summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2014-03-14Update thin to 1.6.2.taca3-8/+9
== 1.6.2 Doc Brown * No longer replace response's body on HEAD request. Ensuring body.close will be called. * Remove `---ssl-verify` option as EventMachine doesn't verify the certificate. * Fix env['rack.peer_cert'] to return SSL certifcate. == 1.6.1 Death Proof * Regression: Default logger to STDOUT when using outside of CLI. * Regression: Downgrade Rack required version back to 1.0 to work w/ prior Rails versions. == 1.6.0 Greek Yogurt * Accept absolute URL in request line, eg.: 'GET http://site.com/he/lo HTTP/1.1'. * HEAD request no longer return a body in the response. * No longer stop EventMachine's reactor loop unless it was started by Thin. * Make request env keys upcasing locale-agnostic. * Use Ruby's `Logger` for logging. [Akshay Moghe]. The logger can now be set using `Thin::Logging.logger=`. Tracing of request is handled by a second logger, `Thin::Logging.trace_logger=`. * Add --threadpool-size option to configure EM's thread pool size (default: 20). * Pipelining is no longer supported.
2014-03-14Update ruby-sinatra-contrib to 14.2.taca2-7/+7
* Add utf-8 magic comment. * Describe enabling the reloader in non-development environments.
2014-03-14Update ruby-raindrops to 0.13.0.taca3-7/+8
=== raindrops 0.13.0 several minor fixes and improvements / 2014-02-18 20:59 UTC Most notably, this release is necessary for Ruby 2.2 (dev). Thanks to Koichi Sasada for the bug report! Eric Wong (5): Rakefile: remove raa_update task last_data_recv: do not assume Unicorn includes all constants raindrops.gemspec: add wrongdoc dev dependency linux_inet_diag: fix Ruby 2.2 (dev) build license: use LGPLv2.1 or later (was LGPL (2.1|3.0)-only) Hleb Valoshka (1): Remove Scope IDs from IPv6 addresses.
2014-03-14Update ruby-rack-rewrite to 1.5.0.taca2-6/+6
A few bug fixes.
2014-03-14Update ruby-rack-protection to 1.5.2.taca3-7/+8
Changes are not available, please refer commit log: <https://github.com/rkh/rack-protection/commits/master>.
2014-03-14Update ruby-puma to 2.8.1.taca3-8/+11
=== 2.8.1 / 2014-03-06 * 1 bug fixes: * Run puma-wild with proper deps for prune_bundler * 2 doc changes: * Described the configuration file finding behavior added in 2.8.0 and how to disable it. * Start the deployment doc * 6 PRs merged: * Merge pull request #471 from arthurnn/fix_test * Merge pull request #485 from joneslee85/patch-9 * Merge pull request #486 from joshwlewis/patch-1 * Merge pull request #490 from tobinibot/patch-1 * Merge pull request #491 from brianknight10/clarify-no-config === 2.8.0 / 2014-02-28 * 8 minor features: * Add ability to autoload a config file. Fixes #438 * Add ability to detect and terminate hung workers. Fixes #333 * Add booted_workers to stats response * Add config to customize the default error message * Add prune_bundler option * Add worker indexes, expose them via on_worker_boot. Fixes #440 * Add pretty process name * Show the ruby version in use * 7 bug fixes: * Added 408 status on timeout. * Be more hostile with sockets that write block. Fixes #449 * Expect at_exit to exclusively remove the pidfile. Fixes #444 * Expose latency and listen backlog via bind query. Fixes #370 * JRuby raises IOError if the socket is there. Fixes #377 * Process requests fairly. Fixes #406 * Rescue SystemCallError as well. Fixes #425 * 4 doc changes: * Add 2.1.0 to the matrix * Add Code Climate badge to README * Create signals.md * Set the license to BSD. Fixes #432 * 14 PRs merged: * Merge pull request #428 from alexeyfrank/capistrano_default_hooks * Merge pull request #429 from namusyaka/revert-const_defined * Merge pull request #431 from mrb/master * Merge pull request #433 from alepore/process-name * Merge pull request #437 from ibrahima/master * Merge pull request #446 from sudara/master * Merge pull request #451 from pwiebe/status_408 * Merge pull request #453 from joevandyk/patch-1 * Merge pull request #470 from arthurnn/fix_458 * Merge pull request #472 from rubencaro/master * Merge pull request #480 from jjb/docs-on-running-test-suite * Merge pull request #481 from schneems/master * Merge pull request #482 from prathamesh-sonpatki/signals-doc-cleanup * Merge pull request #483 from YotpoLtd/master === 2.7.1 / 2013-12-05 * 1 bug fix: * Keep STDOUT/STDERR the right mode. Fixes #422 === 2.7.0 / 2013-12-03 * 1 minor feature: * Adding TTIN and TTOU to increment/decrement workers * N bug fixes: * Always use our Process.daemon because it's not busted * Add capistrano restart failback to start. * Change position of `cd` so that rvm gemset is loaded * Clarify some platform specifics * Do not close the pipe sockets when retrying * Fix String#byteslice for Ruby 1.9.1, 1.9.2 * Fix compatibility with 1.8.7. * Handle IOError closed stream in IO.select * Increase the max URI path length to 2048 chars from 1024 chars * Upstart jungle use config/puma.rb instead
2014-03-14Update ruby-padrino and related packages to 0.12.0.taca15-53/+79
0.12.0 (February 9th 2014) FIX #1578 Fix latvian translations (@graudeejs) FIX #1576 incorrect nl.yml translations (@fevers) FIX #1564 do not reload apps with disabled or absent :reload flag (@ujifgc) FIX #1571 Allow for url generation to accept stringified keys (@jsmpereira) NEW #1570 add custom index option for form_for abstract form helper (@graudeejs) FIX #1567 Add :app option to the component generator (@namusyaka) FIX #1563 Fix behavior of content_tag when use with content that is not a string (@tyabe) NEW #1422 allow options Hash in protect_from_csrf (@ujifgc) 0.12.0.rc3 (January 20th 2014) FIX resolve_template should respect :views option (@ujifgc) FIX #1547 Rename `showexceptions.rb` to `show_exceptions.rb` (@namusyaka) NEW #1551 Introduce #default method to set application options (@ujifgc) FIX #1553 Chinese time translations (@gokure) FIX #1556 German translations (@Signum) FIX #1555 Fix a problem the before/after filters (@namusyaka) FIX #1550 Shove LOADING/RELOADING to devel log level FIX #1445 Drop `PADRINO_ENV` in favour of `RACK_ENV` for further compatibility (@dariocravero) 0.12.0.rc2 (January 5th 2014) FIX development dependency for padrino-gen (@namusyaka) FIX #1520 Skip loading models for sequel migration tasks (@ujifgc) FIX #1493 make admin aware of uri_root (@ujifgc) NEW #854 allow -a master to rename admin path (@ujifgc) FIX Get tests passing again on rubinius (@ujifgc) FIX #1545 Don't raise on protect_from_csrf without sessions (@skade) FIX #1546 Silence deprecation warnings for File.exists? (@fj) REMOVE #1516 support for TestSpec component from generator (@ujifgc) 0.12.0.rc1 (December 31st 2013) FIX #1421 Prevent double-escaped HTML in simple_format (@inkstak) NEW #1424 Adds task generator for creating new task files (@namusyaka) FIX #1423 Adds MIT license to gemspec (@ujifgc) FIX #1121 Modify the encoding of crypted_password (@namusyaka) NEW #1432 Rewritten Code Reloading (@ujifgc) FIX #1428 logger constants to match stdlib (@spariev) FIX #775 track I18n locale files properly (@ujifgc) FIX #1434 additional fixes for slim templates (@minad) FIX #1431 incorrect behavior when using content_tag with block (@namusyaka) FIX #1435 broken slim templates (@namusyaka) FIX AS4.1 constantize behavior compatibility (@ujifgc) NEW #1436 support rails-style attribute hash of select options (@ujifgc) NEW support disabled_options key for select_tag (@ujifgc) FIX no longer monkeypatch colors onto string (@ujifgc, @nesquena) FIX #1442 use `=` instead of `-` in slim and haml templating NEW #1441 cleanup template handling logic (@ujifgc, @namusyaka) FIX Cleanup file loading logic (@ujifgc) FIX #1443 Don't step over :session_id setting on admin apps (@dariocravero) NEW Modified `padrino start` to take an extra `–options` (`-O`) parameter (@dariocravero) NEW #1018 Replaces Padrino::Cache::Store with Moneta (@minad) NEW #1455 Steak generator written for acceptance tests (@eturk, @namusyaka) FIX Better error generation for forms (@ujifgc) FIX html_safe in labeled group (@ujifgc) NEW #1452 Allow padrino start to take handler specific options FIX #1462 cache content_type (@ujifgc) FIX #1466 Change accepts to empty array to fix latest sinatra FIX #1457 Major helpers cleanup (@ujifgc) NEW #1405 Params is now converted to `HashWithIndifferentAccess` (@Ortuna) FIX #1391 Skip path_traversal protection (@namusyaka) NEW #1471 allow configuring codes of cascade apps (@ujifgc) NEW #1477 Add :as option to form_for helper (@graudeejs) FIX #1481 incorrect namespace of #named_routes (@namusyaka) FIX Disambiguate the behavior of `url` (@namusyaka) FIX #1461 Allow to render template with layout that using other template engine (@namusyaka) NEW #767 introduces App.view_path and App.layout_path (@ujifgc) FIX #1488 plugin generator url path to github (@bolshakov) FIX #915 use app.root when mounting if available (@ujifgc) FIX Allow to use extension with layout method. (@namusyaka) NEW #1414 drop ruby 18mode, liberate ActiveSupport NEW #711 Verify render with block now works as expected (@ujifgc) NEW #1504 allow partial with block (@ujifgc) FIX #1507 patch jruby utf-8 method naming (@ujifgc) FIX #1505 Remove charset from json mimetype, fix sinatra edge (@namusyaka) FIX #1513 Extracting logic to methods to improve readability (@scudelletti) FIX #1517 correctly set a name of mounted application (@ujifgc) NEW #1518 Add :flush option to content_for (@namusyaka) FIX #1523 Add Rakefile tasks to the component generator (@tyabe) FIX #1526 options on ActiveRecord version 3 (@tyabe) NEW #1528 Allow asset_folders to be configured in settings FIX #1529 double escaping of link urls (@ujifgc) FIX #1532 allow asset_path with no kind (@ujifgc) FIX #1535 rebase string urls to uri_root (@ujifgc) NEW #1539 Enable :except option to :protect_from_csrf (@namusyaka) FIX #1540 generator should abort if constant name already exists (@namusyaka) NEW #922 resolve templates relative to controller name (@ujifgc) NEW #1541 Reimplement authenticity token logic (@namusyaka)
2014-03-14Update ruby-net-http-persistent to 2.9.4.taca2-6/+6
=== 2.9.4 / 2014-02-10 * Bug fixes * Improve proxy escaping from 2.9.2. Pull request #59 by Mislav Marohnić. === 2.9.3 / 2014-02-06 * Bug fixes * Fix breakage in 2.9.2 for users without proxies. Pull request #56 by Yoshihiro TAKAHARA (merged), #57 by ChuckLin, #58 by Kenny Meyer. === 2.9.2 / 2014-02-05 * Bug fixes * Special characters in proxy passwords are now handled correctly. Issue #48 by Mislav Marohnić. Pull request #54 by Juha Kajava === 2.9.1 / 2014-01-22 * Bug fixes * Added license to gemspec. Issue #47 by Benjamin Fleischer * Set Net::HTTP#keep_alive_timeout when supported by ruby. Pull request #53 by Dylan Thacker-Smith. * The backtrace is preserved for errors in #reset to help with debugging. Issue #41 by Andrew Cholakian.
2014-03-14Update ruby-liquid to 2.5.5.taca3-18/+7
Changes are not available.
2014-03-14Update ruby-jquery-rails to 3.1.0.taca2-6/+6
## 3.1.0 (29 January 2014) - Updated to jQuery 1.11.0 - Updated to latest jquery-ujs - Added development rake task for updating jQuery
2014-03-14Update ruby-http_router to 0.11.1.taca2-6/+6
Changes are not available, please refer commit log: <https://github.com/joshbuddy/http_router/commits/master>.
