summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2008-02-26Use PKG_SYSCONFSUBDIR to ensure that configuration directory gets createdsborrill1-5/+7
when using binary packages. Bump PKGREVISION
2008-02-24Update ap-ssl to 2.8.31.obache2-9/+8
2.8.31: For Apache 1.3.41 2.8.30: Bug Fix 2.8.29: For Apache 1.3.39
2008-02-23Add DESTDIR support.obache1-9/+12
2008-02-23Update apache to 1.3.41.obache15-167/+72
Changes with Apache 1.3.41 *) SECURITY: CVE-2007-6388 (cve.mitre.org) mod_status: Ensure refresh parameter is numeric to prevent a possible XSS attack caused by redirecting to other URLs. Reported by SecurityReason. [Mark Cox] Changes with Apache 1.3.40 (not released) *) SECURITY: CVE-2007-5000 (cve.mitre.org) mod_imap: Fix cross-site scripting issue. Reported by JPCERT. [Joe Orton] *) SECURITY: CVE-2007-3847 (cve.mitre.org) mod_proxy: Prevent reading past the end of a buffer when parsing date-related headers. PR 41144. With Apache 1.3, the denial of service vulnerability applies only to the Windows and NetWare platforms. [Jeff Trawick] *) More efficient implementation of the CVE-2007-3304 PID table patch. This fixes issues with excessive memory usage by the parent process if long-running and with a high number of child process forks during that timeframe. Also fixes bogus "Bad pid" errors. [Jim Jagielski, Jeff Trawick] Changes with Apache 1.3.39 *) SECURITY: CVE-2006-5752 (cve.mitre.org) mod_status: Fix a possible XSS attack against a site with a public server-status page and ExtendedStatus enabled, for browsers which perform charset "detection". Reported by Stefan Esser. [Joe Orton] *) SECURITY: CVE-2007-3304 (cve.mitre.org) Ensure that the parent process cannot be forced to kill non-child processes by checking scoreboard PID data with parent process privately stored PID data. [Jim Jagielski] *) mime.types: Many updates to sync with IANA registry and common unregistered types that the owners refuse to register. Admins are encouraged to update their installed mime.types file. pr: 35550, 37798, 39317, 31483 [Roy T. Fielding] There was no Apache 1.3.38
2008-02-22Add dansguardiansborrill1-1/+2
2008-02-22DansGuardian is a web content filtering proxy for Linux, FreeBSD, OpenBSD,sborrill6-0/+440
and Solaris. It relies on a proxy server, for all fetching. The preferred proxy is Squid, however, DansGuardian should work with any proxy server.
2008-02-21+ Rename the "ncursesw" option to "wide-curses" and get rid of thejlam2-11/+13
"ncurses" option. "wide-curses" now just toggles whether we use wide or narrow curses, which is a much simpler knob for users. Bump the PKGREVISION to 5.
2008-02-21Add full DESTDIR support.jlam1-14/+20
2008-02-20Update to 9.26.xtraeme2-14/+14
Changes Since Opera 9.25: Security -------- Fixed an issue where simulated text inputs could trick users into uploading arbitrary files, as reported by Mozilla. See our advisory. Image properties can no longer be used to execute scripts, as reported by Max Leonov. See our advisory. Fixed an issue where the representation of DOM attribute values could allow cross site scripting, as reported by Arnaud.lb. See our advisory. Miscellaneous ------------- Fixed a stability issue found in Opera 9.0 to 9.25, when Opera connects securely to Windows Server 2008 or other servers supporting the TLS Certificate Status extension. Additional stability fixes.
