summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2015-10-26Pullup ticket #4845 - requested by tacabsiegert3-8/+18
www/drupal7: security fix Revisions pulled up: - www/drupal7/Makefile 1.34-1.35 - www/drupal7/PLIST 1.13 - www/drupal7/distinfo 1.27-1.28 --- Module Name: pkgsrc Committed By: wen Date: Sun Oct 18 03:30:53 UTC 2015 Modified Files: pkgsrc/www/drupal7: Makefile PLIST distinfo Log Message: Update to 7.40 Upstream changes: Drupal 7.40, 2015-10-14 ----------------------- - Made Drupal's code for parsing .info files run much faster and use much less memory. - Prevented drupal_http_request() from returning an error when it receives a 201 through 206 HTTP status code. - Added support for autoloading traits via the registry on sites running PHP 5.4 or higher. - Allowed the user-picture.tpl.php theme template to have HTML classes besides the default "user-picture" class printed in it (markup change). - Fixed the URL text filter to convert e-mail addresses with plus signs into mailto: links. - Added alternate text to file icons displayed by the File module, to improve accessibility (string change, and minor API addition to theme_file_icon()). - Changed one-time login link failure messages to be displayed as errors or warnings as appropriate, rather than as regular status messages (minor UI change and data structure change). - Changed the default settings.php configuration to exclude private files from the "404_fast_paths" behavior. - Changed the page that displays filter tips for a particular text format, for example filter/tips/full_html, to return "page not found" or "access denied" if the format does not exist or the user does not have access to it. This change adds a new menu item to the Filter module's hook_menu() entry (minor data structure change). - Added a new hook, hook_block_cid_parts_alter(), to allow modules to alter the cache keys used for caching a particular block. - Made drupal_set_message() display and return messages when "0" is passed in as the message to set. - Fixed non-functional "Files displayed by default" setting on file fields. - The "worker callback" provided in hook_cron_queue_info() and the "finished" callback specified during batch processing can now be any PHP callable instead of just functions. - Prevented drupal_set_time_limit() from decreasing the time limit in the case where the PHP maximum execution time is already unlimited. - Changed the default thousand marker for numeric fields from a space ("1 000") to nothing ("1000") (minor UI change: https://www.drupal.org/node/1388376). - Prevented malformed theme .info files (without a "name" key) from causing exceptions during menu rebuilds. If an .info file without a "name" key is found in a module or theme directory, Drupal will now use the module or theme's machine name as the display name instead. - Made the format column in the {date_format_locale} database table case-sensitive, to match the equivalent column in the {date_formats} table. - Fixed a bug in the Statistics module that caused JavaScript files attached to a node while it is being viewed to be omitted from the page. - Added an optional 'project:' prefix that can be added to dependencies in a module's .info file to indicate which project the dependency resides in (API addition: https://www.drupal.org/node/2299747). - Fixed various bugs that occurred after hooks were invoked early in the Drupal bootstrap and that caused module_implements() and drupal_alter() to cache an incomplete set of hook implementations for later use. - Set the X-Content-Type-Options header to "nosniff" when possible, to prevent certain web browsers from picking an unsafe MIME type. - Prevented the database API from executing multiple queries at once on MySQL, if the site's PHP version is new enough to do so. This is a secondary defense against SQL injection (API change: https://www.drupal.org/node/2463973). - Fixed a bug in the Drupal 6 to Drupal 7 upgrade path which caused the upgrade to fail when there were multiple file records pointing to the same file. - Numerous small bug fixes. - Numerous API documentation improvements. - Additional automated test coverage. --- Module Name: pkgsrc Committed By: taca Date: Thu Oct 22 09:59:44 UTC 2015 Modified Files: pkgsrc/www/drupal7: Makefile distinfo Log Message: Update drupal7 to 7.41. Drupal 7.41, 2015-10-21 ----------------------- - Fixed security issues (open redirect). See SA-CORE-2015-004.
2015-10-08Pullup ticket #4835 - requested by leotspz2-2/+19
www/webkit-gtk: build fix Revisions pulled up: - www/webkit-gtk/Makefile 1.99 - www/webkit-gtk/hacks.mk 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: leot Date: Mon Oct 5 16:25:30 UTC 2015 Modified Files: pkgsrc/www/webkit-gtk: Makefile Added Files: pkgsrc/www/webkit-gtk: hacks.mk Log Message: Add a workaround and fixes PR pkg/50284 forcing building webkit-gtk with - -march=i586 in order to avoid on i386 the "-latomic" flag when linking libwebkit2gtk-4.0.so. Bump PKGREVISION. Thanks joerg@, jperkin@ and tnn@ for various suggestions. To generate a diff of this commit: cvs rdiff -u -r1.98 -r1.99 pkgsrc/www/webkit-gtk/Makefile cvs rdiff -u -r0 -r1.1 pkgsrc/www/webkit-gtk/hacks.mk
2015-10-02Pullup ticket #4828 - requested by bouyerbsiegert3-3/+20
www/p5-HTML-StripScripts: build fix Revisions pulled up: - www/p5-HTML-StripScripts/Makefile 1.12 - www/p5-HTML-StripScripts/distinfo 1.3 - www/p5-HTML-StripScripts/patches/patch-StripScripts.pm 1.1 --- Module Name: pkgsrc Committed By: bouyer Date: Sat Sep 26 14:22:56 UTC 2015 Modified Files: pkgsrc/www/p5-HTML-StripScripts: Makefile distinfo Added Files: pkgsrc/www/p5-HTML-StripScripts/patches: patch-StripScripts.pm Log Message: Fix Bug/typo which causes a fatal error in perl 5.22
2015-10-02Pullup ticket #4827 - requested by ryoonbsiegert1-2/+2
www/firefox: build fix Revisions pulled up: - www/firefox/mozilla-common.mk 1.64 --- Module Name: pkgsrc Committed By: ryoon Date: Tue Sep 29 15:22:07 UTC 2015 Modified Files: pkgsrc/www/firefox: mozilla-common.mk Log Message: Fix build under NetBSD/i386.
2015-09-29Pullup ticket #4824 - requested by bouyerbsiegert2-4/+5
www/php-owncloud: documentation fix Revisions pulled up: - www/php-owncloud/MESSAGE 1.19 - www/php-owncloud/Makefile 1.55 --- Module Name: pkgsrc Committed By: bouyer Date: Sun Sep 27 19:42:57 UTC 2015 Modified Files: pkgsrc/www/php-owncloud: MESSAGE Makefile Log Message: owncloud wants pdo_mysql or pdo_pgsql bump PKGREVISION
2015-09-27Pullup ticket #4815 - requested by ryoonspz1-3/+3
www/firefox: build fix Revisions pulled up: - www/firefox/mozilla-common.mk 1.63 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: ryoon Date: Thu Sep 24 22:36:27 UTC 2015 Modified Files: pkgsrc/www/firefox: mozilla-common.mk Log Message: Fix NetBSD/i386 build. flag for c++ compiler is CXXFLAGS. To generate a diff of this commit: cvs rdiff -u -r1.62 -r1.63 pkgsrc/www/firefox/mozilla-common.mk
2015-09-24nginx*: Remove upload option.wiz3-22/+4
Not supported since 1.3.8 (we have 1.8.x and 1.9.x in pkgsrc). Reported by Timshel Knoll-Miller in PR 50272.
2015-09-23Update to 38.3.0ryoon2-270/+270
* Sync with firefox38-38.3.0.
2015-09-23Update to 38.3.0ryoon2-7/+7
Changelog: Fixed in Firefox ESR 38.3 2015-113 Memory safety errors in libGLES in the ANGLE graphics library 2015-112 Vulnerabilities found through code inspection 2015-111 Errors in the handling of CORS preflight request headers 2015-110 Dragging and dropping images exposes final URL after redirects 2015-106 Use-after-free while manipulating HTML media content 2015-105 Buffer overflow while decoding WebM video 2015-101 Buffer overflow in libvpx while parsing vp9 format video 2015-100 Arbitrary file manipulation by local user through Mozilla updater 2015-96 Miscellaneous memory safety hazards (rv:41.0 / rv:38.3)
2015-09-23Update to 41.0ryoon3-544/+450
* Sync with firefox-41.0.
2015-09-23Update to 41.0ryoon35-462/+295
Changelog: New Enhance IME support on Windows (Vista +) using TSF (Text Services Framework) New Ability to set a profile picture for your Firefox Account New Firefox Hello now includes instant messaging New SVG images can be used as favicons New Improved box-shadow rendering performance Changed WebRTC now requires perfect forward secrecy Changed WARP is disabled on Windows 7 Changed Updates to image decoding process Changed Support for running animations of 'transform' and 'opacity' on the compositor thread HTML5 MessageChannel and MessagePort API enabled by default HTML5 Added support for the transform-origin property on SVG elements HTML5 CSS Font Loading API enabled by default HTML5 Navigator.onLine now varies with actual internet connectivity (Windows and Mac OS X only) HTML5 Copy/Cut Web content from JavaScript to the OS clipboard with document.execCommand("cut"/"copy") HTML5 Implemented Cache API for querying named caches that are accessible Window, Worker, and ServiceWorker Developer Removed support for binary XPCOM components in extensions, use addon SDK "system/child_process" pipe mechanism for native binaries instead Developer Network requests can be exported in HAR format Developer Quickly add new CSS rule with New Rule button in the Inspector Developer Screenshot a node or element from markup view with the Screenshot Node context menu item Developer Copy element CSS rule declarations with the Copy Rule Declaration context menu item in the Inspector Developer Pseudo-Class panel in the Inspector Fixed Picture element does not react to resize/viewport changes Fixed Various security fixes Security fixes: Fixed in Firefox 41 2015-114 Information disclosure via the High Resolution Time API 2015-113 Memory safety errors in libGLES in the ANGLE graphics library 2015-112 Vulnerabilities found through code inspection 2015-111 Errors in the handling of CORS preflight request headers 2015-110 Dragging and dropping images exposes final URL after redirects 2015-109 JavaScript immutable property enforcement can be bypassed 2015-108 Scripted proxies can access inner window 2015-107 Out-of-bounds read during 2D canvas display on Linux 16-bit color depth systems 2015-106 Use-after-free while manipulating HTML media content 2015-105 Buffer overflow while decoding WebM video 2015-104 Use-after-free with shared workers and IndexedDB 2015-103 URL spoofing in reader mode 2015-102 Crash when using debugger with SavedStacks in JavaScript 2015-101 Buffer overflow in libvpx while parsing vp9 format video 2015-100 Arbitrary file manipulation by local user through Mozilla updater 2015-99 Site attribute spoofing on Android by pasting URL with unknown scheme 2015-98 Out of bounds read in QCMS library with ICC V4 profile attributes 2015-97 Memory leak in mozTCPSocket to servers 2015-96 Miscellaneous memory safety hazards (rv:41.0 / rv:38.3)
2015-09-23Quick fix for build problem with IP Filter 4.1.34 (NetBSD 6.1taca3-1/+53
and may be older). Tested on NetBSD 6_STABLE and 7,0_RC3.
