summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2017-10-13www/ruby-jekyll: Add dependency to ruby-bundlertaca1-1/+3
jekyll has implict dependency to bundler in its code. Bump PKGREVISION.
2017-10-13www/contao44: update to 4.4.7taca3-9/+10
Contao 4.4.7 is available 12.10.2017 16:12 by Leo Feyer Contao version 4.4.7 is available. The bugfix release fixes several minor issues, including a problem with the back end referrer management.
2017-10-13py-meinheld: Support SunOS, based on PR#52613jperkin4-8/+45
2017-10-13grafana: Add SMF manifest, based on PR#52612jperkin2-1/+32
2017-10-13py-django-countries: update to 5.0adam2-8/+8
Version 5.0: No longer allow multiple=True and null=True together. This causes problems saving the field, and null shouldn’t really be used anyway because the country field is a subclass of CharField.
2017-10-11py-mod_wsgi: update to 4.5.20adam3-8/+12
Version 4.5.20: Bugs Fixed Installation on MacOS X using setup.py or pip would fail if Xcode 9.0 was installed.
2017-10-11p5-HTTP-Server-Simple-Static: update to 0.13.wiz2-11/+11
0.13 Sun, 08 Oct 2017 09:38:00 +0100 - Reworked file path handling to prevent attacker traversing out of the base directory. Closes: https://rt.cpan.org/Ticket/Display.html?id=123178
2017-10-11py-websocket-client: pkgsrc fixesadam3-39/+45
Sorted PLIST Added ALTERNATIVES Removed underscore (_) from PKGNAME
2017-10-09+ R-curlbrook1-1/+2
2017-10-09Initial import of R-curl v3.0 from CRAN.brook4-0/+63
The curl() and curl_download() functions provide highly configurable drop-in replacements for base url() and download.file() with better performance, support for encryption (https, ftps), gzip compression, authentication, and other 'libcurl' goodies. The core of the package implements a framework for performing fully customized requests where data can be processed either in memory, on disk, or streaming via the callback or connection interfaces.
2017-10-09paros: Disable SSP checks for bundled libraries.jperkin1-3/+3
2017-10-09jetty9: Disable SSP for bundled libraries.jperkin1-1/+2
2017-10-09jalbum: Disable SSP for bundled libraries.jperkin1-1/+2
2017-10-09php-tt-rss-fever-plugin: update HOMEPAGE and MASTER_SITESwiz1-3/+3
2017-10-09p5-HTML-Mason: update HOMEPAGEwiz1-2/+2
2017-10-08py-djangorestframework: update to 3.7.0adam3-14/+35
Django REST framework 3.7 The 3.7 release focuses on improvements to schema generation and the interactive API documentation.
2017-10-08Update to 12.0.3ryoon3-8/+79
Changelog: Nextcloud 12.0.3 delivers a lot of enhancements in various areas including: A number of improvements to email notification templates 2FA enhancements Smarter LDAP password handling File Drop and upload-in-general updates A performance improvement handling large files
2017-10-08llgal: update to 0.13.19wiedi2-11/+11
llgal (0.13.19) * The llgal website has moved to http://bgoglin.free.fr/llgal * The repository moved to http://github.com/bgoglin/llgal * The mailing list is now llgal@googlegroups.com -- Brice Goglin <Brice.Goglin@ens-lyon.org> Thu, 10 Aug 2017 20:24:00 +0200 llgal (0.13.18) * Fix slidenames for subgalleries when -n is used (reported by Richard Betham in Debian bug #652929). * Fix the recognition of existing captions file entries when filenames contain special characters. * Check whether there is a user-given thumbnail before listing as links when -L is given. Thanks to Gabor Kiss for the patch in Debian bug #683809. * Make --cf work with subdirectory entries by not removing the extension and just using the entire directory name (reported by Bruno Raoult). * New option (thumbnails_dimensions_from_css) to avoid any thumbnail dimension in generated HTML. * Add support for replacing <!--EXIF-*--> with the corresponding Exif tag in the slide template. Thanks to Charles Nepote. * Really initialize exiftool only once per gallery. -- Brice Goglin <Brice.Goglin@ens-lyon.org> Mon, 01 Aug 2016 22:25:00 +0200 llgal (0.13.17) * Fix the description of -n in the manpage (thanks Paul Menzel in Debian bug #579096). * Fix miscellaneous typos everywhere, reported by Debian's lintian. * Adapt default convert command-line for graphicsmagick compatibility (reported by Kenyon Ralph in Debian bug #604106). -- Brice Goglin <Brice.Goglin@ens-lyon.org> Tue, 02 Aug 2011 12:31:00 +0100
2017-10-07Makefile: +py-websocket-clientmaya1-1/+2
2017-10-07Add package py-websocket-client version 0.44.0maya4-0/+85
websocket-client module is WebSocket client for python This provide the low level APIs for WebSocket. All APIs are the synchronous functions.
