- Security fixes:
- Fixes for the request processing vulnerability tagged SQUID-2010:3.
http://www.squid-cache.org/Advisories/SQUID-2010_3.txt
- A hardening of the DNS client against packet queueing approaches
used to enable attacks. This completes the protection against attacks
published by Yamaguchi late in 2009.
- An HTTP request-line parser hardened against several categories of
request attack. This greatly increasing the speed of detection and
reducing resources used to detect these categories of attack.
- Fixes for the following bugs:
- Bug 3020: Segmentation fault: nameservers[vc->ns].vc = NULL
- Bug 3005,2972: Locate LTDL headers correctly (again)
- Bug 2872: leaking file descriptors
- Bug 2583: pure virtual method called
* QUOTA and MYRIGHTS IMAP extension support.
* IMAP compression (COMPRESS=DEFLATE) when supported by server
* making opening attachment easier by saving them in a directory
* downloadable images when using Webkit html widget
* faster opening of the compose window.
* text searching enabled in the WebKit html viewer.
* options to hide toolbars and other parts of the UI (useful on netbooks etc).
* For laptop/wifi users: not trying to reach POP3 servers while disconnected,
and instead checking immediately on reconnection.
* infinite loop avoided.
* avoid crashes when manually verifing GPG signature.
Increase the maximum number of boot floppies, as four is no longer
enough for amd64.
New command line option "--run".
Handle the additional dialogs displayed by sysinst when an
i386 or amd64 system has more than one disk.
Add the words "OR CONTRIBUTORS" to the disclaimer of liabilities
in the copyright notice.
GMime 2.4 has had a number of API changes since GMime 2.2. To start, ALL public
APIs that used to use off_t in GMime 2.2 now use gint64 so that the API and ABI
do not change based on whether or not large file support is enabled.
In addition, all of the functions marked as deprecated in 2.0 and 2.2 were
removed (usually they had equivalent functionality in a parent class).
Many functions have also been renamed for better clarity and/or consistency.
For convenience, GMime 2.4 source packages include a shell-script to aid in
porting applications using GMime 2.2 (should work for most GMime 2.0
applications as well) to the 2.4 API. You can find this script under the
tools/ directory, named `gmime-port-2-2-to-2-4.sh'.
This script won't fix everything, but it should help quite a bit.
Always treat symbolic links like file when generating the package list.
A long time ago "pkg_install" didn't like symbolic links which is why
"rpm2pkg" created "@exec" and "@unexec" lines in the package list.
This does however cause false positive reported by the "CHECK_FILES" check.
This should fix a part of PR pkg/41191.
- boot-strap (TOOL_DIFF): set this to ensure tests use the same version
of diff that configure tested
- in jobs mode, when we discover we cannot make something, call
PrintOnError before exit.
- formatting fixes for ignored errors
- ensure jobs are cleaned up regardless of where wait() was called.
- os.sh (MACHINE_ARCH): watch out for drivel from uname -p
- call PrintOnError from JobFinish when we detect an error we are not
ignoring.
- use bmake_signal() which is a wrapper around sigaction() in place of
signal()
- add .export-env to allow exporting variables to environment without
tracking (so no re-export when the internal value is changed).
- fix for .info et al being greedy.
- back to using realpath on argv[0] but only if contains '/' and does not
start with '/'.
native pthreads are present and used, to avoid surprises due to
conflicting implementations mixed up (in case of no bl3 use), from
Rumko per followup mail on PR pkg/43845
bump PKGREVISION
Pkgsrc changes:
o Adapt to new content being installed (PLIST) and new perl script
which needs tweaking.
Upstream changes:
- Core
+ Plug some memory leaks
+ As always, bug fixes and some optimizations
- Runtime
+ added (experimental) URI::Escape
- Testing
+ Improved test coverage of core parrot
- Documentation
+ Updated the Squaak tutorial to use modern NQP-rx and PCT
- Platforms
+ The Fedora package 'parrot-devel' install the files for syntax-highlighting
and automatic indenting for the vim editor
- NQP-rx
+ Updated version included from http://github.com/perl6/nqp-rx includes
new or improved: regex backtracking, named assertions, interactive mode,
and setting (a minimal but useful runtime library)
* Added some acronyms.
* Fixed the default selection in GtkTreeView.
* Don't load kbdui/foo.so in addition to kbdui/foo.la.
* Added debian build.
* Fixed#1 input-pad.pc doesn't include gtk+-2.0
pkgsrc changes:
- adjust dependency version numbers to match versions of packages in pkgsrc
Upstream changes:
0.15 31 Aug 2010
* pod patches from movingtarget@mackler.org
* remove .yml config file and plugin dependency
* psycopg/cursor_type.c: executemany() propagates exceptions raised by the
iterable to the caller.
* lib/pool.py: dropped logging.basicConfig() call. It messes up with
projects using logging but where no handler is installed on the root
logger.
* psycopg/cursor_type.c: exceptions raised in the columns iterator of the
copy methods propagated to the caller.
