As per PR/42962 provided by Ivan "Rambius" Ivanov.
While here, update MASTER_SITES
Changes since 0.16.2:
Changes in release sitecopy 0.16.6, 16 July 2008
* DAV: Fix crash with progress bar enabled with neon 0.27/0.28.
Changes in release sitecopy 0.16.5, 16 July 2008
* DAV: Fix SSL cert caching to avoid repeated prompts.
* Update to neon 0.28.3 and support neon 0.24.x through 0.28.x.
Changes in release sitecopy 0.16.3, 12 March 2006
* DAV: Add PKCS#12 client cert support; "client-cert /path/to/cert.p12"
* Update to neon 0.26.0 (0.24.x and 0.25.x still supported).
Changes since 0.4.14:
0.4.18 Fri Mar 12 23:39:59 PST 2010
- Fixed Canvas.pm to correctly select MD5-hex value. (Andrey Ilyin)++
- Updated Canvas.pm docs to specify cookie method needed
- Updated copyright information
0.4.17 Thu Nov 26 09:48:03 PST 2009
- Updated Stream.publish to automatically call encode action_links
to JSON. (Larry Mak)++
- Fixed upload method in Video along with docs (Anthony Bouvier)++
- Updated server call in API.pm to allow a filename to be passed in
from the upload methods under Video and Photo. (Anthony Bouvier)++
- Didn't include Canvas testing b/c it looks like the code changes
back in August broke the mocking. (It's on the TODO list)
- Added format testing for Video.upload
0.4.16 Mon Aug 24 18:43:12 PDT 2009
Added Exception submodule for handling exceptions (Kevin Riggle)++
0.4.15 Fri Aug 21 22:26:44 PDT 2009
Updated POD and formatting (for Perl::Critic) (gregor herrmann)++
Added new namespaces that are now a part of Facebook API along with
basic tests
Added documentation for all namespaces in API.pm
Deleted deprecated namespaces and methods
Added begin and end methods to start and finish permissions mode in
Permissions.pm
Changed formatting and removed versioning information. Versioning
information is no longer specific to each submodule, but to the
distribution
* Fix utf8 issues in calls to md5_hex.
* moderatedcomments: Added moderate_pagespec that can be used
to control which users or comment locations are moderated.
This can be used, just for example, to moderate "user(http://myopenid.com/*)"
if you're getting a lot of spammers from one particular openid
provider (who should perhaps answer your emails about them),
while not moderating other users.
* moderatedcomments: The moderate_users setting is deprecated. Instead,
set moderate_pagespec to "!admin()" or "user(*)".
* Fix missing span on recentchanges page template.
* search: Avoid '$' in the wikiname appearing unescaped on omega's
query template, where it might crash omega.
* htmlscrubber: Security fix: In data:image/* uris, only allow a few
whitelisted image types. No svg.
* Change ne_sock_close() to no longer wait for SSL closure alert:
o fixes possible hang with IIS servers when closing SSL connection
o this reverts the behaviour with OpenSSL to match 0.28.x,
and changes the behaviour with GnuTLS to match that with
OpenSSL
* Fix memory leak with GnuTLS
* API clarification in ne_sock_close():
o SSL closure handling now documented
o return value semantics fixed to describe the implementation
Changes in release neon 0.29.2, 30 December 2009 (PGP signature)
* Fix spurious 'certificate verify failed' errors with OpenSSL (Tom C)
* Fix unnecessary re-authentication with SSPI (Danil Shopyrin)
o Note that this change was previously listed in the 0.29.1 changes, however the patch had not been merged.
Changes in release neon 0.29.1, 15 December 2009 (PGP signature)
* Fixes for (Unix) NTLM implementation:
o fix handling of session timeout (Kai Sommerfeld)
o fix possible crash (basic@mozdev.org)
* Build fixes for Win32:
o fix use of socklen_t with recent SDKs (Stefan Kung)
o fix USE_GETADDRINFO on Win2K (Kai Sommerfeld)
* Fix build with versions of GnuTLS older than 2.8.0.
pkgsrc changes:
- Adjust dependencies
- Adjust license definition
- Add module type
Upstream changes:
0.023 20 Feb 2010
* support for Field->description. Patch from Adam Mackler.
0.022 17 Feb 2010
* no changes but version bump to accomodate CPAN. Apparently I was too aggressive in
cleaning up old files and deleted 0.021...
0.021 03 Feb 2010
* add missing META.yml
* change base URLs for ExtJS and Livegrid to point at non-MSI URLs and remove
warning about "get your own"
0.020 1 Dec 2009
* add missing dep on Template::Plugin::Autoformat to Makefile
* fix dbic test to make sort order explicit with table prefix
* allow for cxc-* params to be set in livegrid.js and default there.
Security fixes:
* Fixed a ticket validation issue that would allow unauthorized
users to modify the status and resolution of a ticket (#8884)
Performance improvements:
* Trac wiki had some trouble handling very long unicode words
(#9025)
* Full text search was very slow if lots of custom fields were
used (#8935)
Bug fixes:
* Fixed a race condition that could lead to the destruction of the
trac.ini file (#8623)
* Fixed creation of new milestone which could have been a rename
if performed after a name clash has been detected (#8816)
* Fixed display of value 0 in report cells (#7512)
pkgsrc changes:
- Adjust dependencies
- Add license definition
Upstream changes:
0.07 17 Feb 2010
* fix bug in get_template_filename with extra dot on .tt
* add debugging
* switch to MRO::Compat from Class::C3
pkgsrc changes:
- Adjust license definition
- Adjust dependencies
Upstream changes:
0.52 Mon Mar 8 01:25 GMT 2010
- Move actions out of the test applications to avoid deprecation warnings.
- POD corrections by jhannah
- Bump version dependency of Test::WWW::Mechanize to 1.54 to fix RT#44555
- Wrap checks for the appropriate plugins to skip tests inside a BEGIN
block so that they are run before the app tries to be loaded at compile
time, fixing RT#47037
0.1083.
Upstream changes:
0.1083 2010-03-03
Tweaking exception message to better explain what people did wrong when
they pass bad columns to authenticate.
Upstream changes:
Mon 8 Feb 2010 22:17:12 GMT - Release 0.83
Make it possible to deserialize a request with a DELETE method. This probably
breaks 'strict' REST guidelines, but is useful for being able to delete multiple
resources from a single call by providing a batch delete method.
Remove JSONP from the list of default serializers (RT#54336)
Fix MANIFEST (RT#54408)
Thu 4 Feb 2010 22:31:57 GMT - Release 0.82
Integrated Catalyst::Request::REST::ForBrowsers as
Catalyst::TraitFor::Request::ForBrowsers. (Dave Rolsky)
Clarified docs so that they encourage the use of the request traits, rather
than using Catalyst::Request::REST. (Dave Rolsky)
When Catalyst::Action::REST or Controller::REST automatically add the trait,
your request class will no longer end up getting set to
Catalyst::Request::REST. Instead, creates an anon class with the appropriate
role. (Dave Rolsky)
Shut up log output from the tests. (Dave Rolsky)
Added a $VERSION to every module, mostly to make sure that when people
install Catalyst::Request::REST::ForBrowsers, they get the version in this
distro. (Dave Rolsky)
Change Catalyst::Action::Serialize, Catalyst::Action::Deserialize and
Catalyst::Action::SerializeBase to be more Moose like.
