Age | Commit message (Collapse) | Author | Files | Lines |
|
- Remove patch-as and patch-ah as they are now outdated and included in the src
- ok'ed snj@, wiz@
- Thanks to epg@ for final check
This version of Apache is principally a bug fix release. Of particular note
is that 2.0.51 addresses five security vulnerabilities:
An input validation issue in IPv6 literal address parsing which can result
in a negative length parameter being passed to memcpy.
[CAN-2004-0786]
A buffer overflow in configuration file parsing could allow a local user to
gain the privileges of a httpd child if the server can be forced to parse a
carefully crafted .htaccess file.
[CAN-2004-0747]
A segfault in mod_ssl which can be triggered by a malicious remote server,
if proxying to SSL servers has been configured.
[CAN-2004-0751]
A potential infinite loop in mod_ssl which could be triggered given
particular timing of a connection abort.
[CAN-2004-0748]
A segfault in mod_dav_fs which can be remotely triggered by an indirect lock
refresh request.
[CAN-2004-0809]
For further details, see http://www.apache.org/dist/httpd/Announcement2.html
and http://apache.rmplc.co.uk/httpd/CHANGES_2.0.
|
|
|
|
See commit log for www/firefox/Makefile-firefox.common for more details.
Several security holes have been fixed. See the page below for details.
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
|
|
when MOZ_GTK2 is set.
Add a way to specify a different mozilla.sh script.
|
|
from Release Notes:
---
Firefox is a fast, full-featured browser that makes browsing more
efficient than ever before. More information about Firefox is
available.
Firefox Preview Release (henceforth refered to as PR) is a Technology
Preview. While this software works well enough to be relied upon as
your primary browser in most cases, we make no guarantees of its
performance or stability. It is a pre-release product and should not
be relied upon for mission-critical tasks. See the License Agreement
for more information.
These release notes cover what's new, download and installation
instructions, known issues and frequently asked questions for the
Firefox PR release. Please read these notes and the bug filing
instructions before reporting any bugs to Bugzilla.
We want to hear your feedback about Firefox. Please join us in the
Firefox forums, hosted by MozillaZine.
What's New
Here's what's new in this release of Firefox:
* Live Bookmarks
You can now subscribe to and read RSS feeds in your
Bookmarks. When you visit a page that advertises a RSS feed by using a
<link> tag, a RSS icon will appear in the status bar. Click it to view
a list of feeds the page is offering. Click one to subscribe - this
adds a Bookmark Folder that contains all the recent posts from the
feed.
* Improved Find
Find is easier and more powerful now with our new Find
toolbar. The Find toolbar (which shows at the bottom of the browser
window) automatically highlights text in the page as you type and has
a useful highlight feature.
* Managing Annoyances and Protecting Security
You can now open blocked popups, and the Extension install
system now blocks all attempts to install software from sites other
than update.mozilla.org. Users can add other sites to a list that
allows them to offer software, but software is never automatically
installed. In addition to these steps, several other measures have
been taken to prevent phishing attacks and to highlight when a page is
being viewed over a secure connection.
* Better Bookmarks
Numerous improvements to bookmarks including more reliable
presentation of Site icons, and a split pane view in the Bookmarks
window.
* Strong Encryption For Passwords Available
Passwords saved with the Password Manager can now be more easily
encrypted with strong encryption by creating a "Master Password". If
you create a Master Password, you are prompted once per session to
enter the Master Password so that Password Manager can automatically
fill in site logins. A useful feature for people who share computers
with others and want improved security.
* Improved Compatibility for IE users
Undetectable document.all support for site compatibility and
improved compatibility for keyboard accelerators further smooth the
transition for IE users
* Better System Integration for GNOME users
You can now configure Firefox as your Default Browser on GNOME,
and Firefox will adhere to your GNOME settings for edit field key
bindings, etc.
* And a horde of other bug fixes...
See The Burning Edge's Bigger Picture for more details.
-----
Several security holes have been fixed. See the page bellow for
detail.
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
|
|
Mozilla 1.7.3 is a security update to Mozilla 1.7 that fixes a several
security vulnerabilities.