2015-09-22NetSurf also depends on devel/gperf (it is just a build dependency that do notleot1-1/+2
affect binary package so no PKGREVISION bump). Noted by joerg@.
2015-09-22Update squid3 to 3.5.9, it is security fix release.taca2-6/+6
* SQUID-2015:3 Multiple Remote Denial of service issues in SSL/TLS processing These problems allow any trusted client or external server to perform a denial of service attack on the Squid service and all other services on the same machine. However, the bugs are exploitable only if you have configured a Squid-3.5 listening port with ssl-bump. The visible signs of these bugs are a Squid crash or high CPU usage. Skype is known to trigger the crash and/or a small amount of extra CPU use unintentionally. Malicious traffic is possible which could have severe effects. * Regression Bug 3618: ntlm_smb_lm_auth rejects correct passwords The SMB LanMan authentication helper in Squid-3.2 and later has been rejecting valid user credentials. Reminder: Use of this helper is deprecated. We strongly recommend against using it. LanMan authentication gives the illusion of transmitting NTLM protocol while actually transmitting username and password with crypto algorithms that can be decoded in real-time (this helper relies on that ability). The combination makes it overall less secure than even HTTP Basic authentication. * TLS: Support SNI on generated CONNECT after peek When Squid generates CONNECT requests it will now attempt to use the client SNI value if any is known. Note that SNI is found during an ssl_bump peek action, so will only be available on some generated CONNECT. Intercepted traffic will always begin with a raw-IP CONNECT message which must pass access controls and adaptations before ssl_bump peek is even considered. * Quieten UFS cache maintenance skipped warnings This resolves the log noise encountered since the 3.5.8 release when large caches are running a full (aka. 'DIRTY') cache_dir rebuild scan.
2015-09-22Update py-flask-login to 0.3.0.kleink3-8/+9
Version 0.3.0 ------------- Released on September 10th, 2015 - Fixes handling of X-Forward-For header. - Update to use SHA512 instead of MS5 for session identifier creation. - Fixes session creation for every view. - BREAKING: UTC used to set cookie duration. - BREAKING: Non-fresh logins now returns HTTP 401. - Support unicode user IDs in cookie. - Fixes user_logged_out signal invocation. - Support for per-Blueprint login views. - BREAKING: The `is_authenticated`, `is_active`, and `is_anonymous` members of the user class are now properties, not methods. Applications should update their user classes accordingly. - Various other improvements including documentation and code clean up.
2015-09-21Update to 2.35ryoon3-114/+114
* Sync with seamonkey-2.35.
2015-09-21Update to 2.35ryoon64-1098/+1805
* Remove unused PLIST.enigmail. Changelog: System Requirements, Installation and Uninstallation Before installing, make sure your computer meets the system requirements. SeaMonkey 2.35 will no longer offer to migrate your data from SeaMonkey 1.x or Mozilla 1.x at the first start after installation (bug 689437). In order to upgrade from such an old version, install the last SeaMonkey 2.0 release first, do the one-time profile upgrade, uninstall SeaMonkey 2.0 and then install your target release (e.g. this one). You can find more details about installation, profile data and uninstallation in our install and uninstall document. Extensions (Add-ons) and Themes Extensions installed under SeaMonkey 1.x are not migrated to SeaMonkey 2, and may not be compatible for reinstalling in this version due to major changes in our architecture. Please report any issues to the maintainer of the extension. Extensions and Themes for SeaMonkey 2.35 can be installed from the SeaMonkey Add-Ons website or the "Get Add-Ons" section in the Add-ons Manager. Extensions with binary components such as Lightning, Enigmail and HTML Validator only work on certain platforms (e.g. Windows). Furthermore they need to be adjusted for each new SeaMonkey release, which also means that an old version of such an add-on can break SeaMonkey if you disabled compatibility checking (which e.g. happens when you install the Add-on Compatibility Reporter add-on). For Lightning, please check the Stable Releases section on the Calendar Versions page. Alternatively check the Lightning add-on page (Development Channel at the bottom of the page). For Enigmail, please refer to the Enigmail Nightly Builds page. For HTML Validator you need to check whether the Firefox version that appears on SeaMonkey's about: page is listed on the 0.9x download page. Note that only Windows is supported at this time. SeaMonkey 2.29 dropped support for the legacy JavaScript Debugger interface (JSD1). Hence add-ons that relied on it, like the JavaScript Debugger (Venkman) that came bundled with SeaMonkey, or Firebug 1.x, have stopped working. While Venkman has been discontinued, Firebug can simply be upgraded to a more recent version (2.x) which supports the new JSD2 interface. If you are searching for a Venkman replacement (especially for debugging SeaMonkey itself or add-ons), have a look at the Tiny JavaScript Debugger add-on. Known Issues This list covers some of the known problems with SeaMonkey 2.35. Please read this before reporting any new bugs. The SSL 3.0 encryption protocol is disabled by default due to security concerns (bug 1076983). Legacy websites may still rely on it and will not work with the newer TLS 1.x protocols. SSL 3.0 support can be re-enabled in Preferences under Privacy & Security, SSL. Lightning does not work with SeaMonkey when icaljs is enabled, which it is by default (bug 1081534). As a workaround, disable icaljs by setting the calendar.icaljs pref to false in about:config. The Remember Passwords add-on breaks password handling. Please disable or uninstall this add-on using the Add-ons Manager. You cannot set up a new Sync account or pair a device anymore (bug 998807). Workaround: Use an older version of SeaMonkey for such tasks for now. Data loss warning: If you use a profile with this or any later version and then try to go back to SeaMonkey 2.0, SeaMonkey will rename your history file to places.sqlite.corrupt and create a new places.sqlite file, effectively resetting your browsing history. This is because the internal format changed and the upgrade process only works in one direction. Additionally, running MailNews with local folders and POP3 mail filters may produce summary files that are not correctly read by previous versions of SeaMonkey. If you decide to go back to a previous version of SeaMonkey, you should delete the .msf files for your local folders and POP3 accounts or repair the folders using the folder properties dialog in order to avoid potential data loss. After creating a news account through clicking a news URL, the MailNews account wizard may be broken (the account type will always be News). To work around the problem, set the mail.server.serverX.valid pref (where X is the internal number of the corresponding news account) to true in about:config, or delete the invalid news account (bug 521861). Web pages may appear differently in the MailNews feed reader than in the browser (bug 662907). Workaround: Add a "noscript {display:none}" rule to your userContent.css (note that the Stylish add-on cannot be used here since it does not integrate with the MailNews feed reader). Select Element by Click doesn't flash the element in DOM Inspector on Windows if hardware acceleration is enabled (bug 594299). The option "When opening a bookmark group" / "Replace existing tabs" under Preferences / Tabbed Browsing does not have an effect anymore (bug 664101). Lightning keyboard shortcuts for accessing the calendar tab from within the MailNews window or from the main menu (Ctrl+Shift+C/D) do not work. (bug 514512). If you try to start SeaMonkey using a locked profile, it will crash (see bug 573369). Some synaptic touch pads are unable to vertical scroll (see bug 622410). Under certain conditions, scrolling and text input may be jerky (see bug 711900). Mac OS X and Windows: Citrix Receiver no longer works. As a workaround, mark the plugin as Always Enable in the Add-ons Manager (see bug 1025627). Windows: Norton/Symantec anti-virus scanners may report that some parts of SeaMonkey (e.g. the file freebl3.dll) are suspicious. If you downloaded SeaMonkey from one of the official download sites, this is a false alarm. You might experience problems with secure websites when this happens. To fix the issue, instruct your anti-virus software to ignore these files (and move them out of quarantine) and/or switch to another anti-virus software and reinstall SeaMonkey. Linux: The cursor may change to "drag & drop" mode in the mail window, causing a hang (bug 736811). Mac: When hardware acceleration is off, background colors in the UI (toolbar, status bar etc.) might not update correctly when you switch focus from/to a window. Users running Macs with certain older hardware (e.g. Intel GMA 950) will experience this even if they haven't turned off hardware acceleration in Preferences (Appearance/Content) (bug 626096). Troubleshooting Some questions are asked more frequently than others. Have a look at the SeaMonkey FAQ. Maybe your particular problem has already been solved. Some anti-virus software keeps detectine installer so that its contents can run and install SeaMonkey. That technology is widely used and probably can be used to compress bad as well as good software, but the 7-Zip code itself is perfectly safe. Mozilla scans all our files routinely when putticanned by the same mechanisms. Poorly designed or incompatible extensions can cause problems with SeaMonkey, including make it crash, slow down page display, etc. If you encounter strange problems relating to parts of SeaMonkey no longer working, the etc, you may be suffering from Extension or Theme trouble. Restart SeaMonkey in Safe Mode. On Windows, start using the "Safe Mode" shortcut created in your Start menu or by running seamonkey.exe -safe-mode. On Linux, start with ./seamonkey -safe-mode and on Mac OS X, run: cd /Applications/SeaMonkey.app/Contents/MacOS/ ./seamonkey-bin -safe-mode When started in Safe Mode all extensions are disabled and the Default theme is used. Disable the Extension/Theme that is causing trouble and then start normally. If you uninstall an extension that is installed with your user profile (i.e. you installed it from a Web page) and then wish to install it for all user profiles using the -install-global-extension command line flag, you must restart SeaMonkey once to cleanse the profile extensions datasource of traces of that extension before installing with the switch. If you do not do this you may end up with a jammed entry in the Extensions list and will be unable to install the extension globally. If you encounter strange problems relating to bookmarks, downloads, window placement, toolbars, history, or other settings, it is recommended that you try creating a new profile and attempting to reproduce the problem before filing bugs. Create a new profile by running SeaMonkey with the -P command line argument, choose the "Manage Profiles" button and then choose "Create Profile...". Migrate your settings files (Bookmarks, Saved Passwords, etc) over one by one, checking each time to see if the problems resurface. If you do find a particular profile data file is causing a problem, file a bug and attach the file.