2017-10-07Update to 10.0.3wen3-176/+251
Upstream changes: ## [10.0.3] - 2017-09-15 ### Added - It is now possible to upgrade from 8.2.11 directly to 10 - [#28655](https://github.com/owncloud/core/issues/28655) [#28673](https://github.com/owncloud/core/pull/28673) - Added extra check in case of missing home storage - [#28504](https://github.com/owncloud/core/issues/28504) - Added Shield and Workflow icons - [#28588](https://github.com/owncloud/core/issues/28588) - Enable chunking for big files in web UI when logged in - [#28547](https://github.com/owncloud/core/issues/28547) - Added emitting of hook "post_unshareFromSelf" to Share 2.0 - [#28413](https://github.com/owncloud/core/issues/28413) - Added occ user:inactive command to list inactive users - [#28294](https://github.com/owncloud/core/issues/28294) - Added internal setting for the periodic credentials validity check - [#28298](https://github.com/owncloud/core/issues/28298) - Added jquery events for external storage settings UI when using OAuth - [#28210](https://github.com/owncloud/core/issues/28210) - Added public IThemeService which allows apps like the template editor to interact with the current theme - [#28647](https://github.com/owncloud/core/issues/28647) [#28926](https://github.com/owncloud/core/issues/28926) - Added "passwordEnabled" field to hook data of link shares - [#28827](https://github.com/owncloud/core/issues/28827) - Add new option to disable sharing in every user-mounted external storages - [#28706](https://github.com/owncloud/core/issues/28706) - Added default user and group share permissions - [#28903](https://github.com/owncloud/core/issues/28903) - Added occ command to list routes - [#28907](https://github.com/owncloud/core/issues/28907) - Added mime types for m3u, m3u8, pls mappings to audio streams - [#28885](https://github.com/owncloud/core/issues/28885) ### Changed - Transfer ownership now works with master key encryption - [#28537](https://github.com/owncloud/core/issues/28537) [#28845](https://github.com/owncloud/core/issues/28845) - Reenable medial search by default - [#28064](https://github.com/owncloud/core/issues/28064) - The LoginController now emits "failedLogin" hook signal after a failed login - [#28631](https://github.com/owncloud/core/issues/28631) - All columns that use the fileid have been changed to bigint (64-bits) - [#28581](https://github.com/owncloud/core/issues/28581) - Added search pattern for the occ app:list command - [#28653](https://github.com/owncloud/core/issues/28653) - Allow phpredis develop branch - [#28717](https://github.com/owncloud/core/issues/28717) - Default minimum desktop version in config.php is now 2.2.4 - [#28540](https://github.com/owncloud/core/issues/28540) - Reallow negative mtimes by default in storage implementations - [#28697](https://github.com/owncloud/core/issues/28697) ### Deprecated ### Removed - Removed "themes" folder - [#28617](https://github.com/owncloud/core/issues/28617) [#28999](https://github.com/owncloud/core/issues/28999) - Removed unused Windows checks - [#28612](https://github.com/owncloud/core/issues/28612) - Removed "appstoreenabled" from config.php - [#28714](https://github.com/owncloud/core/issues/28714) - Slash in filename when renaming is not allowed any more in the frontend (unintended "feature") - [#28490](https://github.com/owncloud/core/issues/28490) - Using old chunking protocol on new DAV endpoint is now disallowed - [#28637](https://github.com/owncloud/core/issues/28637) ### Fixed #### Platform - Fix issue with folder sizes on 32-bit systems - [#28654](https://github.com/owncloud/core/issues/28654) - Fix null error in ActivityManager on some setups - [#28420](https://github.com/owncloud/core/issues/28420) - Load app code before running app specific migrations - [#28391](https://github.com/owncloud/core/issues/28391) - Prevent certificate manager to access FS too early, fixes 8.2 to 10 migration issue - [#28668](https://github.com/owncloud/core/pull/28668) - Clustering: Better support of read only config file and apps folder - [#28594](https://github.com/owncloud/core/issues/28594) [#28601](https://github.com/owncloud/core/issues/28601) - Only use IndexIgnore in htaccess if mod_autoindex.c is enabled/loaded - [#28591](https://github.com/owncloud/core/issues/28591) - Fix app enable of not existing app - [#28317](https://github.com/owncloud/core/issues/28317) - Keep redirect information