#93 "Send page" heap overrun (258005)
#92 javascript clipboard access (257523)
#91 Privilege request confusion (253942)
#90 Buffer overflow when displaying VCard (257314)
#89 BMP integer overflow (255067)
#88 javascript: link dragging (250862)
#87 non-ascii hostname heap overrun (256316)
#86 Malicious POP3 server III (245066, 226669)
#85 Wrong file permissions after installing on Linux (231083, 235781)
#84 Wrong file permissions in linux archive (254303)
See the page bellow for detail
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
|
|
Its old, it doesn't compile on recent systems, no one objected on tech-pkg,
its gone.
|
|
|
|
to avoid type confliction. Hopefully fix build problems reported
by buld builds.
|
|
Mozilla 1.7.3 is a security update to Mozilla 1.7 that fixes a several
security vulnerabilities.
#93 "Send page" heap overrun (258005)
#92 javascript clipboard access (257523)
#91 Privilege request confusion (253942)
#90 Buffer overflow when displaying VCard (257314)
#89 BMP integer overflow (255067)
#88 javascript: link dragging (250862)
#87 non-ascii hostname heap overrun (256316)
#86 Malicious POP3 server III (245066, 226669)
#85 Wrong file permissions after installing on Linux (231083, 235781)
#84 Wrong file permissions in linux archive (254303)
See the page bellow for detail
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
|
|
tree for later use by the package's Makefile.
|
|
this should just be build dependency, not a full dependency. Bump the
PKGREVISION.
|
|
Apply patch from PR 25488 to enable choosing the log facility for thttpd.
Both based on patches from Michael Santos.
Bump PKGREVISION to 1.
|
|
|
|
|
|
installation issues still around
|
|
|
|
|
|
Pkgsrc guru's might want to review this package to make the installation a bit
more intelligent
|
|
|
|
work OK with Mozilla 1.7.2 on NetBSD/alpha.
|
|
seen in kristerw@'s bulk build.
Bump PKGREVISION.
|
|
Apache CVS tree.
CAN-2004-0748
http://issues.apache.org/bugzilla/show_bug.cgi?id=29964
http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/ssl/ssl_engine_io.c?r1=1.124&r2=1.125
CAN-2004-0751
http://issues.apache.org/bugzilla/show_bug.cgi?id=30134
http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/ssl/ssl_engine_io.c?r1=1.125&r2=1.126
|
|
will ship with pkgsrc-2004Q3).
|
|
Update to newer docs download file (updated docs
appear to be the man page, tidy.css, and quickref.html).
Also bump PKGREVISION.
This will close PR pkg/26867. Thank you, Mark E. Perkins.
|
|
firefox-gtk2.
|
|
otherwise the default is better (and the variable doesn't need to be set).
Remove a few cases where it was set unnecessarily.
|
|
|
|
* 2004-09-01 13:59 (Minor)
Squid does not recognise Content-Disposition header
* 2004-09-01 13:09 (Cosmetic)
cachemge config dumps mixed up Range and Request-Range headers
* 2004-09-01 12:25 (Minor)
acl time fails to parse multiple time specifications correctly
* 2004-08-28 22:46 (Minor)
Segfault in CvtBin / authenticateDigestHandleReply
* 2004-08-25 21:11 (Minor)
assertion failed: comm.c:430: "n_ufs_dirs <= Config.cacheSwap.n_configured"
* 2004-08-25 20:30 (Minor)
Temporary NTLM memory leak with challenge reuse enabled
* 2004-08-25 20:30 (Medium)
Memory leaks when using NTLM authentication without challenge reuse
Bump PKGREVISION.
