leaks in mod_cgi (fds not closed on pipe/fork failures, found by Rodrigo, fixes #2158, #2159)
Fix segfault with broken rewrite/redirect patterns (fixes #2140, found by crypt)
Append to previous buffer in con read, fix DoS/OOM vulnerability (fixes #2147, found by liming, CVE-2010-0295)
Fix HUP detection in close-state if event-backend doesn’t support FDEVENT_HUP (like select or poll on FreeBSD)

Changes: This version contains many features first released in Python 3.1. An ordered dictionary type is included. New unittest features include test skipping and new assert methods. A much faster io module was added. Automatic numbering of fields in the str.format() method was added. Float repr improvements were backported from 3.x. Tile support was added for Tkinter. A backport of the memoryview object from 3.x was added. Set literals and dictionary views were added. A new syntax for nested with statements was added.

Changes with nginx 0.8.33                                        01 Feb 2010

    *) Security: now nginx/Windows ignores trailing spaces in URI.
       Thanks to Dan Crowley, Core Security Technologies.

    *) Security: now nginx/Windows ignores short files names.
       Thanks to Dan Crowley, Core Security Technologies.

    *) Change: now keepalive connections after POST requests are not
       disabled for MSIE 7.0+. Thanks to Adam Lounds.

    *) Workaround: now keepalive connections are disabled for Safari.
       Thanks to Joshua Sierles.

    *) Bugfix: if a proxied or FastCGI request was internally redirected to
       another proxied or FastCGI location, then $upstream_response_time
       variable may have abnormally large value; the bug had appeared in
       0.8.7.

    *) Bugfix: a segmentation fault might occur in a worker process, while
       discarding a request body; the bug had appeared in 0.8.11.

The Wine development release 1.1.38 is now available.

What's new in this release:
Better support for memory allocations debugging.
Improved MIDI support.
A wide range of Direct3D fixes.
OLEDB fixes (should fix Clipart in Office).
Improved debugger support on x86-64.
Many MSI fixes.
Various bug fixes.

Changes to squid-3.1.0.16 (01 Feb 2010):

- Regression Fix: Make Squid abort on all config parse failures.
- Regression Bug 2811: SNMP client/peer table OID numbering
- Bug 2851: Connection pinning fails when using a peer
- Bug 2850: Mismatch in hier_code enum / hier_strings array
- Bug 2731: Add follow_x_forwarded_for support to ICAP
- Bug 2730: Regressions in follow_x_forwarded_for since Squid-2
- Bug 2706: Set timestamps during ICAP request satisfaction.
- Bug 2553: X-Forwarded-For with IPv6 address not handled correctly
- Fix: WCCPv1 not connecting to router correctly
- Remove obsolete RunCache/RunAccel scripts.
- Add client_ip_max_connections
- Add the http::>ha format code and make http::>h log original request headers
- ... and all bug fixes from 3.0 up to 3.0.STABLE22
- ... and many more minor build and display annoyances.

此外3.0分支的 squid-3.0.STABLE22 也同时发布.

# 透过LDAP server认证
# rrdtool状态输出
# Rule-based downloading
# Server-side includes support
# Virtual hosting
# Modules support
# Cache Meta Language
# Minimal WebDAV support
# Servlet (AJP) support(1.5.x 版后)

ps:修复了一些重大bug(当然包括前段时间爆出的那个).如果没有重大，正式发布版会不久后放出。
1.4 分支稳定后，1.5 不打算开发，直接跳至2.0分支.
Changelog since 1.4.25:
Fix request parser to handle packets with splitted rnrn (fixes #2105)
Remove dependency on automake >= 1.11 with m4_ifdef check
mod_accesslog: support %e (fixes #2113, thx presbrey)
Fix mod_cgi cgi.execute-x-only option in global block
mod_fastcgi: x-sendfile2 parse error debugging
Fix mod_proxy dead host detection if connect() fails
Fix fd leaks in mod_cgi (fds not closed on pipe/fork failures, found by Rodrigo, fixes #2158, #2159)
Fix segfault with broken rewrite/redirect patterns (fixes #2140, found by crypt)
Append to previous buffer in con read, fix DoS/OOM vulnerability (fixes #2147, found by liming, CVE-2010-0295)

This release only includes security fixes for issues with logging, tarfile, and expat modules, and with thread-local variables.

