summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2016-03-01Update 1.4.2 to 1.5.0mef2-7/+7
--------------------- v1.5.0 Release to support oauth2client >= 2.0.0. - Fix file stream recognition in Python 3 (#141) - Fix non-resumable binary uploads in Python 3 (#147) - Default to 'octet-stream' if mimetype detection fails (#157) - Handle SSL errors with retries (#160) - Fix incompatibility with oauth2client v2.0.0 (#182)
2016-02-28Update to 8.0.32ryoon2-7/+7
Changelog: Tomcat 8.0.32 (markt) General Add: Allow to configure multiple JUnit test class patterns with the build property test.name and document the property in BUILDING.txt. (rjung) Fix: 58768: Log a warning if a redirect fails because of an invalid location. (markt) Catalina Fix: Fix class loader decision on the delegation for class loading and resource lookup and make it faster too. (rjung) Fix: 58946: Ensure that the request parameter map remains immutable when processing via a RequestDispatcher. (markt) Fix: 58827: Deprecate what is left of the JSR 77 implementation. (markt) Fix: 58905: Ensure that Tomcat.silence() silences the correct logger and respects the current setting. (markt) Coyote Add: New configuration option ajpFlush for the AJP connectors to disable the sending of AJP flush packets. (rjung) Cluster Fix: Correct a regression in the session attribute filtering that prevented clustering from starting in the default configuration. (kfujino) WebSocket Fix: Fix a timing issue on session close that could result in an exception being thrown for an incomplete message even through the message was completed. (markt) not released Tomcat 8.0.31 (markt) Catalina Fix: Correct implementation of validateClientProvidedNewSessionId so client provided session IDs may be rejected if validation is enabled. (markt) Fix: Add path parameter handling to HttpServletRequest.getContextPath(). This is a follow-up to the fix for 57215. (markt) Fix: 58692: Make StandardJarScanner more robust. Log a warning if a class path entry cannot be scanned rather than triggering the failure of the web application. Includes a test case written by Derek Abdine. (markt) Fix: 58701: Reset the instanceInitialized field in StandardWrapper when unloading a Servlet so that a new instance may be correctly initialized. (markt) Fix: 58702: Ensure an access log entry is generated if the client aborts the connection. (markt) Fix: Fixed various issues reported by Findbugs. (violetagg) Fix: 58735: Add support for the X-XSS-Protection header to the HttpHeaderSecurityFilter. Patch provided by Jacopo Cappellato. (markt) Fix: 58751: Correctly handle the case where an AsyncListener dispatches to a Servlet on an asynchronous timeout and the Servlet uses sendError() to trigger an error page. Includes a test case based on code provided by Andy Wilkinson.(markt) Fix: 58765: Change default for mapperContextRootRedirectEnabled to true since this is required for correct session management because of the default for sessionCookiePathUsesTrailingSlash. (markt) Fix: Add the StatusManagerServlet to the list of Servlets that can only be loaded by privileged applications. (markt) Fix: Simplify code and fix messages in org.apache.catalina.core.DefaultInstanceManager class. (kkolinko) Code: Deprecate InstanceListener, InstanceEvent and InstanceSupport prior to removal in 9.0.x. (markt) Fix: Ensure that the proper file encoding if specified will be used when a readme file is served by DefaultServlet. (violetagg) Fix: Fix declaration of localPort attribute of Connector MBean: it is read-only. (kkolinko) Fix: 58766: Make skipping non-class files during annotation scanning faster by checking the file name first. Improve debug logging. (kkolinko) Fix: 58809: Correctly recycle cookies when mapping requests for parallel deployment. As a side-effect of this fix, the system property org.apache.tomcat.util.http.ServerCookie.PRESERVE_COOKIE_HEADER is no longer used. From this release, Tomcat will always preserve the cookie header. (markt) Fix: 58836: Correctly merge query string parameters when processing a forwarded request where the target includes a query string that contains a parameter with no value. (markt/kkolinko) Fix: Make sure that shared Digester is reset in an unlikely error case in HostConfig.deployWAR(). (kkolinko) Fix: 58867: Improve checking on Host start for WAR files that have been modified while Tomcat has stopped and re-expand them if unpackWARs is true. (markt) Fix: Fix a potential JDBC resource leak in DataSourceRealm. (schultz) Fix: 58900: Correctly undeploy symlinked resources and prevent an infinite cycle of deploy / undeploy. (markt) Fix: Protect initialization of ResourceLinkFactory when running with a SecurityManager. (kkolinko) Add: Extend the feature available in the cluster session manager implementations that enables session attribute replication to be filtered bases on attribute name to all session manager implementations. Note that configuration attribute name has changed from sessionAttributeFilter to sessionAttributeNameFilter. Apply the filter on load as well as unload to ensure that configuration changes made while the web application is stopped are applied to any persisted data. (markt) Add: Extend the session attribute filtering options to include filtering based on the implementation