Commit graph

16402 commits

Author SHA1 Message Date
leot
2f29eac7d3 Install README too.
Unfortunately pup doesn't have any man pages. However, README.md is
a good introduction to it so install it in `share/doc/pup' so that binary
package users can easily access it.

Bump PKGREVISION.

Discussed with <fhajny>
2017-05-08 08:50:13 +00:00
adam
81258f3d5e Changes 1.11.1:
Allowed disabling server-side cursors on PostgreSQL

Bugfixes:
Made migrations respect Index’s name argument. If you created a named index with Django 1.11, makemigrations will create a migration to recreate the index with the correct name.
Fixed a crash when using a __icontains lookup on a ArrayField.
Fixed a crash when using a two-tuple in EmailMessage’s attachments argument.
Fixed QuerySet.filter() crash when it references the name of a OneToOneField primary key.
Fixed empty POST data table appearing instead of “No POST data” in HTML debug page.
Restored BoundFields without any choices evaluating to True.
Prevented SessionBase.cycle_key() from losing session data if _session_cache isn’t populated.
Fixed layout of ReadOnlyPasswordHashWidget (used in the admin’s user change page).
Allowed prefetch calls on managers with custom ModelIterable subclasses.
Fixed change password link in the contrib.auth admin for el, es_MX, and pt translations.
Restored the output of the class attribute in the <ul> of widgets that use the multiple_input.html template. This fixes ModelAdmin.radio_fields with admin.HORIZONTAL.
Fixed crash in BaseGeometryWidget.subwidgets().
Fixed exception reraising in ORM query execution when cursor.execute() fails and the subsequent cursor.close() also fails.
Fixed a regression where CheckboxSelectMultiple, NullBooleanSelect, RadioSelect, SelectMultiple, and Select localized option values.
Corrected the stack level of unordered queryset pagination warnings.
Fixed a regression causing incorrect queries for __in subquery lookups when models use ForeignKey.to_field.
Fixed crash when overriding the template of django.views.static.directory_index().
Fixed a regression in formset min_num validation with unchanged forms that have initial data.
Prepared for cx_Oracle 6.0 support.
Updated the contrib.postgres SplitArrayWidget to use template-based widget rendering.
Fixed crash in BaseGeometryWidget.get_context() when overriding existing attrs.
Prevented AddIndex and RemoveIndex from mutating model state.
Prevented migrations from dropping database indexes from Meta.indexes when changing Field.db_index to False.
Fixed a regression in choice ordering in form fields with grouped and non-grouped options.
Fixed crash in BaseInlineFormSet._construct_form() when using save_as_new.
Fixed a regression where Model._state.db wasn’t set correctly on multi-table inheritance parent models after saving a child model.
Corrected the return type of ArrayField(CITextField()) values retrieved from the database.
Fixed QuerySet.prefetch_related() crash when fetching relations in nested Prefetch objects.
Prevented hiding GDAL errors if it’s not installed when using contrib.gis. (It’s a required dependency as of Django 1.11.)
Fixed a regression causing __in lookups on a foreign key to fail when using the foreign key’s parent model as the lookup
2017-05-08 04:58:58 +00:00
adam
5146caf980 Model-mommy offers you a smart way to create fixtures for testing in Django.
With a simple and powerful API you can create many objects with a single line
of code.
2017-05-05 15:46:41 +00:00
ryoon
50eb6add89 Update to 11.0.3
Changelog:
Server

    Use the correct principal for shared addressbooks (server/3608)
    Fix saving backup codes by using a correct data uri (server/3652)
    Update icewind/streams to 0.5.2 (server/32931)
    Fix string comparison and return docs (server/3665)
    Typecast shared mount's storage_id to int as documented + some refactor to avoid similar bugs (server/3658)
    Use a proper date format for transfer ownership (server/3700)
    DAV sharing permissions should not depend on the order (server/3722)
    Add new user agent of windows 10 dav backend (server/37641)
    Add back appstoreenabled config switch (server/37671)
    Call right function after sudo mode (server/3820)
    Dont allow empty wildcard search (server/3842)
    Remove single quotes around search query like in user search (server/3849)
    Fix mimetype detection on public uploads for the workflow engine (server/3765)
    Fix branding and show Nextcloud (server/39691)
    Fix reshare with user activity message (server/39812)
    Create correct VCard and return correct error codes (server/4029)
    Prevent migration from ownCloud 10 to Nextcloud 11 (server/34151)
    Make sure transparency is an integer when saving a calendar (server/4167)
    Make public links work with master key (server/42071)
    Don't try to render the avatars if avatars are disabled (server/4214)
    Reduce error message text (server/42281)
    Don't list on public calendar endpoints (server/4229)
    Fix upload of folders in Chrome (server/4154)
    Make sure blob columns are correctly converted as parameters (server/4233)
    Save the scope of an auth token in the session (server/4225)
    Take share by mail into consideration if we calculate the access list (server/4242)
    Also add the root of external storages to the file id list (server/4237)
    Fix LDAP description (server/42382)
    Remove the double password confirmation on changing cron (server/4236)
    Fix scheduling plugin on legacy caldav endpoint (server/4235)
    Directly fix invalid values of DTEND and DTSTART (server/4234)
    Make JobList::next() lock free (server/4254)
    Don't remove owner property for public calendars (server/4272)
    Add capabilities for share by mail (server/42511)
    Dont use the permissions mask while scanning (server/4278)
    Add missing maintenance plugin to new DAV endpoint (server/4290)
    Fix bug with shared_by for own calendars if shared (server/4301)
    Translation string corrected > 1 user (server/4377)