2014-03-14Update ruby-em-http-request to 1.1.2.taca3-11/+18
Changes are not available, please refer commit log: <https://github.com/igrigorik/em-http-request>.
2014-03-14Update ruby-cookiejar to 0.3.2.taca1-3/+3
Several bug fixes and license is now two caluse BSD.
2014-03-14Update ruby-compass to 0.12.3.taca3-14/+8
Changes are not available.
2014-03-14Update ruby-sass to 3.2.15taca3-8/+10
3.2.15 (7 March 2014) * Support &.foo when the parent selector has a newline followed by a comma. 3.2.14 (24 January 2014) * Don't crash when parsing a directive with no name in the indented syntax. * Clean up file paths when importing to avoid errors for overlong path names. * Parse calls to functions named true, false, and null as function calls. * Don't move CSS @imports to the top of the file unless it's necessary. 3.2.13 (19 December 2013) * Numbers returned by user-defined functions now trigger division, just like numbers stored in variables. * Support importing files in paths with open brackets. * Fix sass-convert's handling of rules with empty bodies when converting from CSS. * Fix CSS imports using url() with a quoted string and media queries. 3.2.12 (4 October 2013) * Add a couple missing requires, fixing some load errors, especially when using the command-line interface. * Tune up some heuristics for eliminating redundant generated selectors. This will prevent some selector elimination in cases where multi-layered @extend is being used and where it seems intuitively like selectors shouldn't be eliminated. 3.2.11 (27 September 2013) * Fix @extend's semantics with respect to pseudo-elements. They are no longer treated identically to pseudo-classes. * A more understandable error is now provided when the -E option is passed to the Sass command line in ruby 1.8 * Fixed a bug in the output of lists containing unary plus or minus operations during sass <=> scss conversion. * Avoid the IE7 content: counter bug with content: counters as well. * Fix some thread-safety issues.
2014-03-14Update heel 3.1.3.taca3-9/+10
## Version 3.1.3 - 2013-11-26 * URL encode the links to files [#14](https://github.com/copiousfreetime/heel/issues/14) * Fix pid file cleanup on ruby 2.0 [#15](https://github.com/copiousfreetime/heel/issues/15) ## Version 3.1.2 - 2013-10-16 * Fix usage of Mime::Types [#12](https://github.com/copiousfreetime/heel/issues/12) [#13](https://github.com/copiousfreetime/heel/issues/13) ## Version 3.1.1 - 2013-09-29 * Fix request logging [#10](https://github.com/copiousfreetime/heel/issues/10)
2014-03-14Relax dependency to ruby tilt.taca1-2/+5
Bump PKGREVISION.
2014-03-14Changes with nginx 1.5.11 04 Mar 2014imil2-9/+15
*) Security: memory corruption might occur in a worker process on 32-bit platforms while handling a specially crafted request by ngx_http_spdy_module, potentially resulting in arbitrary code execution (CVE-2014-0088); the bug had appeared in 1.5.10. Thanks to Lucas Molas, researcher at Programa STIC, Fundación Dr. Manuel Sadosky, Buenos Aires, Argentina. *) Feature: the $ssl_session_reused variable. *) Bugfix: the "client_max_body_size" directive might not work when reading a request body using chunked transfer encoding; the bug had appeared in 1.3.9. Thanks to Lucas Molas. *) Bugfix: a segmentation fault might occur in a worker process when proxying WebSocket connections. *) Bugfix: a segmentation fault might occur in a worker process if the ngx_http_spdy_module was used on 32-bit platforms; the bug had appeared in 1.5.10. *) Bugfix: the $upstream_status variable might contain wrong data if the "proxy_cache_use_stale" or "proxy_cache_revalidate" directives were used. Thanks to Piotr Sikora. *) Bugfix: a segmentation fault might occur in a worker process if errors with code 400 were redirected to a named location using the "error_page" directive. *) Bugfix: nginx/Windows could not be built with Visual Studio 2013. Changes with nginx 1.5.10 04 Feb 2014 *) Feature: the ngx_http_spdy_module now uses SPDY 3.1 protocol. Thanks to Automattic and MaxCDN for sponsoring this work. *) Feature: the ngx_http_mp4_module now skips tracks too short for a seek requested. *) Bugfix: a segmentation fault might occur in a worker process if the $ssl_session_id variable was used in logs; the bug had appeared in 1.5.9. *) Bugfix: the $date_local and $date_gmt variables used wrong format outside of the ngx_http_ssi_filter_module. *) Bugfix: client