Commit graph

18264 commits

Author SHA1 Message Date
adam
ba1859d853 py-soupsieve: added version 1.6.1
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4.
It aims to provide selecting, matching, and filtering using modern CSS
selectors. Soup Sieve currently provides selectors from the CSS level 1
specifications up through the latest CSS level 4 drafts (though some are not
yet implemented).

Soup Sieve was written with the intent to replace Beautiful Soup's builtin
select feature, and as of Beautiful Soup version 4.7.0, it now is. Soup Sieve
can also be imported in order to use its API directly for more controlled,
specialized parsing.

Soup Sieve has implemented most of the CSS selectors up through the level 4
drafts, though there are a number that don't make sense in a non-browser
environment. Selectors that cannot provide meaningful functionality simply do
not match anything.
2019-01-02 10:34:20 +00:00
adam
020d3b5153 py-aiohttp: updated to 3.5.1
3.5.1
- Fix a regression about ClientSession._requote_redirect_url modification in debug
  mode.
2018-12-31 11:19:16 +00:00
joerg
c8d5585bb2 py-django-filter dropped Python 2.x support. 2018-12-27 16:05:06 +00:00
joerg
fbe56ec4cb Needs py-test-runner. 2018-12-27 16:04:54 +00:00
roy
80d2fce977 regen 2018-12-23 22:23:09 +00:00
roy
1d01d6bb20 Wups, quickly revert part of a mistaken commit. 2018-12-23 22:22:47 +00:00
roy
65d5cedda9 Work with a bigger register for aarch64. 2018-12-23 22:18:14 +00:00
gutteridge
c759a3b93d firefox: fix .mk file inclusion order issue
bsd.prefs.mk was being included after dependent variables it provides
were referenced, which meant PYTHON_VERSION_DEFAULT wasn't actually
being checked. (No revision bump, because this didn't prevent anything
from building, it's relevant only to those who customize pkgsrc build
variables.)

OK maya@
2018-12-23 01:11:26 +00:00
adam
326ea5abd7 py-bottle: updated to 0.12.16
0.12.16:
Bug fixes.
2018-12-22 22:48:35 +00:00
adam
dbbaa46ca0 py-aiohttp: updated to 3.5.0
3.5.0 (2018-12-22)

Features

The library type annotations are checked in strict mode now.
Add support for setting cookies for individual request
Application.add_domain implementation
The default app in the request returned by test_utils.make_mocked_request can now have objects assigned to it and retrieved using the [] operator.
Make request.url accessible when transport is closed.
Add zlib_executor_size argument to Response constructor to allow compression to run in a background executor to avoid blocking the main thread and potentially triggering health check failures.
Enable users to set ClientTimeout in aiohttp.request
Don’t raise a warning if NETRC environment variable is not set and ~/.netrc file doesn’t exist.
Add default logging handler to web.run_app
If the Application.debug flag is set and the default logger aiohttp.access is used, access logs will now be output using a stderr StreamHandler if no handlers are attached. Furthermore, if the default logger has no log level set, the log level will be set to DEBUG.
Add method argument to session.ws_connect().
Sometimes server API requires a different HTTP method for WebSocket connection establishment.
For example, Docker exec needs POST.
Create a task per request handling.


Bugfixes

Enable passing access_log_class via handler_args
Return empty bytes with end-of-chunk marker in empty stream reader.
Accept CIMultiDictProxy instances for headers argument in web.Response constructor.
Don’t uppercase HTTP method in parser
Make method match regexp RFC-7230 compliant
Add app.pre_frozen state to properly handle startup signals in sub-applications.
Enhanced parsing and validation of helpers.BasicAuth.decode.
Change imports from collections module in preparation for 3.8.
Ensure Host header is added first to ClientRequest to better replicate browser
Fix forward compatibility with Python 3.8: importing ABCs directly from the collections module will not be supported anymore.
Keep the query string by normalize_path_middleware.
Fix missing parameter raise_for_status for aiohttp.request()
Bracket IPv6 addresses in the HOST header
Fix default message for server ping and pong frames.
Fix tests/test_connector.py typo and tests/autobahn/server.py duplicate loop def.
Fix false-negative indicator end_of_HTTP_chunk in StreamReader.readchunk function
Release HTTP response before raising status exception
Fix task cancellation when sendfile() syscall is used by static file handling.
Fix stack trace for asyncio.TimeoutError which was not logged, when it is caught in the handler.