2015-09-21Update to 4.3.1ryoon2-6/+6
Changelog: WordPress 4.3.1 Security and Maintenance Release Posted September 15, 2015 by Samuel Sidler. Filed under Releases, Security. WordPress 4.3.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. This release addresses three issues, including two cross-site scripting vulnerabilities and a potential privilege escalation. WordPress versions 4.3 and earlier are vulnerable to a cross-site scripting vulnerability when processing shortcode tags (CVE-2015-5714). Reported by Shahar Tal and Netanel Rubin of Check Point. A separate cross-site scripting vulnerability was found in the user list table. Reported by Ben Bidner of the WordPress security team. Finally, in certain cases, users without proper permissions could publish private posts and make them sticky (CVE-2015-5715). Reported by Shahar Tal and Netanel Rubin of Check Point. Our thanks to those who have practiced responsible disclosure of security issues. WordPress 4.3.1 also fixes twenty-six bugs. For more information, see the release notes or consult the list of changes. Download WordPress 4.3.1 or venture over to Dashboard â Updates and simply click âUpdate Now.â Sites that support automatic background updates are already beginning to update to WordPress 4.3.1. Thanks to everyone who contributed to 4.3.1: Adam Silverstein, Andrea Fercia, Andrew Ozz, Boone Gorges, Brandon Kraft, chriscct7, Daisuke Takahashi, Dion Hulse, Dominik Schilling, Drew Jaynes, dustinbolton, Gary Pendergast, hauvong, James Huff, Jeremy Felt, jobst, Marin Atanasov, Nick Halsey, nikeo, Nikolay Bachiyski, Pascal Birchler, Paul Ryan, Peter Wilson, Robert Chapin, Samuel Wood, Scott Taylor, Sergey Biryukov, tmatsuur, Tracy Levesque, Umesh Nevase, vortfu, welcher, Weston Ruter
2015-09-20Update to 2.9.2(security update)wen2-6/+6
Oked by wiz@ Upstream changes: Moodle 2.9.2 Highlights MDL-50062 - Changing grading category aggregation method no longer results in unexpected "Extra credit" items MDL-34938 - Enrolment expiration dates are now respected in meta course enrolments MDL-35148 - Course/Category themes are respected when viewing website on tablets or mobile devices MDL-45772 - Forms such as "Create new group" are no longer populated with passwords and usernames by the browsers UI changes MDL-37832 - Course overview block on "My" ("Dashboard") page indicates that activities are expandable/collapsible MDL-46860 - Filepicker is displayed correctly inside Manage Files popup in Atto MDL-49536 - "Clean" and "More" theme's logo removes all header information. MDL-45841 - Blog-style forums better indicate unread posts MDL-50293 - File name wraps properly in the Navigation block MDL-50323 - Unordered lists are styled in course sections properly MDL-50869 - Increased contract of warning colours for AA accessibility MDL-50801 - Allow to set the caption side in Atto table MDL-50525 - Improve placement of preventsubmissionnotingroup on settings page Functional changes MDL-49826 - Single view now requires capability moodle/grade:edit and not moodle/grade:manage MDL-35027 - Forum's subscribers list shows participants with no access to forum MDL-51179 - Atto autosave restore is disabled if the content is modified by somebody else MDL-49629 - Possible to specify icon URL for a named external tool MDL-50868 - Allow to use ruby tags API changes MDL-49085 - Block tag_youtube is converted to the new YouTube API MDL-49360 - Function get_local_referer() should be used rather than HTTP_REFERER directly Security issues A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version. Fixes and improvements MDL-46232 - Fixed "Only lowercase letters allowed" error on deleting users with empty email MDL-30315 - Uploading feedback from CSV no longer overrides local assigned grades MDL-50446 - Main menu block no longer throws error if there is a resource to be opened in a new window MDL-49440 - Date picker correctly displays names for week days in all locales MDL-42670 - Recent activity block no longer shows student name when assignment blind marking is on MDL-49864 - Assignment PDF Pen annotations are always visible even if there are draft pen annotations MDL-43785 - Corrected error message text about expired sessions when clicking on AJAX elements such as expanding admin menu MDL-44962 - Fixed error when using HTML tags inside wiki headers MDL-50649 - Optimised database query for Course Participation report MDL-50714 - Posting in a forum does not unnecessarily require capability 'mod/forum:movediscussions' MDL-50799 - Improve question bank "questions per page" string behaviou
2015-09-17Security update to version 4.3.1.morr2-6/+6
This version fixes two cross-site scripting vulnerabilities (CVE-2015-5714, CVE-2015-5715) and a potential privilege escalation.
2015-09-17Deal with freetype update. Drop unnecessary manual system wrapper forjoerg3-17/+15
unwind.h
2015-09-17Remove obsolete patch.joerg1-9/+0
2015-09-15Unbreak build with newer freetype.joerg2-6/+21
2015-09-13Update to 1.0.9.gdt2-6/+6
Upstream ~NEWS: Trac 1.0.9 provides more than a dozen minor fixes and enhancements, including significantly reduced memory usage by the Git repository connector.
2015-09-13Update typo3_62 packge to 6.2.15, including security fix.taca3-10/+28
2015-09-08 edc4d53 [RELEASE] Release of TYPO3 6.2.15 (TYPO3 Release Team) 2015-09-08 f6d8d3d #68825 [SECURITY] Fix GeneralUtility::sanitizeLocalUrl to detect foreign schemes (Nicole Cordes) 2015-09-08 ed1e46f #67900 [SECURITY] Prevent information disclosure in tests bootstrap (Nicole Cordes) 2015-09-07 045b4ea #69001,#69289 [FOLLOWUP][BUGFIX] Reestablish DB connection in long-running tasks (Markus Klein) 2015-09-07 9b9e1ee #69584 [TASK] Remove wrong datasets in sanitizeLocalUrlValidPathsDataProvider (Nicole Cordes) 2015-09-06 095b781 #67881 [BUGFIX] Cache CategoryRegistry state together with TCA (Alexander Stehlik) 2015-09-05 159bccc #69303 [BUGFIX] Prevent search upload folder in write protected storages (Nicole Cordes) 2015-09-05 0baa6ff #69537 [BUGFIX] BackendUtility::getAjaxUrl() should not be internal (Francois Suter) 2015-09-04 3189b03 #65867 [BUGFIX] Support packages depending on typo3/cms (Mathias Brodala) 2015-09-04 46a6bb8 #69063 [BUGFIX] Enable page tree filter for admin with mountpoints (Nicole Cordes) 2015-09-03 2e29879 Revert "[BUGFIX] Fix broken link to security resources page on typo3.org" (Helmut Hummel) 2015-09-03 7774a08 #69475 [BUGFIX] Streamline Unit Tests for GeneralUtility::sanitizeLocalUrl (Nicole Cordes) 2015-09-02 5bf0cf8 #69463 [BUGFIX] Abstract XSD generator can handle more than two namespace parts (Helmut Hummel) 2015-08-31 b463428 #69434 [TASK] Do not set application context by default in htaccess (Harry Glatz) 2015-08-30 fc81bed #60995 [BUGFIX] Use single postProcessor layout, otherwise the global layout (Ralf Zimmermann) 2015-08-30 9d03281 #69407 [TASK] Refactor PostProcessorTest to use Prophecy (Anja Leichsenring) 2015-08-30 e2e7e24 #69412 [TASK] Remove eval() in ext:form Unit Tests (Wouter Wolters) 2015-08-29 d3927c8 #69398 [BUGFIX] Add icon for the form wizard number spinner elements (Björn Jacob) 2015-08-29 efe2713 #69399 [BUGFIX] Fatal Error due to class object inconsistencies in ext:form (Oliver Hader) 2015-08-29 3e00f81 #69408 [FOLLOWUP][TASK] Add unit test for fatal error on null object method call (Anja Leichsenring) 2015-08-29 e9b80b4 #69405 [TASK] Add unit test for fatal error on null object method call (Anja Leichsenring) 2015-08-29 fd34498 #69400 [BUGFIX] Fix broken link to security resources page on typo3.org (Wouter Wolters) 2015-08-29 a9bb94a #45685 [BUGFIX] avoid Call to a member function getValue() on a non-object (Ralf Zimmermann) 2015-08-28 4d7150b #69239 [TASK] Use https for links to docs.typo3.org (Georg Ringer) 2015-08-28 e3bdabe #69024 [BUGFIX] Form NumberFields ignore typed values in wizard (Sebastian Wagner) 2015-08-28 3117ea9 #69372 [BUGFIX] IMAGEBUTTON src attribute not working (Ralf Zimmermann) 2015-08-27 17b0d94 #69353 [BUGFIX] Form Wizard does not respect backend debug mode (Oliver Hader) 2015-08-25 6579969 #69138 [BUGFIX] Always use uc_default after first install (Jigal van Hemert) 2015-08-25 136a75d #69306 [BUGFIX] Correctly assign workspace for rootline retrieval (Markus Klein) 2015-08-25 dcac800 #69302 [BUGFIX] Fix task execution in Scheduler (Francois Suter) 2015-08-22 1013549 #69170 [BUGFIX] Replace ###ID### in openCustomUrlInContentFrame correctly (Christian Seifert) 2015-08-22 3561c77 #45519,#31718 [BUGFIX] Assure a backend domain is set in workspace preview (Daniel Goerz) 2015-08-22 a85992c #69236 [BUGFIX] Don't cut off icons in New Record wizard (Andreas Fernandez) 2015-08-21 9b4ee63 #59810 [FOLLOWUP][BUGFIX] Show first tab in Element Wizard as fallback (Markus Klein) 2015-08-21 21c21b5 #59810 [BUGFIX] Show first tab in Element Wizard as fallback (Christian Seifert) 2015-08-20 8f8ea43 #67246 [BUGFIX] Cache healing for classes loaded via ext_autoload (Bernhard Kraft) 2015-08-20 793ed14 #69112 [BUGFIX] FAL upgrade wizard: take care of files in subfolders (Josef Glatz) 2015-08-20 61b3b3a #67843 [BUGFIX] Fix QueryBuilding in IndexSearchRepository (Marc Neuhaus) 2015-08-19 58624b4 #69157 [BUGFIX] Log exception as array instead of serialized (Stephan Großberndt) 2015-08-18 2f4f1b3 #68643 [BUGFIX] Exclude computed field names on fetching record overlays (Albrecht Köhnlein) 2015-08-18 971e193 #65513 [BUGFIX] Assure language override without original file (Stefan Galinski) 2015-08-17 67535f3 #55861,#55837, [BUGFIX] Extbase: Optional arguments must not throw an Exception (Anja Leichsenring) 2015-08-17 42c4f43 #69001 [BUGFIX] Reestablish DB connection in long-running tasks (Stefan Neufeind) 2015-08-16 7ac4737 #59528 [BUGFIX] Prevent error if getimagesize() fails (Stefan Neufeind) 2015-08-16 891ddd2 #69070 [BUGFIX] Fix dependencies for t3x upload (Helmut Hummel) 2015-08-16 0a6948c #69061 [TASK] Properly encode database input in the right place (Helmut Hummel) 2015-08-16 4e1e07f #69092 [BUGFIX] Remove trailing colons from checkbox labels (Daniel Goerz) 2015-08-15 ec1499e #68400 [BUGFIX] Add encodeURIComponent to search parameter (Stephan Großberndt) 2015-08-15 1d20317 #69056 [BUGFIX] Illegal string offset 'currentLangId' in DataHandler (Joerg Kummer) 2015-08-15 af36619 #68503 [BUGFIX] Fix PHP Warning in updateRefIndexTable() (Stephan Großberndt) 2015-08-15 cc27516 #68493 [BUGFIX] Retrieve correct fieldname for condition lookup (Benjamin Serfhos) 2015-08-15 a1238a7 #53002 [BUGFIX] Calculations in GIFBUILDER properties using stdWrap fail (Dan Untenzu) 2015-08-14 4052042 #64214 [BUGFIX] Prevent ResourceDoesNotExistException (Andre Hähnel) 2015-08-14 67053c9 #69040 [BUGFIX] EM: Trim whitespace in search field (Alexander Opitz) 2015-08-14 170283b #67962 [BUGFIX] Make editIconsHook work again (Nicole Cordes) 2015-08-13 39b4993 #66939 [BUGFIX] Allow subclasses of \DateTime as entity properties (Stephan Schuler) 2015-08-13 1c99223 #33436 [BUGFIX] Draft usergroup access rights are now respected (Bart Dubelaar) 2015-08-13 8bcc769 #54924 [BUGFIX] Edits disappear when published twice (Stefan Rotsch) 2015-08-13 0fe4901 #69027 [BUGFIX] Use proper data sets in workspaces tests (Oliver Hader) 2015-08-13 eeaa0b7 #62340 [BUGFIX] Fix wrong comment in install tool for [HTTP][proxy_host] (Frank Nägler) 2015-08-13 fd87254 #68494 [BUGFIX] Fix faulty move-placeholder processing with workspaces (Artur Cichosz) 2015-08-13 247d6d4 #64714 [BUGFIX] Catch exceptions for inaccessible storages (Philipp Gampe) 2015-08-12 1f32468 #66624 [BUGFIX] Catch exception when linked file is deleted (Benjamin Mack) 2015-08-12 c69cc2d #51913 [BUGFIX] Consider placeholders in fixVersioningPid (Timo Webler) 2015-08-12 0878494 #67284 [BUGFIX] Capability check fails for some storage types (Benjamin Mack) 2015-08-10 5ddf0b0 #67145 [BUGFIX] Set background for disabled input fields (Andreas Fernandez) 2015-08-09 e0f72af #68873 [FOLLOWUP][BUGFIX] Provide title label for paste into column (Anja Leichsenring) 2015-08-09 9a436a6 Revert "[BUGFIX] Fix broken functional tests" (Anja Leichsenring) 2015-08-09 e65f253 #68882 [BUGFIX] Fix broken functional tests (Anja Leichsenring) 2015-08-09 911fc3d #68873 [BUGFIX] Provide title label for paste into column (Daniel Goerz) 2015-08-08 0f30972 #20852,#12970 [BUGFIX] Workspace preview links for multiple languages (Stefan Rotsch) 2015-08-07 3c47aae #68734 [TASK] Document required MySQL privileges (Morton Jonuschat) 2015-08-07 b6aa7ab #68386 [BUGFIX] Skip write access check if core files exist (Frederic Gaus) 2015-08-07 73304d5 #68068 [BUGFIX] Remove php warning for RTE classes without name (Manuel Selbach) 2015-08-07 b1059c9 #68810 [BUGFIX] Change value from NULL to empty string for link field in test data (Marc Bastian Heinrichs) 2015-08-06 dcf774c #37952 [BUGFIX] Clear affected caches on page publishing (Bart Dubelaar) 2015-08-05 348039c #68769 [BUGFIX] Typo in neg_foreign_table in DataPreprocessor (Andreas Wolf) 2015-08-04 738861b #68718 [BUGFIX] Do not turn TYPO3 Logo upside down on error pages (Benjamin Mack) 2015-07-30 374940e #68626 [TASK] Disallow access to vcs directories (Philipp Gampe) 2015-07-30 51539dd #68642 [BUGFIX] Call fixPermissions after replaceFile (Frans Saris) 2015-07-30 931f8ad #68624 [BUGFIX] Invalid handling of "mergeIfNotBlank" in backend (Christian Kuhn) 2015-07-30 dc061b0 #68636 [BUGFIX] Don't use FAL based ImageViewHelper in extension manager (Frans Saris) 2015-07-29 ce72378 #67092 [BUGFIX] Rename setLocale() in DateTimeViewHelperTest (Andreas Fernandez) 2015-07-29 f318050 #66702 [BUGFIX] Fixed permissions of media field in page properties (Michael Oehlhof) 2015-07-27 3aa9e2f #67752 [BUGFIX] Show pages with "show at any login" in view module (Daniel Goerz) 2015-07-26 c54c37d #68540 [BUGFIX] Invalid links to documentation (Xavier Perseguers) 2015-07-22 a780e46 #67155,#67172, [BUGFIX] dbal: Cast field to CHAR for FIND_IN_SET() (Morton Jonuschat) 2015-07-22 59dbf92 #68430 [BUGFIX] Use correct extension name for labels in indexed search (Markus Klein) 2015-07-22 c46ea06 #68153 [BUGFIX] Fix image descriptions for renderMethod = table (Torben Hansen) 2015-07-21 4b6dc6b #68423 [BUGFIX] Use parse_url to determine absolute urls in ImageService (Frans Saris) 2015-07-21 7374c3a #60254 [BUGFIX] Allow editing of shortcuts for non-admin users (Markus Klein) 2015-07-21 a8d0135 #22871,#50144 [BUGFIX] HTMLParser doesn't remove endtag when applying rmTagIfNoAttrib (Alexander Stehlik) 2015-07-20 dae171d #65772 [BUGFIX] includeCSS is not compressed and concatenated (Sebastian Michaelsen) 2015-07-20 aa1f2d1 #68361 [BUGFIX] Implement EXT: usage in addModulePath (Michael Oehlhof) 2015-07-20 1edba95 #68341 [BUGFIX] Implement EXT: usage in addModule (Wouter Wolters) 2015-07-20 42d9e7f #68364 [BUGFIX] Reuse local mirror.xml.gz when updating translations (Xavier Perseguers) 2015-07-20 6bb017d #50141 [BUGFIX] felogin: Invalid action url in changePassword form (Stano Paška) 2015-07-19 5b631c6 #55714 [BUGFIX] Invalid sys file storages must be ignored (Georg Ringer) 2015-07-18 3ed2106 #33092 [BUGFIX] Checkbox values not shown in emails (Sebastian Müller) 2015-07-18 09355d1 #68324 [TASK] Clarify install tool no-password-set message (Andreas Wolf) 2015-07-18 f2c8ada #39290 [BUGFIX] Fix double encoded link text (Gordon Brüggemann) 2015-07-17 b4f6eba #60979 [BUGFIX] Remove PHP notice in getModuleData() (Benjamin Mack) 2015-07-17 272daa3 #68205 [BUGFIX] OpenID service uses incorrect priorities to check returned data (Dmitry Dulepov) 2015-07-17 c45de67 #50349,#66231 [FOLLOWUP][TASK] Reduce SQL queries of page tree in workspaces (Nicole Cordes) 2015-07-16 ba4ca31 #68220 [BUGFIX] Do not log out a logged out user (Helmut Hummel) 2015-07-16 0fa28d5 #66693,#56641 [FOLLOWUP][BUGFIX] Check access to folder in FileListController (Christian Kuhn) 2015-07-16 d2c4bbb #50349,#66231 [TASK] Reduce SQL queries of page tree in workspaces (Nicole Cordes) 2015-07-16 57ba6d3 #66693,#56641 [BUGFIX] Check access to folder in FileListController (Nicole Cordes) 2015-07-15 69438f5 #67643 [BUGFIX] Ensure filemount path has trailing slash after upgrade (Nicole Cordes) 2015-07-15 8c5a3b7 #66605 [BUGFIX] Respect cached page config (Andreas Fernandez) 2015-07-15 40df0e6 #54922 [BUGFIX] Workspace grid remains empty due to AJAX timeout (Stefan Rotsch) 2015-07-14 1ff0f9c #65699 [BUGFIX] Hide preview link on delete page in workspaces mode (Oliver Hader) 2015-07-14 19f10f4 #68132 [BUGFIX] Fix parseUserFuncArguments to respect 0 as argument (Sascha Egerer) 2015-07-14 21a105e #60926 [FOLLOWUP][BUGFIX] Workspaces: Properly use slots to modify data (Benjamin Mack) 2015-07-14 a1e8db1 #60926 [BUGFIX] Workspaces: Properly use slots to modify data (Oliver Hader) 2015-07-14 2cb83f3 #68086 [BUGFIX] Fix invalid HTML in ElementBrowser (Markus Klein) 2015-07-13 d49d6e0 #67898 [TASK] Show uncaught errors in Extension Manager (Andreas Fernandez) 2015-07-13 b438ca6 #34820,#36542, [BUGFIX] Double protocol when using TCEMAIN.previewDomain (Wouter Wolters) 2015-07-13 45d6ac3 #65702 [BUGFIX] Wrong directory path checked while unzipping extension (Wouter Wolters) 2015-07-13 e0b9d45 #68061 [BUGFIX] Ensure PageRenderer singleton is set (Helmut Hummel) 2015-07-10 dbdff8e #55396 [BUGFIX] Add a dummy distinguished name to CSR generation (Alexander Krist) 2015-07-09 36539f1 #67067 [BUGFIX] dbal: make admin_get_tables() return correct table information (Morton Jonuschat) 2015-07-06 2d7eca6 #67874 [BUGFIX] keep options array for TableGarbageCollectionTask (Daniel Neugebauer) 2015-07-06 8a44fb0 #47359 [BUGFIX] Prevent exclude field mixup in FormEngine (Alexander Stehlik) 2015-07-06 1e691dc #67922 [BUGFIX] Remove wrong RewriteBase in _.htaccess (Markus Klein) 2015-07-06 e9951e3 #65066 [BUGFIX] Clear opcode cache on extension install/update (Alexander Opitz) 2015-07-03 aaf2ca5 #67897 [BUGFIX] No exceptions in GeneralUtility::rmdir (Alexander Opitz) 2015-07-02 edf1c78 #23078,#66235 [TASK] Improve .htaccess files (Andreas Fernandez) 2015-07-01 7809374 #60338 [BUGFIX] Respect format when rendering partial (Mathias Brodala) 2015-07-01 03b5260 #67227 [TASK] Raise severity for stale lock file (Bernhard Kraft)
2015-09-13Update sinatra-contrib to 1.4.6.taca2-7/+7
* only assign kcode if ruby version is < 1.9.0 * Fix typo in test description [skip ci] * Modify deploy task's git details * lock libv8 to 3.16.14.7 for 1.8.7
2015-09-13Update ruby-sass to 3.4.18.taca3-7/+9
3.4.17 (21 August 2015) * Allow passing calc values to rgb/hsl color constructors. * The source map end character for lists now correctly uses the end of the list instead of the end of the first element in the list. * Fix up some edge cases where extra semicolons could be added to unknown directives in compressed mode. * If you try to do a stupid color operation with a stupid value, the error message will now be less stupid than it was. * Make is-superselector("a > c d", "a > b c d") return false. This also fixes some related @extend behavior. * A / in a parenthesized list is consistently treated as a plain / unless it meets the criteria for being treated as division. * In sass-convert, ensure that literal /es are preserved. 3.4.16 (10 July 2015) * When converting from Sass to SCSS or vice versa, double-space around nested rules the same as around top-level rules. * Compatibility with listen 3. * Parse a minus operator with no surrounding whitespace (e.g. 20px-10px) the same regardless of whether it’s being used in a static property. 3.4.15 (22 June 2015) * Further improve rounding for various numeric operations. * Be more explicit in the function documentation about functions being immutable. * Improve rounding in operator-based color operations. Deprecations – Must Read! * When using --stdin with the sass or scss executables, importing relative to the working directory is deprecated. Having the working directory on the load path was deprecated in 3.3 and removed in 3.4, but due to an oversight the deprecation process never happened for files read over standard input in particular. This is the first step of that process.
