summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2015-07-14Update to 2.0.9, even though it doesn't support 5.22 yet, as it claims;wiz3-28/+6
at least it supports 5.20.0. 2.0.9 June 18, 2015 Add note to README about MP_INLINE problem when building with GCC 5. [Niko Tyni <ntyni@debian.org>] Fix t/api/aplog.t for apr-1.5.2. [Steve Hay] Note that Perl 5.22.x is currently not supported. This is logged as CPAN RT#101962 and will hopefully be addressed in 2.0.10. [Steve Hay] Fix unthreaded build, which was broken in 2.0.9-rc2. [Steve Hay] Remove PerlInterpScope. This has not been working properly with threaded MPMs with httpd-2.4.x and the use-case of this directive was questionable. [Jan Kaluza] Allow running the test suite with httpd-2.4.x when mod_access_compat is not loaded. [Steve Hay] Add support for Apache httpd-2.4.x. [Torsten Foertsch, Jan Kaluza, Steve Hay, Gozer] Don't call modperl_threaded_mpm() et al. from XS code. Fixes Debian Bug #765174. [Niko Tyni <ntyni@debian.org>] Make sure modperl_interp_select uses r->server rather than the passed s parameter to find the interpreter pool to pull an interpreter from. This fixes an issue with vhosts with a separate interpreter pool and runtime dir-config merges that used to pull the interpreter from the wrong pool. [Torsten Foertsch] PerlInterpScope is now more advisory. Using $(c|r)->pnotes will bind the current interpreter to that object for it's lifetime. $(c|r)->pnotes_kill() can be used to prematurely drop pnotes and remove this binding. [Torsten Foertsch] Now correctly invokes PerlCleanupHandlers, even if they are the only handler type configured for that request [Torsten Foertsch] For threaded MPMs, change interpreter managment to a new, reference-counted allocation model. [Torsten Foertsch] Expose modperl_interp_pool_t via ModPerl::InterpPool, modperl_tipool_t via ModPerl::TiPool and modperl_tipool_config_t via ModPerl::TiPoolConfig [Torsten Foertsch] Expose modperl_interp_t via ModPerl::Interpreter [Torsten Foertsch] Fix t/compat/apache_file.t on Windows. Apache::File->tmpfile() wants TMPDIR or TEMP from the environment, or else defaults to /tmp. The latter is no good on Windows, so make sure the environment variables are passed through. (TEMP should be set to something suitable on Windows.) [Steve Hay] Fix t/api/err_headers_out.t with HTTP::Headers > 6.00. [Rolando <rolosworld@gmail.com>] Fix the build with VC++ and dmake (rather than nmake) on Windows. The Makefile generated by Apache2::Build uses shell commands for the manifest file, but neglected to tell dmake to use the shell. [Steve Hay] Don't write an 'rpm' target into the Makefile on Windows. It isn't relevant on Windows, and the (hard-coded, not MakeMaker-generated) recipe group has syntax which dmake doesn't understand. [Steve Hay]
2015-07-14Bump PKGREVISION for libnotify dependency.wiz1-1/+2
2015-07-14Add libnotify dependency.youri1-1/+2
2015-07-14Revert part of the patch assuming strnstr(3) on NetBSDkhorben2-12/+3
strnstr(3) was added to NetBSD -current but is not in netbsd-7 (or earlier releases). This patch was confirmed to still work on -current by wiz@ (7.99.19 amd64), and on netbsd-7 by myself (7.0_RC1, amd64).
2015-07-13Switch to webkit24-gtk, still packages fine. Bump PKGREVISION.wiz1-3/+3
2015-07-12Update to 2.8.4, from Leonardo Taccari via wip.wiz4-17/+25
pkgsrc changes: o Convert the osabi dependency to NOT_FOR_PLATFORM. o Add LICENSE information (like www/webkit24-gtk) Changes: WebKitGTK+ 2.8.4 ================= - Make WebSQL work by using a default quota instead of always failing in openDatabase with DOM Exception 18. - Improve detection and usage of GL/GLES/EGL libraries. - Fix a crash on memory allocation using bmalloc on 32bit systems. - Fix DOCUMENT_VIEWER cache model to actually disable the memory cache. - Fix a WebProcess crash after too many redirect error when there's an active NPAPI plugin. - Fix a WebProcess crash when gtk-font-name setting is empty. - Ensure Math.abs() doesn't return negative. - Correctly restore accelerated compositing after a WebProcess crash. - Respect X-Frame-Options headers when loading from application cache. - Several crashes and rendering issues fixed. - Fix the MIPS N64 detection. - Fix several memory leaks. - Translation updates: Catalan. WebKitGTK+ 2.8.3 ================= - Fixed a regression introduced in 2.8.2 that broke downloads when using the network process. - Fix the build with Netscape plugins disabled. - Fix XPixamps leaked by GLContext when using EGL on X11. WebKitGTK+ 2.8.2 ================= - Fix network redirection to a non HTTP destination. - Use a webkit subdirectory for the disk cache to avoid conflicts with other files in the cache directory when the disk cache is cleaned up. - Do not preserve the Origin header on on cross-origin redirects. - Prevent WorkQueue objects from being leaked and ensure its worker thread always exits.
