Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
Changes:
* FIX) qCgiRequestParseQueries() - quoted boundary patch. (by Hidai
Kenichi)
* NEW) qStrUnchar() - remove character from head and tail of the
string.
* NEW) qDecoderVersion() - get the version string of qDecoder library.
* FIX) minor fixes related packaging.
|
|
|
|
* Add release date of each translation as comment in options.mk.
* Add some patch to use double quotation instead of singe quotation
which prevents parsing "\n" as newline.
* Update Russian and Serbian language translations which catch up to
TYPOlight 2.6.2.
* Add new Thai language translation.
|
|
|
|
|
|
General Public License (GPL). It's designed to be run on a large server
farm for a website that gets millions of hits per day. MediaWiki is an
extremely powerful, scalable software and a feature-rich wiki implementation,
that uses PHP to process and display data stored in its MySQL database.
|
|
This version is based on a new branch and may not be fully compatible
with older versions.
Changes since 7.0.1:
NEW) qDecoderSetUploadBase() - Initialize qDecoder() for progressive
uploading.
FIX) qDecoder() - Now qDecoder() supports progressive uploading and direct
file saving into disk.
NEW) qSedArgAddDirect() - For huge size(over 1024 - 1) value.
FIX) qSedArgAdd() - Adjust miss typed variable length. (1024*64 => 1024)
NEW) qGetTimeStr() - Generate date string formatted as 'YYYYMMDDhhmmss'.
NEW) qJavaScript() - Print out some JavaScript code.
NEW) qAwkStr() - Scanning pattern from string.
FIX) qAwkOpen() - Compatibility increment
FIX) qAwkNext() - Expand array size to 1024(before 256)
FIX) qCountRead() - Compatibility increment
FIX) qCountSave() - Compatibility increment
FIX) qCountUpdate() - Compatibility increment
FIX) qDecoder() - Now qdecoder uses more smaller memory
FIX) qCheckFile() - Utility increment
New socket functions(unix only). Please refer the reference for more
details.
NEW) qSocketOpen()
NEW) qSocketClose()
NEW) qSocketWaitReadable()
NEW) qSocketRead()
NEW) qSocketGets()
NEW) qSocketWrite()
NEW) qSocketPuts()
NEW) qSocketPrintf()
NEW) qSocketSendFile()
NEW) qSocketSaveIntoFile()
NEW) qSocketSetNonblock()
NEW) qSocketConv2file()
|
|
GtkHTML-3.24.2 2008-11-24
-------------------------
Bug Fixes:
#472517: Always update the pop-up menu before showing it, whether we're clicking in a selection or not (Matthew Barnes)
|
|
|
|
Security fixes in this version:
MFSA 2008-59 Script access to .documentURI and .textContent in mail
MFSA 2008-58 Parsing error in E4X default namespace
MFSA 2008-57 -moz-binding property bypasses security checks on codebase principals
MFSA 2008-56 nsXMLHttpRequest::NotifyEventListeners() same-origin violation
MFSA 2008-55 Crash and remote code execution in nsFrameManager
MFSA 2008-54 Buffer overflow in http-index-format parser
MFSA 2008-53 XSS and JavaScript privilege escalation via session restore
MFSA 2008-52 Crashes with evidence of memory corruption (rv:1.9.0.4/1.8.1.18)
MFSA 2008-50 Crash and remote code execution via __proto__ tampering
MFSA 2008-49 Arbitrary code execution via Flash Player dynamic module unloading
MFSA 2008-48 Image stealing via canvas and HTTP redirect
MFSA 2008-47 Information stealing via local shortcut files
For more info, see http://www.seamonkey-project.org/releases/seamonkey1.1.13/
|
|
|
|
<pkgsrc-users@NetBSD.org> and only assign the "firefox-bin" package
to <grant@NetBSD.org> because that is the package he really created.
|
|
didn't create this package. He only got listed as maintainer via
"www/seamonkey-bin/Makefile.common".
|
|
|
|
Bump PKGREVISION
|
|
|
|
"Don't put emails directly on the page, they will be scraped"
Stuff that I'm sick of looking at "bob at smith dot com". Why can't
we just write emails in a way that looks normal to people, but is
very, very difficult to scrape off. Most email scrapers only use
very very simple parsing methods. And it isn't as if it is hard to
just do
# Before we search for email addresses...
$page =~ s/\s+at\s+/@/g;
$page =~ s/\s+dot\s+/./g;
This is an arms war dammit, and I want nukes!
|
|
Pkgsrc changes:
o Accept default TT options, don't set them explicitly.
o Add commented-out additional HOMEPAGE using search.cpan.org.
o Add a patch related to module bug
http://rt.cpan.org/Public/Bug/Display.html?id=39100
Thanks to Jens Rehsack for the update, provided in PR pkg/39600!