2015-09-13Update ruby-raindrops to 0.15.0.taca3-10/+10
=== raindrops 0.15.0 - non-glibc compat fix on Linux / 2015-07-22 00:30 UTC Thanks to Doug Forster for sending us the report. No other fixes * check for the existence of linux/tcp.h === raindrops 0.14.0 - misc doc updates / 2015-06-25 21:50 UTC Eric Wong (7): linux_inet_diag: annotate memory freeing on diag errors README: trim intro and update license modernize packaging and documentation move mailing list to raindrops-public@bogomips.org linux_inet_diag: clarify *fprintf usage without GVL TODO: add item for unix_diag and udp_diag linux_inet_diag: fix Wshorten-64-to-32 warnings Hleb Valoshka (1): Add setup and teardown for ipv6 tests
2015-09-13Update ruby-rack-contrib to 1.4.0.taca3-49/+11
v1.4.0: Features, Features Everywhere, and not a bug to fix There's a bumper crop of new features this month. Share and enjoy! Deprecations * Rack::AcceptFormat is slated for removal in rack-contrib 2.0.0 (due on or after 1 January, 2016. Using this middleware will now result in a deprecation warning being printed to stderr. If you use this middleware, now would be a good time to start doing things properly. Features * Rack::LazyConditionalGet: new middleware, by Mig. This middleware tracks when the last POST/PUT/DELETE request was made, and returns 304 responses to requests which include a Last-Modified entity request header which is greater than or equal to that time. * Rack::StaticCache: You can now specify a custom "version" regex for your cache invalidation, if the default doesn't do it for you. Initial patch provided by Eric Boehs. * Rack::Profiler: You can now run a single request through the profiler multiple times, by adding the profiler_runs query parameter to the URL. Patch provided by Bryce McDonnell.
2015-09-13Update ruby-puma to 2.13.4.taca3-8/+13
=== 2.13.4 / 2015-08-16 * 1 bug fix: * Use the environment possible set by the config early and from the config file later (if set). === 2.13.3 / 2015-08-15 Seriously, I need to revamp config with tests. * 1 bug fix: * Fix preserving options before cleaning for state. Fixes #769 === 2.13.2 / 2015-08-15 The "clearly I don't have enough tests for the config" release. * 1 bug fix: * Fix another place binds wasn't initialized. Fixes #767 === 2.13.1 / 2015-08-15 * 2 bug fixes: * Fix binds being masked in config files. Fixes #765 * Use options from the config file properly in pumactl. Fixes #764 === 2.13.0 / 2015-08-14 * 1 minor feature: * Add before_fork hooks option. * 3 bug fixes: * Check for OPENSSL_NO_ECDH before using ECDH * Eliminate logging overhead from JRuby SSL * Prefer cli options over config file ones. Fixes #669 * 1 deprecation: * Add deprecation warning to capistrano.rb. Fixes #673 * 4 PRs merged: * Merge pull request #668 from kcollignon/patch-1 * Merge pull request #754 from nathansamson/before_boot * Merge pull request #759 from BenV/fix-centos6-build * Merge pull request #761 from looker/no-log === 2.12.3 / 2015-08-03 * 8 minor bugs fixed: * Fix Capistrano 'uninitialized constant Puma' error. * Fix some ancient and incorrect error handling code * Fix uninitialized constant error * Remove toplevel rack interspection, require rack on load instead * Skip empty parts when chunking * Switch from inject to each in config_ru_binds iteration * Wrap SSLv3 spec in version guard. * ruby 1.8.7 compatibility patches * 4 PRs merged: * Merge pull request #742 from deivid-rodriguez/fix_missing_require * Merge pull request #743 from matthewd/skip-empty-chunks * Merge pull request #749 from huacnlee/fix-cap-uninitialized-puma-error * Merge pull request #751 from costi/compat_1_8_7 * 1 test fix: * Add 1.8.7, rbx-1 (allow failures) to Travis. === 2.12.2 / 2015-07-17 * 2 bug fix: * Pull over and use Rack::URLMap. Fixes #741 * Stub out peercert on JRuby for now. Fixes #739 === 2.12.1 / 2015-07-16 * 2 bug fixes: * Use a constant format. Fixes #737 * Use strerror for Windows sake. Fixes #733 * 1 doc change: * typo fix: occured -> occurred * 1 PR merged: * Merge pull request #736 from paulanunda/paulanunda/typo-fix === 2.12.0 / 2015-07-14 * 13 bug fixes: * Add thread reaping to thread pool * Do not automatically use chunked responses when hijacked * Do not suppress Content-Length on partial hijack * Don't allow any exceptions to terminate a thread * Handle ENOTCONN client disconnects when setting REMOTE_ADDR * Handle very early exit of cluster mode. Fixes #722 * Install rack when running tests on travis to use rack/lint * Make puma -v and -h return success exit code * Make pumactl load config/puma.rb by default * Pass options from pumactl properly when pruning. Fixes #694 * Remove rack dependency. Fixes #705 * Remove the default Content-Type: text/plain * Add Client Side Certificate Auth * 8 doc/test changes: * Added example sourcing of environment vars * Added tests for bind configuration on rackup file * Fix example config text * Update DEPLOYMENT.md * Update Readme with example of custom error handler * ci: Improve Travis settings * ci: Start running tests against JRuby 9k on Travis * ci: Convert to container infrastructure for travisci * 2 ops changes: * Check for system-wide rbenv * capistrano: Add additional env when start rails * 16 PRs merged: * Merge pull request #686 from jjb/patch-2 * Merge pull request #693 from rob-murray/update-example-config * Merge pull request #697 from spk/tests-bind-on-rackup-file * Merge pull request #699 from deees/fix/require_rack_builder * Merge pull request #701 from deepj/master * Merge pull request #702 from Jimdo/thread-reaping * Merge pull request #703 from deepj/travis * Merge pull request #704 from grega/master * Merge pull request #709 from lian/master * Merge pull request #711 from julik/master * Merge pull request #712 from yakara-ltd/pumactl-default-config * Merge pull request #715 from RobotJiang/master * Merge pull request #725 from rwz/master * Merge pull request #726 from strenuus/handle-client-disconnect * Merge pull request #729 from allaire/patch-1 * Merge pull request #730 from iamjarvo/container-infrastructure
2015-09-13Update ruby-jekyll-gist to 1.3.4.taca2-6/+6
## 1.3.4 / 2015-08-28 * Catch `TimeoutError` to further support 1.9.3 (#16) ## 1.3.3 / 2015-08-20 * Fix gemspec to allow Ruby 1.9.3 (relates to #14) ## 1.3.2 / 2016-08-19 * Re-add support for Ruby 1.9.3. Fixes #11 for 1.9.3 (#14) * Replaced `OpenURI` with `Net::HTTP` and introduced timeout of 3 seconds (#11) ## 1.3.1 / 2015-08-16 (yanked) * Replaced `OpenURI` with `Net::HTTP` and introduced timeout of 3 seconds (#11) ## 1.3.0 / 2015-08-05 * Added an `noscript` fallback for browsers without JavaScript enabled. (#7)
2015-09-13Update http_router to 0.11.2.taca2-7/+7
* Don't assume a router in Route#name=. * Update README to match the code.
2015-09-13Update ruby-capybara to 2.5.0.taca3-8/+16
# Version 2.5.0 Release date: 2015-08-25 ### Fixed * Error message now raised correctly when invalid options passed to 'have_text'/'have_content' [Tom Walpole] * Rack-test driver correctly gets document title when elements on the page have nested title elements (SVG) [Tom Walpole] * 'save_page' no longer errors when using Capybara.asset_host if the page has no \<head> element [Travis Grathwell] * rack-test driver will ignore clicks on links with href starting with '#' or 'javascript:' ### Added * has_current_path? and associated asserts/matchers added [Tom Walpole] * Implement Node#path in selenium driver [Soutaro Matsumoto] * 'using_session' is now nestable [Tom Walpole] * 'switch_to_window' will now use waiting behavior for a matching window to appear [Tom Walpole] * Capybara.default_wait_time deprecated in favor of Capybara.default_max_wait_time to more clearly explain its purpose [Paul Pettengill] * Warning when attempting to select a disabled option * Capybara matchers are now available in RSpec view specs by default [Joshua Clayton] * 'have_link' and 'click_link' now accept Regexp for href matching [Yaniv Savir] * 'find_all' as an alias of 'all' due to collision with RSpec * Capybara.wait_on_first_by_default setting (default is false) If set to true 'first' will use Capybaras waiting behavior to wait for at least one element to appear by default * Capybara waiting behavior uses the monotonic clock if supported to ease restrictions on freezing time in tests [Dmitry Maksyoma, Tom Walpole] * Capybara.server_errors setting that allows to configure what type of errors will be raised from the server thread [Tom Walpole] * Node#send_keys to allow for sending keypresses directly to elements [Tom Walpole] * 'formmethod' attribute support in RackTest driver [Emilia Andrzejewska] * Clear field using backspaces in Selenium driver by using `:fill_options => { :clear => :backspace }` [Joe Lencioni]
2015-09-13Deal with new freetype header. Remove unwind.h override, the normaljoerg3-17/+23
system header list already includes it.
2015-09-13Update to 6.11:wiz2-6/+6
6.11 2015-09-09 - fix an undefined value warning in HTTP::Headers::as_string
2015-09-13Update contao35 to 3.5.3. Latvian language was added, too.taca3-7/+83
Version 3.5.3 (2015-09-10) -------------------------- ### Fixed Correctly handle dimensionless SVG images (see #7882). ### Fixed Correctly fill in the image meta data in news, events and FAQs (see #7907). ### Fixed Enable the `strictMath` option of the LESS parser (see #7985). ### Fixed Consider the pagination menu when inserting at the top (see #7895). ### Fixed Use en-dashes in event intervals (see #7978). ### Fixed Store the correct edit URL in the back end personal data module (see #7987). ### Fixed Adjust the breadcrumb trail when creating new folders (see #7980). ### Fixed Use `$this->hasText` in news and event templates (see #7993). ### Fixed Convert the HTML content to XHTML when generating Atom feeds (see #7996). ### Fixed Correctly link the items in the files breadcrumb menu (see #7965). ### Fixed Handle explicit collations matching the default collation (see #7979). ### Fixed Fix the duplicate content check in the front end controller (see #7661). ### Fixed Correctly parse dates in MooTools (see #7983). ### Fixed Register the related models in the registry (see contao/core-bundle#333). ### Fixed Correctly escape in the `findMultipleFilesByFolder()` method (see #7966). ### Fixed Override the tabindex handling of the accordion to ensure that the togglers are always focusable via keyboard (see #7963). ### Fixed Correctly generate the news and event menu URLs (see #7953). ### Fixed Check the script when storing the front end referer (see #7908). ### Fixed Fix the back end pagination menu (see #7956). ### Fixed Handle option callbacks in the back end help (see #7951). ### Fixed Fixed the external links in the text field help wizard (see #7954) and the keyboard shortcuts link on the back end start page (see #7935). ### Fixed Fixed the CSS group field explanations (see #7949). ### Fixed Use ./ instead of an empty href (see #7967). ### Fixed Correctly detect Microsoft Edge (see #7970). ### Fixed Respect the "order" parameter in the `findMultipleByIds()` method (see #7940). ### Fixed Always trigger the "parseDate" hook (see #4260). ### Fixed Allow to instantiate the `InsertTags` class (see #7946). ### Fixed Do not parse the image `src` attribute to determine the state of an element, because the image path might have been replaced with a `data:` string (e.g. by the Apache module "mod_pagespeed").