|
|
|
|
==============
Epiphany 1.2.8
==============
Code changes
* Adapt to Mozilla API changes (Christian)
* Confirm before overwriting a file [#143501]
Bug fixes
* Fix compilation of nautilus view (Christian) [#148995]
* Fix some memory leaks (Jean-François Rameau)
* Really translate the program name (Christian) [#148948]
* Fix restoring the history window on resume (Christian)
* Fix new tab position (Christian)
* Fix a crash in content handler (Christian) [#149550]
* Fix context menu on links with namespaced tag (Mikael Brockman) [#150208]
==============
Epiphany 1.2.7
==============
Code changes
* Adapt to mozilla API changes (Christian)
* Use nsIDOMWindow2 to get the root event target on
mozilla >= 1.7rc3 (Christian)
Bug fixes
* Work around mozilla bug #246392 which causes reloads of framed pages to
go back to original URI (backported from HEAD) (Christian) [#115800]
* Escape markup in string in the duplicate bookmarks dialogue
and topics menu (Christian)
* Escape markup in strings in the NSS dialogues (Crispin Flowerday)
* Work aroung mozilla bug #246392 which causes reload of framed pages to go
back to initial frameset (Christian, Crispin Flowerday) [#115800]
* Don't show redirected and non-toplevel pages in history (Christian) [#142143]
* Allow importing of Epiphany bookmarks format too (Christian) [#144699]
* Fix crash with corrupted toolbars file (Christian) [#144698]
* Fix prefs persistence with non-existent or bogus initial values (Christian)
* Unescape mailto: addresses (Christian) [#144462]
* Fix filename encoding for print-to-file (Christian)
* Depend on libgnomeui >= 2.6.0 (Christian) [#145776]
* Make print and print setup go trough nsIPrintingPromptService (Christian,
backported from HEAD)
* Fix print-to-file filechooser modality (Christian) [#147628]
* Fix mem leaks in gtk NSS dialogues (Christian, ported from galeon)
* Gracefully handle failure to create downloads directory (Marco) [#146902]
* Fix single observer ownership and reference counting (Christian) [#146873,
#146461]
* Fix downloader crash on shutdown (Marco) [#141928]
* Fix build with old mozilla versions (1.4.x, 1.5) (Christian)
* Use nsACString instead of nsCString in a few places in EphyWrapper (Christian)
* Fix crash on screen size change after using fullscreen (Christian)
New translations
* he
Updated translations
* bg, ca, vi
|
|
Drivel 1.2.0 (The "Hero of Canton" release)
===========================================
* Improvements:
- Added a user manual (Todd).
* Fixes:
- Fixed the oft-reported "automaticall" typo (Todd).
- Synced eggtrayicon.* and recent-files/* with libegg to get the latest
improvements and bug-fixes (Todd).
* Translations:
- Updated Canadian English translation (Adam Weinberger).
- Updated Simplified Chinese translation (Funda Wang).
- Updated Portuguese translation (Duarte Loreto).
- Updated Swedish translation (Christian Rose).
- Updated Czech translation (Miloslav Trmac).
- Updated Dutch translation (Elros Cyriatan).
- Updated Spanish translation (Francisco Javier F. Serrador).
- Updated Albanian translation (Laurent Dhima).
- Updated Brazilian Portuguese translation (Estêvão Samuel Procópio).
Drivel 1.1.2 (The "Betas make bubbles!" release)
================================================
* Improvements:
- Replace the RSA's reference MD5 implementation with a free one.
- Add the GNOME Spinner to the network progress dialog.
- Make the standard error dialog conform to the HIG.
- Port the Network Progress and Insert Image dialogs to Glade.
- Gave the Insert Image and Insert Link dialogs a make-over and some
HIG-lovin'.
- Added a Cancel button to the new Network Progress dialog.
- Use unique names for user pictures, prevents re-downloading the
same image again and again.
- Add support for back-dating journal entries.
- Add tooltips for post options.
* Fixes:
- Prevent the network dialog from "blinking" on short transactions.
- Fix a crash that occured when the network dialog was closed manually.
- Double-clicking an entry in the history dialog opens it for editing.
- Prevent the user from selecting a row in the history list when it is
empty, fixes a crash.
- Fix a few strings to bring them into HIG 2.0 compliance.
* Translations:
- Updated Brazilian Portuguese translation (Raphael Higino and
Estêvão Samuel Procópio).
- Updated Czech translation (Miloslav Trmac).
- Updated Canadian English translation (Adam Weinberger).
- Updated British English translation (David Lodge).
- Updated Spanish translation (Francisco Javier F. Serrador).
Drivel 1.1.1 (The "I'm too hung-over to be creative" release)
=============================================================
* Improvements:
- RhythmBox support for the Music entry (Davyd Madeley).
- New and improved network layer which doesn't suck.
- Abstracted blog API, should make it easy to support multiple blog
systems in the future.
- Support for EggRecent.
- Added a "Drivel journal draft" mimetype.
- Redesigned the Friends dialog.
* Fixes:
- Plugged some memory leaks.
- Use the correct signal (enter_notify) for triggering the query_music
function.
- Lots of HIG-related spacing fixes.
* Translations:
- Updated Spanish translation (Francisco Javier F. Serrador).
- Updated Brazilian Portuguese translation (Raphael Higino).
- Updated Norwegian translation (Kjartan Maraas).
