Commit Graph

161 Commits

Author SHA1 Message Date
stephan
6b41a25273 update drupal core to 6.19, addresses SA-CORE-2010-002:
- OpenID authentication bypass
 - File download access bypass
 - Comment unpublishing bypass
 - Actions cross site scripting

gory details at http://drupal.org/node/880476
no database upgrade required for this update.
2010-09-14 10:14:33 +00:00
stephan
81666a6b43 +filefield_sources 2010-09-14 10:00:43 +00:00
stephan
21cb3e2560 import www/drupal6/filefield-sources-1.2
FileField Sources is an extension to the FileField module. The FileField
module lets you upload files from your computer through a CCK field. The
FileField Sources module expands on this ability by allowing you to
select new or existing files through additional means.

ok espie@ and landry@ some while ago.
2010-09-14 09:59:27 +00:00
ajacoutot
f7296e021c Remove PKGNAME=${DISTNAME} constructs where possible, as this is the
default anyway.

ok jasper@
2010-08-31 08:15:44 +00:00
stephan
e72f43da35 - update to print-6.x-1.11
- adresses SA-CONTRIB-2010-082, details at http://drupal.org/node/880392
- anticipatory symlinking of tcpdf so the print_pdf module 'just works'.

ok espie@
2010-08-20 14:42:56 +00:00
stephan
788bf72c5a update to drupal6-cck-2.8, adresses SA-CONTRIB-2010-088 (access bypass),
full details at http://drupal.org/node/880736 - no DB update required.
2010-08-20 09:47:08 +00:00
stephan
fc6714df4a update to date-6.x-2.6
NOTE: The included copy of the jQuery UI datepicker in the Date Popups
module has been removed. It is now necessary to install the jQuery UI
module for the Date Popups datepicker to work.

Full list of changes at http://drupal.org/node/70963/release
2010-08-19 15:10:50 +00:00
stephan
c0ec9e1ba3 update to link-6.x-2.9 2010-08-19 09:53:59 +00:00
stephan
6bfb5bfc4d update to imagefield-6.x-3.7 2010-08-19 09:44:21 +00:00
stephan
853172156a update to filefield-6.x-3.7 2010-08-19 09:40:50 +00:00
stephan
23ef482812 update to devel-6.x-1.22 2010-08-19 08:37:13 +00:00
stephan
169aa5eba0 update to bueditor-6.x-2.1 2010-08-19 08:31:55 +00:00
stephan
585ecac2e7 update to 1.21, addresses SA-CONTRIB-2010-079.
ok espie@ and landry@
2010-08-05 08:01:26 +00:00
stephan
e8866523eb revert, we're in lock. And I should read my emails. Sorry guys! 2010-08-03 11:10:39 +00:00
stephan
7b1727511b update to 2.1 2010-08-03 10:24:48 +00:00
stephan
daeda0bd33 update to masquerade-6.x-1.4. Addresses SA-CONTRIB-2010-068 (CSRF).
removing a local patch that is now included in upstream.

Please note some users have reported vage 'issues' with this update,
see http://drupal.org/node/695952 - Make sure you clear your cache and
reset switch back navigation menu item to defaults after this update.

prodded by espie@
2010-07-12 10:14:51 +00:00
stephan
0cf5394e4c +pngfix 2010-07-12 10:03:43 +00:00
stephan
915462545b import drupal6/pngfix-1.0
Includes a jQuery PNG Fix to correctly handle PNG transparency in Windows
Internet Explorer 5.5 and 6. Transparent PNGs on IE result in killed
kittens, so this module tries to help that.

ok landry@
2010-07-12 10:02:19 +00:00
espie
207cf70c75 small security issues, low impact...
had to wait for filefield 3.5, since 3.4 was broken.
2010-06-19 20:53:19 +00:00
espie
234aae7770 minor updates. 2010-06-03 16:25:23 +00:00
stephan
32b0f378bf update to 2.2, DRUPAL-SA-CONTRIB-2010-050 and adds French translation.
ok espie@ and landry@
2010-05-21 09:01:42 +00:00
stephan
f9d6e26b31 update to 6.x-3.3, addressing DRUPAL-SA-CONTRIB-2010-41,
see http://drupal.org/node/791054

ok espie@
2010-05-06 09:27:40 +00:00
stephan
c85961bc3c update to 3.3, addresses DRUPAL-SA-CONTRIB-2010-40
see http://drupal.org/node/791050

ok landry@
2010-05-06 09:03:56 +00:00
stephan
9b3be1dff8 fix email of MAINTAINER, ok sthen@ 2010-05-05 14:40:00 +00:00
stephan
2889936655 load content module in the hook_update_N() implementation,
see http://drupal.org/node/625768. ok espie@
2010-04-30 07:52:34 +00:00
stephan
2a71bb786d +link 2010-04-28 07:47:44 +00:00
stephan
c3d11acf2b import drupal6-link-2.8
A CCK content field which lets you add a complete link to your content
types; including URL, title, and optionally a target attribute. The
link module is a one-stop content link "field" type for CCK.