class of the value and optional WARN level logging if an attribute is filtered. These options are available for all of the Manager implementations that ship with Tomcat. When a SecurityManager is used filtering will be enabled by default. (markt) Jasper Fix: Fix handling of missing messages in org.apache.el.util.MessageFactory. (violetagg) Cluster Fix: In order to avoid that the heartbeat thread and the background thread to run Channel.heartbeat simultaneously, if heartbeatBackgroundEnabled of SimpleTcpCluster set to true, ensure that the heartbeat thread does not start. (kfujino) Code: Simplify the code of JvmRouteBinderValve.ed directly at Engine element. (kfujino) WebSocket Fix: 57489: Ensure onClose() is called when a WebSocket connection is closed even if the sending of the close message fails. Includes test cases by Barry Coughlan. (markt) Web Applications Addl docs. (kfujino) Fix: Correct some typos in the JNDI resources How-To. (markt) Fix: Don't create sessions unnecessarily in the Manager application. (markt) Fix: Don't create sessions unnecessarily in the Host Manager application. (markt) referencing contexts deployed using parallel deployment. (markt) Tribes Fix: Fix potential NPE in AbstractReplicatedMap.breakdown(). (kfujino) Fix: Add support for the startup notification of local members in the static cluster. (kfujino) Fix: Ignore the unnecessary member remove operation from different domain. (kfujino) Fix: Add support for the shutdown notification of local members in the static cluster. (kfujino) Fix: Ensure that asynchronous session replication thread is a daemon thread. (kfujino) Other Update: Remove native code (Windows Service Wrapper, APR/native connector) support for Windows Itanium. (markt) Update: Update the packaged version of the Tomcat Native Library to 1.2.4 to pick up the Windows binaries that are based on OpenSSL 1.0.2e and APR 1.5.1. (markt) Update: Update the NSIS Installer used to build the Windows Installers to version 2.50. (markt/kkolinko) Update: Update optional Checkstyle library to 6.14.1. (kkolinko)
2016-02-28Update to 7.0.68ryoon2-7/+7
Changelog: Tomcat 7.0.68 (violetagg) General add Allow to configure multiple JUnit test class patterns with the build property test.name and document the property in BUILDING.txt. (rjung) Catalina fix Correct implementation of validateClientProvidedNewSessionId so client provided session IDs may be rejected if validation is enabled. (markt) fix 56785: Avoid NullPointerException if directory exists on the class path that is not readable by the Tomcat user. (kkolinko) fix 57906: Suppress WebappClassLoader log messages when running with a security manager on Java 6, caused by java.beans.Introspector.findExplicitBeanInfo() calls during evaluation of EL expressions. (kkolinko) fix 58692: Make StandardJarScanner more robust. Log a warning if a class path entry cannot be scanned rather than triggering the failure of the web application. (markt) fix 58701: Reset the instanceInitialized field in StandardWrapper when unloading a Servlet so that a new instance may be correctly initialized. (markt) fix 58702: Ensure an access log entry is generated if the client aborts the connection. (markt) fix Fixed various issues reported by Findbugs. (violetagg) fix 58735: Add support for the X-XSS-Protection header to the HttpHeaderSecurityFilter. Patch provided by Jacopo Cappellato. (markt) fix 58751: Correctly handle the case where an AsyncListener dispatches to a Servlet on an asynchronous timeout and the Servlet uses sendError() to trigger an error page. Includes a test case based on code provided by Andy Wilkinson.(markt) fix 58765: Change default for mapperContextRootRedirectEnabled to true since this is required for correct session management because of the default for sessionCookiePathUsesTrailingSlash. (markt) fix Add the StatusManagerServlet to the list of Servlets that can only be loaded by privileged applications. (markt) fix Simplify code and fix messages in org.apache.catalina.core.DefaultInstanceManager class. (kkolinko) fix Ensure that the proper file encoding if specified will be used when a readme file is served by DefaultServlet. (violetagg) fix Fix declaration of localPort attribute of Connector MBean: it is read-only. (kkolinko) fix 58766: Make skipping non-class files during annotation scanning faster by checking the file name first. Improve debug logging. (kkolinko) fix 58768: Log a warning if a redirect fails because of an invalid location. (markt) fix 58836: Correctly merge query string parameters when processing a forwarded request where the target includes a query string that contains a parameter with no value. (markt/kkolinko) fix Make sure that shared Digester is reset in an unlikely error case in HostConfig.deployWAR(). (kkolinko) fix Fix a potential JDBC resource leak in DataSourceRealm. (schultz) fix 58900: Correctly undeploy symlinked resources and prevent an infinite cycle of deploy / undeploy. (markt) fix Protect initialization of ResourceLinkFactory when running with a SecurityManager. (kkolinko) add Extend the feature available in the cluster session manager implementations that enables session attribute replication to be filtered bases on attribute name to all session manager implementations. Note that configuration attribute