summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2013-08-15Revbump after updating lang/lua to 5.2.2.obache1-2/+2
2013-08-14Build fixes for NetBSD armjmcneill5-1/+91
2013-08-13Changes 1.5.2:adam3-10/+11
These releases address two cross-site scripting (XSS) vulnerabilities: one in a widget used by Django's admin interface, and one in a utility function used to validate redirects often used after login or logout. While these issues are of limited impact and may not effect all Django users, we encourage all users to upgrade as soon as possible.
2013-08-13Changes 7.32.0:adam3-8/+7
curl: allow timeouts to accept decimal values OS400: add slist and certinfo EBCDIC support OS400: new SSL backend GSKit CURLOPT_XFERINFOFUNCTION: introducing a new progress callback LIBCURL-STRUCTS: new document Bugfixes: dotdot: introducing dot file path cleanup docs: fix typo in curl_easy_getinfo manpage test1230: avoid using hard-wired port number test1396: invoke the correct test tool SIGPIPE: ignored while inside the library darwinssl: fix crash that started happening in Lion OpenSSL: check for read errors, don't assume c-ares: improve error message on failed resolve printf: make sure %x are treated unsigned formpost: better random boundaries url: restore the functionality of 'curl -u :' curl.1: fix typo in --xattr description digest: improve nonce generation configure: automake 1.14 compatibility tweak curl.1: document the --post303 option in the man page curl.1: document the --sasl-ir option in the man page setup-vms.h: sk_pop symbol tweak tool_paramhlp: try harder to catch negatives cmake: Fix for MSVC2010 project generation asyn-ares: Don't blank ares servers if none configured curl_multi_wait: set revents for extra fds Reinstate "WIN32 MemoryTracking: track wcsdup() _wcsdup() and _tcsdup() ftp_do_more: consider DO_MORE complete when server connects back curl_easy_perform: gradually increase the delay time curl: fix symbolic names for CURLUSESSL_* enum in --libcurl output curl: fix upload of a zip file in OpenVMS build: fix linking on Solaris 10 curl_formadd: CURLFORM_FILECONTENT wrongly rejected some option combos curl_formadd: fix file upload on VMS curl_easy_pause: on unpause, trigger mulit-socket handling md5 & metalink: use better build macros on Apple operating systems darwinssl: fix build error in crypto authentication under Snow Leopard curl: make --progress-bar update the line less frequently configure: don't error out on variable confusions (CFLAGS, LDFLAGS etc) mk-ca-bundle: skip more untrusted certificates formadd: wrong pointer for file name when CURLFORM_BUFFERPTR used FTP: when EPSV gets a 229 but fails to connect, retry with PASV mk-ca-bundle.1: don't install on make install VMS: lots of updates and fixes of the build procedure global dns cache: didn't work (regression) global dns cache: fix memory leak
2013-08-13Update to 1.3117wen2-6/+6
Upstream changes: 1.3117 31.07.2013 [ ENHANCEMENTS ] * GH #836: Provide more information when an engine fails to load. (Yanick Champoux, reported by Daniel Perrett) [ BUG FIXES ] * GH #794: Upload data was not kept for forwarded requests. (reported by William Wolf) * GH #898: calling halt() doesn't discard set headers anymore. (Yanick Champoux, reported by Nicolas Franck) * GH #842: embedded 'prefix' now properly localized. (Yanick Champoux, reported by Jashank Jeremy) [ DOCUMENTATION ] * GH #938: fix doc typos in Dancer::Serializer. (Fabrice Gabolde) * GH #712: add all status codes known to Dancer to Dancer::HTTP. (Yanick Champoux, reported by Brian J Miller) * Add warning that 'forward' doesn't preserver the session. (Alberto Sim玫es) * GH #941: minor correction to code snippets in documentation. (Grzegorz Ro偶niecki) * GH #929: add warning on the use of Corona as underlying web server. (issue reported by berekuk) * GH #943: remove mention to 'Dancer::Plugin::Validation', clean 'dancer -a' sample output. (Grzegorz Ro偶niecki)
2013-08-13Switch to use libnotify07.obache3-5/+29
Bump PKGREVISION.
