summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2011-05-27Since the PLIST has changed minimally, bump the nb version.hauke1-1/+2
2011-05-27The specified distfile, as identified by the distinfo checksum andhauke2-5/+6
mirrored by NetBSD.org, had completely hosed file permissions; plus, it differed in size (but not version) from the distfile available from the sourceforge project site. Since the latter actually works, I updated the checksum to use it.
2011-05-27Update ruby-httpclient to 2.2.0.2.obache2-6/+10
(temporary disable RI/RDOC, rise error with ruby18). * restore webmock compatibility * keyword_argument should accept nil as a value
2011-05-26Security update to 3.1.3.morr2-6/+6
* Various security hardening by Alexander Concha. * Taxonomy query hardening by John Lamansky. * Prevent sniffing out user names of non-authors by using canonical redirects. Props Verónica Valeros. * Media security fixes by Richard Lundeen of Microsoft, Jesse Ou of Microsoft, and Microsoft Vulnerability Research. * Improves file upload security on hosts with dangerous security settings. * Cleans up old WordPress import files if the import does not finish. * Introduce "clickjacking" protection in modern browsers on admin and login pages.
2011-05-26Add ruby-jekyll.minskim1-1/+2
2011-05-26Import Jekyll as www/ruby-jekyll.minskim4-0/+129
Jekyll is a simple, blog aware, static site generator. It takes a template directory (representing the raw form of a website), runs it through Textile or Markdown and Liquid converters, and spits out a complete, static website suitable for serving with Apache or your favorite web server. This is also the engine behind GitHub Pages, which you can use to host your project's page or blog right here from GitHub.
2011-05-25Update www/p5-CGI to 3.54gls3-9/+7
Upstream changes: Version 3.54, Apr 28, 2011 No code changes [INTERNALS] - Address test failures in t/tmpdir.t, thanks to Niko Tyni. Some tests here are failing on some platforms and have been marked as TODO. Version 3.53, Apr 25, 2011 [NEW FEATURES] - The DELETE HTTP verb is now supported. (RT#52614, James Robson, Eduardo Ari#o de la Rubia) [INTERNALS] - Correct t/tmpdir.t MANIFEST entry. (RT#64949) - Update minimum required Perl version to be Perl 5.8.1, which has been out since 2003. This allows us to drop some hacks and exceptions (Mark Stosberg) Version 3.52, Jan 24, 2011 [DOCUMENTATION] - The documentation for multi-line header handling was been updated to reflect the changes in 3.51. (Mark Stosberg, ntyni@iki.fi) [INTERNALS] - Add missing t/tmpfile.t file. (RT#64949) - Fix warning in t/cookie.t (RT#64570, Chris Williams, Rainer Tammer, Mark Stosberg) - Fixed logic bug in t/multipart_init.t (RT#64261, Niko Tyni) Version 3.51, Jan 5, 2011 [NEW FEATURES] - A new option to set $CGI::Carp::TO_BROWSER = 0, allows you to explicitly exclude a particular scope from triggering printing to the browser when fatatlsToBrowser is set. (RT#62783, Thanks to papowell) - The <script> tag now supports the "charset" attribute. (RT#62907, Thanks to Fabrice Metge) - In CGI::Cookie, "Max-Age" is now supported for better spec compliance. (Mark Stosberg) [BUG FIXES] - Setting charset() now works for all content types, not just "text/*". (RT#57945, Thanks to Yanick and Gerv.) - support for user temporary directories ($HOME/tmp) was commented out in 2.61 but the documentation wasn't updated (Peter Gervai, Niko Tyni) - setting $CGITempFile::TMPDIRECTORY before loading CGI.pm has been working but undocumented since 3.12 (which listed it in Changes as $CGI::TMPDIRECTORY) (Peter Gervai, Niko Tyni) - unfortunately the previous change broke the runtime check for looking for a new temporary directory if the current one suddenly became unwritable (Peter Gervai, Niko Tyni) - A bug was fixed in CGI::Carp triggered by certain death cases in the BEGIN phase of parent classes. (RT#57224, Thanks to UNERA, Yanick Champoux, Mark Stosberg) - CGI::Cookie->new() now follows the documentation and returns undef if the -name and -value args aren't provided. This new behavior is also consistent with the docs and code of CGI::Simple::Cookie. (Mark Stosberg) - CGI::Cookie->parse() now trims leading and trailing whitespace from cookie elements as intended. The change also makes this part of the parsing identical to CGI::Simple::Cookie (Mark Stosberg) - Temp file handling was improved (RT#62762) [SECURITY] - Further improvements have been made to guard against newline injections in headers. (Thanks to Max Kanat-Alexander, Yanick Champoux, Mark Stosberg) [PERFORMANCE] - Make EBCDIC a compile-time constant so there's zero overhead (and less compiled code) in subroutines that test for it. (Tim Bunce) - If you just want to use CGI::Cookie, CGI.pm will no longer be loaded unless you call the bake() method, which requires it. (Mark Stosberg) [DOCUMENTATION] - quit referring to the <link> tag as being "rarely used". (Victor Sanders) - typo and whitespace fixes (RT#62785, thanks to scop@cpan.org) - The -dtd argument to start_html() is now documented (RT#60473, Thanks to giecrilj and steve@fisharerojo.org) - CGI::Carp doc are updated to reflect that it can work with mod_perl 2.0. - when creating a temporary file in the directory fails, the error message could indicate the root of the problem better (Peter Gervai, Niko Tyni) [INTERNALS] - Re-fixing https test in http.t. (RT#54768, thanks to SPROUT) - param_fetch no longer triggers a warning when called with no arguments (ysth, Mark Stosberg) Version 3.50, Nov 8, 2010 [SECURITY] 1. The MIME boundary in multipart_init is now random. Thanks to Byron Jones, Masahiro Yamada, Reed Loden, and Mark Stosberg 2. Further improvements to handling of newlines embedded in header values. An exception is thrown if header values contain invalid newlines. Thanks to Michal Zalewski, Max Kanat-Alexander, Yanick Champoux, Lincoln Stein, Fr#d#ric Buclin and Mark Stosberg [DOCUMENTATION] 1. Correcting/clarifying documentation for param_fetch(). Thanks to Ren#e B#cker. (RT#59132) [INTERNALS] 1. Fixing https test in http.t. (RT#54768) 2. Tests were added for multipart_init(). Thanks to Mark Stosberg and CGI::Simple.
2011-05-22Update "apache22" package to version 2.2.19. Changes since version 2.2.18:tron2-6/+6
- Revert ABI breakage in 2.2.18 caused by the function signature change of ap_unescape_url_keep2f(). This release restores the signature from 2.2.17 and prior, and introduces ap_unescape_url_keep2f_ex(). [Eric Covener]
2011-05-22Add ruby-liquid.minskim1-1/+2
2011-05-22Import ruby19-liquid-2.2.2 as www/ruby-liquid.minskim4-0/+55
Liquid is a Ruby library for rendering safe templates which cannot affect the security of the server they are rendered on.
2011-05-21Finish ap-geoip2 move.wiz1-2/+2
2011-05-20I forgot to remove unused DIST_SUBDIR.taca1-3/+1
2011-05-20reaming ap-mod_geoip2 to ap-geoip2mspo4-0/+38
Apache module to look up the IP address of the client end user in the MaxMind geoip database
2011-05-20renaming ap-mod_geoip2 to ap-geoip2mspo4-38/+0
2011-05-19Update contao29-translations package to 20110518.taca3-13/+12
Update Bulgarian and French language files.
