so make it equivalent to pkgsrc version 0.9.3nb1
(it does so on Debian, and will do on NetBSD; if it doesn't hold
on _your_OS_, we'll need conditionals)
05/01/05 (version 1.3)
Additions:
A collection of libraries implementing the Concurrent ML
model for concurrent programming has been added; it is
compatible to the CML libraries in Sunterlib. See the
documentation for details.
Support for SRFIs 34-36 ("Exception handling for programs",
"Conditions", "I/O conditions") has been added. This is in
the CONDITIONS, EXCEPTIONS, and I/O-CONDITIONS structures,
for which the SRFI-34, SRFI-35, and SRFI-36 structures are
essentially aliases. A bridging infrastructure between the
old condition system and the new one translates condition
objects back and forth, hopefully transparently for the
user.
A new infrastructure for dynamically loading external
libraries from shared objects has been added; check the
manual for details. The old infrastructure is still
presented, but is unsupported on Windows and will be
removed in a future release.
The S48_GC_UNPROTECT_GLOBAL macro has been added, which
allows to remove a root added by S48_GC_PROTECT_GLOBAL.
The Scheme 48 header files should now be compileable by a
C++ compiler.
An experimental Windows port has been added.
Changes:
The HTML manual is now generated with tex2page.
A number of changes to the VM to support the (future)
native-code compiler have been made.
The PreScheme type rule for IF is now more strict, thus
disallowing code that would lead to invalid C output.
(This fixes a bug reported by Markus Ziegler.)
Bug fixes:
The TRAVERSE structure for displaying heap statistics has
been re-enabled.
A number of misues of CALL-ERROR have been corrected
(reported by Taylor Campbell).
The VALUE-PIPES package works again
(fix by Taylor Campbell).
In PreScheme it is now possible to shift integers by
non-constant shift widths.
Logical right shifts in PreScheme work now
(reported by Taylor Campbell).
A bug in TERMINATE-THREAD! was fixed
(reported by Taylor Campbell).
A bug in the implementation of ,exit-when-done was fixed.
A bug in the regexp-matching code that prevented matching
the empty string correctly was fixed.
A bug in the implementation of STRING-CONTAINS from SRFI-13
was fixed.
A bug in the implementation of :WHILE in SRFI-42 was fixed
(submitted by Sebastian Egner).
Bugs in the implementations of ANGLE and MAGNITUDE were
fixed.
An obscure bug in the implementation of APPLY (which was
triggered by certain instances of (apply apply ...) )
was fixed.
For a degenerate case of ITERATE, the code was made to
conform the documentation
(reported by Taylor Campbell).
Various miscellaneous fixes.
Patch provided by Nils O. Selasdal in PR 32941.
While here, fixed pkglint warnings.
This release is very important, and we strongly advise everybody to
update to the latest release.
Security Update
===============
This version contains a number of security updates that were brought
to our attention via a number of sources.
- In webmail.php, the right_frame parameter was not properly sanitized
to deal with very lenient browsers, which allowed for cross site
scripting or frame replacing. [CVE-2006-0188]
- In the MagicHTML function, some very obscure constructs were
discovered to be exploitable: 'u\rl' was interpreted as 'url' (privacy
concern), and comments could be inside keywords (allows for cross site
scripting). Both only affect Internet Explorer users. Found by Martijn
Brinkers and Scott Hughes. [CVE-2006-0195]
- The function sqimap_mailbox_select did not strip newlines from the
mailbox parameter, and thereby allowed for IMAP command injection.
Found by Vicente Aguilera. [CVE-2006-0377]
- install PREFIX/sbin/qshape
Updated postfix to 2.2.9
Most of this patch hardens the TLS implementation against DNS-based
attacks, and eliminates some anomalies from the TLS per-site policy
engine. See the TLS_README document for tips on how to avoid
DNS-based attacks that can change the server hostname that Postfix
uses for logging, for TLS per-site policies, and for server
certificate verification.
The patch also adds a workaround that prevents Postfix from repeatedly
trying to deliver mail to domains with a malformed MX record (for
example, with a null MX hostname). Postfix 2.2.9 bounces such mail
immediately.
type tables from it. It is too stupid to understand the GCC extension
used for (u)int64_t on FreeBSD and DragonFly by the default code.
Use -Dlint on those platforms and hope that FreeBSD 10 will arrive
after the upstream is fixed.
Changes:
10-Feb-2006 (Release 0.9.7.10)
~~~~~~~~~~~
* GIMP paint tool slowing down the system fixed:
culprit was title string and icon name book keeping -
support for icon name was removed (commented out for now),
as OroboROX doesn't do anything with that info now and probably
in the future (ROX-Filer's pinboard handles that)
26-Jan-2006
~~~~~~~~~~~
* remove X11 session management code: was useless, as ROX isn't prepared for,
and most probably terribly broken, definitely completely untested.
like *DIR, *PATH, *FILE, PKGNAME will never contain one of the $\"'`
characters. With greetings to Alistair, who convinced me that pkglint
need not be the most pedantic tool. (It will stay _very_ pedantic,
though. :))