2015-09-11Use bash as CONFIG_SHELL, the old and crufty configure scripts in this packagejperkin1-3/+3
cause hangs with various shells and this is the safest way to deal with it.
2015-09-08Remove INCOMPAT_CURSES settings for NetBSD 0.x and 1.x. Tighten up somejperkin2-9/+2
globs to ensure NetBSD 10 is not incorrectly matched when it is released.
2015-09-08Changes 3.1.3:adam3-137/+17
The new bugfix releases for supported versions of django CMS are out. They contain a lot of small (and some not so small) fixes ranging from frontend glitches to better Django 1.8 support. All users of django CMS 3.1x and 3.0.x are encouraged to upgrade.
2015-09-07Now that _STRIPFLAG_INSTALL is disabled by default on Darwin, remove manualjperkin1-6/+1
settings of INSTALL_UNSTRIPPED=yes for Darwin in individual packages.
2015-09-06Using ld.gold subverts Pkgsrc wrappers. Explicitly disable it.dsainty1-1/+5
This package also crashes certain buggy versions of ld.gold. Disabling it fixes build on creaky old Ubuntu systems.
2015-09-05Changes 3.5.8:adam4-99/+6
Fix FreeBSD Clang-3.5 build error Support splice for SSLv3 and TLSv1 sessions that start with an SSLv2 Hello Bug 3553: cache_swap_high ignored and maxCapacity used instead Fix memory leak in Surrogate-Capability header detection When a RESPMOD service aborts, mark the body it produced as truncated. Cleanup: fix assertion in Store unit tests Bug 3696: crash when client delay pools are activated Bug 4278: Docs: typo in the refresh_pattern freshness algorithm Bug 4306: build portability fix in Kerberos helpers Docs: auto-build release notes for snapshots FtpServer.cc:1024: "reply != NULL" assertion Work around clang-3.6 complaining of unknown attributes in libxml2 Ignore impossible SSL bumping actions, as intended and documented. Bug 4242: compile errors with eCAP using clang-3.6 Docs: fix typo in miss_access Bug 4285 partial: %us is not supported in access.log Bug 4302: IPFilter v5 transparent interception Docs: update intercept/tproxy related text Bug 4301: compile errors with IPFilter interception Polish: add debug section,level to cache.log Reject non-chunked HTTP messages with conflicting Content-Length values Boilerplate: update ignored files Boilerplate: add Foundation details to rfcnb and smblib documentation files Cleanup: de-duplicate fake-CONNECT code Use automake subdir-objects feature
2015-09-04Add Following line for make testmef1-1/+2
BUILD_DEPENDS+= p5-namespace-clean-[0-9]*:../../devel/p5-namespace-clean
2015-09-04Add following line for make testmef1-1/+2
BUILD_DEPENDS+= p5-Time-HiRes-[0-9]*:../../time/p5-Time-HiRes (But still fails at signal handling at pbulk)
2015-09-04Fix path in patchsborrill2-5/+5
2015-09-03Update www/netsurf to netsurf-3.3, based on work done in pkgsrc-wip.leot5-95/+123
Changes: NetSurf 3.3 released 15 Mar 2015 NetSurf 3.3 is primarily a bug-fix release. Several of the front ends have received quite a bit of attention, with new features and improvements; notably the AmigaOS front ends has gained the beginnings of support for AmigaOS 3. We recommend all users upgrade. NetSurf 3.2 released 30 Aug 2014 NetSurf 3.2 is primarily a bug-fix release. In addition to fixes, a disc cache feature has been added, and a little work has been done to improve CSS3 support. Several of the front ends have received quite a bit of attention, with new features and improvements; notably the GTK, AmigaOS and Framebuffer front ends. We recommend all users upgrade. NetSurf 3.1 released 26 Apr 2014 NetSurf 3.1 contains many improvements over the previous release. The highlights include much faster CSS selection performance, faster start up time, new look and feel to the treeviews (hotlist/bookmarks, global history and cookie manager), improved options handling, undo/redo support in textareas, and general improvement of forms. Also included are many other additions, optimisations and bug fixes. We recommend that all users upgrade. NetSurf 3.0 released 20 Apr 2013 NetSurf 3.0 contains many changes over the 2.x release series. The biggest difference is the use of our new Document Object Model library, LibDOM. This new library is a foundation that paves the way for us to implement a fully dynamic layout engine in the future. Other improvements in NetSurf 3.0 include completely new textarea support, ability to fetch and parse CSS in parallel with HTML documents, extensive behind-the-scenes refactoring, and a host of smaller changes and fixes. A more complete listing is available in the Change Log. NetSurf 2.9 released 28 Apr 2012 NetSurf 2.9 contains many improvements over the previous release. The most significant changes are new multi-tasking behaviour, optimised URL handling, fetcher optimisations, cache optimisations, and faster CSS selection. Full details in the change log. We recommend all users upgrade. NetSurf 2.8 released 21 Sep 2011 NetSurf 2.8 adds support for frames and iframes on all platforms, MIME type sniffing, and a new image cache. Image decoding can now be deferred until images are required for more optimal resource use and faster page load times. The release also incorporates many other new features, optimisations, improvements and bug fixes. Full details in the change log. We recommend all users upgrade. NetSurf 2.7 released 16 Apr 2011 NetSurf 2.7 contains many improvements over the previous release. The most significant change is the addition of core global history, bookmarks and cookie management features. Full details in the change log. We recommend all users upgrade. NetSurf 2.6 released 21 Sep 2010 NetSurf 2.6 is primarily a bug fix release. It contains some improvements to page rendering, fetching & caching, memory usage, as well as some front-end specific fixes. Full details in the change log. We recommend all users upgrade. NetSurf 2.5 released 24 Apr 2010 NetSurf 2.5 contains many improvements over the previous release. The major changes are the use of our brand new CSS parser and selection engine (LibCSS), and a newly designed cache for fetched content. Full details in the change log. We recommend all users upgrade. NetSurf 2.1 released 23 May 2009 NetSurf 2.1 is a bug fix release. It contains some improvements to page rendering as well as some front-end specific fixes. Full details in the change log. We recommend all users upgrade. NetSurf 2.0 released 25 Apr 2009 NetSurf 2 is a major update over the 1.x release series, and represents almost two years of development. New features include a new HTML parser, SVG support, PDF export, improved page layout and a more complete GTK interface. This is also the first release for our new framebuffer target and the native ports to AmigaOS, BeOS and Haiku.
2015-09-03Update www/liferea to liferea-1.10.16.leot4-28/+38
pkgsrc changes: * Now liferea depends on www/webkit24-gtk3 (and x11/gtk3) * Update DESCR, MASTER_SITES, HOMEPAGE Changes: 2015-06-19 Lars Windolf <lars.windolf@gmx.de> Version 1.10.16 * Fixes Github #180: Removing item from (v)folder marks all read (reported by GreenLunar) * Fixes Github #140, #158: Vertical pane placement is forgotten. (patch by foresto) * Fixes Github #182: Missing config.h include in date.c (reported by Paul Gevers) 2015-04-20 Lars Windolf <lars.windolf@gmx.de> Version 1.10.15 * Fixes launching URLs in Firefox 36+ (reported by Geoffrey Leach) * Fixes Github #30: Segfault after updating from 1.8 to 1.10 (reported by vakuum) * Improves Github #36, #113: UI lock up during refresh (suggested by mozbugbox) * Fixes typo in Italian translation. 2015-02-26 Lars Windolf <lars.windolf@gmx.de> Version 1.10.14 * Fixes Github #154: Crashes while starting (on corrupt icon) (reported by jcamposz) * Fixes Github #134: Broken default news feed. (reported by pvdl) * Fixes Github #122: Crashes at launch, "segmentation fault" (reported by geoffm) * Fixes some memory leaks (patch by Rich Coe) * Fixes Github #145: Wrong method triggered on 'Launch External' (patch by mozbugbox) * Fixes Github #149: Fixes a random crash on startup (patch by mozbugbox) * Fixes all issues reported by Coverity scan 2015-01-07 Lars Windolf <lars.windolf@gmx.de> Version 1.10.13 * Fixes Github #112: Wrapping issue in folder display (reported by Jeff Fortin) * Fixes Github #114: Avoid termination on UTF-8 validation error * Fixes Github #132: Broken link in documentation (reported by kallus) 2014-10-14 Lars Windolf <lars.windolf@gmx.de> Version 1.10.12 * Fixes Github #86: Support HTTP content negotiation (suggested by DanMan) * Fixes Github #98: Stop calling Atom person constructs w/ URI invalid (patch by Aristotle Pagaltzis) * Fixes Github #100: Problems with dark Adwaita theme in GTK 3.14 (reported by majutsushi) 2014-08-24 Lars Windolf <lars.windolf@gmx.de> Version 1.10.11 * Fixes Github #53: Doesn't automatically update feed name and favicon for new feed (reported by asl97) * Fixes Github #67: Missing dist files for documentation (patch by Mikel Olasagasti) * Fixes Javascript links not opening in new browser tabs * Updated French translation (Guillaume Bernard) * Updated Hebrew translation (Genghis Khan) 2014-07-20 Lars Windolf <lars.lindner@gmail.com> Version 1.10.10 * Fixes Github #26: RTL comments appear incorrectly (reported by yaronf) * Fixes Github #21: No notifications for Tiny Tiny RSS feeds (reported by simontunnat) 2014-04-21 Lars Windolf <lars.lindner@gmail.com> Version 1.10.9 * Fixes Github #19: non void function should return value (reported by kwm81) * Fixes SF #1141: Liferea does not update feeds with TinyTinyRSS (reported by Dominik Grafenhofer, denk_mal, Fabian Henze) * Fixes SF #1150: subscription prop/source: not all fields and buttons visible (reported by David Smith) 2014-03-26 Lars Windolf <lars.lindner@gmail.com> Version 1.10.8 * Fixes Github #13: Parsing errors not visible with dark themes (reported by Steve Kelly) * Fixes SF #1137, #1142: startup race with LifereaHtmlView (reported by Yanko Kaneti) 2014-03-17 Lars Windolf <lars.lindner@gmail.com> Version 1.10.7 * Make Liferea use ETags and send If-None-Match (patch by Chris Siebenmann) 2014-02-24 Lars Windolf <lars.lindner@gmail.com> Version 1.10.6 * Fixes SF #1135: liferea-add-feed doesn't process feed:https// (patch by Kevin Walke) * Fixes SF #1137: crash on startup in enclosure_list_view_load (reported in Redhat #1048499, Fedora #214888) 2014-01-15 Lars Windolf <lars.lindner@gmail.com> Version 1.10.5 * Fixes #1056, #1089, #1098: Honor preferences when opening links (patch by Daniel Seither) * Fixes SF #1096: missing installation of liferea.convert file (reported by stqn) * Fixes Redhat #947358: popup notification only for new items (patch by Fabrice Bellet) 2014-01-13 Lars Windolf <lars.lindner@gmail.com> Version 1.10.4 * Fixes SF #1123: Mistakenly claims "TinyTinyRSS source is not