summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2004-07-23Update liferea to 0.5.2.minskim2-6/+5
Changes: * A middle mouse click on the itemlist now toggles read status or the headline flag depending on the column you click. (Lars Lindner) * Now favicons that are older than one month are automatically updated (Lars Lindner) * The search result now provides an extra column with the favicon of the feed the found headline belongs to. (Lars Lindner) * The mozilla browser module now respects the configured proxy settings. (Lars Lindner) * Feed and item information is now properly localized. (Lars Lindner and Nathan Conrad) * Popup menu for the systray icon. (James Bowes) * Improvements for the favicon handling. favicon.ico files are now retrieved from the webserver path where the feed is located. favicon.ico in the webserver root is tried only if this first attempt fails. favicons are now redownloaded every 30 days. (Lars Lindner & Nathan Conrad) * Liferea now saves when the mainwindow is maximized. (Marc Deslauriers) * The gnomevfs2 dependency from GtkHTML2 was removed. (Nathan Conrad) * 0.5.1 did falsely encode HTTP URL hash marks as %23. This is fixed now. (Lars Lindner) * When a feed source command is executed a useful return code is set so it won't be unavailable due to missing status information. (Christophe Barbe)
2004-07-23Bump i386 packages communicator-4.75 (linux) and communicator-4.80atatat3-1/+141
(bsdi) for i386 to revision 1 after adding scripts that apply tiny binary patches that stop them from closing fd 0 before running "netstat -in". I finally got tired of the warnings from my kernel, so I made the binaries stop doing it.
2004-07-22Update to Jakarta Tomcat 5.0.27.erh3-10/+13
Various bugs fixed, some added and renamed jar files. Changelog available at: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/changelog.html
2004-07-22update to 1.1.14drochner2-6/+6
changes: * ZPsycopgDA now support unicode strings and different backend encodings. * ZPsycopgDA accept query data as an extra parameter to execute() (but still no way to give it extra data from inside a ZSQL
2004-07-22add python as categoryrecht4-8/+8
ok'd a while back at pkgsrcCon by agc and wiz
2004-07-20Add and enable cgic.jmmv1-1/+2
2004-07-20Initial import of cgic, version 2.02, provided by cinnion at ka8zrt.com:jmmv10-0/+257
This is the code written to accompany Thomas Boutell's book "CGI Programming in C & Perl". It provides a library of routines for use in CGI programming, and unlike cgilib-0.5, this library handles the "multipart/form-data" encoding required to use the FILE input control type as defined in the HTML specification. NOTE: It should be aware that there were a few developer visible changes made from Thomas Boutell's original distribution when integrating it with the NetBSD packages environment. They are: 1) Instead of being yet another source file which is used in building the application, the package have been converted totally into a library format. This library is linked using "-lcgic". 2) As a result of the first item, the developer no longer writes their entry point under the function name of cgiMain(). Instead, the user will provide their own main(), and will need to call cgiInit() before any other cgic function is called.
2004-07-20update to mod_python 2.7.10recht3-13/+14
changes: This release addresses a vulnerability in mod_python 2.7.9 whereby a specific query string processed by mod_python would cause the httpd process to crash. The previously released version 2.7.9 was supposed to correct this issue, but is still vulnerable. There are no other changes or improvements from the previous version in this release. If you are currently using mod_python 2.7.9 or earlier, it is highly recommended that you upgrade to 2.7.10 as soon as possible.
2004-07-20galeon is now galeon12abs7-335/+2
galeon-devel is now galeon
2004-07-20Update galeon to 1.3.16 and rename from galeon-devel to galeonabs8-433/+295
1.3.16: * Works with Mozilla 1.4 through 1.7, 1.8a1 and trunk * Add thumbnailing to the Open dialogs * Improved context menus * Ensure URL's for frames and redirects don't get saved in the history * Fix the spinner background with gradient themes * Fix a crash when removing items in the personal data manager * Fix reloading of framesets * Make better use of gtk 2.4 API's * lots of other bug fixes 1.3.15: * Works with Mozilla 1.4 through 1.7rc2 and trunk * Requires gtk+ 2.4 * Major download re-write: o Much improved robustness; lots of crashes fixed o Improved filename generation when saving pages o Pages generated by a POST correctly saved * Restored offline mode * Restored ability to block cookie sites when removing cookies * Improved layout of personal data manager * Added context menu to links in page info dialog * Added image save button to page info dialog * Always show the menubar when F10 is pressed * Use more stock icons from the current icon theme * Implement user stylesheet support (put them in ~/.galeon/stylesheets)
2004-07-20Re-import galeon 1.2.14 as galeon12.abs8-0/+508
Galeon 1.2.x has been end of lifed and will not be updated for mozilla post 1.7
2004-07-19Update to 20040716 (changes unknown); also try to address PR 25089wiz4-9/+20
by Kazu Yamamoto.