Activity

    Fix activities for "Files drop" on external storages (activity/118)

User_SAML

    Bump to php-saml 2.10.5 (user_saml/1001)

Logreader

    Small screen layout improvements (logreader/2bcd915969386ceb77c7f91dfd5fc19fd3212346
    Fix log filtering (logreader/4095dfc62dcceb3c59a3f581baa5589737d0e6f3)
    Greatly speedup log iteration (logreader/71a4c6849641f821e80d96674c57a69fe7a8aa9e)
    Search more rows (logreader/b9d00b5599ac8a76862895266f1c23096391aad8)
    Stop iterating if we dont have a valid file handle (logreader/a87a8e653ecae5efef6342e645b98f2878219c87)
    Don't return a LogIterator on a broken handle (logreader/39069108f99d463b1cb8bc944f3ef24324b9f43d)
    More robust log iteration (logreader/c0eb04d55bf1dee94ef523dae0e3b0e6afc272a6)
    Use proper iso date format (logreader/13a31181a6d72d084797a71f49f2c5edee8c8dae)
    Automatically try to fix some common escape errors from copy-pasted log entries (logreader/031db2a7f9b9f8cee42acf6eae7d993d31d4660a)
    Fix stack trace parsing of incorrectly escaped logentries (logreader/538667770edfdd48374ef33e9c15498ed98ece60)
    Highlight entries from the same request when clicking on an entry (logreader/2d1ccd0e4cca32220fcbe0b4d79d1cd23f0e73a5)
    Fix copy paste info searchfield (logreader/0e91b2f46649a720feb7c3b6b8266b8657db5574)
    Fix reset search after 0 results (logreader/50bec8ecf7edd81cfb96a35089283c0d879b41f3)
    Allow searching for requestId and user (logreader/7f84e55bb4a1e4086ab0918a6bf58ad3885bbd91)
    Allow searching in url (logreader/7833d97cf85fd351d2f7550d67d21bd0c2a815f4)
    Fix infinite scroll (logreader/cbe874c6c068b9156ad8456edf31d112da40cbc9)
    Dont show loading indicator if we already have entries (logreader/d26a08dc0540126177e8d20c3e243b44c5a399c4)

Gallery

    Fix upload after core changes (gallery/b4ac4429841cfe2b7ea260dfb37fcde25580143c2)
    Update JavaScript libraries (gallery/247)
2017-05-04 12:26:06 +00:00
adam
03bee1b391 What's new in Tornado 4.5
`tornado.log`
- Improved detection of libraries for colorized logging.

`tornado.httputil`
- `.url_concat` once again treats None as equivalent to an empty sequence.
2017-05-04 09:50:21 +00:00
snj
79a3ae2893 fix PLIST when the official-mozilla-branding option is enabled 2017-05-03 22:29:20 +00:00
jperkin
6b547497bb Convert CXXFLAGS setting C++ standard to USE_LANGUAGES. 2017-05-03 08:38:38 +00:00
fhajny
a777beaf38 * Update www/nginx-devel to 1.13.0.
* Update naxsi to 0.55.3

Changes with nginx 1.13.0                                        25 Apr 2017

- Change: SSL renegotiation is now allowed on backend connections.
- Feature: the "rcvbuf" and "sndbuf" parameters of the "listen"
  directives of the mail proxy and stream modules.
- Feature: the "return" and "error_page" directives can now be used to
  return 308 redirections.
  Thanks to Simon Leblanc.
- Feature: the "TLSv1.3" parameter of the "ssl_protocols" directive.
- Feature: when logging signals nginx now logs PID of the process which
  sent the signal.
- Bugfix: in memory allocation error handling.
- Bugfix: if a server in the stream module listened on a wildcard
  address, the source address of a response UDP datagram could differ
  from the original datagram destination address.


