pkgsrc/www/elinks/distinfo

13 lines
666 B
Text
Raw Normal View History

Update to 0.12pre6. Remove javascript option since a) lang/see support was removed (see below) b) lang/spidermonkey and wip/spidermonkey185 aren't recognized ELinks 0.12pre6 --------------- Security fix: * bug 1124, CVE-2012-4545: Do not delegate GSSAPI credentials in HTTP Negotiate or GSS-Negotiate authentication. Reported by Marko Myllynen. (ELinks 0.12pre1 was the first release that supported GSSAPI; earlier releases are not vulnerable.) Fixed crashes and hangs: * critical bug 943: Don't let user JavaScripts call any methods of ``elinks.action'' in tabs that do not have the focus. If a tab was closed with ``elinks.action.tab_close'' while it had pop-up windows, ELinks could crash; as a precaution, don't allow other actions either. (ELinks 0.12pre1 was the first release that supported ``elinks.action''.) * critical bug 1083: Avoid an infinite loop when trying to decompress malformed data. Caused by the bug 1068 fix in ELinks 0.12pre3. * Fix a possible crash or information disclosure on big-endian 64-bit systems using HTTP Negotiate or GSS-Negotiate authentication. Incompatibilities: * Dropped support for SEE. (ELinks 0.12pre1 was the first release that supported SEE.) * Guile 2.0.0 (released on 2011-02-16) changed its license to LGPLv3-or-later, which is not compatible with the GPLv2 that covers ELinks. Also, Guile has deprecated many of the functions that ELinks calls. Other changes: * major bug 764: Correctly initialize options on big-endian 64-bit systems. * bug 983: Give preference to the Content-Type specified in the HTTP header over that specified via the HTML meta tag. * bug 1084: Allow option names containing '+' and '*' in the option manager. * bug 1112: Map most numeric character references € ... Ÿ to graphical characters also when the output charset is UTF-8. (ELinks 0.12pre1 was the first release that supported UTF-8 as the terminal charset, and ELinks 0.12pre5 was the first release that supported UTF-8 as the dump charset.) * minor bug 1113: Fix a small memory leak if a mailcap file is malformed. * minor bug 1114: Decode SGML entities and NCRs only once in link/@title and other attributes. * build: Fix several warnings reported by GCC 4.7.1. Harmless at runtime but could break the build if configured --enable-debug. (This version does not fix all such warnings.)
2012-11-03 15:43:25 +01:00
$NetBSD: distinfo,v 1.28 2012/11/03 14:43:25 wiz Exp $
Update to 0.12pre6. Remove javascript option since a) lang/see support was removed (see below) b) lang/spidermonkey and wip/spidermonkey185 aren't recognized ELinks 0.12pre6 --------------- Security fix: * bug 1124, CVE-2012-4545: Do not delegate GSSAPI credentials in HTTP Negotiate or GSS-Negotiate authentication. Reported by Marko Myllynen. (ELinks 0.12pre1 was the first release that supported GSSAPI; earlier releases are not vulnerable.) Fixed crashes and hangs: * critical bug 943: Don't let user JavaScripts call any methods of ``elinks.action'' in tabs that do not have the focus. If a tab was closed with ``elinks.action.tab_close'' while it had pop-up windows, ELinks could crash; as a precaution, don't allow other actions either. (ELinks 0.12pre1 was the first release that supported ``elinks.action''.) * critical bug 1083: Avoid an infinite loop when trying to decompress malformed data. Caused by the bug 1068 fix in ELinks 0.12pre3. * Fix a possible crash or information disclosure on big-endian 64-bit systems using HTTP Negotiate or GSS-Negotiate authentication. Incompatibilities: * Dropped support for SEE. (ELinks 0.12pre1 was the first release that supported SEE.) * Guile 2.0.0 (released on 2011-02-16) changed its license to LGPLv3-or-later, which is not compatible with the GPLv2 that covers ELinks. Also, Guile has deprecated many of the functions that ELinks calls. Other changes: * major bug 764: Correctly initialize options on big-endian 64-bit systems. * bug 983: Give preference to the Content-Type specified in the HTTP header over that specified via the HTML meta tag. * bug 1084: Allow option names containing '+' and '*' in the option manager. * bug 1112: Map most numeric character references € ... Ÿ to graphical characters also when the output charset is UTF-8. (ELinks 0.12pre1 was the first release that supported UTF-8 as the terminal charset, and ELinks 0.12pre5 was the first release that supported UTF-8 as the dump charset.) * minor bug 1113: Fix a small memory leak if a mailcap file is malformed. * minor bug 1114: Decode SGML entities and NCRs only once in link/@title and other attributes. * build: Fix several warnings reported by GCC 4.7.1. Harmless at runtime but could break the build if configured --enable-debug. (This version does not fix all such warnings.)