2013-08-12Update to 4.24wen2-6/+6
Upstream changes: 4.24 2013-08-08 - Added ancestors method to Mojo::DOM. - Fixed bug where Mojo::IOLoop::Stream timeout was not always available. 4.23 2013-08-01 - Added redirects method to Mojo::Transaction::HTTP. 4.22 2013-07-30 - Improved Mojo::Server to use FindBin more defensively. - Fixed empty attribute bug in Mojo::DOM::CSS. - Fixed partial route handling in routes command. 4.21 2013-07-29 - Added strip method to Mojo::DOM. - Fixed return values of remove and replace methods in Mojo::DOM. 4.20 2013-07-28 - Deprecated Mojo::DOM::attrs in favor of Mojo::DOM::attr. - Improved Mojo::UserAgent connection management to be fork-safe. 4.19 2013-07-21 - Improved invalid tag handling in Mojo::DOM::HTML. 4.18 2013-07-08 - Added --mode option to Morbo. - Fixed bug in Mojo::UserAgent where not all 2xx responses would be accepted for CONNECT requests.
2013-08-11Update to 2.20ryoon53-822/+1030
* Merge SunOS patches from www/firefox. Changelog: SeaMonkey-specific changes The Content Security Policy (CSP) 1.0 parser has been enabled. The Mixed Content Blocker has been enabled, blocking insecure active content loads on HTTPS pages. New mail alert information can be customized now (Preferences/Mail & Newsgroups/Notifications). A confirmation prompt has been introduced to protect against accidental permanent data loss when force-deleting messages using Shift+Del. MailNews Save As Template supports multiple selections now. The size on disk is now shown for newsgroup folders. See the changes page for a more complete overview. Mozilla platform changes Added support for scrollbar style in Mac OS X 10.7 and newer. Enabled mixed content blocking to protects users from man-in-the-middle attacks and eavesdroppers on HTTPS pages (learn more). Improved about:memory's functional UI. Enabled DXVA2 on Windows Vista+ to accelerate H.264 video decoding. Simplified interface for notifications of plugin installation. Enabled users to switch the search provider across the entire browser. CSP policies using the standard syntax and semantics will now be enforced. Implemented the HTML5 <input type="range"> form control. Added unprefixed requestAnimationFrame. Dropped blink effect from CSS rule text-decoration:blink and completely removed <blink> element. Fixed several stability issues. Fixed in SeaMonkey 2.20 MFSA 2013-75 Local Java applets may read contents of local file system MFSA 2013-74 Firefox full and stub installer DLL hijacking MFSA 2013-73 Same-origin bypass with web workers and XMLHttpRequest MFSA 2013-72 Wrong principal used for validating URI for some Javascript components MFSA 2013-71 Further Privilege escalation through Mozilla Updater MFSA 2013-70 Bypass of XrayWrappers using XBL Scopes MFSA 2013-69 CRMF requests allow for code execution and XSS attacks MFSA 2013-68 Document URI misrepresentation and masquerading MFSA 2013-67 Crash during WAV audio file decoding MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater MFSA 2013-65 Buffer underflow when generating CRMF requests MFSA 2013-64 Use after free mutating DOM during SetBody MFSA 2013-63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8)
2013-08-10Fix NSS requirement pattern. Fix build.ryoon1-2/+2
* firefox-23.0 and seamonkey-2.20 require 3.15 or later of devel/nss. The patch is provided by rjs@. Thank you.