Improved Documentation

Improve documentation of Application.make_handler parameters.
Fix BaseRequest.raw_headers doc.
Fix typo in TypeError exception reason in web.Application._handle
Make server access log format placeholder %b documentation reflect behavior and docstring.
Deprecations and Removals
Deprecate modification of session.requote_redirect_url
Deprecate stream.unread_data()
Deprecated use of boolean in resp.enable_compression()
Encourage creation of aiohttp public objects inside a coroutine
Drop dead Connection.detach() and Connection.writer. Both methods were broken for more than 2 years.
Deprecate app.loop, request.loop, client.loop and connector.loop properties.
Deprecate explicit debug argument. Use asyncio debug mode instead.
Deprecate body parameter in HTTPException (and derived classes) constructor.
Deprecate bare connector close, use async with connector: and await connector.close() instead.
Deprecate obsolete read_timeout and conn_timeout in ClientSession constructor.
2018-12-22 22:45:47 +00:00
taca
c6533253c6 www/py-websocket-client: fix ALTERNATIVES file
Fix ALTERNATIVES file syntax.

Bump PKGREVISION.
2018-12-22 17:32:26 +00:00
taca
b5a95e854c www/contao35: update to 3.5.38
Version 3.5.38 (2018-12-21)
---------------------------

### Fixed
Correctly check the permission to move child records as non-admin user.
2018-12-22 11:47:33 +00:00
adam
d56ed3660a py-autobahn: updated to 18.12.1
18.12.1
fix: return the wrapped function from component decorators
new: add proxy= support for Component transports
fix: Ticket1077 stop start
fix: cleanup cancel handling
2018-12-22 09:36:16 +00:00
adam
5cc0ae9112 py-flask-admin: updated to 1.5.3
v1.5.3:
Fixed XSS vulnerability
Support nested categories in the navbar menu
SQLAlchemy
- sort on multiple columns with column_default_sort
- sort on related models in column_sortable_list
- fix: inline model forms can now also be used for models with multiple primary keys
- support for using mapped column_property
Upgrade Leaflet and Leaflet.draw plugins, used for geoalchemy integration
Specify minimum_input_length for ajax widget
Peewee: support composite keys
MongoEngine: when searching/filtering the input is now regarded as case-insensitive by default
FileAdmin
- handle special characters in filename
- fix a bug with listing directories on Windows
- avoid raising an exception when unknown sort parameter is encountered
WTForms 3 support
2018-12-22 09:30:10 +00:00
adam
a9e7b7d1b8 py-djangocms-link: updated to 2.3.1
2.3.1:
Fixes an issue when cms_page is not available
2018-12-22 09:16:33 +00:00
adam
7d6a90c253 py-flask-restful: updated to 0.3.7
Version 0.3.7
Fix error handling in python3
Fix arguments with type=list
Return code for parse_args() is now configurable
Removed flask_restful.paging module.
Removed misleading help_on_404 functionality
JSON keys are no longer sorted by default in debug mode in python3
Various small fixes and updates to documentation
2018-12-21 21:06:30 +00:00
wen
97f98b5a3a Update to 3.2
Upstream changes:
3.2
 - Windows: Update libcurl to 7.59.0
 - Update curl_symbols dataset to 7.59.0
 - Fix an IDN unit test (malmテカ.se has messed up their SSL cert)
 - Add unit test for multi_fdset
 - Add backport of trimws for R 3.1
2018-12-21 13:04:20 +00:00
jnemeth
4b29e733f3 sort 2018-12-20 07:14:10 +00:00
bsiegert
dcd9b75b1e Revbump all Go packages after go111 update. 2018-12-19 15:46:59 +00:00
mrg
ef64444f7a update to bozohttpd 20181215. changes include:
o  fix .htpasswd bypass for authenticated users.  reported by JP,
     from leot@netbsd.org
  o  avoid possible null dereference when receiving a big request that
     timeout.  reported by maya@netbsd.org, from leot@netbsd.org
  o  fix handling of -T option, from leot@netbsd.org
  o  cleanups and portability improvements, from maya@netbsd.org
  o  change directory indexing to use html tables, from
     rajeev_v_pillai@yahoo.com
2018-12-19 12:52:29 +00:00
adam
5881c1dcef py-pylint-django: updated to 2.0.5
Version 2.0.5:
Bumping the version number because there's been a mix-up between
GitHub tags and the versions pushed to PyPI for 2.0.3 and 2.0.4.
2018-12-18 11:50:34 +00:00
jperkin
dee4865fce nginx: Re-add dropped naxsi checksum. 2018-12-17 22:11:46 +00:00
taca
5e8d5e8184 www/php-basercms: update to 3.0.16
Various fixes and improvement from 3.0.9 including some security fixes.