name has changed from sessionAttributeFilter to sessionAttributeNameFilter. Apply the filter on load as well as unload to ensure that configuration changes made while the web application is stopped are applied to any persisted data. (markt) add Extend the session attribute filtering options to include filtering based on the implementation class of the value and optional WARN level logging if an attribute is filtered. These options are available for all of the Manager implementations that ship with Tomcat. When a SecurityManager is used filtering will be enabled by default. (markt) fix 58905: Ensure that Tomcat.silence() silences the correct logger and respects the current setting. (markt) fix 58946: Ensure that the request parameter map remains immutable when processing via a RequestDispatcher. (markt) Coyote add New configuration option ajpFlush for the AJP connectors to disable the sending of AJP flush packets. (rjung) Jasper fix Fix handling of missing messages in org.apache.el.util.MessageFactory. (violetagg) Cluster fix In order to avoid that the heartbeat thread and the background thread to run Channel.heartbeat simultaneously, if heartbeatBackgroundEnabled of SimpleTcpCluster set to true, ensure that the heartbeat thread does not start. (kfujino) WebSocket fix 57489: Ensure onClose() is called when a WebSocket connection is closed even if the sending of the close message fails. Includes test cases by Barry Coughlan. (markt) fix Fix a timing issue on session close that could result in an exception being thrown for an incomplete message even through the message was completed. (markt) Web Applications fix Correct some typos in the JNDI resources How-To. (markt) fix Don't create sessions unnecessarily in the Manager application. (markt) fix Don't create sessions unnecessarily in the Host Manager application. (markt) fix 58723: Clarify documentation and error messages for the text interface of the manager to make clear that version must be used with path when referencing contexts deployed using parallel deployment. (markt) fix Correct an error in the documentation of the extory will always be deleted and recreated by expanding the WAR if unpackWARs is true. (markt) fix 58935: Remove incorrect references in the documentation to using jar:file: URLs with the Manager application. (markt) Tribes fix Add sun the static cluster. (kfujino) fix Ignore the unnecessary member remove operation from different domain. (kfujino) fix Add support for the shutdown notification of local members in the static cluster. (kfujino) fix Ensure that asynchronous session replication thread is a daemon thread. (kfujino) Other update Update the NSIS Installer used to build the Windows Installers to version 2.50. (markt/kkolinko)
2016-02-28Update to 6.0.45ryoon3-9/+10
Changelog: Tomcat 6.0.45 (jfclere) Catalina fix Back-port various improvements to the AprLifecycleListener including the fix for 57021 that improves logging when the Tomcat-Native DLL fails to load. (markt) add 57154: Add support for web applications (Context elements) that do not have a docBase. This is intended for use when embedding, such as Tomcat unit tests, when a web application is configured programmatically and does not serve any files. Based on a patch provided by Huxing Zhang. (kkolinko) add 57741: Enable the CGI servlet to use the standard error page mechanism. Note that if the CGI servlet's debug init parameter is set to 10 or higher then the standard error page mechanism will be bypassed and a debug response generated by the CGI servlet will be returned instead. (markt) fix 57896: Support defensive copying of "cookie" header so that unescaping double quotes in a cookie value does not corrupt original value of "cookie" header. This is an opt-in feature, enabled by org.apache.tomcat.util.http.ServerCookie.PRESERVE_COOKIE_HEADER or org.apache.catalina.STRICT_SERVLET_COMPLIANCE system property. (kkolinko) fix 58031: Make the (first) reason parameter parsing failed available as a request attribute and then use it to provide a better status code via the FailedRequstFilter (if configured). (markt) fix 58313: Fix concurrent access of encoders map when clearing encoders during Comet processing. (markt) fix 58508: Escape role names when generating associated MBeans in case the role name contains characters not permitted in an MBean name. (markt) fix 58582: Combined realm should perform background processing on its sub-realms. Based upon a patch provided by Aidan. (kkolinko) add Move the functionality that provides redirects for context roots and directories where a trailing / is added from the Mapper to the DefaultServlet. This enables such requests to be processed by any configured Valves and Filters before the redirect is made. This behaviour is configurable via the mapperContextRootRedirectEnabled and mapperDirectoryRedirectEnabled attributes of the Context which may be used to restore the previous behaviour. (markt) fix 58635: Enable break points to be set within agent code when running Tomcat with a Java agent. Based on a patch by Huxing Zhang. (markt) fix Add the StatusManagerServlet to the list of Servlets that can only be loaded by privileged applications. (markt) fix Remove redundant copy of catalina.properties from o.a.c.startup. Generate this copy during