2011-05-19Add tail / to HOMEPAGE.obache1-2/+2
2011-05-19Change MASTER_SITES subdir to standard location.obache1-2/+2
2011-05-19ap-mod_geoip2 has been moved to pkgsrcmspo1-1/+2
2011-05-18Update contao29 package to 2.9.5.taca4-26/+7
Version 2.9.5 (2011-05-18) -------------------------- - Updated: updated TCPDF to version 5.9.061 (#2929) - Added: IE9 compatibility - Added: added the Swedish editArea translation (#3016) - Fixed: the code editor did not show up in the file manager (#2922) - Fixed: the RSS reader did not parse HTML code correctly (#2918) - Fixed: not all option callbacks worked correctly in override multiple mode (#2976) - Fixed: the textarea widget did not support the readonly attribute (#2997) - Fixed: the personal data modules did not handle checkbox fields (#3063) - Fixed some minor issues
2011-05-18add and enable several perl modules needed to support databases/koha. PR ↵dmcmahill1-1/+5
pkg/43929
2011-05-18Initial import of www/p5-HTTP-OAI version 3.24dmcmahill3-0/+45
This package was submited as part of PR pkg/43929 which adds the Koha Integrated Library System submitted by Edgar Fuß ------------------------------------- HTTP::OAI is a stub module. HTTP::OAI::Harvester is the harvesting front-end in the OAI-PERL library. To harvest from an OAI-PMH compliant repository create an HTTP::OAI::Harvester object using the baseURL option and then call OAI-PMH methods to request data from the repository. To handle version 1.0/1.1 repositories automatically you must request Identify() first. It is recommended that you request an Identify from the Repository and use the repository() method to update the Identify object used by the harvester. When making OAI requests the underlying HTTP::OAI::UserAgent module will take care of automatic redirection (http code 302) and retry-after (http code 503). OAI-PMH flow control (i.e. resumption tokens) is handled transparently by HTTP::OAI::Response.
2011-05-18Initial import of www/p5-HTML-Template-Pro version 0.9504dmcmahill3-0/+42
This package was submited as part of PR pkg/43929 which adds the Koha Integrated Library System submitted by Edgar Fuß ------------------------------------- Original HTML::Template is written by Sam Tregar, sam@tregar.com with contributions of many people mentioned there. Their efforts caused HTML::Template to be mature html tempate engine which separate perl code and html design. Yet powerful, HTML::Template is slow, especially if mod_perl isn't available or in case of disk usage and memory limitations. HTML::Template::Pro is a fast lightweight C/Perl+XS reimplementation of HTML::Template (as of 2.9) and HTML::Template::Expr (as of 0.0.7). It is not intended to be a complete replacement, but to be a fast implementation of HTML::Template if you don't need quering, the extended facility of HTML::Template. Designed for heavy upload, resource limitations, abcence of mod_perl. HTML::Template::Pro has complete support of filters and HTML::Template::Expr's tag EXPR="<expression>", including user-defined functions and construction <TMPL_INCLUDE EXPR="...">.
2011-05-18Initial import of www/p5-CGI-Session-Serialize-yaml version 4.26dmcmahill3-0/+36
This package was submited as part of PR pkg/43929 which adds the Koha Integrated Library System submitted by Edgar Fuß ------------------------------------- This library can be used by CGI::Session to serialize session data. It uses YAML, or the faster C implementation, YAML::Syck if it is available. YAML serializers exist not just for Perl but also other dynamic languages, such as PHP, Python, and Ruby, so storing session data in this format makes it easy to share session data across different languages. YAML is made to be friendly for humans to parse as well as other computer languages. It creates a format that is easier to read than the default serializer.
2011-05-18Initial import of www/p5-CGI-Session-Driver-memcached version 0.04dmcmahill3-0/+28
This package was submited as part of PR pkg/43929 which adds the Koha Integrated Library System submitted by Edgar Fuß ------------------------------------- CGI::Session::Driver::memcached is CGI::Session driver for memcached.
