as full release.
And add updated fckeditor for Geeklog.
These updates should fix known security problems, Secunia SA36372.
Jul 30, 2009 (1.5.2sr5)
------------
This release addresses the following security issues:
- Gerendi Sandor Attila reported an XSS in the forms to email a user and to
email a story to a friend.
- The "Mail Story to a Friend" function didn't check story permissions, so that
it was possible to email a story even if you didn't have the permissions to
view it on the site.
Upstream changes:
Version 5.8 12.09.2009
+ Added a new function "N_Delta_YMD()"
+ Added a new test script "t/f037.t"
+ Updated the "Calc.pod" manual page accordingly
+ Renamed "calendar.cgi" in the "examples"
subdirectory to "calendar.pl"
+ Added a new CGI script named "datecalc.pl"
to the "examples" subdirectory
pkgsrc changes:
- Adding license definition
Upstream changes:
Version 3.025
Added back support for providing a non-default SMTP port (#21156, #48783, thanks John Bokma!).
pkgsrc changes:
- correcting license definition
Upstream changes:
0.1001 Sep 11 2009
- AUGH! Forget to put t/mysql.diff in MANIFEST
0.1000 Sep 10 2009
- Added check for -- at begining of line.
Thank you Jay
Upstream changes:
2009-08-30 Russ Allbery <rra@stanford.edu>
* ANSIColor.pm: Version 2.02 released.
* ANSIColor.pm: Update compatibility matrix to reflect that xterm
now supports blink.
* ANSIColor.pm (colorvalid): New function to check whether an
attribute is known.
* t/basic.t: Test colorvalid.
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
1.0006 08 Sep 2009
Allow derived classes without component_base_class(), given all
arguments to load_components are absolute class names (+Classname)
Upstream changes:
Changes for 0.50 Mon Sep 7 16:17:32 BST 2009
=================================================
* Apply patch from Steve Hay that fixes a test failure in
core since the move from lib/ to ext/ [RT #49490]
Changes for 0.48 Mon Sep 7 15:12:43 BST 2009
=================================================
* Apply a patch from Vincent Pit to fix warnings when undefined
values are provided in the command list [RT #48868]
Upstream changes:
0.37 2009-08-25 15:25 UTC
+ Add : The new constant VMG_FORKSAFE can be tested to know whether the
module will behave nicely when fork()ing. It's currently always
true except on Windows where you need perl 5.10.1 for it to be
true.
+ Doc : Nits and clarifications.
Upstream changes:
2009-09-07 John Peacock <jpeacock@cpan.org>
Tighten up un_vstring code to limit the number of false positives.
Bump $VERSION in anticipation of release to CPAN.
2009-09-07 John Peacock <jpeacock@cpan.org>
Stop leaking SV's. Thanks to Goro Fuji for patch
pkgsrc changes:
- Adding license definition
Upstream changes:
1.06 Fri Sep 4 2009
- added ability to automatically and rapidly generate different seeds and
return it to allow the generation of identical random number series
Upstream changes:
Version 3.47
Re-release of 3.46, which did not contain a proper MANIFEST
Version 3.46
[BUG FIXES]
1. In CGI::Pretty, we no longer add line breaks after tags we claim not to format. Thanks to rrt, Bob Kuo and
and Mark Stosberg. (RT#42114).
2. unescapeHTML() no longer falsely recognizes certain text as entities. Thanks to Pete Gamanche, Mark Stosberg
and Bob Kuo. (RT#39122)
3. checkbox_group() now correctly includes a space before the "checked" attribute.
Thanks to Andrew Speer and Bob Kuo. (RT#36583)
4. Fix case-sensitivity in http() and https() according to docs. Make https()
return list of keys in list context. Thanks to riQyRoe and Rhesa Rozendaal. (RT#12909)
5. XHTML is now automatically disabled for HTML 4, as well as HTML 2 and HTML 3. Thanks to
Dan Harkless and Yanick Champoux. (RT#27907)
6. Pre-compiling 'end_form' with ':form' switch now works. Thanks to ryochin and Yanick Champoux. (RT#41530)
7. Empty name/values pairs are now properly saved and restored from filehandles. Thanks to rlucas and
Rhesa Rozendaal (RT#13158)
8. Some differences between startform() and start_form() have been fixed. Thanks to Slaven Rezic and
Shawn Corey. (RT#22046)
9. url_param() has been updated to be more consistent with the documentation and param().
Thanks to Britton Kerin and Yanick Campoux. (RT#43587)
10.hidden() now correctly supports multiple default values.
Thanks to david@dierauer.net and Russell Jenkins. (RT#20436)
11.Calling CGI->new() no longer clobbers the value of $_ in the current scope.
Thanks to Alexey Tourbin, Bob Kuo and Mark Stosberg. (RT#25131)
12.UTF-8 params should not get double-decoded now.
Thanks to Yves, Bodo, Burak G"ursoy, and Michael Schout. (RT#19913)
13.We now give objects passed to CGI::Carp::die a chance to be stringified.
Thanks to teek and Yanick Champoux (RT#41530)
14.Turning off autoEscape() now only affects the behavior of built-in HTML
generation fuctions. Explicit calls to escapeHTML() always escape HTML regardless
of the setting. Thanks to vindex, Bob Kuo and Mark Stosberg (RT#40748)
15.In CGI::Fast, preferences set via pragmas are now preserved.
Thanks to heinst and Mark Stosberg (RT#32119)
[DOCUMENTATION]
1. remote_addr() is now documented. Thanks to Yanick Champoux. (RT#38884)
2. In CGI::Pretty in the list of tags left unformatted was updated to match the code. Thanks to Mark Stosberg. (RT#42114)
3. In CGI::Pretty, performance concerns are now documented. Thanks to Jochen, Rhesa Rozendaal and Mark Stosberg (RT#13223)
4. A number of outdated Netscape references have been removed. Thanks to Mark Stosberg.
5. The documentation has been purged of examples of using indirect object notation. Thanks to Mark Stosberg.
6. Some POD formatting was fixed. Thanks to Dave Mitchell (RT#48935).
7. Docs and examples were updated to highlight start_form instead of startform.
Thanks to Slaven Rezic.
8. Note that CGI::Carp::carpout() doesn't work with in-memory filehandles.
Thanks to rhubbell and Mark Stosberg.
9. The documentation for the -newstyle_urls is now less confusing.
Thanks to Ryan Tate and Mark Stosberg (RT#49454)
[INTERNALS]
1. Quit bundling an ancient copy of Test::More and and using a custom 'lib' path for the tests. Instead, Test::More
is now a dependency. Thanks to Ansgar and Mark Stosberg (RT#48811)
2. Automated tests for hidden() have been added, thanks to Russel Jenkins and Mark Stosberg (RT#20436)
3. t/util.t has been updated to use Test::More instead of a home-grown test function. Thanks to Bob Kuo.