https://basercms.net/release/3_0_10
https://basercms.net/release/3_0_11
	* fixes CSS and CSRF.

https://basercms.net/release/3_0_12
https://basercms.net/release/3_0_13
https://basercms.net/release/3_0_14
https://basercms.net/release/3_0_15

	* fixes SQL injection in searching within a website.
	* fixes arbitary file removal with mail form.
	* fixes code injection.

https://basercms.net/release/3_0_16
2018-12-17 15:56:32 +00:00
taca
1f7f3d579b www/ruby-capybara: update to 3.12.0
# Version 3.12.0
Release date: 2018-11-28

### Added

* Support Ruby 2.6 endless range in Result#[] and query `:between` option
* Pre-registered headless firefox driver :selenium_headless [Andrew Havens]
* Selenium driver now defaults to clearing `sessionStorage` and `localStorage`. To disable pass `clear_local_storage: false` and/or `clear_session_storage: false` when creating Capybara::Selenium::Driver instance in your driver registration

### Fixed

* Raise error if only :x or :y are passed as an offset to click methods

### Removed

* Support for RSpec < 3.5

# Version 3.11.1
Release date: 2018-11-16

###Fixed

* Fixed :link_or_button XPath generation when it has had an expression filter added

# Version 3.11.0
Release date: 2018-11-14

### Added

* Ability for node filters to set detailed error messages
* `Capybara::HTML` Will use `nokogumbo` for HTML parsing if installed
* `Selector#locator_filter` added to allow for dynamic locator in selectors

### Fixed

* Node filters are evaluated in the context of the Selector they are used in to ensure the correct options are used

# Version 3.10.1
Release date: 2018-11-03

### Fixed

* Fix `aria-label` and `test_id` matching for `link_or_button` selector type - Issue #2125
* Fixed crash in element path creation for matcher failure messages - Issue #2120

# Version 3.10.0
Release date: 2018-10-23

### Added

* :class filter can now check for class names starting with !
* Selector `xpath`/`css` expression definitions will get filter names from block parameters if not explicitly provided
* `any_of_selectors` assertions and matchers to complement `all_of_selectors` and `none_of_selectors`

### Fixed

* Selector `css` expression definiton declared filters now work again
* Cleaned up warnings [Yuji Yaginuma]
* Workaround installation of rspec matcher proxies under jruby by reverting to the old solution not using prepend, so jruby bugs are not hit - Issue #2115

