<s.tesch@science-computing.de> on pkgsrc-users.
- Avoid consuming excessive CPU when matching filenames to patterns. Thanks to
Maksymilian Arciemowicz <cxib@securityreason.com>.
- Some bugfixes from Rapha
no apparent security impact.
At this point: v2.3.3 released!
===============================
- Fix compile. Extreme suckage.
At this point: v2.3.4 released!
===============================
* Bug Fixes
o wnpa-sec-2011-12
A large loop in the OpenSafety dissector could cause a crash.
o wnpa-sec-2011-13
A malformed IKE packet could consume excessive resources.
o wnpa-sec-2011-14
A malformed capture file could result in an invalid root tvbuff and cause a crash.
o wnpa-sec-2011-15
Wireshark could run arbitrary Lua scripts.
o wnpa-sec-2011-16
The CSN.1 dissector could crash.
Changes to the Cyrus IMAP Server since 2.4.10
* fixed replication recovery from different messages at the each end
* Bug #3489 - fixed quotalegacy handling of prefixes so only exact
subfolders match
* Bug #3498 - fixed deletion of users quota files with
unixheriarchysep enabled, thanks Leena Heino
* Bug #3491 - NOOP and UNAUTHENTICATE for timsieved, thanks Dilyan
Palauzov
* Bug #3492 - better response codes for timsieved, thanks Dilyan
Palauzov
* Bug #3497 - fix cmd syslog from master, thanks Kristof Katus
* Bug #3503 - compilation of perl libraries on dragonfly and freebsd,
thanks OBATA Akio
* Bug #3451 - allow CC to have spaces
* Bug #3505 - fix sync_reset, thanks David Carter
* Bug #3506 - use literal+ for sync_(client|server), thanks David
Carter
* Bug #3300 - use portable function for TCP constants, thanks OBATA
Akio
* Bug #3507 - fix replication recovery with non-delayed expunge,
thanks Julien Coloos
* Bug #3495 - improved duplicate suppression, thanks Kristof Katus
* Bug #2772/3463 - fixed crashes in THREAD by correcting folding of
references headers
* Bug #3439 - fix ugly syslog message for vacation
* Bug #3499 - options to disable namespaces to reduce load on big
servers with no shared folders. Thanks Olivier ROLAND
* Changed skiplist to truncate old files after checkpoint, which can
save disk space on tmpfs or small ssds when old copies were held
open by other processes
* Made Cyrus more robust against corruption in mailboxes.db data, so
it will return an error rather than crashing on invalid entries
* Fix for CVE-2011-3208, a remotely exploitable buffer overflow in
nntpd - thanks Coverity
(add an patch to fix compilation on perl 5.14)
Changes to the Cyrus IMAP Server since 2.3.16
* Fix for CVE-2011-3208, a remotely exploitable buffer overflow in
nntpd
* Assorted file chooser improvements/redesign:
- Remove the expander in Save mode
- Move the path bar up in Save mode
- Remember the last opened directory
- Start in recently-used mode when no folder is set
- Update recent-files when confirming in the file chooser
Changes between 0.2.0 and 0.2.1:
--------------------------------
* ignore initial discontinuity
* Build fixes for BSD builds
* Build fixes for MSYS builds
Changes between 0.1.7 and 0.2.0:
--------------------------------
* Relicense libdvbpsi from GPLv2 to LGPLv2.1
* bump version number to 0.2.0 (skipping 0.1.8 and 0.1.9) to indicate
GPL -> LGPL license change
* new CUE Identifier descriptor support (0x8a)
* new Splice Information Section table support (0xFC) (SCTE 35 2004)
* new BAT table (decoder and generator)
* new descriptor 0x44
* depreceated all API's in preparation for 1.0.0 release with revamped API
packagers and application developers should anticipate:
- structure renames dvbpsi_handle to dvbpsi_t
- prototype changes
- removal of printf for message printing
- message callback function
For more information see changes in libdvbpsi-ng branch.