the ant "compile" task. (kkolinko) fix 58817: Fix ArrayIndexOutOfBoundsException caused by MapperListener when ROOT context is being undeployed and mapperContextRootRedirectEnabled="false". (kkolinko) fix 58836: Correctly merge query string parameters when processing a forwarded request where the target includes a query string that contains a parameter with no value. (markt/kkolinko) add Allow singleton server instance stored by ServerFactory to be cleared. Allow ResourceLinkFactory to be initialized more than once. This is used by unit tests when running several copies of Tomcat sequentially in the same JVM. When running with a SecurityManager the initialization method of ResourceLinkFactory is protected by requiring a RuntimePermission. (kkolinko) add Extend the feature available in the cluster session manager implementations that enables session attribute replication to be filtered bases on attribute name to all session manager implementations. Note that configuration attribute name has changed from sessionAttributeFilter to sessionAttributeNameFilter. Apply the filter on load as well as unload to ensure that configuration changes made while the web application is stopped are applied to any persisted data. (markt) add Extend the session attribute filtering options to include filtering based on the implementation class of the value and optional WARN level logging if an attribute is filtered. These options are available for all of the Manager implementations that ship with Tomcat. When a SecurityManager is used filtering will be enabled by default. (markt) fix 58946: Ensure that the request parameter map remains immutable when processing via a RequestDispatcher. (markt) Coyote add Align the Java side of the tc-native connector with the Tomcat 7 implementation to ease future maintenance. (markt) fix 51503: Add additional validation that prevents a connector from starting if it does not have a valid port number. (kkolinko) add 52028: Add support for automatic binding to a free port by a connector if the special value of zero is used for the port. This is mainly useful in embedded and testing scenarios. (kkolinko) fix 52926: Avoid NPE when an NIO Comet connection times out on one thread at the same time as it is closed on another thread. (markt/kkolinko) fix 57943: Prevent the same socket being added to the cache twice. Patch based on analysis by Ian Luo / Sun Qi. (markt/kkolinko) fix Improve HTTP header validation. (markt) Web applications fix 57971: Correct the documentation for the cluster configuration setting recoverySleepTime. (markt) fix 58112: Update the documentation for using the Catalina tasks in an Apache Ant build file. (markt) fix Improve the Javadoc for some of the APR socket read functions that have inconsistent behaviour for return values. (markt) add 58255: Document the Semaphore valve. Patch provided by Kyohei Nakamu. (markt) fix 58631: Correct the continuation character use in the Windows Service How-To page of the documenation web application. (markt) fix Correct some typos in the JNDI resources How-To. (markt) fix Add a redirect to the web interface to the root of the Manager web application. (markt) fix Don't create sessions unnecessarily in the Manager application. (markt) fix Add a redirect to the web interface to the root of the Host Manager web application. (markt) fix Don't create sessions unnecessarily in the Host Manager application. (markt) Other fix Ensure JULI adapters JAR in Tomcat extras package does not include the LogFactoryImpl[$*] classes. Based on patch provided by Benjamin Gandon. (kkolinko) code Convert test classes to JUnit 4. (kkolinko) update 58596: Clarify the description in RUNNING.txt of how environment variables are used. (markt) update Update the NSIS Installer used to build the Windows Installers to version 2.50. (markt/kkolinko) add Add framework for client-server unit tests, porting it from Tomcat 7. Add support for running the tests with Apache Ant. (kkolinko) update Update to Tomcat Native Library version 1.1.34. (jfclere) update Remove support for Intel Itanium CPU (i64, IA-64) in the Windows installer, as the current release of Tomcat Native does not have binaries for that processor architecture. (jfclere)
2016-02-28Changes 1.8.0:adam2-7/+7
This release adds new library APIs to send and receive non-critical HTTP/2 extension frames. It also adds new features to nghttpx and nghttpd, and polishes many rough edges.
2016-02-27Update to 6.50wen2-7/+7
Upstream changes: 6.50 2016-02-27 - Added throw method to Mojo::Exception. 6.49 2016-02-26 - Removed throw method from Mojo::Exception. - Added inspect method to Mojo::Exception. - Improved check_box and radio_button helpers with support for "on" default values. - Improved val method in Mojo::DOM with support for "on" default values. - Fixed url_for bug where routes with custom names would not match in the same order as routes with automatically generated names. - Fixed bug in Mojo::Template where not all exceptions were verbose. - Fixed Windows bug in "util.t". 6.48 2016-02-24 - Added files function to Mojo::Util. - Updated jQuery to version 2.2.1. - Improved url_for performance significantly. - Fixed bug where the results of the list_files method in Mojo::Home would include directories. - Fixed a few small CGI bugs.