when logging in with wrong password - [#28511](https://github.com/owncloud/core/issues/28511) - Use SwiftMailer antiflood plugin to reconnect after multiple emails sent - [#28180](https://github.com/owncloud/core/issues/28180) - Theme is now properly loaded when displaying full page error messages - [#28622](https://github.com/owncloud/core/pull/28622) - Adjusted warning for PHP 5.5 EOL - [#28765](https://github.com/owncloud/core/issues/28765) - Don't enable market app on upgrade from OC < 10 if "appstoreenabled" was false in config.php - [#28757](https://github.com/owncloud/core/issues/28757) - Use different CSS comment style for IE11 support - [#28752](https://github.com/owncloud/core/issues/28752) - Adjust default slogan - [#28724](https://github.com/owncloud/core/issues/28724) - Catch filecache inconsistencies instead of logging warnings - [#28710](https://github.com/owncloud/core/issues/28710) - Check for null when traversing app passwords table rows - [#28894](https://github.com/owncloud/core/issues/28894) - Improve market upgrade messages + new switch - [#28871](https://github.com/owncloud/core/issues/28871) - Make occ upgrade verbose by default - [#28876](https://github.com/owncloud/core/issues/28876) - Add more information to updatechecker config doc - [#28867](https://github.com/owncloud/core/issues/28867) #### Database - All columns that use the fileid have been changed to bigint (64-bits) - [#28581](https://github.com/owncloud/core/issues/28581) - Fix length of account search term column which broke installs on some DB setups - [#28576](https://github.com/owncloud/core/issues/28576) - Fix column lengths on migrations table to fix index - [#28254](https://github.com/owncloud/core/issues/28254) - Fixed some repeated duplicate key errors relate to oc_preferences table - [#28486](https://github.com/owncloud/core/issues/28486) - Add migration step to fix birthday calendars - [#28338](https://github.com/owncloud/core/issues/28338) - Added cache for new card uri-id mapping to fix db cluster execution - [#28308](https://github.com/owncloud/core/issues/28308) #### Performance - Optimize upload - don't fetch info of non-existing file - [#28704](https://github.com/owncloud/core/issues/28704) - Optimize upload - don't check if file exists if already known - [#28704](https://github.com/owncloud/core/issues/28704) - Optimize upload - do not fetch metadata for part file during checksuming - [#28633](https://github.com/owncloud/core/issues/28633) - Optimize shares retrieval logic with complex scenarios - [#28524](https://github.com/owncloud/core/issues/28524) - Optimize query logger - [#28220](https://github.com/owncloud/core/issues/28220) - Remove initial scanning overhead to speed up federated shares with lots of entries - [#28604](https://github.com/owncloud/core/issues/28604) - Improve contact search performance - [#28042](https://github.com/owncloud/core/issues/28042) - Improved search performance for federated instance users - [#28209](https://github.com/owncloud/core/issues/28209) - Add database index on "oc_share.share_with" column - [#28856](https://github.com/owncloud/core/issues/28856) #### Filesystem / storage - Don't trigger hooks for every new dav chunk, only for final file - [#28817](https://github.com/owncloud/core/issues/28817) - Prevent creating file cache inconsistencies when moving a subtree in or out of a share - [#28219](https://github.com/owncloud/core/issues/28219) - Add check for empty result in storage memcache - [#28548](https://github.com/owncloud/core/issues/28548) - Fix error message when accessing of non-existing file on external storage - [#28613](https://github.com/owncloud/core/issues/28613) - Fixed OAuth frontend logic when connecting to external storage - [#28496](https://github.com/owncloud/core/issues/28496) [#28400](https://github.com/owncloud/core/issues/28400) - Fix quota handling on new Webdav endpoint (affects desktop client 2.2+) - [#28261](https://github.com/owncloud/core/issues/28261) - Fix mounting Webdav as drive in Windows 10 - [#28243](https://github.com/owncloud/core/issues/28243) - Fix rare error that happens when mounting invalid shares - [#28342](https://github.com/owncloud/core/issues/28342) - Handle BSD case for 32 bit filemtime and install warning - [#28790](https://github.com/owncloud/core/issues/28790) - Properly check target rename path in new dav endpoint - [#28737](https://github.com/owncloud/core/issues/28737) - Increment required only when encryption is enabled - [#28880](https://github.com/owncloud/core/issues/28880) #### Files app - Make sure passed upload mtime is always an int - [#28186](https://github.com/owncloud/core/issues/28186) - Fix directory mime type in trashbin list - [#28803](https://github.com/owncloud/core/issues/28803) - Properly highlight files when opening private link - [#28681](https://github.com/owncloud/core/issues/28681) - Fix overlapping selectively in default fileslist - [#28906](https://github.com/owncloud/core/issues/28906) - Better timeout detection in web UI uploads + chunked uploads - [#28896](https://github.com/owncloud/core/issues/28896) - Fix getting drop target when dragging from file manager - [#28882](https://github.com/owncloud/core/issues/28882) - Improve file upload progress bar - [#28861](https://github.com/owncloud/core/issues/28861) #### Sharing - Creating link shares now doesn't forget "Allow editing" permission any more - [#28065](https://github.com/owncloud/core/issues/28065) - Fix "notify user" checkbox in share panel - [#28237](https://github.com/owncloud/core/issues/28237) - Proper message shown when accessing unreachable private links - [#28600](https://github.com/owncloud/core/issues/28600) - Fix exact search term match for LDAP in share autocomplete - [#28851](https://github.com/owncloud/core/issues/28851) - Add tooltip to public shares panel - [#28781](https://github.com/owncloud/core/issues/28781) - Validate share link password even if unchanged when updating share - [#28713](https://github.com/owncloud/core/issues/28713) - Fix DiscoveryManager error during upgrade by untangling federated share app dependencies - [#28858](https://github.com/owncloud/core/pull/28858) #### User management - Don't set email if invalid in user:add command - [#28577](https://github.com/owncloud/core/issues/28577) - Group admins can now properly edit members' email addresses - [#28366](https://github.com/owncloud/core/issues/28366) - Fixed "settings_ajax_changegroupname" typo in route name - [#28746](https://github.com/owncloud/core/issues/28746) - Use IProvidesEMailBackend to fix syncing with LDAP backend - [#28736](https://github.com/owncloud/core/issues/28736) #### API related - Make Backbone PROPPATCH work with options.wait mode - [#28791](https://github.com/owncloud/core/issues/28791) [#28837](https://github.com/owncloud/core/issues/28837) - Detect PROPPATCH failure by parsing multistatus in Backbone Webdav adapter - [#28628](https://github.com/owncloud/core/issues/28628) - Error messages from the server on upload are now displayed in the web UI instead of generic messages - [#28635](https://github.com/owncloud/core/issues/28635) - Properly set the status text in OCS API v2 calls - [#28595](https://github.com/owncloud/core/issues/28595) - Data was not properly set in case of OCS Result object - [#28198](https://github.com/owncloud/core/issues/28198) #### Other - Only reload file list when switching navigation sections - [#28843](https://github.com/owncloud/core/issues/28843) - Make new text file tooltip messages update properly - [#28151](https://github.com/owncloud/core/issues/28151) - Fix trashbin preview icons - [#28158](https://github.com/owncloud/core/issues/28158) - Allow user "0" as in comments - [#28422](https://github.com/owncloud/core/issues/28422) - Better description for occ files:scan command - [#28839](https://github.com/owncloud/core/issues/28839) - Better description for occ files:cleanup command - [#28841](https://github.com/owncloud/core/issues/28841) - Reworded upgrade message for admin with big instance - [#28828](https://github.com/owncloud/core/issues/28828) - Make lost password errors distinguishable - [#28756](https://github.com/owncloud/core/issues/28756) - Add height to menutoggler - [#28723](https://github.com/owncloud/core/issues/28723) - Remove apostrophe from full page file read error text - [#28702](https://github.com/owncloud/core/issues/28702) - Added missing "fatal" log level to occ log:manage level command - [#28683](https://github.com/owncloud/core/issues/28683)
2017-10-07www/contao35: Update to 3.5.30.taca2-7/+7
Version 3.5.30 (2017-10-06) --------------------------- ### Fixed Filter multi-day events outside the scope in the event list (see #8792). ### Fixed Correctly show multi-day events if the shortened view is disabled (see #8782).