2010-12-28 Andrew McMillan <andrew@morphoss.com>
* Release 0.9.9.4
2010-12-27 Andrew McMillan <andrew@morphoss.com>
* Refactor PUT functions to set modified/created dates more correctly.
2010-12-27 Leho Kraav <leho@kraav.com>
* add et_EE to support locales
2010-12-26 Andrew McMillan <andrew@morphoss.com>
* Fix errors in po files pointed out by Transifex uploading.
* A new AtomFeed class for building an Atom feed.
* Switch to creating an atom feed, which is a better feed standard.
2010-12-26 Leho Kraav <leho@kraav.com>
* A new URL to provide an RSS feed of a calendar's changes.
2010-12-26 Andrew McMillan <andrew@morphoss.com>
* Refactored RRule to add support for initialisation from a vProperty.
2010-12-25 Andrew McMillan <andrew@morphoss.com>
* Remove all reference to PgQuery
* Extensive refactoring of principal-edit, plus support for creating tickets.
* Add support for writing scheduling resources on PUT.
* Improve support for handling floating time.
* Add cil for internal issue tracking.
2010-12-08 Andrew McMillan <andrew@morphoss.com>
* Cut access with invalid/expired tickets out immediately.
2010-12-07 Andrew McMillan <andrew@morphoss.com>
* Handle empty PROPFIND, don't blow up on invalid XML.
2010-11-30 Andrew McMillan <andrew@morphoss.com>
* /.well-known/* now returns a 301 redirect, per spec.
* Use text/vcard for content type in advance of ratification of spec.
* Properly handle addressbooks in multiget.
* Hide authorization headers in logging.
* Update sync-collection REPORT to match -04 of draft.
* Replace index.php with caldav.php when we find it in our path.
2010-11-27 Andrew McMillan <andrew@morphoss.com>
* Be pedantic about checking user is active before we let them in.
* Specify the SRV record examples with leading _ as they should be.
2010-11-21 Andrew McMillan <andrew@morphoss.com>
* Fix SQL for group handling from Michael Braun.
* Add principal-collection-set to standard responses for DAVResource.
* Correct typo in POST handling.
2010-11-20 Andrew McMillan <andrew@morphoss.com>
* Also update displayname if fullname is changed.
2010-10-02 Daniel Aleksandersen <daniel@>
* remove old screenshots
* updated iPhone client configuration with new screenshots
2010-11-19 Andrew McMillan <andrew@morphoss.com>
* Handle stuff like DTSTART;TZID=America/New_York:20101119T231307
2010-11-14 Andrew McMillan <andrew@morphoss.com>
* Script to refresh calendar_alarms with next instance time.
2010-11-09 Andrew McMillan <andrew@morphoss.com>
* Don't let auth functions create duplicate home calendars.
2010-11-06 Andrew McMillan <andrew@morphoss.com>
* Patch for caldav sync from Pierre-Arnaud Poudret.
* Add ACL to the supported methods.
* Change regression runner to look for sample data with tests.
* Correct version number typo.
* Always grant 'DAV::read' privilege from principal to group members.
2010-11-05 Andrew McMillan <andrew@morphoss.com>
* Use expanded time specifiers in format since %Y doesn't work on Windows.
* Support recursive REPORT query if configured to allow it.
2010-11-04 Andrew McMillan <andrew@morphoss.com>
* Add a new WritableCollection object which we will use for PUT.
* Use text/vcard rather than older text/x-vcard.
* Support event properties in changed part of sync-response.
* Rename variable to work around Pg 9.0 reserved name.
2010-11-01 Andrew McMillan <andrew@morphoss.com>
* Switch from regular expression which may not work in old/odd PHP.
2010-10-31 Andrew McMillan <andrew@morphoss.com>
* Support getlastmodified property in REPORT requests.
