text:
'North Pond Hermit' appears in court
Christopher Knight received marriage proposal, offer to post bail
The so-called "North Pond Hermit" appeared in court on Tuesday on new charges.
Christopher Knight, 47, was arrested nearly two weeks ago after living 27 years alone in the woods in Rome.
Police believe he may be responsible for 1,000 burglaries in the area over the nearly 30-year period.
Click here for pictures from the camp.
Knight was arrested earlier this month and charged with breaking into the Pine Tree Camp. He is now charged with burglary and theft in connection with incidents between Sept. 8 and Oct. 8, 2012, according to police.
Knight's bail was also increased from $5,000 to $250,000 over the weekend.
However, during Tuesday's court appearance Knight's bail was lowered to $25,000.
Also, no third party is allowed to post bail for Knight.
He did not enter a plea.
Maine State Police said since being arrested, Knight has received a marriage proposal, and a man from New York came to the Kennebec County Jail on Saturday and offered post Knight's bail.
The jail is being flooded with calls from across the country.


text:
by Hans Muller
Table of contents
8 March 2010
Prerequisite knowledge
Familiarity with ActionScript, Flex 3, and basic 2D graphics concepts will be helpful in understanding the concepts discussed in this article.
User level
Required products
Flex (Download trial)
Flex Builder (Download trial)
Sample files
flex4_viewport_scrolling.zip (1 KB)
Flex 4 provides an interface called IViewport that all scrollable components must implement, and Scroller, a component that uses scrollbars to enable interactive scrolling of a viewport (a component that implements IViewport). This support for interactive scrolling is an essential feature of all graphical user interface (GUI) toolkits. The Flex 4 approach is intended to be more efficient than the one used in Flex 3; see the section Comparison with MX scrolling for more details.
Many Flex components, including List and TextArea, include a Scroller and a viewport as part of their skin, so that developers don't have to worry about enabling scrolling. This article explains how the IViewport interface works and includes a simple Scroller example. If you're interested in creating your own interactive scrolling components or just want a better understanding of how Flex 4 scrolling works, read on.
GUIs use scrolling to display a document that is bigger than the space available on the user's screen.
In Spark (the new component and skinning architecture in Flex 4), the IViewport interface defines a way to scroll a small rectangular clipping window that exposes a large document a little bit at a time. In this context scrolling refers to moving the origin of the little clipping window relative to the large document.
The Spark Scroller component provides a conventional GUI for scrolling a viewport interactively. It displays a pair of vertical and horizontal scrollbars whose thumb positions define the X and Y origin of the clipping rectangle. By default, the scrollbars are only shown when they are needed.
Figure 1 shows the basic geometry of the situation in terms of IViewport properties: width, height, contentWidth, contentHeight, horizontalScrollPosition, verticalScrollPosition.
The viewport's contentWidth and contentHeight properties define the horizontal and vertical extents of whatever is drawn in the viewport, that is, the viewport's content. The viewport's width and height properties define the size of the visible subset of the content, that is, the size of what appears on the screen and the size of the viewport's clipping rectangle. The horizontalScrollPosition and verticalScrollPosition properties define the origin of the clipping rectangle. Applications can scroll a viewport by modifying these properties.
The Spark Scroller class is a container for a single viewport, like a Group or a DataGroup.
A Scroller displays vertical and horizontal scrollbars whose values are bound to the viewport's horizontalScrollPosition and verticalScrollPosition properties. The size of the scrollbar thumbs and the maximum limit for their values are based on the relative size of the viewport's content, as specified by contentWidth and contentHeight.
The code below is a simple example of the Scroller class. The Scroller's viewport is a Group, which contains an Image that is displayed in the center of the viewport.
<?xml version="1.0" encoding="utf-8"?>
<s:Application backgroundColor="0x000000"
<s:Scroller left="1" right="1" top="1" bottom="1">
<mx:Image source="guyrobot.jpg"
Here is a working version of the application:
The working version has been modified to display the current values of the various viewport properties. You can download the source code for this version of the example.
By default the Scroller displays its scrollbars when they're needed–when the viewport's content size is larger than its actual size. You can change this policy with the verticalScrollPolicy and horizontalScrollPolicy properties. The default value for these properties, auto, causes the scrollbars to display as needed. Set these properties to on to unconditionally display a scrollbar, and off to unconditionally hide a scrollbar.
The basic Spark container classes are called Group and DataGroup, and they share a common base class called GroupBase. GroupBase implements IViewport, so anything you can create within a Group or a DataGroup can be displayed in a Scroller, since Scroller just requires its viewport to implement IViewport.
Most of the IViewport interface should look familiar to you based on the discussion so far:
public interface IViewport extends IVisualElement {
function get width():Number;
function get height():Number;
function get contentWidth():Number;
function get contentHeight():Number;
function get horizontalScrollPosition():Number;
function set horizontalScrollPosition(value:Number):void;
function get verticalScrollPosition():Number;
function set verticalScrollPosition(value:Number):void;
function getHorizontalScrollPositionDelta(scrollUnit:uint):Number;
function getVerticalScrollPositionDelta(scrollUnit:uint):Number;
function get clipAndEnableScrolling():Boolean;
function set clipAndEnableScrolling(value:Boolean):void;
A viewport's width and height are its actual width and height and its contentWidth and contentHeight are the maximum X and Y extent of its contents. For example, if a viewport contained a rectangle (a spark.primitives.Rect object) with its origin at 10,20 and its width and height set at 100, then the viewport's contentWidth would be 110 and its contentHeight would be 120. In the example above, the image's origin is 0,0 (the default) and so the Group's contentWidth and contentHeight are the same as the image's width and height, respectively.
The Boolean clipAndEnableScrolling property turns support for scrolling on and off. If it's false, then the viewport does not clip its content and the scroll positions do not control scrolling. The GroupBase class defines clipAndEnableScrolling to be false by default so if you're building a custom scrolling container you must explicitly set this property to true. Scroller sets cllipAndEnableScrolling=true for its viewport automatically. Scrolling is disabled by default because turning it on causes memory to be allocated for the visible part of the viewport and because text and graphics that are supposed to fit within a viewport's bounds sometimes stray just a little bit outside due to numerical factors and antialiasing.
The getHorizontalScrollPositionDelta and getVerticalScrollPositionDelta methods of the IViewport interface compute the distance to needed to scroll by a line or a page. These methods are used to compute the distance to be scrolled when the user clicks a Scroller's scrollbar track or up/down buttons, rolls the mouse wheel, or presses the Page Up, Page Down, or Arrow keys on the keyboard.
The Spark viewport and scrolling API is similar to the one provided by MX. The fundamental container classes (Container in MX, Group and DataGroup in Spark) are capable of scrolling. Unlike Spark, in MX all containers have scrolling enabled by default, and there's no need to use a special scrolling container to add scrollbars. In MX, if a container's contents extend beyond its bounds, scrollbars appear according to the container's scrollPolicy property.
The changes in Spark were motivated by a desire to reduce the size and complexity of typical applications. Most containers in most applications don't need scrollbars or scrolling and there's a cost in complexity and footprint for giving all containers that ability in MX. The policy in Flex 4 beta is sometimes referred to as pay as you go, which is to say that your application's footprint and performance should reflect just the SDK features that you need.
Where to go from here
There is a great deal more to be said about how the IViewport interface and Scroller class can be used and extended. I occasionally post on this topic on my blog. For more information on the stock Spark layout rules, syntax, and usage examples, the online documentation is a good place to start.
For more information on the viewport and scrolling APIs, take a look at IViewport, Scroller, GroupBase, Group, DataGroup, and the rest of the classes in the ActionScript 3.0 Reference for the Adobe Flash Platform. Also be sure to check out Evtim Georgiev's blog, which covers closely related topics like layout and virtualization.
And there's also a video. If you're interested in Flex and you like technical material delivered in small doses with modest production values, then I think you'll find ADC Presents: Scrolling in Gumbo to be a reasonable way to spend nine minutes. It's a little out of date but actually covers somewhat more ground than this article.
Prerequisite knowledge
Familiarity with ActionScript, Flex 3, and basic 2D graphics concepts will be helpful in understanding the concepts discussed in this article.
User level

subset: commoncrawl


text:
Former IRS Official Lerner Gave Interview to DOJ
A former Internal Revenue Service official who declined to answer questions at a congressional hearing, citing the Fifth Amendment, gave a full interview to the Justice Department, her lawyer said.
That's raising questions among Republican lawmakers, who wonder whether her choice to talk to Justice reflects a lack of concern about the DOJ probe. They also question the propriety of letting her avoid questions by lawmakers when she is answering DOJ's.


text:
Follow Us
Age Filter: Click to Set
Some content viewed on WatchKnowLearn is hosted by other websites.
Remember to Rate
4,976 views
mugabik on 08/30/2012 01:22 PM wrote:
This is good material but it seen too beyong 10-18 children, in light of the political agendas and leadership development.
steven133 on 12/04/2010 09:10 PM wrote:
one of the best inaugural address I have ever watched, thanks for the upload
© 2020 St. Charles Place Education Foundation / Privacy Policy


text:
Maria Ring Bowl (Light Blue & Grey) - Sale 40%
£10.90 £18.20
Our small stoneware bowls are round in shape and have the ideal size for holding rings and other jewellery or serving tapas, a stunning homemade spread or even ice cream. This ceramic bowl is finished in a light blue and grey reactive glaze.
All our ring bowls are handcrafted and individually glazed so they are all different to each other. This is what makes them so beautiful! Don't hesitate to mix and match them to create your own unique combination! The bowl size is: H 5cm x W 5cm x D 11cm
- Microwave safe
- Dishwasher safe
- Oven safe
- Irregularities in colour and glaze are typical due to the handcrafted nature of our stoneware products
- We offer multiple shipping options
- Orders >£100: Free standard shipping (3-5 working days) or £6.99 for expedited shipping (1-2 working days, cutoff for placing order is 17:00)
- Orders <£100: £2.99 for standard shipping (3-5 working days) or £6.99 for expedited shipping (1-2 working days, cutoff for placing order is 17:00)
- All our shipping is fully insured (see below for damages and replacements)
- We aim to always ship within a day of receiving your order
- We will keep you in the loop for progress of shipping
- We typically ship using next day delivery courier
- We protect the environment by re-using as much of packaging material as possible!
- Please see Returns page for full T&C's; in summary we will replace any item damaged in transit and we will try to help you resolve any potential issue you may have with your order. We are a customer first business and try to do everything in our power to make sure we only have happy customers!
- Don't believe us, see what our customers are saying!
- "Fabulous, personal service" - Rebecca
- "Such wonderful ceramics" - Matthew
- "I love my plates and pasta bowls so much I've had to come back for more" - Charlotte
- And many more, please check Trustpilot reviews on https://uk.trustpilot.com/review/www.cerami.co.uk


text:
Here's another one of my infamous Pokemon tuts. XD I guess I'm just down to doing all of my favorite Pokemon now. If you have a request, drop me a comment! :D
DragoArt members upload artwork and drawing tutorials! They are also allowed to leave comments on tutorials, profiles, etc. Many more features, as well; it's way better than just being a boring guest! Register Now!