connections might be immediately closed if deferred accept was used; the bug had appeared in 1.3.15. *) Bugfix: alerts "getsockopt(TCP_FASTOPEN) ... failed" appeared in logs during binary upgrade on Linux; the bug had appeared in 1.5.8. Thanks to Piotr Sikora. Changes with nginx 1.5.9 22 Jan 2014 *) Change: now nginx expects escaped URIs in "X-Accel-Redirect" headers. *) Feature: the "ssl_buffer_size" directive. *) Feature: the "limit_rate" directive can now be used to rate limit responses sent in SPDY connections. *) Feature: the "spdy_chunk_size" directive. *) Feature: the "ssl_session_tickets" directive. Thanks to Dirkjan Bussink. *) Bugfix: the $ssl_session_id variable contained full session serialized instead of just a session id. Thanks to Ivan Risti?. *) Bugfix: nginx incorrectly handled escaped "?" character in the "include" SSI command. *) Bugfix: the ngx_http_dav_module did not unescape destination URI of the COPY and MOVE methods. *) Bugfix: resolver did not understand domain names with a trailing dot. Thanks to Yichun Zhang. *) Bugfix: alerts "zero size buf in output" might appear in logs while proxying; the bug had appeared in 1.3.9. *) Bugfix: a segmentation fault might occur in a worker process if the ngx_http_spdy_module was used. *) Bugfix: proxied WebSocket connections might hang right after handshake if the select, poll, or /dev/poll methods were used. *) Bugfix: the "xclient" directive of the mail proxy module incorrectly handled IPv6 client addresses. Changes with nginx 1.5.8 17 Dec 2013 *) Feature: IPv6 support in resolver. *) Feature: the "listen" directive supports the "fastopen" parameter. Thanks to Mathew Rodley. *) Feature: SSL support in the ngx_http_uwsgi_module. Thanks to Roberto De Ioris. *) Feature: vim syntax highlighting scripts were added to contrib. Thanks to Evan Miller. *) Bugfix: a timeout might occur while reading client request body in an SSL connection using chunked transfer encoding. *) Bugfix: the "master_process" directive did not work correctly in nginx/Windows. *) Bugfix: the "setfib" parameter of the "listen" directive might not work. *) Bugfix: in the ngx_http_spdy_module.
2014-03-14A new module was added, worth a revision.imil1-1/+2
2014-03-14 * Updated the naxsi module to latest 0.53-2imil2-9/+40
* Added Lua support: https://github.com/chaoslawful/lua-nginx-module
2014-03-14Forgot to commit with contao32's update.taca1-2/+2
2014-03-13Refelect change of RUBY_SRCDIR.taca1-2/+2
2014-03-13Update SOGo to 2.2.1.taca3-12/+66
Changes from 2.0.4b is too many to write here, please refer: <http://www.sogo.nu/buzz/2014.html>.
2014-03-13Update contao32 (and contao32-example) to 3.2.8.taca3-7/+7
Version 3.2.8 (2014-03-12) -------------------------- ### Fixed Add the "href" values for active breadcrumb menus to the template (see #6796). ### Fixed The file/page tree widget did not work properly in "edit multiple" mode (#6788). ### Fixed Preserve the referer ID when clicking the "switch to edit" button (see #6127). ### Fixed Encode e-mail addresses in the "explanation" form field (see #6771). ### Fixed Use a placeholder image if no thumbnail can be created (see #6754). ### Fixed Pass additional arguments to the "replaceInsertTags" hook (see #6672). ### Fixed Correctly initialize the `Session` class (see #6747). ### Fixed Do not use `Input::setGet()` in the event modules (see #6733). ### Fixed Correctly shorten the CSS `background` property (see #6709). ### Fixed Do not use `UNION SELECT` when searching for parent pages (see #6704). ### Fixed Disable `zlib.output_compression` when sending files to the browser (see #6717). ### Fixed Consider the event time in the event list module (see #6719). ### Fixed Make the newsletter recipient address available in the template (see #5782). ### Fixed Correctly handle Unicode characters in `Validator::isGooglePlusId` (see #6707). ### Fixed Fixed the arguments of two `CalendarEventsModel` methods (see #6781). ### Fixed Pass the "tableless" flag to the "form_message" template (see #6772). ### Fixed Update the `swipe.js` script so the "continuous" option works (see #6762). ### Fixed Improve the `Search::removeEntry()` method (see #6785). ### Fixed Correctly set the cookie path in the front mode in debug mode (see #6723). ### Fixed Point to `Frontend::addToUrl()` in front end templates (see #6736). ### Fixed Do not stop the cron job execution after the first interval.