Changes with nginx 1.11.13                                       04 Apr 2017

- Feature: the "http_429" parameter of the "proxy_next_upstream",
  "fastcgi_next_upstream", "scgi_next_upstream", and
  "uwsgi_next_upstream" directives.
  Thanks to Piotr Sikora.
- Bugfix: in memory allocation error handling.
- Bugfix: requests might hang when using the "sendfile" and
  "timer_resolution" directives on Linux.
- Bugfix: requests might hang when using the "sendfile" and "aio_write"
  directives with subrequests.
- Bugfix: in the ngx_http_v2_module.
  Thanks to Piotr Sikora.
- Bugfix: a segmentation fault might occur in a worker process when
  using HTTP/2.
- Bugfix: requests might hang when using the "limit_rate",
  "sendfile_max_chunk", "limit_req" directives, or the $r->sleep()
  embedded perl method with subrequests.
- Bugfix: in the ngx_http_slice_module.


Changes with nginx 1.11.12                                       24 Mar 2017

- Bugfix: nginx might hog CPU; the bug had appeared in 1.11.11.


Changes with nginx 1.11.11                                       21 Mar 2017

- Feature: the "worker_shutdown_timeout" directive.
- Feature: vim syntax highlighting scripts improvements.
  Thanks to Wei-Ko Kao.
- Bugfix: a segmentation fault might occur in a worker process if the
  $limit_rate variable was set to an empty string.
- Bugfix: the "proxy_cache_background_update",
  "fastcgi_cache_background_update", "scgi_cache_background_update",
  and "uwsgi_cache_background_update" directives might work incorrectly
  if the "if" directive was used.
- Bugfix: a segmentation fault might occur in a worker process if
  number of large_client_header_buffers in a virtual server was
  different from the one in the default server.
- Bugfix: in the mail proxy server.


Changes with nginx 1.11.10                                       14 Feb 2017

- Change: cache header format has been changed, previously cached
  responses will be invalidated.
- Feature: support of "stale-while-revalidate" and "stale-if-error"
  extensions in the "Cache-Control" backend response header line.
- Feature: the "proxy_cache_background_update",
  "fastcgi_cache_background_update", "scgi_cache_background_update",
  and "uwsgi_cache_background_update" directives.
- Feature: nginx is now able to cache responses with the "Vary" header
  line up to 128 characters long (instead of 42 characters in previous
  versions).
- Feature: the "build" parameter of the "server_tokens" directive.
  Thanks to Tom Thorogood.
- Bugfix: "[crit] SSL_write() failed" messages might appear in logs
  when handling requests with the "Expect: 100-continue" request header
  line.
- Bugfix: the ngx_http_slice_module did not work in named locations.
- Bugfix: a segmentation fault might occur in a worker process when
  using AIO after an "X-Accel-Redirect" redirection.
- Bugfix: reduced memory consumption for long-lived requests using
  gzipping.
2017-05-02 12:31:43 +00:00
fhajny
904f133804 * Update www/nginx to 1.12.0.
* Update naxsi to 0.55.3.

Approximate changelog since nginx 1.10.3 follows.

Changes with nginx 1.12.0                                        12 Apr 2017
- 1.12.x stable branch.

Changes with nginx 1.11.13                                       04 Apr 2017
- Feature: the "http_429" parameter of the "proxy_next_upstream",
  "fastcgi_next_upstream", "scgi_next_upstream", and
  "uwsgi_next_upstream" directives.
  Thanks to Piotr Sikora.
- Bugfix: in memory allocation error handling.
- Bugfix: requests might hang when using the "sendfile" and
  "timer_resolution" directives on Linux.
- Bugfix: requests might hang when using the "sendfile" and "aio_write"
  directives with subrequests.
- Bugfix: in the ngx_http_v2_module.
  Thanks to Piotr Sikora.
- Bugfix: a segmentation fault might occur in a worker process when
  using HTTP/2.
- Bugfix: requests might hang when using the "limit_rate",
  "sendfile_max_chunk", "limit_req" directives, or the $r->sleep()
  embedded perl method with subrequests.
- Bugfix: in the ngx_http_slice_module.


Changes with nginx 1.11.12                                       24 Mar 2017
- Bugfix: nginx might hog CPU; the bug had appeared in 1.11.11.


