* prefork MPM: Run cleanups for final request when process exits gracefully
to work around a flaw in apr-util.
* mod_reqtimeout: Do not wrongly enforce timeouts for mod_proxy's backend
connections and other protocol handlers (like mod_ftp). Enforce the
timeout for AP_MODE_GETLINE. If there is a timeout, shorten the lingering
close time from 30 to 2 seconds.
* Proxy balancer: support setting error status according to HTTP response
code from a backend.
* mod_authnz_ldap: If AuthLDAPCharsetConfig is set, also convert the
password to UTF-8.
* core: check symlink ownership if both FollowSymlinks and
SymlinksIfOwnerMatch are set
* core: fix origin checking in SymlinksIfOwnerMatch
* mod_headers: Enable multi-match-and-replace edit option
* mod_log_config: Make ${cookie}C correctly match whole cookie names
instead of substrings.
* mod_dir, mod_negotiation: Pass the output filter information
to newly created sub requests; as these are later on used
as true requests with an internal redirect. This allows for
mod_cache et.al. to trap the results of the redirect.
* rotatelogs: Fix possible buffer overflow if admin configures a
mongo log file path.
* mod_ssl: Do not do overlapping memcpy.
* vhost: A purely-numeric Host: header should not be treated as a port.
* core: (re)-introduce -T commandline option to suppress documentroot
check at startup.
* Undo a crash-bug introduced in 1.3.9 affecting some applications of
the apr hash and table structures, reported to affect Subversion
Changes 1.4.1:
* Win32: Properly handle the ERROR_DIRECTORY system error code.
Changes 1.4.0:
* Add apr_global_mutex_lockfile() for retrieving the file, if any,
associated with the mutex. Add apr_global_mutex_name() for retrieving
the name of the lock mechanism used by the underlying proc mutex.
* Add apr_socket_atreadeof to determine whether the receive part of the
socket has been closed by the peer.
* Make apr_pollset and apr_pollcb implementations using providers.
Added apr_pollset_create_ex and apr_pollcb_create_ex that allows
choosing non-default providers.
* apr_temp_dir_get() now checks the TMPDIR environment variable first,
instead of third.
* Add apr_file_sync() and apr_file_datasync() calls.
* apr_pollset_wakeup() on Windows: Fix core caused by closing the
file_socket_pipe with standard file_close.
* Introduce apr_hash_do() for iterating over a hash table.
* Make sure WIN32 behaves the same as posix for file-backed shared memory
by removing the file on cleanup/remove.
* Introduce apr_pollset_wakeup() for interrupting the blocking
apr_pollset_poll() call.
* Add apr_file_link() function.
=== 0.4.4 2010-10-31
* Fix LoadError rescue in tests: return can't be used in this context
(Hans de G raaff)
* HTTP headers should be strings. (seancribbs)
* ensure consumer uri gets set back to original config even if an error occurs
(Brian Finney)
* Yahoo uses & to split records in OAuth headers (Brian Finney)
* Added support for Rails 3 in client/action_controller_request (Pelle)
on consensus of pkgsrc developers from private discussion.
Essentially 10.3 and below will not be allowed to clutter the PR db,
10.4 is iffy, and 10.5 and 10.6 are normal.
changes:
-fix crash on empty cmd line arguments which is considered a security
problem because it can crash mtn server processes (SA41960)
-minor fixes
also add a patch from upstream to adapt to a behavior change
in sqlite3-3.7.3
arguments which don't work (but keep inclusion of oss.bl3.mk)
-ignore fmemopen(3) -- the code assumes too much if this is found,
fixes build on NetBSD-current
IMAP (Internet Message Access Protocol) is an Internet standards-track
protocol for accessing messages (mail, bboards, news, etc). The Cyrus
IMAP server differs from other IMAP server implementations in that it
is generally intended to be run on "sealed" servers, where normal users
are not permitted to log in. The mailbox database is stored in parts of
the filesystem that are private to the Cyrus IMAP system. All user
access to mail is through the IMAP, POP3, or KPOP protocols.
and paths being used.