Fix JSON and JSON::XS to encode_blessed. (fREW)
Fix Catalyst::Action::Serialize to use objects instead of classes. (fREW)
Fix doc nits. (RT#53780)
Upstream changes:
1.27 2010-02-23 10:44:20
- Add the catalyst_par_options option.
- Change the version of Catalyst required to 5.80015 as retarded
packaging systems consider 5.8001402 greater than 5.80015.
Upstream changes:
5.8004 17 Feb 2010
- Tutorial:
- Add foreign key support for SQLite
(huge thanks to Caelum for that and other good edits!)
- Add "Quick Start" to Intro (Chapter 1)
- Switch to use of "-r" to auto-restart the dev svr
- Update for latest available Debian package versions
- Switch to individual files for example code vs. tarballs
- Switch to 'done_testing' and shorter 'prove' args for testing chapter
- Misc typo fixes
- Other:
- Minor Cookbook edits
pkgsrc changes:
- Adjust dependencies
Upstream changes:
0.28 Wed Mar 10 11:19:35 JST 2010
- No code changes. Fixed packaging, added YAML dep for testing
0.27 Tue Feb 23 18:09:02 PST 2010
- Added repository info to META.yml to satisfy people
pkgsrc changes:
- Adjust module type
Upstream changes:
0.08 9 Febuary 2010
- Correctly built distribution. MANIFEST.SKIP fixed to avoid the issue
in future.
0.07 9 Febuary 2010
- Catalyst::Runtime is a runtime dependency. RT#48842
pkgsrc changes:
- Adjust dependencies (>=0 -> -[0-9]*)
Upstream changes:
5.80021 2010-03-03 23:02:01
Bug fixed:
- $c->uri_for will now escape unsafe characterss in captures
($c->request->captures) and correctly encode utf8 charracters.
5.80020 2010-02-04 06:51:18
New features:
- Allow components to specify additional components to be set up by
overriding the expand_modules method. (Oliver Charles)
Two security issues were discovered:
A CSS validation issue was discovered which allows editors to display
external images in wiki pages. This is a privacy concern on public
wikis, since a malicious user may link to an image on a server they
control, which would allow that attacker to gather IP addresses and
other information from users of the public wiki. All sites running
publicly-editable MediaWiki installations are advised to upgrade. All
versions of MediaWiki (prior to this one) are affected.
A data leakage vulnerability was discovered in thumb.php which affects
wikis which restrict access to private files using img_auth.php, or
some similar scheme. All versions of MediaWiki since 1.5 are affected.
Deleting thumb.php is a suitable workaround for private wikis which do
not use $wgThumbnailScriptPath or $wgLocalRepo['thumbScriptUrl'].
Alternatively, you can upgrade to MediaWiki 1.15.2 or backport the
patch below to whatever version of MediaWiki you are using.
For full changes information please refer:
http://www.apache.org/dist/httpd/Announcement2.2.html.
Here is security related changes from ChangeLog
(http://www.apache.org/dist/httpd/CHANGES_2.2.15).
Changes with Apache 2.2.15
*) SECURITY: CVE-2009-3555 (cve.mitre.org)
mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
by rejecting any client-initiated renegotiations. Forcibly disable
keepalive for the connection if there is any buffered data readable. Any
configuration which requires renegotiation for per-directory/location
access control is still vulnerable, unless using OpenSSL >= 0.9.8l.
[Joe Orton, Ruediger Pluem, Hartmut Keil <Hartmut.Keil adnovum.ch>]
*) SECURITY: CVE-2010-0408 (cve.mitre.org)
mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent
when request headers indicate a request body is incoming; not a case of
HTTP_INTERNAL_SERVER_ERROR. [Niku Toivola <niku.toivola sulake.com>]
*) SECURITY: CVE-2010-0425 (cve.mitre.org)
mod_isapi: Do not unload an isapi .dll module until the request
processing is completed, avoiding orphaned callback pointers.
[Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
- Support all ciphers and digests typically used in client certificates
- Fix caching of FastCGI reponses with large stderr output
- Support HTTPS referrers
- Fix $date_local variable with "%s" format
- Fix client certificate verification error with ssl_session_cache=none
- Fix matching error with geo ranges
- Fix SSI issue with stub parameter
- Fix $r->sleep
- fix a race condition in the worker spawning code
- minor fixes for the spooler code
- backport of UWSGI_SCHEME for better HTTPS support
- improvements for graceful reloading code
== 1.2.7 No Hup
* Support multiple Ruby version (fat binaries under windows)
* Do not trap unsupported HUP signal on Windows
== 1.2.6 Crazy Delicious
* Make work with Rails 3 out-of-the-box.
* Auto-detect and load config.ru files on start. Makes Rails 3 work.
* Fix signals being ignored under 1.9 when daemonized.
== 1.2.5 This Is Not A Web Server
* Add rolling restart support (--onebyone option) [sikachu]
* Force external_encoding of request's body to ASCII_8BIT [jeremyz]
* Ensure Rack base API is used in Rails adapter only if version >= 2.3.2
[#111 state:resolved]
== 1.2.4 Flaming Astroboy
* Fix a few issues in thin to make it a better "gem citizen" [josh]
* Fix test for rack based Rails in adapter under Ruby >= 1.8.7
[#109 state:resolved]
* Fix Remote address spoofing vulnerability in Connection#remote_address
[Alexey Borzenkov]
* Fix uninitialized constant ActionController::Dispatcher error with
Rails 1.2.3 [Chris Anderton] [#103 state:resolved]
== 1.2.2 I Find Your Lack of Sauce Disturbing release
* Fix force kill under 1.9 [Alexey Chebotar]
* Fix regression when --only option is used w/ --socket.
* Add process name 'tag' functionality. Easier to distinguish thin daemons
from eachother in process listing [ctcherry]
== 1.2.1 Asynctilicious Ultra Supreme release
* Require Rack 1.0.0
* Require EventMachine 0.12.6
* Use Rails Rack based dispatcher when available
* Allow String for response body
* Require openssl before eventmachine to prevent crash in 1.9
== 1.2.0 Asynctilicious Supreme release
* Add support for Windows mingw Ruby distro [Juan C. Rodriguez]
* Add async response support, see example/async_*.ru [raggi]
== 1.1.1 Super Disco Power Plus release
* Fix bug when running with only options [hasimo]
== 1.1.0 Super Disco Power release
* Require EventMachine 0.12.4
* Remove Thin handler, now part of Rack 0.9.1
* Fix Rack protocol version to 0.1 in environment hash.
* Fix error when passing no_epoll option to a cluster.
* Omit parsing #defined strings [Jeremy Zurcher]
* Defaults SERVER_NAME to localhost like webrick does [#87 state:resolved]
* Namespace parser to prevent error when mongrel is required [cliffmoon]
* Set RACK_ENV based on environment option when loading rackup file
[Curtis Summers] [#83 state:resolved]
* Fixes a warning RE relative_url_root when using a prefix with Rails
2.1.1 [seriph] [#85 state:resolved]
* --only can work as a sequence number (if < 80) or a port number
(if >= 80) [jmay] [#81 state:resolved]
== 1.0.0 That's What She Said release
* Fixed vlad.rake to allow TCP or socket [hellekin]
* Updated Mack adapter to handle both <0.8.0 and >0.8.0 [Mark Bates]
* rails rack adapter uses File.readable_real? so it recognizes ACL
permissions [Ricardo Chimal]
* Log a warning if Rack application returns nil body [Michael S. Klishin]
* Handle nil and Time header values correctly [#76 state:resolved] [tmm1]
* Add Content-Length header to response automatically when possible
[#74 state:resolved] [dkubb]
* Runner now remembers -r, -D and -V parameters so that clustered servers
inherit those and 'restart' keep your parameters.