2013-08-09mod_python was moved to the Apache Attic in June 2010.prlw11-2/+2
2013-08-09Update subversion to 1.8.1.obache1-2/+1
Version 1.8.1 (23 July 2013, from /branches/1.8.x) http://svn.apache.org/repos/asf/subversion/tags/1.8.1 User-visible changes: - Client- and server-side bugfixes: * translation updates for German and Simplified Chinese * improve sqlite error message output (r1497804) * support platforms lacking mmap (r1498136) * allow configuration files to start with UTF-8 BOM (r1499100 et al) * don't fail on UTF-8 data when encoding conversion not available (r1503009) * improve error messages when encoding conversion fails (r1503010) - Client-side bugfixes: * merge: rename 'automatic merge' to 'complete merge' (r1491432) * mergeinfo: reduce network usage for '--show-revs' (r1492005) * ra_serf: improve http status handling (r1495104) * merge: avoid unneeded ra session (r1493475) * merge: reduce network usage (r1478987) * merge: remove duplicated ancestry check (r1493424, r1495597) * ra_serf: fix 'Accept-Encoding' header for IIS interoperability (r1497551) * svn status: improve documentation for lock columns (r1497318, r1497319) * ra_serf: fix support for 'get-file-revs-reversed' capability (r1498456) * log: reduce network usage on repository roots (r1496957) * diff: avoid temporary files when calling external diff (issue #4382) * upgrade: fix notification of 1.7.x working copies (r1493703, r1494171) * fix crash during tree conflict resolution (issue #4388) * interactive file merge: add two additional choices (r1491816, r1494089) * diff: use local style paths in error messages (r1500680) * resolve: improve the interactive conflict resolution menu (r1491739 et al) * switch: use local style path in error message (r1500074) * ra_serf: improve error output when receiving invalid XML (r1498851) * svn cleanup: explain what the command does in help output (r1497310) * blame: error on -r M:N where M>N unless server supports (r1498449 et al) * gpg-agent auth: don't try to use agent when unavailable (r1500762 et al) * gpg-agent auth: don't require GPG_TTY or TERM env vars (r1500801) * update: fix some tree conflicts not triggering resolver (r1491868 et al) * commit: remove stale entries from wc lock table when deleting (r1491756) * merge: fix --record-only erroring out on renamed path (issue #4387) * svnmucc: fix 'make install' symlink to work when DESTDIR is set (r1501072) * wc: fix crash when target is symlink to a working copy root (issue #4383) * ra_serf: change "internal malfunction" errors to normal errors (r1502577) * ra_serf: handle proxies not supporting chunked requests (r1502401 et al) - Server-side bugfixes: * fsfs: resolve endless loop problem when repos/db/uuid has \r\n (r1492145) * fsfs: remove revision property buffer limit (r1491770) * mod_dav_svn: better status codes for anonymous user errors (r1495918) * mod_dav_svn: better status codes for commit failures (r1490684) * fix performance regression in 'svn log' against root (r1494913) * allow deleting non-user-visible 'svn:' properties (r1495432) * fsfs: fix crash on strict-alignment architectures (r1495806, r1495985) * svnadmin upgrade: fix error of non-sharded fsfs repositories (r1494287) * svnadmin create: deny '--fs-type=fsfs --compatible-version=1.0' (r1494223) * svnadmin upgrade: fix data loss when cancelling in last stage (r1494298) * mod_dav_svn: fix incorrect path canonicalization (r1503528) - Other tool improvements and bugfixes: * fsfs-stats (tool): resolve segfault when passing invalid path (r1492164) * svn-bench: fix help output (r1493951) * svnpubsub: add version header to server (r1491707) Developer-visible changes - General: * ra_serf: fix some test runner issues on Windows (r1490679) * fix two issues in reverse svn_ra_get_file_revs() (r1492148, et al) * handle --compatible-version=1.8 in the C tests (r1494342) * improve clang compatibility (r1480080 et al) * use proper cancel baton when handling conflicts (r1495850) * fs: BDB: provide proper error value from BDB (r1495428) * ra_serf: tweak connection failed error value (r1496132, et al) * svn_client_log5: resolve possible segfault (r1496110) * fix metadata_only move to work when target is unversioned node (r1498564) * ra_svn: fix segfault with a NULL commit message (r1498550, r1499727) * Ev2: correctly initialize node kind in shims' change table (r1501058) * Ev2: fix copyfrom URL construction in shims (r1500226) * fs: improve test against newlines in filenames (r1498483 et al) * make building with BDB 6 an opt-in feature (r1499438) * sqlite: allow placing amalgamation in build dir (r1499034, r1500175) * ra_svn: make sessions usable after log callback early out (r1503554) - Bindings: * swig-rb: fix tests with out-of-tree-builds (r1492295) * javahl: fix encoding of error messages produced by javahl (r1492264) * swig-pl: silence compiler warnings (r1487094) * swig-pl: improve documentation (r1488693, r1490721, r1500904)
2013-08-09Changes 20110915:adam2-41/+25
Bug fixes.