# Version 3.9.0
Release date: 2018-10-03

### Added

* Selenium with Chrome removes all cookies at session reset instead of just cookies from current domain if possible
* Support for Regexp for system :id and :class filters where possible
* `using_session` now accepts a session object as well as the name of the session for users who  manually manage sessions
* The `:field` selector will now find `type = "hidden"` fields if the `type: "hidden"` filter option is provided
2018-12-17 15:12:50 +00:00
taca
f2a174fb73 www/heel: update to 3.2.1
# Changelog
## Version 3.2.1 - 2018-09-27
* fix pume dependency - it was too constrainted
2018-12-17 15:11:47 +00:00
adam
9ce710c560 py-flask-user: remove DIST_SUBDIR 2018-12-16 18:24:08 +00:00
adam
698df918c8 py-daphne: updated to 2.2.4
2.2.4:
* No longer listens on port 8000 when a file descriptor is provided with --fixed
* Fixed a memory leak with WebSockets
2018-12-16 18:22:59 +00:00
adam
213e3529ac py-flask-user: updated to 1.0.1.5
v1.0.1.5 - Removed callbacks/auth0.
v1.0.1.4 - Fixed calls to get_primary_user_email_object().
v1.0.1.3 - Changed custom form class attribute namess from something like self.register_form to something like self.RegisterFormClass
v1.0.1.2 - Use app.permanent_session_lifetime to limit user session lifetime.
v1.0.1.1 - Alpha release
2018-12-16 18:20:57 +00:00
adam
63a76cb0b5 py-djangocms-column: added version 1.9.0
A Multi Column Plugin for django CMS.
2018-12-16 14:06:51 +00:00
adam
bf9cd8e786 py-djangocms-link: added version 2.3.0
django CMS Link is a plugin for django CMS that allows you to add links on your
site.

This plugin supports child plugins. If you add an other plugin as a child it
will take this content instead of the link name as the content of the link.
2018-12-16 14:06:09 +00:00
adam
bff4c6d800 py-djangocms-icon: added version 1.2.0
django CMS Icon is a plugin for django CMS that allows you to insert an icon
(font or svg) into your project.
2018-12-16 14:05:36 +00:00
adam
c5cf240aea py-djangocms-audio: added version 1.1.0
django CMS Audio is a set of plugins for django CMS that allow you to publish
audio files on your site (using an HTML5 player by default, but you can
override this in your own templates if required).

It uses files managed by Django Filer. The plugins allow you to select a single
file or an entire folder of files.
2018-12-16 14:04:55 +00:00
ryoon
09113d647c Update to15.0.0
Changelog:
Changes

Nextcloud 15 introduces social networking, next-gen 2-factor authentication and innovative collaborative document editing abilities. This release also adds a new design and grid view, workflow features and 2-3x faster loading performance.

As this is a major release, the changelog is very long. Find an overview of what has been improved in this series of blog posts:

    Avoid logging of "Partial search results returned: Sizelimit exceeded..." (server#12292)
    Enable sorting in file picker (server#12350)
    15.0.0 Beta 2 (server#12355)
    Fix the warning appearing in the admin section when mail_smtpmode is not configured (server#12401)
    Prefix icon variables with app name to avoid conflicts (server#12421)
    Shorten index name of calendar changes table (server#12447)
    Fixes dav share issue with owner (server#12458)
    Fix string doctype casing (server#12466)
    Show thumbnail on rename (server#12467)
    Remove conflicting multiselect (server#12468)
    Actually return the user when creating version dav nodes (server#12472)
    Rollback to default list view (server#12474)
    Add welcome bot (server#12476)
    Fix navigation layout for items that are added on a re-render (server#12481)
    Fix login loader position and theming support (server#12483)
    Fix loader colours for better visibility (server#12484)
    Format Nextcloud Talk clients sessions. (server#12485)
    Remove unused svg api route (server#12487)
    Only use width and opacity for transition (server#12489)
    Fix share link password input (server#12491)
    Return the correct value when trying to get a non existing item from cache by id (server#12494)
    Fix login primary colour and feedback (server#12495)
    Fix revert icon position on theming settings (server#12496)
    Forward object not found error in swift as dav 404 (server#12500)
    Make number of file list entries depending on the width for grid view (server#12515)
    Fix loading of files external templates file (server#12517)
    Fix loading of .woff2 files in .htaccess (server#12518)
    Fix updatenotifications display, dependencies and csp (server#12525)
    Allow to hide download option for folders shared by link (server#12531)
    Fix redirect page design details (server#12539)
    Bearer tokens are app token (server#12543)
    Handle permission in update of share better (server#12544)
    Respect the disabled setting for lost_password_link (server#12552)
    Allow empty string in get absolute url (server#12553)
    Do not switch to root folder if filelist is already shown (server#12554)
    Apply border to primary button if on log in page (and not in a dark container) or if in header (server#12558)
    Better header navigation display (server#12559)
    Do not show tab headers marked as hidden (server#12570)
    Make connectivity check domains configurable (server#12571)
    Fix rendering of the sidebar in Files app (server#12577)
    Fix navigation more menu background for dark theme (server#12580)
    15.0.0 RC 1 (server#12581)
    Do not clear new user form on failure (server#12587)
    Add explanatory text to admin twofactor settings (server#12589)
    Fix Typo in Original English String and All Translations (server#12615)
    Extend anonymous options to work on every dav url (server#12638)
    Fix count on string (server#12683)
    Add interface to allow storages from opting out of encryption (server#12692)
    Make acceptance tests for comments more robust (server#12696)
    Add acceptance tests for sharing files and folders with another user (server#12700)
    I changed the width of the srollbar to make it a bit bigger (server#12712)
    Open the updater via a POST form submit instead of eval the JS code d... (server#12713)
    Fix folder path containing leading slash when getting mount root by id (server#12714)
    Add capabilities for multiple share links (server#12718)
    Remove old button to submit the apppassword login (server#12723)
    Fix versions sidebar issues (server#12730)
    Don't require Same Site Cookies on accessibility app assets (server#12731)
    Date title to linkshare (server#12733)
    Add pipe mode for sendmail (server#12736)
    Set Referrer-Policy also in addSecurityHeaders() (server#12737)
    Polishing fixes (server#12740)
    Fix the loader position and the focus state on the login button (server#12741)
    Add check for missing .woff2 rule in Nginx via setup check (server#12742)
    Update compatible versions for cloud federation api (server#12744)
    Fix cannot set 0 as value on files_external through OCC command (server#12746)
    15.0.0 RC 2 (server#12755)
    Parse activity when a user self-unshares a file (server#12756)
    Polishing of various modal dialogs (server#12784)
    Fix activatable/deactivatable 2fa provider interface typos (server#12805)
    Only run the AnonymousOptionsPlugion on Anonymous requests (server#12811)
    Fix the system address book (server#12816)
    PHP module is named mbstring (server#12825)
    Unshare from mail activity is missing (server#12828)
    Fix layout of "i" in admin settings of federated sharing (server#12829)
    PHP 7.0 is end of life (server#12830)
    Do not update child all child shares on group share update (server#12833)
    Validate all rich objects (server#12836)
    Add setup check for recommended PHP modules (i.e. Imagick, intl) (server#12837)
    15.0.0 RC 3 (server#12847)
    Make a button out of 'What's new' so it's obvious it can be clicked on (server#12848)
    Fix missing click event on update button (server#12849)
    Add setup check for pending bigint conversion (server#12853)
    No user enumeration on DAV if disabled (server#12856)
    Only execute query in propagateChange once (server#12861)
    Fix password confirmation lib for ie11 (server#12863)
    Log and continue on Dav reader failure (repair uid) (server#12867)
    Emit write update only once on touch (server#12868)
    Do not show general warning on free space error (server#12880)
    Set 3rdparty to pr187 (server#12882)
    Fix logo path in non-themed instance (server#12908)