* Make Set-Cookie header, in Rails adapter, compatible with current Rack
spec [Pedro Belo] [#73, state:resolved]
* Add --no-epoll option to disable epoll usage on Linux
[#61 state:resolved]
* Add --force (-f) option to force stopping of a daemonized server
[#72 state:resolved]
* Update halycon adapter loader [mtodd]
== 0.8.2 Double Margarita release
* Require EventMachine 0.12.0
* [bug] Fix timeout handling when running command
* [bug] Fix hanging when restarting and no process is running in single
server move, fixes#67
* Added Mack adapter [markbates]
* Allow rackup .rb files by getting a conventionally named constant as
the app [bmizerany]
2.0.6:
- Fix off-by-one error in ESI handling
- Bug fixes related to session lingering
- Backend probes should now work correctly with more servers
- Portability fixes
- Make it possible to specify the per-thread stack size, useful for 32 bit
systems
2.0.5:
- Performance improvements, particularly on Linux.
- Implement support for HTTP continuation lines
- Handle illegal responses from the backend better by serving a 503 page
rather than panic-ing
- Add backtrace to assertion errors. This requires Varnish to be installed
unstripped
- Consume less memory when processing ESI
- Better standards compliance with If-None-Match support and emitting more
headers on 304 responses
- Add a FetchError? log tag which makes it easier to understand why a
backend fetch failed.
pkgsrc changes:
- Proper EGDIR/SYSCONFDIR support.
- Default user, directory, ownership and permissions support.
- Rudimentary fix for gcc vs. sunpro on Solaris, as used by varnish
to compile config files.
because the git package doesn't need that. Depend on scmgit-base
instead of scmgit because I can't see how this requires the man pages
to be installed.
Drop dependency on apache because this ought to work with other
web servers.
Take maintainership, but only because it's not maintained.
Drupal 6.16, 2010-03-03
----------------------
- Fixed security issues (Installation cross site scripting, Open redirection,
Locale module cross site scripting, Blocked user session regeneration),
see SA-CORE-2010-001.
- Better support for updated jQuery versions.
- Reduced resource usage of update.module.
- Fixed several issues relating to support of install profiles and
distributions.
- Added a locking framework to avoid data corruption on long operations.
- Fixed a variety of other bugs.
* comments: Display number of comments in comment action link.
* Rebuild wikis on upgrade to this version to get the comment counts
added to existing pages.
* Loosen regexp, to allow empty quoted parameters in directives.
* Add force_overwrite setting to make setup automator overwrite existing
files/directories.
* Fix admin openid detection in setup automator, and avoid prompting
for a password.
* Add new --clean option; this makes ikiwiki remove all built
files in the destdir, as well as wrappers and the .ikiwiki directory.
pkgsrc chage: switch to user-destdir.
2.8.1 (2010-02-28)
* Added: different update modes for overriding multiple group memberships
* Fixed: the install tool does not handle equals sings in passwords (#1338)
* Fixed: articles drop-down menu in news/events is causing a fatal error (#1593)
* Fixed: several issues in the Comments class (BBCode parser)
* Fixed: image link elements do not support the new image resize options (#1585)
* Fixed: table sort script interchanges the classes even and odd (#1589)
* Fixed: inconsistent file tree behavior (#1582)
* Fixed: Date class not supporting negative Unix timestamps (#1591)
* Fixed: apply file permissions to image thumbnails when the Safe Mode
Hack is used (#1398)
* Fixed: several issues with the new calendar/event list navigation (#1584)
* Fixed: Widget class not validating the maximum input length (#1578)
* Fixed: relative URLs in RSS feeds are not converted to absolute URLs (#1596)
* Fixed: the toggleVisibilty() methods do not support save_callbacks
and versioning
* Fixed: access control for comments is missing in the new comments module
* Fixed: no active record available in onsubmit_callbacks in
"override multiple" mode
* Fixed: Swiff does not check whether the Flash plugins is available (#1601)
* Fixed: navigation module start/stop levels fail if there is a reference
page (#1607)
* Fixed: the style sheet module does not show an error if a file is not
writeable (#1598)
* Fixed: FancyUpload does not work in the popup file manager (#1608)
* Fixed: wrong thumbnail size if only height and maximum front end width
are given
* Fixed: file manager does not urlencode filenames (#1616)
* Fixed: not all elements and modules pass the data array to the view (#1604)
* Fixed some minor issues
Lua support for libcurl.
Connect and communicate to many different types of servers with many
different types of protocols.
This project is not a fork of LuaCURL, which is a direct mapping of
parts of the libcurl-easy interface.
The intent of Lua-cURL is to adapt the
* Easy Interface
* Multi Interface
* Shared Interface
of libcurl to the functionality of Lua (for example by using iterators
instead of callbacks when possible).
pkgsrc changes:
- Adjust dependencies
Upstream changes:
0.19 Sun Feb 21 15:39:27 2009
Remove rafb.net support since it's been shut down
- See also http://rafb.net/paste/
pkgsrc changes:
- Add license definition
Upstream changes:
1.34 - January 7, 2009
Remove quadratic memory allocation during multipart_buffer reads
[joes]
have fill_buffer() completely fill the multipart_buffer. This
bug is tickled by the FireFox 2.0 when doing ssl uploads:
https://bugzilla.mozilla.org/show_bug.cgi?id=356470https://bugzilla.mozilla.org/show_bug.cgi?id=369414
move the mod_perl version detection to the top of Makefile.PL, so
Apache-Test and other things won't fool around with %INC and confuse
the detection code. [Stas]
pkgsrc changes:
- Add license definition
Upstream changes:
@section v2_12 Changes with libapreq2-2.12 (released March 13, 2009)
- C API [joes]
Make the cookie parser a little more flexible.
@section v2_11 Changes with libapreq2-2.11 (not released)
- Interactive CGI module [issac]
Allow cgi module to interactively prompt for parameters and cookies when
running a script from the command line and not from a CGI interface
@section v2_10 Changes with libapreq2-2.10 (not released)
- Perl Glue [joes]
Fix the linking of the perl modules to libapreq2 and libapr
on Solaris.
- Perl Glue [joes]
Fix install-time linking issue of the .so modules.
Previously they would remain linked against the src
library path, not the install path.
- C API [joes]
Add optional interface for apreq_handle_apache2().
- C API [joes]
Clean up buggy apreq_hook_find_param().
- Perl Glue Build [Philip M. Gollucci]
config.status format changed format yet again in autoconf 2.62+.
- License [Mladen Turk]
Add libapreq.rc and generate libapreq.res
- Build [Mladen Turk]
Add APREQ_DECLARE_EXPORT/APREQ_DECLARE_STATIC
in the same way as APR declares so that dllexport/dllimport
get correctly handled.
- Build [Randy Kobes]
Add appropriate manifest command to embed manifest files on Win32
when using VC8
- C API [Andy Grundman, joes]
Add missing bytes_read initializer to apreq_handle_custom().