2008-02-20Update to kde 3.5.9markd4-21/+131
Quanta Plus * Insert literal character entities if possible. * List the plugin in the Open With context menu. * Fix crashes when using XDebug. * Do not keep an empty, Untitled document opened when opening new files. * Fix crash when closing a plugin and no other document is opened. * Make HTML forms work in the internal preview. * Fix deadlock in CSS editor when the propery contains ":". Kommander * Support executing of widget slots. * Add execute method for PushButton. * Add possibility to pass parameters for ScriptObject. * Add "return" command to get back the result of a ScriptObject. * Add "createWidget" function for on-the-fly widget creation. * Add "widgetExists" function. * Add "execBackground" function. * Add "connect/disconnect" function for on-the-fly signal/slot connection. * Add indexed array functions * Make "a="Label1"; a.setText("foo")" work. * Add "TreeWidget.selectedIndexes". * Add "Table.setCellWidget/cellWidget". * Add "Table.selection" to get back the selection coordinates. * New widgets: "AboutDialog, DatePicker, PopupMenu, ToolBox" * Use the new parser by default for new dialogs. * Support shebang ("#!/path_to/kmdr-executor") in the beginning of the .kmdr files. Running .kmdr files is possible directly if you make them executable. * Warn if a dialog file is not executable. * Store Kommander version in the "VERSION/_VERSION" global variable. * Add experimental Kommander KPart (Kommander dialogs can be embedded in other KDE applications). * Make "input_color" and "@Input.color" accept a default color argument. * Make "TreeWidget.selection" work in multi selection mode. * Make "TreeWidget.setSelection" show the selected item. * Make "CheckBox.setChecked" accept as argument false, "false", true, "true", 0 (meaning false), everything else meaning "true". * Optionally quote the strings inserted via the function browser. * Use combobox for booleans in the function browser. * Use multiline insert box in function browser. * Add highlighting for the new parser. * Make possible to open more associated editors at once. * Make it possible to run external script in a ScriptObject. * "execute" DCOP call returns a string. * The editor does not save the dialog on running. * Create backup files every 5 minutes. * Rework the plugin system. * Set new functions only available to new parser such as createWidget to not be shown in the function browser if the old parser is run. * Show all available functions in the function browser. * Insert the functions using the syntax of the new parser if #!kommander is specified in the associated text. * Return the result of a division in floating form if the result is not an integer. * Update the handbook. * Install examples that are easily reachable from the editor. * Fix "exit" command. * Make "dcopid, pid, parentPid" work in the new parser. * Fix problem with losing the parser type status in the editor when working with multiple dialogs. * "@Array.fromString" should append the new elements to the array, just like it did before and how "array_fromString" does. * Fix @eval for addition/substraction and handle division by zero. * Process code written in external script using the old parser. * Fix many cases when the code was executed altough it was in a codepath that should not be executed. * Fixed the bug in the input text dialog where entering a default value returned the caption. * Fix the for loop parsing if end < start.
2008-02-19Update plone3 package to 3.0.6.taca5-18/+28
Change log * Various tests were enhanced to increase our test coverage * Implement unlocking for content which does not use portal_factory and for LinguaPlone translations. * Add a method to cleanup persistent schemas from content objects which were created by the 'update schema' feature from older Archetypes releases. This is available through the ZMI. * Correct removing of all roles from a group. This fixes This fixes 6994. * Correct generation of session cookies for long userids. This fixes problems with OpenID2 accounts. * Correct handling of unicode arguments for acl_users.enumerateUsers. This fixes zope-pas bug 189627. * Kupu updates: o Correct full screen mode. This fixes 7473. o Correct intenal link insertion for IE. This fixes 7494. o Correct stripping out of anchor to top of current page. This fixes 7680. o The 'Home' link nows goes to the content root instead of the Plone root. This fixes 7713. o 'Link using UIDs' broke indexing of richt text fields with non-ASCII characters. This fixes 7728. o Update the flags and languages list. This fixes 7441. o Revert internal change in language selector code in the plone.app.i18n release from Plone 3.0.5 in the language selector widget which broke LinguaPlone. o Fix lock timeout which was set by default to 12 minutes, it is now set to maxtimeout (71582788 minutes). This fixes 7358. o Fix TypeError when an anonymous user locks content. This fixes 7246. Updated packages * archetypes.kss 1.2.6 * plone.app.i18n 1.0.3 * plone.app.controlpanel 1.0.4 * plone.app.linkintegrity 1.0.5 * plone.app.vocabularies 1.0.3 * plone.locking 1.0.5 * plone.session 1.2 * Archetypes 1.5.6 * CMF 2.1.1 * CMFPlone 3.0.6 * PloneLanguageTool 2.0.2 * PlonePAS 3.2 * PloneTranslations 3.0.11 * PluggableAuthService 1.5.3 * kupu 1.4.8
2008-02-18- Do not use DEPENDS directly if there's a bl3.mk file available.xtraeme1-4/+3
- Simplify PKGNAME.