2010-10-16 Andrew McMillan <andrew@morphoss.com>
* Fix typo in iTIP CANCEL handling.
2010-10-15 Andrew McMillan <andrew@morphoss.com>
* Turn on calendar-auto-schedule header if $c->enable_auto_schedule
* Add various additional checks into /setup.php
* Add knowledge of desired parallel AWL version to setup.
2010-10-10 Andrew McMillan <andrew@morphoss.com>
* Fix various minor CardDAV bugs.
* Omit the <response> for event outside the time range - when expanded.
* Fix privilege_to_bits function to set 'all' correctly & work with recent postgres
2010-10-08 Andrew McMillan <andrew@morphoss.com>
* Don't supply freebusy for 0-duration events.
* Another regression test for free/busy catching many events.
* Add an event with a thoroughly bogus tzid to ensure we cope.
* Check for some supported stuff very early so we can show it is missing.
* Better display of bindings.
* Add postgreSQL 9.0 as a possibility.
* Fix warning when using basic authentication fallback.
* Fix handling of iCalendar durations containing negative elements.
* Handle events which don't have either DTEND *or* DURATION.
* Rewrite __construct() method of RepeatRuleDateTimeZone to be more robust.
2010-12-28 Andrew McMillan <andrew@morphoss.com>
* Release 0.46
* [classBrowser] Fix checking of ordering fieldname.
* [Validation] Remove references to outdated ereg() functions.
* [AWLUtlities] Rename regex checking function more appropriately.
* [Session] Don't use ereg() for parsing regex.
* [XMLDocument] Use __construct style for constructor.
2010-12-24 Andrew McMillan <andrew@morphoss.com>
* [AwlQuery] Make the quote() method public/static.
2010-12-23 Andrew McMillan <andrew@morphoss.com>
* Convert everything except PgQuery to use AwlQuery
* [AwlQuery] Add minor missing functionality so we can switch.
* [vComponent] Improve parameter splitting to allow for escapes.
* [classEditor] Avoid uninitialised variable warning.
2010-11-27 Andrew McMillan <andrew@morphoss.com>
* [vComponent] Add __toString() methods.
* [Session] If someone is made inactive then their long-term login should cease.
2010-10-15 Andrew McMillan <andrew@morphoss.com>
* [AWLUtilities] Add an awl_version() function.
2010-10-10 Andrew McMillan <andrew@morphoss.com>
* [vComponent] It is OK to SetComponents() to an empty set.
Discogs queries work again, after a Discogs API change. The track
numbering when querying multi-volume albums from Discogs was
incorrect and is fixed in this version.
NEWS for the 2.4 release
This is a bugfix release only. It turned out ripemd160 in the
2.3 release was broken on all big-endian systems, due to a
missing include of config.h. nettle-2.4 fixes this.
The library is intended to be binary compatible with
nettle-2.2 and nettle-2.3. The shared library names are
libnettle.so.4.3 and libhogweed.so.2.1, with sonames still
libnettle.so.4 and libhogweed.so.2.
NEWS for the 2.3 release
* Support for the ripemd-160 hash function.
* Generates and installs nettle.pc and hogweed.pc files, for
use with pkg-config. Feedback appreciated. For projects
using autoconf, the traditional non-pkg-config ways of
detecting libraries, and setting LIBS and LDFLAGS, is still
recommended.
* Fixed a bug which made the testsuite fail in the GCM test on
certain platforms. Should not affect any documented features
of the library.
* Reorganization of the code for the various Merkle-Damg
hash functions. Some fields in the context structs for md4,
md5 and sha1 have been renamed, for consistency.
Applications should not peek inside these structs, and the
ABI is unchanged.
* In the manual, fixed mis-placed const in certain function
prototypes.
The library is intended to be binary compatible with
nettle-2.2. The shared library names are libnettle.so.4.2 and
libhogweed.so.2.1, with sonames still libnettle.so.4 and
libhogweed.so.2.