self-updating" (reported by Dominik Grafenhoher) * Fixes SF #1119: Crash on font resize at startup. (reported by David Smith) * Fixes #1117: Selecting last unread item in reduced feed list jumps to next feed (reported by Bruce Guenter) * Updated Arabic translation (Khaled Hosny) 2013-10-08 Lars Windolf <lars.lindner@gmail.com> Version 1.10.3 * Asking for credentials again if TinyTinyRSS login fails * Asking for TinyTinyRSS credentials only 3 times * Checking wether TinyTinyRSS base URL is lost * Added warning on TinyTinyRSS login when source is not self-updating * "--debug-net --debug-verbose" now traces POST data * Patch #230 Add GNOME AppData XML (Mikel Olasagasti) * Updated Italian translation (Gianvito Cavasoli) * Updated Italian localized feed list (Gianvito Cavasoli) 2013-09-05 Lars Windolf <lars.lindner@gmail.com> Version 1.10.2 * Patch SF #222: Make media player seekable (Simon Kågedal Reimer) * Fixes SF #1102: Spelling error in man page (David Smith) * Fixes SF #1104: liferea.desktop missing keywords (David Smith) * Fixes SF #1105: Start Minimized to Tray Does Not Work (reported by bitlord) * Fixes SF #1114: Crashes opening browser on item without link via popup (reported by Rich Coe, David Smith) * Improved handling of broken Atom author information. (Lars Windolf) * Removed dead Google Reader code to avoid doing requests to Google. Replaced with dummy source that even allows normal feed updates. (Lars Windolf) * Added hint to FAQ on how to workaround broken Flash support (Lars Windolf) * Dumping feedlist.opml with indentation for readability. (suggested by Christoph Temmel and Simon Kågedal Reimer) 2013-07-28 Lars Windolf <lars.lindner@gmail.com> Version 1.10.1a * Fixes SF #1102: Liferea does not show a window (reported by genodeftest) 2013-07-28 Lars Windolf <lars.lindner@gmail.com> Version 1.10.1 * Fixes SF #1059: Liferea crashes with system proxy enabled (reported by genodeftest) * Fixes SF #1095: Theme color detection bug / white fonts. (reported by David Smith and others) * Fixes SF #1097: Default feed refresh interval cannot be set to 0 (reported by stqn) * Fixes SF #1100: --debug-gui crashes with segmentation fault (reported by genodeftest) * Fixes SF #1101: Outdated manpage (reported by genodeftest) * Patch SF #225: Make media player work with GStreamer 1.0 (Simon Kågedal Reimer) * Patch SF #226: Add trailing semi-colon to MimeType so that the desktop file validates (Yanko Kaneti) * Patch SF #227: Remove letfover square bracket configure.ac (Yanko Kaneti) * Patch SF #228: Add net.sf.liferea.gschema.xml to AC_CONFIG_FILES (Yanko Kaneti) 2013-07-10 Lars Windolf <lars.lindner@gmail.com> Version 1.10.0 * Added experimental sync support for TheOldReader (Lars Windolf) * Removed 'Update' link in comments display as it is pretty useless (Lars Windolf) * Removed 'No Comments' display as it is rather useless (Lars Windolf) * Prevent re-rendering item display on setting item flagged (Lars Windolf) * Changed unread number rendering to be right bound and non-ellipsized (Lars Windolf) * Fixes g_strstr_len assertions caused by search folder item matching (Rich Coe) * Updated documentation to reflect Google Reader, TheOldReader changes (Lars Windolf) * Removed welcome text, restoring last feed/item selection instead (Lars Windolf) * autogen.sh now reports errors on missing autoconf or intltool (suggested by Scott Kostyshak) * Correctly check for gobject-introspection build dependency (suggested by Scott Kostyshak) * Updated Basque translation (Mikel Olasagasti Uranga) * Updated Danish translation (Joe Hansen) * Updated Dutch translation (Erwin Poeze) * Updated Finnish translation (Jorma Karvonen) * Updated Russian translation (Leonid Selivanov) * Updated Ukrainian translation (Yuri Chornoivan) * Updated Vietnamese translation (Trần Ngọc Quân) * Updated German translation (Lars Windolf) 2013-05-22 Lars Windolf <lars.lindner@gmail.com> Version 1.10-RC4 * Added an option to convert Google Reader subscriptions to local feeds (Lars Windolf) * Fixes SF #1080: segfault opening attachment due to incorrect g_free() (reported by Adam Nielsen) * Fixes SF #1075: GLib warnings of "string != NULL" assertion failure (reported by Simon Kågedal Reimer) * Fixes missing shading in 2-pane mode rendering (reported by Zoho Vignochi) * Fixes search folders including comment items (reported by David Willmore) 2013-05-22 Lars Windolf <lars.lindner@gmail.com> Version 1.10-RC3 * Fixes SF #1069: broken rendering in tt-rss feeds (patch by Simon Kågedal Reimer) * Merged SF #219: View *.xml files along with *.opml files in file chooser (patch by Simon Kågedal Reimer) * Merged SF #233: Show feed name in item view when in merged views. (patch by Simon Kågedal Reimer) * Merged SF #193: Use GtkInfoBar for note in preferences window (patch by Fred Morcos) * Require intltool >= 0.40.4 (Adrian Bunk) * Updated Catalan translation (Gil Forcada) * Updated Danish translation (Joe Hansen) * Updated Polish translation (Piotr Sokół) 2013-05-12 Lars Windolf <lars.lindner@gmail.com> Version 1.10-RC2 * Extended user agent by "AppleWebKit (KHTML, like Gecko)" to solve incorrect mobile redirect with zdf.de * Added social bookmarking support for Mister Wong * Added social bookmarking support for Google Bookmarks * Update of German FAQ * Update of English FAQ * Added MimeType to .desktop file (Craig Barnes) * Fixes SF #1063: Can't open preferences twice (Emilio Pozuelo Monfort, reported by David Smith) * Fixes SF #1040: In feed entries, spaces are replaced with "+" (reported by Emmanuel Seyman) * Fixes SF #1051: Issues in RTL GUI of Liferea (reported by phixy) * Fixes SF #1038, #1074: Updates ttrss feeds over and over (reported by many users) * Fix several memory leaks (Emilio Pozuelo Monfort) * Require glib >= 2.28 for GApplication (Adrian Bunk) * Use the GTK+ 3 version, not wrongly the GTK+ 2 version, of the libindicate GTK+ bindings (Adrian Bunk) * Updated the default feedlists (Adrian Bunk) * Removed support for libnotify < 0.7 (Adrian Bunk) * Added Vietnamese translation (Trần Ngọc Quân) * Updated Albanian translation (Besnik Bleta) * Updated Asturian translation (Iñigo Varela) * Updated Basque translation (Mikel Olasagasti Uranga) * Updated Danish translation (Joe Hansen) * Updated Finnish translation (Jorma Karvonen) * Updated German translation (Christian Stadelmann) * Updated Hungarian translation (Gabor Kelemen) * Updated Japanese translation (Takeshi Hamasaki) * Updated Latvian translation (Rihards Priedītis) * Updated Ukrainian translation (Yuri Chornoivan) 2013-01-30 Lars Windolf <lars.lindner@gmail.com> Version 1.10-RC1 Please note that due to the SourceForge upgrade bug ticket numbering did change. This might be confusing... Old numbers are 7 figures, newer ones only 4! * Patch SF #3407290: Migrate to GSettings (by Mikel Olasagasti) * Patch SF #3579177: Change .desktop category to News;Feed; (by Stanislav Brabec) * Fix for Debian #668197: x-www-browser preference not working (David Smith) * Added slider and time display to media player plugin. * Added Google Plus to social bookmarking options. * Removing deprecated g_thread_init() call * Auto-enable plugins on migration * Added missing -a option to manpage * Updated manpage to reflect XDG path migration * Changing GSettings path from /apps/liferea to /org/gnome/liferea * Changes default download thread concurrency from 2 to 3 * Fixes regression about using the GNOME default font * Improves all item/link launching menus to consistently provide three options: Tab, Browser and External Browser * Fixes SF #1037: Incorrect notifications for Google Reader (patch by David Smith) * Fixes SF #1048: Removed all feedvalidator.org references from FAQ and XSLT as it was reported to host malware. (reported by bkat) * Fixes SF #1041: Some GPLv2 license headers were outdated (reported by Emmanuel Seyman) * Fixes SF #1044: tt-rss API changed (we now support only 1.6 API) (patch by Sebastian Noel) * Fixes assertion when creating new tt-rss subscriptions * Fixes XHTML errors caused by extra <body> tags returned by tt-rss * Fixes missing item list update when browsing item URLs in Liferea 2012-10-28 Lars Windolf <lars.lindner@gmail.com> Version 1.9.7 * Added new preference for default viewing mode. * Changing toolbar button order to prevent accidental clicks on "Mark All Read" when clicking on more frequent buttons like "Next Unread". * Added Google Chrome as a browser choice to preferences. * Roughly reordered browser choices after browser market share. * Removed shading behaviour for unread items in combined view as it doesn't match GTK theming well * Removed auto-hide Javascript menu from combined view to simplify rendering in 3-pane modes. * Fixes items not removed from search folder count when feed is removed. * Fixes search folder rebuilding (do not include comment items). * Fixes SELECT offset handling when rebuilding search folders. * Now gives feedback when rebuilding search folders in feed list. * Update of German translation 2012-10-09 Lars Windolf <lars.lindner@gmail.com> Version 1.9.6 * Removed "pass URL" check box from MIME type dialog. * Removed "Save In" entry from "Download" tab in preferences. * Removed "curl" choice in download tool preferences. * Removed "wget" choice in download tool preferences. * Added "steadyflow" choice in download tool preferences. * Patch SF #3569056: Use symbolic close buttons and spacing on tabs like gedit (Sebastian Keller) * Fixes reloading item when browsing the web inside the item view. * Fixes preferences dialog not opening up a second time. * Fixes padding/alignments in preferences dialog. * Fixes SF #1418701: Remote server pounded into dirt on auto-download (reported by anonymous) * Fixes SF #3567827: Double border around webview (reported by borschty) * Fixes SF #3572660: crash in google_source_remove_node (reported by Yanko Kaneti) * Prevents adding folders/search folders/newsbins to Google Reader * Prevents sorting subscriptions in Google Reader * Updated Polish translation (Wojciech Myrda) 2012-09-14 Lars Windolf <lars.lindner@gmail.com> Version 1.9.5 * GIR dependencies are now mandatory * Migration to XDG directory layout in $HOME * Migrate from X session manager to GtkApplication * Raising GTK dependency to 3.4 for GtkApplication * Storing last window state in GConf now instead in the session command * Added Instapaper.com to social bookmarking sites (SF #3564393) (patch by prurigro) * Use hint label for manual browser command preference (SF #3129429) (patch by Fred Morcos) * Fixes comments_deinit() never being called * Fixes search folder counter update on feed removal * Fixes SF #3567715: Crash on network online status changes (patch by Yanko Kaneti) 2012-08-24 Lars Windolf <lars.lindner@gmail.com> Version 