Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
- WARN: Makefile:9: PKGNAME should not be used in DIST_SUBDIR, as it
sometimes includes the PKGREVISION. Please use PKGNAME_NOREV instead.
Noted by Geert Hendrickx on tech-pkg.
|
|
|
|
http://secunia.com/advisories/17454/
|
|
From the CHANGES:
> Changes in this release:
> * Fixed a potential XSS vulnerability.
|
|
From the CHANGES:
> Major changes compared to the Horde version 3.0.5 are:
> * Fixed sidebar menu layout with Opera browsers.
> * Fixed calendar popup with Safari browsers.
> * Fixed blank screens with Internet Explorer browsers after logins.
> * Fixed warnings with PHP 4.4.0 and 5.0.5.
> * Added ability to enable and disable IMSP globally.
> * Fixed URL generation with some PHP CGI setups.
> * Fixed sharing with groups if using group hooks.
> * Updated Finnish, French, German, Hungarian, Korean, Polish, Slovak,
> Turkish, and Traditional Chinese translations.
> * Minor improvements and bug fixes.
>
> Major changes compared to the Horde version 3.0.6 are:
> * Fixed cross site scripting vulnerabilities in the gzip/tar and css MIME
> viewers.
> * Fixed MySQL session handler.
|
|
1.8 2005-10-06
- Bug fix to stop death in Apache::Session::Lock::Semaphore.
1.70_01 2004-09-01
- Casey West takes the pumpkin.
- Complete rewrite of test suite to use Test::* modules.
- Minor documentation tweaks.
|
|
1.27 - October 20, 2005
localize ScriptSock directive to always point to t/logs/cgisock
regardless of inherited and custom mod_cgid settings
[Geoffrey Young]
Prevent the config file from being overwritten
on platforms such as WIN32 under certain conditions.
[Randy Kobes]
make sure that the TESTS Makefile.PL parameter is properly
recognized ["Christopher H. Laco"]
Add the output of ldd(unix/cygwin) and otool -L (darwin)
for httpd to the mp2bug report script.
[Philip M. Gollucci]
fall back on using httpd-defined HTTPD_ROOT as the base for
httpd.conf if all other options fail. [Geoffrey Young]
1.26 - July 25, 2005
some people have their Apache user/group names include spaces, so fix
the autogenerated httpd.conf to quote the two. [Stas]
make sure mp2 loading doesn't make it impossible to complete
mp1 runs. [Matt Sergeant, Geoffrey Young]
add Apache::TestConfigParrot and Apache::TestRunParrot to
support mod_parrot server-side testing [Geoffrey Young]
update -withtestmore action to properly work with newer versions
of Test::Builder [Geoffrey Young]
1.25 - June 17, 2005
provide $Apache::TestUtil::DEBUG_OUTPUT as target for t_debug()
statements, defaulting to STDOUT. this allows for changing
t_debug() to STDERR when using functions like t_write_file()
from within handler() server-side tests. [Geoffrey Young]
adjust need_module()/have_module() to not try to require a module if
it was explicitly passed with a .c extension. in certain cases this
prevents a fatal error (e.g. trying to call
Apache::Test::have_module('mod_alias.c') from the <Perl>
sections. [Stas]
1.24 - May 20, 2005
When adding TypesConfig directives (either inherited from the global
httpd.conf or from the locally generated mime.types) make sure to
enclose it in <IfModule mod_mime.c>..</IfModule>, since mod_mime might
be unavailable. [Stas]
1.23 - May 3, 2005
Fix Apache::TestRequest::hostport to return the default host:port
string if $Apache::TestRequest::Module is 'default' or undef [Stas]
Fix Apache::TestRequest::module2url to allow passing '' as a URI
path. [Stas]
tweaks to Apache::TestClient to better deal with corrupted responses
when LWP is not available. [Stas]
1.22 - April 14, 2005
******************** IMPORTANT ********************
this version of Apache-Test does not completely
configure mod_perl for mod_perl versions 1.99_21 or
earlier. Please read the below changes carefully.
***************************************************
remove Apache::TestConfig::modperl_2_inc_fixup(). Apache-Test
is no longer Apache2.pm aware - it will not configure mod_perl
support to look in Apache2/ automatically. [joes]
Add support for mp2's Apache:: -> Apache2:: rename [joes]
1.21 - March 23, 2005
fix Apache::TestConfig (was missing 'use lib' before using
lib::import) [William McKee]
TestConfigPerl will now configure mod_perl last, giving mod_perl
highest priority throughout the httpd lifecycle. [Geoffrey Young]
Apache::TestConfig::untaint_path needs to remove empty entries in the
PATH list, since -T considers those tainted too. [Stas]
add Apache::TestHarnessPHP which allows for running client-side
scripts via php instead of perl. [Geoffrey Young]
|
|
1.16 Fri Oct 28 17:34:20 CDT 2005
[ENHANCEMENTS]
* Sped up Mech significantly (~20% in some cases). Images and
links are extracted from the HTML, and objects are created,
only when they're actually needed. This will be a speedup for
pages where you're only following links, or vice versa.