2016-02-27Update to 1.0.10.gdt3-11/+9
upstream changes: many minor bugfixes
2016-02-26Remove patches that avoided warning from CGI.pm 4.05 or newer by replacingabs4-35/+8
$self->{params}->param( with @{$self->{params}->param_fetch as broke usage under Catalyst: Can't locate object method "param_fetch" via package "Catalyst::Request"
2016-02-26p5-Plack-Middleware-FixMissingBodyInRedirect, ↵abs1-4/+5
p5-Plack-Middleware-MethodOverride & p5-Plack-Middleware-RemoveRedundantBody are runtime depends not build depends. Bump PKGREVISION
2016-02-26Fix pax arguments.jperkin2-4/+4
2016-02-26Use OPSYSVARS.jperkin21-158/+74
2016-02-25Update drupal7 to 7.43 including security fix.taca3-8/+10
Drupal 7.43, 2016-02-24 ----------------------- - Fixed security issues (multiple vulnerabilities). See SA-CORE-2016-001. Drupal 7.42, 2016-02-03 ----------------------- - Stopped invoking hook_flush_caches() on every cron run, since some modules use that hook for expensive operations that are only needed on cache clears. - Changed the default .htaccess and web.config to block Composer-related files. - Added static caching to module_load_include() to improve performance. - Fixed double-encoding bugs in select field widgets provided by the Options module. The fix deprecates the 'strip_tags' property on option widgets and replaces it with a new 'strip_tags_and_unescape' property (minor data structure change). - Improved MySQL 5.7 support by changing the MySQL database driver to stop using the ANSI SQL mode alias, which has different meanings for different MySQL versions. - Fixed a regression introduced in Drupal 7.39 which prevented autocomplete functionality from working on servers that are not configured to automatically recognize index.php. - Updated the Archive_Tar PEAR package to the latest 1.4.0 release, to fix bugs with tar file handling on various operating systems. - Fixed fatal errors on node preview when a field is displayed in the node teaser but hidden in the full node view. The fix removes a field_attach_prepare_view() call from the node_preview() function since it is redundant with one in the node preview theme layer. - Improved the description of the "Trimmed" format option on text fields (translatable string change, and minor UI and data structure change). - Numerous small bug fixes. - Numerous API documentation improvements. - Additional automated test coverage.
2016-02-25Update drupal6 to 6.38, security release and last Drupal 6 release.taca2-7/+7
Drupal 6.38, 2016-02-24 - Final release --------------------------------------- - Fixed security issues (multiple vulnerabilities). See SA-CORE-2016-001. - Previously unreleased documentation fixes.
2016-02-25Remove manual OPSYSVARS additions which are now part of the default set.jperkin2-5/+2
2016-02-24Update squid3 package to 3.5.15, security release.taca2-7/+7
* SQUID-2016:2 - Multiple Denial of Service issues in HTTP Response processing http://www.squid-cache.org/Advisories/SQUID-2016_2.txt Changes to squid-3.5.15 (23 Feb 2016): - Bug 3870: assertion failed: String.cc: 'len_ + len <65536' in ESI::CustomParser - Fix multiple assertion on String overflows - Fix unit test errors on MacOS - Better handling of huge response headers. Fewer incorrect "Bug #3279" messages. - Log noise reduction for eCAP
2016-02-23Update typo3_62 package to 6.2.19 (TYPO3 6.2.19), security release.taca3-9/+8
2016-02-23 6828e26 [RELEASE] Release of TYPO3 6.2.19 (TYPO3 Release Team) 2016-02-23 1b446ce #73458 [SECURITY] Limit the search results per page (Benni Mack) 2016-02-23 b55c5e7 #73450 [SECURITY] Escape output of tt_content.default (Georg Ringer) 2016-02-23 f071653 #73449 [SECURITY] Stored XSS in shortcut functionality (Wouter Wolters) 2016-02-23 844369e #61269 [SECURITY] XML entity expansion (Benni Mack) 2016-02-22 bfcd0ca #73607 [TASK] Remove adodb diff (Christian Kuhn) 2016-02-20 d3be3f7 #73480 [TASK] Disallow Composer installation with PHP 7.x (Mathias Brodala) 2016-02-18 b3225d1 #73518 [BUGFIX] Fix disabled menu item state for l18n_cfg=1 (Mathias Brodala) 2016-02-17 438d90a #58752 [BUGFIX] Remove addQueryStringMethod parameter from widget links (Nicole Cordes)
2016-02-21Update to 0.13.0, changes not found.wiz3-68/+48
2016-02-21Update www/goaccess to 0.9.7wiedi2-7/+7
Changes to GoAccess 0.9.7 - Monday, December 21, 2015 - Added Squid native log format to the config file. - Fixed int overflow when getting total bandwidth using the on-disk storage. - Fixed issue where a timestamp was stored as date under the visitors panel. - Fixed issue where config dialog fields were not cleared out on select. - Fixed issue where "Virtual Hosts" menu item wasn't shown in the HTML sidebar.
2016-02-21Package DeforaOS Surfer 0.2.10khorben2-10/+9
This release brings: - compatibility with the latest libSystem - better support for Gtk+ 3 - reproducible build for manual pages - improvements to the help browser
2016-02-21Update to 6.47wen2-7/+7
Upstream changes: 6.47 2016-02-19 - Deprecated Mojo::Log::is_debug, Mojo::Log::is_error, Mojo::Log::is_info and Mojo::Log::is_warn in favor of Mojo::Log::is_level. - Added is_level method to Mojo::Log. - Fixed datetime_field helper to use the correct type attribute value.
2016-02-19Update to 38.6.1ryoon2-359/+359
* Sync with firefox38-38.6.1
2016-02-19Update 38.6.1ryoon2-9/+7
Changelog: Fixed in Firefox ESR 38.6.1 2016-14 Vulnerabilities in Graphite 2
2016-02-18Bump _XOPEN_SOURCE version to 600 in order to avoid "Compiler or optionsleot1-1/+11
invalid for pre-UNIX 03 X/Open applications" error on SunOS and correctly define _POSIX_SOURCE. Should fix build issues on SunOS.