text:
"Go on" we asked, "guess how big the engine is" we continued with an annoyingly knowing grin on our face that probably gave the game away. "I don't know came the answer, 1.6-litre?". "HAHA, NO! A million times NO!" we roared back. And then, with joy in our voices we whisper: "it's only a 1-litre engine," and we wait for the reaction.
Even in the UK, a 1-litre engine in a car like the Focus is pretty much unheard of. It's a big car, and engines that small are reserved for the likes of the Fiesta, Polo and Honda Jazz. Really, you'd probably expect a 1.4 or 1.6-litre petrol engine, or a 2-litre diesel here. Anything less would be arduous in the extreme.
So when Ford offered us the Ecoboost with its small engine, we were incredibly keen. This, we thought, will either be a massive disaster, or a laugh a minute.
The current Focus is a good-looking car, there's little arguing about that. Ford has always managed to make the Focus a decent rival to the VWs and Vauxhalls of this world without ever needing to copy the style of the Golf or Astra. At the back, the light clusters have lost their slightly odd-looking design from the first generation - which caused quite a stir at the time - and have morphed in to a more traditional style, but one which is pulled forward so that they encroach on the rear side panels. Written down, it sounds ghastly. In reality, it looks terrific.
The front of the car is similarly snappy to look at. There's a bodykit fitted, which gives the front an aggressive, but very cool look. It certainly makes this car look like its brother, the ST, even though the engines powering them are pretty different. Of course, the price of the two is startlingly similar, which might give some people pause, and to ask why they might opt for the ecoboost. But we'll come to that later.
Internally, things are a little less impressive. We don't, for example, love the centre column which is festooned with an unsightly number of buttons. We also don't really love how these buttons operate, they don't feel very premium and there are times when they don't do the thing you asked, or do it, but don't provide enough tactile feedback to let you know your push was a success. This makes things harder to use, and the technology in here is solid, but the clunky controls spoil it a little.
There are also two controllers on the wheel for moving through menus, and buttons for controlling the stereo and Bluetooth phone system. If you have cruise control, the waters become even more muddy, and what you're looking at is a steering wheel that is covered with controls. And like on every car, you can't use them when the wheel is off straight, so you may still end up reaching for the dash.
There is also a central armrest that we found to be bothersome. At motorway cruising speeds, it was helpful, but when you're trying to change gear quickly, it becomes a real chore to work around. Unlike the VW/Audi armrests, which are also awful, the one in the Focus can't be pushed away to keep it out of your way.
Our Focus was supplied with the DAB and satnav option, which is £700. It is, however, good and the satnav holds its own against the other cars in this class. We found it competent, and easy to use once you've set it up. On the other hand, the layout of the Focus's controls mean that getting a postcode in, and starting the navigation, isn't especially clear. We struggled for a while, and setting up Bluetooth took us 10 minutes of plodding through menus and doing the same on our phone.
You do get an in-dash prompt for navigation too, so you don't need to look at the map for normal driving, just glance at the speedo, which you'll be doing constantly anyway, because straying over the limit in the UK is now punishable by death. Or speed camera. One of the two.
There's the usual MP3 player inputs too, you get line-in for things not made by Apple and a iDevice connector for those which are. We preferred Bluetooth audio though, it's easier, and of course you get to play music and make calls. If you've not got in-car Bluetooth, when you do try it, you'll fall in love with it.
If you want a better sound system, there's an optional Sony head-unit available and if you want to step up from air conditioning to climate control, that's possible too. We liked the air-con though, it felt cooler than the A3 - new eco rules have changed the coolant, meaning cars are never as icy as they used to be - and the simple 4-speed fan clicker is less faff than a daft push button system.
We love the fuel-computer too. You average speed and fuel consumption are provided constantly, along with your range but there are plenty of display options if you want to see different information while you drive. It's controlled by the two wheel controllers, and takes a lite while to master, but once you're there it's a great system.
A single litre goes a long way
There's an expression, which comes from a US car company executive. He says, "there's no replacement for displacement". Displacement being the capacity of the engine, and in the ecoboost there's just 1-litre of it. It's interesting that Ford does intend to sell this car in the US too, a country famous for its 5- or even 6-litre engines, we do wonder how that will go down. The ecoboost isn't new for US cars though, there's a version of the F150 that has a 3.5-litre engine that uses the same technology, and it's quite well regarded.
Perhaps the best trick Ford has managed to pull, is somehow disguising the engine completely. Our car makes no mention of what's under the hood, there's no indication at the back, and when you drive it, you'd be hard-pressed to work out what is delivering the power. And because there's so much torque, it feels like a far larger engine. As an example, it pulls nearly as well as our Audi 2-litre TDI, now that's quite a trick.
Ford has also been wise here too. The company clearly feels that engine sizes are no longer the indication of power they once were. When we were just nippers it was so much clearer, in a world where turbochargers were very rare, what car had what power. These days, there's a turbo on pretty much everything. And why not, because turbochargers are a terrific way of boosting power, without destroying fuel economy. Ford also uses direct injection here, which offers benefits too.
But all of that is just talk, what matters is how the engine works in the car. And we have to say, it's spectacular. It didn't win us over straight away though. At first there were some things that bothered us, for a start, at the low end of the rev range, there doesn't feel like an enormous amount of power. The turbo isn't the laggiest we've experienced, but there is, inevitably, a delay in it boosting the engine. Then there's the hump that sits to the left of the clutch, while not a performance issue, it did - at least to start with - catch our foot when we we're changing, leading to lots of juddering changes. Happily, both of these issues fade away when you learn how to drive the car.
And we do really like the setup. The lack of instant power at the start of the rev range is, in some ways, a good thing because it means that if you want to drive economically, you can just be gentle with the accelerator. There's no huge powerhouse under the bonnet, so you can pootle along in town without the stress of a massive engine wanting to drag you there at the speed of sound.
Once you learn the car, you begin to get to grips with how the power is distributed. Give the car some stick, keep it up the rev range, and it will reward you with some really enjoyable boost. We found that second gear became a firm favourite for us, because at normal speeds, you'd be revving the engine quite hard, which gives you access to a great engine note, and some real acceleration.
Perhaps surprisingly for a 1-litre engine, the ecoboost is great on the motorway too. At 70, there is still plenty of juice for overtaking and at no point did we feel like we were going to look stupid overtaking one of those middle-lane morons that blight this country's road system. And, unlike the 1.0-litre engine from the Mini Metro your grandmother used to drive, there is no screaming for mercy at higher speeds.
And, we have to say, the engine noise is truly a thing of beauty, especially in low gears and high revs. Push the car in second, for example, and the roar you get in the cabin is incredibly rewarding. We suspect some trickery here, but nothing untoward. We understand that the Ford pipes sound from the engine in to the cabin, and that this is controlled by how you drive. In vicar mode, you'll not hear from it. In boy-racer mode, it will yell at you like your dad when he finds out you've crashed his brand new Ford Focus.
Fuel economy can be pretty amazing too. We'd guess 58mpg isn't out of the question for sensible drivers. We managed 38 but spent most of the time enjoying the tubo boost, so aren't surprised. This car will save you money at the pump, and you'll rival most diesel engines, especially the larger 2-litre ones.
There is an issue with the price, frankly. There's nothing in the Ford that worries us, but the interior finish is just no patch on the German competition. So when you learn that this Focus is more than £20,595 as reviewed, you might take a deep breath. That's Audi A3 territory, or a really nicely set-up Golf. The Focus has more equipment though, ours was supplied with DAB and sat nav, which is an optional extra, but there's good technology, and adding more is cheaper than in the German cars.
And then, with the ST starting at £21,995 and this car costing £20,595 it's a hard one to call, and an odd pricing decision. But with that said, we love the car and think it's got more than enough charm to win even the hardest heart over.
A week with the Focus, and we're honestly in love. There are some annoyances, some quirks and we do struggle with that on-the-road pricetag. But honestly, this car is just full of surprises and it's a blast on the road.
The pulling power of the engine is just a jaw-on-the-floor surprise. At high-end motorway speeds, there's loads more power there just waiting to pull you ever faster. And this is true all over, give the engine some revs and it's willing to respond with all its heart.
It looks great on the outside too, and the gadgets and technology are all decent. There are some issues with the implementation, the navigation of the stereo and sat nav can be a disaster. It took us 10 minutes to work out how to pair our phone and programming in an address was never our favourite job.
That busy steering wheel and stupid armrest are also minor spoilers, but when you consider this car as a package, it just keeps calling you back for more. A massive disaster this Focus is not, a laugh a minute we can confirm.


text:
Click on a metro area to preview our new home locations there.
CB JENI Homes Builds In 2 Metro Areas:
While Builders Digital Experience seeks to ensure that all of the information concerning new homes and new home communities, as well as other data on the site is current and accurate, we do not assume any liability for inaccuracies. It is your responsibility to independently verify information on the site.