Upstream changes:
#------------------------------------------------------------------------
# Version 2.20 - 13th August 2008
#------------------------------------------------------------------------
* Updated all the documentation.
* Restored the GIF images that got mangled in the switch from CVS to
Subversion.
* Fixed the Makefile.PL to pre-glob the tests to keep things working
smoothly in Win32.
http://rt.cpan.org/Ticket/Display.html?id=25573
* Applied a patch to Template::Directives from Ben Morrow to fix the
SWITCH/CASE directive when matching strings containing regex metacharacters.
http://rt.cpan.org/Ticket/Display.html?id=24183
* Applied a patch to Template::Parser from Koichi Taniguchi to make it
treat TAGS with case sensitivity.
http://rt.cpan.org/Ticket/Display.html?id=19975
* Changed html_entity_filter_factory() in Template::Filters to only look for
Apache::Utils and HTML::Entities once.
http://rt.cpan.org/Ticket/Display.html?id=19837
Template::Stash
---------------
* Applied a patch to Template::Stash from Jess Robinson which allows you
to call a list method on a single object and have it automatically
upgraded to a single item list. Changed the XS Stash to do the same.
http://lists.tt2.org/pipermail/templates/2006-November/009115.html
* Fixed a minor bug in the XS Stash which prevented it from updating
hash entries with empty, but defined keys. Thanks to Yitzchak
Scott-Thoennes for reporting the problem.
http://lists.tt2.org/pipermail/templates/2007-November/009819.html
* Applied a patch from Alexandr Ciornii to make the XS Stash compile
cleanly under VC++ 6.0 and with Sun's C compiler.
http://rt.cpan.org/Ticket/Display.html?id=20291
Template::Provider
------------------
* Fixed a minor bug in the Template::Provider code added in 2.19 that
caused errors in templates to only be reported once. Subsequent
fetches incorrectly returned 'not found' instead of repeating the
error.
* Made Template::Provider use File::Spec->catfile instead of using '/'
and letting Perl worry about Doing The Right Thing.
http://rt.cpan.org/Ticket/Display.html?id=34489
* Applied patch from Lyle Brooks to add binmode to the _template_content()
method in Template::Provider.
http://rt.cpan.org/Ticket/Display.html?id=38075
* Applied patch from Ted Carnahan to silence UNIVERSAL::isa warnings in
Template::Provider.
http://rt.cpan.org/Ticket/Display.html?id=25468
* Applied patch to Template::Provider from Andrew Hamlin which works around
a bug in Strawberry Perl on Win32.
http://rt.cpan.org/Ticket/Display.html?id=34578
Template::VMethods
------------------
* Applied a patch from Paul "LeoNerd" Evans to make the list.slice vmethod
work properly with negative indices.
http://lists.tt2.org/pipermail/templates/2008-March/010105.html
Plugins
-------
* Added the Math plugin and related files to the MANIFEST so they
actually get shipped out as part of the distribution. D'Oh!
http://rt.cpan.org/Ticket/Display.html?id=27375
* Added the Scalar plugin which adds the .scalar vmethod for calling
object methods and subroutines in scalar context.
* Added Template::Plugin::Assert which allows you to assert that values
are defined.
* Changed Template::Plugin::Filter to weaken the $self reference to avoid
circular references and memory leaks. Thanks to Masahiro Honma for
reporting the problem and suggesting the fix.
* Applied patch from Ronald J Kimball to make Template::Plugin::Date accept
dates with the year coming first.
http://lists.tt2.org/pipermail/templates/2007-July/009540.html
* Added C<1;> to the end of a few plugin modules that were missing it.
ttree
-----
* Changed the --accept option in ttree to match against the full file
path (relative to --src dir) rather than just the file name. This
makes it behave the same way as the --ignore option.
* Applied patch from Lyle Brooks to add binmode to the process()
call in ttree.
http://rt.cpan.org/Ticket/Display.html?id=38076
* Added a patch from Nigel Metheringham also to set binmode in ttree
but via a configuration option.
https://rt.cpan.org/Ticket/Display.html?id=30760
|
|
Change log
* Allow _ as a valid character in file names and URLs. Do not remove #
from file names. It only has a special meaning for URLs.