2015-07-12Comment out dependencies of the stylewiz54-132/+132
{perl>=5.16.6,p5-ExtUtils-ParseXS>=3.15}:../../devel/p5-ExtUtils-ParseXS since pkgsrc enforces the newest perl version anyway, so they should always pick perl, but sometimes (pkg_add) don't due to the design of the {,} syntax. No effective change for the above reason. Ok joerg
2015-07-12Update to 6.08:wiz2-7/+6
6.08 2015-07-10 - Resolve new uninitialized warning from HTTP::Request::Common::request_type_with_data (RT#105787) 6.07 2015-07-09 - Allow subclasses to override the class of parts - it used to be hardcoded to HTTP::Message. (Gisle Aas, RT#79239) - Added support for is_client_error, is_server_error to HTTP::Response (Karen Etheridge) - Added flatten interface to HTTP::Headers (Tokuhiro Matsuno, GH#5) - Allow PUT to pass content data via hashrefs just like with POST (Michael Schilli, GH#9) - Fix for "Content-Encoding: none" header (Gisle Aas, RT#94882) - Add support for HTTP status 308, defined in RFC 7238 (Olivier Mengué, RT#104102) - drop the use of "use vars" (Karen Etheridge)
2015-07-12Another PKGREVISION bump for a reimport.wiz1-2/+2
2015-07-12Update to 2.8 and new 4.0 webkit API. From Leonardo Taccari in pkgsrc-wip.wiz24-908/+503
2.8.1 What’s new in the WebKitGTK+ 2.8.1 release? Handle keep-alive connections in GStreamer HTTP source element. Fix a crash in DOMObjectCache when a wrapped object owned by the cache is unreffed by the user. Fix rendering of drag and drop icon. Fix the build with REDIRECTED_XCOMPOSITE_WINDOW disabled in X11 platform. Fix the build with Wayland target enabled. Fix the build for HPPA. 2.8 Highlights of the WebKitGTK+ 2.8.0 release Initial gestures support. HTML5 notifications. User script messages. HTML5 color input. APNG support. Performance improvements. Playing audio notification signal. Web view background colors. and lots of changes in the 2.6 series; major changes in 2.6 were: Highlights of the WebKitGTK+ 2.6.0 release WebKit1 API has been removed. Switch to CMake build system. Binary version bump to make WebKit1 and WebKit2 parallel installable. Several API changes. The DOM bindings API has been split into stable and unstable parts. Support for browser plugins using GTK+3, leaving the GTK+2 dependency optional for building a plugin process with support for GTK+2 plugins. HighDPI support for non-accelerated compositing contents. Dynamic user agent string depending on the site. User scripts API.
2015-07-12Switch from www/webkit-gtk to www/webkit24-gtk. Bump PKGREVISION.wiz4-11/+11
2015-07-12+ webkit24-gtk.wiz1-1/+2
2015-07-12Re-import webkit-gtk as webkit24-gtk-2.4.9nb1 as www/webkit24-gtk to makewiz23-0/+1236
space for the next major version. WebKit is an open source web browser engine. WebKit is also the name of the Mac OS X system framework version of the engine that's used by Safari, Dashboard, Mail, and many other OS X applications. WebKit's HTML and JavaScript code began as a branch of the KHTML and KJS libraries from KDE. This is the GTK2+ port of the engine of the 2.4 series.
2015-07-11Update to 0.7.93. No Changelog/NEWS file available,wiz4-45/+6
but two pkgsrc patches are included.