    Fix unread comment icon not shown for the sharee (server#12913)
    Bump to 15.0.0 final (server#12959)
    Bump lukasreschke/id3parser from 0.0.1 to 0.0.3 (3rdparty#118)
    Bump stecman/symfony-console-completion from 0.7.0 to 0.8.0 (3rdparty#119)
    Bump guzzlehttp/guzzle from 6.3.0 to 6.3.3 (3rdparty#120)
    Bump leafo/scssphp from 0.7.6 to 0.7.7 (3rdparty#137)
    Bump synfony to 3.4.15 (3rdparty#146)
    Bump microsoft/azure-storage-blob from 1.1.0 to 1.2.0 (3rdparty#151)
    Bump swiftmailer/swiftmailer from 6.0.2 to 6.1.3 (3rdparty#155)
    Bump symfony to 3.4.16 (3rdparty#161)
    Bump symfony 3.4.17 (3rdparty#168)
    Remove random_compat lib (3rdparty#170)
    Bump sabre/dav from 3.2.2 to 3.2.3 (3rdparty#176)
    Manually patch PHP-Doc of VObject Splitter (3rdparty#185)
    Fix named parameter detection on SQLite (3rdparty#187)
    Update version on master (activity#291)
    Fix scrolling detection on activity 14 (activity#293)
    Make the object information available on emails (activity#299)
    Add the mimetype to the preview arrays (activity#300)
    Move to compiled handlebrs (activity#301)
    Remove unneeded -ms-filter (was only needed for IE8) (activity#302)
    Use the query builder and cast the values (activity#304)
    Add icon to files sidebar tab (activity#305)
    Fix JS unit tests after handlebars (activity#307)
    Shorten tab label 'Activities' to 'Activity' (activity#308)
    Add a intermediate migration to fix old installations (activity#310)
    Correctly restrict affected users when using command to send emails (activity#311)
    Autocomplete for email command (activity#314)
    Use the substract function instead of manual math (activity#315)
    Use the full path instead of the file name in HTML emails too (activity#316)
    Update stable15 target versions (activity#319)
    Create activity when user unshares a file themselves (activity#323)
    Validate rich objects before using (activity#324)
    Remove unneeded CSS rule for IE 11 (files_pdfviewer#100)
    Update stable15 target versions (files_pdfviewer#109)
    Update version on master (files_pdfviewer#94)
    Fix embedded viewer with new server layout on IE 11 (files_pdfviewer#95)
    Hide footer in public share page (files_pdfviewer#99)
    Update version on master (files_texteditor#112)
    Update info.xml (files_texteditor#116)
    Improve code blocks in markdown rendering (files_texteditor#120)
    Update stable15 target versions (files_texteditor#123)
    Update version on master (files_videoplayer#61)
    Fix videoplayback on NC15 (files_videoplayer#68)
    Update stable15 target versions (files_videoplayer#69)
    Don't Assume Document Root (firstrunwizard#78)
    Update version on master (firstrunwizard#81)
    Remove hardcoded background-size (firstrunwizard#84)
    Design detail and accessibility fixes (firstrunwizard#85)
    Update stable15 target versions (firstrunwizard#89)
    Add HEIC/HEIF support to the gallery (gallery#464)
    Update version on master (gallery#468)
    Move to compiled handlebars (gallery#481)
    Remove sharing height limit, since it is overwriting the server defaults (gallery#482)
    Hide button if download links are hidden for link shares (gallery#484)
    Update stable15 target versions (gallery#485)
    Update version on master (logreader#74)
    Update version on master (nextcloud_announcements#33)
    Update version on master (notifications#159)
    Update config and babel for ie11 (notifications#160)
    Add vue build test (notifications#162)
    Update all NPM (notifications#170)
    Bump @babel/core from 7.0.0 to 7.0.1 (notifications#171)
    Bump vue-loader from 15.4.1 to 15.4.2 (notifications#172)
    Bump webpack from 4.18.0 to 4.19.0 (notifications#173)
    Update NPM packages (notifications#176)
    Bump webpack from 4.19.0 to 4.19.1 (notifications#177)
    Bump webpack from 4.19.1 to 4.20.2 (notifications#179)
    Bump babel-loader from 8.0.2 to 8.0.4 (notifications#180)
    Update all NPM (notifications#184)
    Switch to compiled handlebars (notifications#186)
    Bump webpack from 4.20.2 to 4.21.0 (notifications#187)
    Add .l10nignore files for compiled assets (notifications#188)
    Bump webpack from 4.21.0 to 4.22.0 (notifications#189)
    Use the rich message when available and instead of trim overlay with a shadow (notifications#190)
    Bump css-loader from 1.0.0 to 1.0.1 (notifications#194)
    Bump webpack from 4.22.0 to 4.24.0 (notifications#195)
    Bump webpack from 4.24.0 to 4.25.1 (notifications#196)
    Bump @babel/preset-env from 7.1.0 to 7.1.5 (notifications#197)
    Bump @babel/core from 7.1.2 to 7.1.6 (notifications#199)
    Bump @babel/preset-env from 7.1.5 to 7.1.6 (notifications#200)
    Bump webpack from 4.25.1 to 4.26.0 (notifications#203)
    Update stable15 target versions (notifications#204)
    Add icon to empty content message (notifications#210)
    Update version on master (password_policy#70)
    Update stable15 target versions (password_policy#74)
    Adds tooltip to make people aware of API JSON format (serverinfo#129)
    Update version on master (serverinfo#131)
    Update stable15 target versions (serverinfo#134)
    Checking for valid CPU average values (serverinfo#97)
    Update version on master (survey_client#81)
    Properly escape column name in "createFunction" call (survey_client#84)
    Do not call invalid function (survey_client#86)
    Update stable15 target versions (survey_client#87)
2018-12-16 13:09:57 +00:00
ryoon
69c0b96fdf Update to 60.4.0
* Sync with firefox60-60.4.0
2018-12-16 07:40:43 +00:00
ryoon
6ec9a5eb29 Update to 60.4.0
Changelog:
New
  Updated list of currency codes to include Unidad Previsional (UYW) (Bug 1499028)