2011-05-18Apache module to look up the IP address of the client end user inmspo4-0/+38
the MaxMind geoip database
2011-05-16Update php-apc pacakge to 3.1.9.taca2-6/+6
3.1.9 (stable) - Fix regression introduced in 3.1.8 (#22687) 3.1.8 (stable) - Windows read-write locks support on Windows XP or later and Windows Win7 or later (use php_apc-xp.dll or php_apc-win7.dll) - Fix variable type check in user cache update - Make warnings that user cannot do anything about debug messages - Fixed bug #21400 (Minor memory leak in MINFO) - Fixed bug #18890: Ensure that --enable-apc-debug=no disables debug mode. - Fixed bug #19459: check for expiry while looping through the iterator slots 3.1.7 (beta) - pthread read-write locks support - apc.serializer hooks, export apc_serializer.h as an API - Fix regression bug #20529: Look up files in CWD - Pool allocator fixes for large allocations - trunk compat fixes (Kalle) - ZTS fixes (Pierre, Hirokawa) - Readability and warning fixes (Pierre, Kalle)
2011-05-14Update zope211 package to 2.11.8 (Zope 2.11.8)taca6-26/+117
Zope 2.11.8 (2011/02/04) Bugs fixed - Prevent publication of acquired attributes, where the acquired object does not have a docstring. https://bugs.launchpad.net/zope2/+bug/713253/ Zope 2.11.7 (2010/09/01) Bugs Fixed - Prevent uncaught exceptions from killing ZServer worker threads. https://bugs.launchpad.net/zope2/+bug/627988 - Ensure that mailhosts which share a queue directory do not double- deliver mails, by sharing the thread which processes emails for that directory. https://bugs.launchpad.net/zope2/+bug/574286 - Process "evil" JSON cookies which contain double quotes in violation of RFC 2965 / 2616. https://bugs.launchpad.net/zope2/+bug/563229 - Ensure that Acquistion wrapper classes always have a ``__getnewargs__`` method, even if it is not provided by the underlying ExtensionClass. - Fix the ``tp_name`` of the ImplicitAcquisitionWrapper and ExplicitAcquisitionWrapper to match their Python visible names and thus have a correct ``__name__``. - Expand the ``tp_name`` of Acquisition's extension types to hold the fully qualified name. This ensures classes have their ``__module__`` set correctly. - Updated 'pytz' external to point to '2010b' version. - Protect ZCTextIndex's clear method against storing Acquisition wrappers. - LP #195761: fixed ZMI XML export / import. - MailHost should fall back to HELO when EHLO fails. Zope 2.11.6 (2010/01/12) Bugs Fixed - LP #491224: proper escaping of rendered error message - Also look for ZEXP imports within the clienthome directory. This provides a place to put imports that won't be clobbered by buildout in a buildout-based Zope instance. - LP #143444: add labels to checkboxes / radio buttons on import / export form. - Fixed improper handling of IF_MODIFIED_SINCE header inside Five/browser/resource.py Zope 2.11.5 (2009/12/22) Bugs Fixed - LP #490514: preserve tainting when calling into DTML from ZPT. - LP #360761 (backported from Acquisition trunk): fix iteration proxy to pass `self` acquisition-wrapped into `__iter__` and `__getitem__`. - LP #414757 (backported from Zope trunk): don't emit a IEndRequestEvent when clearing a cloned request. - updated to ZODB 3.8.4 Zope 2.11.4 (2009/08/06) Restructuring - Moved exception MountedStorageError from ZODB.POSExceptions to Products.TemporaryFolder.mount (now its only client). - LP #253362: Moved Zope2-specific module, ZODB/Mount.py, to Products/TemporaryFolder/mount.py (its only client is Products/TemporaryFolder/TemporaryFolder.py). - Removed spurious import-time dependencies from Products/ZODBMountPoint/MountedObject.py. Bugs Fixed - Fixed vulnerabilities in the ZEO network protocol affecting ZEO storage servers. Zope 2.11.3 (2009/05/04) Features added - SiteErrorLog now includes the entry id in the information copied to the event log. This allowes you to correlate a user error report with the event log after a restart, or let's you find the REQUEST information in the SiteErrorLog when looking at a traceback in the event log. Restructuring - Updated to match all new versions from the yet-unreleased Zope 3.4.1 release (`http://svn.zope.org/zope.release/branches/3.4/ releases/controlled-packages.cfg?rev=99659`). - Updated to include all new versions from the final Zope 3.4.0 release (http://download.zope.org/zope3.4/3.4.0/). - Added 'InitializeClass' alias in 'App.class_init' to ease migration. In Zope 2.12 it will be recommended to import 'InitializeClass' from 'App.class_init' instead of 'Globals'. - Moved 'ApplicationDefaultPermissions' from 'App.class_init' to 'AccessControl.Permissions', in order to break an import cycle in third-party code which avoids imports from 'Globals.' Left the class importable from its old location without deprecation. - configure script: setting ZOPE_VERS to '2.11' - Products.PluginIndexes.PathIndex: backported doc fixes / optimizations from trunk (and ExtendedPathIndex). - Updated 'pytz' from '2007f' to '2008i'. - Moved svn:externals for 'mechanize', 'ClientPath', and 'pytz' to versions managed outside the Zope3 trunk. - Testing.ZopeTestCase: Remove quota argument from DemoStorage calls in preparation for ZODB 3.9. Bugs Fixed - Launchpad #373299: Removed bogus string exception in OFS.CopySupport. - ZPublisher response.setBody: don't append Accept-Encoding to Vary header if it is already present - this can make cache configuration difficult. (merged 99493) - Launchpad #267834: proper separation of HTTP header fields using CRLF as requested by RFC 2616. (merged 90980, 92625) - Launchpad #348223: optimize catalog query by breaking out early from loop over indexes if the result set is already empty. - "Permission tab": correct wrong form parameter for the user-permission report - Launchpad #290254, DateTime/DateTime.py: added '__setstate__' to cope with old pickles missing a '_micros' attribute; Python's pickling support was creating a new instance, *with* a '_micros' attribute, but not clearing that attribute before updating the instance dict with the unpickled state. - Launchpad #332168, Shared/DC/RDBMS/Connection.py: do not expose DB connection strings through exceptions - Launchpad #324876: tighened regex for detecting the charset from a meta-equiv header - Launchpad #174705: ensure that the error info object exposed to a 'tal:on_error' handler has attributes visible to restricted code. - Acquisition wrappers now correctly proxy __iter__.