2015-07-11Update to 2.10wen2-7/+6
Upstream changes: 2.10 2015-06-22 [DOCUMENTATION] - Kwalitee improvements in distribution
2015-07-11Update to 1.3140wen2-6/+6
Upstream changes: 1.3140 2015-07-03 - Promote 1.3139 to non-trial release. [ STATISTICS ] - code churn: 1 file changed, 17 insertions(+), 9 deletions(-) 1.3139 2015-06-25 [ BUG FIXES ] - Reverted caching of session, as it can cause problem when the user is using 'session->destroy' (GH#1120). - Reverted loading config from hash. (GH#1121) [ STATISTICS ] - code churn: 9 files changed, 55 insertions(+), 249 deletions(-)
2015-07-10+ uhttpmock.wiz1-1/+2
2015-07-10Import uhttpmock-0.4.0 as www/uhttpmock.wiz5-0/+81
uhttpmock is a project for mocking web service APIs which use HTTP or HTTPS. It provides a library, libuhttpmock, which implements recording and playback of HTTP request-response traces.
2015-07-09Add firefox38-l10n.ryoon1-1/+2
2015-07-09Import firefox38-l10n-38.1.0 as www/firefox38-l10n.ryoon5-0/+28385
This package contains language packs for www/firefox38.
2015-07-09Add firefox38.ryoon1-1/+2
2015-07-09Import firefox38-38.1.0 as www/firefox38.ryoon177-0/+12251
Mozilla Firefox is a free, open-source and cross-platform web browser for Windows, Linux, MacOS X and many other operating systems. It is fast and easy to use, and offers many advantages over other web browsers, such as tabbed browsing and the ability to block pop-up windows. Firefox also offers excellent bookmark and history management, and it can be extended by developers using industry standards such as XML, CSS, JavaScript, C++, etc. Many extensions are available. This package tracks 38 ESR.
2015-07-08Update to 1.0037wen2-9/+8
Update DEPENDS Upstream changes: 1.0037 2015-06-19 10:01:31 PDT [Improvements] - Lint: Support HTTP/2 in SERVER_PROTOCOL (kazuho) #511 - Bump HTTP::Headers::Fast dependency #512
2015-07-08Update to 0.18wen2-7/+6
Upstream changes: 0.18 2015-06-19T06:06:14Z - import content_type_charset from HTTP::Headers. #5 (miyagawa)
2015-07-08Update to 2.9.1wen2-7/+6
Upstream changes: Moodle-2.9.1 Highlights A lot of work has been done in dealing with unexpected grade changes in the gradebook which some users have experienced when upgrading from Moodle 2.7 to 2.8 or 2.9. See the user documentation Grades min max and Gradebook calculation changes for details. MDL-48618 - Dealing with unexpected changes to grades after upgrading to Moodle 2.8 MDL-49257 - Adjusting weights when extra credit item is present causes unexpected behaviour MDL-48239 - Changing the maximum grade of items with calculation to the value different from 100 Another release highlight is the introduction of the authorised access to the YouTube repository. After upgrading you will need to enter an API key from YouTube into your site's YouTube repository settings. MDL-50176 - Authenticated access to the YouTube repository Functional changes MDL-50089 - Gradebook export now respects aggregate only non-empty grades for percentage and letter MDL-48467 - Atto: Clean the html even if submitting the form when Atto is in html view mode API changes MDL-49022 - sync_users must trigger event core\event\user_updated Security issues A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version. Fixes and improvements MDL-50177 - Upgrading assignments in 2.7/2.8 works even when conditional access is used MDL-39353 - Connection to a hub from behind a proxy server MDL-49742 - Enrolled users page no longer displays sorting by fields that are not used in user identity MDL-47787 - After deleting a quiz, its question categories and questions remain in the database MDL-49764 - Fixed gradebook UI inconsistencies in Internet Explorer MDL-49885 - The course overview block can now be added to Dashboard MDL-50675 - Display Wikimedia repository thumbnails (caused by the change in Wikimedia API) MDL-50091 - Fixed fatal error in gradebook singleview after a module has been uninstalled MDL-48664 - Messaging contacts paging bar no longer expands and overlaps other text MDL-50092 - User unenrollment is now working with IMS Enterprise MDL-49560 - SOAP web service now works with token MDL-50004 - Fix coursename and enrolment icons in category combo on Frontpage MDL-50646 - Site default language should be set as the language for new users MDL-50394 - Grade to pass no longer throws an error when a decimal point separator is used MDL-50276 - Added missing new line separator in plain text e-mails from the forum MDL-49061 - The activity completion report in a course correctly shortens headers when multi language filter is used MDL-50275 - Added missing version bump after risk bitmap change in MDL-49941 MDL-50380 - Fixed missing parameter error when editing files in wiki
2015-07-06Remove test and demo from wideimage library which is used by filemangertaca2-129/+5
since these files contains XSS problem. Bump PKGREVISION.
