summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2007-06-05Note that:abs1-0/+3
You do not need nspluginwrapper if the ABI of the plugin and browser are the same, such as running a 32 bit Linux firefox and flash plugin under NetBSD.
2007-06-05opencdk shlib major changed; bump ABI depends and PKGREVISIONs ofwiz15-26/+30
affected packages.
2007-06-05Bump apache22 to 2.2.4nb4 due to:lkundrak3-3/+59
Security fix for CVE-2007-1862 sensitive information disclosure http://issues.apache.org/bugzilla/show_bug.cgi?id=41551 http://issues.apache.org/bugzilla/attachment.cgi?id=20065
2007-06-03Update drraw to 2.2a4.kleink2-6/+6
Changes since 2.2a3 [2007/03/17]: - Fixed support for SHIFT graph command. - Updated RRDs::fetch usage again (courtesy of Andy Mayhew). - Saving dashboards could generate bad index entries (reported by Fabien Wernli). - Added "Invisible" color (suggested by John Rouillard). - Dashboard style display for templates broke custom time display of templates (reported by Mark Noworolski). - Two typos caused forms to use POST instead of GET (courtesy of Fabien Wernli). - The graph editor no longer allowed stacking CDEFs or VDEFs (reported by John Rouillard).
2007-06-02Update w3m to 0.5.2.uebayasi5-25/+9
w3m 0.5.2 - 2007-05-31 * security fix - fix format string vulnerability. * new features - support gtk2 with w3m-img. - new option for LiveHTTPHeaders-like logs. - new option to fontify <del>, <s>, <ins>, and so on. * other bug fixes - avoid errors in "configure" and "make". - '\n' handling in attributes' values of HTML tags.
2007-06-01Convert to use guile16 instead of guile14. Patch provided bywiz1-7/+10
Aleksej Saushev in private mail. Bump PKGREVISION.
2007-05-31Update seamonkey, seamonkey-bin and seamonkey-gtk1 to Seamonkey 1.1.2.ghen9-42/+38
Security fixes in this version: MFSA 2007-17 XUL Popup Spoofing MFSA 2007-16 XSS using addEventListener MFSA 2007-15 Security Vulnerability in APOP Authentication MFSA 2007-14 Path Abuse in Cookies MFSA 2007-12 Crashes with evidence of memory corruption For the complete changelog, see http://www.mozilla.org/projects/seamonkey/releases/seamonkey1.1.2/changelog.html
2007-05-31Update firefox15, firefox15-bin and firefox15-gtk1 to 1.5.0.12.ghen8-30/+30
Security fixes in this version: MFSA 2007-17 XUL Popup Spoofing MFSA 2007-16 XSS using addEventListener MFSA 2007-14 Path Abuse in Cookies MFSA 2007-13 Persistent Autocomplete Denial of Service MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/releases/1.5.0.12.html Note: Firefox 1.5.0.x will be maintained with security and stability updates until June 2007. All users are strongly encouraged to upgrade to Firefox 2.
2007-05-31Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.4.ghen9-30/+30
Security fixes in this version: MFSA 2007-17 XUL Popup Spoofing MFSA 2007-16 XSS using addEventListener MFSA 2007-14 Path Abuse in Cookies MFSA 2007-13 Persistent Autocomplete Denial of Service MFSA 2007-12 Crashes with evidence of memory corruption For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.4/releasenotes/
2007-05-30The file httpd-languages.conf.in does not end with a newline character,rillig1-1/+2
which causes nbsed on Solaris to create a file of unlimited size. Fixed by appending a newline.
2007-05-30Removed some code duplication from the buildlink3 files by using the newrillig1-8/+3
pkg-build-options.mk procedure.
2007-05-29Remove logic to pass the right apr includes to configure based onschmonz1-11/+2
Apache version. The apr buildlink3.mk files take care of this now.
2007-05-29Actually respect PKG_SYSCONFDIR. Now that devel/apr0/buildlink3.mkschmonz2-8/+6
sets BUILDLINK_INCDIRS.apr, remove custom CPPFLAGS. Use -e for the SUBST_SED expression to mollify pkglint. Add APACHE_USER and VARBASE to BUILD_DEFS. Don't try to remove lib/httpd on deinstall, as it belongs to Apache. Bump PKGREVISION.
2007-05-29Remove Zope 2.2 and related pieces:joerg23-567/+1
databases/zope-mysql lang/py-extclass textproc/py-dtml www/py-pcgi www/py-zpublisher www/zope No objection from pkgsrc-users. cVS: ----------------------------------------------------------------------
2007-05-29Teach "analog" about IPv6 addresses in webserver logfiles.tron3-2/+78
Bump package revision because of this new feature.