2016-02-18sortjnemeth1-2/+2
2016-02-17Fix install layout. Bump PKGREVISION.jperkin4-16/+19
2016-02-16Handle php70's FPM config layout correctly. Bump PKGREVISION.jperkin2-4/+18
2016-02-16Update SOGo to 2.3.8.taca3-8/+37
2.3.8 (2016-02-05) ------------------ Enhancements - updated CKEditor to version 4.5.7 Bug fixes - correctly encode filename of attachments over EAS (#3491) - correctly encode square brackets for IMAP folder names (#3321) - add shared/public namespaces in the list or returned folders 2.3.7 (2016-01-25) ------------------ New features - new junk/not junk capability with generic SMTP integration Enhancements - newly created folders using EAS are always sync'ed by default (#3454) - added Croatian (hr_HR) translation - thanks to Jens Riecken Bug fixes - now always generate invitation updates when using EAS - rewrote the string sanitization to be 32-bit Unicode safe - do not try to decode non-wbxml responses for debug output (#3444) 2.3.6 (2016-01-18) ------------------ New features - now able to sync only default mail folders when using EAS Enhancements - unit testing for RTFHandler - JUnit output for sogo-tests Bug fixes - don't unescape twice mail folder names (#3423) - don't consider mobile Outlook EAS clients as DAV ones (#3431) - we now follow 301 redirects when fetching ICS calendars - when deleting an event using EAS, properly invoke the auto-scheduling code - do not include failure attachments (really long filenames) - fix encoding of email subjects with non-ASCII characters - fix appointment notification mails using SOGoEnableDomainBasedUID configuration - fix shifts in event times on Outlook 2.3.5 (2016-01-05) ------------------ Enhancements - return an error to openchange if mail message delivery fails - return the requested elements on complex requests from Outlook when downloading changes - user sources can be loaded dynamically - unify user sources API - updated Russian translation (#3383) Bug fixes - properly compute the last week number for the year (#1010) - share calendar, tasks and contacts folders in Outlook 2013 with editor permissions - priorize filename in Content-Disposition against name in Content-Type to get the filename of an attachment in mail - request all contacts when there is no filter in Contacts menu in Webmail - personal contacts working properly on Outlook - fixes on RTF parsing used by event/contact description and mail as RTF to read non-ASCII characters: better parsing of font table, when using a font, switch to its character set, correct parsing of escaped characters and Unicode character command word support for unicode characters greater than 32767 - no crash resolving recipients after reconnecting LDAP connection - avoid creation of phantom contacts in SOGo from distribution list synced from Outlook. - accepted & updated event names are now shown correctly in Outlook - provide safe guards in mail and calendar to avoid exceptions while syncing 2.3.4 (2015-12-15) ------------------ New features - initial support for EAS calendar exceptions Enhancements - limit the maximum width of toolbar buttons (#3381) Bug fixes - JavaScript exception when printing events from calendars with no assigned color (#3203) - EAS fix for wrong charset being used (#3392) - EAS fix on qp-encoded subjects (#3390) - correctly handle all-day event exceptions when the master event changes - prevent characters in calendar component UID causing issues during import process - avoid duplicating attendees when accepting event using a different identity over CalDAV
2016-02-16+ py-h2leot1-1/+2
2016-02-16Import py-h2-2.1.1 as www/py-h2.leot5-0/+91
Hyper-h2 is a HTTP/2 protocol stack, written entirely in Python. The goal of Hyper-h2 is to be a common HTTP/2 stack for the Python ecosystem, usable in all programs regardless of concurrency model or environment. To achieve this, Hyper-h2 is entirely self-contained: it does no I/O of any kind, leaving that up to a wrapper library to control. This ensures that it can seamlessly work in all kinds of environments, from single-threaded code to Twisted. Its goal is to be 100% compatible with RFC 7540, implementing a complete HTTP/2 protocol stack build on a set of finite state machines. Its secondary goals are to be fast, clear, and efficient.
2016-02-16+ py-hyperframeleot1-1/+2
2016-02-16Import py-hyperframe-3.2.0 as www/py-hyperframe.leot4-0/+45
This library contains the HTTP/2 framing code used in the hyper project. It provides a pure-Python codebase that is capable of decoding a binary stream into HTTP/2 frames. This library is used directly by hyper and a number of other projects to provide HTTP/2 frame decoding logic.