2011-05-14Update zope210 pacakge to 2.10.13 (Zope 2.10.13).taca4-1177/+604
Zope 2.10.13 (2011/02/04) Bugs fixed - Prevent publication of acquired attributes, where the acquired object does not have a docstring. https://bugs.launchpad.net/zope2/+bug/713253/ Zope 2.10.12 (2010/09/01) Bugs fixed - Prevent uncaught exceptions from killing ZServer worker threads. https://bugs.launchpad.net/zope2/+bug/627988 - Updated 'pytz' external to point to '2010b' version (not via Zope3). - Protect ZCTextIndex's clear method against storing Acquisition wrappers. - LP #195761: fixed ZMI XML export / import and restored it to the UI. Zope 2.10.11 (2010/01/12) Bugs fixed - LP #491224: proper escaping of rendered error message - Also look for ZEXP imports within the clienthome directory. This provides a place to put imports that won't be clobbered by buildout in a buildout-based Zope instance. - LP #143444: add labels to checkboxes / radio buttons on import / export form. - fixed improper usage of the IF_MODIFIED_SINCE header inside Five/browser/resource.py (updated to Five 1.5.9) Zope 2.10.10 (2009/12/22) Features added - Testing/custom_zodb.py: added support use a different storage other than DemoStorage. A dedicated FileStorage can be mount by setting the $TEST_FILESTORAGE environment variable to a custom Data.fs file. A ZEO server can be configured using the $TEST_ZEO_HOST and $TEST_ZEO_PORT environment variables. This new functionality allows us to use the standard Zope testrunner for writing and running tests against existing Zope installations. Bugs fixed - LP #490514: preserve tainting when calling into DTML from ZPT. - LP #360761 (backported from Acquisition trunk): fix iteration proxy to pass `self` acquisition-wrapped into `__iter__` and `__getitem__`. - LP #414757 (backported from Zope trunk): don't emit a IEndRequestEvent when clearing a cloned request. Zope 2.10.9 (2009/08/06) Restructuring - Moved exception MountedStorageError from ZODB.POSExceptions to Products.TemporaryFolder.mount (now its only client). - LP #253362: Moved Zope2-specific module, ZODB/Mount.py, to Products/TemporaryFolder/mount.py (its only client is Products/TemporaryFolder/TemporaryFolder.py). - Removed spurious import-time dependencies from Products/ZODBMountPoint/MountedObject.py. Bugs fixed - Fixed vulnerabilities in the ZEO network protocol affecting ZEO storage servers. Zope 2.10.8 (2009/05/04) Features added - SiteErrorLog now includes the entry id in the information copied to the event log. This allowes you to correlate a user error report with the event log after a restart, or let's you find the REQUEST information in the SiteErrorLog when looking at a traceback in the event log. Restructuring - Added 'InitializeClass' alias in 'App.class_init' to ease migration. In Zope 2.12 it will be recommended to import 'InitializeClass' from 'App.class_init' instead of 'Globals'. - Moved 'ApplicationDefaultPermissions' from 'App.class_init' to 'AccessControl.Permissions', in order to break an import cycle in third-party code which avoids imports from 'Globals.' Left the class importable from its old location without deprecation. Bugs fixed - Launchpad #373299: Removed bogus string exception in OFS.CopySupport. - ZPublisher response.setBody: don't append Accept-Encoding to Vary header if it is already present - this can make cache configuration difficult. (merged 99493) - Launchpad #267834: proper separation of HTTP header fields using CRLF as requested by RFC 2616. (merged 90980, 92625) - Launchpad #348223: optimize catalog query by breaking out early from loop over indexes if the result set is already empty. - Launchpad ##332168: Connection.py: do not expose DB connection strings through exceptions - LP/#143873: Fixed problems when no HTTP_ACCEPT_CHARSET is in the request. This required an update of zope.publisher to 3.3.3. - LP/#324876: tighened regex for detecting the charset from a meta-equiv header - Acquisition wrappers now correctly proxy __iter__. - Products.PluginIndexes.PathIndex: backported doc fixes / optimizations from trunk (and ExtendedPathIndex). - Launchpad #174705: ensure that the error info object exposed to a 'tal:on_error' handler has attributes visible to restricted code.