- C API [suggested by Vinay Y S, tested by Steve Hay and Peter Walsham]
For Win32, remove the
flag |= APR_FILE_NOCLEANUP | APR_SHARELOCK;
in apreq_file_cleanup, to avoid problems with file uploads.
@section v2_09 Changes with libapreq2-2.09 ( not released)
- C API [joes]
Fix leak associated to calling apreq_brigade_fwrite() on an upload
brigade.
- Build [Philip M. Gollucci]
SunOS (Solaris)
Users must use gmake not make for building.
- Build [Philip M. Gollucci]
SunOS (Solaris)
Code around bug in libtool (at least in 1.5.18, 1.5.20, 1.5.22)
causing mod_apreq2 to be built instead of mod_apreq2.so
- C API [Philip M. Gollucci]
Fix comparison signed vs unsigned comparison
in apreq_fwritev() on SunOS/gcc where iovec.iov_len is a long.
- Build [Philip M. Gollucci]
SunOS (Solaris)
fix duplicate link error to libexpat.so -- by using the one from httpd
exclusively now.
- Build [Philip M. Gollucci]
code around |#_!!_#| autoconf 2.60 bug.
pkgsrc changes:
- Adjust license definition
Upstream changes:
- Bug fix:
# bug in version 0.08 and older, result was error:
# Modification of a read-only value attempted
# at lib/CSS/Squish.pm line 220
pkgsrc changes:
- Use correct module type for perl install routine
Upstream changes:
0.42 Thu Feb 18 10:13:11 PST 2010
* Inline uri_unescape to drop URI::Escape which is the only non-core
dependency of this distribution. -- miyagawa
* Do not special case COOKIE and sets Cookie header to HTTP_COOKIE. -- miyagawa
O'Reilly's WebSite server misuses COOKIE environment instead of
HTTP_COOKIE. We don't need to replicate that bug since
HTTP::Server::Simple is a server, not a CGI library like CGI.pm.
0.41_01 Tue Feb 2 12:08:15 PST 2010
* Pluggable CGI class support based on a patch from NANIS
pkgsrc changes:
- Note that it uses C language
Upstream changes:
Version 0.69 -- 15 Feb 2010 <mst@shadowcat.co.uk> Matt S Trout
o No changes since the previous development release.
Version 0.68_02 -- 13 Jan 2010 <mst@shadowcat.co.uk> Matt S Trout
o Make the PRINT method return a boolean value rather than the
number of bytes written, previous patch was incorrect.
Version 0.68_01 -- 10 Jan 2010 <mst@shadowcat.co.uk> Matt S Trout
o Force signal handler installation so that we correctly install handlers
for SIGPIPE. Fixes RT#5100 <bobtfish@bobtfish.net>
o Make the PRINT method return the number of bytes written rather than
undef to be consistent with the IO:: interface. Fixes RT#24347
<David Dick>
o Fix UTF-8 double encoding when FCGI is passed octets by downgrading
them into bytes correctly. Fixes RT#52400 <chansen@cpan.org>
2.8.0 (2010-02-16)
* Updated MooTools More to version 1.2.4.3
* Updated mediabox plugin to version 1.2.0 (#1401)
* Updated SwiftMailer plugin to version 4.0.6 (#1470)
* Improved the e-mail address spam protection algorithm (#1248)
* Added insert tags article/faq/news/event_open, _url and _title (#1370)
* Added an option to assign CSS IDs/classes to teaser elements (#1392)
* Added an option to disable FancyUpload (#1423)
* Removed PCRE modifier /e for better compatibility (#1405)
* Fixed issue with empty alias drop-down menus
* Fixed issue with feed names not being mandatory (#1317)
* Fixed issue with page language not being set correctly (#1326)
* Fixed issue with collations drop-down not being MySQL 4.1 compatible (#1336)
* Fixed issue with comments module not supporting multiple forms (#1332)
* Fixed inconsistent access permissions (#1319)
* Fixed issue with system messages not being shown (#1365)
* Fixed issue with back end top links not working correctly (#1358)
* Fixed issue with basic entities not being restored in the website title
(#1359)
* Fixed issue with style sheets not being updated correctly (#1351)
* Fixed issue with DC_Table::copyChilds() not working correctly (#1360)
* Fixed issue with incorrectly encoded characters in the security question
(#1380)
* Fixed issue with german dates not being validated correctly (#1381)
* Fixed issue with "*_teaser" insert tags not supporting aliases (#1389)
* Fixed issue with front end users losing group membership (#1403)
* Fixed issue with listing module not working when alias usage is disabled
(#1408)
* Fixed issue with cached pages being sent with the wrong header (#1407)
* Fixed issue with right column articles overriding the page title (#1440)
* Fixed issue with publish icons not being set correctly (#1436)
* Fixed issue with unsearchable news/events being added to the sitemap (#1464)
* Fixed issue with striptags() not supporting POST arrays (#1429)
* Fixed issue with events being opened in a new window (#1453)
* Fixed issue with article teaser links not being limited to the website root
(#1409)
* Fixed issue with textual font-sizes not being imported (#1465)
* Fixed issue with users not being redirected to login upon Ajax requests
(#1466)
* Fixed issue with TextField widgets not supporting arrays (#1342)
* Fixed issue with newsletter reader not supporting plain text messages (#1478)
* Fixed issue with news and event insert tags creating wrong links (#1396)
* Fixed issue with TextArea default values not supporting line breaks (#1430)
* Fixed issue with thumbnails being created although no resizing is required
(#1468)
* Fixed issue with empty news/event text in the back end overview (#1489)
* Fixed issue with FancyUpload script not being compatible to extTYPOlight
(#1487)
* Fixed issue with Date class not supporting the Swedish time format (#1498)
* Fixed issue with inconsistent label_callback function calls (#1488)
* Fixed issue with newsletter reader not replacing insert tags (#1506)
* Fixed issue with home directories not being unique (#1490)
* Fixed issue with events not being shown in "shortened view" (#1473)
* Fixed issue with ModuleCustomnav generating invalid links (#1543)
* Fixed issue with subpalettes not evaluating scripts (#1522)
* Fixed issue with listing module generating invalid profile links (#1532)
* Fixed issue with sortable tables not supporting negative numbers and floats
(#1529)
* Fixed issue with listView headers not supporting time fields (#1540)
* Fixed issue with Folder::isEmpty() returning wrong results (#1555)
* Fixed issue with users not being able to create new pages in a root page
(#1554)
* Fixed issue with BBCode parser stripping tags and code snippets (#1543)
* Fixed issue with style sheet importer not handling textual font colors (#1553)
* Fixed some minor issues
templates and target for the configuration and included both the in PLIST.
Use this chance and properly move the templates into a separate location
as the config directory needs special permissions. Bump revision.
by Wen Heping.
Changelog:
QA release:
- Fix bug #2676: Setting selected value doesn't work [cweiske]
- Implement request #1749: add support for <optgroup> elements
for multi-level arrays [cweiske]
- Automatically set the <select> element id attribute
- Add some examples
- Convert to package.xml v2
- Fix coding standards
- Stabilize after 6 years in beta
Version 7.20.0 (9 February 2010)
Daniel Stenberg (9 Feb 2010)
- When downloading compressed content over HTTP and the app asked libcurl to
automatically uncompress it with the CURLOPT_ENCODING option, libcurl could
wrongly provide the callback with more data than the maximum documented
amount. An application could thus get tricked into badness if the maximum
limit was trusted to be enforced by libcurl itself (as it is documented).