2015-07-06SunOS x86_64 needs -DUSE_SYSTEM_MALLOC in CPPFLAGS to successfully build.richard1-1/+3
See https://bugs.webkit.org/show_bug.cgi?id=119565
2015-07-06Changes 3.5.6:adam4-25/+10
* ext_edirectory_userip_acl: fix uninitialized variable * Do not blindly forward cache peer CONNECT responses. * Bug 3483: assertion failed store.cc:1866: 'isEmpty()' * Use relative-URL in errorpage.css for SN.png * Bug 4193: Memory leak on FTP listings * Bug 4274: ssl_crtd.8 not being installed * Fix CONNECT failover to IPv4 after trying broken IPv6 servers * Bug 4183: segfault when freeing https_port clientca on reconfigure or exit. * TLS: Disable client-initiated renegotiation * Translations: add Spanish US dialect alias * Cleanup: replace __DATE__ and __TIME__ macros * Fix assertion String.cc:221: "str" * Fix assertion comm.cc:759: "Comm::IsConnOpen(conn)" in ConnStateData::getSslContextDone * Bug 3875: bad mimeLoadIconFile error handling * Support custom OIDs in *_cert ACLs * Bug 3329: The server side pinned connection is not closed properly
2015-07-05Make WebGL work on NetBSDmartin4-2/+37
2015-07-04firefox 39.0 requires nss>=3.19.2.tsutsui1-2/+2
2015-07-04Update typo3_62 to 6.2.14 (TYPO3 6.2.14).taca3-96/+17
2015-07-01 e7376af [RELEASE] Release of TYPO3 6.2.14 (TYPO3 Release Team) 2015-07-01 0f3fb37 #59231 [SECURITY] Add hook to implement login protection methods (Nicole Cordes) 2015-07-01 2973b57 #67538 [SECURITY] Disallow access to fallback storage '0' (Nicole Cordes) 2015-07-01 8546772 #67458 [SECURITY] XSS in 3rd party library Flowplayer (Wouter Wolters) 2015-07-01 9be2f6b #34107 [SECURITY] Encode link text properly in typolink (Nicole Cordes) 2015-07-01 7695d91 #59211 [SECURITY] XSS in Filelist (Markus Bucher) 2015-07-01 4f6e84b #59258 [SECURITY] Regenerate session id upon login if needed (Helmut Hummel) 2015-07-01 bff9fa5 #56644 [SECURITY] Prevent edit of file metadata of files with no access (Marc Bastian Heinrichs) 2015-07-01 fac6e13 #67799,#67775 [TASK] Travis: container based and no composer self-update (Christian Kuhn) 2015-07-01 ca0df84 #67835 [BUGFIX] Use single quotes in query for values in EXT:workspaces (Andreas Fernandez) 2015-07-01 e742451 #67867 [BUGFIX] Duplicate XLIFF identifiers (Xavier Perseguers) 2015-07-01 af872e2 #65205 [BUGFIX] Load language file for error messages (Nicole Cordes) 2015-07-01 1f19bb5 #66895 [BUGFIX] Correction of Filelink of FAL in linkvalidator (Pierre Boivin) 2015-07-01 603edc3 #67837 [BUGFIX] 1st level cache for ``QueryResult::count()`` (Mathias Brodala) 2015-06-30 a5bec24 #16840 [BUGFIX] hmenu.special = list must evaluate showAccessRestrictedPages (Gilles FOUET) 2015-06-30 f151333 #67834 [BUGFIX] Fix SQL error in IndexSearchRepository (Tim Schreiner) 2015-06-29 d9d1754 #67779 [TASK] Travis: Add github oauth token (Anja Leichsenring) 2015-06-29 abbfcac [FOLLOWUP][BUGFIX] Only count items in ForViewHelper when ``iteration`` argument is set (Anja Leichsenring) 2015-06-29 3db88fe #67801 [BUGFIX] Only count items in ForViewHelper when ``iteration`` argument is set (Mathias Brodala) 2015-06-26 e1198d9 #67770 [BUGFIX] Fix wrong variable spelling in RteHtmlParser (Markus Klein) 2015-06-26 0f4157b #50231 [BUGFIX] Increase lifetime of cache_rootline (Christian Kuhn) 2015-06-25 53d22b5 #67238 [BUGFIX] Avoid race conditions in typo3temp/Cache (Bernhard Kraft) 2015-06-25 ed1948d #67735 [BUGFIX] Make ext_update working (Markus Klein) 2015-06-25 583eb67 #67703 [BUGFIX] Cleanup AbstractExceptionHandler and fix variable access (Mathias Schreiber) 2015-06-23 9d8c63b #67697 [TASK] Bump class alias loader version (Helmut Hummel) 2015-06-23 0edaed8 #67696 [TASK] Bump composer installer version (Helmut Hummel) 2015-06-23 25aa461 #67466 [TASK] Improve "Overwrite files" message (Alina Fleser) 2015-06-22 8d2fc92 #67620 [BUGFIX] Illegal string offset in DataPreprocessor (Wouter Wolters) 2015-06-22 2f9eca0 #24858 [BUGFIX] "fixed_lgd_cs" may crash in eID environment (Benjamin Mack) 2015-06-22 396595f #67563 [BUGFIX] Render correct