2017-10-07py-sparqlwrapper: update to 1.8.0adam3-16/+10
1.8.0: - Updated return formats for not content negotiation situations - Included license in the MANIFEST - Added explicit support for RDF/XML as allowed format - Added proper shebang - Moved keepalive as optional dependency - Fixed hash check on prefixes - Fixed epydoc warnings
2017-10-06py-django: update to 1.11.6adam2-7/+7
Bugfixes: * Made the CharField form field convert whitespace-only values to the empty_value when strip is enabled. * Fixed crash when using the name of a model’s autogenerated primary key (id) in an Index’s fields. * Fixed a regression in Django 1.9 where a custom view error handler such as handler404 that accesses csrf_token could cause CSRF verification failures on other pages
2017-10-06py-MechanicalSoup: update to 0.8.0adam3-9/+15
Version 0.8 Main changes: * `Browser` and `StatefulBrowser` can now be configured to raise a `LinkNotFound` exception when encountering a 404 Not Found error. This is activated by passing `raise_on_404=True` to the constructor. It is disabled by default for backward compatibility, but is highly recommanded. * `Browser` now has a `__del__` method that closes the current session when the object is deleted. * A `Link` object can now be passed to `follow_link`. * The user agent can now be customized. The default includes `MechanicalSoup` and its version. * There is now a direct interface to the cookiejar in `*Browser` classes (`(set|get)_cookiejar` methods). * This is the last MechanicalSoup version supporting Python 2.6 and 3.3. Bug fixes: * We used to crash on forms without action="..." fields. * The `choose_submit` method has been fixed, and the `btnName` argument of `StatefulBrowser.submit_selected` is now a shortcut for using `choose_submit`. * Arguments to `open_relative` were not properly forwarded. Internal changes: * The testsuite has been greatly improved. It now uses the pytest API (not only the `pytest` launcher) for more concise code. * The coverage of the testsuite is now measured with codecov.io. The results can be viewed on: https://codecov.io/gh/hickford/MechanicalSoup * We now have a requires.io badge to help us tracking issues with dependencies. The report can be viewed on: https://requires.io/github/hickford/MechanicalSoup/requirements/ * The version number now appears in a single place in the source code.
2017-10-06apache24: update to 2.4.28adam3-29/+7
Changes with Apache 2.4.28 *) SECURITY: CVE-2017-9798 (cve.mitre.org) Corrupted or freed memory access. <Limit[Except]> must now be used in the main configuration file (httpd.conf) to register HTTP methods before the .htaccess files. *) event: Avoid possible blocking in the listener thread when shutting down connections. *) mod_speling: Don't embed referer data in a link in error page. *) htdigest: prevent a buffer overflow when a string exceeds the allowed max length in a password file. *) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25). *) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically. *) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond), 's' (second) and 'hr' (hour!) time suffixes. *) mod_http2: Fix for stalling when more than 32KB are written to a suspended stream. *) build: allow configuration without APR sources. *) mod_ssl, ab: Fix compatibility with LibreSSL. *) core/log: Support use of optional "tag" in syslog entries. *) mod_proxy: Fix ProxyAddHeaders merging. *) core: Disallow multiple Listen on the same IP:port when listener buckets are configured (ListenCoresBucketsRatio > 0), consistently with the single bucket case (default), thus avoiding the leak of the corresponding socket descriptors on graceful restart. *) event: Avoid listener periodic wake ups by using the pollset wake-ability when available. *) mod_proxy_wstunnel: Fix detection of unresponded request which could have led to spurious HTTP 502 error messages sent on upgrade connections.
2017-10-05py-bleach: update to 2.1.1adam3-16/+12
Version 2.1.1: **Bug fixes** * Fix ``setup.py`` opening files when ``LANG=``. Version 2.1: **Security fixes** * Convert control characters (backspace particularly) to "?" preventing malicious copy-and-paste situations. See `<https://github.com/mozilla/bleach/issues/298>`_ for more details. This affects all previous versions of Bleach. Check the comments on that issue for ways to alleviate the issue if you can't upgrade to Bleach 2.1. **Backwards incompatible changes** * Redid versioning. ``bleach.VERSION`` is no longer available. Use the string version at ``bleach.__version__`` and parse it with ``pkg_resources.parse_version``. * clean, linkify: linkify and clean should only accept text types * clean, linkify: accept only unicode or utf-8-encoded str **Bug fixes** * ``bleach.clean()`` no longer unescapes entities including ones that are missing a ``;`` at the end which can happen in urls and other places. * linkify: fix http links inside of mailto links * clarify security policy in docs * fix dependency specification for html5lib 1.0b8, 1.0b9, and 1.0b10 * add Bleach vs. html5lib comparison to README * fix KeyError exceptions on tags without href attr * add test website and scripts to test ``bleach.clean()`` output in browser
2017-10-05py-django-formtools: update to 2.1adam2-8/+8
2.1: Added testing for Django 1.11 (no code changes were required). Added support for Django 2.0. Dropped testing for Python 3.3 (now end-of-life) on Django 1.8.