[THINGS THAT MAY BREAK YOUR CODE]
* If you've been relying on the $mech->{images} and $mech->{links}
fields being populated so that you can bypass the $mech->images()
and $mech->links() accessors, your code will break. That's OK,
because you should have been using the accessors all along.
1.14 Tue Aug 30 17:17:40 CDT 2005
[DOCUMENTATION]
* Added lots of new FAQs. Thanks to Peter Stevens.
[INTERNALS]
* Now requires Test::LongString. That's not too odious.
[FIXES]
* Tests now pass with the shuffling around that Google did.
1.13_01 Tue Apr 12 14:11:18 CDT 2005
[ENHANCEMENTS]
* Now dies if you call submit_form() with a non-existsing
form_number or form_name. Before, it would just warn.
[DOCUMENTATION]
* Added an example of using credentials() in the cookbook.
|
|
2005-10-24 Gisle Aas
Release 3.46
Don't try to treat an literal as space.
This breaks Unicode parsing.
https://rt.cpan.org/Ticket/Display.html?id=15068
The unbroken_text option is now by default on
for HTML::TokeParser.
HTML::Entities::encode will no encode "'" by default.
Improved report/ignore_tags documentation by
Norbert Kiesel
Test suite now use Test::More, by
Norbert Kiesel
Fix HTML::Entities typo spotted by
Stefan Funke
Faster load time with XSLoader (perl-5.6 or better now required).
Fixed POD markup errors in some of the modules.
|
|
2005-11-08 Andy Lester
* Release 3.10 -- Another rebundling, with a new maintainer.
|
|
pointed out by Zafer Aydogan in private e-mail
|
|
http://secunia.com/advisories/16907/
http://secunia.com/advisories/17437/
as well as multiple stability fixes.
|
|
This is done via an option group, default is CGI. Note that the
FastCGI interpreter can still be used for normal CGI, but there
might be security issues involved in doing so.
|
|
|
|
This module provides you with an object-oriented (and subclassable) way
of outputting HTML. Basically, you open up an "HTML stream" on an
existing filehandle, and then do all of your output to the HTML stream
(you can intermix HTML-stream-output and ordinary-print-output, if you
like).
|
|
- Add more ad patterns.
- Add WEBBUGHTML zap class.
Note: adds the new STUBURL_WEBBUGHTML variable; users should update to
the latest adzap.conf as shown in the install message.
|
|
|
|
* New styles.
* Supports several new file formats.
* Tools can now be executed from the command line. Use the -runTool switch.
* You can now upload albums from the command line. Use the -uploadAll or
-smartUpload switches.
* Bug fixes.
|
|
anyone at this point. (Mentioned on tech-pkg with no objections.)
|
|
|
|
It is more consistent with the tex.buildlink3.mk name. Also, if a package
really needs latex, it just has to set TEX_ACCEPTED to latex distributions
altough today, all TEX_ACCEPTED possibilities are latex distributions
|
|
|
|
pacakges.
Bump PKGREVISION.
|
|
(endless loop):
http://bugs.php.net/bug.php?id=35067
Pull in a patch from the php CVS repository to fix this, as suggested a
squirrelmail mailing list:
http://cvs.php.net/diff.php/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.3&r2=1.543.2.51.2.4&ty=u
OK'd by Jaromir Dolecek, tested on apache-1 and apache-2 servers.
Bump pkgrevision.
|
|
set LATEX_ACCEPTED= teTeX1 teTeX2 teTeX3 to allow whatever latex distribution
|
|
|
|
warnings from "make show-depends-dirs"
|
|
* added FD_CLOEXEC to fds which are kept open for a longer time
* added smaller, moving mmaped windows to network_writev
* added madvise() to instruct the kernel the do proper read-ahead in
network_writev
* added support for %I in mod_accesslog
* added better compat to Apache for ?auto in mod_status
* added support for userdirs without a entry in /etc/passwd in
mod_userdir
* added startup-time selectable network-backend
* added location of upload-files to config as array
* added webdav.log-xml for logging xml-content in mod_webdav
* added Cache-Control: max-age to mod_expire
* workaround missing client-bug by assuming we received a close-notify
on non-keep-alive requests in SSL request
* disabled kerberos5 support by default to fix compilation on RHEL
* fixed order of library checks to fix compilation on Solaris 9
* fixed open file-descriptors on read-error
* fixed crash if /var/tmp is not writable
|
|
|
|
|
|
maintained by Siegmund Fuehringer.