2004-07-19Fix a case of invalid use of preprocessing directives within macrokristerw2-8/+45
args that breaks compilation whith gcc 2.95.
2004-07-18Update to 7.52. Tested on NetBSD/i386 1.6.2 and Solaris 9. FreeBSDheinz3-12/+15
version stays at 7.51 due to lack of test facility. Changes since 7.51 (from the changelog for windows): Security Fixed a URI obfuscation weakness enabling impersonation of legitimate web sites. Illegal characters in addresses will be stripped. This addresses Security Focus Bugtraq ID #10517. Solved frame injection vulnerability that allowed for spoofing (Secunia Advisory SA11978). Solved certificate verification problem. Miscellaneous Changed search.ini to ensure correct default dictionary and encyclopedia searches. On how to protect customized files from being overwritten, see Release Note. Changed main toolbar. Now includes options Open, Save, Print, Find, Home, Panels, Tile, and Cascade. Various stability and rendering improvements. "Show in" submenu for messages now has nested display of nested filters. Corrected message reply behavior when View > Encoding is set to autodetect. Fixed SSL renegotiation problem causing login trouble on certain secure sites. Solved issue concerning JavaScript method "confirm()". Various encoding-related improvements to accommodate Japanese language version.
2004-07-18Accept perl-thread in addition to perl.kim1-2/+2
2004-07-18bump PKGREVISIONs for last boehm-gc updaterecht2-2/+4
(BUILDLINKS_DEPENDS change)
2004-07-17Accept perl-thread in addition perl.kim1-2/+2
2004-07-17Set the correct PYTHONBIN for configure.recht1-2/+3
Should fix kristerw's bulk build.
2004-07-17we do need the LDFLAGS setting removed in rev 1.2, put that backjdolecek1-4/+6
we also want the apxs rules from www/apache/module.mk, since the package's own Makefile doesn't propagate LDFLAGS; include www/apache/module.mk AFTER mk/apache.mk, so that the right Apache buildlink3.mk is still used for the build
2004-07-17Use "mod_ssl-2.8.19" sources for SSL hooks, bump package revision.tron2-6/+6
2004-07-17Update "ap-ssl" package to version 2.8.19:tron2-6/+6
- Fix ssl_log() related format string vulnerability in mod_proxy hook functions.
2004-07-17make a stab at making this Apache2-ready (not tested)jdolecek1-5/+7
2004-07-17Added ap2-python package.darcy1-1/+2
Based on the FreeBSD package.
2004-07-17Initial import of ap2-pythondarcy6-0/+104
Version 3.1.3 Apache module that embeds the Python interpreter As discussed on the mailing list, this package builds and runs for the most part but fails if the web server has too many backends. Adding it breaks nothing and does add functionality. I will file a PR to keep track of the remaining issue.
2004-07-17Enable OpenLDAP support if APR_USE_OPENLDAP == [Yy][Ee][Ss].xtraeme1-1/+8
(ldap and auth_ldap modules). This closes PR pkg/26166.
