Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
This release fixes security vulnerabilities. Sites are urged to upgrade immediately. For more details, please see the security announcement:
SA-2008-005 - Drupal core - Cross site request forgery
SA-2008-006 - Drupal core - Cross site scripting (UTF8)
SA-2008-007 - Drupal core - Cross site scripting (register_globals)
In addition to this security vulnerability, the following bugs have been fixed since the 5.5 release:
173858 by Gábor Hojtsy: skip UTF-8 BOM when importing locale files
179164 by Heine: sort modules by name on the module admin page
199640 by webernet: (usability) add option to select no taxonomy term in multiselect forms, not to rely on browser trickery
199084 by chx: better conformance with ISO date formats in our xmlrpc code
173459 by Dave Cohen. Backport of #78487 by FredCK, forngren and bjaspan: document support in url() and l() and proper active class support for .
89218 by Gábor Hojtsy. Properly initialize a counter variable and fix poll editing.
64388 by Gábor Hojtsy. Add missing db_rewrite_sql(); not a security issue since it is a count() query.
200338 by m3avrck and quicksketch: fix transparent GIF resizing
194652 by Heine: specify explicit accept-charset for forms to avoid browser guessing
182410 by greggles: HTTP Basic authentication username and password was parsed in drupal_http_request() but then not used in the request
- Patch 201894 by David Rothstein: fixed typo in user output.
180126 by mmoreno, drewish and scor: add realpath() call to file_save_data(), so Windows will create temporary files properly
115689 by chx: new content types should not overwrite old ones. Backport by Pancho.
203727 by Arancaytar. More effectively use hook API.
204855 by webernet. Add missing * in documentation.
168315 by schuyler1d: previous active database name was not consistently returned in db_set_active()
- Patch 199955 by saxofaan: file_upload_max_size() returns results in bytes, not in mega bytes.
194579 patch by pwolanin: clear filter cache when allowed HTML tags configuration changes in an input format
#166433 by Ralf Stamm. Use correct menu item type for revsion confirm pages.
58806 by fwalch and wicksteedc. Do not override MENU_VISIBLE_IF_HAS_CHILDREN on editing.
Partial backport of 112715 to fix 124641.
Changes from 5.4 -> 5.5
Fixed missing missing brackets in a query in the user module.
Fixed taxonomy feed bug introduced by SA-2007-031
|
|
in pkgsrc-users
|
|
|
|
|
|
evidently not.
|
|
|
|
* Compatibility with Matlab graphics is much better now. We now
have some graphics features that work like Matlab's Handle
Graphics (tm):
* The way Octave handles search paths has changed.
* Previous versions of Octave had a number of built-in variables to
control warnings (for example, warn_divide_by_zero). These
variables have been replaced by warning identifiers that are used
with the warning function to control the state of warnings.
* All built-in variables have been converted to functions.
* For compatibility with Matlab, the output order of Octave's
"system" function has changed.
* For compatibility with Matlab, the output of Octave's fsolve
function has been changed.
* For compatibility with Matlab, normcdf, norminv, normpdf, and
normrnd have been modified to compute distributions using the
standard deviation instead of the variance.
* For compatibility with Matlab, gamcdf, gaminv, gampdf, gamrnd,
expcdf, expinv, exppdf and exprnd have been modified to compute
the distributions using the standard scale factor rather than
one over the scale factor.
|
|
|
|
* Fixed privilege escalation in the Horde API.
* Fixed missing ownership validation on share changes.
* Updated Japanese translation.
* Small bugfixes and improvements.
|
|
|
|
* Fixed privilege escalation in the Horde API.
* Updated Japanese translation.
|
|
|
|
|
|
* Fixed privilege escalation in the Horde API.
* Improved XSS filtering.
* Fixed locked portal blocks.
* Further improved webroot detection.
* Updated Japanese translation.
|
|
|
|
plugin to sync with KDE 3.5.
|
|
to sync local files.
|
|
opensync framework.
|
|
|
|
* Fix a bug where mutex contention in database environments configured for
hybrid mutex support could result in performance degradation.
* Fix a bug where closing a database handle after aborting a transaction
which included a failed open of that database handle could result in
application failure.
* Fix multiple MVCC bugs including a race which could result in incorrect
data being returned to the application.
* Fix a bug where a database store into a Hash database could self-deadlock
in a database environment configured for the Berkeley DB Concurrent Data
Store product and with a free-threaded DB_ENV or DB handle.
* Fix an installation bug where Berkeley DB's PHP header file was not installed
in the correct place.
|
|
|
|
Bug fixes:
* fixed simple bind with a patch from Pawel Salek (fixes 1753419)
Changes 1.2.2:
Bug fixes:
* fixed a crash when loading the state file on BSD systems (patch from the
NetBSD people)
* make command line argument handling more robust
Changes 1.2.1:
Build Improvements
* fixed a bash expression
|
|
|
|
|
|
the app runs as. Bump PKGREVISION.
|
|
Add a CONFLICTS for the previous name (which I had installed).
|
|
Version 1.89, 08/01/2008
========================
o entry types and field names now typeset in lowercase in f_bib.html
o new option -unicode to use Unicode entities for some macros
(such as ◯ for \bigcirc, etc.)
o new option -html-entities to use HTML entities for some macros
such as \le, \approx, etc. (patch by Steven G. Johnson)
o new option -header to insert a header (similar to -footer)
(patch by Steven G. Johnson)
|
|
-add pkg-config to TOOLS (used to locate fontconfig)
|
|
|
|
whether "fontconfig" is installed and fails to build afterwards (at least
under NetBSD-i386 4.0). Bump package revision because of this change.
|
|
|
|
|
|
1.9 [2007-05-28]
- Resolve any DNS name for each connection.
