Commit graph

6677 commits

Author SHA1 Message Date
joerg
d7ce5c92b4 If APR_XtOffsetOf is not defined, fallback to APR_OFFSETOF.
The compat macro was removed with APR 1.x. Also include unistd.h
if crypt.h does not exist, that's the place in DragonFly.
2007-06-29 22:58:54 +00:00
joerg
50efbc79de Fix pthread linkage for aprutil-0 link test and pthread_setspecific. 2007-06-29 22:55:50 +00:00
lkundrak
4212c25f27 Fixes for security issues and PKGREVISION bump;
CVE-2006-5752 XSS in mod_status with ExtendedStatus on
CVE-2007-1863 remote crash when mod_cache enabled
2007-06-28 01:49:04 +00:00
lkundrak
b8743d165d Description for one patch referred to incorrect issue, the other patch
lacked ending semicolons.
2007-06-28 01:24:39 +00:00
lkundrak
31db872355 Fixes for security issues, PKGREVISION bump.
CVE-2007-3304 Denial of Service.
CVE-2006-5752 XSS in mod_status with ExtendedStatus on.
CVE-2007-1863 remote crash when mod_cache enabled.
2007-06-28 01:20:52 +00:00
lkundrak
4c55c91e64 Add some descriptions to security patches. 2007-06-28 00:43:35 +00:00
lkundrak
5023ecdf92 Fixing two possible security vulnerabilities:
CVE-2006-5752 XSS in mod_status with ExtendedStatus on
CVE-2007-3304 Remote DoS if MPM and mod_cache enabled
bumping PKGREVISION
2007-06-28 00:38:00 +00:00
dmcmahill
0e15e6e564 fix PLIST and WRKSRC for the sparc version 2007-06-25 21:35:48 +00:00
jlam
ce9667dbf4 Move elinks's own special locale, locale.alias, and charset.alias
files into its own directory under ${PREFIX}/share/elinks/locale.
This avoids any potential conflicts between these specially hacked
files installed for elinks and the system-wide ones owned by gettext-lib
and libiconv.

This fixes the installation conflict noted in the latest bulk build.
Bump PKGREVISION to 1.
2007-06-21 15:52:15 +00:00
joerg
e54925b0d4 Override config.{guess,sub}. 2007-06-19 21:59:32 +00:00
dmcmahill
16b3af6b82 Fix the broken test for when to enable Xft. Addresses the remainder of
PR/31481.
2007-06-18 21:33:32 +00:00
joerg
c0e16a051d Reorder slightly so that the more restrictive dependency from
apache.mk comes first.
2007-06-17 20:03:09 +00:00
joerg
c8bce9c56a Fix thinko in Xft handling to unbreak gtk1 version. 2007-06-17 14:03:30 +00:00
joerg
8b50af498f Don't or X11_TYPE and MOZILLA_USE_XFT, but the exists() condition. 2007-06-17 13:47:00 +00:00
dmcmahill
f620dcb213 Use a package option to control the --enable-single-profile option for
mozilla browsers.  This is now useful again to those of use who require
multiple profiles.
2007-06-16 01:14:47 +00:00
joerg
180117a405 Fix my own commit to include a missing backslash. 2007-06-15 18:13:41 +00:00
drochner
1f488c35a5 update to 1.2.16b
changes:
-fixes and optimizations to reduce CPU usage
-translation updates
-Increased security: disallowing clicking on file:// links
-other fixes
2007-06-15 18:03:21 +00:00
joerg
f7cb20f711 Fix Xft for !native case. 2007-06-15 17:38:54 +00:00
joerg
6ed869b608 Fix Xinerama for !native case. 2007-06-15 17:36:11 +00:00
joerg
0e1cff3f34 Activate Xinerama for non-native case. 2007-06-15 16:35:41 +00:00
joerg
46f68c2df8 Assume that libXft provides Xft support for non-native X11. 2007-06-15 16:29:15 +00:00
obache
34e410a1b0 MAKE_JOBS_SAFE=no, reported in PR 36441. 2007-06-14 11:50:51 +00:00
joerg
697bc3cb15 Precreate directory. 2007-06-12 21:04:56 +00:00
heinz
45966f4fff Activated p5-LWPx-ParanoidAgent. 2007-06-11 21:16:52 +00:00
heinz
15260e8b9f Initial import of p5-LWPx-ParanoidAgent 1.03.
The Perl module LWPx::ParanoidAgent is a subclass of LWP::UserAgent,
but paranoid against attackers. It's to be used when you're fetching a
remote resource on behalf of a possibly malicious user.

