summaryrefslogtreecommitdiff
path: root/www/horde
AgeCommit message (Collapse)AuthorFilesLines
2017-08-16Follow some http redirects.wiz1-2/+2
2017-04-05Remove traces of textproc/php-dom which is not needed anymore, now that dom ↵fhajny1-3/+2
is built into PHP. Bump resp. PKGREVISION.
2017-03-12pkgrevision bump for changed apache default.maya1-2/+2
bumping any package depending on a pkg with APACHE_PKG_PREFIX but without APACHE_PKG_PREFIX in its PKGNAME.
2017-01-19Convert all occurrences (353 by my count) ofagc1-3/+3
MASTER_SITES= site1 \ site2 style continuation lines to be simple repeated MASTER_SITES+= site1 MASTER_SITES+= site2 lines. As previewed on tech-pkg. With thanks to rillig for fixing pkglint accordingly.
2016-12-01Fix weird CONFLICTS line.wiz1-2/+2
2016-09-11Drop "55" (php55) from PHP_VERSIONS_ACCEPTED.taca1-2/+2
2016-05-17Use REAL_ROOT_USER/REAL_ROOT_GROUP instead of ROOT_USER/ROOT_GROUPfhajny1-11/+11
for all pkgsrc dir/file ownership rules. Fixes unprivileged user/group names from leaking into binary packages, manifest as non-fatal chown/chgrp failure messages at pkg_add time. Bump respective packages' PKGREVISION.
2015-12-06Explicitly restrict PHP_VERSIONS_ACCEPTED to 55 and 56 for packages whichtaca1-1/+2
use php-mysql package.
2015-11-04Add SHA512 digests for distfiles for www categoryagc1-1/+2
Problems found locating distfiles: Package haskell-cgi: missing distfile haskell-cgi-20001206.tar.gz Package nginx: missing distfile array-var-nginx-module-0.04.tar.gz Package nginx: missing distfile encrypted-session-nginx-module-0.04.tar.gz Package nginx: missing distfile headers-more-nginx-module-0.261.tar.gz Package nginx: missing distfile nginx_http_push_module-0.692.tar.gz Package nginx: missing distfile set-misc-nginx-module-0.29.tar.gz Package nginx-devel: missing distfile echo-nginx-module-0.58.tar.gz Package nginx-devel: missing distfile form-input-nginx-module-0.11.tar.gz Package nginx-devel: missing distfile lua-nginx-module-0.9.16.tar.gz Package nginx-devel: missing distfile nginx_http_push_module-0.692.tar.gz Package nginx-devel: missing distfile set-misc-nginx-module-0.29.tar.gz Package php-owncloud: missing distfile owncloud-8.2.0.tar.bz2 Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2013-03-16Bump PKGREVISION from default PHP version change to 5.4.obache1-1/+2
2012-10-28Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-04-14Removed mk/apachever.mkadam1-2/+2
2012-02-23use example.com for examples of domain name.obache1-2/+2
2012-02-23Update horde to 3.3.13.obache3-37/+23
(while here, set LICENSE=gnu-lgpl-v2, move empty directory handling to PLIST) ------- v3.3.13 ------- [mms] SECURITY: Fix XSS vulnerability in email form field validation. [jan] Fix UTF-8 support with Firefox 10 or later. [jan] Add support for resetting passwords to LDAP driver. ------- v3.3.12 ------- [jan] Convert charset of group names in SQL driver (Bug #9611). [jan] Fix deleting of SyncML anchors if PHP short_open_tag is off (Bug #9349). [jan] Add an experimental new Share SQL driver with better performance. [jan] Fix integer overflow in ASN.1 parser for S/MIME messages. [jan] Fix splitread database usage in VFS (Bug #9467). [jan] Fix invalidating permission cache in SQL driver (Bug #9392).
2011-09-16Bump PKGREVISION from PHP_VERSION_DEFAULT changes.obache1-1/+2
2010-12-16Update horde pacakge to 3.3.11.taca2-6/+6
Fixing http://secunia.com/advisories/42355/. ------- v3.3.11 ------- [mms] SECURITY: Fix XSS when viewing details of a vCard (Bug #9357). [jan] Fix exporting recurrence exceptions to vCalendar 1.0. [jan] Skip event status synchronization with Outlook, which is broken. [jan] Don't send SIF data to recent Funambol clients, unless requested. [jan] Log all queries and errors by the history library.