2017-10-04serf: Fix build with scons-3.0.wiz2-3/+13
2017-10-04curl: update to 7.56.0.wiz3-9/+23
Curl and libcurl 7.56.0 This release includes the following changes: o curl: enable compression for SCP/SFTP with --compressed-ssh [11] o libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION [11] o vtls: added dynamic changing SSL backend with curl_global_sslset() [28] o new MIME API, curl_mime_init() and friends [32] o openssl: initial SSLKEYLOGFILE implementation [36] This release includes the following bugfixes: o FTP: zero terminate the entry path even on bad input [67] o examples/ftpuploadresume.c: use portable code o runtests: match keywords case insensitively o travis: build the examples too [1] o strtoofft: reduce integer overflow risks globally [2] o zsh.pl: produce a working completion script again [3] o cmake: remove dead code for CURL_DISABLE_RTMP [4] o progress: Track total times following redirects [5] o configure: fix --disable-threaded-resolver [6] o cmake: remove dead code for DISABLED_THREADSAFE [7] o configure: fix clang version detection o darwinssi: fix error: variable length array used o travis: add metalink to some osx builds [8] o configure: check for __builtin_available() availability [9] o http_proxy: fix build error for CURL_DOES_CONVERSIONS [10] o examples/ftpuploadresume: checksrc compliance o ftp: fix CWD when doing multicwd then nocwd on same connection [12] o system.h: remove all CURL_SIZEOF_* defines [13] o http: Don't wait on CONNECT when there is no proxy [14] o system.h: check for __ppc__ as well [15] o http2_recv: return error better on fatal h2 errors [16] o scripts/contri*sh: use "git log --use-mailmap" o tftp: fix memory leak on too long filename [17] o system.h: fix build for hppa [18] o cmake: enable picky compiler options with clang and gcc [19] o makefile.m32: add support for libidn2 [20] o curl: turn off MinGW CRT's globbing [21] o request-target.d: mention added in 7.55.0 o curl: shorten and clean up CA cert verification error message [22] o imap: support PREAUTH [23] o CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD o examples/threaded-ssl: mention that this is for openssl before 1.1 o winbuild: fix embedded manifest option [24] o tests: Make sure libtests & unittests call curl_global_cleanup() o system.h: include sys/poll.h for AIX [25] o darwinssl: handle long strings in TLS certs [26] o strtooff: fix build for systems with long long but no strtoll [27] o asyn-thread: Improved cleanup after OOM situations o HELP-US.md: "How to get started helping out in the curl project" [29] o curl.h: CURLSSLBACKEND_WOLFSSL used wrong value [30] o unit1301: fix error message on first test o ossfuzz: moving towards the ideal integration [31] o http: fix a memory leakage in checkrtspprefix() o examples/post-callback: stop returning one byte at a time o schannel: return CURLE_SSL_CACERT on failed verification [33] o MAIL-ETIQUETTE: added "1.9 Your emails are public" o http-proxy: treat all 2xx as CONNECT success [34] o openssl: use OpenSSL's default ciphers by default [35] o runtests.pl: support attribute "nonewline" in part verify/upload o configure: remove --enable-soname-bump and SONAME_BUMP [37] o travis: add c-ares enabled builds linux + osx [38] o vtls: fix WolfSSL 3.12 build problems [39] o http-proxy: when not doing CONNECT, that phase is done immediately [40] o configure: fix curl_off_t check's include order [41] o configure: use -Wno-varargs on clang 3.9[.X] debug builds o rtsp: do not call fwrite() with NULL pointer FILE * [42] o mbedtls: enable CA path processing [43] o travis: add build without HTTP/SMTP/IMAP o checksrc: verify more code style rules [44] o HTTP proxy: on connection re-use, still use the new remote port [45] o tests: add initial gssapi test using stub implementation [46] o rtsp: Segfault when using WRITEDATA [47] o docs: clarify the CURLOPT_INTERLEAVE* options behavior o non-ascii: use iconv() with 'char **' argument [48] o server/getpart: provide dummy function to build conversion enabled o conversions: fix several compiler warnings o openssl: add missing includes [49] o schannel: Support partial send for when data is too large [50] o socks: fix incorrect port number in SOCKS4 error message [51] o curl: fix integer overflow in timeout options [52] o travis: on mac, don't install openssl or libidn [53] o cookies: reject oversized cookies instead of truncating [54] o cookies: use lock when using CURLINFO_COOKIELIST [55] o curl: check fseek() return code and bail on error o examples/post-callback: use long for CURLOPT_POSTFIELDSIZE o openssl: only verify RSA private key if supported [56] o tests: make the imap server not verify user+password [57] o imap: quote atoms properly when escaping characters [58] o tests: fix a compiler warning in test 643 o file_range: avoid integer overflow when figuring out byte range [59] o curl.h: include <sys/select.h> on cygwin too [60] o reuse_conn: don't copy flags that are known to be equal [61] o http: fix adding custom empty headers to repeated requests [62] o docs: clarify the use of environment variables for proxy [63] o docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS [64] o connect: fix race condition with happy eyeballs timeout [65] o cookie: fix memory leak if path was set twice in header [66] o vtls: compare and clone ssl configs properly [68] o proxy: read the "no_proxy" variable only if necessary [69]
2017-10-03firefox: update minimum required NSSmaya1-2/+2
2017-10-03py-google-api-python-client: update to 1.6.4.wiz2-7/+7
v1.6.4 Version 1.6.4 Bugfix release - Warn when google-auth credentials are used but google-auth-httplib2 isn't available. (#443)
2017-10-03*: Recursive PKGREVISION bump for vala 0.38 update.wiz2-4/+4
2017-10-02py-flask-script: update to 2.0.6kleink2-7/+7
Merge pull request #168 from arkhamdev/master replace imports of flask.ext.script with flask_script in docs
2017-10-02py-yarl: update to 0.13.0adam2-7/+7
0.13.0: Document encoded parameter Support relative urls like ‘?key=value’ Unsafe encoding for QS fixed. Encode ; char in value param Process passwords without user names
2017-10-02Update to 3.20171001. From the changelog:schmonz5-53/+8
[ Joey Hess ] * htmlscrubber: Add support for the video tag's loop and muted attributes. Those were not in the original html5 spec, but have been added in the whatwg html living standard and have wide browser support. * emailauth, passwordauth: Avoid leaving cgisess_* files in the system temp directory. [ Simon McVittie ] * core: Don't decode the result of strftime if it is already tagged as UTF-8, as it might be since Perl >= 5.21.1. (Closes: #869240) * img: Strip metadata from resized images when the deterministic config option is set. Thanks, intrigeri * receive: Avoid asprintf() in IkiWiki::Receive, to avoid implicit declaration, potential misbehaviour on 64-bit platforms, and lack of portability to non-GNU platforms * t: Add a regression test for untrusted git push * receive: Fix untrusted git push with git (>= 2.11) by passing through the necessary environment variables to make the quarantine area work * debian: Declare compliance with Debian Policy 4.1.1 [ Amitai Schleier ] * l10n: Fix the build with po4a 0.52, by ensuring that msgstr ends with a newline if and only if msgid does
2017-10-01Use mozilla-common.mk from firefox52. Bump PKGREVISIONryoon1-3/+3
2017-09-30py-meinheld: make py-gunicorn a build dependency.wiz1-2/+4
It is needed for the tests, but joerg says it's optional at runtime. Bump PKGREVISION.
2017-09-30py-w3lib: update to 1.18.0adam2-7/+7
1.18.0: - Include additional assets used for distribution packages in the source tarball - Consider ``[`` and ``]`` as safe characters in path and query components of URLs, i.e. they are not escaped anymore - Disable codecov project coverage check
2017-09-30py-meinheld: fix build on NetBSD.wiz4-3/+55
Add missing dependency on gunicorn.