This is further detailed and explained in the libcurl security advisory
20100209 at
http://curl.haxx.se/docs/adv_20100209.html
Daniel Fandrich (3 Feb 2010)
- Changed the Watcom makefiles to make them easier to keep in sync with
Makefile.inc since that can't be included directly.
Yang Tse (2 Feb 2010)
- Symbol CURL_FORMAT_OFF_T now obsoleted, will be removed in a future release,
symbol will not be available when building with CURL_NO_OLDIES defined. Use
of CURL_FORMAT_CURL_OFF_T is preferred since 7.19.0
Daniel Stenberg (1 Feb 2010)
- Using the multi_socket API, it turns out at times it seemed to "forget"
connections (which caused a hang). It turned out to be an existing (7.19.7)
bug in libcurl (that's been around for a long time) and it happened like
this:
The app calls curl_multi_add_handle() to add a new easy handle, libcurl will
then set it to timeout in 1 millisecond so libcurl will tell the app about
it.
The app's timeout fires off that there's a timeout, the app calls libcurl as
we so often document it:
do {
res = curl_multi_socket_action(... TIMEOUT ...);
} while(CURLM_CALL_MULTI_PERFORM == res);
And this is the problem number one:
When curl_multi_socket_action() is called with no specific handle, but only
a timeout-action, it will *only* perform actions within libcurl that are
marked to run at this time. In this case, the request would go from INIT to
CONNECT and return CURLM_CALL_MULTI_PERFORM. When the app then calls libcurl
again, there's no timer set for this handle so it remains in the CONNECT
state. The CONNECT state is a transitional state in libcurl so it reports no
sockets there, and thus libcurl never tells the app anything more about that
easy handle/connection.
libcurl _does_ set a 1ms timeout for the handle at the end of
multi_runsingle() if it returns CURLM_CALL_MULTI_PERFORM, but since the loop
is instant the new job is not ready to run at that point (and there's no
code that makes libcurl call the app to update the timout for this new
timeout). It will simply rely on that some other timeout will trigger later
on or that something else will update the timeout callback. This makes the
bug fairly hard to repeat.
The fix made to adress this issue:
We introduce a loop in lib/multi.c around all calls to multi_runsingle() and
simply check for CURLM_CALL_MULTI_PERFORM internally. This has the added
benefit that this goes in line with my long-term wishes to get rid of the
CURLM_CALL_MULTI_PERFORM all together from the public API.
The downside of this fix, is that the counter we return in 'running_handles'
in several of our public functions then gets a slightly new and possibly
confusing behavior during times:
If an app adds a handle that fails to connect (very quickly) it may just
as well never appear as a 'running_handle' with this fix. Previously it
would first bump the counter only to get it decreased again at next call.
Even I have used that change in handle counter to signal "end of a
transfer". The only *good* way to find the end of a individual transfer
is calling curl_multi_info_read() to see if it returns one.
Of course, if the app previously did the looping before it checked the
counter, it really shouldn't be any new effect.
Yang Tse (26 Jan 2010)
- Constantine Sapuntzakis' and Joshua Kwan's work done in the last four months
relative to the asynchronous DNS lookups, along with with some integration
adjustments I have done are finally committed to CVS.
Currently these enhancements will benefit builds done using c-ares on any
platform as well as Windows builds using the default threaded resolver.
This release does not make generally available POSIX threaded DNS lookups
yet. There is no configure option to enable this feature yet. It is possible
to experimantally try this feature running configure with compiler flags that
make simultaneous definition of preprocessor symbols USE_THREADS_POSIX and
HAVE_PTHREAD_H, as well as whatever reentrancy compiler flags and linker ones
are required to link and properly use pthread_* functions on each platform.
Daniel Stenberg (26 Jan 2010)
- Mike Crowe made libcurl return CURLE_COULDNT_RESOLVE_PROXY when it is the
proxy that cannot be resolved when using c-ares. This matches the behaviour
when not using c-ares.
Bj
- Added a new flag: -J/--remote-header-name. This option tells the
-O/--remote-name option to use the server-specified Content-Disposition
filename instead of extracting a filename from the URL.
Daniel Stenberg (21 Jan 2010)
- Chris Conroy brought support for RTSP transfers, and with it comes 8(!) new
libcurl options for controlling what to get and how to receive posssibly
interleaved RTP data.
Daniel Stenberg (20 Jan 2010)
- As was pointed out on the http-state mailing list, the order of cookies in a
HTTP Cookie: header _needs_ to be sorted on the path length in the cases
where two cookies using the same name are set more than once using
(overlapping) paths. Realizing this, identically named cookies must be
sorted correctly. But detecting only identically named cookies and take care
of them individually is harder than just to blindly and unconditionally sort
all cookies based on their path lengths. All major browsers also already do
this, so this makes our behavior one step closer to them in the cookie area.
Test case 8 was the only one that broke due to this change and I updated it
accordingly.
Daniel Stenberg (19 Jan 2010)
- David McCreedy brought a fix and a new test case (129) to make libcurl work
again when downloading files over FTP using ASCII and it turns out that the
final size of the file is not the same as the initial size the server
reported. This is very common since servers don't take the newline
conversions into account.
Kamil Dudka (14 Jan 2010)
- Suppressed side effect of OpenSSL configure checks, which prevented NSS from
being properly detected under certain circumstances. It had been caused by
strange behavior of pkg-config when handling PKG_CONFIG_LIBDIR. pkg-config
distinguishes among empty and non-existent environment variable in that case.
Daniel Stenberg (12 Jan 2010)
- Gil Weber reported a peculiar flaw with the multi interface when doing SFTP
transfers: curl_multi_fdset() would return -1 and not set and file
descriptors several times during a transfer of a single file. It turned out
to be due to two different flaws now fixed. Gil's excellent recipe helped me
nail this.
Daniel Stenberg (11 Jan 2010)
- Made sure that the progress callback is repeatedly called at a regular
interval even during very slow connects.
- The tests/runtests.pl script now checks to see if the test case that runs is
present in the tests/data/Makefile.am and outputs a notice message on the
screen if not. Each test file has to be included in that Makefile.am to get
included in release archives and forgetting to add files there is a common
mistake. This is an attempt to make it harder to forget.
Daniel Stenberg (9 Jan 2010)
- Johan van Selst found and fixed a OpenSSL session ref count leak:
ossl_connect_step3() increments an SSL session handle reference counter on
each call. When sessions are re-used this reference counter may be
incremented many times, but it will be decremented only once when done (by
Curl_ossl_session_free()); and the internal OpenSSL data will not be freed
if this reference count remains positive. When a session is re-used the
reference counter should be corrected by explicitly calling
SSL_SESSION_free() after each consecutive SSL_get1_session() to avoid
introducing a memory leak.
(http://curl.haxx.se/bug/view.cgi?id=2926284)
Daniel Stenberg (7 Jan 2010)
- Make sure the progress callback is called repeatedly even during very slow
name resolves when c-ares is used for resolving.
Claes Jakobsson (6 Jan 2010)
- Julien Chaffraix fixed so that the fragment part in an URL is not sent
to the server anymore.