2010-11-10Changes 3.3.10:adam3-25/+125
* Fix searching DataTree elements (groups) if backend charset is different from interface charset * Fix accessing IMAP ACLs that contain non-alphanumeric characters * Avoid fatal errors when using DateTime with not properly configured PHP 5.3+ * Fix importing recurrence exceptions from vCalendar 1.0. * Fix preferences management regression * Fix conversion of all-day events and certain yearly recurring events for Funambol clients. * Fix memcache cache regression. * Fix SyncML page sometimes deleting more anchors than selected.
2010-09-30No need to buildlink with database libraries.obache2-6/+3
Bump PKGREVISION to relax dependency on database libraries.
2010-03-16Update dependency to newer package path.taca1-2/+2
converters/php-mbstring databases/php-mysqli net/php-soap textproc/php-dom textproc/php-xsl time/php-calendar No functional change should be done.
2010-03-15Remove the case of PKG_PHP_VERSION is 4.taca1-5/+1
No functional change.
2010-02-16Fix issues shown by destdir builds: The install routines copied bothjoerg2-31/+26
templates and target for the configuration and included both the in PLIST. Use this chance and properly move the templates into a separate location as the config directory needs special permissions. Bump revision.
2010-02-15DESTDIR support. XXX horrible, abusive packagejoerg1-18/+18
2009-12-20Update horde to version 3.3.6 in order to fix a cross-site scriptingtonnerre3-20/+62
vulnerability. Changes since version 3.3.3 are not found on the web site for some reason (while changes before 3.3.3 are).
2009-07-17Give up MAINTAINERadrianp1-2/+2
2009-06-14Convert @exec/@unexec to @pkgdir or drop it.joerg1-461/+11
2009-01-30The major changes compared to Horde version 3.3.2 are:adrianp3-9/+8
* SECURITY: Fix unescaped output in the tag cloud block * SECURITY: Fix unvalidated Horde_Image driver name * Restore backwards compatibility with older Kronolith and Whups releases * Fix problems with SQL Shares and PostgreSQL * Support Mozilla Sunbird snooze properties The full list of changes (from version 3.3.2) can be viewed here: http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.492&r2=1.515.2.503&ty=h
2009-01-04+pear-HTTP_Requestadrianp1-1/+3
PKGREVISION++
2008-12-15Upgrade to 3.3.2:adrianp3-14/+27
------ v3.3.2 ------ [mms] Fix prototypejs regression on IE (Bug #6590). ------ v3.3.1 ------ [cjh] SECURITY: Add another check to the XSS filter. [jan] Add script to import preferences from SquirrelMail database. [cjh] Allow the password file Auth driver to require a specific group. [cjh] Use YYYY-MM-DDTHH:MM:SS for Alarm date queries (Bug #7580). [jan] Add XPath wrapper to Horde_DOM library. [cjh] Don't use executeMultiple in the SQL Share driver when we might reset the connection in between queries (Bug #7542). [jan] Fix database XML schema to create all lock table fields (Bug #7433). [jan] Fix showing two sidebars after saving the display preference group for the first time (Bug #7475). [jan] Fix sharing with LDAP groups (Bug #6883). [jan] Add javascript event handler for access keys. [cjh] Remove UNSIGNED from PostgreSQL scripts. [cjh] Call preference hooks in the scope of the preference (vlukashov (at) parallels (dot) com, Bug #7445). [jan] Fix resuming synchronization session on server farms (adrieder@sbox.tugraz.at, Bug #7394). [jan] Fix synchronization of tasks with many items (adrieder@sbox.tugraz.at, Bug #7395). [mms] Upgrade prototype.js to v1.6.0.3. [jwm] Fix regression: SOAP wsdl/disco shouldn't require authorization.