* Enable unlock on unload for inline edits
Updated packages and products
* Products.CMFPlone 3.1.7
* plone.i18n 1.0.7
* archetypes.kss 1.4.3
|
|
|
|
Pkgsrc changes:
- Remove now unneeded patch file.
Upstream changes:
1.11 13.11.2008
- removed =begin BUGS section in Pod that was preventing proper display
- fixed perlio layer for pass-through binary files
- ref to PodPOMWeb.css used wrong case (undetected on -Win32!)
- fixed page titles when the name has no "-- description"
|
|
blessed by tsarna@.
|
|
|
|
- Fixed the following security issues:
MFSA 2008-58 Parsing error in E4X default namespace
MFSA 2008-57 -moz-binding property bypasses security checks on codebase
principals
MFSA 2008-56 nsXMLHttpRequest::NotifyEventListeners() same-origin
violation
MFSA 2008-55 Crash and remote code execution in nsFrameManager
MFSA 2008-54 Buffer overflow in http-index-format parser
MFSA 2008-53 XSS and JavaScript privilege escalation via session restore
MFSA 2008-52 Crashes with evidence of memory corruption
(rv:1.9.0.4/1.8.1.18)
MFSA 2008-51 file: URIs inherit chrome privileges when opened from chrome
MFSA 2008-47 Information stealing via local shortcut files
- Fixed several stability issues.
- Official releases for the Icelandic and Thai languages are now available.
- Beta releases for the Bulgarian, Esperanto, Estonian, Latvian, Occitan,
and Welsh languages are available for testing.
- Updated the internal Public Suffix list.
- Fixed an issue where the IME input tool used to enter Japanese, Korean,
Chinese and Indic characters was covered by the "Add Bookmark" panel.
(bug 433340)
- Enabled additional EV root certificates. (bug 451305)
- Fixed an issue where some passwords saved using Firefox 3.0.2 did not
work properly. (bug 457358)
- In some cases, Firefox would not properly save proxy settings for
protocols other than HTTP. (bug 446536)
|
|
Initially it was simply bug fix release and please refer the URL for
full changes: http://wiki.typo3.org/TYPO3_4.2.3.
And now, it found out that two Cross Site Scripting (XSS) problem was
fixed by this release.
Regarding the issue in backend module "file": TYPO3 Security Bulletin
TYPO3-20081113-1: Cross-Site Scripting vulnerability in TYPO3 Core
<http://typo3.org/teams/security/security-bulletins/typo3-20081113-1/>
Regarding the issue in system extension "felogin": TYPO3 Security
Bulletin TYPO3-20081113-2: Cross-Site Scripting vulnerability in TYPO3 Core
<http://typo3.org/teams/security/security-bulletins/typo3-20081113-2/>
|
|
Security fixes in this version:
MFSA 2008-58 Parsing error in E4X default namespace
MFSA 2008-57 -moz-binding property bypasses security checks on codebase principals
MFSA 2008-56 nsXMLHttpRequest::NotifyEventListeners() same-origin violation
MFSA 2008-55 Crash and remote code execution in nsFrameManager
MFSA 2008-54 Buffer overflow in http-index-format parser
MFSA 2008-53 XSS and JavaScript privilege escalation via session restore
MFSA 2008-52 Crashes with evidence of memory corruption (rv:1.9.0.4/1.8.1.18)
MFSA 2008-50 Crash and remote code execution via __proto__ tampering
MFSA 2008-49 Arbitrary code execution via Flash Player dynamic module unloading
MFSA 2008-48 Image stealing via canvas and HTTP redirect
MFSA 2008-47 Information stealing via local shortcut files
For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.18/releasenotes/
|
|
|
|
authenticate users by checking credentials via the Cyrus SASL library.
This may be interesting for setups where other daemons (e.g. for SMTP, IMAP
or LDAP) already running at a machine use SASL to authenticate users. The
module is also useful to authenticate users against databases that use shadow
passwords. You do not need to elevate Apache HTTPD's access rights to
superuser privileges.
|
|
* Added AuthExternalContext directive, which defines a string that will be
passed to the authenticator in the CONTEXT environment variable. This can
be set from the .htaccess file or the <Directory> block to give slightly
different behavior from the same authenticator in different directories.