This class can do whatever LWP::UserAgent can (callbacks, uploads from
files, etc), except proxy support is explicitly removed, because in that
case you should do your paranoia at your proxy. Only "http:" and "https:"
URL schemes are supported.
2007-06-11 21:15:10 +00:00
heinz
8be9331ae2 The package supports installation to DESTDIR. 2007-06-11 15:24:43 +00:00
minskim
afa17dc789 Add erubis. 2007-06-11 04:59:56 +00:00
minskim
05c7bdea0d Correct a package name (hi abs!). 2007-06-11 04:59:07 +00:00
minskim
df259e59d8 Import Erubis.
Erubis is a fast, secure, and very extensible implementation of eRuby.
2007-06-11 04:55:33 +00:00
abs
ff207ae3ec +p5-HTML-Template-Stash-EscapeHTML 2007-06-10 23:32:48 +00:00
abs
3f36f88722 Added p5-Template-Stash-EscapeHTML version 0.01
This module is a sub class of Template::Stash, automatically escape
all HTML strings and avoid XSS vulnerability.
2007-06-10 23:24:05 +00:00
joerg
0e99da970b Reorder Apache depedency to get the most specific one first. 2007-06-10 08:42:04 +00:00
joerg
5736c78cde Reorder Apache dependency to get the more specific ones first. 2007-06-10 08:40:16 +00:00
joerg
a9b42d5bc0 Resort Apache dependency to get the more specific pattern first. 2007-06-10 08:34:25 +00:00
joerg
353537a930 Force upper bound for Apache2, as pkg_add would choose Apache 2.2
otherwise, which breaks buildlink.
2007-06-10 07:32:48 +00:00
joerg
882595b75d Reorder include of devel/apr0/b3.mk to be before the refining
dependency is added, as the wildcard pattern in apr0 is necessary
to pick the right version of APR.
2007-06-10 06:14:18 +00:00
abs
ca519de77e Updated www/p5-Template-Toolkit 2.15 -> 2.19
#------------------------------------------------------------------------
# Version 2.19 - 27th April 2007
#------------------------------------------------------------------------

* Applied a patch to t/fileline.t from Steffen M�ller which fixes the
  problems running on Win32 with backslashes in paths.

  https://rt.cpan.org/Ticket/Display.html?id=20488

* Applied a patch to the XS Stash from Randy Kobes which fixes some other
  Win32 problems.

  http://tt2.org/pipermail/templates/2007-February/009247.html

* Applied another patch to the XS Stash from Steve Peters which fixes
  a problem with tied hashes under more recent version of Perl.

  http://tt2.org/pipermail/templates/2007-January/009181.html

* Fixed a problem in the Perl Stash when using objects that have
  overloaded comparison operators.  Thanks to Randal Schwartz, Tatsuhiko
  Miyagawa and Daisuke Maki for their contributions.

  http://tt2.org/pipermail/templates/2007-March/009265.html

* Applied a patch from Bill Moseley to Template::Provider which adds
  negative caching and moves some functionality into separate methods
  to make subclassing easier.  Also added the STAT_TTL configuration
  parameter.

  http://tt2.org/pipermail/templates/2007-January/009183.html

* Added the url filter as a less aggressive form of the uri filter.
  Whereas the uri filter now (from v2.16 onwards) encodes all the
  reserved characters (@, :, /, etc.) as per RFC2396, the url filter
  leaves them intact and thus behaves just like the uri filter used
  to.

  http://tt2.org/pipermail/templates/2007-March/009277.html

#------------------------------------------------------------------------
# Version 2.18a - 9th February 2007
#------------------------------------------------------------------------

* Applied a patch from Steve Peters to the Stash.xs to allow it to
  compile with bleadperl 5.9.x

  https://rt.cpan.org/Public/Bug/Display.html?id=22506

#------------------------------------------------------------------------
# Version 2.18 - 9th February 2007
#------------------------------------------------------------------------

* Merged in Adam's changes in 2.16 and 2.17 back into the developer CVS
  repository and added his name to the credits.