MAJORDOMO_HOMEDIR moves from /home/majordom to $VARBASE/majordomo, unless
overridden by the package builder
MAJORDOMO_CF is now ${PREFIX}/etc/majordomo/majordomo.cf
* Install the "radcrypt" program.
* Enable radclient to send requests containing MS-CHAPv1 Send packets with:
MS-CHAP-Password = "password". It will be automatically converted to the
correct MS-CHAP attributes.
* Added "-t" command-line option to radtest. You can use "-t pap", "-t chap",
"-t mschap", or "-t eap-md5". The default is "-t pap"
* Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120 This change
and the previous one makes PEAP testing much easier.
* Added more documentation and examples for the "passwd" module.
* Added dictionaries for RFC 5607 and RFC 5904.
* Added note in proxy.conf that we recommend setting
"require_message_authenticator = yes" for all home servers.
* Added example of second "files" configuration, with documentation.
This shows how and where to use two instances of a module.
* Updated radsniff to have it write pcap files, too. See '-w'.
* Print out large WARNING message if we send an Access-Challenge for EAP, and
receive no follow-up messages from the client.
* Added Cached-Session-Policy for EAP session resumption. See raddb/eap.conf.
* Added support for TLS-Cert-* attributes. For details, see
raddb/sites-available/default, "post-auth" section.
* Added sample raddb/modules/{opendirectory,dynamic_clients}
* Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
* Added RFCs 5607, 5904, and 5997.
* For EAP-TLS, client certificates can now be validated using an external
command. See eap.conf, "validate" subsection of "tls".
* Made rlm_pap aware of {nthash} prefix, for compatibility with legacy RADIUS
systems.
* Add Module-Failure-Message for mschap module (ntlm_auth)
* Made rlm_sql_sqlite database configurable. Use "filename" in sql{} section.
* Added %{tolower: ...string ... }, which returns the lowercase version of the
string. Also added %{toupper: ... } for uppercase.
* Bug fixes.
Gnash 0.8.8
2010/08/17
* Renderers are able to be switched at runtime between Cairo,
OpenGL, and AGG.
* Media handlers can be switched at runtime between ffmpeg and
Gstreamer.
* Hardware video decoding support via VAAPI for Nvidia, ATI, and
Intel GPUs.
* Android specific support.
* Gnash now compiles faster due to reduce internal dependencies.
* Mostly complete Scriptable Plugin support which works with the
ExternalInterface class.
* Improved input device handling when using a raw framebuffer.
* 100% of all YouTube videos should work
Improvements since 0.8.7 release are:
Gnash 0.8.7
2010/02/15
Improvements since 0.8.6 release are:
* Automatic and spontaneous screenshots support in all GUIs (Benjamin Wolsey)
* Significant memory savings in parsing large XML trees (Benjamin Wolsey)
* Significant memory savings in functions calls when super is not required
(Benjamin Wolsey)
* Enhancements in video streaming [youtube HD button and seeks]
(Sandro Santilli)
* Non blocking load of bitmaps, movies, data (Sandro Santilli)
* Fix use of imported library symbols (Sandro Santilli)
* AS2 Array handling fixed. (Benjamin Wolsey)
* Refactoring to eliminate most static data and get closer to re-entrant VM.
(Benjamin Wolsey)
* SWF6 dynamic gradients tested and implemented correctly.
(Benjamin Wolsey)
* TextFormat.getTextExtent implemented.
(Benjamin Wolsey)
* TextField.autoSize implemented for right and center autosizing.
(Benjamin Wolsey)
Gnash 0.8.6
Improvements since 0.8.5 release are:
* TextSnapshot, Camera, Microphone, TextField and TextFormat implemented.
* ASSetNative, ASSetNativeAccessor, ASconstructor implemented.
* New utilities for finding input devices for Camera and Microphone.
* Fix bitmap smoothing handling in AGG renderer (Bug #25894).
* Custom Gnash GTK widget.
* Various improvements to text handling.
* large-scale refactoring of object and class creation for improved
AS compatibility.
* extension of native classes now works in many cases.
* PyGTK module support.
* Native and built-in functions properly separated, more native functions
added.
* AmigaOS4 support (gui and sound handler).