menu item for broken shortcut (Andreas Wolf) 2015-06-21 0d0b502 #23270 [BUGFIX] Correctly handle forceTypeValue = 0 (Benjamin Mack) 2015-06-20 75114d6 #22774 [BUGFIX] Sorting ignored in "Template Overview" (Reinhard Führicht) 2015-06-19 ec1d0cb #67413 [BUGFIX] Don't force lowercase on SQL SET() values (Stephan Großberndt) 2015-06-18 af4c2a0 #66352 [BUGFIX] Properly resolve link format to page type (Daniel Schmidt) 2015-06-18 e903c84 #67432 [BUGFIX] Check if file exists before deletion (Christoph Lehmann) 2015-06-18 88f3653 #67543 [BUGFIX] Fix check for import / export folder (Alexander Stehlik) 2015-06-18 9e228bc #67599 [BUGFIX] Use single quotes for password check (Andreas Fernandez) 2015-06-18 28bdc45 #65563 [BUGFIX] File metadata can't be edited inline (Benjamin Mack) 2015-06-18 ee8c8b9 #67586 [TASK] Add basic unit tests for ContentObjectRenderer::typoLink (Nicole Cordes) 2015-06-17 0b7dee6 #56296 [BUGFIX] Properly escape option value for groups (Wouter Wolters) 2015-06-17 77ac8f2 #64654 [BUGFIX] Fix SQL error on recursive TypoScript template inclusion (Andreas Fernandez) 2015-06-17 856ca19 #60261 [BUGFIX] Add "tx_felogin" folder in "uploads" folder during install (Jonathan IROULIN) 2015-06-16 d4ee83c #53034 [BUGFIX] Always use MCRYPT_DEV_URANDOM if using mcrypt (Helmut Hummel) 2015-06-15 4eff898 #67463 [BUGFIX] Scheduler now throws OutOfBoundsException on SQL query error (Mathias Schreiber) 2015-06-15 c90515e #64429 [TASK] Remove version number from generator tag (Wouter Wolters) 2015-06-11 af1b31b #67408 [TASK] Nail down php 5.6 instantiation issues in tests (Christian Kuhn) 2015-06-10 0d91bf6 #67383 [BUGFIX] Check $http_response_headers in GeneralUtility::getUrl() (Andreas Fernandez)
2015-07-04Update COMMENT.ryoon1-2/+2
2015-07-04Update to 2.4.5ryoon1-2/+1
Changelog: Git v2.4.5 Release Notes ======================== Fixes since v2.4.4 ------------------ * The setup code used to die when core.bare and core.worktree are set inconsistently, even for commands that do not need working tree. * There was a dead code that used to handle "git pull --tags" and show special-cased error message, which was made irrelevant when the semantics of the option changed back in Git 1.9 days. * "color.diff.plain" was a misnomer; give it 'color.diff.context' as a more logical synonym. * The configuration reader/writer uses mmap(2) interface to access the files; when we find a directory, it barfed with "Out of memory?". * Recent "git prune" traverses young unreachable objects to safekeep old objects in the reachability chain from them, which sometimes showed unnecessary error messages that are alarming. * "git rebase -i" fired post-rewrite hook when it shouldn't (namely, when it was told to stop sequencing with 'exec' insn). Also contains typofixes, documentation updates and trivial code clean-ups. Git v2.4.4 Release Notes ======================== Fixes since v2.4.3 ------------------ * l10n updates for German. * An earlier leakfix to bitmap testing code was incomplete. * "git clean pathspec..." tried to lstat(2) and complain even for paths outside the given pathspec. * Communication between the HTTP server and http_backend process can lead to a dead-lock when relaying a large ref negotiation request. Diagnose the situation better, and mitigate it by reading such a request first into core (to a reasonable limit). * The clean/smudge interface did not work well when filtering an empty contents (failed and then passed the empty input through). It can be argued that a filter that produces anything but empty for an empty input is nonsense, but if the user wants to do strange things, then why not? * Make "git stash something --help" error out, so that users can safely say "git stash drop --help". * Clarify that "log --raw" and "log --format=raw" are unrelated concepts. * Catch a programmer mistake to feed a pointer not an array to ARRAY_SIZE() macro, by using a couple of GCC extensions. Also contains typofixes, documentation updates and trivial code clean-ups.