1.9.4 * Changes (c) name "Lars Lindner" -> "Lars Windolf" due to marriage * Removed compilation support for GTK2 * Added GIR plugin system with libpeas * Added GnomeKeyring plugin that stores password in a keyring instead of in the exported OPML. * Added simple media player plugin to play audio and video enclosures. * Only present enclosures of audio and video MIME type * Raise libindicate minimum dependency to 0.6 * Patch SF #3515882: Also support libindicate 0.7 (Chow Loong Jin) * Dropping SIGSEGV signal handler to allow distro crash report tools to work (as found in Ubuntu) * Ensure node ids are in DB node relation on startup. * Adding AM_PROG_AR to configure.ac to work with automake 1.12 * Moved tab close button from the URL bar to the right of the tab label. * Smarter browser toolbar: appears now also in the item view when browsing external content. * Don't ask for Google Reader authentication more than three times with auto-update to avoid annoying the user. * Fixes SF Trac #10: Crash on empty search folders within folders (reported by phyxi) * Fixes SF Trac #19: Auto-load-link doesn't work with feeds with comments (reported by wonk0) * Fixes SF #2855990: Crash when dragging Google Reader feeds outside Google Reader. This is now prevented. (reported by algnod) * Fixes SF #3515880: missing include when compiling with libindicate (patch by Chow Loong Jin) * Fixes search folders being invisible in reduced mode. * Fixes ever growing temporary DB files. (patch by Sven Hartge) * Fixes visibility of enclosure list view for Ubuntu. * Fixes crashes on enclosure list context menu. * Fixes SF #3557513: Fixes crash on empty links in auto-load-link mode. (patch by msquared84) * Fixes unknown metadata types reported in trace when loading Google Reader subscriptions from DB. 2012-03-30 Lars Lindner <lars.lindner@gmail.com> Version 1.9.3 * Added a new item history feature that allows navigating through recently viewed items. * Added new "Fullscreen" toggle menu option. * For GTK+3: request dark theme variant for better contrast between GUI and content. (Jeff Fortin) * Change schema defaults for folder display. Now unread items are loaded per-default when clicking a folder. * Patch SF #3473743: GTK2 dependency has to be 2.24 (bento) * Improve DB item counting statements. (patch by Regis Floret) * Change OpenStreetMap rendering from osmarender to mapnik. (patch by Mikel Olasagasti) * Patch SF #3127016: Automatic scrollbars on enclosure actions view (patch by Fred Morcos) * SF Trac #7: Removing icon from "Cancel All" in update dialog so that .gtkrc "gtk-button-images=0" does have correct effect. (reported by phixy) * Fixes SF #3480238: crashes when double clicking find (reported by joeserneem) * Fixes Debian #660602: Item pane may be reset during feed update (reported by Ben Hutchings) * Reimplemented search folder rule for item with enclosures. * Reimplemented search folder rule for item categories. * Reimplemented feed title matching rule for search folders. (patch by John Levon) * Updated Catalan translation (Gil Forcada) 2012-03-23 Lars Lindner <lars.lindner@gmail.com> Version 1.9.2 * Fixes another migration issue left from 1.9.1 * Increasing sqlite3 dependency to 3.7+ for WAL journaling. * Removed sqliteasync code in favour of WAL journaling. This significantly improves performance for ext4. * Added indices for parent_item_id and parent_node_id to avoid slow item removal. (suggested by Paulo Anes) 2012-03-18 Lars Lindner <lars.lindner@gmail.com> Version 1.9.1 * Disabled migration to ~/.liferea_1.9 * Revert ISO 8601 parsing using Glib due to Debian #653196 This fixes SF #3465106 (reported by Vincent Lefevre) * Fixes SF #3477582: welcome screen not using theme colors. (reported by stqn) * Do not update DB node and subscription info on startup for performance reasons. * Perform VACCUM only when page fragmentation ratio < 10%. (suggested by adriatic) * Removed tooltip on the "Next Unread Item" button to avoid having it flashing each time it is clicked when skimming through items. 2011-12-23 Lars Lindner <lars.lindner@gmail.com> Version 1.9.0 * Add configure switch to compile against GTK2 or GTK3. (Emilio Pozuelo Monfort, Adrian Bunk) * Raise dependencies and updated code to compile against GTK3. (Emilio Pozuelo Monfort, Adrian Bunk) * Fixes proxy preference not affecting the HTML widget. (reported by Chris Siebenmann) * Fixes SF #3363481: Feeds fail to update properly when entries ordered "wrong" (patch by Robert Trace) * Fixes writing subscriptions into DB when importing from OPML (reported by Dennis Nezic)
2015-09-03Fix some bugs related to maxuploadsize. Without these patches, all filesborrill8-23/+130
uploads are blocked irrespective of what is set in the configuration files. Remove MESSAGE as licence has changed, it is now entirely GPL. Bump PKGREVISION.
2015-09-03Update www/nginx-devel to 1.9.4.fhajny2-6/+6
Changes with nginx 1.9.4 18 Aug 2015 *) Change: the "proxy_downstream_buffer" and "proxy_upstream_buffer" directives of the stream module are replaced with the "proxy_buffer_size" directive. *) Feature: the "tcp_nodelay" directive in the stream module. *) Feature: multiple "sub_filter" directives can be used simultaneously. *) Feature: variables support in the search string of the "sub_filter" directive. *) Workaround: configuration testing might fail under Linux OpenVZ. Thanks to Gena Makhomed. *) Bugfix: old worker processes might hog CPU after reconfiguration with a large number of worker_connections. *) Bugfix: a segmentation fault might occur in a worker process if the "try_files" and "alias" directives were used inside a location given by a regular expression; the bug had appeared in 1.7.1. *) Bugfix: the "try_files" directive inside a nested location given by a regular expression worked incorrectly if the "alias" directive was used in the outer location. *) Bugfix: in hash table initialization error handling. *) Bugfix: nginx could not be built with Visual Studio 2015. Changes with nginx 1.9.3 14 Jul 2015 *) Change: duplicate "http", "mail", and "stream" blocks are now disallowed. *) Feature: connection limiting in the stream module. *) Feature: data rate limiting in the stream module. *) Bugfix: the "zone" directive inside the "upstream" block did not work on Windows. *) Bugfix: compatibility with LibreSSL in the stream module. Thanks to Piotr Sikora. *) Bugfix: in the "--builddir" configure parameter. Thanks to Piotr Sikora. *) Bugfix: the "ssl_stapling_file" directive did not work; the bug had appeared in 1.9.2. Thanks to Faidon Liambotis and Brandon Black. *) Bugfix: a segmentation fault might occur in a worker process if the "ssl_stapling" directive was used; the bug had appeared in 1.9.2. Thanks to Matthew Baldwin. Changes with nginx 1.9.2 16 Jun 2015 *) Feature: the "backlog" parameter of the "listen" directives of the mail proxy and stream modules. *) Feature: the "allow" and "deny" directives in the stream module. *) Feature: the "proxy_bind" directive in the stream module. *) Feature: the "proxy_protocol" directive in the stream module. *) Feature: the -T switch. *) Feature: the REQUEST_SCHEME parameter added to the fastcgi.conf, fastcgi_params, scgi_params, and uwsgi_params standard configuration files. *) Bugfix: the "reuseport" parameter of the "listen" directive of the stream module did not work. *) Bugfix: OCSP stapling might return an expired OCSP response in some cases. Changes with nginx 1.9.1 26 May 2015 *) Change: now SSLv3 protocol is disabled by default. *) Change: some long deprecated directives are not supported anymore. *) Feature: the "reuseport" parameter of the "listen" directive. Thanks to Yingqi Lu at Intel and Sepherosa Ziehau. *) Feature: the $upstream_connect_time variable. *) Bugfix: in the "hash" directive on big-endian platforms. *) Bugfix: nginx might fail to start on some old Linux variants; the bug had appeared in 1.7.11. *) Bugfix: in IP address parsing. Thanks to Sergey Polovko. Changes with nginx 1.9.0 28 Apr 2015 *) Change: obsolete aio and rtsig event methods have been removed. *) Feature: the "zone" directive inside the "upstream" block. *) Feature: the stream module. *) Feature: byte ranges support in the ngx_http_memcached_module. Thanks to Martin Mlynar. *) Feature: shared memory can now be used on Windows versions with address space layout randomization. Thanks to Sergey Brester. *) Feature: the "error_log" directive can now be used on mail and server levels in mail proxy. *) Bugfix: the "proxy_protocol" parameter of the "listen" directive did not work if not specified in the first "listen" directive for a listen socket. Changes with nginx 1.7.12 07 Apr 2015 *) Feature: now the "tcp_nodelay" directive works with backend SSL connections. *) Feature: now thread pools can be used to read cache file headers. *) Bugfix: in the "proxy_request_buffering" directive. *) Bugfix: a segmentation fault might occur in a worker process when using thread pools on Linux. *) Bugfix: in error handling when using the "ssl_stapling" directive. Thanks to Filipe da Silva. *) Bugfix: in the ngx_http_spdy_module. Changes with nginx 1.7.11 24 Mar 2015 *) Change: the "sendfile" parameter of the "aio" directive is deprecated; now nginx automatically uses AIO to pre-load data for sendfile if both "aio" and "sendfile" directives are used. *) Feature: experimental thread pools support. *) Feature: the "proxy_request_buffering", "fastcgi_request_buffering", "scgi_request_buffering", and "uwsgi_request_buffering" directives. *) Feature: request body filters experimental API. *) Feature: client SSL certificates support in mail proxy. Thanks to Sven Peter, Franck Levionnois, and Filipe Da Silva. *) Feature: startup speedup when using the "hash ... consistent" directive in the upstream block. Thanks to Wai Keen Woon. *) Feature: debug logging into a cyclic memory buffer. *) Bugfix: in hash table handling. Thanks to Chris West. *) Bugfix: in the "proxy_cache_revalidate" directive. *) Bugfix: SSL connections might hang if deferred accept or the "proxy_protocol" parameter of the "listen" directive were used. Thanks to James Hamlin. *) Bugfix: the $upstream_response_time variable might contain a wrong value if the "image_filter" directive was used. *) Bugfix: in integer overflow handling. Thanks to Régis Leroy. *) Bugfix: it was not possible to enable SSLv3 with LibreSSL. *) Bugfix: the "ignoring stale global SSL error ... called a function you should not call" alerts appeared in logs when using LibreSSL. *) Bugfix: certificates specified by the "ssl_client_certificate" and "ssl_trusted_certificate" directives were inadvertently used to automatically construct certificate chains.
2015-09-02Update to Django 1.4.22: Security fixes.joerg2-6/+6