Changes with nginx 1.11.11                                       21 Mar 2017
- Feature: the "worker_shutdown_timeout" directive.
- Feature: vim syntax highlighting scripts improvements.
  Thanks to Wei-Ko Kao.
- Bugfix: a segmentation fault might occur in a worker process if the
  $limit_rate variable was set to an empty string.
- Bugfix: the "proxy_cache_background_update",
  "fastcgi_cache_background_update", "scgi_cache_background_update",
  and "uwsgi_cache_background_update" directives might work incorrectly
  if the "if" directive was used.
- Bugfix: a segmentation fault might occur in a worker process if
  number of large_client_header_buffers in a virtual server was
  different from the one in the default server.
- Bugfix: in the mail proxy server.


Changes with nginx 1.11.10                                       14 Feb 2017
- Change: cache header format has been changed, previously cached
  responses will be invalidated.
- Feature: support of "stale-while-revalidate" and "stale-if-error"
  extensions in the "Cache-Control" backend response header line.
- Feature: the "proxy_cache_background_update",
  "fastcgi_cache_background_update", "scgi_cache_background_update",
  and "uwsgi_cache_background_update" directives.
- Feature: nginx is now able to cache responses with the "Vary" header
  line up to 128 characters long (instead of 42 characters in previous
  versions).
- Feature: the "build" parameter of the "server_tokens" directive.
  Thanks to Tom Thorogood.
- Bugfix: "[crit] SSL_write() failed" messages might appear in logs
  when handling requests with the "Expect: 100-continue" request header
  line.
- Bugfix: the ngx_http_slice_module did not work in named locations.
- Bugfix: a segmentation fault might occur in a worker process when
  using AIO after an "X-Accel-Redirect" redirection.
- Bugfix: reduced memory consumption for long-lived requests using
  gzipping.


Changes with nginx 1.11.9                                        24 Jan 2017
- Bugfix: nginx might hog CPU when using the stream module; the bug had
  appeared in 1.11.5.
- Bugfix: EXTERNAL authentication mechanism in mail proxy was accepted
  even if it was not enabled in the configuration.
- Bugfix: a segmentation fault might occur in a worker process if the
  "ssl_verify_client" directive of the stream module was used.
- Bugfix: the "ssl_verify_client" directive of the stream module might
  not work.
- Bugfix: closing keepalive connections due to no free worker
  connections might be too aggressive.
  Thanks to Joel Cunningham.
- Bugfix: an incorrect response might be returned when using the
  "sendfile" directive on FreeBSD and macOS; the bug had appeared in
  1.7.8.
- Bugfix: a truncated response might be stored in cache when using the
  "aio_write" directive.
- Bugfix: a socket leak might occur when using the "aio_write"
  directive.


Changes with nginx 1.11.8                                        27 Dec 2016
- Feature: the "absolute_redirect" directive.
- Feature: the "escape" parameter of the "log_format" directive.
- Feature: client SSL certificates verification in the stream module.
- Feature: the "ssl_session_ticket_key" directive supports AES256
  encryption of TLS session tickets when used with 80-byte keys.
- Feature: vim-commentary support in vim scripts.
  Thanks to Armin Grodon.
- Bugfix: recursion when evaluating variables was not limited.
- Bugfix: in the ngx_stream_ssl_preread_module.
- Bugfix: if a server in an upstream in the stream module failed, it
  was considered alive only when a test connection sent to it after
  fail_timeout was closed; now a successfully established connection is
  enough.
- Bugfix: nginx/Windows could not be built with 64-bit Visual Studio.
- Bugfix: nginx/Windows could not be built with OpenSSL 1.1.0.