2015-07-03Update to 39.0ryoon3-271/+360
* Sync with firefox-39.0.
2015-07-03Update to 39.0ryoon20-856/+201
Changelog: New Share Hello URLs with social networks New Project Silk: Smoother animation and scrolling (Mac OS X) New Support for 'switch' role in ARIA 1.1 (web accessibility) New SafeBrowsing malware detection lookups enabled for downloads (Mac OS X and Linux) New Support for new Unicode 8.0 skin tone emoji Changed Removed support for insecure SSLv3 for network communications Changed Disable use of RC4 except for temporarily whitelisted hosts Changed The malware detection service for downloads now covers common Mac file types (Bug 1138721) Changed of displaying dashed lines is improved (Mac OS X) (Bug 1123019) HTML5 List-style-type now accepts a string value HTML5 Enable the Fetch API for network requests from dedicated, shared and service workers HTML5 Cascading of CSS transitions and animations now matches the current spec HTML5 Implement <link rel="preconnect">allowing anticipation of a future connection without revealing any information HTML5 Added support for CSS Scroll Snap Points Developer Drag and drop enabled for nodes in Inspector markup view Developer Webconsole input history persists even after closing the toolbox Developer Cubic bezier tooltip now shows a gallery of timing-function presets for use with CSS animations Developer localhost is now available offline for WebSocket connections Fixed Improve performance for IPv6 fallback to IPv4 Fixed Fix incomplete downloads being marked as complete by detecting broken HTTP1.1 transfers Fixed The Security state indicator on a page now correctly ignores loads caused by previous pages Fixed Fixed an issue where a Hello conversation window would sometimes fail to open Fixed A regression that could lead to Flash not displaying has been fixed Fixed Update to NSS 3.19.2 Fixed Various security fixes Fixed in Firefox 39 2015-71 NSS incorrectly permits skipping of ServerKeyExchange 2015-70 NSS accepts export-length DHE keys with regular DHE cipher suites 2015-69 Privilege escalation in PDF.js 2015-68 OS X crash reports may contain entered key press information 2015-67 Key pinning is ignored when overridable errors are encountered 2015-66 Vulnerabilities found through code inspection 2015-65 Use-after-free in workers while using XMLHttpRequest 2015-64 ECDSA signature validation fails to handle some signatures correctly 2015-63 Use-after-free in Content Policy due to microtask execution error 2015-62 Out-of-bound read while computing an oscillator rendering range in Web Audio 2015-61 Type confusion in Indexed Database Manager 2015-60 Local files or privileged URLs in pages can be opened into new tabs 2015-59 Miscellaneous memory safety hazards (rv:39.0 / rv:31.8 / rv:38.1)
2015-07-01Update to 0.11.1. Changes not found.wiz3-15/+32
2015-07-01Remove mozilla-enigmail option.ryoon4-103/+2
mail/seamonkey-enigmail supercedes this.