2007-05-29Update ap-jk to 1.2.23.obache2-6/+6
It fixes an Important vulnerability. Changes between 1.2.22 and 1.2.23 Native Change the default value of JkOptions to ForwardURICompatUnparsed. The old default value was ForwardURICompat. This should make URL interpretation between Apache httpd and Tomcat consistent (prevent double decoding problems). (rjung)
2007-05-27Add mimetex.obache1-1/+2
2007-05-27Import mimetex version 1.64.obache4-0/+42
MimeTeX, licensed under the gpl, lets you easily embed LaTeX math in your html pages. It parses a LaTeX math expression and immediately emits the corresponding gif image, rather than the usual TeX dvi. And mimeTeX is an entirely separate little program that doesn't use TeX or its fonts in any way. It's just one cgi that you put in your site's cgi-bin/ directory, with no other dependencies. So mimeTeX is very easy to install. And it's equally easy to use. Just place an html <img> tag in your document wherever you want to see the corresponding LaTeX expression.
2007-05-26Add ruby-mechanize.minskim1-1/+2
2007-05-26Import ruby-mechanize.minskim4-0/+51
The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies, follows redirects, can follow links, and submit forms. Form fields can be populated and submitted. Mechanize also keeps track of the sites that you have visited as a history.
2007-05-25Add p5-CGI-Application-Plugin-(DBH,ValidateRM}markd1-1/+3
2007-05-25Initial import p5-CGI-Application-Plugin-ValidateRM version 2.1markd4-0/+29
CGI::Application::Plugin::ValidateRM helps to validate web forms when using the CGI::Application framework and the Data::FormValidator module.
2007-05-25Initial import p5-CGI-Application-Plugin-DBH version 4.00markd4-0/+31
CGI::Application::Plugin::DBH adds easy access to a DBI database handle to your CGI::Application modules. Lazy loading is used to prevent a database connection from being made if the "dbh" method is not called during the request. In other words, the database connection is not created until it is actually needed.
2007-05-25Update HTML-FillInForm to 1.06markd2-7/+6
1.06 - October 13th, 2005 Distinguish between selects with and without the multiple attribute set (Alexander Hartmaier) Added warnings to PREREQ_PM 1.05 - December 19th, 2004 Added new tests in 19_extra.t (Vsevolod (Simon) Ilyushchenko) as part of Phalanx Make it clearer that doesn't have a CGI.pm dependency.
2007-05-24Honor PKGMANDIR.jlam1-2/+2
2007-05-23Update to KDE 3.5.7markd1-4/+4
Quanta Plus * Autocompletion for member variables. * Fix directory creation in some ftp servers. * Fix crash when dropping a document template on an Untitled empty document.
2007-05-23Reindent.ghen1-2/+2
2007-05-22I don't have time to maintain packages that might be affected byxtraeme1-2/+2
security vulnerabilities.
2007-05-22I'm not maintaining these packages anymore.xtraeme2-4/+4
2007-05-21Use relational pattern instead of [2-9]*. Bump revision.joerg1-3/+3
2007-05-21Use less ambigious relational matching for guile-gtk dependency.joerg1-3/+3
Bump revision.
2007-05-20Update geeklog to 1.4.1.taca14-819/+706
pkgsrc's change: improving our README file. Geeklog 1.4.1 New Features * Support for Microsoft SQL Server. Starting with this release, Geeklog can now also be installed on Microsoft SQL Server, so it's no longer restricted to just MySQL. The MS SQL support was developed by Randy Kolenko. Thanks, Randy! Please note that any third-party plugins will have to offer support for MS SQL before they can be installed on Microsoft SQL Server. The bundled plugins (Calendar, Links, Polls, Spam-X, Static Pages) have already been updated accordingly. * Calendar plugin. The formerly built-in calendar and events have now been moved into a separate plugin. This complements the move of the polls and links sections into plugins in Geeklog 1.4.0 and makes Geeklog more modular as you can now easily disable or replace functionality that you don't need for your site. * Multi-language support. It is now possible to build truly multi-linugal sites with Geeklog where not only the navigation but also the content of the site changes with the language. * Ships with FCKeditor 2.3.1, which once again includes a file manager for uploading images. * A function for mass-deletion of old or inactive users. The list automatically searches for users that have never logged in, only used the site for a very short time or have not been online since a very long time. The time span can be varied, and found users can be selectively deleted. Security In the light of the security issues discovered in Geeklog 1.4.0 and earlier versions, the Geeklog source code has undergone a code review. We have identified and addressed several minor issues and introduced new measures to enhance security in this release. As a welcome side effect, the code reviews have also uncovered a few bugs and inconsistencies that we also fixed in this release. Spam Protection With this release we are finally removing support for the discontinued MT-Blacklist. In its place, we are now using a system called Spam Link Verification (SLV) run by Russ Jones at www.linksleeve.org. SLV could be described as a community-driven, automatically updated blacklist. See the documentation of the Spam-X plugin for details.