Kamil Dudka (3 Jan 2010)
- Julien Chaffraix eliminated a duplicated initialization in singlesocket().
Daniel Stenberg (2 Jan 2010)
- Make curl support --ssl and --ssl-reqd instead of the previous FTP-specific
versions --ftp-ssl and --ftp-ssl-reqd as these options are now used to
control SSL/TLS for IMAP, POP3 and SMTP as well in addition to FTP. The old
option names are still working but the new ones are the ones listed and
documented.
Daniel Stenberg (1 Jan 2010)
- Ingmar Runge enhanced libcurl's FTP engine to support the PRET command. This
command is a special "hack" used by the drftpd server, but even though it is
a custom extension I've deemed it fine to add to libcurl since this server
seems to survive and people keep using it and want libcurl to support
it. The new libcurl option is named CURLOPT_FTP_USE_PRET, and it is also
usable from the curl tool with --ftp-pret. Using this option on a server
that doesn't support this command will make libcurl fail.
I added test cases 1107 and 1108 to verify the functionality.
The PRET command is documented at
http://www.drftpd.org/index.php/Distributed_PASV
Yang Tse (30 Dec 2009)
- Steven M. Schweda improved VMS build system, and Craig A. Berry helped
with the patch and testing.
Daniel Stenberg (26 Dec 2009)
- Renato Botelho and Peter Pentchev brought a patch that makes the libcurl
headers work correctly even on FreeBSD systems before v8.
(http://curl.haxx.se/bug/view.cgi?id=2916915)
Daniel Stenberg (17 Dec 2009)
- David Byron fixed Curl_ossl_cleanup to actually call ENGINE_cleanup when
available.
- Follow-up fix for the proxy fix I did for Jon Nelson's bug. It turned out I
was a bit too quick and broke test case 1101 with that change. The order of
some of the setups is sensitive. I now changed it slightly again to make
sure we do them in this order:
1 - parse URL and figure out what protocol is used in the URL
2 - prepend protocol:// to URL if missing
3 - parse name+password off URL, which needs to know what protocol is used
(since only some allows for name+password in the URL)
4 - figure out if a proxy should be used set by an option
5 - if no proxy option, check proxy environment variables
6 - run the protocol-specific setup function, which needs to have the proxy
already set
Daniel Stenberg (15 Dec 2009)
- Jon Nelson found a regression that turned out to be a flaw in how libcurl
detects and uses proxies based on the environment variables. If the proxy
was given as an explicit option it worked, but due to the setup order
mistake proxies would not be used fine for a few protocols when picked up
from '[protocol]_proxy'. Obviously this broke after 7.19.4. I now also added
test case 1106 that verifies this functionality.
(http://curl.haxx.se/bug/view.cgi?id=2913886)
Daniel Stenberg (12 Dec 2009)
- IMAP, POP3 and SMTP support and their TLS versions (including IMAPS, POP3S
and SMTPS) are now supported. The current state may not yet be solid, but
the foundation is in place and the test suite has some initial support for
these protocols. Work will now persue to make them nice libcurl citizens
until release.
The work with supporting these new protocols was sponsored by
networking4all.com - thanks!
Daniel Stenberg (10 Dec 2009)
- Siegfried Gyuricsko found out that the curl manual said --retry would retry
on FTP errors in the transient 5xx range. Transient FTP errors are in the
4xx range. The code itself only tried on 5xx errors that occured _at login_.
Now the retry code retries on all FTP transfer failures that ended with a
4xx response.
(http://curl.haxx.se/bug/view.cgi?id=2911279)
- Constantine Sapuntzakis figured out a case which would lead to libcurl
accessing alredy freed memory and thus crash when using HTTPS (with
OpenSSL), multi interface and the CURLOPT_DEBUGFUNCTION and a certain order
of cleaning things up. I fixed it.
(http://curl.haxx.se/bug/view.cgi?id=2905220)
Daniel Stenberg (7 Dec 2009)
- Martin Storsjo made libcurl use the Expect: 100-continue header for posts
with unknown size. Previously it was only used for posts with a known size
larger than 1024 bytes.
Daniel Stenberg (1 Dec 2009)
- If the Expect: 100-continue header has been set by the application through
curl_easy_setopt with CURLOPT_HTTPHEADER, the library should set
data->state.expect100header accordingly - the current code (in 7.19.7 at
least) doesn't handle this properly. Martin Storsjo provided the fix!
Yang Tse (28 Nov 2009)
- Added Diffie-Hellman parameters to several test harness certificate files in
PEM format. Required by several stunnel versions used by our test harness.
Daniel Stenberg (28 Nov 2009)
- Markus Koetter provided a polished and updated version of Chad Monroe's TFTP
rework patch that now integrates TFTP properly into libcurl so that it can
be used non-blocking with the multi interface and more. BLKSIZE also works.
The --tftp-blksize option was added to allow setting the TFTP BLKSIZE from
the command line.
Daniel Stenberg (26 Nov 2009)
- Extended and fixed the change I did on Dec 11 for the the progress
meter/callback during FTP command/response sequences. It turned out it was
really lame before and now the progress meter SHOULD get called at least
once per second.
Daniel Stenberg (23 Nov 2009)
- Bjorn Augustsson reported a bug which made curl not report any problems even
though it failed to write a very small download to disk (done in a single
fwrite call). It turned out to be because fwrite() returned success, but
there was insufficient error-checking for the fclose() call which tricked
curl to believe things were fine.
Yang Tse (23 Nov 2009)
- David Byron modified Makefile.dist vc8 and vc9 targets in order to allow
finer granularity control when generating src and lib makefiles.
Yang Tse (22 Nov 2009)
- I modified configure to force removal of the curlbuild.h file included in
distribution tarballs for use by non-configure systems. As intended, this
would get overwriten when doing in-tree builds. But VPATH builds would end
having two curlbuild.h files, one in the source tree and another in the
build tree. With the modification I introduced 5 Nov 2009 this could become
an issue when running libcurl's test suite.
Daniel Stenberg (20 Nov 2009)
- Constantine Sapuntzakis identified a write after close, as the sockets were
closed by libcurl before the SSL lib were shutdown and they may write to its
socket. Detected to at least happen with OpenSSL builds.
- Jad Chamcham pointed out a bug with connection re-use. If a connection had
CURLOPT_HTTPPROXYTUNNEL enabled over a proxy, a subsequent request using the
same proxy with the tunnel option disabled would still wrongly re-use that
previous connection and the outcome would only be badness.
Yang Tse (18 Nov 2009)
- I modified the memory tracking system to make it intolerant with zero sized
malloc(), calloc() and realloc() function calls.
Daniel Stenberg (17 Nov 2009)
- Constantine Sapuntzakis provided another fix for the DNS cache that could
end up with entries that wouldn't time-out:
1. Set up a first web server that redirects (307) to a http://server:port
that's down
2. Have curl connect to the first web server using curl multi
After the curl_easy_cleanup call, there will be curl dns entries hanging
around with in_use != 0.
