issuses were fixed in this release:
MFSA 2005-56 Code execution through shared function objects
MFSA 2005-55 XHTML node spoofing
MFSA 2005-54 Javascript prompt origin spoofing
MFSA 2005-52 Same origin violation: frame calling top.focus()
MFSA 2005-51 The return of frame-injection spoofing
MFSA 2005-50 Possibly exploitable crash in InstallVersion.compareTo()
MFSA 2005-48 Same-origin violation with InstallTrigger callback
MFSA 2005-46 XBL scripts ran even when Javascript disabled
MFSA 2005-45 Content-generated event vulnerabilities
Support for Solaris SPARC and x86 is not available due to lack of a
precompiled binary at this point of time.
Firefox 1.0.6 is a stability update. We recommend that users upgrade
to this latest version.
Here's what's new in Firefox 1.0.6:
* Restore API compatibility for extensions and web applications
that did not work in Firefox 1.0.5.
Fix required for googlebot changes, New reports including a new
bidimentional map that shows traffic level in the whole year, unique
visitors for every month, better generation of graphviz graphs
including percentages in arcs, nodes for google, external links,
and no referere, 50% less memory used, Highlight color for weekend
changed to be more visible, most stats are now made by unique visits
and not by number of accesses, many bugs fixed, a real manual page.
around at either build-time or at run-time is:
USE_TOOLS+= perl # build-time
USE_TOOLS+= perl:run # run-time
Also remove some places where perl5/buildlink3.mk was being included
by a package Makefile, but all that the package wanted was the Perl
executable.
run-time dependency (DEPENDS) on a tool is to append a ":run" modifier
to the tool name, e.g.,
USE_TOOLS+= perl:run
Tools without modifiers or with an explicit ":build" modifier will
cause build dependencies (BUILD_DEPENDS) on those tools to be added.
This makes the notation a bit more compact.
Firefox 1.0.5 is a security update.
Fixed vulnerabilities are:
2005-56 Code execution through shared function objects
MFSA 2005-55 XHTML node spoofing
MFSA 2005-54 Javascript prompt origin spoofing
MFSA 2005-53 Standalone applications can run arbitrary code through the browser
MFSA 2005-52 Same origin violation: frame calling top.focus()
MFSA 2005-51 The return of frame-injection spoofing
MFSA 2005-50 Possibly exploitable crash in InstallVersion.compareTo()
MFSA 2005-49 Script injection from Firefox sidebar panel using data:
MFSA 2005-48 Same-origin violation with InstallTrigger callback
MFSA 2005-47 Code execution via "Set as Wallpaper"
MFSA 2005-46 XBL scripts ran even when Javascript disabled
MFSA 2005-45 Content-generated event vulnerabilities
Changes with mod_ssl 2.8.23 (30-Oct-2004 to 06-Jul-2005)
*) Ported to OpenSSL 0.9.8
*) Fixed connection timeout handling by calling the EAPI connection
close hook after (and not before) the B_OUT flag was set on the
underlying I/O buffer in order to prevent attempted buffer flushes
from blocking the connection.
*) Updated the ca-bundle.crt file from Mozilla's "certdata.txt"
(CVS revision 1.37).
*) Fix timeout handling in POST request processing by resetting
timeouts.
*) Fixed double-definition of OPENSSL_free under OpenSSL 0.9.6 by
fixing the version test in ssl_util_ssl.h
*) Adjusted all copyright messages to contain the new year 2005 ;)
- Tweak for Kwiki-HomePagePreference
- Allow the hub to be hooked.
- Socialtext changes
- Allow ; in addition to & in query strings
- Get rid of -M operators
- Make redirects RFC compliant
- Refactored themes
- empty links cause double page loads
- Refactors to get rid of hub connections
- eliminate use_class
- COmment support
- Kwid Formatter for Spork
- Also prints command usage from plugins.
- copyright 2005
- tweak space on usage()
- eliminate cleanup undef warning when doing 'kwiki -update'
this release fixes the following security issues:
MFSA 2005-56 Code execution through shared function objects
MFSA 2005-55 XHTML node spoofing
MFSA 2005-54 Javascript prompt origin spoofing
MFSA 2005-53 Standalone applications can run arbitrary code through the browser
MFSA 2005-52 Same origin violation: frame calling top.focus()
MFSA 2005-51 The return of frame-injection spoofing
MFSA 2005-50 Possibly exploitable crash in InstallVersion.compareTo()
MFSA 2005-49 Script injection from Firefox sidebar panel using data:
MFSA 2005-48 Same-origin violation with InstallTrigger callback
MFSA 2005-47 Code execution via "Set as Wallpaper"
MFSA 2005-46 XBL scripts ran even when Javascript disabled
MFSA 2005-45 Content-generated event vulnerabilities
changes:
-Update list of mime types
-Allow View Source for XML documents
-bugfixes
-translation updates
also allow to build against firefox, depending on the GECKO_PROVIDER
variable
Drivel 2.0.1 ("Tea and Health")
===============================
* Improvements:
- Add a FAQ section to the documentation (Todd)
* Fixes:
- Syntax fix for .desktop file (Jeremy)
- Allow usernames with more than fifteen characters (Jess)
- Fix default HTML highlighting state (Todd)
- Allow usernames with hyphens (Todd)
- Numerous UTF-8 fixes for Blogger, MovableType, and Atom (Todd)
- Fix placement of Refresh button in Recent Entries menu (Todd)
- Handle HTML in Blogger titles gracefully (Todd)
* Translations:
- Updated Spanish translation (Francisco Javier F. Serrador)
- Updated Czech translation (Miloslav Trmac).