2008-02-18MAKE_JOBS_SAFE=nokefren1-1/+2
2008-02-18Add dependency on databases/sqlite3. Noticed by wiz@kefren1-1/+3
2008-02-18Needs pkg-config, add it to tools.wiz1-2/+2
2008-02-17Fix use of obsolete tail(1) syntax which coreutils 6.10 doesn't grok.tnn1-2/+2
2008-02-17Remove ruby-actionwebservice, which was obsoleted by ruby-activeresource.minskim5-112/+1
2008-02-16Added p5-I18N-AcceptLanguageobache1-1/+2
2008-02-16Import p5-I18N-AcceptLanguage version 1.04.obache3-0/+26
Based on PR 38029, remove redundant PLIST and markd as DESTDIR ready. I18N::AcceptLanguage matches language preference to available languages per rules defined in RFC 2616, section 14.4: HTTP/1.1 - Header Field Definitions - Accept-Language.
2008-02-13add mono-xspkefren1-1/+2
2008-02-13include openssl bl3tnn1-1/+2
2008-02-13Add XSP, a standalone web server written in C# that can be usedkefren4-0/+280
to run ASP.NET applications with minimal effort.
2008-02-13Define MASTER_SITE simply. Don't add "contrib" automatically.obache1-8/+2
No package using "contrib" sub directory now and it is redundant. If such a package exists on a platform, should use MOZ_DIR individually instead. This change also fixes fetch problem of www/firefox-bin when MASTER_SITE_MOZILLA is not defined in /etc/mk.conf.
2008-02-09sortjnemeth1-3/+3
2008-02-09Update rails to 2.0.2. Now the default database is sqlite3, not mysql.minskim6-89/+139
There are many other changes. Please see CHANGELOG for the complete list: http://dev.rubyonrails.org/browser/tags/rel_2-0-2/railties/CHANGELOG
2008-02-09Add ruby-activesupport.minskim1-1/+2
2008-02-09Import ruby-activeresource.minskim5-0/+79
Active Resource (ARes) connects business objects and Representational State Transfer (REST) web services. It implements object-relational mapping for REST webservices to provide transparent proxying capabilities between a client (ActiveResource) and a RESTful service.
2008-02-09Update ruby-actionpack to 2.0.2.minskim4-66/+59
There have been too many changes. Please see CHANGELOG for the complete list: http://dev.rubyonrails.org/browser/tags/rel_2-0-2/actionpack/CHANGELOG
2008-02-08Update seamonkey, seamonkey-bin and seamonkey-gtk1 to Seamonkey 1.1.8.ghen4-12/+12
Security fixes in this version: MFSA 2008-10 URL token stealing via stylesheet redirect MFSA 2008-09 Mishandling of locally-saved plain text files MFSA 2008-06 Web browsing history and forward navigation stealing MFSA 2008-05 Directory traversal via chrome: URI MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution MFSA 2008-02 Multiple file input focus stealing vulnerabilities MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12) For more info, see http://www.seamonkey-project.org/releases/seamonkey1.1.8/
2008-02-08Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.12.ghen4-24/+12
Security fixes in this version: MFSA 2008-11 Web forgery overwrite with div overlay MFSA 2008-10 URL token stealing via stylesheet redirect MFSA 2008-09 Mishandling of locally-saved plain text files MFSA 2008-08 File action dialog tampering MFSA 2008-06 Web browsing history and forward navigation stealing MFSA 2008-05 Directory traversal via chrome: URI MFSA 2008-04 Stored password corruption MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution MFSA 2008-02 Multiple file input focus stealing vulnerabilities MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12) For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.12/releasenotes/
2008-02-08Fix more cases of non-chainable PKGSRC_COMPILER tests.tnn2-4/+4
2008-02-06Update to 0.11.4rc0. ChangeLog only available in GIT history: seebjs3-14/+14
HOMEPAGE for more information. While here, switch to using lang/ossp-js package instead of lang/spidermonkey. Goodbye, nspr dependency! Javascript support seems more stable. Mark option 'spidermonkey' deprecated in favor of option 'javascript'.
