summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2003-09-13new v6 patch (small bug fix)itojun2-5/+7
2003-09-13Update "gtkhtml" package to version 1.1.10. A meaningful list of changestron3-42/+41
is not available. But this version fixes a security problem described in CAN-2003-0541.
2003-09-13Remove unneeded patch... module.mk sets INSTALLDIRS for us.jlam2-14/+1
2003-09-12kill all references to gcc.buildlink2.mk and compiler.mk, and definegrant2-4/+2
USE_GCC2 or USE_GCC3 where appropriate. the functionality of the old gcc.buildlink2.mk has been rolled into compiler.mk now, which is automatically used. more changes to come later...
2003-09-12Install all .ini files in the examples directory. Keep CFLAGS' value whilejmmv4-7/+20
building. Bump PKGREVISION to 1. Closes PR pkg/21862 by Todd Vierling.
2003-09-12Add missing `netscape7' script to PLIST.seb1-2/+3
Bump PKGREVISION.
2003-09-12upgrade to 1.3.28 + IPv6 patch.itojun4-36/+39
This version of Apache is principally a security and bug fix release. Of particular note is that 1.3.28 addresses and fixes the following issues: CAN-2003-0460 (cve.mitre.org) (rotatelogs bug), VU#379828 (infinite loop potential), and file descriptor leakage .
2003-09-12Hmm, squid-2.5.STABLE3-http_reply_access_denied.patch seems to updated.taca1-3/+3
2003-09-11Update squid package to 2.5.3nb5. Apply some official patches.taca2-4/+25
external_acl_type concurrency= renamed to children= synopsis To lessen confusion in later upgrades to Squid-3 the external_acl_type concurrency= option has been renamed to children= to match Squid-3 usage. This is done because concurrency= has a completely different meaning in squid-3. Squid-2.5 still accepts the old syntax to keep compatibility within the Squid-2.5 release, but it is recommended to start using the new syntax unless you need to be able to easily downgrade to a earlier Squid-2.5 release. severity Cosmetic date 2003-09-02 07:02 versions Squid-2.5.STABLE3 and earlier platforms All workaround Make sure to read the Squid-3 releasenotes very carefully when upgrading. Assertion error or segmentation fault if using proxy_auth in delay_access synopsis If proxy_auth acl type is used in delay_access then Squid may abort with an assertion error or segmentation fault. Notice: This patch may change some error conditions to be logged with TCP_DENIED rather than TCP_MISS. severity Medium date 2003-09-01 20:01 bugzilla #638, #756 versions Squid-2.5 platforms All workaround Don't use proxy_auth acl types in delay_access Segmentation fault if proxy_auth with ntlm used in http_reply_access synopsis In configurations where authentication is enforced in http_access and then reused in http_reply_access to further control access levels Squid may segfault if the ntlm authentication scheme is used. severity Medium date 2003-09-01 20:01 bugzilla #763 versions Squid-2.5 platforms All workaround Don't use proxy_type acls in http_reply_access or disable the use of the ntlm authentication scheme (disabled by default) code 407 instead of 403 for authenticated traffic-shaped user synopsis delay_access can disturb Squids logics on when to request a new login from the user. Most notably if delay_access ends up in a proxy_auth acl then any access denials will require a new login but the opposite may also happen. severity Medium date 2003-08-31 09:31 bugzilla #742 versions Squid-2.5 and earlier platforms All workaround make sure delay_access always ends up in the same class of ACL as http_access does on the same request. Form POSTing troubles with NTLM authentication or other error responses synopsis Large POST/PUT requests may fail with a "Connection reset" error in the browser in situations where Squid immediately responds with an error page. This is most notable when using NTLM authentication but may also occur in a few other situations severity Medium date 2003-08-28 22:28 bugzilla #267, #757 versions Squid-2.5 and earlier platforms All workaround Allow POST/PUT without requiring authentication if you are using NTLM authentication. No explicit error message when ncsa_auth (squid user) can't access passwd file synopsis ncsa_auth just exists if it can not read the supplied password file, instead of reporting an error. severity Minor date 2003-08-20 12:20 bugzilla #733 versions Squid-2.5 and earlier platforms All workaround If ncsa_auth exits for no apparent reason, verify that the given ncsa password file is readable by the cache_effective_user. forwarded_for off has no effect synopsis The patch for Bug #92 (squid-2.5.STABLE3-mem_cfd.patch) broke the forwarded_for directive. severity Minor date 2003-08-18 17:18 bugzilla #750 versions Squid-2.5.STABLE3 snapshots 2003-08-07 to 2003-08-18 platforms All workaround Use anonymization via http_header_access to delete the X-Forwarded-For header from forwarded requests. This is probably preferred in any case.