2017-09-30Update to 52.4.0ryoon2-363/+363
* Sync with firefox52-52.4.0
2017-09-30Update to 52.4.0ryoon3-29/+7
* Remove an unnecessary patch Changelog: Fixed Various security fixes Various stability and regression fixes Security fixes: #CVE-2017-7793: Use-after-free with Fetch API Reporter Abhishek Arya Impact high Description A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. References Bug 1371889 #CVE-2017-7818: Use-after-free during ARIA array manipulation Reporter Nils Impact high Description A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. This results in a potentially exploitable crash. References Bug 1363723 #CVE-2017-7819: Use-after-free while resizing images in design mode Reporter Nils Impact high Description A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from memory. This results in a potentially exploitable crash. References Bug 1380292 #CVE-2017-7824: Buffer overflow when drawing and validating elements with ANGLE Reporter Omair, Andre Weissflog Impact high Description A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. References Bug 1398381 #CVE-2017-7805: Use-after-free in TLS 1.2 generating handshake hashes Reporter Martin Thomson Impact high Description During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer pointing to the old, freed buffer, resulting in a use-after-free when handshake hashes are then calculated afterwards. This can result in a potentially exploitable crash. References Bug 1377618 #CVE-2017-7814: Blob and data URLs bypass phishing and malware protection warnings Reporter François Marier Impact moderate Description File downloads encoded with blob: and data: URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files. This would allow malicious sites to lure users into downloading executables that would otherwise be detected as suspicious. References Bug 1376036 #CVE-2017-7825: OS X fonts render some Tibetan and Arabic unicode characters as spaces Reporter Khalil Zhani Impact moderate Description Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. References Bug 1393624 Bug 1390980 #CVE-2017-7823: CSP sandbox directive did not create a unique origin Reporter Jun Kokatsu Impact moderate Description The content security policy (CSP) sandbox directive did not create a unique origin for the document, causing it to behave as if the allow-same-origin keyword were always specified. This could allow a Cross-Site Scripting (XSS) attack to be launched from unsafe content. References Bug 1396320 #CVE-2017-7810: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 Reporter Mozilla developers and community Impact critical Description Mozilla developers and community members Christoph Diehl, Jan de Mooij, Jason Kratzer, Randell Jesup, Tom Ritter, Tyson Smith, and Sebastian Hengst reported memory safety bugs present in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
2017-09-30py-uwsgitop: update to 0.10adam3-15/+18
0.10: Unknown changes
2017-09-30Update to 56.0ryoon3-556/+833
* Sync with firefox-56.0
2017-09-30Update to 56.0ryoon71-2856/+556
New Launched Firefox Screenshots, a feature that lets users take, save, and share screenshots without leaving the browser Added support for address form autofill (en-US only) Updated Preferences Added search tool so users can find a specific setting quickly Reorganized preferences so users can more easily scan settings Rewrote descriptions so users can better understand choices and how they affect browsing Revised data collection choices so they align with updated Privacy Notice and data collection strategy Media opened in a background tab will not play until the tab is selected Improved Send Tabs feature of Sync for iOS and Android, and Send Tabs can be discovered even by users without a Firefox Account Changed Replaced character encoding converters with a new Encoding Standard-compliant implementation written in Rust Added hardware acceleration for AES-GCM Updated the Safe Browsing protocol to version 4 Reduced update download file size by approximately 20 percent Improved security for verifying update downloads Developer Added Layout Panel to CSS Grid DevTools
2017-09-29Add missing dependencies. Bump revisionjoerg1-1/+4
2017-09-29+ py-flash-commonjoerg1-1/+2
2017-09-29Add py27-flask-common-0.2.0:joerg4-0/+42
A Flask extension with lots of common time-savers (file-serving, favicons, etc).
2017-09-29py-whitenoisejoerg1-1/+2
2017-09-29Add py-whitenoise-4.0b3:joerg4-0/+93
WhiteNoise provides radically simplified static file serving for Python web apps. With a couple of lines of config WhiteNoise allows your web app to serve its own static files, making it a self-contained unit that can be deployed anywhere without relying on nginx, Amazon S3 or any other external service. (Especially useful on Heroku, OpenShift and other PaaS providers.) It’s designed to work nicely with a CDN for high-traffic sites so you don’t have to sacrifice performance to benefit from simplicity. WhiteNoise works with any WSGI-compatible app but has some special auto-configuration features for Django. WhiteNoise takes care of best-practices for you, for instance: - Serving compressed content (gzip and Brotli formats, handling Accept-Encoding and Vary headers correctly) - Setting far-future cache headers on content which won’t change
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-03 10:47:23 +0000