text:
i-mobile i-note wallpapers
Ratings :
Click the stars to rate
237,407 Rated by :
182 user(s)
Click the stars to rate
- 1
- 2
- 3
- 4
- 5
237,407 Rated by :
182 user(s)
Retail Price: N/A
AP Price: N/A
AP Price: N/A
i-mobile i-note is an Android 2.2 Froyo running, with 7 inch touchscreen, 5MP rear camera, Wi-Fi, GPS, and Bluetooth.
Top, New and Popular Wallpapers for i-mobile i-note. The collection of Free Wallpapers for i-mobile i-note right here to be download. We update the collection of Wallpapers daily.
Select Other Phone Model
Select Other Phone Model


text: Accessories are more than, well, an accessory. Few things in the women's clothing industry allow you, as an individual, to showcase your personal taste and identity like a well-worn women's accessory. Whether it's a handbag, a purse, a belt, or something else you use to show your inner style and devotion to taste and trends, this is your unique voice. Our designers are constantly looking for the latest in trends and styles to make sure you get the hottest looks and all at the best prices. Tie your outfit together with an accessory that will speak your truth. Buy your women's accessories online today from LimeLush.com.


text:
Sharks live up to their name and win another oztag title
THE Mid-North Coast Sharks have continued their oztag dominance, winning another national title in Coffs Harbour yesterday.
The Sharks beat Country Bulls in a tight final, 2-0, to take the spoils and yet another win.
Steve Kipreotis and Jason New crossed for tries as the Sharks capped off a brilliant tournament.
They won their quarter-final 10-0 and the semi 6-1 to have the ascendancy going into the decider.
The fit team's fresh legs got it over the line in the final, coach Dave Bradley said.
"We've worked really hard, and fresh legs on the Sunday means a lot," he said.
"We're absolutely wrapt with the result."
Team member Greg Smith said the Sharks were sore after the game.
"It was a tough weekend," he said.
"The rain yesterday really took its toll."
He said the Sharks never thought they were home.
"They're too good a team for that," he said.
"We knew they were going to be tough."
A mammoth defensive effort meant the team conceded just four tries the entire tournament.
"That's what it's all about, defence," Smith said.
The Sharks' other two teams weren't so lucky, with the open mixed and men's over-35s teams falling in the earlier rounds.


text:
NC Medicaid Covered Medications
NC Medicaid Covered Medications
Women and Medicaid in North Carolina – National Women's Law …
coverage for mental health services or prescription drugs, for example) to certain
… North Carolina's Medicaid program also covers treatment for breast and …
Medicaid Coverage of Medicare Beneficiaries (Dual Eligibles) At a …
form of Medicaid benefit, whether that Medicaid coverage is … want drug
coverage, they must enroll in a Medicare Prescription Drug Plan (Medicare Part
Medicaid – North Carolina Institute of Medicine
Jan 3, 2013 … the ACA required that states expand Medicaid coverage to most uninsured ….
Source: North Carolina Institute of Medicine analysis of Medicaid …
Medicaid Expansion Option Issue Brief – North Carolina Institute of …
The number of people who have Medicaid coverage is likely to increase in … First
, pharmaceutical companies pay the federal and state governments a drug.
New Drug List
Jan 6, 2014 … PURSUANT TO 13CSR 70-20.030 DRUGS COVERED BY MEDICAID. Drugs
falling outside the definition of a covered outpatient drug as …
MA-3540 – NC DHHS Online Publications
Aug 1, 2011 … North Carolina Department of Health and Human Services …. Medicare/Medicaid
recipients have no prescription drug coverage (with a few.
STATE HEALTH REFORM IMPACT MODELING PROJECT North …
access to healthcare through Medicaid or subsidized private health insurance.
The State Health … In North Carolina, the Modeling Project focuses on four state-
specific …. approved drugs with significant clinically meaningful therapeutic …
14Q1 Medicaid Formulary.indd – Maxor
coverage as part of this program please contact Hudson Health Plan directly at. 1
-800-339-4557 … As brand name drugs become available generically, only the.
Tobacco Cessation Coverage 2012 – American Lung Association
Nov 26, 2012 … MS. IN. MD. ME. NC. Please note: the Lung Association's definition of … The ACA
requires that state Medicaid programs cover medications and …
Medicaid and Long Term Care services for adults – DSHS
expenses not covered by Medicaid, and how much you must pay your provider
towards … Medicare Part D pays for most of your prescription drugs if you are …
Medications Used for the Treatment of ADHD (Includes Cost to NC …
Medications Used for the Treatment of ADHD (Includes Cost to NC Medicaid).
Ritalin (Novartis). (Generics from. Mallinckrodt, UCB, and. Watson are AB rated.
North Carolina Medicare and Medicaid Fact Sheet – The National …
covered in North Carolina. Medicare. Medicaid. Medicare hospital insurance (
Part A) provides basic … Medicaid pays for prescription drugs (excluding those
for …
Usage of Controlled Substance Pain Medications in Medicaid
Jan 2, 2013 … prescriptions occurred per covered Medicaid beneficiary between the ages …..
Maine, Mississippi, Nebraska, New Hampshire, North Carolina, …
Utah Medicaid Preferred Drug List – Utah Department of Health
Oct 1, 2013 … Drugs not listed are covered via regular pharmacy provider manual policy. Non-
preferred Drugs required a Prior Authorization beginning …
NC DMA: Proposed prior approval criteria for short … – NCTracks
Oct 1, 2013 … NC Medicaid (Medicaid) beneficiaries shall be enrolled on the date of …
requirement that requires the state Medicaid agency to cover …. surgery unless
the infant continues on medication for CHF, or mild cardiomyopathy not.
Medicaid Narcotic Lock-In Policy – CCWJC
Sep 2, 2010 … anxiolytics covered through the Medicaid Outpatient Pharmacy Program. N.C.
Medicaid … Changes to N.C. Medicaid Preferred Drug List.
Medicaid Will Improve Outcomes, Lower Costs for People with HIV
Oct 11, 2012 … qualify for Medicaid coverage even when their incomes are very low. … need HIV
medications have received them, compared to 36 percent of … For example, 50
percent of North Carolina's ADAP budget in 2011 ($28.6 …
Medicaid in North Carolina – North Carolina Medical Journal
Mar 1, 2013 … Published by the North Carolina Institute of Medicine and The Duke …. egorical
restrictions, Medicaid currently covers only 30% of all poor …
The Partnership for a Healthy North Carolina: – Medicaid Cure
May 28, 2013 … In each of the last four fiscal years, North Carolina's Medicaid ….. care and
specialist networks, hospital networks, preferred drug lists and extra.
2011 | Formulary MEDICAID FORMULARY – Gateway Health Plan
All drugs in the formulary are not necessarily covered by each patient's
prescription drug coverage. … Only FDA-approved medications are eligible for


text:
For Israelis living within sight of Syria — and earshot of the war raging there — daily life presents a peculiar duality. On their side of the line, routines proceed with a kind of neighborly fellow feeling that reminds Nadav Katz of the Israel of his childhood in the 1950s and '60s, so few are the people on the Golan plateau, and so happy are they to be there together. One day this summer the retiree was working in his yard while a neighbor chased his little boy next door. Everyone was laughing, Katz recalls.
"And we hear the explosions," says Katz, 65. "And from experience we know what explosion means." Syrian rebels, who hold a string of villages clearly visible on the plain below Katz's Merom Golan house, were mounting an assault on the village closest to the line. The place has changed hands twice in recent months, and the neighbors hear everything.
"This contrast is unpleasant to know, to encounter," says Katz. "And we keep hearing it, we keep hearing the explosions. Sometimes closer. Sometimes far away."
The contrast mirrors the posture of Israel's government to Syria's horrific conflict. On the one hand, Jerusalem laments the human toll of a civil war that killed more than 100,000 people in the past 2½ years. It does what it can. To treat the wounded near its frontier, both civilians and fighters, Israel erected a military field hospital; other cases are carried to hospitals across the country's north.
(MORE: Cheer Up, Obama. Israel Is Happy With Your Syria Plan)
At the same time, Israel has rushed to erect a massive new fence to separate it from the conflict in which it wants no part. The 100-km barrier is 80% finished, a formidable 9 m of razor wire and rebar replacing the rusty, tattered fence that long marked the edge of the strategic high ground Israel twice has taken from Syria — first, in the lightning-quick Six-Day War of 1967, then again, at great cost, after Syria's surprise offensive in the October War six years later. In the cease-fire that held steady for the next four decades, nothing more was needed.
Now, uncertainty looms in assorted forms. Two million Syrians have fled the country as refugees, and of the millions more uprooted inside the country, hundreds have gathered along Israel's fence, presenting a fresh humanitarian challenge. The greater fear, however, is the unpredictable forces unleashed by a war that began as peaceful protests. In some areas, including the villages below Katz's house, the rebels arrayed against Syrian President Bashar Assad are local militias affiliated with the Free Syrian Army, a motley but relatively moderate force the Obama Administration is beginning to arm. But that's not the case just a few miles to the south.
"Most of the rebels in this area are al-Qaeda-affiliated," says Brigadier General Gal Hirsch, from an IDF post dug into a cliffside where the borders of Syria, Jordan and Israel meet. The dramatic terrain gives the national boundaries a clarity seldom found outside story books: the massive escarpment to the left is Syria, the equally massive escarpment to the right is Jordan, and the narrow road winding through the cleft between them leads to the four graceful arches of the Ottoman-era bridge where tens of thousands of refugees have shuffled to escape the fighting.
"We are facing three entities," says Hirsch. "The official Syrian forces. Hizballah. And all these guys who are roughly al-Qaeda, who are here first to fight against the Assad regime, but who later want to bring the Islamist revolution and to fight Israel." Israeli intelligence estimates 6,000 "jihadis" are present in Syria, according to an interview in Yedioth Ahronoth on Wednesday with General Yair Golan, the Israeli brigadier in charge of the northern front.
(MORE: Russian Envoy Dismisses U.N. Report on Syrian Chemical Weapons as 'Biased')
Hizballah is the more immediate threat. The formidable Lebanese-based Shi'ite militia was created by Iran to fight Israel after it invaded Lebanon in 1982, but fought more like an army in its 2006 war with Israel. Its deployment in Syria to help save Assad (its other patron) is another factor that hastened Israel's decision to harden its boundaries. Israel built the same formidable new fence along its 240-km border with Egypt, initially to keep out African migrants entering Israel from the Sinai, but more quickly after the Sinai became a haven for jihadists. Only the border with Jordan, to the east, remains as it did before the Arab Spring, a testimony to Israel's confidence in both the staying power and the interests it shares with King Abdullah II in Amman, whose security police scour the Syrian refugees for militants.
Meanwhile, Israel itself enjoys a calm that, at least in the Golan, has always been haunted by reminders of previous wars. On vacations like the Sukkot holiday that began this week, Israelis flock to the area, where hiking trails are marked with white squares, and mine fields by red triangles (and fences). Populated only by fewer than 20,000 people, most of them Druze who used to be Syrian, the airy landscape is mostly cattle rangeland, plus apple orchards, apiaries and vineyards. It doesn't look like anywhere else controlled by Israel: an igneous formation, the Golan's stone is no shade of the limestone that sheaths Jerusalem; it's black. Antenna arrays bristle from atop promontories commanders refer to as "strategic volcanoes."
It can be hard to distinguish new threat from old. Hirsch, the reservist brigadier, brought a small group of reporters to an Israeli position below Katz's house. The grassland around it was blackened, not by farmers keeping down weeds but shells that had overshot the fence, igniting the grass. When rifle fire burped in the distance, Hirsch recognized the source as an Israeli firing range to the rear. But a few moments later, the crack of rifle sounded from in front of us, apparently fired by one of the Syrians in plain clothes who had been watching us watch them, atop a rooftop a few hundred yards away. The one in a blue shirt was carrying a Kalashnikov.
"It's a resort, basically," says Yaron Dekel, outside his own house in Alonei Habashan, a Jewish village of perhaps 300 people 8 km to the south of Katz's home, and even closer to the fence. A biochemist who says he turned down an offer from Harvard to move to the Golan, Dekel, 37, appears sincere. It is indeed quieter here than in Ashdod, Ashkelon or Beersheva, large cities within range of the rockets that Palestinian militants send out of the Gaza Strip. They've had only one shell land — a dud — in the past year. But the sound of fighting put a damper on a recent get-together at a local kibbutz that operates a vineyard.
"It's a pity, really," he says. "People on one side of the border drink wine, and on the other side they are killing each other."
"Usually we hear the wind," says Siska Dekel, his wife. "But sometimes we hear bombs."
MORE: Iranian Officials: Israel Will Be First Victim of a Syria Attack