2013-08-09Changes 2.4.2:adam3-51/+10
Mostly a bugfix release. The full change log: - Apphook edit mode bugfix - Added option to render_placeholder tag to set language - Huge permission cache invalidation speed up - Doc improvements - css cleanup in PlaceholderAdmin - Log change of page status done via AJAX - Use --noinput convention for delete_orphaned_plugins command - added Testing docs - fixed more issues with only one language - locales updated
2013-08-09Changes 1.7.1:adam2-6/+6
* Bugfixes when using a custom User model. * Minor bugfixes.
2013-08-09Changes 0.6.0:adam3-9/+16
mptt now requires Python 2.6+, and supports Python 3.2+
2013-08-09Changes 0.8.1:adam3-7/+10
This is the first bugfix release in the 0.8 series, to address a critical regression on older versions of Django.
2013-08-08Update py-flask-script to 0.6.0.kleink3-7/+13
Version 0.6.0 ------------- Released on August 7, 2013. - Drop support for Python 2.5 - Support Python 2.6/2.7 and >= 3.3 using same source code. Import necessary compatibility code from flask._compat module of current Flask repo code. - Use proper argparse subparsers - Tab completion using `argcomplete` - Remove question marks from automatically being appended to prompt_bool and prompt_choices - FIXED: ipython with disabled bpython - FIXED: debug parameter no longer passed in from flask_script
2013-08-08Update to 17.0.8ryoon2-258/+258
* Sync with firefox17-17.0.8.
2013-08-08Update to 23.0ryoon3-601/+684
* Sync with firefox-23.0.
2013-08-08Update to newest version of Wordpress 3.6.morr3-94/+126
ChangeLog: New Default Theme - Twenty Thirteen * Focus on blogging * Single column layout with Sidebar / Widgets in the footer * Latest Theme Features support, particularly Post Formats and Semantic Markup * Font-based icons (Genericons) Admin Enhancements * UI improvements on Navigation Menus Screen * Revisions revised to be more dynamic and scalable * Autosave and Post Locking * Preview Audio and Video on Media Edit Screen * In-line login following expired sessions For Developers * External Libraries have been updated. * New audio/video APIs give developers access to powerful media metadata, like ID3 tags. * Filters for revisions, allowing you to set the number of revisions ad hoc instead of only via a define. * Semantic Markup allows themes to choose improved HTML5 markup for search forms, comment forms, and comment lists. * Search content for shortcodes with has_shortcode() and adjust shortcode attributes with a new filter. More info on http://codex.wordpress.org/Version_3.6
2013-08-07Update to 23.0ryoon28-349/+542
* Install SDK to firefox-sdk directory. * Split multiple CONFIGURE_ARS's arguments. * Enable libmozjs.so build. Changelog: NEW Mixed content blocking enabled to protects users from man-in-the-middle attacks and eavesdroppers on HTTPS pages (learn more) NEW Options panel created for Web Developer Toolbox CHANGED "Enable JavaScript" preference checkbox has been removed and user-set values will be reset to the default CHANGED Updated Firefox Logo CHANGED Improved about:memory's functional UI CHANGED Simplified interface for notifications of plugin installation CHANGED Enabled DXVA2 on Windows Vista+ to accelerate H.264 video decoding CHANGED Users can now switch to a new search provider across the entire browser CHANGED CSP policies using the standard syntax and semantics will now be enforced CHANGED <input type='file'> rendering improvements (see bug 838675) CHANGED Replace fixed-ratio audio resampler in webrtc.org capture code with Speex resampler and eliminate pseudo-44000Hz rate CHANGED "Load images automatically" and Always show the tab bar" checkboxes removed from preferences and reset to defaults DEVELOPER HTML5 <input type="range"> form control implemented DEVELOPER Write more accessible pages on touch interfaces with new ARIA role for key buttons DEVELOPER Social share functionality DEVELOPER Added