Nevow is a next-generation web application templating system, based on
the ideas developed in the Twisted Woven package. Its main focus is
on separating the HTML template from both the business logic and the
display logic, while allowing the programmer to write pure Python code
as much as possible. It separates your code into 'data' and 'render'
functions, a simplified implementation of traditional MVC. It has
various parts which can be used individually or as a whole, integrated
web solution.
|
|
so that configure won't try to run the (possibly not installed) pkg-config.
|
|
present __INTERIX block only).
|
|
or py-psycopg to satisfy the database dependency, in addition to
sqlite. Install man pages to PKGMANDIR. Closes PR 31984.
Upstream changelog:
Trac 0.9 (Oct 31, 2005)
http://svn.edgewall.com/repos/trac/tags/trac-0.9
* Support for a global trac.ini configuration file.
* Changed logic for enabling plugins/components.
* Improved support for handling repository subsets.
* Fixes problems with Trac links when using multiple environments in the
same Python interpreter.
* Improvements to email notification layout and encoding.
* Fixes for database locking with SQLite, in particular in a multi-threaded
environment.
* PostgreSQL compatibility fixes.
* Fixed bugs: #804, #861, #927, #1044, #1051, #1123, #1153, #1169,
#1239, #1344, #1463, #1562, #1881, #1886, #1895, #1909, #1921, #1930,
#1983, #1988, #2019, #2051, #2061, #2229, #2106, #2107, #2116, #2120,
#2124, #2129, #2135, #2136, #2138, #2140, #2144, #2164, #2166, #2170,
#2172, #2191, #2192, #2196, #2201, #2202, #2203, #2208, #2215, #2218,
#2223, #2230, #2232, #2239, #2240, #2241, #2243, #2251,
Trac 0.9-beta2 (Sept 25, 2005)
http://svn.edgewall.com/repos/trac/tags/trac-0.9b2
* Support for setuptools 0.6.
* Allow insertion of a custom HTML snippet above the new ticket form
to explain site-specific policies and/or guidelines.
* Much improved Bugzilla import script.
* Fixed a bug where deleting a wiki page version would sometimes delete
the entire page.
* Fixes for the rendering of diffs and patches.
* Fixes for the Subversion authz support.
* Fixed bugs: #2008, #2032, #2034, #1801, #1893, #1040, #2040,
#1036, #1944, #1081, #1863, #2052, #2066, #2016, #2090, #1985,
#2012, #2089, #2079, #1999, #2029, #2079, #1960, #2080, #2021,
#2042, #2088, #1345, #2011, #2100, #2103, #2113, #2116, #2109
Trac 0.9-beta1 (Sept 5, 2005)
http://svn.edgewall.com/repos/trac/tags/trac-0.9b1
Trac 0.9 contains a great number of new features, improvements and
bug fixes. The following list contains only a few highlights:
* License changed from GPL to modified BSD (See the file COPYING).
* Improved modularity and extendibility (plugin support).
* Support for both pysqlite 1.x and pysqlite 2.x.
* Postgresql database support (with psycopg or pyPgSQL).
* Repository subsets. Multiple Trac environments can share a single
repository.
* Version control abstraction layer making it possible to support
other version control systems besides subversion in the future.
* FastCGI frontend support.
* Python version >= 2.3 is now required.
The complete list of closed tickets can be found here:
http://projects.edgewall.com/trac/query?status=closed&milestone=0.9
|
|
|
|
|
|
"A vulnerability was found in W3C Libwww, which potentially can be exploited
by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to a boundary error in the
"HTBoundary_put_block()" function when processing multipart MIME data. This
may be exploited to cause an illegal memory access past the end of the input
buffer via specially crafted multipart MIME data.
Successful exploitation can potentially cause an application that uses Libwww
to crash."
http://secunia.com/advisories/17119/
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159597
Bump PKGREVISION.
Patch from RedHat.
|
|
that don't exist anymore. Added the others to MASTER_SITE_XEMACS in
bsd.sites.mk.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
packages only.
|
|
and now bundled in ruby18-base pacakges.
|
|
*0.9.1* (October 19th, 2005)
* Upgraded to Action Pack 1.10.1 and Active Record 1.12.1
*0.9.0* (October 16th, 2005)
* Fix invalid XML request generation bug in test_invoke [Ken Barker]
* Add XML-RPC 'system.multicall' support #1941 [jbonnar]
* Fix duplicate XSD entries for custom types shared across delegated/layered services #1729 [Tyler Kovacs]
* Allow multiple invocations in the same test method #1720 [dkhawk]
* Added ActionWebService::API::Base.soap_client and ActionWebService::API::Base.xmlrpc_client helper methods to create the internal clients for an API, useful for testing from ./script/console
* ActionWebService now always returns UTF-8 responses.
|
|
Changes from 1.9.1 are many, please see ${RUBY_DOCDIR}/actionpack/CHANGELOG.
pkgsrc change is installing example files, too.
|