(http://curl.haxx.se/bug/view.cgi?id=2891591)
- Marc Kleine-Budde fixed: curl saved the LDFLAGS set during configure into
its pkg-config file. So -Wl stuff ended up in the .pc file, which is really
bad, and breaks if there are multiple -Wl in our LDFLAGS (which are in
PTXdist). bug #2893592 (http://curl.haxx.se/bug/view.cgi?id=2893592)
Kamil Dudka (15 Nov 2009)
- David Byron improved the configure script to use pkg-config to find OpenSSL
(and in particular the list of required libraries) even if a path is given
as argument to --with-ssl
Yang Tse (15 Nov 2009)
- I removed enable-thread / disable-thread configure option. These were only
placebo options. The library is always built as thread safe as possible on
every system.
Claes Jakobsson (14 Nov 2009)
- curl-config now accepts '--configure' to see what arguments was
passed to the configure script when building curl.
Daniel Stenberg (14 Nov 2009)
- Claes Jakobsson restored the configure functionality to detect NSS when
--with-nss is set but not "yes".
I think we can still improve that to check for pkg-config in that path etc,
but at least this patch brings back the same functionality we had before.
- Camille Moncelier added support for the file type SSL_FILETYPE_ENGINE for
the client certificate. It also disable the key name test as some engines
can select a private key/cert automatically (When there is only one key
and/or certificate on the hardware device used by the engine)
Yang Tse (14 Nov 2009)
- Constantine Sapuntzakis provided the fix that ensures that an SSL connection
won't be reused unless protection level for peer and host verification match.
I refactored how preprocessor symbol _THREAD_SAFE definition is done.
Kamil Dudka (12 Nov 2009)
- Kevin Baughman provided a fix preventing libcurl-NSS from crash on doubly
closed NSPR descriptor. The issue was hard to find, reported several times
before and always closed unresolved. More info at the RH bug:
https://bugzilla.redhat.com/534176
- libcurl-NSS now tries to reconnect with TLS disabled in case it detects
a broken TLS server. However it does not happen if SSL version is selected
manually. The approach was originally taken from PSM. Kaspar Brand helped me
to complete the patch. Original bug reports:
https://bugzilla.redhat.com/525496https://bugzilla.redhat.com/527771
Yang Tse (12 Nov 2009)
- I modified configure script to make the getaddrinfo function check also
verify if the function is thread safe.
Yang Tse (11 Nov 2009)
- Marco Maggi reported that compilation failed when configured --with-gssapi
and GNU GSS installed due to a missing mutual exclusion of header files in
the Kerberos 5 code path. He also verified that my patch worked for him.
Daniel Stenberg (11 Nov 2009)
- Constantine Sapuntzakis posted bug #2891595
(http://curl.haxx.se/bug/view.cgi?id=2891595) which identified how an entry
in the DNS cache would linger too long if the request that added it was in
use that long. He also provided the patch that now makes libcurl capable of
still doing a request while the DNS hash entry may get timed out.
- Christian Schmitz noticed that the progress meter/callback was not properly
used during the FTP connection phase (after the actual TCP connect), while
it of course should be. I also made the speed check get called correctly so
that really slow servers will trigger that properly too.
Kamil Dudka (5 Nov 2009)
- Dropped misleading timeouts in libcurl-NSS and made sure the SSL socket works
in non-blocking mode.
Yang Tse (5 Nov 2009)
- I removed leading 'curl' path on the 'curlbuild.h' include statement in
curl.h, adjusting auto-makefiles include path, to enhance portability to
OS's without an orthogonal directory tree structure such as OS/400.
Daniel Stenberg (4 Nov 2009)
- I fixed several problems with the transfer progress meter. It showed the
wrong percentage for small files, most notable for <1000 bytes and could
easily end up showing more than 100% at the end. It also didn't show any
percentage, transfer size or estimated transfer times when transferring
less than 100 bytes.
This covers the transition to ASF that mod_fcgi was donated to in the course
of 2009. No longer backwards compatible as far as configuration is concerned!
Changes with mod_fcgid 2.3.5
*) Stop using the unsuppressable "notice" log level for debug and
informational messages. PR 48536. [Jeff Trawick]
*) Respect DEFAULT_REL_RUNTIMEDIR for default values of FcgidIPCDir and
FcgidProcessTableFile. [Jeff Trawick]
*) Resolve fatal EDEADLK errors with threaded MPMs on Solaris. [Jeff Trawick]
*) Display information about active processes in the server-status page.
[Ryan Pan]
*) Fix compatibility of httpd.conf-editing logic with non-GNU awk. PR 48067.
[Hans Werner Strube <strube physik3.gwdg.de>]
*) Fix startup errors creating shared memory in constrained systems, such
as OS X in its default configuration. This is a regression since mod_fcgid
2.2. [Jeff Trawick]
*) Recover from most "Resource temporarily unavailable" errors writing the
request to the FastCGI application. These were common with large request
bodies on Mac OS X and intermittent on Solaris. PR 48025. [Jeff Trawick]
*) Fix a bug in fixconf.sed that resulted in a prefix of "FcgidFcgid" on the
updated directives. [Dan Hulme <dhulme gmail.com>]
*) Fix possible corruption or truncation of request bodies which exceed
FcgidMaxRequestInMem. This is a regression since mod_fcgid 2.2, which
effectively ignored FcgidMaxRequestInMem if larger than 8K. PR 48021.
[Jeff Trawick]
*) Fix handling of the request body when a FastCGI access checker/
authenticator/authorizer (AAA) was configured. The body wasn't available
for the request handler. PR 47973.
[Jeff Trawick, Barry Scott <barry.scott onelan.co.uk>]
*) Fix handling of FcgidCmdOptions so that it can apply to wrapper scripts
which were defined with command-line arguments on the FcgidWrapper
directive. [Jeff Trawick]
Changes with mod_fcgid 2.3.4
*) Corrected unix 'make install' target regression in 2.3.3. [Jeff Trawick]
Changes with mod_fcgid 2.3.3
*) Add FcgidCmdOptions directive to associate some of the existing
configuration settings with a specific command. [Jeff Trawick]
*) Allow/respect virtual host settings for the following directives:
FcgidBusyTimeout, FcgidMaxProcessesPerClass, FcgidMinProcessesPerClass,
FcgidIdleTimeout, and FcgidProcessLifetime. [Jeff Trawick]
Changes with mod_fcgid 2.3.2
*) Fix a make install DESTDIR problem handling the reference manual and
potentially other files (specific to 2.3.1).
[Paul Howarth <paul city-fan.org>]
*) Fix a mod_fcgid 2.3.1 failure with <sys/mutex.h> when building for
httpd 2.0.x on some platforms. [Paul Howarth <paul city-fan.org>]
*) Termination of idle processes after inactivity timeout can now be
disabled by setting FcgidIdleTimeout to 0. Termination of idle
processes based on the process lifetime can now be disabled by setting
FcgidProcessLifeTime to 0. FcgidMaxRequestsPerProcess now accepts 0
for unlimited. [Ricardo Cantu <ricardo smartcsc.com>]
*) All directives have been renamed in order to use a common prefix "Fcgid".
Underscores in directive names have been eliminated in favor of
CamelCase. The old directive names will still work but are deprecated.
To fix your configuration you can use the sed script build/fixconf.sed.
The following tables contains old and new directive names.
Old Name New Name
...................................................................