2008-10-12Update to 3.3adrianp3-25/+73
---- v3.3 ---- [jan] Fix synchronization issues with Blackberry clients (bug 6949). [mms] Fix setting the horde user when using application authentication with realms (bug 6749). [jan] Fix user name conversion with user hooks in the permissions interfaces (bug 6371). [jan] Provide all settings for the read server in split SQL configuration (Request #7024). [jan] Improve HTML to text filter. [mjr] Hierarchical SQL Share driver now correctly removes all children when removing a share (Bug: 7347). [mjr] Fix an issue with various date/time fields in horde form that was causing erroneous validation errors. [cjh] Sign parameters to go.php with an HMAC based on a new secret key configuration value, to prevent using go.php as an open referrer. [cjh] Make logout tokens only valid for a configurable length of time. -------- v3.3-RC1 -------- [mms] Fix garbage collection handling on SQL session handler backends. [mjr] Change MDB2 sequence names to 'id' in SQL share driver (bug 7240). [cjh] When a URL is supplied for pass-through after logging in, go to that URL in mobile browsers instead of going to the mobile portal (bug 6332). [mms] Memcache session handler no longer writes data with a lifetime. [cjh] Add DIMP to the horde LDAP OIDs and hordePerson objectclass (bug 7243). [mms] Update FCKeditor to v2.6.3. [jan] Use global mailer configuration when sending alarm emails (adrieder@sbox.tugraz.at, bug 7058). [jan] Reset background colors when resetting the category form (bug 7226). [jan] Improve Funambol contacts support (Requests #7099, #7100). [jan] Correctly parse GEO tags in vCard 2.1 data (bug 6563). [jan] Remove Horde portal link from application menus (bug 7221). [cjh] Create a driver for signups, allowing backends other than DataTree (Duck <duck@obala.net>, Request #7161). [jan] Fix displaying images with the image form field. [mjr] Fix issue with hierarchical SQL share driver that caused permissons to erroneously be denied when the share contained group permissions and was instantiated by a listShares call. [mjr] Fix issue with hierarchical SQL share driver that caused any child shares to be orphaned when the parent share was moved in the hierarchy. [mjr] Fix issue with SQL share drivers that was causing permission checks to fail under certain conditions by no longer explicitly storing owner permissions in the Perms backend. [cjh] Fix overwriting a variable in the tableset_html VarRenderer (Paul Roy <proy@corom.ca>, bug 7120). [mms] Fix MIME encoding when using the ISO-2022-JP charset (bug 1621). [jan] Fix SQL Share driver not using the correct database when using different databases in Horde applications (bug 6997). [cjh] Fix SQL portability in Share_sql driver (bug 7084). [jan] Fix synchronizing large amounts of data split across several SyncML messages. [jan] Add Basque translation (Euskal Herriko Unibertsitatea EHU/UPV <xabier.arrieta@ehu.es>). [cjh] Fix Horde_Lock::getLockInfo (duck@obala.net, Bub #7046). [cjh] Fix SQL portability in Group_sql driver (bug 7075). [jan] Fix PAM authentication driver, but also mark it as deprecated (bug 6982). [mjr] Fix issue with native SQL Share driver that caused filtering shares by attributes to fail. [jan] Fix synchronization of event alarms with Funambol clients (bug 7003). [jan] Correctly detect Funambol clients on Blackberry devices (bug 6995). [mjr] Remove all user application permissions and group memberships from storage when removing the user from the system (Bug: 6999) [cjh] Call the postauthenticate hook in Auth::setAuth(), and allow the postauthenticate hook to cause setAuth() to fail. Allows postauthenticate to fire on any event, including transparent authentication, that could result in a user being successfully logged in. [jan] Improve attribute support and charset conversion in vCard viewer. [jan] Show photos in vCard object if provided with an URL. [mjr] Remove permissions from storage also when removing a share. [jan] Add Horde_Form fields for string arrays and PGP and S/MIME keys. [jan] Only show Add Permission icons in permissions interface where adding them is possible. [mjr] Fix issue in Horde_Image that was causing erratic results when cropping images. [jan] Fix validation of phone fields marked as required (bug 6948). [mms] Fix quoting periods in display part of e-mail address (bug 6899). [mms] Fix error checking when parsing an undisclosed recipients mail header and using an older version of PEAR::Mail (bug 6930). [jan] Return to portal after editing or deleting blocks directly from there.
2008-09-10Update to 3.2.2adrianp2-7/+6
[jan] SECURITY: Fix unescaped output in the MIME attachment linking. [jan] SECURITY: Add another check to the XSS filter.