2003-09-11ap2-php4 no longer exists - remove it from SUBDIRsagc1-2/+1
2003-09-10Fix REPLACE_PERL: pathnames listed should be relative to ${WRKSRC}.seb1-5/+5
2003-09-10Use internal neon rather than the www/neon package and add theepg1-2/+12
following note to the Makefile: # DON'T make this package depend on the www/neon package until neon # becomes stable; keep it using its internal copy of neon as with # www/sitecopy. This package has in the past bounced back and forth # between using external and internal neon because neon moves faster # than cadaver, and does so incompatibly.
2003-09-10Update to 0.24.1.epg3-25/+43
Changes in release 0.24.1: * Add support for "GSS-Negotiate" Kerberos authentication scheme (from Risko Gergely and Burjan Gabor). * Disable Nagle to improve performance of small requests (thanks to Jim Whitehead and Teng Xu). * Fix compatibility with OpenSSL 0.9.6 (broken in 0.24.0). * Fix prototype mismatch in ne_207.c. * Define ssize_t from ne_request.h for Win32. * Prevent segfault on zlib initialization failures. * ne_sock_init does not fail if PRNG could not be seeded. * Fix segfault in cookies code (Markus Mueller). * Documentation updates. Changes in release 0.24.0: * Major changes to XML interface: - have the start-element callback either accept, decline, abort, or return a state integer. - remove 'struct ne_xml_elm'; callbacks are passed {nspace, name} strings along with a state integer. - dropped "collect", "strip-leading-whitespace" modes - push responsibility for accumulating cdata onto caller; drop 'cdata' argument from end-element callback. - don't abort if no handler accepts a particular element, just ignore that branch of the tree. - dropped support for libxml 1.x and expat < 1.95.0. - guarantee that start_element callback is not passed attrs=NULL - add ne_xml_doc_encoding() to retrieve encoding of parsed XML document. * Major changes to SSL interface: - rewrite of interfaces for handling server and client certificates; ne_ssl.h: many new functions available. - only PKCS#12-encoded client certs are supported. - changes to most names of SSL-related functions operating on an ne_session, e.g. ne_ssl_load_cert->ne_ssl_trust_cert. - client cert provider callback is passed the set of acceptable CA names sent by the server - the entire chain of certs presented by server is now accessible * Remove unused ne_register_progress() from socket layer. * Changes to resolver interface: ne_addr_first and _next return const; ne_addr_print renamed to ne_iaddr_print; ne_iaddr_make and ne_iaddr_free have been added. * ne_request_create() now duplicates the method string passed in. * ne_redirect_location() will now return NULL in some cases. * Split socket creation to ne_sock_create() from ne_sock_connect: - should report connect() error messages properly on Win32. * Fix several memory leaks in error handling paths. * Add a pkg-config file, neon.pc.in.
2003-09-07Remove the ap2-php4 package. The ap-php4 now works for apache2 also.erh4-49/+0
2003-09-06Upgrade p5-Apache-Gallery to 0.6.kim5-23/+38
Notable changes: * Apache now internally handles image dispatch which enables use of all Apache caching possibilities * Support the EXIF Orientation key for automatic rotate * Directory comments * New GallerySortBy option to allow sort by time, size etc. * Set width/height on thumbnail images for better performance * InlineDir is no longer configurable using PerlSetVar * Write to the error log if unable to open files in the cache * Added slideshow feature * Moved the cache to one single directory outside the webscope * Allow user to customize the "No info found" message Some people have been reporting problems with Apache segfaulting when displaying images from certain cameras (eg. the Canon G2). The problem can be solved by using Image::Info 1.11 or earlier.