unprefixed requestAnimationFrame DEVELOPER Implemented a global browser console DEVELOPER Dropped blink effect from text-decoration: blink; and completely removed <blink> element DEVELOPER New feature in toolbox: Network Monitor FIXED Various security fixes n Firefox 23 MFSA 2013-75 Local Java applets may read contents of local file system MFSA 2013-74 Firefox full and stub installer DLL hijacking MFSA 2013-73 Same-origin bypass with web workers and XMLHttpRequest MFSA 2013-72 Wrong principal used for validating URI for some Javascript components MFSA 2013-71 Further Privilege escalation through Mozilla Updater MFSA 2013-70 Bypass of XrayWrappers using XBL Scopes MFSA 2013-69 CRMF requests allow for code execution and XSS attacks MFSA 2013-68 Document URI misrepresentation and masquerading MFSA 2013-67 Crash during WAV audio file decoding MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater MFSA 2013-65 Buffer underflow when generating CRMF requests MFSA 2013-64 Use after free mutating DOM during SetBody MFSA 2013-63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8)
2013-08-06Don't wait 30 seconds to stop the daemon.adam1-38/+8
2013-08-06Changes 7.2:adam3-11/+10
New features: - Upgrade licence to GPL v3+. - Update documentation. Fixes: - Since updating Webmin to 1.53, the Add New Config File screen layout is totally messed up and unusable. - Update broken links to maxmind.
2013-08-05+ py-flask-mailkleink1-1/+4
+ py-flask-principal + py-flask-security
2013-08-05Import Flask-Security-1.6.8 as www/py-flask-security.kleink4-0/+107
Flask-Security allows you to quickly add common security mechanisms to your Flask application.
2013-08-05Import Flask-Principal-0.4.0 as www/py-flask-principal.kleink4-0/+45
Flask-Principal provides a very loose framework to tie in providers of two types of service (Authentication, User information), often located in different parts of a web application. Looseness of the framework is provided by using signals as the interface.
2013-08-05Import Flask-Mail-0.9.0 as www/py-flask-mail.kleink4-0/+42
The Flask-Mail extension provides a simple interface to set up SMTP with your Flask application and to send messages from your views and scripts.
2013-08-05Update to 0.07wen2-7/+7
Upstream changes: 0.07 2013-08-04 01:14:59 Asia/Jerusalem [ ENHANCEMENTS ] * GH#344, GH#284: Now forward() calls preserve sessions (cym0n, Alberto Sim玫es) * Separation of engines from triggers and configuration (Sawyer X, Franck Cuny) * GH#347: Remove old compatibility option 'log_path' (Franck Cuny) * GH#156, GH#250, GH#349: Remove unused module (Alberto Sim玫es, mokko) * GH#331: Hook cleanups and documentation. (Franck Cuny) * GH#335: Serializing cleanup. (Franck Cuny) * GH#332: Clean up multiple definitions of core_debug (Franck Cuny) * GH#338: Clean up route builder (Mickey Nasriachi) * Clean up of the dzil configuration (Alberto Sim玫es) [ BUG FIXES ] * GH#334: Fix for GH#86, to display custom 500 page/template on internal server errors (Russell Jenkins) * GH#346: Fix tests on 5.8.9 (Albert Sim玫es) [ DOCUMENTATION ] * GH#345: Documentation reorganization (Alberto Sim玫es, Franck Cuny) 0.06 2013-07-30 (Sawyer X) [ ENHANCEMENTS ] * Clean up of the dzil configuration (Alberto Sim玫es,Franck Cuny, Russel Jenkins) * GH#327: Add support for 'info' log level (Russell Jenkins) * Remove 'for_versions' usage from tests (Alberto Sim玫es) [ BUG FIXES ] * GH#326, GH#232: don't end up with empty views and layout (Franck Cuny) * GH#325: don't die or complain when two routes have the same path (Franck Cuny) * GH#320: fix plugin_setting deprecation warning (David Golden) [ DOCUMENTATION ] * POD cleanup (Sawyer X, Franck Cuny)
2013-08-05Simplify PKGNAME for older make(1)s or other parsers.wiz1-2/+2
2013-08-04Update typo3_60 to 4.6.8 (TYPO3 4.6.8).taca3-60/+69
4.6.7: maintenance release. 4.6.8: Fix typo3-core-sa-2013-002. For full changes, please ChangeLog file.