Changes with nginx 1.11.7                                        13 Dec 2016

- Change: now in case of a client certificate verification error the
  $ssl_client_verify variable contains a string with the failure
  reason, for example, "FAILED:certificate has expired".
- Feature: the $ssl_ciphers, $ssl_curves, $ssl_client_v_start,
  $ssl_client_v_end, and $ssl_client_v_remain variables.
- Feature: the "volatile" parameter of the "map" directive.
- Bugfix: dependencies specified for a module were ignored while
  building dynamic modules.
- Bugfix: when using HTTP/2 and the "limit_req" or "auth_request"
  directives client request body might be corrupted; the bug had
  appeared in 1.11.0.
- Bugfix: a segmentation fault might occur in a worker process when
  using HTTP/2; the bug had appeared in 1.11.3.
- Bugfix: in the ngx_http_mp4_module.
  Thanks to Congcong Hu.
- Bugfix: in the ngx_http_perl_module.
2017-05-02 12:28:31 +00:00
ryoon
bbe8642378 Fix duplicate GCC_REQD. Noticed by tsutsui@. Thank you. 2017-05-01 00:13:45 +00:00
ryoon
76884737ca Recursive revbump from boost update 2017-04-30 01:21:19 +00:00
wen
6b25b62dae Update to 1.0044
Upstream changes:
1.0044  2017-04-26 22:30:27 PDT
    [IMPROVEMENTS]
        - Allow passing an already-open listen socket to HTTP::Server::PSGI
          and add an option to do so in Plack::Test::Server.
2017-04-29 08:01:25 +00:00
adam
a616634c1a Changes 1.22.0:
lib: Add missing free call on error in inflight_settings_new()
asio: Support specifying stream priority via session::submit()
nghttpx: Clarify --conf option behaviour
nghttpx: Add $tls_sni access log variable
nghttpx: Rename ssl_* log variables as tls_*
nghttpx: Fix path matching bug
nghttpx: SNI based backend server selection
nghttpx: Enable signed_certificate_timestamp extension for TLSv1.3
nghttpx: Add options for X-Forwarded-Proto header field
nghttpx: Add --single-process option
nghttpx: Use 502 as server error code
nghttpx: Use SSL_CTX_set_early_data_enabled with boringssl
nghttp: Verify server certificate and show warning if it fails
integration: Use nip.io instead of xip.io
2017-04-29 06:01:55 +00:00
ryoon
e19b9362fd Require GCC 4.9 or later. Thank you, oster@ 2017-04-29 02:45:20 +00:00
wen
b0fa780ace Update to 5.06
Upstream changes:
5.06     2017-04-28
   Release by Kent Fredric

    * Revert XML escaping changes from 5.04 due to large numbers of
      broken dependents
      - RT#121310 https://rt.cpan.org/Ticket/Display.html?id=121310
      - https://github.com/rjbs/MasonX-Resolver-WidgetFactory/issues/1
      - https://github.com/kentfredric/HTML-Tree/issues/1
2017-04-29 01:25:30 +00:00
wiz
e4bc441c99 + py-meld3 2017-04-28 14:49:51 +00:00
wiz
a8fbfed8a1 Import py-meld3-1.0.2 as www/py-meld3.
meld3 is an HTML/XML templating system for Python which keeps
template markup and dynamic rendering logic separate from one
another. See http://www.entrian.com/PyMeld for a treatise on the
benefits of this pattern.

meld3 can deal with HTML or XML/XHTML input and can output well-formed
HTML or XML/XHTML.

meld3 is a variation of Paul Winkler's Meld2, which is itself a
variation of Richie Hindle's PyMeld.

meld3 uses Frederik Lundh's ElementTree library.
2017-04-28 14:49:30 +00:00
jaapb
c7b711dc86 Updated package to newest version, 6.2. Changes include:
* Implement Eliom_client.onchangepage
* Fix URL-related bugs arising in mobile apps
2017-04-28 07:56:53 +00:00
ryoon
fe26c6b792 Add a comment to patch 2017-04-27 14:08:34 +00:00
wiz
f9663f883b Updated p5-Net-HTTP to 6.14.
6.14      2017-04-24 11:27:26-04:00 America/Toronto
    - Improvements to live tests (Shoichi Kaji and Kent Fredric)
    - Fix a bug where downloading files is sometimes very slow GH#44 (Shoichi
      Kaji)
2017-04-27 12:46:02 +00:00
wiz
e9713e9eb5 Updated p5-Mojolicious to 7.31.
7.31  2017-04-23
  - Removed deprecated files, slurp and spurt functions from Mojo::Util.
  - Removed deprecated parts attribute from Mojo::Home.
  - Removed deprecated slurp and spurt methods from Mojo::ByteStream.
  - Removed deprecated lib_dir, list_files, parse and rel_dir methods from
    Mojo::Home.
  - Removed deprecated rel_dir method from Mojolicious::Command.
  - Removed deprecated is_status_class method from Mojo::Message::Response.
  - Fixed a bug in the app generator command where the config file name was not
    based on the application moniker.
2017-04-27 12:44:18 +00:00
wiz
cff6e43ab6 Updated p5-HTML-Tree to 5.05.
5.05      2017-04-26