2003-09-06Update p5-libapreq to 1.2, from its new home.kim2-6/+6
Changes are numerous since this package has not been updated in quite a while. See http://cvs.apache.org/viewcvs.cgi/httpd-apreq/Changes?rev=1.54&content-type=text/vnd.viewcvs-markup
2003-09-05update comment. pointed out by Todd Vierling on tech-pkg@jdolecek1-4/+3
2003-09-05add a note that pcre, session and xml are now built into the main PHP4 packagejdolecek1-1/+4
suggested on tech-pkg@
2003-09-05${DATE} has to be defined before being used in != -- move PKGVER line belowwiz2-4/+6
inclusiond of bsd.prefs.mk. Addresses PR 22690.
2003-09-04define NO_SRC_ON_FTP as we always want to download the distfile fromgrant2-2/+4
the (only) master site, and there is little value in having the daily distfiles on ftp.NetBSD.org.
2003-09-04order some variables to be consistent with mozilla-bin-nightly.grant1-4/+5
2003-09-04date -> ${DATE}grant1-2/+3
2003-09-04allow any Python version >=2.2,drochner1-2/+2
closes PR pkg/22678 by Min Sik Kim
2003-09-04Add a reminder that the php database modules need to be installed by hand,erh1-4/+6
since we don't know which database you'll be configuring horde for.
2003-09-04Use the newly added apache.mk to allow this package to work with any oferh1-3/+3
the variants of apache.
2003-09-03Revision bump, because ImageMagick's shared library version changeadam1-2/+2
2003-09-03Revision bump, because ImageMagick's shared library version changeadam1-2/+2
2003-09-01add some missing @dirrm'sjdolecek1-1/+8
problem reported and patch provided in PR pkg/22654 by Adrian Portelli
2003-09-01Fix dependences broken by update of PHP to version 4.3.3.tron1-6/+2
2003-09-01Add NetBSD RCS tagscjep8-0/+8
2003-09-01Removed the non-existing patch-aamartti1-3/+1
2003-09-01remove for now; I'll confirm whether or not this patch would be necessary laterjdolecek1-175/+0
2003-08-31Update PHP to final 4.3.3jdolecek20-474/+361
Some highlights of changes since 4.2.3: * PCRE updated to 4.3, GD to 2.0.15 * improved Apache2 support * much improved stream & URL wrapper support, output compression support * added CLI (Command Line Interface) SAPI * debug_backtrace() backported from ZendEngine2 * faster build system * huge number of other bug fixes and improvements Packaging changes: * 'pcre', 'xml', and 'session' modules folded back into main package - 'pcre' and 'xml' is required by PEAR, and 'session' is just too essential to be separate * 'gd' module now uses bundled PHP GD library, which is better integrated * PHP modules use shared distinfo when possible to ease future PHP updates * ${PREFIX}/bin/php is now CLI version, ${PREFIX}/libexec/cgi-big/php remains CGI version
2003-08-31include some additional information about PHP languagejdolecek3-12/+15
2003-08-30Fix spelling.reed1-1/+1
2003-08-30"It's" stands for "it is" (or "it has"). The apostrophe is not usedreed3-3/+3
for a possessive (like her, his, whose, their, and its). Note that I didn't check for proper use of "its" (when it should be "it is" or "it has" instead). I also saw over 15 other grammar or punctuation problems, but not fixed in this commit.
2003-08-29Bump package revision to 7 (Sablotron was updated to 1.0).xtraeme1-2/+2
2003-08-29Updated tinyproxy to 1.6.1xtraeme2-5/+5
Changes: Released tinyproxy 1.6.1 (2003-08-06) * heap.c (debugging_realloc): Remove the assert on the ptr being NULL since a NULL pointer is allowed by the realloc() spec. * child.c (child_main): Fixed an off-by-one error with the maxrequestsperchild variable. [Fix proposed by Yannick Koehler] Released tinyproxy 1.6.0 (2003-07-14) * src/htmlerror.c (indicate_http_error): Added calls to va_end() before leaving the function. Closes my own PR pkg/22161.