* Changed the parser grammar to accept expressions as arguments to a
  subroutine, method or virtual method call.  I'm embarrassed to admit
  that it was a one line change that could (and should) have been made
  long ago, if only I had realised just how trivial it was.  Anyway,
  you can now write nested expressions like this:

     [% add(a+5, b < 10 ? c : d + e*5) %]

* Put the t/fileline.t test back in as this was fixed in 2.15a

* Added the Template::Toolkit documentation-only module.

#------------------------------------------------------------------------
# Version 2.17 - 8th Feb 2007
#------------------------------------------------------------------------

Another interim release from Adam Kennedy.

* Change in Makefile.PL to force an upgrade to File::HomeDir 0.64 on darwin.
  This is due to problems caused by changes made to Perl on the new Intel
  versions of Mac OS X.

* skip_all filelines.t on darwin

#------------------------------------------------------------------------
# Version 2.16 - 23rd Jan 2007
#------------------------------------------------------------------------

Interim release from Adam Kennedy.

* Skip fileline.t on Win32, as it has some hard-coded path seperator
  assumptions. This will be fixed more comprehensively later.

* Handle spurious errors in Makefile.PL when a dev version of
  ExtUtils::MakeMaker is installed.

* Don't say "nmake" on Win32 when $Config{make} is 'dmake'.
  This corrects the message on Strawberry Perl.


#------------------------------------------------------------------------
# Version 2.15c - Not released                    ## DEVELOPER RELEASE ##
#------------------------------------------------------------------------

* Fixed a bug in Template::Parser which caused it to get confused about
  block names if it encountered a syntax error inside a BLOCK.  Thanks
  to Bill Moseley for reporting the problem.

  http://tt2.org/pipermail/templates/2006-July/008815.html

* Fixed a minor buglet in Template::Provider which came to light while
  investigating the above problem. If a previously cached template is changed
  on disk and then fails to compile, the provider now invalidates the cache
  entry immediately. Without this fix, the provider would report the error
  once, then reuse the cached good version of the template until $STAT_TTL
  ticked over when it would try to load and compile the disk version again.
  The problem was that error messages were only reported once every $STAT_TTL
  second(s) and any requests for the same template in the interim time would
  mysteriously work. This way errors get reported consistently and immediately
  and no-one has to waste an afternoon trying to figure out where the errors
  went!

#------------------------------------------------------------------------
# Version 2.15b - 30th May 2006                   ## DEVELOPER RELEASE ##
#------------------------------------------------------------------------

* Changed the uri filter to escape all reserved characters as per
  URI::Escape and RFC2396.  This now includes &, @, /, ;, :, =, +, ?
  and $ which were previously not escaped.  Thanks to islue@cpan.org
  for reporting the problem.

  http://rt.cpan.org/Ticket/Display.html?id=19593

* Also changed the uri filter to encode all wide characters as the
  equivalent UTF escapes.  Thanks to Jonathan Rockway for reporting
  the problem.

  http://rt.cpan.org/Ticket/Display.html?id=19354

* Fixed the redirect filter to not support relative paths.  Thanks to
  Paul Seamons for spotting the problem and providing a solution.

* Moved all the virtual methods out of Template::Stash and into
  a new Template::VMethods module.

* Fixed the version number of Template::Stash which had rolled over
  to 2.102 making it appear to predate the 2.86 stash in TT v2.14.
  Thanks to Randal Schwartz for reporting the problem.  Changed all
  version numbers in other modules to be a hard-coded numbers instead
  of grokking it automagically from the CVS revision.

* Changed the _recover() method of Template::Service to check if the
  error thrown is a Template::Exception object rather than just a
  reference.  Thanks to David Wheeler for reporting the problem.

  http://rt.cpan.org/Ticket/Display.html?id=17630

* Fixed the some tests in stash.t and stash-xs.t which were failing
  under Perl 5.6.2 due to a slightly different error message being
  generated.  Thanks to Anton Berezin for reporting the problem.