2016-02-16Fix stale MESSAGE var reference, ride with previous commitfhajny1-2/+2
2016-02-16Update www/ganglia-webfrontend to 3.7.1.fhajny13-149/+584
Move config files to standard location. Make Apache/Nginx compatible (based on mail/rouncube). Upstream changes follow. 3.7.1 * Fix for auth bypass when using the authentication module * Fix for a XSS in the view adding interface * Update JQuery Mobile library to 1.4.5 3.7.0 * Cubism integration * Ganglia Reporting * Couple reported XSS issues have been corrected 3.6.2 * Performance improvements * New clearer heatmaps * Other minor improvements and fixes 3.5.7 * Required Jquery files were missing from 3.5.6 release. 3.5.6 * Number of fixes to address XSS (Cross Site Scripting) issues * Enhancement to the host view if use option "metric_groups_initially_collapsed". Clicking on metric groups dynamically loads images instead of reloading the page * Fixed mobile view * Incorporate legend in the selection when doing Inspect graph * Stacked graph fixes * Numerous other fixes and enhancements 3.5.2 * Fix for stacked graphs not showing after upgrading to 3.5.1 * Inspect graph now uses AJAX calls to retrieve data which should help in situations where users use Basic authentication 3.5.1 * Security advisory * Support for same hostname being in multiple clusters 3.5.0 * Enable zoom to a selection in Inspect Graph * Add Jump to Metric group drop down * Add Timeshift functionality to graphs * Other misc fixes and improvements 3.4.2 * Improvements to the live dashboard * Fixed the aggregate graphs metric auto complete which broke in 3.4.1 * Add ability to specify critical and warning thresholds. Use in Live Dashboard and Views. * Minor bug fixes 3.4.1 * Major improvements to Inspect Graph thanks to Peter Piela - deselect all data sources, select individual sources, change graph type from stack to line and vice versa * Live Dashboard - integration of Tasseo * Metrics drop down now includes ability to select optional reports No changelog could be found for 3.1.3-3.4.0.
2016-02-16Update typo3_62 to 6.2.18 (TYPO4 6.2.18), security release.taca2-7/+7
2016-02-16 0d56422 [RELEASE] Release of TYPO3 6.2.18 (TYPO3 Release Team) 2016-02-16 3256617 #58896 [SECURITY] SQLi in DBAL (Morton Jonuschat) 2016-02-16 c88aa57 #54205 [SECURITY] XSS in form extension (Wouter Wolters) 2016-02-16 4e639be #25244 [SECURITY] XSS in content element "Form" (Helmut Hummel) 2016-02-16 a511709 #72240 [SECURITY] XSS in Link Validator (Steffen Mller) 2016-02-12 ba30380 #73083 [BUGFIX] Deduplicate "Hide default translation of page" logic (Morton Jonuschat) 2016-02-12 1afa712 #72388 [FOLLOWUP][BUGFIX] Table wizard: large fields and BR-tags (Morton Jonuschat) 2016-02-12 413430b #73006 [BUGFIX] Failing Unit Tests on Windows systems (Nicole Cordes) 2016-02-10 0548314 #59180 [BUGFIX] Re-enable export of multiple records via clipboard (Bernhard Kraft) 2016-02-09 f9599a1 #65866 [BUGFIX] Fallback to version of ext_emconf.php if not found in Composer (Peter Niederlag) 2016-02-08 3af6506 #58693 [BUGFIX] impexp ignore file reference records with missing related files (Marc Bastian Heinrichs) 2016-02-05 df80dee #73158 [BUGFIX] ImpExp: Correct casing for FAL function call (Benni Mack) 2016-02-05 d1ca79c #73103 [BUGFIX] Off-by-one error in FAL's LocalDriver (Andreas Fernandez) 2016-02-01 daaf9e0 #72936 [BUGFIX] Reallow '0' as valid userFunc argument in TypoScript (Frank Naegler) 2016-01-29 05d2711 #70307 [BUGFIX] CategoryRegistry::addTcaColumn() ignores displayCond (Benni Mack) 2016-01-29 fd30582 #72964 [BUGFIX] Clear cache system icon is shown for non admin in dev context (Benni Mack) 2016-01-26 4fbed24 #72943 [TASK] Switch mirror links to https (Nicole Cordes) 2016-01-22 a59665c #72635 [BUGFIX] SimpleFileBackend::setCacheDirectory returns valid path name (Jan Helke) 2016-01-22 941308f #72892 [BUGFIX] Remove newline from PLACEHOLDER marker in indexed_search (Wouter Wolters) 2016-01-21 842e6dfdb #72786 [TASK] Hide "Save document and create a new one" in filelist (Gianluigi Martino) 2016-01-20 89b1024 [BUGFIX] Add missing return type to createVersionNumberedFilename (Thomas Lffler) 2016-01-18 87c98c7 #72762 [BUGFIX] Clarify extension dependency skipping (Nicole Cordes) 2016-01-16 9f5c9df #72755 [BUGFIX] Apply hsc() to exception debug output (Markus Klein) 2016-01-15 908a266 #72357 [BUGFIX] Copy DataHandler::enableLogging to sub objects (Morton Jonuschat) 2016-01-15 739a3de #72388 [BUGFIX] Table wizard: large fields and BR-tags (Anja Leichsenring) 