text:
You can use External mode to tune parameters and monitor a model running on your target hardware.
External mode enables you to tune model parameters and evaluate the effects of different parameter values on model results in real time. Doing so helps you find the optimal values to achieve desired performance. This process is called parameter tuning.
External mode accelerates parameter tuning because you do not have to rerun the model each time you change parameters. You can also use External mode to develop and validate your model using the actual data and hardware for which it is designed. This software-hardware interaction is not available solely by simulating a model.
This workflow lists the tasks usually required to tune parameters with External mode:
In the model on your host computer, enable External mode.
(Optional) Place one or more sink blocks in your model. For example, use Display or Scope blocks to visualize data, or use a To File block to log signal data.
Give the Simulink® software command to run the model on the target hardware.
(Optional) Observe the data External mode sends from the target hardware to sink blocks in the model on the host computer.
Change and apply parameter values in the model on your host computer.
Find the optimal parameter values by making adjustments and observing the results.
Save the new parameter values, disable External mode, and save the model.
If you have the Embedded Coder® or Simulink Coder™ software, you can use External mode with a model that contains Model blocks (uses the "Model reference").
Connect the target hardware to your host computer.
Different types of target hardware can use different types of connections. Check the External mode topic for your target hardware to determine which type of connection to use.
On the Simulation tab, set Simulation Mode
Set the Stop Time parameter. The default value is
10.0 seconds. To run the model for an indefinite period, enter
Click the Run button.
If your model does not contain a sink block, the MATLAB® Command Window displays a warning message. For example:
Warning: No data has been selected for uploading. > In C:\Program Files (x86)\MATLAB\R2013a Student1\toolbox\ realtime\realtime\+realtime\extModeAutoConnect.p> extModeAutoConnect at 17 In C:\Program Files (x86)\MATLAB\R2013a Student1\toolbox\ realtime\realtime\sl_customization.p>myRunCallback at 149
You can disregard this warning or add a sink block to the model.
After several minutes, Simulink starts running your model on the board.
Change parameter values in the model on your host computer.
Observe the corresponding changes in the model running on the hardware.
Any Simulink Sinks blocks in your model receive data from the hardware and display it on your host computer.
External mode increases the processing burden of the model running on the board, and can cause overruns.
To stop the model running in External mode, on the Simulation tab, click the Stop button.
This action stops the process for the model running on the target hardware, and stops the model simulation running on your host computer.
If the Stop Time parameter is set to a specific number of seconds, External mode stops when that time elapses.
When you are finished using External mode, set Simulation Mode back to
Using External Mode Control Panel provides additional control of External mode operations, including:
Connect or disconnect the model on the host computer to/from the model running on the target hardware.
Start and stop the model running on the target hardware.
Gather changes to parameter values in a batch before applying them concurrently to the model running on the target hardware.
To open the External Mode Control Panel dialog box, in the model window, on the Apps tab, under Apps, click Run on Custom Hardware. Then on the Hardware tab, click Control Panel.
The Connect/Disconnect button connects or disconnects the model on your host computer to/from the model running on the target hardware. If the model is not running on the target hardware, clicking Connect automatically deploys and runs the model on the target hardware.
The Start Real-Time Code/Stop Real-Time Code button starts or stops the model running on the target hardware.
Batch download enables you to gather changes before using the Download button to simultaneously apply those changes to the model running on the hardware:
While Batch download is disabled, clicking OK or Apply in a block dialog box sends updated block parameter values from the block to the model running on the target hardware.
When you enable Batch download, clicking OK or Apply in a block dialog box stores updated block parameter values on the host computer. You can complete a set of changes before clicking Download to simultaneously send all of the updated values to the model running on the target hardware. This feature is useful for avoiding error conditions when a model contains blocks whose parameter values must be changed concurrently.
External Mode Control Panel displays
Parameter changes
pending... to the right of the Download button until the
model running on the target hardware has applied the new parameter values.


text:
The St Vincent Medical CentreTel: 01302 361318
Hollybush Health CentreTel: 01302 890440
Our practice is one of 43 in Doncaster forming part of the Doncaster Clinical Commissioning Group (DCCG). They are responsible for helping us to develop better services for our patients and ensuring that the services provided at the hospital are of a consistently high standard.
NHS South Yorkshire and Bassetlaw are the organisation who contract with us to provide services to you.
At St Vincent Practice, we aim to treat all our patients promptly, courteously and in complete confidence. We feel it is important you know who you are speaking to, so our practice staff wear a name badge and identify themselves on the telephone.
Our team includes five GP partners, two salaried GPs, three Advanced Nurse Practitioners, eight Practice Nurses, four Health Care Assistants as well as our Management team. Two Medical Secretaries, Four Administration support staff and fourteen Reception staff. We offer a full general practice service and run specialist clinics for children, diabetes, heart disease, COPD and asthma sufferers and for patients needing minor surgery.
Read our Statement of Purpose
Our practice may, on occasions, offer training and experience to medical and nursing students and Healthcare professionals on advanced training courses as well as persons intending to become Healthcare professionals.
Hollybush surgery has unrestricted access and facilities for the disabled. Saint Vincent Medical Centre has access for the disabled on the ground floor and basement and by lift to the first floor. Patients wishing to be seen on the ground floor should inform our reception staff.
Copyright 2006 - 2020 My Surgery Website | Privacy & Usage | Edit | Staff Home | Site Map | Accessibility | Site T&C's | Service T&C's


text:
UPDATE just minutes after hitting post:
Wait a minute, this is her second cookbook! I thought I was checking out her first book! So does this make my library cool after all for being so quick to get Ree's book? 😉
(The first cookbook is still not available, by the way!)
Back in the summer of 2010, I searched for this book in my local library but it wasn't available. I submitted a purchase suggestion. Late Winter 2012, I did a spontaneous search for the book and behold, it was on order and I could submit a hold request! Second day of Spring 2012, I picked up the book and brought it home. Ree Drummond is obviously not high priority to the library (although her novel was available before the cookbook was) but I still love my little town.
(Yes, I know RD's second cookbook is out!)


text:
Contact us 24/7: +1 877 678 9627
The Multiple - Copacabana
Zoom In
Speak to your personal shopping team about purchasing this item.
- Instructions for use:
- - Apply with your fingers - the skin's warmth allows for perfect blending
- - Wear it under powder blushes to create more luminosity and intensity
- - 14g/ 0.5oz.
- Ingredients: Polymethyl Methacrylate, Triethylexanoin, Dimethicone, Hydrogenated Poly(C6-14 Olefin, Cetyl Ethylhexanoate, Polyethylene, Cera Microcristallina (Microcrystalline Wax), Sorbitan Sesquiisostearate, Candelilla Cera (Candelilla Wax), C10-30 Cholesterol/Lanosterol Esters, Sodium Magnesium Silicate, Glycerin , Tocopherol, Euterpe, Oleracea (Euterpe Oleracea Fruit Oil), Linseed Oil/Palm Oil Aminopropanediol Esters, Aqua (Water), Sodium Hyaluraonate.
- May Contain: Mica, CI 77891 (Titanium Dioxide), CI 77491 (Iron Oxides), CI 77492 (Iron Oxides), CI 77499 (Iron Oxides), CI 75470 (Carmine), CI 77163 (Bismuth Oxychloride), CI 77742 (Manganese Violet)
NARS' silver-flecked pearl-pink 'Multiple' stick is an effortless way to bring luminosity to your skin - 'Copacabana' is perfect for fair complexions. Designed to be applied to the cheeks, eyes or lips, this versatile formula is best applied with your fingers - rub a small amount on to the tips then blend in for a natural-looking glow.
- Creamy sheer formula that blends effortlessly - Can be used on eyes, cheeks and lips - Enriched with antioxidant Vitamin E and Açai Oil
As seen in The EDIT magazine
Product Code: 352906
Shop more:
Find out the shipping options available for your destination
Arrange your return for an exchange or refund within 28 days using our free collection service
Help & Advice
Product Code: 352906