Drivel 2.0 ("Psychoactive Kitty")
=================================
* Improvements since 1.2:
- Support for Atom, Blogger, MovableType, and Advogato weblogs
- Offline mode
- Fetch current music from Beep Media Player
- Shortcut key (F7) to enabled/disable spellcheck
- MIME support for draft entries
- Allow selection of spellchecking language
- Recent Entries menu to edit the previous fifteen posts
- Support LiveJournal security groups
- Ability to ping Technorati after journal updates
Drivel 1.3.91 ("Whoop it up")
=============================
* Improvements:
- Clarify the Blogger API wording (Todd).
- New artwork (Todd).
- Updated documentation (Todd).
* Fixes:
- Handle IPv6 proxy servers correctly (Todd).
- Respect the GConf key for proxy authentication (Todd).
* Translations:
- Updated Czech translation (Miloslav Trmac).
- Updated Canadian English translation (Adam Weinberger).
- Updated Swedish translation (Christian Rose).
- Added Bulgarian translation (Yavor Doganov).
- Updated German translation (Frank Arnold).
- Updated Spanish tranlation (Francisco Javier F. Serrador).
Drivel 1.3.90 (The "I'm out!" release)
=====================================
* Improvements:
- Support fetching, editing, and deleting recent MovableType entries (Todd).
- Build a Recent Entries menu for MovableType (Todd).
- Handle MovableType categories from all journals (Todd).
- Alphabetize list of journal types and categories (Todd).
- Option to ping Technorati after posting (Todd).
- New splash screen (Margot).
- Support LiveJournal security groups (Todd).
* Fixes:
- Shortcut key fixes (Todd).
* Translations:
- Updated Czech translation (Miloslav Trmac).
- Added Greek translation (Kostas Papadimas).
- Updated Spanish translation (Francisco Javier F. Serrador).
- Updated Canadian English translation (Adam Weinberger).
- Updated German translation (Frank Arnold).
Drivel 1.3.4 (The "Strawberry Shortcake!" release)
==================================================
* Improvements:
- Build a Recent Entries menu for Atom, Blogger, and LiveJournal journals
(Todd).
- Sync with latest libegg code (Todd).
- Support deleting entries for Atom and Blogger journals (todd).
* Fixes:
- Display categories for all MovableType journals, not just the default
(Todd).
- Desensitize buttons and menu items that don't apply to the current journal
(Todd).
- XML-RPC compatibility fixes (Todd).
- Remove support for Blogger titles, it was broken to begin with and caused
issues when editing old entries (Todd).
- Fix the inconsistent progress bar (Todd).
Drivel 1.3.3 (The "Trust me, the horsies won't mind" release)
=============================================================
* Improvements:
- Support XHTML 1.0 tags (Kurt).
- Build-system improvements (Todd).
- Support editing the more recent Advogato entry (Todd).
- Support editing the most recent Atom entry (Todd).
- Support Atom's new SSL authentication scheme (Todd).
- Default to the last journal each account posted to (Todd).
* Fixes:
- MovableType API fixes (Bryan).
- Fix a crash during poll creation (Jess).
- Fix a crash when editing entries via the History dialog (Jess).
- Remove the duplicate "http://" in the Insert Image dialog (Jess).
- Remove warning about non-undoable action in History dialog (Jess).
- Fix a handful of XML issues by using xmlReadMemory rather than
xmlParseMemory (Todd).
- Use UTC timestamps, should fix the Atom timezone issues (Todd).
* Translations:
- Update English (British) translation (David Lodge).
- Updated Dutch translation (Taco Witte).
- Updated Canadian English translation (Adam Weinberger).
- Added Kinyarwanda translation (Steve Murphy).
- Updated Spanish translation (Francisco Javier F. Serrador).
Drivel 1.3.2 (The "Tonik: with a K!" release)
=============================================
* Improvements:
- Allow the user to select the language of the spell-checking dictionary
(Isak).
- Support posting to Blogger's implementation of the Atom API (Todd).
* Fixes:
- Resolved hangs after login (Davyd).
- Disabled features in the UI that are not supported by the selected
journal system (Todd).
* Translations:
- Updated Dutch translation (Reinout van Schouwen).