Fixed
  Various security fixes

Security fixes:
#CVE-2018-17466: Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
#CVE-2018-18492: Use-after-free with select element
#CVE-2018-18493: Buffer overflow in accelerated 2D canvas with Skia
#CVE-2018-18494: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
#CVE-2018-18498: Integer overflow when calculating buffer sizes for images
#CVE-2018-12405: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
2018-12-16 07:38:47 +00:00
taca
e3754817bd www/php-concrete5: restrict PHP version
Concrete5 version 7 (5.7.5.13) dose not support PHP 7.2 and later.
2018-12-16 02:59:43 +00:00
adam
35002ad30b nginx: updated to 1.14.2
Changes with nginx 1.14.2
*) Bugfix: nginx could not be built by gcc 8.1.
*) Bugfix: nginx could not be built on Fedora 28 Linux.
*) Bugfix: in handling of client addresses when using unix domain listen
   sockets to work with datagrams on Linux.
*) Change: the logging level of the "http request", "https proxy
   request", "unsupported protocol", "version too low", "no suitable key
   share", and "no suitable signature algorithm" SSL errors has been
   lowered from "crit" to "info".
*) Bugfix: when using OpenSSL 1.1.0 or newer it was not possible to
   switch off "ssl_prefer_server_ciphers" in a virtual server if it was
   switched on in the default server.
*) Bugfix: nginx could not be built with LibreSSL 2.8.0.
*) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL
   1.1.1, the TLS 1.3 protocol was always enabled.
*) Bugfix: sending a disk-buffered request body to a gRPC backend might
   fail.
*) Bugfix: connections with some gRPC backends might not be cached when
   using the "keepalive" directive.
*) Bugfix: a segmentation fault might occur in a worker process if the
   ngx_http_mp4_module was used on 32-bit platforms.
2018-12-15 23:34:27 +00:00
adam
c656f8a1a2 nginx-devel: updated to 1.15.7
Changes with nginx 1.15.7:
*) Feature: the "proxy_requests" directive in the stream module.
*) Feature: the "delay" parameter of the "limit_req" directive.
*) Bugfix: memory leak on errors during reconfiguration.
*) Bugfix: in the $upstream_response_time, $upstream_connect_time, and
   $upstream_header_time variables.
*) Bugfix: a segmentation fault might occur in a worker process if the
   ngx_http_mp4_module was used on 32-bit platforms.
2018-12-15 23:28:52 +00:00
wiz
1e9caac440 *: update email for fhajny 2018-12-15 21:12:18 +00:00
taca
f478509c60 PHP_VERSIONS_ACCEPTED clean up
Remove PHP_VERSIONS_ACCEPTED since it specifies all PHP versions supported
by pkgsrc.
2018-12-15 17:05:29 +00:00
taca
86280d72fe www/contao35: update to 3.5.37
Version 3.5.37 (2018-12-13)
---------------------------