2007-05-20Update to 1.0.4:xtraeme3-23/+22
Version 1.0.4 (released 10-Apr-2007) * fix some markup bugs in query views (issue #266) * fix loginfo-handler's support for CVS 1.12.9 (issues #151, #257) * make viewvc-install able to run from an arbitrary location * update viewvc-install's output for readability * fix bug writing commits to non-MyISAM databases (issue #262) * allow long paths in generated tarballs (issue #12) * fix bug interpreting EZT substitute patterns * fix broken markup view disablement * fix broken directory view link generation in directory log view * fix Windows-specific viewvc-install bugs * fix broke query result links for Subversion deleted items (issue #296) * fix some output XHTML validation buglets * fix database query cache staleness problems (issue #180)
2007-05-18Correctly use python version prefix. Found during SoC testing.joerg1-3/+2
2007-05-18Remove myself as maintainer, I don't have the time anymore to keep thesepeter1-2/+2
packages up to date.
2007-05-17addgdt1-1/+4
# problem with WWW/Library/Implementation MAKE_JOBS_SAFE= no
2007-05-15Remove firefox2 and add firefox15 packages.kristerw1-4/+4
2007-05-13Update squid pacakge to 2.6.13 (2.6.STABLE13).taca15-72/+73
Changes to squid-2.6.STABLE13 (11 May 2007) - Make sure reply headers gets sent even if there is no body available yet, fixing RealMedia streaming over HTTP issues. - Undo an accidental name change of storeUnregisterAbort. - Kill an ancient malplaced storeUnregisterAbort call from ftp.c - Bug #1814: SSL memory leak on persistent SSL connections - Don't log ECONNREFUSED/ECONNABORTED accept failures in cache.log - Cosmetic fix: added missing newline in WCCPv2 configuration dump. - Ukrainan error messages - Convert various error pages from DOS to UNIX text format - Bug #1820: COSS assertion failure t->length == MD5_DIGEST_CHARS - Clarify the max-conn=n cache_peer option syntax slightly - Bug #1892: COSS segfault on shutdown - Windows port: fix undefined ECONNABORTED - Make refreshIsCachable handle ETag as a cache validator, not only last-modified - in_port_t is not portable, use unsigned short instead - Fix fs / auth / snmp dependencies - Portability: statfs() may reqire #include <sys/statfs.h>
2007-05-13Remove some GNOME1 packages that are unmaintained upstream and/or inwiz14-370/+1
pkgsrc, in preparation for gnome1-libs removal(*). There was no feedback for keeping these packages after my HEADS UP mail to pkgsrc-users a week ago. (*) More to come before that can happen, though.
2007-05-12Remove www/firefox2* (copied into www/firefox*).ghen77-8381/+0
2007-05-12Bump PKGREVISION for major www/firefox upgrade.ghen5-6/+10
2007-05-12Re-import firefox-gtk1-1.5.0.11 as www/firefox15-gtk1, www/firefox-gtk1 hasghen3-0/+2608
firefox-gtk1-2.0.0.3nb1 now, as discussed with gdt on tech-pkg.
2007-05-12Re-import firefox-bin-1.5.0.11 as www/firefox15-bin, www/firefox-bin hasghen7-0/+66
firefox-bin-2.0.0.3 now, as discussed with gdt on tech-pkg.
2007-05-12Re-import firefox-1.5.0.11 as www/firefox15, www/firefox hasghen65-0/+5074
firefox-2.0.0.3nb1 now, as discussed with gdt on tech-pkg.
2007-05-12Update to Firefox 2.0.0.3 (nb1), from www/firefox2* (see there for historyghen80-260/+914
and change notes). Firefox 1.5.0.x will be maintained in www/firefox15*, as discussed on tech-pkg.
2007-05-12Add an EOL note here as well.ghen1-0/+4
2007-05-12Update EOL notice.ghen2-4/+4
2007-05-11Update to 2.8.6rel5:wiz2-7/+7
2007-05-09 (2.8.6rel.5 fix from 2.8.7dev.5) * correct loop-limit in print_crawl_to_fd(), which broke "lynx -crawl -dump" from 2.8.6dev.9 changes (Mandriva #29785) -TD
2007-05-08Reset the PKGREVISION in packages that use the version string from php4 or php5adrianp1-2/+1
Pointed out by Geert Hendrickx on tech-pkg@
2007-05-06Update to 4.4.7adrianp4-47/+7
* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric) * Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser) * Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser) * Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser) * Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser) * Added missing open_basedir & safe_mode checks to zip:// and bzip:// wrappers. (MOPB-21 by Stefan Esser). * Limit nesting level of input variables with max_input_nesting_level as fix for (MOPB-03 by Stefan Esser) * Fixed CRLF injection inside ftp_putcmd(). (by loveshell[at]Bug.Center.Team) * Fixed a possible super-global overwrite inside import_request_variables(). (by Stefano Di Paola, Stefan Esser) * Fixed a remotely trigger-able buffer overflow inside bundled libxmlrpc library. (by Stanislav Malyshev) * XSS in phpinfo() (MOPB-8 by Stefan Esser)