text:
|index by Group
|index by Distribution
|index by Vendor
|index by creation date
|index by Name
|Name: libsoftokn3
|Distribution: openSUSE Leap 42.1
|Version: 3.20.2
|Vendor: openSUSE
|Release: 6.1
|Build date: Sat Dec 26 10:55:07 2015
|Group: System/Libraries
|Build host: build72
|Size: 394230
|Source RPM: mozilla-nss-3.20.2-6.1.src.rpm
|Packager: http://bugs.opensuse.org
|Url: http://www.mozilla.org/projects/security/pki/nss/
|Summary: Network Security Services Softoken Module
Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled server applications. Applications built with NSS can support SSL v3, TLS v1.0, v1.1, v1.2, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. Network Security Services Softoken Cryptographic Module
* Sat Dec 19 2015 email@example.com - update to NSS 3.20.2 (bnc#959888) * MFSA 2015-150/CVE-2015-7575 (bmo#1158489) MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature * Sun Oct 25 2015 email@example.com - update to NSS 3.20.1 (bnc#952810) * requires NSPR 4.10.10 * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868) memory corruption issues * Thu Sep 24 2015 firstname.lastname@example.com - Install the static libfreebl.a that is needed in order to link Sun elliptical curves provider in Java 7. * Thu Sep 24 2015 firstname.lastname@example.com - update to NSS 3.20 New functionality: * The TLS library has been extended to support DHE ciphersuites in server applications. New Functions: * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group parameters that can be used by NSS for a server socket. * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group parameters that are smaller than the library default's minimum size. New Types: * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in NSS that can be used with function SSL_DHEGroupPrefSet. New Macros: * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable DHE ciphersuites for a server socket. Notable Changes: * For backwards compatibility reasons, the server side implementation of the TLS library keeps all DHE ciphersuites disabled by default. They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE and the SSL_OptionSet or the SSL_OptionSetDefault API. * The server side implementation of the TLS implementation does not support session tickets when using a DHE ciphersuite (see bmo#1174677). * Support for the following ciphersuites has been added: - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 * By default, the server side TLS implementation will use DHE parameters with a size of 2048 bits when using DHE ciphersuites. * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and 8192 bits, which were copied from version 08 of the Internet-Draft "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS", Appendix A. * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a server application to select one or multiple of the embedded DHE parameters as the preferred parameters. The current implementation of NSS will always use the first entry in the array that is passed as a parameter to the SSL_DHEGroupPrefSet API. In future versions of the TLS implementation, a TLS client might signal a preference for certain DHE parameters, and the NSS TLS server side implementation might select a matching entry from the set of parameters that have been configured as preferred on the server side. * NSS optionally supports the use of weak DHE parameters with DHE ciphersuites to support legacy clients. In order to enable this support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each time this API is called for the first time in a process, a fresh set of weak DHE parameters will be randomly created, which may take a long amount of time. Please refer to the comments in the header file that declares the SSL_EnableWeakDHEPrimeGroup API for additional details. * The size of the default PQG parameters used by certutil when creating DSA keys has been increased to use 2048 bit parameters. * The selfserv utility has been enhanced to support the new DHE features. * NSS no longer supports C compilers that predate the ANSI C standard (C89). * Thu Sep 24 2015 email@example.com - update to NSS 3.19.3; certstore updates only * The following CA certificates were removed - Buypass Class 3 CA 1 - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı - SG TRUST SERVICES RACINE - TC TrustCenter Universal CA I - TC TrustCenter Class 2 CA II * The following CA certificate had the Websites trust bit turned off - ComSign Secured CA * The following CA certificates were added - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5 - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6 - Certinomis - Root CA * The version number of the updated root CA list has been set to 2.5 * Thu Sep 24 2015 firstname.lastname@example.com - Install blapi.h and algmac.h that are needed in order to build Sun elliptical curves provider in Java 7 * Wed Jun 24 2015 email@example.com - as the .chk files are contained in libfreebl3 and libsoftokn directly, provide the -hmac alias names to help :42 building. * Tue Jun 23 2015 email@example.com - update to 3.19.2 * required for Firefox 39.0 * No new functionality is introduced in this release. This release addresses a backwards compatibility issue with the NSS 3.19.1 release. * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic implementation (part of the softoken cryptographic module used by default by NSS) was willing to generate or use was increased - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This was done as part of a security fix for Bug 1138554 / CVE-2015-4000. Applications that requested or attempted to use keys smaller then the minimum size would fail. However, this change in behaviour unintentionally broke existing NSS applications that need to generate or use such keys, via APIs such as SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey. * Sun May 31 2015 firstname.lastname@example.com - update to 3.19.1 No new functionality is introduced in this release. This patch release includes a fix for the recently published logjam attack. Notable Changes: * The minimum strength of keys that libssl will accept for finite field algorithms (RSA, Diffie-Hellman, and DSA) have been increased to 1023 bits (bmo#1138554). (MFSA 2015-70/CVE-2015-4000) * NSS reports the bit length of keys more accurately. Thus, the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits functions could report smaller values for values that have leading zero values. This affects the key strength values that are reported by SSL_GetChannelInfo. * NSS incorrectly permits skipping of ServerKeyExchange (bmo#1086145) (MFSA 2015-71/CVE-2015-2721) * Sat May 23 2015 email@example.com - update to 3.19 * Firefox target release 39 New functionality: * For some certificates, such as root CA certificates, that don't embed any constraints, NSS might impose additional constraints, such as name constraints. A new API has been added that allows to lookup imposed constraints. * It is possible to override the directory in which the NSS build system will look for the sqlite library. New Functions: * CERT_GetImposedNameConstraints Notable Changes: * The SSL 3 protocol has been disabled by default. * NSS now more strictly validates TLS extensions and will fail a handshake that contains malformed extensions. * Fixed a bug related to the ordering of TLS handshake messages. * In TLS 1.2 handshakes, NSS advertises support for the SHA512 hash algorithm, in order to be compatible with TLS servers that use certificates with a SHA512 signature. * Thu Apr 23 2015 firstname.lastname@example.com - update to 3.18.1 * Firefox target release 38 * No new functionality is introduced in this release. Notable Changes: * The following CA certificate had the Websites and Code Signing trust bits restored to their original state to allow more time to develop a better transition strategy for affected sites: - OU = Equifax Secure Certificate Authority * The following CA certificate was removed: - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi * The following intermediate CA certificate has been added as actively distrusted because it was mis-used to issue certificates for domain names the holder did not own or control: - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG * The version number of the updated root CA list has been set to 2.4 * Fri Apr 03 2015 email@example.com - update to 3.18 * Firefox target release 38 New functionality: * When importing certificates and keys from a PKCS#12 source, it's now possible to override the nicknames, prior to importing them into the NSS database, using new API SEC_PKCS12DecoderRenameCertNicknames. * The tstclnt test utility program has new command-line options - C, -D, -b and -R. Use -C one, two or three times to print information about the certificates received from a server, and information about the locally found and trusted issuer certificates, to diagnose server side configuration issues. It is possible to run tstclnt without providing a database (-D). A PKCS#11 library that contains root CA certificates can be loaded by tstclnt, which may either be the nssckbi library provided by NSS (-b) or another compatible library (-R). New Functions: * SEC_CheckCrlTimes * SEC_GetCrlTimes * SEC_PKCS12DecoderRenameCertNicknames New Types: * SEC_PKCS12NicknameRenameCallback Notable Changes: * The highest TLS protocol version enabled by default has been increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS protocol version enabled by default has been increased from DTLS 1.0 to DTLS 1.2. * The default key size used by certutil when creating an RSA key pair has been increased from 1024 bits to 2048 bits. * The following CA certificates had the Websites and Code Signing trust bits turned off: - Equifax Secure Certificate Authority - Equifax Secure Global eBusiness CA-1 - TC TrustCenter Class 3 CA II * The following CA certificates were added: - Staat der Nederlanden Root CA - G3 - Staat der Nederlanden EV Root CA - IdenTrust Commercial Root CA 1 - IdenTrust Public Sector Root CA 1 - S-TRUST Universal Root CA - Entrust Root Certification Authority - G2 - Entrust Root Certification Authority - EC1 - CFCA EV ROOT * The version number of the updated root CA list has been set to 2.3 - add the changes file as source so the .src.rpm builds (used for fake build time) * Sat Jan 31 2015 email@example.com - update to 3.17.4 * Firefox target release 36 Notable Changes: * bmo#1084986: If an SSL/TLS connection fails, because client and server don't have any common protocol version enabled, NSS has been changed to report error code SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting SSL_ERROR_NO_CYPHER_OVERLAP). * bmo#1112461: libpkix was fixed to prefer the newest certificate, if multiple certificates match. * bmo#1094492: fixed a memory corruption issue during failure of keypair generation. * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS mode. * bmo#1119983: fixed interoperability of NSS server code with a LibreSSL client. * Sat Dec 06 2014 email@example.com - update to 3.17.3 New functionality: * Support for TLS_FALLBACK_SCSV has been added to the ssltap and tstclnt utilities Notable Changes: * The QuickDER decoder now decodes lengths robustly (CVE-2014-1569) * The following 1024-bit CA certificates were removed: - GTE CyberTrust Global Root - Thawte Server CA - Thawte Premium Server CA - America Online Root Certification Authority 1 - America Online Root Certification Authority 2 * The following CA certificates had the Websites and Code Signing trust bits turned off: - Class 3 Public Primary Certification Authority - G2 - Equifax Secure eBusiness CA-1 * The following CA certificates were added: - COMODO RSA Certification Authority - USERTrust RSA Certification Authority - USERTrust ECC Certification Authority - GlobalSign ECC Root CA - R4 - GlobalSign ECC Root CA - R5 * the version number of the updated root CA list has been set to 2.2 * Thu Oct 16 2014 email@example.com - update to 3.17.2 Bugfix release * bmo#1049435 - Importing an RSA private key fails if p < q * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key * bmo#1078669 - certutil crashes when using the --certVersion parameter * Tue Sep 23 2014 firstname.lastname@example.com - update to 3.17.1 (bnc#897890) * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405) RSA Signature Forgery in NSS * Change library's signature algorithm default to SHA256 * Add support for draft-ietf-tls-downgrade-scsv * Add clang-cl support to the NSS build system * Implement TLS 1.3: * Part 1. Negotiate TLS 1.3 * Part 2. Remove deprecated cipher suites andcompression. * Add support for little-endian powerpc64 * Fri Aug 29 2014 firstname.lastname@example.com - update to 3.17 * required for Firefox 33 New functionality: * When using ECDHE, the TLS server code may be configured to generate a fresh ephemeral ECDH key for each handshake, by setting the SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means the server's ephemeral ECDH key is reused for multiple handshakes. This option does not affect the TLS client code, which always generates a fresh ephemeral ECDH key for each handshake. New Macros * SSL_REUSE_SERVER_ECDHE_KEY Notable Changes: * The manual pages for the certutil and pp tools have been updated to document the new parameters that had been added in NSS 3.16.2. * On Windows, the new build variable USE_STATIC_RTL can be used to specify the static C runtime library should be used. By default the dynamic C runtime library is used. * Tue Aug 12 2014 firstname.lastname@example.com - update to 3.16.4 (bnc#894201) * now required for Firefox 32 Notable Changes: * The following 1024-bit root CA certificate was restored to allow more time to develop a better transition strategy for affected sites. It was removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy forum led to the decision to keep this root included longer in order to give website administrators more time to update their web servers. - CN = GTE CyberTrust Global Root * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit intermediate CA certificate has been included, without explicit trust. The intention is to mitigate the effects of the previous removal of the 1024-bit Entrust.net root certificate, because many public Internet sites still use the "USERTrust Legacy Secure Server CA" intermediate certificate that is signed by the 1024-bit Entrust.net root certificate. The inclusion of the intermediate certificate is a temporary measure to allow those sites to function, by allowing them to find a trust path to another 2048-bit root CA certificate. The temporarily included intermediate certificate expires November 1, 2015. * Sat Jul 05 2014 email@example.com - update to 3.16.3 * required for Firefox 32 New Functions: * CERT_GetGeneralNameTypeFromString (This function was already added in NSS 3.16.2, however, it wasn't declared in a public header file.) Notable Changes: * The following 1024-bit CA certificates were removed - Entrust.net Secure Server Certification Authority - GTE CyberTrust Global Root - ValiCert Class 1 Policy Validation Authority - ValiCert Class 2 Policy Validation Authority - ValiCert Class 3 Policy Validation Authority * Additionally, the following CA certificate was removed as requested by the CA: - TDC Internet Root CA * The following CA certificates were added: - Certification Authority of WoSign - CA 沃通根证书 - DigiCert Assured ID Root G2 - DigiCert Assured ID Root G3 - DigiCert Global Root G2 - DigiCert Global Root G3 - DigiCert Trusted Root G4 - QuoVadis Root CA 1 G3 - QuoVadis Root CA 2 G3 - QuoVadis Root CA 3 G3 * The Trust Bits were changed for the following CA certificates - Class 3 Public Primary Certification Authority - Class 3 Public Primary Certification Authority - Class 2 Public Primary Certification Authority - G2 - VeriSign Class 2 Public Primary Certification Authority - G3 - AC Raíz Certicámara S.A. - NetLock Uzleti (Class B) Tanusitvanykiado - NetLock Expressz (Class C) Tanusitvanykiado - changes in 3.16.2 New functionality: * DTLS 1.2 is supported. * The TLS application layer protocol negotiation (ALPN) extension is also supported on the server side. * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism. * New Intel AES assembly code for 32-bit and 64-bit Windows, contributed by Shay Gueron and Vlad Krasnov of Intel. New Functions: * CERT_AddExtensionByOID * PK11_PrivDecrypt * PK11_PubEncrypt New Macros * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL Notable Changes: * The btoa command has a new command-line option -w suffix, which causes the output to be wrapped in BEGIN/END lines with the given suffix * The certutil commands supports additionals types of subject alt name extensions. * The certutil command supports generic certificate extensions, by loading binary data from files, which have been prepared using external tools, or which have been extracted from other existing certificates and dumped to file. * The certutil command supports three new certificate usage specifiers. * The pp command supports printing UTF-8 (-u). * On Linux, NSS is built with the -ffunction-sections -fdata-sections compiler flags and the --gc-sections linker flag to allow unused functions to be discarded. * Thu May 08 2014 firstname.lastname@example.com - update to 3.16.1 * required for Firefox 31 New functionality: * Added the "ECC" flag for modutil to select the module used for elliptic curve cryptography (ECC) operations. New Functions: * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type or a SECKEYPrivateKeyInfo structure. Only RSA private keys are supported now. * SECMOD_InternalToPubMechFlags converts from NSS-internal to public representation of mechanism flags New Types: * ssl_padding_xtn the value of this enum constant changed from the experimental value 35655 to the IANA-assigned value 21 New Macros * PUBLIC_MECH_ECC_FLAG a public mechanism flag for elliptic curve cryptography (ECC) operations * SECMOD_ECC_FLAG an NSS-internal mechanism flag for elliptic curve cryptography (ECC) operations. This macro has the same numeric value as PUBLIC_MECH_ECC_FLAG. Notable Changes: * Imposed name constraints on the French government root CA ANSSI (DCISS). * Fri Mar 21 2014 firstname.lastname@example.com - update to 3.16 * required for Firefox 29 * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard character should not be embedded within the U-label of an internationalized domain name. See the last bullet point in RFC 6125, Section 7.2. * Supports the Linux x32 ABI. To build for the Linux x32 target, set the environment variable USE_X32=1 when building NSS. New Functions: * NSS_CMSSignerInfo_Verify New Macros * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc., cipher suites that were first defined in SSL 3.0 can now be referred to with their official IANA names in TLS, with the TLS_ prefix. Previously, they had to be referred to with their names in SSL 3.0, with the SSL_ prefix. Notable Changes: * ECC is enabled by default. It is no longer necessary to set the environment variable NSS_ENABLE_ECC=1 when building NSS. To disable ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS. * libpkix should not include the common name of CA as DNS names when evaluating name constraints. * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys. * Fix a memory corruption in sec_pkcs12_new_asafe. * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime test sdb_measureAccess. * The built-in roots module has been updated to version 1.97, which adds, removes, and distrusts several certificates. * The atob utility has been improved to automatically ignore lines of text that aren't in base64 format. * The certutil utility has been improved to support creation of version 1 and version 2 certificates, in addition to the existing version 3 support. * Tue Feb 25 2014 firstname.lastname@example.com - update to 3.15.5 * required for Firefox 28 * export FREEBL_LOWHASH to get the correct default headers (bnc#865539) New functionality * Added support for the TLS application layer protocol negotiation (ALPN) extension. Two SSL socket options, SSL_ENABLE_NPN and SSL_ENABLE_ALPN, can be used to control whether NPN or ALPN (or both) should be used for application layer protocol negotiation. * Added the TLS padding extension. The extension type value is 35655, which may change when an official extension type value is assigned by IANA. NSS automatically adds the padding extension to ClientHello when necessary. * Added a new macro CERT_LIST_TAIL, defined in certt.h, for getting the tail of a CERTCertList. Notable Changes * bmo#950129: Improve the OCSP fetching policy when verifying OCSP responses * bmo#949060: Validate the iov input argument (an array of PRIOVec structures) of ssl_WriteV (called via PR_Writev). Applications should still take care when converting struct iov to PRIOVec because the iov_len members of the two structures have different types (size_t vs. int). size_t is unsigned and may be larger than int. * Thu Feb 20 2014 firstname.lastname@example.com - BuildRequire mozilla-nspr >= 4.9 * Tue Jan 07 2014 email@example.com - update to 3.15.4 * required for Firefox 27 * regular CA root store update (1.96) * Reordered the cipher suites offered in SSL/TLS client hello messages to match modern best practices. * Improved SSL/TLS false start. In addition to enabling the SSL_ENABLE_FALSE_START option, an application must now register a callback using the SSL_SetCanFalseStartCallback function. * When false start is enabled, libssl will sometimes return unencrypted, unauthenticated data from PR_Recv (CVE-2013-1740, bmo#919877) * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491 NSS ticket handling issues New functionality * Implemented OCSP querying using the HTTP GET method, which is the new default, and will fall back to the HTTP POST method. * Implemented OCSP server functionality for testing purposes (httpserv utility). * Support SHA-1 signatures with TLS 1.2 client authentication. * Added the --empty-password command-line option to certutil, to be used with -N: use an empty password when creating a new database. * Added the -w command-line option to pp: don't wrap long output lines. New functions * CERT_ForcePostMethodForOCSP * CERT_GetSubjectNameDigest * CERT_GetSubjectPublicKeyDigest * SSL_PeerCertificateChain * SSL_RecommendedCanFalseStart * SSL_SetCanFalseStartCallback New types * CERT_REV_M_FORCE_POST_METHOD_FOR_OCSP: When this flag is used, libpkix will never attempt to use the HTTP GET method for OCSP requests; it will always use POST. - removed obsolete char.patch * Thu Dec 05 2013 email@example.com - update to 22.214.171.124 (bnc#854367) * includes certstore update (1.95) (bmo#946351) (explicitely distrust AC DG Tresor SSL) * Wed Dec 04 2013 email@example.com - adapt specfile to ppc64le * Mon Nov 11 2013 firstname.lastname@example.com - update to 3.15.3 (bnc#850148) * CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates, when the CERTVerifyLog log parameter is given (bmo#910438) * NSS advertises TLS 1.2 ciphersuites in a TLS 1.1 ClientHello (bmo#919677) * fix CVE-2013-5605 * Sat Sep 28 2013 firstname.lastname@example.com - update to 3.15.2 (bnc#842979) * Support for AES-GCM ciphersuites that use the SHA-256 PRF * MD2, MD4, and MD5 signatures are no longer accepted for OCSP or CRLs * Add PK11_CipherFinal macro * sizeof() used incorrectly * nssutil_ReadSecmodDB() leaks memory * Allow SSL_HandshakeNegotiatedExtension to be called before the handshake is finished. * Deprecate the SSL cipher policy code * Avoid uninitialized data read in the event of a decryption failure. (CVE-2013-1739) * Fri Jul 05 2013 firstname.lastname@example.com - fix 32bit requirement, it's without () actually * Wed Jul 03 2013 firstname.lastname@example.com - update to 3.15.1 * TLS 1.2 (RFC 5246) is supported. HMAC-SHA256 cipher suites (RFC 5246 and RFC 5289) are supported, allowing TLS to be used without MD5 and SHA-1. Note the following limitations: The hash function used in the signature for TLS 1.2 client authentication must be the hash function of the TLS 1.2 PRF, which is always SHA-256 in NSS 3.15.1. AES GCM cipher suites are not yet supported. * some bugfixes and improvements * Fri Jun 28 2013 email@example.com - require libnssckbi instead of mozilla-nss-certs so p11-kit can conflict with the latter (fate#314991) * Tue Jun 11 2013 email@example.com - update to 3.15 * Packaging + removed obsolete patches * nss-disable-expired-testcerts.patch * bug-834091.patch * New Functionality + Support for OCSP Stapling (RFC 6066, Certificate Status Request) has been added for both client and server sockets. TLS client applications may enable this via a call to SSL_OptionSetDefault(SSL_ENABLE_OCSP_STAPLING, PR_TRUE); + Added function SECITEM_ReallocItemV2. It replaces function SECITEM_ReallocItem, which is now declared as obsolete. + Support for single-operation (eg: not