- Updated Albanian translation (Laurent Dhima).
- Updated Czech translation (Miloslav Trmac).
- Updated British English translation (David Lodge).
Drivel 1.1.0 (The "Happy birthday, Stephie!" release)
=====================================================
* Improvements:
- HTML syntax highlighting (Davyd Madeley and Grahame Bowland).
- Optional in-line spell checking support via GtkSpell.
- Undo/Redo support (Davyd Madeley).
- Support the new challenge/response LiveJournal authentication method.
- Per-account autosaves.
- Use LogJam's XML file format when saving/loading drafts (Davyd Madeley).
- The Insert Link dialog now replaces selected text with a hyper-linked
version of the text.
- Saves the filename of drafts so that the user isn't prompted each time she
presses "Save Draft" and add a "Save Draft as..." menu command.
- Autocomplete support for the Mood control (Davyd Madeley).
- Lots of HIG work on the menus, dialogs, and alerts.
* Fixes:
- Keybinding fixes.
- Resolve a couple of bugs in the History dialog (still requires GTK+ 2.4.4
or higher to work correctly) (Davyd Madeley).
- Correct the lj-lq tag in the poll creator (Grahame Bowland).
- Don't duplicate the protocol in the Insert Link dialog (gnome@nash.nu).
- Fixed the autosave feature.
- Resolved a network threading issue that prevented Drivel from working on
NetBSD, and possibly the other BSD variants as well.
- Protect proxy variables with mutex locks, should resolve some more
BSD-related threading issues.
- Use libcurl's unescape method rather than our own, fixes a NetBSD
character conversion problem.
- Fix C99-ism which was preventing successfull compilation on
GCC-2.95 (Julio M. Merino Vidal).
* Translations:
- Added Albanian translation (Laurent Dhima).
- Updated Czech translation (Miloslav Trmac).
- Updated Brazilian Portuguese translation (Raphael Higino).
- Updated British English translation (David Lodge).
|
|
|
|
I could not find any recent release notes or change log other than "People
continue to report examples where Tidy does not catch some ill-formed HTML
or, worse, generates ill-formed HTML. These cases have been significantly
reduced." (I didn't compare code with old release either.)
Patch-ab updated (same line patched).
|
|
|
|
patch provided by Ove Soerensen in PR 26792
changes compared to 2.7f:
wwwoffle 2.8c contains various fixes and new features. For example the
removal of some memory-leaks, fixes for race-conditions and it's noew
CSS aware and has support for chunked encoding.
|
|
http://svn.edgewall.com/repos/trac/tags/trac-0.7.1
Thanks, Holger Weiss <holger@jhweiss.de> (pkg/26735).
* Bugfixes for 0.7
* Fixes security hole in auth.py
* Experimental support for mod_python
* Improved MIME-types
* Fixed bugs: #93, #202, #307, #312, #342, #345, #350, #353, #355, #391,
#393, #401, #404, #406, #415, #417, #419, #420, #421, #422, #424,
#425, #428, #429, #432, #435, #437, #441, #442, #448, #451, #452,
#456, #457, #461, #463, #466, #467, #470, #, #497, #498, #502,
#504
|
|
changes;
Except from the usual bug-fixes and improvements, some new features snuck
in. One nifty feature is the save and open file dialogs remembering the
last directory opened. Also, a "start_page" option in the preferences so
that you may override the splash screen.
|
|
which are the full option names used to set rpath directives for the
linker and the compiler, respectively. In places were we are invoking
the linker, use "${LINKER_RPATH_FLAG} <path>", where the space is
inserted in case the flag is a word, e.g. -rpath. The default values
of *_RPATH_FLAG are set by the compiler/*.mk files, depending on the
compiler that you use. They may be overridden on a ${OPSYS}-specific
basis by setting _OPSYS_LINKER_RPATH_FLAG and _OPSYS_COMPILER_RPATH_FLAG,
respectively. Garbage-collect _OPSYS_RPATH_NAME and _COMPILER_LD_FLAG.
|
|
on ppc architectures
|
|
|
|
It has (probably long since) been replaced by configuration checks
in firefox's configure script. The resulting source still compiles
and works on netbsd-1-5 / i386.
|
|
longer includes bozohttpd.o...
|
|
into the bsd.options.mk framework. Instead of appending to
${PKG_OPTIONS_VAR}, it appends to PKG_DEFAULT_OPTIONS. This causes
the default options to be the union of PKG_DEFAULT_OPTIONS and any
old USE_* and FOO_USE_* settings.