2016-01-15 43ee970 #72734 [FOLLOWUP] Fix call to not existing function (Anja Leichsenring) 2016-01-15 1278e9f #72648 [BUGFIX] Automatically remove BOM from files before concatenation (Christian Futterlieb) 2016-01-15 35745fa #72712 [TASK] Allow access to visible content within /.well-known/ directory (Cedric Ziel) 2016-01-15 640c494 #72709 [BUGFIX] ImpExp: Do not show error message for recursive relations (Markus Klein) 2016-01-08 1eea942 #72598 [BUGFIX] Remove debug echo from checkDeniedSuburls (Morton Jonuschat) 2016-01-01 264d1bd #72501 [TASK] Update copyright year to 2016 (Benni Mack) 2015-12-30 967391f #72475 [SECURITY] XSS in belog module (Morton Jonuschat) 2015-12-30 639f8f2 #66135 [BUGFIX] Computed properties are queried in workspace context (Oliver Hader) 2015-12-29 d959bb8 #72450 [TASK] Expose identifier and path of functional test instance (Oliver Hader) 2015-12-23 141cd7d #72047 [BUGFIX] Fix NumberRangeValidator using startRange and endRange (Stephan Groberndt)
2016-02-16Update squid3 to 3.5.14 (Squid 3.5.14), security release.taca2-7/+7
Changes to squid-3.5.14 (16 Feb 2016): - Bug 4437: Fix Segfault on Certain SSL Handshake Errors - Bug 4431: C code is not compiled with CFLAGS - Bug 4418: FlexibleArray compile error with GCC 6 - Bug 4378: assertion failed: DestinationIp.cc:60: 'checklist->conn() && checklist->conn()->clientConnection != NULL' - Fix invalid FTP connection handling on blocked content - Fix handling of shared memory left over by Squid crashes or bugs - Fix mgr:config report 'qos_flows mark' output - Fix compile error in CPU affinity - Fix %un logging external ACL username - Avoid more certificate validation memory leaks - ... and some documentation updates
2016-02-15Add ap-authnz-crowd.jperkin1-1/+2
2016-02-15Import ap-authnz-crowd version 2.2.2 into pkgsrc.jperkin10-0/+358
Crowd is an application security framework that handles authentication and authorisation for your web-based applications. With Crowd you can quickly integrate multiple web applications into a single security architecture that supports single sign-on (SSO) and centralised identity management. Patches for Apache 2.4 and Subversion 1.8 suport from FreeBSD Ports.
2016-02-15Githubify.mef1-2/+3
2016-02-15Update py-werkzeug (and py-werkzeug-docs) to 0.11.4.kleink2-7/+7
Version 0.11.4 -------------- Released on February 14th 2016. - Fixed werkzeug.serving not working from -m flag. - Fixed incorrect weak etag handling.
2016-02-15Set correct py-oauth2client minimum version, and fix PLIST for update to 1.4.2.wiz2-6/+18
2016-02-15Update 1.3.1 to 1.4.2mef2-7/+7
--------------------- v1.4.2 Version 1.4.2 Add automatic caching for the discovery docs. v1.4.1 Version 1.4.1 Add the googleapiclient.discovery.Resource.new_batch_http_request method. v1.4.0 Version 1.4.0 Python 3 support. v1.3.2 Version 1.3.2 Small bugfix release. - Fix an infinite loop for downloading small files. - Fix a unicode error in error encoding. - Better handling of `content-length` in media requests. - Add support for methodPath entries containing colon.
2016-02-15Githubify.mef1-2/+4
2016-02-14Update p5-Mojolicious to 6.46. 6.44 tarball gone.wiz2-7/+7
6.46 2016-02-13 - Improved Mojo::Headers performance. (batman) - Fixed small proxy bug in Mojo::UserAgent::Transactor. 6.45 2016-02-09 - Deprecated Mojo::Util::xss_escape in favor of Mojo::Util::xml_escape. - Improved Mojo::Template performance slightly.
2016-02-13Update ruby-http to 1.0.2.tsutsui3-9/+8
Upstream changes (from CHANGES.md): ## 1.0.2 (2016-01-15) * [#295](https://github.com/httprb/http/pull/295): Fix redirect following when used with persistent mode. ([@ixti])
2016-02-13Update www/liferea to 1.10.18.leot3-9/+10
Changes: * Fixes #287: media:content support broken (patch by Leiaz) * Fixes #279: Rules not visible in searchdialog (patch by Leiaz) * Fixes #83: Segfault when sorting feeds in folder (patch by Leiaz) * Fixes #302: Broken compilation with --disable-notify (reported by vostorga)
2016-02-12Update to 44.0.2ryoon2-359/+359
* Sync with firefox-44.0.2
2016-02-12Update to 44.0.2ryoon2-7/+7
Changelog: Fix: Firefox hangs or crashes on startup (1243098) Security bug: 2016-13 Same-origin-policy violation using Service Workers with plugins
2016-02-12Fix build under recent NetBSD currentryoon2-6/+14
2016-02-11Update Wordpress to 4.4.2.jklos2-7/+7
2016-02-10Update py-flask-babelex to 0.9.3.kleink2-7/+7
0.9.3 ----- * Merge pull request #8 from lnielsen/lazydomainfix Fix lazy gettext problem with domain evaluation