ok landry@
2010-04-28 07:45:57 +00:00
stephan
8c3fed779b +rules-1.2 2010-04-22 14:35:16 +00:00
stephan
85d880098c import drupal6/rules-1.2
The rules module allows site administrators to define conditionally
executed actions based on occurring events (known as reactive or ECA
rules).

ok landry@
2010-04-22 14:33:47 +00:00
stephan
3240661850 +jquery_ui, +modalframe, +noderelationships 2010-04-20 12:10:46 +00:00
stephan
4d5e481ee1 import drupal6-noderelationships-1.5
The Node Relationships module provides methods to complete two way
relationships between content types enhancing the features of node
reference fields by adding 'Node reference extras' and 'Automatic
back references'.

ok espie@ and landry@
2010-04-20 12:05:12 +00:00
stephan
b45cf9967b import drupal6-modalframe-1.6
This module provides an API to render an iframe within a modal dialog
based on the jQuery UI Dialog plugin. You should not install this module
unless another module requires you to, or you wish to use it for your
own custom modules.

ok espie@ and landry
2010-04-20 12:03:17 +00:00
stephan
f611ea44c1 import drupal6/jquery_ui-1.3
A wrapper module around the jQuery UI effects library that lets module
developers add swooshy, swishy effects to their code. This is a utility
module that won't do anything on its own. See README.txt for how your
module can use it to add jQuery UI effects to your pages.

ok landry@ and espie@
2010-04-20 12:01:11 +00:00
stephan
a503994a92 - add db descriptions, see http://drupal.org/node/775182
- bump PKGNAME

prodded by espie@, ok landry@
2010-04-19 14:15:01 +00:00
stephan
0640f6ca5b - add db descriptions so that the schema module can
parse them, see http://drupal.org/node/588694
- bump PKG_NAME

prodded and ok espie@
2010-04-19 09:21:10 +00:00
ajacoutot
9cb31f3652 Consistency: remove the 1, 2 or even 3 empty blank lines.
sthen@ agrees
2010-04-15 14:29:16 +00:00
stephan
055b732289 update to 1.3, ok espie@ 2010-04-10 11:59:25 +00:00
stephan
c9b0534ed1 update to 2.10.
"This is a bug fix release to correct some issues with 2.9. If you are
using postgres DO NOT install Views 2.9. Install 2.10 instead. If you
are not experiencing these issues with 2.9 then you do not need to
update."

ok espie@
2010-04-10 11:55:42 +00:00
stephan
3aea83ed56 update to 2.9. Fixes DRUPAL-SA-CONTRIB-2010-036.
ok landry@
2010-04-08 10:08:12 +00:00
stephan
eb51b2f960 update to views_bulk_operations-1.9. ok landry@ 2010-04-07 14:05:35 +00:00
stephan
befc349074 update to bueditor-2.0. Don't forget to run update.php. ok landry@ 2010-04-07 14:04:00 +00:00
espie
02cddbb397 +ckeditor 2010-03-22 20:44:51 +00:00
espie
54a16eb8ec ckeditor is the successor of fckeditor, leaner, meaner faster 2010-03-22 20:44:07 +00:00
espie
75b2ed5940 comment out the php4 compat module, there's absolutely no reason for us
to install it.
2010-03-22 10:29:33 +00:00
espie
e2e23af52a a few minor updates 2010-03-22 10:28:38 +00:00
espie
cba2887019 security fix "easter egg": old fckeditor is no longer supported, and the
new one tells you fckeditor-2.6.3 is holed... nasty
2010-03-05 10:07:59 +00:00
stephan
f691a20cad security update to 6.16, fixes DRUPAL-SA-CORE-2010-001.
ok jasper@, "I can vouch for it" @espie
2010-03-05 09:09:23 +00:00
stephan
b173411b8f security update to 1.4, fixes DRUPAL-SA-CONTRIB-2010-023.
ok jasper@ and espie@
2010-03-04 11:09:54 +00:00
espie
d5858ddd80 unprotect archive, so that clean works 2010-03-01 12:02:20 +00:00
espie
100f0c7870 SUBDIR += is wrong: it means the makefile will pick up SUBDIR from env, thus
breaking cd /usr/ports && SUBDIR=some/path make something for
category makefiles. While there, also put spaces around += uniformously.
okay naddy@, jasper@
2010-02-01 17:00:12 +00:00