BusyScanInterval FcgidBusyScanInterval
BusyTimeout FcgidBusyTimeout
DefaultInitEnv FcgidInitialEnv
DefaultMaxClassProcessCount FcgidMaxProcessesPerClass
DefaultMinClassProcessCount FcgidMinProcessesPerClass
ErrorScanInterval FcgidErrorScanInterval
FastCgiAccessChecker FcgidAccessChecker
FastCgiAccessCheckerAuthoritative FcgidAccessCheckerAuthoritative
FastCgiAuthenticator FcgidAuthenticator
FastCgiAuthenticatorAuthoritative FcgidAuthenticatorAuthoritative
FastCgiAuthorizer FcgidAuthorizer
FastCgiAuthorizerAuthoritative FcgidAuthorizerAuthoritative
FCGIWrapper FcgidWrapper
IdleScanInterval FcgidIdleScanInterval
IdleTimeout FcgidIdleTimeout
IPCCommTimeout FcgidIOTimeout
IPCConnectTimeout FcgidConnectTimeout
MaxProcessCount FcgidMaxProcesses
MaxRequestInMem FcgidMaxRequestInMem
MaxRequestLen FcgidMaxRequestLen
MaxRequestsPerProcess FcgidMaxRequestsPerProcess
OutputBufferSize FcgidOutputBufferSize
PassHeader FcgidPassHeader
PHP_Fix_Pathinfo_Enable FcgidFixPathinfo
ProcessLifeTime FcgidProcessLifeTime
SharememPath FcgidProcessTableFile
SocketPath FcgidIPCDir
SpawnScore FcgidSpawnScore
SpawnScoreUpLimit FcgidSpawnScoreUpLimit
TerminationScore FcgidTerminationScore
TimeScore FcgidTimeScore
ZombieScanInterval FcgidZombieScanInterval
*) Separate classes by virtual host also on Windows. [Rainer Jung]
*) Log client IP address with many more error log messages. [Jeff Trawick]
*) Fix basic implementation of FcgidMaxRequestInMem and FcgidMaxRequestLen
directives. [Jeff Trawick]
*) Merge per-directory directives so that they can be inherited or
overridden within other containers as expected. Merge server config/
virtual host directives so that they can be inherited or overridden
within a virtual host as expected. [Jeff Trawick]
*) Use the virtual host settings for the request being processed instead
of those of the first FastCGI request handled by this httpd child process.
Affected directives: FcgidBusyTimeout, FcgidIOTimeout,
FcgidConnectTimeout, FcgidMaxRequestsPerProcess, and FcgidOutputBufferSize.
[Jeff Trawick]
*) Directives which previously were ignored in a virtual host context are no
longer allowed. [Jeff Trawick]
*) Add an optional flag "virtual" to FcgidWrapper.
If virtual is set, the URLs passed to the wrapper are not
checked, whether they resolve to a file. [Rainer Jung]
*) Make the second argument (suffix) for FcgidWrapper optional.
A wrapper defined without a suffix applies to all URLs, unless
there is another more specific wrapper with a suffix. [Rainer Jung]
Changes with mod_fcgid 2.3.1
*) Suppress "need AuthType to note auth failure" error-level messages when a
FastCGIAccessChecker fails without any other kind of authentication
(Basic, Digest) configured. [Eric Covener]
*) Complete the unix port to 2.3-dev trunk. [William Rowe]
*) Provide a default, mandatory environment as with mod_cgi (with the
inclusion of LD_LIBRARY_PATH or similar variables on other platforms),
unless overridden by DefaultInitEnv. [William Rowe]
*) Handle DefaultInitEnv for case-insensitive platforms by forcing the env
variable names to uppercase on Win32, OS2 and Netware. [William Rowe]
*) Don't try to set the ownership of the socket directory unless running
as root and the directory was just created. This allows the default
httpd.conf (with some daemon User/Group) to be used by non-root.
[Jeff Trawick]
*) Fix formatting of several messages, including the oft-seen "mod_fcgid:
Can't create shared memory for size %zu byte". [Jeff Trawick]
*) Fix declared names of FastCgiAuthenticator and FastCgiAuthenticator-
Authoritative directives, allowing them to be used. [Ulf Haueisen
<ulf dvlp.de>]
*) Fix vhost-specific DefaultInitEnv settings. Previously, when setting
multiple virtual hosts with the same SuexecUserGroup user and group, the
process manager use the same process pool for both virtual hosts. This
means if one virtual host has a DefaultInitEnv and the other has
different values set, a fastcgi request from any of these virtual host
can go to the same processes, which is inconsistent (a request from
virtualhost a with DefaultInitEnv VAL "a", can go to a process spawned
with virtualhost b with DefaultInitEnv VAL "b" set). [Gabriel Barazer
<gabriel oxeva.fr>]
+- Added keybindings for scrolling.
- Help button and local help file.
+- Add support for multiple class names in CSS.
- Fix X11 coordinate overflows with huge borders.
- Improve CSS font parsing.
- Enable font face setting via <font> element.
- Ignore XML comment markers in CSS.
- Split up long lines in plain.cc to avoid X11 coordinate overflows.
- Fix user agent style for nested <ul>.
- Add support for CSS property list-style-position.
- Support border-width: thin | medium | thick.
- Fix CSS_SHORTHAND_DIRECTIONS case in CssParser.
- Add quirk to reset font properties in tables (fixes e.g. gmail).
+- Cleaned up system includes in dpid directory.
- Fixed CustProgressBox() for systems without weak symbols.
- Handle signed chars. Added dIsspace() and dIsalnum() to dlib.
- Added a_Dpip_get_attr_l() to DPIP's API.
- Changed the CCCs to build in one step (for both HTTP and DPI). This
is simpler and helps to avoid race conditions.
- Updated CCCwork.txt to the new scheme.
- Fixed a bug with OPTION element (it was parsing entities twice).
- Bugfix: remove the empty cache entry lingering after connection abort.
- Switched capi to use dlib's Dlist instead of a_List_* methods.
- Remove empty cache entries on Stop-button press and new link request!
- Fixed URL unescaping in the datauri DPI.
- Changed and reimplemented the DPI API.
* Fixed bugs and updated all DPI programs:
* Reimplemented the file dpi using select(). No pthreads-based anymore.
* Fixed ftp dpi: downloads, streamed transfer, error feedback.
* Fixed a bug in dillo with lingering cache entries.
* Made dpidc a C language program.
* Made the internal dsh implementation use unique functions for read/write.
* Removed the write/fwrite mix in DPIP.
* Made the DPIP API token-based. Packet assembling is coded inside DPIP!
* Several cleanups and more error handling sprinkled all over too.
+- Fix segfault from AREA when MAP is missing name attribute.
- Fix image map coordinates when margin/border/padding present.
- Handle stylesheet @charset.
- Fix cache segfault when cache entry removed.
- Split words that contain whitespace as numeric character references.
- Allow linebreaks around Chinese/Japanese characters.
- Fix segfault in Html_parse_doctype (BUG#918).
- Change exit code used for bad command line argument.
- By default, do not use proxy for localhost (BUG 921).
- Fix scrolling for text search.
- Added 'save' key action (not bound by default).
- Tooltips
- Fix segfault when radio button lacks name attribute.
- Enable popup menu below bottom of page content (BUG#856).
- Handle JPEGs with CMYK color space.
- Allow keysyms in keysrc.
- Explicitly check installation bindir for dpid (BUG 930)
- General cookies overhaul.
+- Support for the letter-spacing property.
+- Fixed a bug in w3c_mode. In fact it wasn't working at all.
- Improve stylesheet menu.
+- Limit number of simultaneous connections (BUG 685).