Thanks to Olivier Thauvin <nanardon at mandriva dot org> for this patch.
* Rewrite external authenticator launching code to use Apache's cross-OS
process/thread library instead of directly calling Unix functions.
Theoretically this should get us much closer to being usable on non-
Unix platforms.
* Support alternate syntax for configuration, using DefineAuthExternal and
DefineAuthGroup commands.
* More detailed error logging.
* Much cleanup of documentation.
|
|
Trac 0.11.2 (November 8, 2008)
http://svn.edgewall.org/repos/trac/tags/trac-0.11.2
Trac 0.11.2 contains two security fixes and a couple of bug fixes.
The following list contains only a few highlights:
Bug fixes:
* Fixes potential DOS vulnerability with certain wiki markup. Reported by
Matt Murphy.
* Improved HTML sanitizer filter to detect possible phishing attempts.
Reported by Simon Willison.
* MySQL db backend improvement (reconnect after idle timeout #4465)
* TicketQuery speed improvements (#6436)
* Fixes for RSS feeds (timeline entries no longer truncated #7316, no longer
download some feeds under Firefox #3899)
* Search now works for custom fields (#2530)
* Same order for ticket fields for new and existing tickets (#7018)
* Enforce fine-grained permission for "quickjump" search results (#7655)
* E-mail obfuscation was not done in a few remaining places (#7688, #6532)
* Uninstall of plugins from WebAdmin was not working - feature disabled
for now
* More robust pagination of results for reports and custom queries (#7424,
#7544)
* Support for newer version of pygments (#7622)
* Documentation updated (#7603, #7205, #7318)
Minor improvements:
* Better support for Wiki page hierarchy (show path #2780, link to
parent #2150)
* Custom query allow to search in description and other text fields (#4824)
|
|
Trac-0.11.1.ja2 (Nov 10, 2008)
* Merge security fixes.
- http://trac.edgewall.org/changeset/7657
- http://trac.edgewall.org/changeset/7658
* Fixes datetime presentation on TracReports.
- trac/db_default.py
- trac/ticket/report.py
- trac/ticket/templates/report.rss
- trac/wiki/default-pages/TracReports
* Fixes unicode handlings on TracError.
- trac/core.py
- trac/ticket/web_ui.py
|
|
18 June 2008
The configuration option anchor-as-name has been added.
|
|
- took maintainership
ChangeLog:
5.7015 2008-10-15 22:57:00
- Workaround change in LWP that broke a cookie test (RT #40037)
|
|
- took maintainership
- added depends on p5-Test-Warn
Changelog:
0.07 Wed Sep 24 17:08:34 EDT 2008
- Code was silently truncating storage to MySQL, rendering the
session unreadable. Patched to check DBIx::Class size from
column_info (if available)
- Wrap find_or_create calls in a transaction to (hopefully)
avoid issues with duplicate flash rows
|
|
- took maintainership
ChangeLog:
0.108 2008-09-25
Adding SimpleDB realm to simplify basic auth configuration
Changing user_class to user_model, per req. by mst to avoid confusing newbies.
0.107 2008-09-29
Fix the typo in exception during authenticate
Doc fixes and clarifications
Added missing dependency on Catalyst::Model::DBIC::Schema to Makefile.PL
0.105 2008-03-19
Throw an exception if no fields are provided during authenticate
- better than retrieving a random user.
- still possible to do an empty search by using searchargs
|
|
- took maintainership
Changelog:
0.10007 2008-10-23
- Updating config to allow for inclusion of realm ref's in the main
config hash rather than in a subref called 'realms'
0.10007 2008-08-17
- Update tests prereqs to include Test::Exception (RT #36339)
- Some documentation fixes (including RT #36062)
- Compatibility fix where the use of new style config and old
style Authentication::Store::Minimal would cause a crash
(Reported & fixed by Jos Boumans C<kane@cpan.org>)
- Documentation update on Password - to indicate proper field naming
- Decouple Authentication system from session. The realm class
now allows complete control over how a user is persisted across
requests.
- pod fixes (RT #36062, RT #36063)
|
|
- took maintainership
ChangeLog:
5.7014 04 Nov 2008
- Remove a reference to a FOREACH loop that did not exist (RT #39046)
- Changed some Template Toolkit links to perldoc links (RT #38354)
- Fix Template Toolkit website link (RT #37574)
- Fix part numbering (RT #37963)
- Improvements to the ACCEPT_CONTEXT docs in Manual::Intro
- Happy Election Day, America!
|
|
|
|
2008-11-05 Release 5.820
Main news is the ability to control the heuristics used to determine
the expiry time for response objects.