- Updated German translation (Frank Arnold).
- Updated Canadian English translation (Adam Weinberger and
Alexander Winston).
- Updated Czech translation (Miloslav Trmac).
Drivel 1.3.1 (The "H'Okay" release)
===================================
* Improvements:
- Support opening drafts from the file manager (Todd).
- Make Drivel's use of the notification area HIG-compliant (Todd).
- Add Advogato posting support (Todd).
- Add support for Movable Type categories (Todd).
- Add --disable-mime-update and --disable-desktop-update configure
parameters, useful for binary packagers (Todd).
* Fixes:
- Display a custom icon for Drivel drafts (Todd).
- Publish Blogger posts (Todd).
- Support all of a user's blogger accounts, not just one (Todd).
- Correctly translate the Translators field in the About dialog (Isak).
* Translations:
- Updated Dutch translation (Reinout van Schouwen).
Drivel 1.3.0 (The "Another drunk conquistador" release)
=======================================================
* Improvements:
- Add support for Beep Media Player (Adam).
- Add an Offline mode (Todd).
- Add Movable Type posting support (Todd).
- Add Blogger posting support (Todd).
- The F7 key quickly toggles spell-check on and off (Todd).
- New account manager which can support multiple journal systems (Todd).
- The build system has moved from automake-1.4 to automake-1.7 (Todd).
* Fixes:
- Glade translation fixes (Davyd).
- Fix double-mnemonic in Format menu (Adam).
- Make menus translatable (Isak).
- Fix a crash when editing preferences (#151940) (Todd).
- Plug a memory leak when loading user pictures (Todd).
- Clarify auto-format tooltip (#151388) (Todd).
- Include date information in Drivel's draft format (Davyd).
- Update the RPM spec file to handle Scrollkeeper data (Todd).
- Plus some severe memory leaks in the UI creation code (Todd).
- Cleaned up lots of old, rotting code (Todd).
instead on perl>=5.8.0. Bump the PKGREVISIONs of the following packages
due to the possible perl dependency changes after the removal of
libperl:
audio/ices-mp3
databases/postgresql73-plperl
databases/postgresql74-plperl
textproc/eperl
www/ap-perl
for new apache2/modperl2.0. This will close PR #30302.
Changes says:
Version 3.10
1. Added Apache2::RequestIO, which is necessary for mp2 interoperability.
Version 3.09
1. Fixed tabindex="0" when using CGI to create forms without a prior start_html
2. Removed warning about non-numeric MOD_PERL_API_VERSION.
Version 3.08
1. update support for mod_perl 2.0. versions prior to
mod_perl 1.999_22 (2.0.0-RC5) are no longer supported.
Version 3.07
1. Fixed typo in mod_perl detection.
Version 3.06
1. Fixed bare call to script() in start_html
2. Moved Fh::DESTROY out of autoloaded functions so as to avoid
clobbering $@ when CGI functions are executed in an eval{}
context.
3. mod_perl 2.0 version detection patch in CGI::Cookie provided by
Allen Day.
4. autoEscape() flag is now respected when generating extra
attributes.
5. Tests for *tag start/end generation from Shlomi Fish.
6. Support for can() method provided by Ron Savage.
7. Fix for lang='' when outputting XHTML.
8. Added support for chunked transfer encoding, as suggested by
Hakan Ardo
9. Fixed clobbering of row and column headers in tableized radio
and checkbox groups, as reported by Nicolas Thierry-Mieg.
10. <Label> tags are now associated with form elements, as suggested
by accessibility guidelines.
11. The <?xml> directive produced by start_html is now turned off by
default and the charset is specified in a <meta> directive. Apparently
IE6 (and maybe some versions of Opera) were getting confused by this.
12. Support for tab indexes.
13. Retired the HTML docs. The POD docs are now primary documentation.
14. CGI::Carp now correctly detects and handles Apache::Dispatch.
15. CGI::Util::utf8_chr now correctly sets the UTF8 flag on 5.006 or
higher perls (fix courtesy Slaven Rezic).
http://svn.edgewall.com/repos/trac/tags/trac-0.8.4
Upstream changelog:
* Fixed file upload vulnerability. Trac could be tricked into
uploading files outside the environment directory. All users
are recommended to upgrade. Vulnerability found by the Hardened-PHP
project.
Thanks adrianp@NetBSD.org for the heads-up.
dillo-0.8.5 [Jun 15, 2005]
- * Set "file:" to work as URI for current directory.
Patch: Diego Sáenz
- * Added a "small" dillorc option for panel size (medium without labels).
Patch: Eugeniy, Jorge Arellano
- * Fixed the shell escaping code in the ftp plugin.
* Added some checks for sane values in html.c.
* Added URL filtering to the ftp and downloads dpis to avoid SMTP hacks.
* Fixed the file dpi to react to the DpiBye command.
Patches: Jorge Arellano