* Fixed a bug in the Template::Provider _load() method to check that
  $data is a hash ref before trying to mess with its innards.  Thanks
  to barbie@cpan.org for reporting the problem.

  http://rt.cpan.org/Ticket/Display.html?id=18653


#------------------------------------------------------------------------
# Version 2.15a - 29th May 2006                   ## DEVELOPER RELEASE ##
#------------------------------------------------------------------------

* Removed the latex filter from Template::Filters and related config
  variables from Template::Config

* Changed the t/fileline.t test to remove the line number from what Perl
  reports as "(eval $line)".  It appears to get the $line wrong on
  FreeBSD, although the correct line number is reported following that
  so the tests still do the right thing.  Thanks to Anton Berezin for
  reporting the problem.

* Changed the t/compile3.t test to do something similar.
2007-06-09 23:54:01 +00:00
joerg
cc47653370 Make Zope product dependency stricter, so that it doesn't match
Zope 2.9 and later. No revision bump for all components, but this
should help pkg_add to pick up the right Zope when binaries for all are
available. Discussed with taca@
2007-06-09 23:28:37 +00:00
jdolecek
a1344c151d Update to opera 9.21 - among others contains stability fix for torrents
PR: 36403 by Chavdar Ivanov (thanks)
2007-06-09 19:25:49 +00:00
epg
7c3b9548cc Version 1.4.4
(30 May 2007, from /branches/1.4.x)
http://svn.collab.net/repos/svn/tags/1.4.4

 User-visible changes:
  - Client:
    * fixed: 'svn up' of replaced file without history fails (issue #2618)
    * fixed: 'svn export' succeeds on non-existent URL (r23191, -3, -5, -200)
    * fixed: 'svn diff' fails writing large hunks to Win console (issue #1789)
    * fixed: 'svn merge' shows 'G' notifications for unchanged files (r24483)
    * fixed: svnsync cannot sync unreadable modified dir copies (issue #2705)
    * fixed: ra_dav litters empty transactions if initial setup fails (r23594)
    * fixed: inconsistent expansion of revision number keywords (issue #1743)
    * fixed: security flaw in 'svn prop*' commands [CVE-2007-2448]
          (r25095, -099, -104, -105, -10)

  - Server:
    * fixed: rare dirprop dataloss leading to BDB repo corruption (issue #2751)
    * fixed: race condition when changing FSFS revprops (r23439, r23440)
    * fixed: 'svnadmin load' invents svn:date if none exists (issue #2729)
    * fixed: svnserve can't commit locked file if root unwritable (issue #2700)
    * fixed: 'svnadmin dump' output invalid for non-ASCII paths (issue #2641)

  - Client and Server:
    * fixed: hang during character translation (r23491, r23492)
    * translation updates for Simplified Chinese, Japanese, and Norwegian

 Developer-visible changes:
 * new "make svnserveautocheck" testing target (r23558)
 * fixed: ra_serf fails checkout if access to repos root is forbidden (r23846)
 * fixed: svn_client_cat2() doesn't accept WORKING as a revision (r23556)
 * javahl bindings:
     - fixed: potential segfault in initialisation (r23383)
     - fixed: SVNClientSynchronized.logMessages() isn't synchronised (r23978)
     - fixed: SVNClient.info2() misreports itself as unlock in errors (r24219)
 * SWIG/perl bindings:
     - fixed: ra_do_{update,switch,status} don't work with Perl delta editors
           (r20667, r22311)
 * SWIG/python bindings:
     - fixed: memory leak whenever C APIs returned errors (r21453, r23468)
 * SWIG/ruby bindings:
     - fixed: typos in method Svn::Wc#merge_prop_diffs and docs (r23405, -6)
2007-06-08 22:49:26 +00:00
wiz
5d4498b5fc PKGREVISION bump for db4 shlib name change. 2007-06-08 12:24:59 +00:00
wiz
1ddd68e3ef Update to 1.12:
1.12    Thu Jul  6 23:47:59 CDT 2006
        [ENHANCEMENTS]
        * Added followable_links() method to return only those links
          that your mech can actually follow.

1.10    Sun Jun 18 22:58:41 CDT 2006
        [FIXES]
        * RT #19147: Tests turn off the http_proxy environment variable
          before starting.  Thanks to Matt Trout.
        * RT #18779: makes stuff_inputs() conform to the documentation,
          changing the implementation to expect an arrayref for
          $options->{ ignore }, as opposed to a hashref.  Thanks to
          Mike O'Regan.