### Fixed
Prevent information disclosure in the back end (see CVE-2018-20028).
2018-12-15 16:42:19 +00:00
leot
2632a6f1d8 webkit-gtk: Avoid to depends on flex and minor cleanup
- The flex requirements can be just satisfied via USE_TOOLS (the
  version was from older webkit-gtk-s and it should be just a tool
  dependency).
- No need to specify `:build' in USE_TOOLS, it is already the default
- Update the comment regarding PYTHON_VERSIONS_INCOMPATIBLE definition

Bump PKGREVISION
2018-12-14 15:51:13 +00:00
adam
0e503fc9ed py-WebTest: updated to 2.0.32
2.0.32:
- remove invalid email from setup.py

2.0.31:
- py33 is no longer supported. It may works but has been removed from tox config
- Fixed 205: Use empty string as default value for submit and button
- tests use pytest
- docs use the standard Pylons template on RTD
2018-12-14 13:41:08 +00:00
adam
8dd0832877 py-WSGIProxy2: updated to 0.4.5
0.4.5:
- Allow to use URIs with no path
2018-12-14 13:39:16 +00:00
adam
58d2fad6c5 py-PasteDeploy: updated to 2.0.1
2.0.1
Unknown changes

2.0.0
Python 3 deprecation warning cleanups
Moved code to GitHub under the Pylons Project.
Moved documentation under the Pylons Project, hosted by Read the Docs at https://docs.pylonsproject.org/projects/pastedeploy/en/latest/
2018-12-14 13:29:28 +00:00
adam
e38ddea087 py-WebOb: updated to 1.8.4
1.8.4:

Bugfix
- Response.content_type now accepts unicode strings on Python 2 and encodes
  them to latin-1.
- Accept header classes now support a .copy() function that may be used to
  create a copy. This allows create_accept_header and other like functions
  to accept an pre-existing Accept header.

Warnings
- Some backslashes introduced with the new accept handling code were causing
  DeprecationWarnings upon compiling the source to pyc files, all of the
  backslashes have been reigned in as appropriate, and users should no longer
  see DeprecationWarnings for invalid escape sequence.


1.8.3:

Bugfix
- acceptparse.AcceptValidHeader, acceptparse.AcceptInvalidHeader, and
  acceptparse.AcceptNoHeader will now always ignore offers that do not
  match the required media type grammar when calling .acceptable_offers().
  Previous versions raised a ValueError for invalid offers in
  AcceptValidHeader and returned them as acceptable in the others.

Feature
- Add Request.remote_host, exposing REMOTE_HOST environment variable.
- Added acceptparse.Accept.parse_offer to codify what types of offers
  are compatible with acceptparse.AcceptValidHeader.acceptable_offers,
  acceptparse.AcceptMissingHeader.acceptable_offers, and
  acceptparse.AcceptInvalidHeader.acceptable_offers. This API also
  normalizes the offer with lowercased type/subtype and parameter names.
2018-12-14 13:14:37 +00:00
adam
f032a7455b py-flask-common: updated to 0.3.0
0.3.0:
Unknown changes
2018-12-14 10:47:37 +00:00
adam
b10b6ad7b2 py-flask-caching: added version 1.4.0
This is a fork of the Flask-Cache extension. Adds easy cache support to Flask.
2018-12-14 10:44:40 +00:00
prlw1
a88572624d Fix build with webrtc option.
http://mail-index.netbsd.org/pkgsrc-users/2018/11/10/msg027658.html
2018-12-14 10:21:27 +00:00
adam
9886972ee7 py-flask-babel: updated to 0.12.2
0.12.2:
Unknown changes
2018-12-14 08:52:22 +00:00