2008-07-08Add DEPENDS on a few new PEAR packages to fix PR 39102adrianp1-1/+4
PKGREVISION++
2008-06-17The major changes compared to the Horde version H3 (3.2.1) are:adrianp3-24/+16
* Escape item names in the object browser. * Select db before queries in MySQL SessionHandler. * Format messages sent through MIME_Mail in flowed text format. * Fixes for SQL shares with split read/write databases, and various fixes for hierarchical shares. * Workaround broken IE behavior when downloading files with 8-bit filenames. * Fix storing of unlocked preferences set by hooks. * Allow Horde memcache driver to use UNIX sockets. * Fix parsing of addresses in headers when the RFC 2047-encoded personal part of the address contains address list delimiters. * Fix generation of unique keys in configuration for machines too fast for microtime(). * Added group driver for Kolab. * Added IMAP based preferences driver for Kolab. * Fix missing timestamp variable in Horde SQL cache driver. * Fix over-zealous preference caching when preferences are requested for a different user. * Fix issue in Horde_Image that caused errors when performing certain image operations immediately after an image had been cropped when using the ImageMagick driver. The full list of changes (from version 3.2) can be viewed here: http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.392&r2=1.515.2.413&ty=h
2008-05-26Horde version 3.2 is a major upgrade in the 3.x release series, including theseadrianp4-173/+2610
enhancements: * Stable synchronization support through integrated SyncML server. * A new Alarm system that can send email alarms, generate popup or inline notifications, and play sounds for events in any Horde application. * Support for separate read and write databases, and improved useability when the database is unavailable. * Improved performance, through caching and native SQL drivers for shares, groups, and permissions; faster DataTree queries, and smarter use of session data. * The administrator can disable users' ability to change permissions on their Shares. * Two slick new themes, Tango Blue and Silver Surfer. * WCAG 1.0 Priority 2/Section 508 accessibility guidelines compliance. * Full Kolab webclient support. * Improved JavaScript code including more caching, JSON support, new spell checking and color picking widgets, replacing htmlarea with xinha, and dynamic portal updates. * Help is now searchable and has a tree view for easy organization and exploration of help topics. * Wider memcache support and easier memcache configuration, including connection pooling and multiple memcache servers. * A more complete WebDAV server. * "Drop-in" configuration support for applications through config/registry.d/. * Many additional hooks, for performing actions on preference value changes, and after loading an application. * and much, much more.
2008-05-26Second round of explicit pax dependencies. As reminded by tnn@,joerg1-2/+4
many packages used to use ${PAX}. Use the common way of directly calling pax, it is created as tool after all.
2008-03-08Bump to 3.1.7adrianp2-6/+6
Major changes compared to Horde 3.1.6 are: * Fix arbitrary file inclusion through abuse of the theme preference.
2008-01-10Major changes compared to Horde 3.1.5 are:adrianp2-6/+6
* Fixed privilege escalation in the Horde API. * Improved XSS filtering. * Fixed locked portal blocks. * Further improved webroot detection. * Updated Japanese translation.
2007-11-15------adrianp3-10/+17
v3.1.5 ------ [cjh] Fix identity javascript when some fields are disabled (veikko@immonen@otaverkko.fi, Bug 5595). [cjh] Disable the Turkish locale if using PHP 5 (see http://bugs.php.net/bug.php?id=35050). [jan] Improved webroot detection (Request 4126). [jan] Fix selecting the language on the login screen (Bug 5098). [jan] Fix searching for single quotes in email headers (qa@cpanel.net, Bug 4854). [jan] Fix portal layouts with more than one horizontally expanded block per row.