* psycopg/typecast_datetime.c: Round seconds in historical timezones to
the nearest minute.
* lib/extras.py: register_tstz_w_secs() is now no-op.
Changes 2.2.1:
* Builds again on Windows.
Changes 2.2.0:
* typecast.c: Fixed problem related to receiving None from Python
when a string was expected.
* psycopg/adapter_datetime.c: Fixed TimestampFromTicks for second
values > 59.5.
* psycopg/adapter_datetime.c: Fixed same bug for TimeFromTicks.
* Added typecasters for arrays of specific MX/Py time-related types.
* psycopg/adapter_[mx]datetime.c: Explicit cast of the SQL representation
of time-related objects.
* psycopg/adapter_binary.c: Adapt buffer objects using an explicit cast on
the string literal
* lib/pqpath.c: Fixed reference leak in notify reception.
* Notifies are collected if available after every query execution.
* lib/extensions.py: DECIMAL typecaster imported from _psycopg.
* lib/extensions.py: PY* and MX* time typecaster imported from _psycopg.
* psycopg/connection_type.c: Correctly parse keywords in connect().
* psycopg/pqpath.c: Ensure running COPY in blocking mode.
* psycopg/pqpath.c: Free the GIL in blocking operations in V2 COPY FROM.
* psycopg/pqpath.c: Evaluate Python objects only once outside the COPY I/O
loops.
* Fixed problem with asynchronous NOTIFYs.
* Integrated async pacthes from Jan's git tree.
Upstream changes:
0.789 (06.23.2010) - John Siracusa <siracusa@gmail.com>
* Added support for SELECT FOR UPDATE and other forms of locking
(Initial patch by Kostas Chatzikokolakis)
* Fixed some POD typos (RT 58405)
0.788 (05.22.2010) - John Siracusa <siracusa@gmail.com>
* Fixed a bug that prevented function calls like now() from being
properly inlined, even when allow_inline_column_values was set
to a true value. (Reported by David Bourget)
* The Loader/auto-init system will now automatically set the
allow_inline_column_values attribute to a true value when a
column has a default value that looks like a function call.
* Fixed a non-numeric warning with development releases of Math::BigInt.
* Fixed SQL reserved word quoting bug. (Reported by Taric Mirza)
* Avoid stringifying exception objects when setting error().
(Suggested by Kostas Chatzikokolakis)
0.787 (04.27.2010) - John Siracusa <siracusa@gmail.com>
* Added remarks column attribute. (Patch by Adam Mackler)
* Improved error message generated by get_objects_from_sql() when
an unknown column is encountered.
* Added support for Rose::DB's keyword_function_calls attribute.
* Added dedicated timestamp with time zone column type.
* Inflate triggers now work correctly with lazy-loaded columns.
(Reported by Alex Karelas)
* Failure to have any valid registered data sources no longer causes
a fatal error when looking up default column sequence names during
class setup.
pkgsrc changes:
- import package for newly introduced dependency DateTime::Format::Oracle
Upstream changes:
0.762 (06.23.2010) - John Siracusa <siracusa@gmail.com>
* Support for Rose::DB::Object 0.789.
0.761 (05.22.2010) - John Siracusa <siracusa@gmail.com>
* Support for Rose::DB::Object 0.788.
* Detect and report problems caused by DBD::mysql versions that fail to
set the Active database handle attribute back to a true value when
mysql_auto_reconnect is set. (Reported by Matt S. Trout and Kostas
Chatzikokolakis)
0.760 (04.28.2010) - John Siracusa <siracusa@gmail.com>
* Moved version number back to three places after the decimal in order to
placate Unix package management systems. (Suggested by Matt S. Trout)
0.7591 (04.27.2010) - John Siracusa <siracusa@gmail.com>
* Corrected skip counts in MySQL tests.
0.759 (04.27.2010) - John Siracusa <siracusa@gmail.com>
* Fixed some inheritance dead ends (Reported by Matt S. Trout)
* Corrected parse_array()'s value unescaping (RT 56112)
* Added timestamp with time zone parsing/formating methods.
* Improved Oracle date/time parsing and formatting.
* DateTime::Format::Oracle is now a prerequisite (see above).
into time/p5-DateTime-Format-Oracle.
This module may be used to convert Oracle date and timestamp values into
DateTime objects. It also can take a DateTime object and produce a date
string matching the NLS_DATE_FORMAT.
Oracle has flexible date formatting via its NLS_DATE_FORMAT session
variable. Date values will be returned from Oracle according to the current
value of that variable. Date values going into Oracle must also match the
current setting of NLS_DATE_FORMAT.
Timestamp values will match either the NLS_TIMESTAMP_FORMAT or
NLS_TIMESTAMP_TZ_FORMAT session variables.
This module keeps track of these Oracle session variable values by
examining environment variables of the same name. Each time one of
Oracle's formatting session variables is updated, the %ENV hash must
also be updated.