Gisle Aas (8):
Reformat later parts of Changes
Add a paragraph to summarize the motivation for releases since 5.815
all_pod_files_ok();
Fix POD markup error
Calculation of current_age with missing Client-Date.
The age/freshness methods now take an optional 'time' argument
More correct matching of 'max-age' in freshness_lifetime method
The freshness_lifetime method now support options to control its heuristics
|
|
Pkgsrc changes:
- Add dependency on mail/p5-MIME-Types
- Add minor patch to fix POD formatting
Upstream changes:
1.10 07.11.2008
- passthrough for non-POD files (i.e. images, css, etc.)
- clicking hrefs in the TOC really loads the pages
- recompute height of treeNavigator
- alphabetical sort of Perl docs in each section
- sync displayed pages / TOC
- tooltips for Perl docs
- fixed hyperlinks in perlfunc
- initial page is 'perl' instead of 'perlintro', with hyperlinks
|
|
Changes:
1.10
treeNavigator
- new option noPingOnFirstClick
- new option treeTabIndex
- by default, tree element gets tabIndex 0
- better focus management when quick navigation through keys
- doubleClick handler
- up/down at end of tree falls back to default navigator behaviour
choiceList
- new option choiceItemTagName
autoCompleter
- multivalued
- click handler on drowpdown lists
- new options :
completeOnTab
actionItems
multivalued
multivalue_separator
choiceItemTagName
htmlWrapper
observed_scroll
additional_params
http_method
|
|
- corrected a typo (maintainer)
Changelog:
2.3 Wed Oct 22 23:05:29 EDT 2008
- Fix broken test in t/forward.t (#35056)
|
|
and Servlet API versions, and needs replacement with a newer
version without the known issues in this one.
|
|
|
|
to make directory name match PKGNAME.
This is CGI_Lite.pm, a light-weight easy-to-use Perl5 library for writing
forms-based World Wide Web CGI scripts.
|
|
|
|
GtkHTML-3.24.1.1 2008-11-07
-------------------------
Bug Fixes:
#338921: crash dislaying a mail (Milan Crha)
Updated Translations:
Maxim Dziumanenko (uk)
|
|
- Update French, Italian, Japanese, Latvian, Dutch, Albanian and Swedish
translation which support TYPOlight 2.6.2.
|
|
- drop allowing dependecy to php-pgsql since TYPOlight's framework
has support for PostgreSQL (and some other databases), but TYPOlight
itself runs with MySQL only.
- Add typolight-liveupdate option which alllow using TYPOlight Live Update
service though it inherently conflicts with pkgsrc's framework.
Version 2.6.2 (2008-11-01)
--------------------------
- Updated TinyMCE to version 3.2.0.2
- Improved TinyMCE plugin "typolinks" (#111)
- Added extension repository client
- Added front end module "article navigation"
- Added automatic insertion of the invisible copyright notice
- Added option to copy or move news and events between archives
- Added hook "addCustomRegexp" to add custom regular expressions to widgets
- Added workaround to determine the server IP on Strato servers (#113)
- Added option to add labels to back end drop-down menus (#5)
- Added config/langconfig.php to store custom labels (#119)
- Added a close button to the preview pane (#188)
- Added classes "first" and "last" to comments (#183)
- Added insert tag "image" to insert resized images (#55)
- Added the creator's name to tasks in the task list (#136)
- Added option to define date formats per root page (#190)
- Added event titles to calendar RSS/Atom feeds (#50)
- Fixed a small issue with the style sheet importer (#117)
- Fixed issue with mandatory select menus not throwing errors (#45)
- Fixed issue with flash movies being displayed in the back end (#121)
- Fixed issue with limited number of archives/calendars in front end modules (#159)
- Fixed issue with external news items without text not showing the "read more" link (#128)
- Fixed issue with module personal data not updating newsletter subscriptions (#149)
- Fixed issue with article teaser links not working with empty page ID (#180)
- Fixed issue with Analytics ID being shown in the front end preview (#103)
- Fixed issue with multi-day events and daylight saving time (#199)
- Fixed issue with incorrect e-mail address validation (#182)
- Fixed issue with style sheets not being written after import (#184)
- Fixed a few minor bugs
|