*Release date: 24-Jan-2010*

Extension Modules
-----------------

- expat: Fix DoS via XML document with malformed UTF-8 sequences
(CVE_2009_3560).

- expat: Fix DoS via malformed XML (CVE-2009-3720).

Changes with Apache 2.3.5

*) Ensure each subrequest has a shallow copy of headers_in so that the
parent request headers are not corrupted. Elimiates a problematic
optimization in the case of no request body. PR 48359
[Jake Scott, William Rowe, Ruediger Pluem]

*) Turn static function get_server_name_for_url() into public
ap_get_server_name_for_url() and use it where appropriate. This
fixes mod_rewrite generating invalid URLs for redirects to IPv6
literal addresses. [Stefan Fritsch]

*) mod_ldap: Introduce new config option LDAPTimeout to set the timeout
for LDAP operations like bind and search. [Stefan Fritsch]

*) mod_proxy, mod_proxy_ftp: Move ProxyFtpDirCharset from mod_proxy to
mod_proxy_ftp. [Takashi Sato]

*) mod_proxy, mod_proxy_connect: Move AllowCONNECT from mod_proxy to
mod_proxy_connect. [Takashi Sato]

*) mod_cache: Do an exact match of the keys defined by
CacheIgnoreURLSessionIdentifiers against the querystring instead of
a partial match. PR 48401.i
[Dodou Wang , Ruediger Pluem]

*) mod_proxy_balancer: Fix crash in balancer-manager. [Rainer Jung]

*) Core HTTP: disable keepalive when the Client has sent
Expect: 100-continue
but we respond directly with a non-100 response.
Keepalive here led to data from clients continuing being treated as
a new request.
PR 47087 [Nick Kew]

*) Core: reject NULLs in request line or request headers.
PR 43039 [Nick Kew]

*) Core: (re)-introduce -T commandline option to suppress documentroot
check at startup.
PR 41887 [Jan van den Berg ]

*) mod_autoindex: support XHTML as equivalent to HTML in IndexOptions,
ScanHTMLTitles, ReadmeName, HeaderName
PR 48416 [Dmitry Bakshaev , Nick Kew]

*) Proxy: Fix ProxyPassReverse with relative URL
Derived (slightly erroneously) from PR 38864 [Nick Kew]

*) mod_headers: align Header Edit with Header Set when used on Content-Type
PR 48422 [Cyril Bont茅 , Nick Kew>]

*) mod_headers: Enable multi-match-and-replace edit option
PR 47066 [Nick Kew]

*) mod_filter: enable it to act on non-200 responses.
PR 48377 [Nick Kew]

VirtualBox 3.1.2 (released 2009-12-17)

This is a maintenance release. The following items were fixed and/or added:
VMM: fixed SMP stability regression
USB: fixed USB related host crashes on 64 bits Windows hosts (#5237)
Main: wrong default HWVirtExExclusive value for new VMs (bug #5664)
Main: DVD passthrough setting was lost (bug #5681)
VBoxManage: iSCSI disks do not support adding a comment (bug #4460)
VBoxManage: added missing --cpus and --memory options to OVF --import
GUI: fixed VBox URL in update dialog for German and Dutch languages
GUI: NLS updates
OVF: fixed export of non standard storage controller names (bug #5643)
Solaris hosts: several USB fixes (including support for Apple iPhone)
Mac OS X hosts: several fixes for the 3D support
Mac OS X hosts: re-enabled CMD+Key combinations, even if the Host-Key isn't CMD (bug #5684)
Mac OS X hosts: fixed to fast scrolling if the mouse wheel is used inside the guest (bug #5672)
Mac OS X hosts: dock & menubar don't disappear in fullscreen when the VM is not running on the primary display (bug #1762)
Mac OS X hosts: added an option for enabling "Auto show Dock & Menubar in fullscreen" (bug #5636)
Windows host installer: fixed starting VBox with wrong privileges right after installation (bug #4162)
Host interface and host-only networking: prevent driver from unloading while a VM is still active (Windows host only)
Host-only networking: fixed host-only interface creation (Windows host only) (bug #5708)
Virtio-net: don't crash without an attached network
Virtio-net: fixed the issue with intermittent network in VM with several virtual CPU cores.
NAT: fixed port-forwarding regressions (bug #5666)
NAT: fixed crash under certain conditions (bug #5427)
NAT: fixed resolving of names containing a slash or underscore when using the host resolver DNS proxy (bug #5698)
ATA: fixed sporadic crash when resuming after a VM was forcefully paused (e.g. due to iSCSI target being unavailable)
SATA: fixed raw vmdk disks (bug #5724)
Linux guests: increased the default memory for Redhat and Fedora guests
Linux Guest Additions: fixed installation on RHEL 3.9 guests and on some 64bit guests
Linux Guest Additions: prevent SELinux warnings concerning text relocations in VBoxOGL.so (bug #5690)
X11 guests: fixed mouse support for some Xorg 1.4 guests (openSUSE 11.0)
X11 guests: fixed xorg.conf modification for some older Xorg releases (openSUSE 11.1)
Windows guests: fixed some VBoxService shutdown issues
Windows guests: fixed VBoxVideo spinlock issues on NT4
Windows Guest Additions: fixed uninstallation issues of NT4
Shared folders: fixed resolving of symlink target (bug #5631)
2D Video acceleration: delay loading of OpenGL dlls for Windows hosts to avoid GUI crashes on misconfigured systems
2D Video acceleration: fixed issues with video picture not displayed on playback