2014-03-13Set USE_GCC_RUNTIME=yes for packages which build shared libraries but dojperkin7-7/+21
not use libtool to do so. This is required to correctly depend upon a gcc runtime package (e.g. gcc47-libs) when using USE_PKGSRC_GCC_RUNTIME.
2014-03-13Update to 1.22.4wen3-619/+161
Add missing DEPENDS Upstream changelog is too long, please visit: https://www.mediawiki.org/wiki/Release_notes/1.22
2014-03-12Move CHECK_PORTABILITY_SKIPryoon2-4/+4
2014-03-12Update to 2.8.8rel2:wiz4-27/+10
2014-03-09 (2.8.8rel.2) * correct errata in test-files which cause broken links in break-out directory in lynx.isc.org server -TD * amend change from 2.8.8pre.2, to ensure that MinGW libraries already declaring 'sleep()' will build -TD * drop unused save/compress rules from makefile.in, because fixing umask for these is pointless -TD * modify makefile.in to establish sane umask value in the "install-doc" rule (report by Rajeev V Pillai) -TD * build-fix for NetBSD, whose curses library provides use_default_colors(), but the package turns off the keymap feature (patch by Thomas Klausner).
2014-03-11Add patch to avoid exception in git browser.gdt3-2/+38
The underlying issue seems to be a race; if the spawned git log command finishes before trac kills it, the os.kill() throws an exception which is not caught. Simply catch and ignore the exception. I sent the patch to trac-devel@.
2014-03-11Import initial SMF support for individual packages.jperkin13-4/+326
2014-03-11Remove example rc.d scripts from PLISTs.jperkin27-57/+27
These are now handled dynamically if INIT_SYSTEM is set to "rc.d", or ignored otherwise.
2014-03-10Update to 24.3.0ryoon2-258/+258
* Sync with firefox24-24.3.0
2014-03-10Reset PKGREVISIONryoon1-2/+1
2014-03-10Update to 24.3.0ryoon2-6/+6
Changelog: Fixed in Firefox ESR 24.3 MFSA 2014-13 Inconsistent JavaScript handling of access to Window objects MFSA 2014-12 NSS ticket handling issues MFSA 2014-09 Cross-origin information leak through web workers MFSA 2014-08 Use-after-free with imgRequestProxy and image proccessing MFSA 2014-04 Incorrect use of discarded images by RasterImage MFSA 2014-02 Clone protected content with XBL scopes MFSA 2014-01 Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
2014-03-10devel/nss 3.15.4 or later is required.ryoon1-2/+2
Fix build. From Matthias Ferdinand.
2014-03-10Apply squidGuard-1.4_upgrade.patch for Update SquidGuard to supply Squid 3.4obache2-3/+10
updated helper protocol, taken from Squid Bug#3978 http://bugs.squid-cache.org/show_bug.cgi?id=3978 PR pkg/48649 by Benjamin Lorenz.