2012-11-03 15:43:25 +01:00
SHA1 (elinks-0.12pre6.tar.bz2) = 3517795e8a390cb36ca249a5be6514b9784520a5
RMD160 (elinks-0.12pre6.tar.bz2) = 99d92dde61ed9c626f10d3d431ed4d325b2e33f6
Size (elinks-0.12pre6.tar.bz2) = 2854500 bytes
Update to 0.12pre05, provided by Stefano Marinelli in PR 45050. ELinks 0.12pre5: ---------------- * Debian bug 534835: Check the return values of some SpiderMonkey functions, to avoid crashes if out of memory. * minor bug 1017: To work around HTTP server bugs, disable protocol.http.compression by default, until ELinks can report decompression errors or automatically retry the connection. * enhancement: The French translation was updated. Bugs that should be removed from NEWS before the 0.12.0 release: * critical bug 1081: To fix crashes caused by different definitions of regfree() in TRE and in the system libc, link with TRE before any other libraries. ELinks 0.12pre4 was the first release that had this bug. * Searching for more than one fullwidth (e.g. Japanese) character now works. * bug 1080: Support ``--dump-color-mode'' with ``--dump-charset UTF-8''. Neither of those worked before ELinks 0.12pre1. ELinks 0.12pre4: ---------------- Released on 2009-05-31. This release also included the changes listed under ``ELinks 0.11.6'' below. Incompatibilities: * Debian build bug 529821: Use ``pkg-config gnutls'' instead of ``libgnutls-config'', which is not included in GNUTLS 2.7.x. You can no longer specify the location of GNUTLS using ``configure --with-gnutls=DIR''. Other changes: * critical bug 1077: Fix crash opening a ``javascript:'' link in a new tab. * Debian bug 528661: If using GNUTLS 2.1.7 or later, disable various TLS extensions (including CERT and SERVERNAME) to help handshaking with the SSLv3-only bugzilla.novell.com. * Debian build bug 526349: Include asciidoc.py from AsciiDoc 7.1.2, to remove all dependencies on the installed version. * build enhancement: Recognize ``configure --without-tre''. Bugs that should be removed from NEWS before the 0.12.0 release: * critical bug 1071: Fix crash in get_dom_node_child. ELinks 0.12pre1 was the first release that had this bug. * bug 765: Opening a new tab no longer asks about the document of the previous tab. ELinks 0.12pre1 was the first release that had this bug. ELinks 0.12pre3: ---------------- Released on 2009-03-29. This release also included the changes listed under ``ELinks 0.11.6'' below. Incompatibilities: * bug 1060: Regexp searching now requires the TRE library. * lzma disabled by default. It's rarely used and doesn't build with new xz. Other changes: * critical: Fix assertion failure if IMG/@usemap refers to a different file. * Preserve newlines in hidden input fields, and submit them as CRLF. Previously, they could turn into spaces or disappear entirely. * Perl scripts can use modules that dynamically load C libraries, like XML::LibXML::SAX does. * bug 153: Preserve Unicode characters in XBEL bookmark files. However, Unicode in URIs (really IRIs) does not work reliably yet; this is being tracked as bug 1066. * bug 885: Convert xterm titles to ISO-8859-1 by default, but add an option to disable this. When removing control characters from a title, note the charset. Don't truncate titles to the width of the terminal. * bug 1061: Correctly truncate UTF-8 titles in the tab bar. * bug 1068: ELinks used to display a blank or truncated page if an HTTP/1.1 server sent a compressed body with incorrect Content-Length. That has now been fixed, and a new option (protocol.http.compression) has been added. * Don't crash when the search-toggle-regex action is used and no regular expression support is compiled in. * minor bug 761: When reading bookmarks from an XBEL file, distinguish attribute names from attribute values. * enhancement: Updated ISO 8859-7, ISO 8859-16, KOI8-R, and MacRoman. Bugs that should be removed from NEWS before the 0.12.0 release: * critical bug 1067: Fixed a crash in the RSS parser that ``configure --enable-html-highlight'' enables. ELinks 0.12pre1 was the first release that had this bug. * bug 1069: ELinks didn't report ECMAScript errors, even if the ecmascript.error_reporting option was turned on. ELinks 0.12pre2 was the first release that had this bug.
2011-06-14 15:36:34 +02:00
SHA1 (patch-aa) = b188ab3975bcfd6a491c2e41a17b1f31703d4667
SHA1 (patch-ab) = a1d9b4246869c1999043c76dbcb35996a6b294fd
SHA1 (patch-ac) = a7f4bacbdf4073a5a733fe565b1f51dc755c7e4d
SHA1 (patch-ad) = 089e2455c64cbfb48907693a653e76cc97961622
SHA1 (patch-ae) = a46c419ec3d96825958903459708b8b131862053
SHA1 (patch-ag) = c31bede62a6baa1d43ab1dff639f9d7265d2bece
SHA1 (patch-ah) = 25357fd0b0aa08f7ca55f3f8c262d2d1a4874710