2015-06-30rollback to previous version of curl. Seespz7-32/+56
http://mail-index.netbsd.org/tech-pkg/2015/06/29/msg015105.html
2015-06-30Fix build with libvpx 1.4.0markd2-1/+57
2015-06-30Recursive revbump associated with update of lang/ocaml to 4.02.2.jaapb5-8/+10
2015-06-30Update to 1.68:wiz2-7/+6
2015-06-25 Karen Etheridge <ether@cpan.org> Release 1.68 Kent Fredric: - Sort hash keys to make generated query predictable Slaven Rezic: - Add new tests for path segments Brendan Byrd: - Add sftp scheme
2015-06-30Recursive revbump from pkgsrc/multimedia/libvpx.ryoon7-12/+14
2015-06-30Added back missing checksums, PR pkg/50007nils1-1/+34
2015-06-30update of curl to version 7.43.0. Upstream RELEASE_NOTES:spz7-56/+32
Curl and libcurl 7.43.0 Public curl releases: 147 Command line options: 176 curl_easy_setopt() options: 219 Public functions in libcurl: 58 Contributors: 1291 This release includes the following changes: o Added CURLOPT_PROXY_SERVICE_NAME[11] o Added CURLOPT_SERVICE_NAME[12] o New curl option: --proxy-service-name[13] o Mew curl option: --service-name [14] o New curl option: --data-raw [5] o Added CURLOPT_PIPEWAIT [15] o Added support for multiplexing transfers using HTTP/2, enable this with the new CURLPIPE_MULTIPLEX bit for CURLMOPT_PIPELINING [16] o HTTP/2: requires nghttp2 1.0.0 or later o scripts: add zsh.pl for generating zsh completion o curl.h: add CURL_HTTP_VERSION_2 This release includes the following bugfixes: o CVE-2015-3236: lingering HTTP credentials in connection re-use [30] o CVE-2015-3237: SMB send off unrelated memory contents [31] o nss: fix compilation failure with old versions of NSS [1] o curl_easy_getinfo.3: document 'internals' in CURLINFO_TLS_SESSION o schannel.c: Fix possible SEC_E_BUFFER_TOO_SMALL error o Curl_ossl_init: load builtin modules [2] o configure: follow-up fix for krb5-config [3] o sasl_sspi: Populate domain from the realm in the challenge [4] o netrc: support 'default' token o README: convert to UTF-8 o cyassl: Implement public key pinning o nss: implement public key pinning for NSS backend o mingw build: add arch -m32/-m64 to LDFLAGS o schannel: Fix out of bounds array [6] o configure: remove autogenerated files by autoconf o configure: remove --automake from libtoolize call o acinclude.m4: fix shell test for default CA cert bundle/path o schannel: fix regression in schannel_recv [7] o openssl: skip trace outputs for ssl_ver == 0 [8] o gnutls: properly retrieve certificate status o netrc: Read in text mode when cygwin [9] o winbuild: Document the option used to statically link the CRT [10] o FTP: Make EPSV use the control IP address rather than the original host o FTP: fix dangling conn->ip_addr dereference on verbose EPSV o conncache: keep bundles on host+port bases, not only host names o runtests.pl: use 'h2c' now, no -14 anymore o curlver: introducing new version number (checking) macros o openssl: boringssl build brekage, use SSL_CTX_set_msg_callback [17] o CURLOPT_POSTFIELDS.3: correct variable names [18] o curl_easy_unescape.3: update RFC reference [19] o gnutls: don't fail on non-fatal alerts during handshake o testcurl.pl: allow source to be in an arbitrary directory o CURLOPT_HTTPPROXYTUNNEL.3: only works with a HTTP proxy o SSPI-error: Change SEC_E_ILLEGAL_MESSAGE description [20] o parse_proxy: switch off tunneling if non-HTTP proxy [21] o share_init: fix OOM crash o perl: remove subdir, not touched in 9 years o CURLOPT_COOKIELIST.3: Add example o CURLOPT_COOKIE.3: Explain that the cookies won't be modified [22] o CURLOPT_COOKIELIST.3: Explain Set-Cookie without a domain [23] o FAQ: How do I port libcurl to my OS? o openssl: Use TLS_client_method for OpenSSL 1.1.0+ o HTTP-NTLM: fail auth on connection close instead of looping [24] o curl_setup: Add macros for FOPEN_READTEXT, FOPEN_WRITETEXT [25] o curl_getdate.3: update RFC reference o curl_multi_info_read.3: added example o curl_multi_perform.3: added example o curl_multi_timeout.3: added example o cookie: Stop exporting any-domain cookies [26] o openssl: remove dummy callback use from SSL_CTX_set_verify() o openssl: remove SSL_get_session()-using code o openssl: removed USERDATA_IN_PWD_CALLBACK kludge o openssl: removed error string #ifdef