Change log for v2.7:

* Updated appbrowser - single 'Install' button and renamed 'Download Only' to 'OnDemand'
* Updated appsaudit - new menu option 'Install Options' to maintain copy2fs.flg and copy2fs.lst
* New ondemand - create flwm right click menu shortcuts to load and start applications from /tce/optional - tune your system for much faster boot times.
* Updated tce-load - dropped l,m,lm,ml testing, ldconfig always called, depmod based on /usr/local/lib/modules, dropped -r option
* Renamed tcz2ram.flg, tcz2ram.lst to copy2fs.flg and copy2fs.lst, use flag for all, or list to specify extensions to be copied into filesystem.
* New 'ab' a tiny appbrowser in shell
* New cache-clear script.
* New boot code xvesa=WxHxD, e.g. xvesa=800x600x32 to set default Xvesa resolution bypassing xsetup
* Updated tce-update and tce-setup to implement an 'easy mode' to update extensions in your tce folder
* Updated tce-update feature enhancement for nfs support (Thanks to Gerald Clark)
* Updated rebuildfstab for block major 11 devices
* Updated udev/rules.d/75-cd-dvd.rules for sr[0-9] devices.
* Updated exitcheck.sh to call /opt/shutdown.sh for user shutdown commands.
* Removed mbchk and libpopt* as unneeded in base.
* Stripped more libs for smaller size, now at 10.1MB

The Wine development release 1.1.35 is now available.

What's new in this release:
Support for OLE transacted storage.
Better certificate checking on secure connections.
More progress on the 16-bit separation.
Left 4 Dead 2 DRM really supported now.
MSI performance improvements.
64-bit fixes in debugger support.
Various bug fixes.

These are some of the major features in this release:
WCF client and server, the subset exposed by Silverlight 2.0
LLVM support, to improve performance on server/computational loads
Co-routine framework Mono.Tasklets
Preview of LINQ to SQL using DbLinq
New Soft Debugger, integrated with MonoDevelop on Unix and OSX
Joint release with MonoDevelop 2.2
System.IO.Packaging
csharp shell now supports auto-completion
xbuild can now build most msbuild projects
Support for CoreCLR security:
Mono debuts a full metadata and IL verifier
Security system used by Silverlight applications, reusable for other cases.

These new features are described below in detail.

VirtualBox 3.1.0 (released 2009-11-30)

This version is a major update. The following major new features were added:
Teleportation (aka live migration); migrate a live VM session from one host to another (see the manual for more information)
VM states can now be restored from arbitrary snapshots instead of only the last one, and new snapshots can be taken from other snapshots as well ("branched snapshots"; see the manual for more information)
2D video acceleration for Windows guests; use the host video hardware for overlay stretching and color conversion (see the manual for more information)
More flexible storage attachments: CD/DVD drives can be attached to arbitrary storage controllers, and there can be more than one such drive (the manual for more information)
The network attachment type can be changed while a VM is running
Complete rewrite of experimental USB support for OpenSolaris hosts making use of the latest USB enhancements in Solaris Nevada 124 and higher
Significant performance improvements for PAE and AMD64 guests (VT-x and AMD-V only; normal (non-nested) paging)
Experimental support for EFI (Extensible Firmware Interface; see the manual for more information)
Support for paravirtualized network adapters (virtio-net; see the manual for more information)