2011-05-14Update zope29 package to 2.9.10.taca3-12/+26
Zope 2.9.12 (2010/01/12) - LP #490514: preserve tainting when calling into DTML from ZPT. - LP #491224: proper escaping of rendered error message Zope 2.9.11 (2009/08/06) Bugs fixed - Launchpad #373299: Removed bogus string exception in OFS.CopySupport. - Launchpad ##332168: Connection.py: do not expose DB connection strings through exceptions - Fixed vulnerabilities in the ZEO network protocol affecting ZEO storage servers.
2011-05-14Assume under ${WRKSRC} when relative path was used in REPLACE_PYTHON_DIRS.taca1-3/+4
2011-05-14Some clean up; no functional change.taca1-24/+14
* Remove ZOPE3 related descriptions which were never used. * Update commented out versions of Zope 2.12 and 2.13.
2011-05-12typolight's PKG_OPTIONS has removed.taca1-12/+0
2011-05-12Make translation files as the same owner as other TYPOlight's files.taca2-1/+17
Bump PKGREVISIION.
2011-05-12As contao29, drop typolight-livepdate option and make its functionalitytaca2-9/+4
default. Bump PKGREVISION.
2011-05-12contao's PKG_OPTIONS has removed.taca1-12/+0
2011-05-12Make translation files as the same owner as other Contao's files.taca2-1/+17
Bump PKGREVISIION.
2011-05-12Since extension repository is hevaly used in these days, maketaca2-16/+4
contao-liveupdate option's functionality default and drop the option itself. Bump PKGREVISIION.
2011-05-12Replaced ugly AWK with single SUBST_SEDadam1-20/+2
2011-05-12Update "apache22" package to version 2.2.18. Changes since version 2.2.17:tron3-17/+67
- Log an error for failures to read a chunk-size, and return 408 instead 413 when this is due to a read timeout. This change also fixes some cases of two error documents being sent in the response for the same scenario. [Eric Covener] Bug 49167 - core: Only log a 408 if it is no keepalive timeout. Bug 39785 [Ruediger Pluem, Mark Montague <markmont umich.edu>] - core: Treat timeout reading request as 408 error, not 400. Log 408 errors in access log as was done in Apache 1.3.x. Bug 39785 [Nobutaka Mantani <nobutaka nobutaka.org>, Stefan Fritsch, Dan Poirier] - Core HTTP: disable keepalive when the Client has sent Expect: 100-continue but we respond directly with a non-100 response. Keepalive here led to data from clients continuing being treated as a new request. Bug 47087. [Nick Kew] - htpasswd: Change the default algorithm for htpasswd to MD5 on all platforms. Crypt with its 8 character limit is not useful anymore; improve out of disk space handling (Bug 30877); print a warning if a password is truncated by crypt. [Stefan Fritsch] - mod_win32: Added shebang check for '! so that .vbs scripts work as CGI. Win32's cscript interpreter can only use a single quote as comment char. [Guenter Knauf] - configure: Fix htpasswd/htdbm libcrypt link errors with some newer linkers. [Stefan Fritsch] - MinGW build improvements. Bug 49535. [John Vandenberg <jayvdb gmail.com>, Jeff Trawick] - mod_ssl, ab: Support OpenSSL compiled without SSLv2 support. [Stefan Fritsch] - core: AllowEncodedSlashes new option NoDecode to allow encoded slashes in request URL path info but not decode them. Bug 35256, Bug 46830. [Dan Poirier] - mod_rewrite: Allow to unset environment variables. Bug 50746. [Rainer Jung] - suEXEC: Add Suexec directive to disable suEXEC without renaming the binary (Suexec Off), or force startup failure if suEXEC is required but not supported (Suexec On). [Jeff Trawick] - mod_proxy: Put the worker in error state if the SSL handshake with the backend fails. Bug 50332. [Daniel Ruggeri <DRuggeri primary.net>, Ruediger Pluem] - prefork: Update MPM state in