2008-02-04PR 37952: Aleksey Cheusov: more missed tools in USE_TOOLStnn1-2/+2
2008-02-03Fix check interpreter warnings.tnn1-2/+3
2008-02-03Honour PKGMANDIR.tnn1-1/+2
2008-02-03update to 1.4.12drochner4-55/+13
changes: -fix a crash when selecting news bins -add compatibility with non-standard "xmlURL" OPML attributes used by LiveJournal -bugfixes
2008-01-31Fix createdirs commandadam1-2/+2
2008-01-31Needs REPLACE_PERL. PKGREVISION++rillig1-1/+3
2008-01-31Replaced PYTHON_VERSIONS_ACCEPTED with PYTHON_VERSIONS_INCOMPATIBLE.rillig1-2/+2
2008-01-25Enabled p5-Captcha-reCAPTCHA and p5-Captcha-reCAPTCHA-Mailhide.heinz1-1/+3
2008-01-25Initial import of Captcha-reCAPTCHA-Mailhide.heinz3-0/+32
This is a Perl implementation of the reCAPTCHA Mailhide API. It can generate URLs or even directly usable HTML code for using the reCAPTCHA Mailhide web service, which provides a way of asking people to solve a reCAPTCHA before they can view your email address.
2008-01-25Initial import of module Captcha-reCAPTCHA.heinz3-0/+37
This is a Perl implementation of the reCAPTCHA API. From the recaptcha.net web site: reCAPTCHA improves the process of digitizing books by sending words that cannot be read by computers to the Web in the form of CAPTCHAs for humans to decipher. More specifically, each word that cannot be read correctly by OCR is placed on an image and used as a CAPTCHA. This is possible because most OCR programs alert you when a word cannot be read correctly.
2008-01-25Enabled p5-HTML-Tinyheinz1-1/+2
2008-01-25Initial import of Perl module HTML-Tiny.heinz3-0/+28
HTML::Tiny is a simple, dependency free Perl module for generating HTML (and XML). It concentrates on generating syntactically correct XHTML using a simple Perl notation.
2008-01-24No need to use wget to fetch now.obache1-3/+1
(previously, need cookie capable to fetch).
2008-01-21Use the same order as zope210.taca1-5/+5
2008-01-21Move post-patch target to post-extract changed as www/zope29.taca1-5/+5
And avoid to use -0 option of xargs(1).
2008-01-21Update to 2.2.8, please check http://www.apache.org/dist/httpd/CHANGES_2.2.8xtraeme5-66/+22
for the list of changes.
2008-01-21Add comment that this file is used by devel/apr0/Makefile detectedtaca1-1/+3
by pkglint.
2008-01-21Update apache package to 2.0.63.taca2-6/+5
Changes with Apache 2.0.63 *) winnt_mpm: Resolve modperl issues by redirecting console mode stdout to /Device/Nul as the server is starting up, mirroring unix MPM's. PR: 43534 [Tom Donovan <Tom.Donovan acm.org>, William Rowe] *) winnt_mpm: Restore Win32DisableAcceptEx On directive and Win9x platform by recreating the bucket allocator each time the trans pool is cleared. PR: 11427 #16 (follow-on) [Tom Donovan <Tom.Donovan acm.org>] Changes with Apache 2.0.62 (not released) *) SECURITY: CVE-2007-6388 (cve.mitre.org) mod_status: Ensure refresh parameter is numeric to prevent a possible XSS attack caused by redirecting to other URLs. Reported by SecurityReason. [Mark Cox, Joe Orton] *) SECURITY: CVE-2007-5000 (cve.mitre.org) mod_imagemap: Fix a cross-site scripting issue. Reported by JPCERT. [Joe Orton] *) Introduce the ProxyFtpDirCharset directive, allowing the administrator to identify a default, or specific servers or paths which list their contents in other-than ISO-8859-1 charset (e.g. utf-8). [Ruediger Pluem] *) log.c: Ensure Win32 resurrects its lost robust logger processes. [William Rowe] *) mpm_winnt: Eliminate wait_for_many_objects. Allows the clean shutdown of the server when the MaxClients is higher then 257, in a more responsive manner [Mladen Turk, William Rowe] *) Add explicit charset to the output of various modules to work around possible cross-site scripting flaws affecting web browsers that do not derive the response character set as required by RFC2616. One of these reported by SecurityReason [Joe Orton] *) http_protocol: Escape request method in 405 error reporting. This has no security impact since the browser cannot be tricked into sending arbitrary method strings. [Jeff Trawick] *) http_protocol: Escape request method in 413 error reporting. Determined to be not generally exploitable, but a flaw in any case. PR 44014 [Victor Stinner <victor.stinner inl.fr>]
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-07 01:20:23 +0000