2003-08-29Use bsd.pkg.install.mk to handle generation and installation of the rc.djmmv2-13/+12
script. Bump PKGREVISION to 1.
2003-08-29Add missing file to PLIST.jmmv1-1/+2
2003-08-28Change my email address to the NetBSD one, ok'ed by wiz@xtraeme2-4/+4
2003-08-28Removed patch-aamartti1-2/+1
2003-08-28Fix pasto (hi drochner!).wiz1-2/+2
2003-08-25Update to 3.31.heinz3-11/+12
Better compatibility with Mozilla/MSIE behaviour. ==== Changes since 3.27 ==== 2003-08-19 Gisle Aas <gisle@ActiveState.com> Release 3.31 The -DDEBUGGING fix in 3.30 was not really there :-( 2003-08-17 Gisle Aas <gisle@ActiveState.com> Release 3.30 The previous release failed to compile on a -DDEBUGGING perl like the one provided by Redhat 9. Got rid of references to perl-5.7. Further fixes to avoid warnings from Visual C. Patch by Steve Hay <steve.hay@uk.radan.com>. 2003-08-14 Gisle Aas <gisle@ActiveState.com> Release 3.29 Setting xml_mode now implies strict_names also for end tags. Avoid warning from Visual C. Patch by <gsar@activestate.com>. 64-bit fix from Doug Larrick <doug@ties.org> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=195500 Try to parse similar to Mozilla/MSIE in certain edge cases. All these are outside of the official definition of HTML but HTML spam often tries to take advantage of these. - New configuration attribute 'strict_end'. Unless enabled we will allow end tags to contain extra words or stuff that look like attributes before the '>'. This means that tags like these: </foo foo="<ignored>"> </foo ignored> </foo ">" ignored> are now all parsed as a 'foo' end tag instead of text. Even if the extra stuff looks like attributes they will not be reported if requested via the 'attr' or 'tokens' argspecs for the 'end' handler. - Parse '</:comment>' and '</ comment>' as comments unless strict_comment is enabled. Previous versions of the parser would report these as text. If these comments contain quoted words prefixed by space or '=' these words can contain '>' without terminating the comment. - Parse '<! "<>" foo>' as comment containing ' "<>" foo'. Previous versions of the parser would terminate the comment at the first '>' and report the rest as text. - Legacy comment mode: Parse with comments terminated with a lone '>' if no '-->' is found before eof. - Incomplete tag at eof is reported as a 'comment' instead of 'text' unless strict_comment is enabled. 2003-04-16 Gisle Aas <gisle@ActiveState.com> Release 3.28 When 'strict_comment' is off (which it is by default) treat anything that matches <!...> a comment. Should now be more efficient on threaded perls.
2003-08-23Add pseudo-category 'java'.jschauma8-16/+16
2003-08-23improve COMMENT.grant3-6/+6
2003-08-22Add some note for ap2-ruby package.taca1-1/+9
2003-08-21improve descriptions of some extensionsgrant1-5/+5
2003-08-20add kimagemapeditor.markd1-1/+2
2003-08-20Initial import of KImageMapEditor 1.0.markd4-0/+73
KImageMapEditor is a tool for easily defining regions in HTML image maps. Features: o the ability to edit image maps in existing HTML documents o importing image maps from HTML documents, with a dialog for selecting an image map to modify from the maps in the document o a list of all image maps in the active HTML file, for switching among, deleting or adding new imagemaps o a list of all images in the active HTML file, for switching among the images o a pane which displays the appearance and name of the defined regions in the current image map o use as a component, such as for use as an imagemap viewer plugin in Konqueror or as an editor plugin in Quanta Plus o visual (mouse) and tabular (keyboard) modification of image map regions o exporting the revised image maps as an HTML document o integration with Quanta Plus.