    [FIXES]
    * Revert Dist::Zilla Removal
      - https://github.com/jfearn/HTML-Tree/issues/7
      - Vendor note: It should be simpler to compare 5.03 and 5.05
        than to compare 5.04 and 5.05, or 5.03 and 5.05.
      - Fixes RT#12230: Undeclared dep on Test::Fatal
        - https://rt.cpan.org/Ticket/Display.html?id=121230
    * Proper fix for '.' in @INC
      - https://rt.cpan.org/Ticket/Display.html?id=120521
2017-04-27 12:41:00 +00:00
maya
8043ac84e4 firefox: bump required nss 2017-04-27 11:19:35 +00:00
ryoon
ec2d0a2278 Add firefox52-l10n 2017-04-27 01:59:45 +00:00
ryoon
7e853f8aa8 Import firefox52-l10n-52.1.0 as www/firefox52-l10n.
This package contains language packs for www/firefox52.
2017-04-27 01:58:37 +00:00
ryoon
351f39904c Add firefox52 2017-04-27 01:57:00 +00:00
ryoon
c4d1b3723e Import firefox52-52.1.0 as www/firefox52.
Mozilla Firefox is a free, open-source and cross-platform web browser
for Windows, Linux, MacOS X and many other operating systems.

It is fast and easy to use, and offers many advantages over other web
browsers, such as tabbed browsing and the ability to block pop-up
windows.

Firefox also offers excellent bookmark and history management, and it
can be extended by developers using industry standards such as XML,
CSS, JavaScript, C++, etc. Many extensions are available.
2017-04-27 01:55:57 +00:00
ryoon
2aa293f2d9 Update to 53.0
* Sync with firefox-53.0
2017-04-27 01:52:19 +00:00
ryoon
4ccc673e40 Update to 53.0
Changelog:
New
    Improved graphics stability for Windows users with the addition of compositor process separation (Quantum Compositor)
    Two new 'compact' themes available in Firefox, dark and light, based on the Firefox Developer Edition theme
    Lightweight themes are now applied in private browsing windows
    Reader Mode now displays estimated reading time for the page
    Windows 7+ users on 64-bit OS can select 32-bit or 64-bit versions in the stub installer

Fixed
    Various security fixes

Changed
    Updated the design of site permission requests to make them harder to miss and easier to understand
    Windows XP and Vista are no longer supported. XP and Vista users running Firefox 52 will continue to receive security updates on Firefox ESR 52.
    32-bit Mac OS X is no longer supported. 32-bit Mac OS X users can switch to Firefox ESR 52 to continue receiving security updates.
    Updates for Mac OS X are smaller in size compared to updates for Firefox 52
    New visual design for audio and video controls
    Ended Firefox Linux support for processors older than Pentium 4 and AMD Opteron
    The last few characters of shortened tab titles fade out instead of being replaced by ellipses to keep more of the title visible

Security fixes:
 #CVE-2017-5433: Use-after-free in SMIL animation functions
 #CVE-2017-5435: Use-after-free during transaction processing in the editor
 #CVE-2017-5436: Out-of-bounds write with malicious font in Graphite 2
 #CVE-2017-5461: Out-of-bounds write in Base64 encoding in NSS
 #CVE-2017-5459: Buffer overflow in WebGL
 #CVE-2017-5466: Origin confusion when reloading isolated data:text/html URL
 #CVE-2017-5434: Use-after-free during focus handling
 #CVE-2017-5432: Use-after-free in text input selection
 #CVE-2017-5460: Use-after-free in frame selection
 #CVE-2017-5438: Use-after-free in nsAutoPtr during XSLT processing
 #CVE-2017-5439: Use-after-free in nsTArray Length() during XSLT processing
 #CVE-2017-5440: Use-after-free in txExecutionState destructor during XSLT processing
 #CVE-2017-5441: Use-after-free with selection during scroll events
 #CVE-2017-5442: Use-after-free during style changes
 #CVE-2017-5464: Memory corruption with accessibility and DOM manipulation
 #CVE-2017-5443: Out-of-bounds write during BinHex decoding
 #CVE-2017-5444: Buffer overflow while parsing application/http-index-format content
 #CVE-2017-5446: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
 #CVE-2017-5447: Out-of-bounds read during glyph processing
 #CVE-2017-5465: Out-of-bounds read in ConvolvePixel
 #CVE-2017-5448: Out-of-bounds write in ClearKeyDecryptor
 #CVE-2017-5437: Vulnerabilities in Libevent library
 #CVE-2017-5454: Sandbox escape allowing file system read access through file picker
 #CVE-2017-5455: Sandbox escape through internal feed reader APIs
 #CVE-2017-5456: Sandbox escape allowing local file system access
 #CVE-2017-5469: Potential Buffer overflow in flex-generated code
 #CVE-2017-5445: Uninitialized values used while parsing application/http-index-format content
 #CVE-2017-5449: Crash during bidirectional unicode manipulation with animation
 #CVE-2017-5450: Addressbar spoofing using javascript: URI on Firefox for Android
 #CVE-2017-5451: Addressbar spoofing with onblur event
 #CVE-2017-5462: DRBG flaw in NSS
 #CVE-2017-5463: Addressbar spoofing through reader view on Firefox for Android
 #CVE-2017-5467: Memory corruption when drawing Skia content
 #CVE-2017-5452: Addressbar spoofing during scrolling with editable content on Firefox for Android
 #CVE-2017-5453: HTML injection into RSS Reader feed preview page through TITLE element
 #CVE-2017-5458: Drag and drop of javascript: URLs can allow for self-XSS
 #CVE-2017-5468: Incorrect ownership model for Private Browsing information
 #CVE-2017-5430: Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
 #CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1
2017-04-27 01:49:47 +00:00
fhajny
d0034c1098 Update www/py-python-mimeparse to 1.6.0.
No changelog published, but this seems to be the currently maintained
branch (rather than the previous 0.x one).
2017-04-25 20:34:04 +00:00
taca
67996aa521 Update contao43 to 4.3.9.
# Contao calendar bundle change log