2004-07-16Update www/thy to 0.9.3 (latest stable version), update provided byxtraeme2-6/+7
the author Gergely Nagy in PR pkg/25318. Changes: * Thy 0.9.3 [Dead Gardens] -- 2004-06-30 Fixed a minor information leak in the virtual hosting code, noticed by Jerome Magnin. Also fixed a couple of memory leaks and disabled meta-data caching by default. * Thy 0.9.2 [Re-connect] -- 2004-06-15 The major reason for this release is a discovery of a possible Denial Of Service attack against Thy, one which can easily crash a Thy process. However, this was just a NULL-dereference, which can not be used to execute arbitrary code. And is fixed in this release. Also, epoll support was disabled in this release. * Thy 0.9.1 [Hurt] -- 2004-06-05 When Thy starts a helper process (such as the Authoriser or the Worker), she will close and reopen the connection to syslog with a different ID. There is also a new option to limit how many bytes Thy will use for mapping files into memory. When the limit is reached, no mmapping will occur. This is only useful when using a Worker, since otherwise files are not mapped to memory at all. SRP authentication was implemented in this version. One of the major new features in this release is the ability to compile multiple event systems into Thy. In the past, Thy had to be recompiled if one wanted to use epoll or kqueue instead of select. Now, every possible event system is compiled in, and one can select the appropriate one at run time. Thy will also try to select the most appropriate one if none was explicitly specified. Some smaller bugs were also fixed, as usual. * Thy 0.9.0 [A Pirate I Was Meant To Be] -- 2004-04-25 This release features a way to make Thy interact better with web cache software: the ability to set the max-age of resources and expiry times. The Linux version of the networking code was updated to be able to serve files larger than 2Gb when Thy is compiled with Large File Support (which is the default).
2004-07-16apparently the LDFLAGS setting is not necessary, so g/cjdolecek1-3/+1
2004-07-16Import ap-auth-mysql 4.3.1, Apache module for user authenticationjdolecek10-1/+392
using information stored in a MySQL database. Based on pkgwip package done by cube@, thanks a lot! Package should support both Apache 1.x and 2.x, but only Apache 1.x tested at the moment.
2004-07-16define MASTER_SITES after including the os/arch specific Makefilegrant1-21/+21
fragment so the right MOZ_VER is picked up.
2004-07-15re-add Firefox 0.8 binary pkg for NetBSD/i386, both the NetBSD nativegrant3-3/+22
and Linux versions (define MOZILLA_USE_LINUX to use the Linux version). both tested on NetBSD-current.
2004-07-15- Backout recent APACHE_DEFAULT_FILES build def as some ppl are havingadrianp3-1451/+1422
problems with it and it also looks like it might be breaking some apache related packages.
2004-07-14Update neon to 0.24.7epg3-7/+7
Changes in release 0.24.7: * Compression interface fixes: - fix issues handling content decoding and request retries from authentication challenges (Justin Erenkrantz) - fix places where reader callback would receive spurious size=0 calls - fix to pass user-supplied userdata to user-supplied acceptance callback * Fix for RFC2617-style digest authentication (Hideaki Takahashi). * Fix to pick up gethostbyname() on QNX 6.2.
2004-07-14Fix PLIST issue.seb1-2/+2
As soon as PLIST_SRC is defined the "default" PLIST files are not added to PLIST_SRC. So 'PLIST' has to be explicitly listed in the APACHE_DEFAULT_FILES == "yes" case.
2004-07-14s,/var,${VARBASE},gxtraeme1-6/+6
2004-07-14- Update to apache 2.0.50adrianp8-1433/+1566
- Add new build def APACHE_DEFAULT_FILES Changes with Apache 2.0.50 *) SECURITY: CAN-2004-0493 (cve.mitre.org) Close a denial of service vulnerability identified by Georgi Guninski which could lead to memory exhaustion with certain input data. [Jeff Trawick] *) mod_cgi: Handle output on stderr during script execution on Unix platforms; preventing deadlock when stderr output fills pipe buffer. Also fixes case where stderr from nph- scripts could be lost. PR 22030, 18348. [Joe Orton, Jeff Trawick] *) mod_alias now emits a warning if it detects overlapping *Alias* directives. [André Malo] *) mod_rewrite no longer turns forward proxy requests into reverse proxy requests. PR 28125 [ast domdv.de, André Malo] *) ap_set_sub_req_protocol