commit 1aecdffaa0db7bbf85bc0aae9043e9437b25c30d
Author: Daniel Stone <daniel@fooishbar.org>
Date: Thu Apr 17 00:52:29 2008 +0300
Don't scan paths which make NO SENSE WHATSOEVER TO SCAN
Hey, I wonder if we have XKB files in our directory! I wonder if we
haven't bothered with a structure, and let's try to open a file called
'misc' in someone's home directory! What a surprise, it's not a valid
XKB file! Let's fail miserably!
SURPRISINGLY, THIS IS NOT USEFUL BEHAVIOUR.
commit a3a05fd489a9a35942a4419c537634e796dbebd1
Author: Daniel Stone <daniel@fooishbar.org>
Date: Thu Apr 17 00:50:07 2008 +0300
xkbcomp: Take a device ID argument
Allows the user to set maps (or whatever) on arbitrary devices.
Pkgsrc changes:
+ Support user-destdir installation.
+ Document the way that pkgsrc handles the freetds documentation.
+ Use GENERATE_PLIST instead of creating a .PLIST.doc.
+ Remove patch-ac and patch-ad due to reports of success compiling
FreeTDS on Mac OS X without changes on the freetds@ mailing list.
Package changes:
- libtds.* has been removed. Its objects are now linked directly
into the other client libraries.
- support TLSv1 sessions to MSSQL servers
- fixed timeout handling
- added protocol version discovery
- reduced network bandwidth use on Linux and -BSD
- fixed conversion NUMERIC->NUMERIC changing precision/scale
- added named instance support (mssql2k)
- many other code improvements and bug fixes
- improved pool server
- ODBC:
- cursors (mssql)
- fixed database setting
- fixed SQLGetData result
- fixed compute handling in ODBC
- paramset support
All:
- added a make rule to automatically create the directory
./incs/
Libfind:
- This is the final step to make libfind a "real" library
- find.h walk.h fetchdir.h idcache.h moved to include/schily/
- A bug in libfind was fixed that causes
find . -size -20k -ls
to check for files smaller than 20480 Blocks instead of
looking for files smaller than 2084 characters.
Libscg:
- Allow libscg to correctly compile in 64 bit mode on amd64 Solaris
platforms
Rscsi:
- Minimal rscsi man page added
Mkisofs (Maintained/enhanced by Jörg Schilling since 1997, originated by Eric Youngdale):
- Some code in main() has been reordered to allow mkisofs to recognize that
the installation at /opt/schily/lib/siconv is missing even if the --ethershare
option has ben used. Before, mkisofs did dump core in this case, now it
mentions to install libsiconv.
- mkisofs again supports -no-bak. This option has been
removed by accident with cdrtools-2.01.01a22
- mkisofs again auto-adds a slash to the left part of
a dir=orig/ graft point spec if the right side is a
directory. The problem has been introduced ~ one year
ago when cleaning up buggy old code.
- API Changes:
- Fixed CanCreate so it returns false for non-writable TIFF-based files
- Fixed bug introduced in 7.18 which caused "Error parsing XMP" warning when
deleting all XMP and writing new XMP tags in the same step
- Fixed bug where IFD0 could be deleted when writing JPEG with a bad IFD1
- Fixed problem extracting some writable directories as a block
- Fixed bug which could cause "Not an ARRAY" error when reading PDF files
accesses the database directly: instead, it uses mtn annotate. Also,
some compile fixes for "various systems" (says the ChangeLog).
While here, change the distfile to the one without the included
lablgtk, as we don't use it. Also, install the style example
into ${EGDIR}.
Bug fixes:
* MAT: Provide a correct error report when the Pixels limit has been
exceeded.
* RPM Spec file: Fixed naming of NEWS file. Use included libltdl
(--with-included-ltdl option) in order to avoid possible issues with
system libltdl.
* GraphicsMagick-config script should now output correct dependency
information for --libs when libltdl is needed.
* GraphicsMagick++-config no longer depends on GraphicsMagick-config to
be in the executable search path.
Performance improvments:
* Module loading and execution performance are improved considerably
for the modules build. On some systems, the modules build is
considerably faster than the static or shared builds.
Feature improvements:
* Updated to libtool 1.2.4.
not have time to include it here (see ChangeLog).
Significant pkgsrc-related changes:
- ffmpeg plugin now builds (see new SUBST_* declarations). Use
ffmpeg-devel instead of ffmpeg.
- DESTDIR support
- GNU TLS option (enabled by default, evidently used by XML parser (?))
- Include graphics/gd, as its dependencies completely overlap and it
doesn't take too long to build.
- Add x11/libXi to get Xinput functionality.
- Yet another header patch (patch-am)
- TODO file (place reading it on your TODO list today!)
Next up: wm/metisse!
Calendar Application version H3 (2.1.8).
This is a security release that closes an XSS exploit in the add event
screen. All users are encouraged to upgrade to this version.
* Bugzilla administrators were not being correctly notified about new releases. (Bug 414726)
* There could be extra whitespace in email subject lines. (Bug 411544)
* The priority, severity, OS, and platform fields were always required by the Bug.create WebService function, even if they had defaults specified. (Bug 384009)
* Better threading of bugmail in some email clients. (Bug 376453)
* There were many fixes to the Inbound Email Interface (email_in.pl). (Bug 92274, Bug 377025, Bug 412943, Bug 413672, and Bug 431721)
* checksetup.pl now handles UTF-8 conversion more reliably during upgrades. (Bug 374951)
* Comments written in CJK languages are now correctly word-wrapped. (Bug 388723)
* All emails will now be sent in the correct language, when the user has chosen a language for emails. (Bug 405946)
* On Windows, temporary files created when uploading attachments are now correctly deleted when the upload is complete. (Bug 414002)
* checksetup.pl now prints correct installation instructions for Windows users using Perl 5.10. (Bug 414430)
3.0.3
* mod_perl no longer compiles Bugzilla's code for each Apache process individually. It now compiles code only once and shares it among each Apache process. This greatly improves performance and highly decreases the memory footprint. (Bug 398241)
* You can now search for '---' (without quotes) in versions and milestones. (Bug 362436)
* Bugzilla should no longer break lines unnecessarily in email subjects. This was causing trouble with some email clients. (Bug 374424)
* If you had selected "I'm added to or removed from this capacity" option for the "CC" role in your email preferences, you wouldn't get mail when more than one person was added to the CC list at once. (Bug 394796)
* Deleting a user account no longer deletes whines from another user who has the deleted account as addressee. The schedule is simply removed, but the whine itself is left intact. (Bug 395924)
* contrib/merge-users.pl now correctly merges all required fields when merging two user accounts. (Bug 400160)
* Bugzilla no longer requires Apache::DBI to run under mod_perl. It caused troubles such as lost connections with the DB and didn't give any important performance gain. (Bug 408766)
Security Fixes:
Unauthorized Bug Change
Cross-Site Scripting
Account Impersonation (Minor)
Class: Cross-Site Scripting
Versions: 2.17.2 and higher
Description: When using the "Format for Printing" view of a bug (or
the "Long Format" of a bug list, which is the same thing),
there was a cross-site scripting hole--arbitrary text
from a particular URL parameter could be injected into the
page without filtering.
especially critical if aalib isn't actually installed on the building system!
Fixes builds of Gimp plug-ins where PKG_DEFAULT_OPTIONS+=-aalib
XXX There are a few other options here that should get the same treatment.