* Fixes to XMLSocket crash and event order.
* Performance improvement for SDL gui (invalidated regions).
* Corrected timing of various AS events, fixing various SWFs that rely on them.
* Many minor bug fixes.
* Better A/V synchronization.
* Rudimentary AVM2 implementation when enabled.
* Fix in sendAndLoad forcing use of POST.
2009-03-04 Rob Savoye <rob@welcomehome.org>
Gnash 0.8.5 released !
Improvements since 0.8.4 release are:
Due to better XML parsing compatibility and a minor fix to NetConnection,
many more video sites work than in the last release. Support for new
codecs keeps YouTube support up to date.
XML parsing, Selection implementation, Sound and MovieClip fixes mean
that many BBC Flash movies (not the BBC iPlayer) now work.
Potlatch support is improved with better remoting compatibility and
XML parsing.
All of the Orisinal morning sunshine games now work due to support for
Mixed SWF Versions runs.
* Support for saving streamed (FLV, H264, MP3 etc) and loaded (JPEG,
SWF, PNG, GIF) media to disk.
* Basic GUI warning messages when media decoding fails (usually
missing codecs).
* Added support for FLV parsing and decoding of H.264 video and
AAC audio.
* Scaled video smoothing implemented in AS and in default renderer
(AGG). YouTube video looks better when Gnash is running with high
quality or better.
* Support for _quality implemented with user-specified
override. (Presently only affects video smoothing in the default
renderer).
* Made NPAPI plugin quiet, except on plugin-specific errors (to
reduce .xsession-errors pollution).
* Implemented LoadVars.toString(), XML.send() and LoadVars.send().
* XML parsing made compatible (less strict), XML.xmlDecl and
XML.docTypeDecl implemented.
* XMLNode methods implemented: getPrefixForNamespace(),
getNamespaceForPrefix(), namespaceURI, localName, prefix. Handling
of attributes corrected.
* New GUI for KDE4 / Qt4 with SWF properties and Gnash preferences
dialog boxes.
* Corrected AS enumeration order.
* Fixed incorrect mouse event on double click (shouldn't exist).
* Implemented MovieClip.getURL(), MovieClip.attachBitmap().
* Implemented POST for send() and getURL() methods.
* Added support for parsing and decoding Speex audio in FLV files
using libspeex.
* __resolve property implemented. Fixes a Flickr Flash badge.
* Video.clear(), Video.width and Video.height implemented.
* Multiple NetStream.play() fixed.
* Fixed support of mixed-version swf runs.
* Fix decoding of RAW and UNCOMPRESSED audio with gstreamer media
handler
* Improve SWF4 compatibility.
* Improve compatibility in setting characters properties.
* NetConnection.isConnected and NetConnection connect events
implemented (fixes various video sites).
* Remoting support generally improved (NetConnection).
* Make initialization object available to MovieClip constructor
(attachMovie, duplicateMovieClip).
* Sound.getBytesLoaded, Sound.getBytesTotal implemented.
* Complete Selection class implemented.
--
2008-10-13 Russ Nelson <nelson@crynwr.com>
Sixth alpha release of Gnash (0.8.4).
Improvements since 0.8.3 release are:
More visible to users:
* The -d switch won't behave the same as in 0.8.3. This is a
temporary thing, we'll likely bring it back to its original
behaviour for next releases. If you're curious, -d will now
change heart beating rate.
* Support for MIT SHM X extention is disabled by default `cause
it broke (*grin*). We'll get it back on next release. Let us
know if you really notice a performance degradation on the
rendering side please <gnash-dev@gnu.org>.
* Keep Adobe happy with our users and our users happy with us by
changing "Flash player" into "SWF player" everywhere. Adobe
claims "Flash" as a trademark and had asked a Linux distributor
to fix it.
* The popular SWF Twitter badge now renders correctly.
* Fix parsing of urls containing multiple question marks
* Fix support for movies embedding multiple sound streams
* Support for loading PNG and GIF images added.
* Improved rendering of SWF movies because of the less visible
changes listed below.
* Support for writing RGB/RGBA PNG images and JPEG images.