This fixes PR pkg/26590.
|
|
Squid 2.5.STABLE5 to 2.5.STABLE6:
* Several "Assertion error" bugs fixed
* Several "Segmentation fault" bugs fixes
* Corrects a security issue in the old ntlm_auth NTLM helper used in transparent NTLM authentication to a NT domain without using samba.
* Processing of Vary: * and Vary on error messages corrected
* a large number of minor and cosmetic bugfixes. See the list of squid-2.5.STABLE5 patches and the ChangeLog file for details.
2.5.STABLE56 official patches:
* 2004-08-20 08:18 (Major) NTLM authentication denial of service
* 2004-08-14 21:07 (Minor) external_acl does not handle newlines
* 2004-08-09 14:03 (Minor) Supplementary group memberships not set
* 2004-08-05 20:33 (Medium) Segfaults and other strange crashes when using heap policies
* 2004-08-06 11:05 (Cosmetic) Unknown %X errorpage codes incorrectly quoted
* 2004-08-17 12:22 (Cosmetic) Grammatical corrections in squid.conf.default
* 2004-07-27 21:52 (Minor) NTLM authentication truncated
* 2004-07-17 22:43 (Minor) Memory leak in client_db
* 2004-07-17 20:11 (Cosmetic) Add delay pools information to active_requests
* 2004-07-17 19:57 (Minor) case insensitive authentication
* 2004-07-17 19:48 (Cosmetic) Warn if cache_dir ufs can not create files
* 2004-07-17 16:33 (Cosmetic) HEAD requests may return stale information
* 2004-07-17 16:33 (Minor) Partial hit results in TCP_HIT, not TCP_MISS
* 2004-07-17 16:33 (Cosmetic) request_header_max_size configuration option doesn't work correctly
* 2004-07-29 13:29 (Minor) A large number of queued DNS lookups for the same domain
* 2004-08-10 09:40 (Minor) LDAP helpers update
* 2004-07-14 16:29 (Medium) storeCreate: no valid swapdirs for this object
|
|
It has (probably long since) been replaced by configuration checks
in mozilla's configure script. The resulting source still compiles
and works on netbsd-1-5 / i386.
|
|
|
|
|
|
|
|
Changes:
* NEW IN KDE: KImageMapEditor integration Andras Mantia, Jan Schaefer
* NEW IN KDE: Integrate KLinkStatus into kdewebdev Andras Mantia,
Paulo Moura Guedes
* Quanta Plus
o Use KMDI for the MDI Andras Mantia
o Basic support for development teams in projects Andras Mantia
o Directory Templates Andras Mantia
o Complete template features Andras Mantia
o Supplemental project file data Eric Laffoon
o Multiple upload profiles Andras Mantia
o Basic CVS project integration (Commit/Update) Andras Mantia
o Support for downloading resources from a central server Andras
Mantia
o Event actions for file and project operations Andras Mantia
o Interface personalities for tasks and project team members Andras
Mantia
o PHP debugger support Linus McCabe, Thiago Silva
o Improve the file trees Jens Herden
o Basic support for any editor implementing the KTextEditor
interface Andras Mantia
o Replace accented characters on the fly Andras Mantia
* Kommander
o Enable list widget functionality Michal Rudolf
o Enable tree detail widget functionality Michal Rudolf
o Improve the editor Michal Rudolf
o Improve the text editor Michal Rudolf
o Add DCOP functions assistant Michal Rudolf
o Handle multiple dialogs packaged in single archive Michal Rudolf
o Add localization functions Michal Rudolf
o Enable free slots Michal Rudolf
o Make widgets DCOP accessable Michal Rudolf
o Add the ability to plug in widgets Marc Britton
o Add rich text blogging widget Marc Britton
o New @readSetting and @writeSetting specials for saving text Marc
Britton
o Population text - populates widgets with signals and slots Marc
Britton
* KFileReplace
o New startup/new project dialog Andras Mantia
* KLinkStatus
o Filter to display links (broken, good, timeout, etc) Paulo Moura
Guedes
o Pause and resume search. Paulo Moura Guedes
o Validate URLs with reference (#) Paulo Moura Guedes
o Edit link referrers in Quanta Paulo Moura Guedes
o Add GUI for settings. Paulo Moura Guedes
|