### 4.3.8 (2017-04-24)

 * Correctly use the en dash in the calendar modules (see contao/core#8690).
 * Correctly support 64 character template names everywhere (see contao/core#6819).

# Contao comments bundle change log

### 4.3.8 (2017-04-24)

 * Correctly support 64 character template names everywhere (see contao/core#6819).

# Contao core bundle change log

### 4.3.9 (2017-04-25)

 * Revert the Punycode library changes (see contao/core#8693).

### 4.3.8 (2017-04-24)

 * Inline small images in protected folders in the file manager (see #636).
 * Correctly encode the URL in the DataContainer::switchToEdit() method (see #762).
 * Fix the parent view drag and drop in Firefox (see #666).
 * Correctly display the search results in the extended tree view (see #739).
 * Update the Punycode library to version 2 (see #748).
 * Fix the "delete file" button for non-admin users (see #764).
 * Prevent endless loops in the book navigation module (see contao/core#8665).
 * Limit the maximum size of dimensionless SVGs in the back end (see contao/core#8684).
 * Correctly support 64 character template names everywhere (see contao/core#6819).
 * Remove the UTF-8 BOM when combining files (see contao/core#8689).
 * Correctly move folders with an "@" in their name (see contao/core#8674).
 * Correctly redirect to the last page visited upon login (see contao/core#8632).

### 4.3.7 (2017-03-23)

 * Check the database connection in the WebsiteRootsConfigProvider class.
 * Fix the %2B conversion in the Controller::addToUrl() method.

# Contao listing bundle change log

### 4.3.8 (2017-04-24)

 * Correctly support 64 character template names everywhere (see contao/core#6819).

# Contao news bundle change log

### 4.3.8 (2017-04-24)

 * Correctly support 64 character template names everywhere (see contao/core#6819).

# Contao newsletter bundle change log

### 4.3.8 (2017-04-24)

 * Correctly support 64 character template names everywhere (see contao/core#6819).
2017-04-25 15:55:18 +00:00
taca
0b5ec1a0c1 Update contao35 to 3.5.27.
Version 3.5.27 (2017-04-25)
---------------------------

### Fixed
Revert the Punycode library changes (see #8693).
2017-04-25 15:50:41 +00:00
wiz
70c1541f58 Fix build with icu-59. 2017-04-25 10:37:26 +00:00
adam
5370ab3fed Added missing DEPENDS on py-crontab 2017-04-24 16:23:50 +00:00
wiz
ec700c4595 Fix build with icu-59. 2017-04-24 15:40:12 +00:00
sborrill
581a8e1a04 Link-test shm_* functions rather than just compile test as this ignores
missing functions.
Define MAP_ANONYMOUS as a synonym of MAP_ANON if the former doesn't exist.
2017-04-24 14:35:01 +00:00
taca
4355cd357b Update contao35 to 3.5.26.
Version 3.5.26 (2017-04-20)
---------------------------