children during a graceful restart. Allow the HTTP connection handling loop to terminate early during a graceful restart. Bug 41743. [Andrew Punch <andrew.punch 247realmedia.com>] - mod_ssl: Correctly read full lines in input filter when the line is incomplete during first read. Bug 50481. [Ruediger Pluem] - mod_autoindex: Merge IndexOptions from server to directory context when the directory has no mod_autoindex directives. Bug 47766. [Eric Covener] - mod_cache: Make sure that we never allow a 304 Not Modified response that we asked for to leak to the client should the 304 response be uncacheable. Bug 45341 [Graham Leggett] - mod_dav: Send 400 error if malformed Content-Range header is received for a put request (RFC 2616 14.16). Bug 49825. [Stefan Fritsch] - mod_userdir: Add merging of enable, disable, and filename arguments to UserDir directive, leaving enable/disable of userlists unmerged. Bug 44076 [Eric Covener] - core: Honor 'AcceptPathInfo OFF' during internal redirects, such as per-directory mod_rewrite substitutions. Bug 50349. [Eric Covener] - mod_cache: Check the request to determine whether we are allowed to return cached content at all, and respect a "Cache-Control: no-cache" header from a client. Previously, "no-cache" would behave like "max-age=0". [Graham Leggett] - mod_mem_cache: Add a debug msg when a streaming response exceeds MCacheMaxStreamingBuffer, since mod_cache will follow up with a scary 'memory allocation failed' debug message. Bug 49604. [Eric Covener] - proxy_connect: Don't give up in the middle of a CONNECT tunnel when the child process is starting to exit. Bug 50220. [Eric Covener]
2011-05-11Fix a bug in png handling using a patch from John Bowler <jbowler@acm.org>.wiz3-2/+48
Addresses PR 44940. Bump PKGREVISION for links-gui.
2011-05-11Added www/c-icap, www/c-icap-modules, www/squidclamavadam1-1/+4
2011-05-11SquidClamav is an antivirus for Squid proxy based on the Awards winnings ClamAvadam5-0/+80
anti-virus toolkit. Using it will help you securing your home or enterprise network web traffic. SquidClamav is the most efficient Squid Redirector and ICAP service antivirus tool for HTTP traffic available for free, it is written in C and can handle thousand of connections. The way to add more securing on your network for free is here. SquidClamav is build for speed and security in mind, it is first used and tested to secure a network with 2,500 and more users. It is also known to working fast with 15000+ users.
2011-05-11c-icap is an implementation of an ICAP server. It can be used with HTTP proxiesadam16-0/+348
that support the ICAP protocol to implement content adaptation and filtering services. Most of the commercial HTTP proxies must support the ICAP protocol. The open source Squid 3.x proxy server supports it.
2011-05-11Enabled ICAP client, for dependend packages to work.adam1-1/+3
2011-05-10update ruby-rails3 to 3.0.7; no change but version.taca1-4/+4
2011-05-10Update ruby-activeresource3 to 3.0.7; no change but version.taca1-4/+4
2011-05-10update ruby-actionpack3 to 3.0.7; no change but version.taca2-8/+8
2011-05-09Fix least privileges support on recent (snv_140+) OpenSolaris versions.fhajny3-2/+18
Bump PKGREVISION
2011-05-08Security update to 3.1.2.morr2-6/+6
* Fix a vulnerability that allowed Contributor-level users to improperly publish posts. * Fix user queries ordered by post count. * Fix multiple tag queries. * Prevent over-escaping of post titles when using Quick Edit for pages.
2011-05-08Update contao29-translations pacakge to 20110508.taca3-16/+16
Update Hungarian, Japanese and Lithuanian language files.