2013-08-04Update typo3_47 to 4.7.14 (TYPO3 4.7.14).taca3-59/+64
4.7.13: maintenance release. 4.7.14: Fix typo3-core-sa-2013-002. For full changes, please ChangeLog file.
2013-08-04Update typo3_45 to 4.5.29 (TYPO3 4.5.29).taca3-11/+12
4.5.28: maintenance release. 4.5.29: Fix typo3-core-sa-2013-002. For full changes, please ChangeLog file.
2013-08-04Fix and enable Python 3.3.kleink3-2/+19
2013-08-04Update py-flask-sqlalchemy to 1.0.kleink3-11/+14
Version 1.0 ----------- (Released on July 20th 2013, no codename) - Added Python 3.3 support. - Dropped 2.5 compatibility. - Various bugfixes - Changed versioning format to do major releases for each update now.
2013-08-04Enable Python 3.3.kleink3-3/+13
2013-08-04Update opera to 12.16.obache3-20/+19
Release date: 2013-07-04 Opera 12.16 is a recommended upgrade offering security and stability enhancements. Fixes and Stability Enhancements since Opera 12.15 Security * Replaced code signing certificate; see our advisory: http://www.opera.com/security/advisory/1048
2013-08-04Update apache2 to 2.0.65.obache3-16/+9
Changes with Apache 2.0.65 *) SECURITY: CVE-2013-1862 (cve.mitre.org) mod_rewrite: Ensure that client data written to the RewriteLog is escaped to prevent terminal escape sequences from entering the log file. [Eric Covener, Jeff Trawick, Joe Orton] *) SECURITY: CVE-2012-0053 (cve.mitre.org) Fix an issue in error responses that could expose "httpOnly" cookies when no custom ErrorDocument is specified for status code 400. [Eric Covener] *) SECURITY: CVE-2012-0031 (cve.mitre.org) Fix scoreboard issue which could allow an unprivileged child process to cause the parent to crash at shutdown rather than terminate cleanly. [Joe Orton] *) SECURITY: CVE-2011-3368 (cve.mitre.org) Reject requests where the request-URI does not match the HTTP specification, preventing unexpected expansion of target URLs in some reverse proxy configurations. [Joe Orton] *) SECURITY: CVE-2011-3192 (cve.mitre.org) core: Fix handling of byte-range requests to use less memory, to avoid denial of service. If the sum of all ranges in a request is larger than the original file, ignore the ranges and send the complete file. bug#51714. [Jeff Trawick, Stefan Fritsch, Jim Jagielski, Ruediger Pluem, Eric Covener, <lowprio20 gmail.com>] *) SECURITY: CVE-2011-3607 (cve.mitre.org) Fix integer overflow in ap_pregsub() which, when the mod_setenvif module is enabled, could allow local users to gain privileges via a .htaccess file. [Stefan Fritsch, Greg Ames] NOTE: it remains possible to exhaust all memory using a carefully crafted .htaccess rule, which will not be addressed in 2.0; enabling processing of .htaccess files authored by untrusted users is the root of such security risks. Upgrade to httpd 2.2.25 or later to limit this specific risk. *) core: Add MaxRanges directive to control the number of ranges permitted before returning the entire resource, with a default limit of 200. [Eric Covener, Rainer Jung] *) Set 'Accept-Ranges: none' in the case Ranges are being ignored with MaxRanges none. [Eric Covener, Rainer Jung] *) mod_rewrite: Allow merging RewriteBase down to subdirectories if new option 'RewriteOptions MergeBase' is configured. [Eric Covener] *) mod_rewrite: Fix the RewriteEngine directive to work within a location. Previously, once RewriteEngine was switched on globally, it was impossible to switch off. [Graham Leggett] *) mod_rewrite: Add "AllowAnyURI" option. bug#52774. [Joe Orton] *) htdigest: Fix buffer overflow when reading digest password file with very long lines. bug#54893. [Rainer Jung] *) mod_ssl: Add "SSLHonorCipherOrder" directive to enable the OpenSSL 0.9.7 flag which uses the server's cipher order rather than the client's. bug#28665. [Jim Schneider <jschneid netilla.com>] *) mod_include: Prevent a case of SSI timefmt-smashing with filter chains including multiple INCLUDES filters. bug#39369 [Joe Orton] *) mod_rewrite: When evaluating a proxy rule in directory context, do escape the filename by default. bug#46428 [Joe Orton] *) Improve platform detection for bundled PCRE by updating config.guess and config.sub. [Rainer Jung] *) ssl-std.conf: Disable AECDH ciphers in example config. bug#51363. [Rob Stradling <rob comodo com>] *) ssl-std.conf: Change the SSLCipherSuite default to a shorter, whitelist oriented definition. [Rainer Jung, Kaspar Brand] *) ssl-std.conf: Only select old MSIE browsers for the downgrade in http/https behavior. [Greg Stein, Stefan Fritsch]
2013-08-01Update ruby-httpclient to 2.3.4.1.obache2-6/+6
2.3.4.1: * Respect 1.8.7 * Remove a test accessing non-existing-host 2.3.4: * Make sure to read socket in BINARY buffer
2013-08-01Update ruby-faraday to 0.8.8.obache3-11/+13
bug fixes and some improvements.
2013-08-01Fix build with bison-3.0.wiz2-1/+14
2013-07-31Updating www/py-blosxom to v1.5.3.hauke3-8/+11
What's new in 1.5.3 (July 2013) =================================== 1. Minor fixes 2. Updated and improved documentation 3. Several plugin fixes and updates including Tags, Pagination, and Ajax comments 4. Improved tests
2013-07-30Fix warnings from newer perl versionstez3-3/+28
2013-07-30Update to 2.4.6ryoon8-504/+338
Changelog: Security buxfixes. SECURITY: CVE-2013-1896 (cve.mitre.org) Sending a MERGE request against a URI handled by mod_dav_svn with the source href (sent as part of the request body as XML) pointing to a URI that is not configured for DAV will trigger a segfault. SECURITY: CVE-2013-2249 (cve.mitre.org) mod_session_dbd: Make sure that dirty flag is respected when saving sessions, and ensure the session ID is changed each time the session changes. This changes the format of the updatesession SQL statement. Existing configurations must be changed. And feature enhancement and bugfixes.
2013-07-28+ py-flask-assetskleink1-1/+2
2013-07-28Import Flask-Assets-0.8 as www/py-flask-assets.kleink4-0/+38
Integrates the webassets library with Flask, adding support for merging, minifying and compiling CSS and Javascript files.
2013-07-28+ py-webassetskleink1-1/+2
2013-07-28Import webassets-0.8 as www/py-webassets.kleink4-0/+174
Asset management application for Python web development - use it to merge and compress your JavaScript and CSS files.
2013-07-28+ py-flask-scriptkleink1-1/+2
2013-07-28Import Flask-Script-0.5.3 as www/py-flask-script.kleink4-0/+46
The Flask-Script extension provides support for writing external scripts in Flask. This includes running a development server, a customised Python shell, scripts to set up your database, cronjobs, and other command-line tasks that belong outside the web application itself.
2013-07-26Update py-werkzeug and py-werkzeug-docs to 0.9.3.kleink2-6/+6
Version 0.9.3 ------------- (bugfix release, released on July 25th 2013) - Restored beahvior of the ``data`` descriptor of the request class to pre 0.9 behavior. This now also means that ``.data`` and ``.get_data()`` have different behavior. New code should use ``.get_data()`` always. In addition to that there is now a flag for the ``.get_data()`` method that controls what should happen with form data parsing and the form parser will honor cached data. This makes dealing with custom form data more consistent.