### Fixed
Prevent endless loops in the book navigation module (see #8665).

### Fixed
Limit the maximum size of dimensionless SVGs in the back end (see #8684).

### Fixed
Correctly handle custom namespaces when combining DCA files (see #8682).

### Fixed
Also check the X-Forwarded-Proto header when determining HTTPS (see #8691).

### Fixed
Correctly support 64 character template names everywhere (see #6819).

### Updated
Updated the Punycode library to version 2 (see #8693).

### Fixed
Correctly use the en dash in the calendar modules (see #8690).

### Fixed
Remove the UTF-8 BOM when combining files (see #8689).

### Fixed
Do not add the CORS headers in the install tool (see #8681).

### Fixed
Correctly move folders with an "@" in their name (see #8674).

### Fixed
Correctly redirect to the last page visited upon login (see #8632).

### Fixed
Back port the e-mail extraction improvements (see #8679).
2017-04-23 14:56:37 +00:00
taca
2d99d160e3 Update typo3_62 to 6.2.31.
2017-04-18  ac75a78                  [RELEASE] Release of TYPO3 6.2.31 (TYPO3 Release Team)
2017-04-18  3de0853  #80857          [TASK] Mark 6.2 as e-o-l in install tool core updater (Christian Kuhn)
2017-04-07  f2ce731  #77855          [BUGFIX] Allow file replace for editors (Helmut Hummel)
2017-04-04  7c45dc5  #48544          [FOLLOWUP][BUGFIX] Do not devlog bad code smells of core classes (Markus Klein)
2017-04-03  5d266a7  #48544          [BUGFIX] Do not devlog bad code smells of core classes (Markus Klein)
2017-03-31  a4c6edc  #80589          [BUGFIX] FAL: Correctly iterate folder content with offset (Markus Klein)
2017-03-25  11506d7  #72299          [BUGFIX] Send correct HTTP message in getUrl (Markus Klein)
2017-03-09  21a8ee2  #64742          [BUGFIX] Extension update: Prevent multiple update trigger (Nicole Cordes)
2017-01-13  b236079  #78986          [BUGFIX] Remove range from sorting field (Georg Ringer)
2017-01-11  a3cc3f9  #79275          [BUGFIX] CacheHashCalculator does not exclude ADMCMD arguments (Benni Mack)
2017-01-07  8bc9de1  #79165          [TASK] Update copyright year to 2017 (Wouter Wolters)
2017-01-03  5631d83  #78822          [BUGFIX] Documentation of sessionTimeout (Anja Leichsenring)
2017-04-23 14:52:31 +00:00
taca
3716407c3a * Add really dependency to ruby-jekyll-minima and ruby-jekyll-feed.
* Add MESSAGE forgot in previous commit.

Bump PKGREVISION.
2017-04-23 13:04:00 +00:00
wiz
51aa06d3a3 Revert previous after py-setuptools is fixed. 2017-04-23 07:03:16 +00:00
wiz
2119c02ab5 Revert previous now that py-setuptools is fixed. 2017-04-23 06:58:47 +00:00
markd
056b42bead Add py-nbconvert and py-notebook 2017-04-23 05:24:51 +00:00
markd
1a6ebdbcb7 Add py-notebook 5.0.0rc2
The Jupyter Notebook is a web application that allows you to create
and share documents that contain live code, equations, visualizations,
and explanatory text. The Notebook has support for multiple
programming languages, sharing, and interactive widgets.
2017-04-23 05:23:27 +00:00
markd
d1eb816b9b Add py-nbconvert 5.1.1
Converting Jupyter Notebooks
2017-04-23 05:18:01 +00:00
markd
5d98f69437 Add py-nbformat 2017-04-23 05:01:43 +00:00
markd
3262f8171a Add py-nbformat 4.3.0
This package contains the base implementation of the Jupyter Notebook format,
and Python APIs for working with notebooks.
2017-04-23 05:00:06 +00:00
markd
fd625fbf4b Update py-bleach to 2.0.0
* Supports Python 3.6.

* Supports html5lib >= 0.99999999 (8 9s).

* There's a ``bleach.sanitizer.Cleaner`` class that you can instantiate with your
  favorite clean settings for easy reuse.

* There's a ``bleach.linkifier.Linker`` class that you can instantiate with your
  favorite linkify settings for easy reuse.

* There's a ``bleach.linkifier.LinkifyFilter`` which is an htm5lib filter that
  you can pass as a filter to ``bleach.sanitizer.Cleaner`` allowing you to clean
  and linkify in one pass.

* ``bleach.clean`` and friends can now take a callable as an attributes arg value.

* Tons of bug fixes.

* Cleaned up tests.

* Documentation fixes.
2017-04-23 04:09:15 +00:00
markd
b85a94d0c7 Add py-terminado 2017-04-23 03:54:20 +00:00
markd
95e7af9c80 Add py-terminado 0.6
This is a Tornado websocket backend for the term.js Javascript terminal emulator
library.

It evolved out of pyxterm, which was part of GraphTerm (as lineterm.py),
v0.57.0 (2014-07-18), and ultimately derived from the public-domain Ajaxterm
code, v0.11 (2008-11-13) (also on Github as part of QWeb).
2017-04-23 03:53:24 +00:00
adam
75a9285105 Revbump after icu update 2017-04-22 21:03:07 +00:00