        [ENHANCEMENTS]
        * Added base_is, base_like and base_unlike.  Thanks to MATSUNO
          Tokuhiro.
2007-06-08 11:34:30 +00:00
wiz
0642637c00 Update to 1.24:
1.24        Fri May 11 15:57:56 CDT 2007
========================================
[FIXES]

*   Fixed failures in "make test" with some versions of HTTP::Server::Simple
*   RT #26593: Improved handling of charsets.  Thanks Kevin Falcone.
*   RT #24354: find_link now handles http-equivs with quoted URLs.
*   Reverses the change in 1.21_01 where it decodes the content.

[ENHANCEMENTS]
*   Added find_all_inputs() and find_all_submits() methods.  Thanks,
    Mike O'Regan.
*   Test::LongString is no longer needed, so has been removed as a
    requirement.

[TESTS]
*   Added a test for save_content()
2007-06-08 11:32:00 +00:00
wiz
5846d7b4b8 Update to 2.08:
Changes with libapreq2-2.08 (released August 8, 2006)

- Perl API [Randy Kobes]
  add APR_FILE_NOCLEANUP | APR_SHARELOCK to flags passed to
  apreq_file_mktemp() on Win32 in library/util.c, in order to
  clean up occasional stray temp files left behind in the
  Perl upload test (reported by Steve Hay)

- Build [Philip M. Gollucci, Bojan Smojver, joes]
  add -fno-strict-aliasing to all compiles on all systems
  https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=193740
  This fixes an infinite look split_on_bdry() of library/parser_multipart.c
  particularly on linux/gcc 4.x platforms.

- Perl Glue
  Fix "value computed not used" gcc 4.1.x compile errors

- Build [Randy Kobes]
  Fix the location of apxs and the names of the apr and aprutil
  libraries on Win32 to enable building against Apache/2.2.

- Perl Glue docs [Philip M. Gollucci]
  Fix the 'docs_install' make target to actually install
  the docs for the perl glue.

- Perl Glue Build [Philip M. Gollucci]
  Regenerate glue/perl/xsbuilder/ppport.h to fix perl 5.8.8+ on some
  plaforms.

- C API [joes]
  Add code for apreq_cookies().

- Perl API [joes]
  Expose the constants in apreq_error.h via the APR::Request::Error package.
2007-06-08 11:30:09 +00:00
abs
046def525d Note that:
You do not need nspluginwrapper if the ABI of the plugin and browser are the
same, such as running a 32 bit Linux firefox and flash plugin under NetBSD.
2007-06-05 16:25:30 +00:00
wiz
9d27f90a6f opencdk shlib major changed; bump ABI depends and PKGREVISIONs of
affected packages.
2007-06-05 05:36:59 +00:00
lkundrak
840cbcb818 Bump apache22 to 2.2.4nb4 due to:
Security fix for CVE-2007-1862 sensitive information disclosure
http://issues.apache.org/bugzilla/show_bug.cgi?id=41551
http://issues.apache.org/bugzilla/attachment.cgi?id=20065
2007-06-05 01:43:44 +00:00
kleink
8dc454a7dc Update drraw to 2.2a4.
Changes since 2.2a3 [2007/03/17]:
  - Fixed support for SHIFT graph command.
  - Updated RRDs::fetch usage again (courtesy of Andy Mayhew).
  - Saving dashboards could generate bad index entries (reported by Fabien
    Wernli).
  - Added "Invisible" color (suggested by John Rouillard).
  - Dashboard style display for templates broke custom time display of
    templates (reported by Mark Noworolski).
  - Two typos caused forms to use POST instead of GET (courtesy of Fabien
    Wernli).
  - The graph editor no longer allowed stacking CDEFs or VDEFs (reported by
    John Rouillard).
2007-06-03 16:40:48 +00:00
uebayasi
d4e3436ef6 Update w3m to 0.5.2.
w3m 0.5.2 - 2007-05-31

* security fix
 - fix format string vulnerability.
* new features
 - support gtk2 with w3m-img.
 - new option for LiveHTTPHeaders-like logs.
 - new option to fontify <del>, <s>, <ins>, and so on.
* other bug fixes
 - avoid errors in "configure" and "make".
 - '\n' handling in attributes' values of HTML tags.
2007-06-02 02:35:42 +00:00
wiz
9742504550 Convert to use guile16 instead of guile14. Patch provided by
Aleksej Saushev in private mail.

Bump PKGREVISION.
2007-06-01 01:12:30 +00:00