In addition, the following items were fixed and/or added:
VMM: guest SMP fixes for certain rare cases
GUI: snapshots include a screenshot
GUI: locked storage media can be unmounted by force
GUI: the a log window grabbed all key events from other GUI windows (bug #5291)
GUI: allow to disable USB filters (bug #5426)
GUI: improved memory slider in the VM settings
GUI: the VirtualBox website couldn't be opened from the help menu (bug #4559)
3D support: major performance improvement in VBO processing
3D support: added GL_EXT_framebuffer_object, GL_EXT_compiled_vertex_array support
3D support: fixed crashes in FarCry, SecondLife, Call of Duty, Unreal Tournament, Eve Online (bugs #2801, #2791)
3D support: fixed graphics corruption in World of Warcraft (#2816)
3D support: fixed Final frame of Compiz animation not updated to the screen (#4653)
3D support: fixed incorrect rendering of non ARGB textures under compiz
iSCSI: support iSCSI targets with more than 2TiB capacity
VRDP: fixed occasional VRDP server crash (bug #5424)
Network: fixed the E1000 emulation for QNX (and probably other) guests (bug #3206)
NAT: added host resolver DNS proxy (see the manual for more information)
VMDK: fixed incorrectly rejected big images split into 2G pieces (bug #5523, #2787)
VMDK: fixed compatibility issue with fixed or raw disk VMDK files (bug #2723)
VHD: fixed incompatibility with Hyper-V
Support for Parallels version 2 disk image (HDD) files; see the manual for more information
OVF: create manifest files on export and verify the content of an optional manifest file on import
OVF: fixed memory setting during import (bug #4188)
Mouse device: now five buttons are passed to the guest (bug #3773)
VBoxHeadless: fixed loss of saved state when VM fails to start
VBoxSDL: fixed crash during shutdown (Windows hosts only)
X11 based hosts: allow the user to specify their own scan code layout (bug #2302)
Mac OS X hosts: don't auto show the menu and dock in fullscreen (bug #4866)
Mac OS X hosts (64 bit): don't interpret mouse wheel events as left click (bug #5049)
Mac OS X hosts: fixed a VM abort during shutdown under certain conditions
Solaris hosts: combined the kernel interface package into the VirtualBox main package
Solaris hosts: support for OpenSolaris Boomer architecture (with OSS audio backend).
Shared folders: VBOXSVR is visible in Network folder (Windows guests, bug #4842)
Shared folders: performance improvements (Windows guests, bug #1728)
Windows, Linux and Solaris Additions: added balloon tip notifier if VirtualBox host version was updated and Additions are out of date
Solaris guests: fixed keyboard emulation (bug #1589)
Solaris Additions: fixed as_pagelock() failed errors affecting guest properties (bug #5337)
Windows Additions: added automatic logon support for Windows Vista and Windows 7
Windows Additions: improved file version lookup for guest OS information
Windows Additions: fixed runtime OS detection on Windows 7 for session information
Windows Additions: fixed crash in seamless mode (contributed by Huihong Luo)
Linux Additions: added support for uninstalling the Linux Guest Additions (bug #4039)
Linux guest shared folders: allow mounting a shared folder if a file of the same name as the folder exists in the current directory (bug #928)
SDK: added object-oriented web service bindings for PHP5

Changes with nginx 0.8.29                                        30 Nov 2009

    *) Change: now the "009" status code is written to an access log for
       proxied HTTP/0.9 responses.

    *) Feature: the "addition_types", "charset_types", "gzip_types",
       "ssi_types", "sub_filter_types", and "xslt_types" directives support
       an "*" parameter.

    *) Feature: GCC 4.1+ built-in atomic operations usage.
       Thanks to W-Mark Kubacki.

    *) Feature: the --with-libatomic[=DIR] option in the configure.
       Thanks to W-Mark Kubacki.

    *) Bugfix: listen unix domain socket had limited access rights.

    *) Bugfix: cached HTTP/0.9 responses were handled incorrectly.

    *) Bugfix: regular expression named captures given by "?P<...>" did not
       work in a "server_name" directive.
       Thanks to Maxim Dounin.