multi-part) symmetric key encryption and decryption, via PK11_Encrypt and PK11_Decrypt. + certutil has been updated to support creating name constraints extensions. * New Functions in ssl.h SSL_PeerStapledOCSPResponse - Returns the server's stapled OCSP response, when used with a TLS client socket that negotiated the status_request extension. SSL_SetStapledOCSPResponses - Set's a stapled OCSP response for a TLS server socket to return when clients send the status_request extension. in ocsp.h CERT_PostOCSPRequest - Primarily intended for testing, permits the sending and receiving of raw OCSP request/responses. in secpkcs7.h SEC_PKCS7VerifyDetachedSignatureAtTime - Verifies a PKCS#7 signature at a specific time other than the present time. in xconst.h CERT_EncodeNameConstraintsExtension - Matching function for CERT_DecodeNameConstraintsExtension, added in NSS 3.10. in secitem.h SECITEM_AllocArray SECITEM_DupArray SECITEM_FreeArray SECITEM_ZfreeArray - Utility functions to handle the allocation and deallocation of SECItemArrays SECITEM_ReallocItemV2 - Replaces SECITEM_ReallocItem, which is now obsolete. SECITEM_ReallocItemV2 better matches caller expectations, in that it updates item->len on allocation. For more details of the issues with SECITEM_ReallocItem, see Bug 298649 and Bug 298938. in pk11pub.h PK11_Decrypt - Performs decryption as a single PKCS#11 operation (eg: not multi-part). This is necessary for AES-GCM. PK11_Encrypt - Performs encryption as a single PKCS#11 operation (eg: not multi-part). This is necessary for AES-GCM. * New Types in secitem.h SECItemArray - Represents a variable-length array of SECItems. * New Macros in ssl.h SSL_ENABLE_OCSP_STAPLING - Used with SSL_OptionSet to configure TLS client sockets to request the certificate_status extension (eg: OCSP stapling) when set to PR_TRUE * Notable changes + SECITEM_ReallocItem is now deprecated. Please consider using SECITEM_ReallocItemV2 in all future code. + The list of root CA certificates in the nssckbi module has been updated. + The default implementation of SSL_AuthCertificate has been updated to add certificate status responses stapled by the TLS server to the OCSP cache. * a lot of bugfixes * Tue Apr 16 2013 firstname.lastname@example.com - Add Source URL, see https://en.opensuse.org/SourceUrls * Sun Mar 24 2013 firstname.lastname@example.com - disable tests with expired certificates (nss-disable-expired-testcerts.patch) - add SEC_PKCS7VerifyDetachedSignatureAtTime using patch from mozilla tree to fulfill Firefox 21 requirements (bug-834091.patch; bmo#834091) * Thu Feb 28 2013 email@example.com - update to 3.14.3 * No new major functionality is introduced in this release. This release is a patch release to address CVE-2013-1620 (bmo#822365) * "certutil -a" was not correctly producing ASCII output as requested. (bmo#840714) * NSS 3.14.2 broke compilation with older versions of sqlite that lacked the SQLITE_FCNTL_TEMPFILENAME file control. NSS 3.14.3 now properly compiles when used with older versions of sqlite (bmo#837799) - remove system-sqlite.patch - add aarch64 support * Tue Feb 05 2013 email@example.com - added system-sqlite.patch (bmo#837799) * do not depend on latest sqlite just for a #define - enable system sqlite usage again * Sat Feb 02 2013 email@example.com - update to 3.14.2 * required for Firefox >= 20 * removed obsolete nssckbi update patch * MFSA 2013-40/CVE-2013-0791 (bmo#629816) Out-of-bounds array read in CERT_DecodeCertPackage - disable system sqlite usage since we depend on 3.7.15 which is not provided in any openSUSE distribution * add nss-sqlitename.patch to avoid any name clash * Sun Dec 30 2012 email@example.com - updated CA database (nssckbi-1.93.patch) * MFSA 2013-20/CVE-2013-0743 (bmo#825022, bnc#796628) revoke mis-issued intermediate certificates from TURKTRUST * Tue Dec 18 2012 email@example.com - update to 3.14.1 RTM * minimal requirement for Gecko 20 * several bugfixes * Thu Oct 25 2012 firstname.lastname@example.com - update to 3.14 RTM * Support for TLS 1.1 (RFC 4346) * Experimental support for DTLS 1.0 (RFC 4347) and DTLS-SRTP (RFC 5764) * Support for AES-CTR, AES-CTS, and AES-GCM * Support for Keying Material Exporters for TLS (RFC 5705) * Support for certificate signatures using the MD5 hash algorithm is now disabled by default * The NSS license has changed to MPL 2.0. Previous releases were released under a MPL 1.1/GPL 2.0/LGPL 2.1 tri-license. For more information about MPL 2.0, please see http://www.mozilla.org/MPL/2.0/FAQ.html. For an additional explanation on GPL/LGPL compatibility, see security/nss/COPYING in the source code. * Export and DES cipher suites are disabled by default. Non-ECC AES and Triple DES cipher suites are enabled by default - disabled OCSP testcases since they need external network (nss-disable-ocsp-test.patch) * Wed Aug 15 2012 email@example.com - update to 3.13.6 RTM * root CA update * other bugfixes * Fri Jun 01 2012 firstname.lastname@example.com - update to 3.13.5 RTM * Fri Apr 13 2012 email@example.com - update to 3.13.4 RTM * fixed some bugs * fixed cert verification regression in PKIX mode (bmo#737802) introduced in 3.13.2 * Thu Feb 23 2012 email@example.com - update to 3.13.3 RTM - distrust Trustwave's MITM certificates (bmo#724929) - fix generic blacklisting mechanism (bmo#727204) * Thu Feb 16 2012 email@example.com - update to 3.13.2 RTM * requirement with Gecko >= 11 - removed obsolete patches * ckbi-1.88 * pkcs11n-header-fix.patch * Sun Dec 18 2011 firstname.lastname@example.com - fix spec file syntax for qemu-workaround * Mon Nov 14 2011 firstname.lastname@example.com - Added a patch to fix errors in the pkcs11n.h header file. (bmo#702090) * Sat Nov 05 2011 email@example.com - update to 3.13.1 RTM * better SHA-224 support (bmo#647706) * fixed a regression (causing hangs in some situations) introduced in 3.13 (bmo#693228) - update to 3.13.0 RTM * SSL 2.0 is disabled by default * A defense against the SSL 3.0 and TLS 1.0 CBC chosen plaintext attack demonstrated by Rizzo and Duong (CVE-2011-3389) is enabled by default. Set the SSL_CBC_RANDOM_IV SSL option to PR_FALSE to disable it. * SHA-224 is supported * Ported to iOS. (Requires NSPR 4.9.) * Added PORT_ErrorToString and PORT_ErrorToName to return the error message and symbolic name of an NSS error code * Added NSS_GetVersion to return the NSS version string * Added experimental support of RSA-PSS to the softoken only * NSS_NoDB_Init does not try to open /pkcs11.txt and /secmod.db anymore (bmo#641052, bnc#726096) * Sat Nov 05 2011 email@example.com - explicitely distrust DigiCert Sdn. Bhd (bnc#728520, bmo#698753) - make sure NSS_NoDB_Init does not try to use wrong certificate databases (CVE-2011-3640, bnc#726096, bmo#641052) * Fri Sep 30 2011 firstname.lastname@example.com - Workaround qemu-arm bugs. * Fri Sep 09 2011 firstname.lastname@example.com - explicitely distrust/override DigiNotar certs (bmo#683261) (trustdb version 1.87) * Fri Sep 02 2011 firstname.lastname@example.com - removed DigiNotar root certificate from trusted db (bmo#682927, bnc#714931) * Wed Aug 24 2011 firstname.lastname@example.com - fixed typo in summary of mozilla-nss (libsoftokn3) * Fri Aug 12 2011 firstname.lastname@example.com - update to 3.12.11 RTM * no upstream release notes available * Wed Jul 13 2011 email@example.com - Linux3.0 is the new Linux2.6 (make it build) * Mon May 23 2011 email@example.com - Do not include build dates in binaries, messes up build compare * Thu May 19 2011 email@example.com - update to 3.12.10 RTM * no changes except internal release information * Thu Apr 28 2011 email@example.com - update to 3.12.10beta1 * root CA changes * filter certain bogus certs (bmo#642815) * fix minor memory leaks * other bugfixes * Sun Jan 09 2011 firstname.lastname@example.com - update to 3.12.9rc0 * fix minor memory leaks (bmo#619268) * fix crash in nss_cms_decoder_work_data (bmo#607058) * fix crash in certutil (bmo#620908) * handle invalid argument in JPAKE (bmo#609068) * Thu Dec 09 2010 firstname.lastname@example.com - update to 3.12.9beta2 * J-PAKE support (API requirement for Firefox >= 4.0b8) * Tue Nov 09 2010 email@example.com - replaced expired PayPal test certificate (fixing testsuite) * Sat Sep 25 2010 firstname.lastname@example.com - update to 3.12.8 RTM release * support TLS false start (needed for Firefox4) (bmo#525092) * fix wildcard matching for IP addresses (bnc#637290, bmo#578697) (CVE-2010-3170) * bugfixes * Fri Jul 23 2010 email@example.com - update to 3.12.7 RTM release * bugfix release * updated root CA list - removed obsolete patches * Fri Jul 09 2010 firstname.lastname@example.com - Disable testsuite on SPARC. Some tests fails, probably due to just bad timing/luck. * Thu Jun 03 2010 firstname.lastname@example.com - Use preloaded empty system database since creating with modutil leaves database in nonusable state * Sat Apr 24 2010 email@example.com - buildrequire pkg-config to fix provides * Sun Apr 04 2010 firstname.lastname@example.com - disabled a test using an expired cert (bmo#557071) * Sat Mar 20 2010 email@example.com - fixed builds for older dists where internal sqlite3 is used (nss-sqlitename.patch was not refreshed correctly) - fixed baselibs.conf as <release> is not a valid identifier * Tue Mar 09 2010 email@example.com - update to 3.12.6 RTM release * added mozilla-nss-sysinit subpackage - change renegotiation behaviour to the old default for a transition phase * Tue Mar 09 2010 email@example.com - split off libsoftokn3 subpackage to allow mixed NSS installation * Sat Dec 26 2009 firstname.lastname@example.com - added mozilla-nss-certs baselibs (bnc#567322) * Fri Dec 18 2009 firstname.lastname@example.com - split mozilla-nss-certs from main package - added rpmlintrc to ignore expected warnings - added baselibs.conf as source * Mon Dec 14 2009 firstname.lastname@example.com - updated builtin certs (version 1.77) * Mon Nov 23 2009 firstname.lastname@example.com - rebased patches to apply w/o fuzz * Fri Aug 14 2009 email@example.com - update to 3.12.4 RTM release * Fri Aug 07 2009 email@example.com - update to recent snapshot (20090806) - libnssdbm3.so has to be signed starting with 3.12.4 * Mon Aug 03 2009 email@example.com - update to NSS 3.12.4pre snapshot - rebased existing patches - enable testsuite again (was disabled accidentally before) * Wed Jul 29 2009 email@example.com - update to NSS 22.214.171.124 (upstream use in FF 3.5.1) (bmo#504611) * RNG_SystemInfoForRNG called twice by nsc_CommonInitialize (bmo#489811; other changes are unrelated to Linux) - moved shlibsign to tools package again (as it's not needed at library install time anymore) - use %{_libexecdir} for the tools * Sat Jun 06 2009 firstname.lastname@example.com - Temporary testsuite fix for Factory (bnc#509308) (malloc.patch) - remove the post scriptlet which created the *.chk files and use a RPM feature to create them after debuginfo stuff * Tue Jun 02 2009 email@example.com - updated builtin root certs by updating to NSS_3_12_3_WITH_CKBI_1_75_RTM tag which is supposed to be the base for Firefox 3.5.0 - PreReq coreutils in the main package already as "rm" is used in its %post script - disable testsuite for this moment as it crashes on Factory currently for an unknown reason * Thu May 21 2009 firstname.lastname@example.com - renew Paypal certs to fix testsuite errors (bmo#491163) * Mon Apr 20 2009 email@example.com - update to version 3.12.3 RTM * default behaviour changed slightly but can be set up backward compatible using environment variables https://developer.mozilla.org/En/NSS_reference/NSS_environment_variables * New Korean SEED cipher * Some new functions in the nss library: CERT_RFC1485_EscapeAndQuote (see cert.h) CERT_CompareCerts (see cert.h) CERT_RegisterAlternateOCSPAIAInfoCallBack (see ocsp.h) PK11_GetSymKeyHandle (see pk11pqg.h) UTIL_SetForkState (see secoid.h) NSS_GetAlgorithmPolicy (see secoid.h) NSS_SetAlgorithmPolicy (see secoid.h) - created libfreebl3 subpackage and build it w/o nspr and nss deps - added patch to make all ASM noexecstack - create the softokn3 and freebl3 checksums at installation time (moved shlibsign to the main package to achieve that) - applied upstream patch to avoid OSCP test failures (bmo#488646) - applied upstream patch to fix libjar crashes (bmo#485145)
/usr/lib64/libnssdbm3.chk /usr/lib64/libnssdbm3.so /usr/lib64/libsoftokn3.chk /usr/lib64/libsoftokn3.so
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Jan 10 06:08:53 2020