o openssl: Fix verification of server-sent legacy intermediates [27] o docs: man page indentation and syntax fixes o docs: Spelling fixes o fopen.c: fix a few compiler warnings o CURLOPT_OPENSOCKETFUNCTION: return error at once [28] o schannel: Add support for optional client certificates o build: Properly detect OpenSSL 1.0.2 when using configure o urldata: store POST size in state.infilesize too [29] o security:choose_mech remove dead code o rtsp_do: remove dead code o docs: many HTTP URIs changed to HTTPS o schannel: schannel_recv overhaul [32] This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) This release would not have looked like this without help, code, reports and advice from friends like these: Alessandro Ghedini, Alexander Dyagilev, Anders Bakken, Anthony Avina, Ashish Shukla, Bert Huijben, Brian Chrisman, Brian Prodoehl, Chris Araman, Dagobert Michelsen, Dan Fandrich, Daniel Melani, Daniel Stenberg, Dmitry Eremin-Solenikov, Drake Arconis, Egon Eckert, Frank Meier, Fred Stluka, Gisle Vanem, Grant Pannell, Isaac Boukris, Jens Rantil, Joel Depooter, Kamil Dudka, Linus Nielsen Feltzing, Linus Nielsen Feltzing Feltzing, Liviu Chircu, Marc Hoersken, Michael Osipov, Oren Souroujon, Orgad Shaneh, Patrick Monnerat, Patrick Rapin, Paul Howarth, Paul Oliver, Rafayel Mkrtchyan, Ray Satiro, Sean Boudreau, Tatsuhiro Tsujikawa, Tomas Tomecek, Viktor Szakáts, Ville Skyttä, Yehezkel Horowitz, (43 contributors) Thanks! (and sorry if I forgot to mention someone) References to bug reports and discussions on issues: [1] = http://curl.haxx.se/mail/lib-2015-04/0095.html [2] = https://github.com/bagder/curl/pull/206 [3] = https://github.com/bagder/curl/commit/5b668606527613179d0349f21b4ab0df2971e3d2#commitcomment-10473445 [4] = https://github.com/bagder/curl/pull/141 [5] = https://github.com/bagder/curl/issues/198 [6] = http://curl.haxx.se/mail/lib-2015-04/0199.html [7] = https://github.com/bagder/curl/issues/244 [8] = https://github.com/bagder/curl/issues/219 [9] = https://github.com/bagder/curl/pull/258 [10] = https://github.com/bagder/curl/issues/254 [11] = http://curl.haxx.se/libcurl/c/CURLOPT_PROXY_SERVICE_NAME.html [12] = http://curl.haxx.se/libcurl/c/CURLOPT_SERVICE_NAME.html [13] = http://curl.haxx.se/docs/manpage.html#--proxy-service-name [14] = http://curl.haxx.se/docs/manpage.html#--service-name [15] = http://curl.haxx.se/libcurl/c/CURLOPT_PIPEWAIT.html [16] = http://curl.haxx.se/libcurl/c/CURLMOPT_PIPELINING.html [17] = https://github.com/bagder/curl/issues/275 [18] = https://github.com/bagder/curl/issues/281 [19] = https://github.com/bagder/curl/issues/282 [20] = https://github.com/bagder/curl/issues/267 [21] = http://curl.haxx.se/mail/lib-2015-05/0056.html [22] = http://curl.haxx.se/mail/lib-2015-05/0115.html [23] = http://curl.haxx.se/mail/lib-2015-05/0137.html [24] = https://github.com/bagder/curl/issues/256 [25] = https://github.com/bagder/curl/pull/258#issuecomment-107093055 [26] = https://github.com/bagder/curl/issues/292 [27] = https://rt.openssl.org/Ticket/Display.html?id=3621&user=guest&pass=guest [28] = http://curl.haxx.se/mail/lib-2015-06/0047.html [29] = http://curl.haxx.se/mail/lib-2015-06/0019.html [30] = http://curl.haxx.se/docs/adv_20150617A.html [31] = http://curl.haxx.se/docs/adv_20150617B.html [32] = https://github.com/bagder/curl/issues/244
2015-06-29More nullptr -> false changes for gcc 5.xmarkd3-1/+29
2015-06-29Update to 6.12wen2-7/+6
Upstream changes: 6.12 2015-06-18 - Welcome to the Mojolicious core team Dan Book. - Added TO_JSON method to Mojo::Collection. (wttw) - Added find_packages function to Mojo::Loader. - Fixed bug in Mojo::Message where multipart content would get downgraded unnecessarily.
2015-06-29Update to 4.21:wiz2-7/+6
4.21 2015-06-16 - Fix regression of tmpFileName when calling with a plain string (GH #178, thanks to Simon McVittie for the report and fix)
2015-06-29Rename MASTER_SITE_SOURCEFORGE_JP to MASTER_SITE_OSDN.ryoon1-2/+2
sourceforge.jp is renamed to osdn.jp. However its mirror sites are not ready for osdn.jp.
2015-06-27Not MAKE_JOBS_SAFE.joerg1-1/+5
2015-06-26Fix configure stage error when both of -apache-mpm-event andryoon2-4/+14
-apache-mpm-worker is set. And fix PLIST mismatch error.