and ap_finalize_sub_req_protocol are now exported on Win32 and Netware as well (minor MMN bump). PR 28523. [Edward Rudd <eddie omegaware.com>, André Malo] *) Restore the ability to disable the use of AcceptEx on Win9x systems automatically (broken in 2.0.49). PR 28529. [André Malo] *) <VirtualHost myhost> now applies to all IP addresses for myhost instead of just the first one reported by the resolver. This corrects a regression since 1.3. [Jeff Trawick] *) util_ldap: allow relative paths for LDAPTrustedCA to be resolved against ServerRoot PR#26602 [Brad Nicholes] *) SECURITY: CAN-2004-0488 (cve.mitre.org) mod_ssl: Fix a buffer overflow in the FakeBasicAuth code for a (trusted) client certificate subject DN which exceeds 6K in length. [Joe Orton] *) mod_dav_fs: Fix MKCOL response for missing parent collections, which caused issues for the Eclipse WebDAV extension. PR 29034. [Joe Orton] *) mod_deflate: Fix memory consumption (which was proportional to the response size). PR 29318. [Joe Orton] *) mod_ssl: Log the errors returned on failure to load or initialize a crypto accelerator engine. [Joe Orton] *) Allow RequestHeader directives to be conditional. PR 27951. [Vincent Deffontaines <vincent gryzor.com>, André Malo] *) Allow LimitRequestBody to be reset to unlimited. PR 29106 [André Malo] *) Fix a bunch of cases where the return code of the regex compiler was not checked properly. This affects: mod_setenvif, mod_usertrack, mod_proxy, mod_proxy_ftp and core. PR 28218. [André Malo] *) mod_ssl: Fix a potential segfault in the 'shmcb' session cache for small cache sizes. PR 27751. [Geoff Thorpe <geoff geoffthorpe.net>] *) Remove 2Gb log file size restriction on some 32-bit platforms. PR 13511. [Joe Orton] *) mod_logio no longer removes the EOS bucket. PR 27928. [Bojan Smojver <bojan rexursive.com>] *) htpasswd no longer refuses to process files that contain empty lines. [André Malo] *) Regression from 1.3: At startup, suexec now will be checked for availability, the setuid bit and user root. The works only if httpd is compiled with the shipped APR version (0.9.5). PR 28287. [André Malo] *) Unix MPMs: Stop dropping connections when the file descriptor is at least FD_SETSIZE. [Jeff Trawick] *) Fix handling of IPv6 numeric strings in mod_proxy. [Jeff Trawick] *) mod_isapi: send_response_header() failed to copy status string's last character. PR 20619. [Jesse Pelton <jsp pkc.com>] *) Fix a segfault when requests for shared memory fails and returns NULL. Fix a segfault caused by a lack of bounds checking on the cache. PR 24801. [Graham Leggett] *) Throw an error message if an attempt is made to use the LDAPTrustedCA or LDAPTrustedCAType directives in a VirtualHost. PR 26390 [Brad Nicholes] *) Fix a potential segfault if the bind password in the LDAP cache is NULL. PR 28250. [Jari Ahonen <jah progress.com>] *) Quotes cannot be used around require group and require dn directives, update the documentation to reflect this. Also add quotes around the dn and group within debug messages, to make it more obvious why authentication is failing if quotes are used in error. PR 19304. [Graham Leggett] *) The Microsoft LDAP SDK escapes filters for us, stop util_ldap from escaping filters twice when the backslash character is used. PR 24437. [Jess Holle <jessh ptc.com>] *) Overhaul handling of LDAP error conditions, so that the util_ldap_* functions leave the connections in a sane state after errors have occurred. PR 27748, 17274, 17599, 18661, 21787, 24595, 24683, 27134, 27271 [Graham Leggett] *) mod_ldap calls ldap_simple_bind_s() to validate the user credentials. If the bind fails, the connection is left in an unbound state. Make sure that the ldap connection record is updated to show that the connection is no longer bound. [Brad Nicholes] *) Ensure that lines in the request which are too long are properly terminated before logging. [Tsurutani Naoki <turutani scphys.kyoto-u.ac.jp>] *) Update the bind credentials for the cached LDAP connection to reflect the last bind. This prevents util_ldap from creating unnecessary connections rather than reusing cached connections. [Brad Nicholes] *) mod_isapi: GetServerVariable returned improperly terminated header fields given "ALL_HTTP" or "ALL_RAW". PR 20656. [Jesse Pelton <jsp pkc.com>] *) mod_isapi: GetServerVariable("ALL_RAW") returned the wrong buffer