text:
Let's Go Bucks
Congratulations to Rhett Maughan and the Monticello Buckaroo boys basketball team, who captured the Region 19 championship and the number one seed into the state tournament.
On Thursday in Green River, the Bucks qualified for a playoff game with Whitehorse after besting the Green River Pirates, 58-50, always a difficult task, particularly in Green River.
Green River is a tall team, so tall that they don't seem tall because they are all tall. They're so tall they have a 6'6" guy who plays on the wing. That's tall.
Despite the tallness, Cory Young had enough arch on his shots to lead the way with 18 points, including three treys.
The Bucks, however, matched the Pirates inside, with Dallin Duncan getting 10 points, along with Steven Redd, who scored eight. The Bucks also got great inside bench support, with Colby Draper dropping in 10 points and Tyler Ketron pouring in eight. Sophomore guard Terek Esplin provided some enormous guard play when Buckaroo starters were in a little foul trouble.
The win left the Bucks tied with Whitehorse for the region lead with a 7-1 record, necessitating a playoff game Friday night in Blanding.
The Raiders and their fans were there in force, pumped to beat the Bucks one more time. And fans weren't disappointed as the two teams put on a basketball show long to be remembered, with the Buckaroos finally coming out on top, 67-63.
The game see-sawed back and forth at a frenetic pace, with neither team able to open up any kind of lead, until late in the fourth quarter, when the game seemed won by the Bucks with a eight point lead with 30 seconds left.
But the Raiders kept tossing in the threes and within 15 seconds they were within two points. But Kendall Maughan put the finishing touches on an emotional win for the Buckaroos by sinking some critical foul shots in the waning moments.
Steven Redd paced the Bucks with 24 points and Dallin Duncan added 22.
The Raiders, with five players draining a team total of nine treys, showed they are a team to be reckoned with at the state tournament. Shawn Dickson, with a game high 26 points, led with teammates Tavis Martin (14) and Keliah Holly (11) also scoring double figures.
1A state tournament
The Bucks open the 1A state tournament on Wednesday at 1 p.m. in Richfield against the winner of the Monday's Duchesne/Meridian play-in game.
Whitehorse has a play-in game on Monday against SL Lutheran, and with a win, plays the winner of the Liahona/Wayne play-in game on Wednesday at 8:30 p.m.
Monument Valley has a play-in game on Monday as well, against the Bryce Valley Mustangs, followed by a game on Wednesday against Wasatch Academy if they win. You can watch the game live on the internet at www.ustream.tv/channel/mysportsguys.
Top Ten Idle Olympic Thoughts
1. The Olympics are my favorite sporting event, bar none. Having an Olympic event every two years creates just enough excitement that I always look forward to them.
2. "Vancouver" becomes one of my all time favorite sounding words, just after "Fahrvergnügen". I just want to chortle every time I say "Van Coooverrr". It reminds me of another favorite sounding word "maneuver." By the way, do you know what "Fahrvergnügen" means? Driving enjoyment.
3. I kind of like the Canadian national anthem, "O Canada." I first heard those words while attending a practice round at Augusta National Golf Course at the 2006 Masters Golf Tournament. We spent some time following Mike Weir around the course.
Weir is a Canadian golfer and also a former BYU golfer, so we were interested. As he walked alone down the eighth fairway early on that stellar April morning, someone in the very small gallery sang out, "O, Canada."
Weir looked right at us with a smile on his face and said, "Like I've never heard that before."
Instantly, I felt to sing, "What about 'Rise and Shout the Cougars are out,'" but because of the sacred nature of the experience we were having at the shrine of all golfdom, I dared not raise my voice. Should've done it.
4. I love how the Canadians belted out "O Canada" whenever a Canadian is awarded a gold medal. It is heartwarming to see such patriotism, something all too uncommon in the USA these days.
Remember when Monticello won the state 2A boys basketball championship back in 1994? One of the signatures of that Mark Hugentobler-coached team, aside from their stellar play, was their energetic rendition of the national anthem before their games. To a man, including the coaches, they blasted out the anthem with passion, enjoyment and gusto; something I personally loved but also felt was kind of intimidating to the other team.
Long were the looks and stares from opposing players and fans when our boys sang out with no self-consciousness. I also like how this year's Buckaroo squad lines up on the sideline with their right hands on hearts and left hands on a teammate's shoulder to sing the anthem. Come on, boys, sing out!
5. To quote a local citizen who works at the post office in Monticello, Apolo Anton Ohno "is a cool dude!" And the name just rolls off the tongue nicely, don't you think? Kind of like "Lindsey Vonn" and "Aksel Lund Svindal."
6. Bode Miller grew up.
7. Shaun White has some head of hair. If I had hair like that I wouldn't want to cut it either. I would comb it a little more often though.
8. OK, men's figure skating is tolerable, especially since an American won the gold, but do they have to hold that pose at the beginning and end of their programs for so long?
9. The event called cross country skiing is not the cross country skiing I do. Cross country shuffling is more descriptive of my efforts, especially when in comparison.
10. Speedskating, particularly the 500 meter short track race, is the paramount Olympic sport. I could be a speed skater. I want to be a speed skater. It is the one event I crave to do Olympics-wise that I have never done in my life.
Can I end with a personal note today? A big happy birthday to my older brother, Doug, who turns one of the multiples of 10 today, for about the sixth time.
Doug taught me all I know about sports and sports statistics. I get my love of sport from my father, but my love of sport statistics from my brother. He invented a game as a teenager that he played incessantly and I played occasionally, a baseball game played with dice.
Rolling a one was a single, two a double, and so on. Five and six were outs, as I remember. Anyway, Doug not only played the game with every Major League baseball team, he kept stats on every player on every team for every inning for every game he played. I wonder if he still has that notebook full of all those stats? I played the game, but had a hard time manipulating the dice so the Dodgers won.
Doug, even today at his advanced age, can tell you the statistics on most Major League baseball players and basketball players as well. Thanks, Doug, for the love of stats and happy birthday!