- Use my real name 'Stefan Walter'
See: http://memberwebs.com/nielsen/
|
|
|
|
Changes:
2007-12-12: StGIT-0.14.1 released
* Fixed typo in the required version of Python
2007-12-10: StGIT-0.14 released
* Support for correctly running StGIT in subdirectories
* 'repair' command for fixing an StGIT repository modified by GIT
commands such as 'commit', 'pull', 'merge' or 'rebase'
* 'edit' command for editing both the patch description and diff
* Support for SMTP over TLS
* Support for MIME multipart e-mail templates
* '--attach' option to the 'mail' command to send a patch attached
rather than inline
* Diff statistics and shortlog added to the cover e-mail template
* '--sign/ack' options to the 'import' and 'new' commands
* '--number' to the 'log' command for limiting the output
* Support for binary files in patches
* Support for detached HEAD
* Refactoring of some modules with better support for debugging
* Many bug-fixes
|
|
|
|
__NetBSD_Version__. Inspired by emulators/wine/patches/patch-ac 1.37.
|
|
Documented the __STDC__ macro, especially Sun's implementation.
|
|
(and, not incidentally, to make certain things work on amd64).
|
|
|
|
o Changes from 3.0.4
* Update translations.
* If you are using the fullscreenmode.js script, you can now pass
in a minimal=1 argument in the URL to make a page start out in
the minimal mode.
* Fix problems with non-savepoint capable connections (such as SQL
connections) involved in folder_delete, folder_publish of
folder_rename actions.
* Hiding page history, page navigation, and busy icon (spinner) in
print CSS. This relates to 7402 and 7433.
* Fix persistant translation service creation code. This corrects
broken translations on initial Zope start. This fixes 7470.
* Visual editor improvements:
o Style whitelist and class blacklist now work when there is
only one entry in the list.
o Span tags with no attributes after filtering are removed.
* Make the content rule configuration page fully
translatable. This fixes 6886.
* Update the object-not-found error page to search for
alternatives within the navigation root instead of the entire
site.
* Fix translation for default item in display content menu for
situations. This fixes 7281.
* Fix absolute_url() for content rules add views, content rules
traversal adapters, portlet add views, portlet assignment
mappings and portlet assignments.
* Fix handling of RSS feeds which do not include an update
timestamp for feed entries. This fixes 7515.
* Change KSS saveField to not require value explicitply but take
it from the request if not specifies. This makes it possible to
use saveField-kssSubmitForm: currentForm(); which is needed for
multi-valued form variables.
* Fix handling of the portal type criteria for collections. This
fixes 7467.
* Update the delete-confirmation page for objects that are
references elsewhere to order all referencing items in
alphabetical order.
* Fix handling of types where allow_discussion is set as a class
attribute which could lead to an AttributeError when changing
the discussion settings. This fixes 761.
* Extend the Archetypes widget API to inform widgets when
processing the form in the validation phase. This fixes 760.
* Correct zope.i18n.translate calls in Archetypes: should use the
request, not the instance itself as the context. This fixes
translation problems seen in Plone 3.0.4.
* Do not create an empty <ul> in the personal actions bar if there
are no items in it. This fixes an XHTML syntax error.
* Fix the languages method of the language selector to include the
native language name.
* Fix invalid context argument passed into the translation
machinery in the workflow state vocabulary. This fixes 7492.
* Fix potential acquisition problem in five.localsitemanager when
assigning values to the utilities registry of the component
registry.
* Raise a ValueError when the Zope3 translation utilities get
passed in an invalid context argument. Translations in Zope3
work against the request alone and while the keyword is called
context it was too easily confused with a contentish context.
o Updated packages
* Archetypes 1.5.5
* ATContentTypes 1.2.4
* CMFPlone 3.0.5
* GenericSetup 1.3.3
* kupu 1.4.7
* PlacelessTranslationService 1.4.8
* PloneTranslations 3.0.10
* archetypes.kss 1.2.5
* plone.app.contentmenu 1.0.5
* plone.app.contentrules 1.0.5
* plone.app.i18n 1.0.1
* plone.app.kss 1.2.5
* plone.app.linkintegrity 1.0.4
* plone.app.portlets 1.0.5
* plone.app.redirector 1.0.5
* plone.app.vocabulary 1.0.2
* plone.app.layout 1.0.5
* plone.contentrules 1.0.5
* five.localsitemanager 0.3
|
|
|
|
|
|
|
|
|
|
* Small bug fixes and improvements.
* Updated Japanese translation.
|
|
|
|
* Added Japanse translation.
* Improved sieve forward rules.
|
|
|