size. PR 20617. [Jesse Pelton <jsp pkc.com>] *) mod_dav: Fix a problem that could cause crashes when manipulating locks on some platforms. [Jeff Trawick] *) mod_headers no longer crashes if an empty header value should be added. [André Malo] *) Fix segfault in mod_expires, which occured under certain circumstances. PR 28047. [André Malo] *) htpasswd: use apr_temp_dir_get() and general cleanup [Guenter Knauf <eflash gmx.net>, Thom May] *) mod_ssl: Fix memory leak in session cache handling. PR 26562 [Madhusudan Mathihalli] *) mod_ssl: Fix potential segfaults when performing SSL shutdown from a pool cleanup. PR 27945. [Joe Orton] *) Add forensic logging module (mod_log_forensic). [Ben Laurie] *) logresolve: Allow size of log line buffer to be overridden at build time (MAXLINE). PR 27793. [Jeff Trawick] *) Fix the comment delimiter in htdbm so that it correctly parses the username comment. Also add a terminate function to allow NetWare to pause the output before the screen is destroyed. [Guenter Knauf <eflash gmx.net>, Brad Nicholes] *) Fix crash when Apache was started with no Listen directives. [Michael Corcoran <mcorcoran warpsolutions.com>] *) core_output_filter: Fix bug that could result in sending garbage over the network when module handlers construct bucket brigades containing multiple file buckets all referencing the same open file descriptor. [Bojan Smojver] *) Fix memory corruption problem with ap_custom_response() function. The core per-dir config would later point to request pool data that would be reused for different purposes on different requests. [Jeff Trawick, based on an old 1.3 patch submitted by Will Lowe] *) Win32: Tweak worker thread accounting routines to eliminate server hang when number of Listen directives in httpd.conf is greater than or equal to the setting of ThreadsPerChild. [Bill Stoddard]
2004-07-14Update php4 to 4.3.8.jdolecek3-8/+8
This is security fix release, fixing several important security issues. From the ChangeLog: * Fixed strip_tags() to correctly handle '\0' characters. * Improved stability during startup when memory_limit is used. * Replace alloca() with emalloc() for better stack protection. * Added missing safe_mode checks inside ftok and itpc. * Fixed bug #28963 Fixed address allocation routine in IMAP extension. * Fixed bug #28632 Prevent open_basedir bypass via MySQL's LOAD DATA LOCAL. Note: package update also includes extra patches from PHP CVS not present in stock PHP 4.3.8 release - compilation fix for mssql extension and Zend engine memory-use-after-free fix.
2004-07-14BUILDLINK_DEPMETHOD.php defaults to full now, so no longer need to overridejdolecek1-2/+1
it for pear packages
2004-07-14default to full dependency on php4 - the extension and pear modules don't reallyjdolecek1-2/+4
make sense standalone
2004-07-13move the PKGREVISION out of Makefile.common and into Makefile.php,jdolecek2-4/+6
so that it affects only the core iterpreter packages (php4 and ap-php4); individual php4-* modules have their own PKGREVISION
2004-07-13fix a memory-use-after-free bug in the Zend engine constant codejdolecek3-4/+21
bump php4 PKGREVISION
2004-07-12there are no builds for NetBSD yet and the Linux builds don't work outgrant1-11/+0
of the box because they need a newer glibc which needs compat_linux fixes, so just remove it for now instead of pretending it will work.
2004-07-11Updated to version 0.76.17, sync patches with the non-gtk version.salo5-25/+53
2004-07-11Convert to bl3, obey CFLAGS et al., rework install target.salo5-22/+49
2004-07-10Replace test -e with -f.salo2-7/+7
Addresses part of PR pkg/26235 by Georg Schwarz.
2004-07-10Add reverse sorting of entries.kim3-14/+43
2004-07-08Make sure to remove the share/doc/screws/examples directory.erh1-1/+2
2004-07-08Add dependency on p5-Data-FormValidatorerh1-1/+3
2004-07-08Add p5-HTMLObject subdirectoryerh1-1/+2
2004-07-08New package: p5-HTMLObject version 2.22erh4-0/+29
Perl5 module to quickly and easily create Dynamic HTML pages
2004-07-07. on PowerPC, update files so that Mozilla works properly when compiled withaymeric6-26/+373
gcc version 3+. . generally reduce diffs to Linux version . retain compatibility with older ABI (AIX-like) thanks to useful comments from Charles Hannum Thanks to Matthew Green for the fruitful discussion. This should address PR#23240 as far as mozilla is concerned.