2014-03-10Changes 3.4.4:adam4-81/+6
* Avoid assertions on Range requests that trigger Squid-generated errors. * Protect MemBlob::append() against raw-space writes * Copyright: Relicense helpers by Treehouse Networks Ltd. * Portability: define CMSG related structures individually * Fix helper ID number assignment * Fixed stalled concurrent rock store reads by insuring their ID uniqueness. * Bug 3186, Bug 3628: Digest authentication always sending stale=false for nonce * dynamic_cert_mem_cache_size option related fixes * Fix umask default on crash report generated email * Fix pthread library detection on FreeBSD 10 * Bug 4029: intercepted HTTPS requests bypass caching checks * Bug 4026: SSL and adaptation_access does not handle aborted connections * Bug 4001: remove use of strsep() * Move compat/unsafe.h protections from libcompat to source maintenance * Bug 3969: user credentials cache lookup for Digest authentication broken * Various fixes to configure for FreeBSD 10 * Regression Bug 3769: client_netmask not evaluated since Comm redesign
2014-03-09Changes with nginx 1.4.6 04 Mar 2014rodent2-6/+6
*) Bugfix: the "client_max_body_size" directive might not work when reading a request body using chunked transfer encoding; the bug had appeared in 1.3.9. Thanks to Lucas Molas. *) Bugfix: a segmentation fault might occur in a worker process when proxying WebSocket connections.
2014-03-08Cygwin DLLs are handled automatically now.obache1-2/+0
2014-03-07Changes 0.7.2:adam2-16/+20
This release fixes a security issue that was introduced with the 0.7.0 release. This issue affected the source-highlighting feature and could only be exploited, if the suPHP_PHPPath option was set. In this case local users which could create or edit .htaccess files could possibly execute arbitrary code with the privileges of the user the webserver was running as.
2014-03-06Update ap2-fcgid to 2.3.9prlw12-6/+6
Changes with mod_fcgid 2.3.9 *) Revert fix for PR 53693, added in 2.3.8 but undocumented. Fix issues with a minor optimization added in 2.3.8. [Jeff Trawick] Changes with mod_fcgid 2.3.8 *) SECURITY: CVE-2013-4365 (cve.mitre.org) Fix possible heap buffer overwrite. Reported and solved by: [Robert Matthews <rob tigertech.com>] *) Add experimental cmake-based build system for Windows. [Jeff Trawick] *) Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA Authenticator/Authorizor/Access directives' command line argument, as currently documented. PR 51194 [William Rowe] *) Honor quoted FcgidCmdOptions arguments (notably for InitialEnv assignments). PR 51657 [William Rowe] *) Conform script response parsing with mod_cgid and ensure no response body is sent when ap_meets_conditions() determines that request conditions are met. [Chris Darroch] *) Improve logging in access control hook functions. [Chris Darroch] *) Avoid making internal sub-requests and processing Location headers when in FCGI_AUTHORIZER mode, as the auth hook functions already treat Location headers returned by scripts as an error since redirections are not meaningful in this mode. [Chris Darroch]
2014-03-05Changes 3.2.12:adam3-25/+6
* Correction of bugs
2014-03-05* Fix obsolete name of files directory, not "tl_files" but "files".taca2-5/+6
* Correct path of README and minify. Noted via private e-mail from obache@. Bump PKGREVISION.
2014-03-05Remove description about php-tidy from MESSAGE since Contao 2.x dosen'ttaca2-7/+3
need it from a few years ago. Bump PKGREVISION.
2014-03-04Update py-flask-script to 0.6.7.kleink2-6/+6
Version 0.6.7 ----------------- Released on February 16, 2014 - Expose app instance in a command commands (manage.app). #83 - Show full help for submanagers if called without arguments. #85 - Fix ShowUrls command conflict. #88
2014-03-04Update py-flask-assets to 0.9.kleink2-8/+8
0.9 (2014-02-20) This release is compatible with webassets 0.9. flask-assets now support Python 3, and drops support for Python 2.5. - Support for Flask-S3 (Erik Taubeneck). - Support latest Flask-Script (Chris Hacken).
2014-03-02Update ruby-rails32 to 3.2.17.taca1-4/+4
Update of version number only.
2014-03-02Update ruby-actionpack32 to 3.2.17.taca1-4/+4
* Use the reference for the mime type to get the format Fixes: CVE-2014-0082 * Escape format, negative_format and units options of number helpers Fixes: CVE-2014-0081
2014-03-02Update ruby-activeresource32 to 3.2.17.taca1-4/+4
Update of version number only.
2014-03-02Set unwanted linux binaries to CHECK_SHLIBS_SKIP.obache1-2/+3