This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:
* SA-CORE-2009-006 Drupal core - Cross site scripting
In addition to this security vulnerability, the following bugs have been fixed since the 5.15 release:
* #396224 partial rollback of SA-CORE-2009-003 security hardening.
* #396224 adding missing documentation comment update. By dvessel and pwolanin.
* #267305 by brianV. Remove ?>.
* #305544 by jsenich. Add missing clear-block to admin by modules.
* #330084 by c960657: Remove unnecessary duplication of the From header value in Reply-to; standards indicate setting the From header should be sufficient.
matplotlib is a pure python plotting library designed to bring
publication quality plotting to python with a syntax familiar to
matlab users. A lot progress towards this goal has been made since
the first release of matplotlib, the library does produce high quality
2D plots. All of the plotting commands can be accessed either via a
functional interface familiar to matlab users or an object oriented
interface familiar to python users, and several high resolution output
formats are supported.
This package contains the Tk driver for matplotlib.
Tutorial: http://matplotlib.sourceforge.net/tutorial.html
Pkgsrc changes:
o Change from using extension.mk to egg.mk, on hints from wiz@
o Adjust PLIST so that it matches what is then installed.
o Bump PKGREVISION
* pkgsrc change: remove useless patch-ba by me.
Release 2.7.1 (2009-05-12)
--------------------------
This is a maintenance release on the 2.7 branch. Compared to 2.7.0 it
consists only of a few carefully hand-picked fixes for bugs,
(including GPU crashers). We encourage all users of 2.7.0 to upgrade
to 2.7.1.
Bug fixes since 2.7.0:
* KMS: Hook up output properties for RANDR, (this allows output
properties to be controlled in the KMS case just as in the UMS
case). [Zhenyu Wang <zhenyu.z.wang@intel.com>]
* Fix multiplication error when computing required batch space.
This could fix any number of cases where the driver did
inexplicable things (due to having computed the wrong
size). [Keith Packard <keithp@keithp.com>]
* Hold reference to video binding table until all rects are
painted. This prevent general chaos in the buffer
manager. [Keith Packard <keithp@keithp.com>]
* Split i915 textured video commands to fit into batch
buffers. Video and 3D setup commands share the same batch
buffer, so without this fix, various problems could occur when
video and 3D clients were both heavily active at the same
time. [Keith Packard <keithp@keithp.com>]
* Fix crash with XV with large virtual display (> 2049). [Albert
Damen <albrt@gmx.net>]
* Provide missing value to 3D_STATE_VERTEX_BUFFERS command. We
don't know that this was causing any problem, but the change
does bring the driver into conformance with what the
specification says the hardware requires here. [Keith Packard
<keithp@keithp.com>]
2009-02-19 SATOH Hiroh
* [bug]:
Fixed net/irc.rb permission.
* Released 0.0.7
2009-02-01 SATOH Hiroh
* [bug]:
Fixed to work on ruby1.9.1
* [release]:
Released 0.0.6
The SquirrelMail Team is pleased to announce the release of
SquirrelMail version 1.4.18. The most notable changes for this
version are several security fixes, including a couple XSS exploits, a
session fixation issue, and an obscure but dangerous server-side code
execution hole. However, this version also includes three new
languages and more than a few enhancements to things such as the
filters plugin, the address book system and other things under the
hood. For more complete details, see the ReleaseNotes and ChangeLog
files included in this release (they have moved to the doc/
directory). We advise all users of SquirrelMail software to upgrade.
* Defined TOO_FAR == 32767 in deflate.c (again). The definition
has continually been inadvertently omitted during zlib updates
since pngcrush version 1.6.4.
* Revised handling of xcode files so at least we can get printout
of IHDR values with "pngcrush -fix -n -v xcode.png"
Changes 1.6.16:
* Added -newtimestamp and -oldtimestamp options and changed
default condition to timestamping the output file with
the current time (i.e., -newtimestamp is default)
* If the -oldtimestamp option is used then the output file
has the same timestamp as the input file.
* Added CgBI chunk detection.
Changes 1.6.15:
* Fixes some missing typecasts on png_malloc() calls, patch from
an anonymous reporter to the SourceForge bug tracker.
* Added -time_stamp option to change time stamping from default
condition.
Features and improvements
* New PulseAudio? driver (Josh Green)
* New Jack MIDI driver (Josh Green)
* New CoreMIDI driver (Pedro Lopez-Cabanillas)
* Portaudio driver re-written for Portaudio 19 (Josh Green)
* Support for OS/2 including Dart audio driver (KO Myung-Hun)
* RPN GM MIDI messages now handled for Bend Range, Fine Tune
and Coarse Tune (Josh Green)
* MIDI channel pressure now handled (Bernat Arlandis i Mañó)
* MIDI Program/Bank instrument fallback selection logic (Josh
Green and thanks also to Jimmy)
* Added midi.portname setting to ALSA sequencer, -p command
line switch (Nicolas Boulicault)
* Added midi.winmidi.device setting to winmidi driver (Pedro
Lopez-Cabanillas)
* Updated Max/MSP FluidSynth binding (Norbert Schnell)
Synthesis Changes
* Volume attenuation SoundFont generator now behaves more like
EMU10K1 (S. Christian Collins)
* Stop forcing velocity based filtering (S. Christian Collins)
* Fixes to linear/bipolar/positive and convex/bipolar/positive
modulator functions (S. Christian Collins)
* Added fix to properly search for percussion instrument (Josh
Green)
* Force velocity envelope value to be that of the previous
stage when switching from decay to sustain (S. Christian Collins)
* Filter calculation now uses synthesizer sample rate rather
than fixed at 44100 (S. Christian Collins)
Bug fixes
* Fixed Jack driver in "audio.jack.multi=yes" mode and Jack
audio driver cleanup (Bernat Arlandis i Mañó and Pedro
Lopez-Cabanillas)
* Wrong tempo changes (ticket #22 - Pedro Lopez-Cabanillas)
* Crash bug fix related to using certain modulators in a preset
(S. Christian Collins)
* Fix to non-option command line argument processing when not
using readline (Pedro Lopez-Cabanillas)
* dsound device can't be selected (Ticket #16 - Pedro
Lopez-Cabanillas)
* Minor build fixes (Josh Green)
* Fixed compilation under MSVC 2008 and older (Pedro
Lopez-Cabanillas)
Misc. stuff
* Updated README-OSX build instructions (Ebrahim Mayat)
* FluidSynth fink package accepted for Mac OS X (Ebrahim Mayat)
* Minor fixes to FluidSynth man page (Sven Hoexter)
Changes in 0.16.1:
------------------
* Use new hashlib module instead of md5, bug #576161 (Claude Paroz)
* Updated translations:
ar (Khaled Hosny)
ja (Takeshi AIHANA)
pa (Amanpreet Singh Alam)