2007-07-04Make it easier to build and install packages "unprivileged", wherejlam1-2/+2
the owner of all installed files is a non-root user. This change affects most packages that require special users or groups by making them use the specified unprivileged user and group instead. (1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to unprivileged.mk. These two variables are lists of other bmake variables that define package-specific users and groups. Packages that have user-settable variables for users and groups, e.g. apache and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP}, etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER} and ${UNPRIVILEGED_GROUP}. (2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
2007-03-18Update to 3.1.4adrianp3-16/+14
------ v3.1.4 ------ [jan] SECURITY: Correctly quote file names in cleanup script for temporary files. [jan] Fix RPC authentication on CGI SAPIs. [jan] Detect unencrypted PGP messages. ---------- v3.1.4-RC1 ---------- [jan] SECURITY: Fix an XSS vulnerability in the language selection. [jan] Complete Cyrus virtual domain support in cyrsql driver (Vilius Sumskas <vilius@lnk.lt>, Request #4967). [jan] Add option whether to strip domains from usernames in the account block (Request #4955). [jan] Fix email lists not being validated under certain conditions (Bug #4834). [cjh] Add a REST-ful preferences interface. [cjh] Faster DataTree-to-SQL History migration script (josh@endries.org, Request #4732). [cjh] Improved automatic webroot detection (Ben Klang, Request #4126). [cjh] Rewrite and fix the OCI8 SessionHandler (Bug #3452). [cjh] Allow signup hooks to override the user_name and password fields (thomas@gelf.net, Request #2904). [cjh] Fix creation of mailbox quotas by the Auth_cyrus driver (pascal@vmfacility.fr, Bug #4678). [cjh] Add "Save and Finish" to the share edit window (webmgr@muskingum.edu, Request #4307). [cjh] Let mailto: and anchor (#) links through Horde::externalUrl (Bug #3079). [cjh] Add smbclient version of the SMB Auth class (larry@wimble.biz, Request #4338). [cjh] Remove problematic "data descriptor" segment from generated ZIP files (reitsma@denison.edu, Bug #4670). [cjh] Strip accesskeys from menu tooltips when only showing icons (Bug #4667). [jan] Fix saving files in the root directory of an SQL VFS backend (Bug #4652, Ben Klang <ben@alkaloid.net>). [jan] Fix displaying all maintenance tasks to be confirmed at once (Bug #4377). [cjh] Fix return format of DataTree_null::getByAttributes() (thomas.jarosch@intra2net.com, Bug #4651). [jan] Support departments in vCard's ORG properties (martin@matuska.org, Request #4285). [cjh] Rename Auth_sasl backend to Auth_peclsasl to avoid conflicts with PEAR's Auth_SASL (Bug #4547). [cjh] Implement handling of vTimezones in iCalendar data (Carl Thompson <lists-horde@carlthompson.net>, Bug #4399). [cjh] keybindings.js now works with Safari/KHTML. [jan] Avoid recursive folder creation when sharing Kolab folders (michael.sheldon@credativ.de, Bug #4325). [jan] Add Kolab specific account block driver to support special Kolab users (mzizka@hotmail.com, Request: #4119). [mms] Only dim below the last signature line of input text in the dimsignature Text_Filter driver.
2006-08-20Fix a PLIST bug pointed out by ghen@adrianp2-2/+5
Bump PKGREVISON
2006-08-17Update to 3.1.3adrianp3-9/+9
Major changes compared to Horde 3.1.2 are: * Security Fixes - Closed an XSS problem in index.php and improved protection against phishing attempts. * Bugfixes and improvements - Added Kolab group ACL support. - Improved import of date and time fields. - Fixed synchronization support. - Updated Catalan, German and Slovenian translations. The full list of changes (from version 3.1.2) can be viewed here: http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.252&r2=1.515.2.261&ty=h
2006-07-13Update Makefile missed in 3.1.2 updateadrianp1-5/+3
2006-07-13Update to 3.1.2adrianp4-79/+13
Major changes compared to Horde 3.1.1 are: * Security Fixes - Closed XSS problems in dereferrer (IE only), help viewer and problem reporting screen. - Removed unused image proxy code from dereferrer. * Bugfixes and improvements - Added configuration option to disable GET-based sessions. - Added Oracle and generic SQL upgrade scripts. - Improved default charset support. - Improved API and RPC interface. - Fixed the preference cache. The full list of changes (from version 3.1.1) can be viewed here: http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.231&r2=1.515.2.252&ty=h
2006-06-16Bump to 3.1.1nb2 to address recent XSS issue (patches from Horde CVS)adrianp10-397/+1728
2006-06-02Rename all PHP 4 packages to php4-*, all PHP 5 packages to php5-*,joerg1-5/+7
all PEAR packages to php?-pear-* and all Apache packages to ap13-* or ap2-* respectively. Add new variables to simplify the Makefile handling. Add CONFLICTS on the old names. Reset revisions of bumped packages. ap-php will now depend on the default Apache and PHP version. All programs using it have an implicit option of the Apache version as well. OK from jlam@ and adrianp@.
2006-05-28Add PHP_VERSIONS_ACCEPTED=4 as this does not work with PHP5 (from joerg@)adrianp1-1/+3
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg1-1/+2
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-11-25Update horde to 2.2.9adrianp2-8/+7
From the CHANGES: > Changes in this release: > * Fixed a potential XSS vulnerability.
2005-08-19Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMSjlam1-8/+8
as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.