- see http://www.mozilla.org/en-US/firefox/15.0/releasenotes/
- add -Os hack to fix a relocation error when linking on ppc (as was
done in tb since 10..)
- garbage collect nsSound.cpp, the original one uses libcanberra
properly and thus sndio.
- remove patch from #750620, merged upstream (mfbt/double-conversion)
- remove patches from #747257, merged upstream (gstreamer fix)
- remove patches from #691898, merged upstream (yarr jit ppc)
CVE-2012-4377 Stored XSS via a File::link to a non-existing image
CVE-2012-4378 Multiple DOM-based XSS flaws due improper filtering of
uselang parameter
CVE-2012-4379 CSRF tokens, available via API, not protected when
X-Frame-Options headers used
CVE-2012-4380 Did not prevent account creation for IP addresses
blocked with GlobalBlocking
CVE-2012-4381 Password saved always to the local MediaWiki database
CVE-2012-4382 Metadata about blocks
feedback/OKs from aja@ william@ jasper@ giovanni@ kevlo@
- move MESSAGE to README.
- add missing dep on php-mysqli.
- change the unpack/fake-install method to use the standard
extract infrastructure.
- @sample contrib/htaccess into .htaccess so apache can use it by
default if allowoverride is enabled. this does some basic user-agent
checks to reduce the risk of phpmyadmin sites showing up in
search engines.
- provide an @sample'd apache config file which enables use of
the .htaccess file and restricts access to localhost. talk about
this in README so people know what's going on. (phpMyAdmin has
a history of security-related bugs, but because it's rather
commonly used it's much better to have it in ports so that
it can be updated easily; these changes make the default
installation safer).
building the static binary. Fixes build problem reported by nigel@ since the
glib-2.0.pc now (correctly) only lists pthread in Libs.private not in Libs.
ok ajacoutot@
A Gravatar is a Globally Recognized Avatar for a given email address.
This allows you to have a global picture associated with your email
address. You can look up the Gravatar for any email address by
constructing a URL to get the image from gravatar.com. This module
does that.
OK sthen@
* Use proper status codes for "Bad request" (and similar) error messages.
* Negative values in some config options leading to strange situations.
* Path disclosure through error messages in search.php (and others).
* Subscriptions were handled incorrectly when merging or splitting topics.
* Ignore BBCodes in search strings.
* The Technetium style had an issue with resizing images.
* Renaming users would unban them.
And others http://fluxbb.org/forums/viewtopic.php?id=6328
While here, the extract part is not needed.
Ok aja@.
* [NEW] Implement a new setting, do_not_track, to set the Do Not Track
HTTP header. This setting is disabled by default in normal mode and
enabled in whitelist mode.
* Fix the keybindings in the example config so they properly represent
the default values in the source code.
* Add some additional paranoia in the input focus code to prevent a
segfault on some sites (most notably, pnc.com).
* Fix a bug where HSTS would never be enabled if referer_mode = always
* Fix the build when debugging is enabled
* Show a warning when the binary could not be run when executing a
program based on a MIME type, except for the special "donothing"
binary name.
Tested by severals.
Ok aja@ gsoares@
- see http://www.seamonkey-project.org/releases/seamonkey2.11/
- remove the -rpath hack, not needed since matthew's ld.so fix from
12/06
- backport cset from #750620 to fix ppc (and other exotic archs) build.
- force-disable gconf in configure.in (bug #765556)
- remove the chunk from #763408, packaging was fixed