* Works with Potlatch OpenStreetMap editor
* New 'flvdumper' utility for analyzing FLV video files.
* XPI packaging support for Mozilla & Firefox.
Less visible to users:
* Improved SWF version 8 support:
o flash.geom.Point, flash.geom.Rect, flash.geom.Matrix classes
implemented.
o flash.geom.ColorTransform almost fully implemented.
o flash.display.BitmapData partially implemented.
o flash.geom.Transform.matrix and flash.geom.Transform.ColorTransform
implemented.
o MovieClip.transform implemented, with ability to find and apply
MovieClip transformations.
o Playback of VP6F video (SWF version 8 FLV) with Ffmpeg.
* Fixes and implementation of ActionScript 2 classes:
o NetConnection.call() implemented: initial support for flash Remoting
o toString() method of objects called correctly, String.split
implementation fixed.
o XMLSocket onData method implemented properly, other methods fixed.
o Error class implemented.
o XML and LoadVars sendAndLoad() now derive from a common base object
(loadable AS object); fixes the popular SWF Twitter badge.
o addRequestHeaders and contentType implemented for LoadVars and XML.
* VM bugfixes and improvements:
o Heart beating model, allowing for fine-grained interval timers and
threading reduction.
o Frame label fix (case sensitivity).
o Fixes and improvements to Color and cxform.
o SWF matrix made faster and more compatible (golf.swf works now!)
o try/catch/finally ActionScript expression handled more correctly.
o Parse and partially use ScriptLimits tag. Handle stack limit more
correctly.
o Fixed scoping issues for SWF <= 5
o Bitmap characters now support alpha.
* Media handling improvements:
o Pluggable architecture for MediaHandlers (ffmpeg/gst available)
o Media-handler agnostic Sound and NetStream classes
o Numerous bug fixes in ffmpeg and gstreamer media handling
* SWF version 2-specific fixes:
o PlaceObject tag display fixed (also applies to SWFs generated with
some free tools)
o DefineButtonCxform tag implemented).
* Codebase improvements:
o Renamed the 'server' directory to be a more accurate 'libcore'.
Merge 'libgeometry' into 'libbase'
o Keep Adobe happy with our users and our users happy with us by
changing "Flash player" into "SWF player" everywhere (a Linux
distributor received a demand letter).
o Numerous cleanups and changes to improve portability.
* fix: add versioning information to binary
* fix: add AM_MAINTAINER_MODE
* fix: bad LDAP query for ether lookups
* fix: clarify bind timelimit defaults in ldap.conf
* fix: call do_close() if ldap_result() or ldap_parse_result() fails
(before returning NSS_UNAVAIL)
* fix: FreeBSD thread library check
* fix: deallocate context in
_nss_ldap_ent_context_release() to avoid bad usage
* fix: don't leak file descriptors in _nss_ldap_readconfig
Changes 264:
* fix: MAP_H_ERRNO() should map NSS_TRYAGAIN to NETDB_INTERNAL not TRY_AGAIN
* fix: ldaps:// URIs only work if "ssl on" is set
* fix: nss_ldap exposes malformed entries to the system
Changes 263:
* fix: nss_ldap returns success from setnetgrent() when the requested netgroup
doesn't exist
* fix: getXXent() only returns NULL once before implicitly calling
setXXent(), whereas other backends continue to return NULL
Changes 262:
* fix: nss_ldap fails to work on Solaris without that patch applied
Changes 261:
* fix: ldap.conf template is missing a comment in the first line
1.) stpcpy() is a macro under at least Mac OS 10.6. Avoid build failures
by not defining a dodgy prototype for it.
2.) Don't strip installed binaries to allow the dynamic linker to find
symbols required by the shared library but defined by the application.
This fixes PR pkg/41827 by Christopher M. Fuhrman.
Bump package revision as the package built fine under Mac OS 10.5 before
but didn't work.
- devel/nspr from 4.8.6.11 to 4.8.6.12
- devel/xulrunner from 1.9.2.11 to 1.9.2.12
- www/firefox from 3.6.11 to 3.6.12
Security issues fixed since previous versions:
MFSA 2010-73 Heap buffer overflow mixing document.write and DOM insertion
