"Andreas Tille, the Debian WordNet maintainer, noticed a bug in my
patch. The bug is not security related, but causes incorrect behaviour
in WordNet.
I replaced a strncpy(s1, s2, strlen(s2)) with a strcpy forgetting that
strncpy invoked that way would always omit the trailing \0 (as the \0
would always be at strlen(s2) + 1). This resulted in a truncation of
output from WordNet which relied on the previous behavior which it
used to 'patch' s1. I've now adjusted the strncpy to be a memcpy and
added a comment, to make the intent of the code clear. (Using a str*
function when you don't wish any handling of \0 is unintuitive to me,
hence my mistake). [..] Apologies for the error."
thanks Rob for the exemplary handling of this advisory. Notifications
to package maintainers and follow-ups are almost unheard-of and very
welcome.
p5-Catalyst-Plugin-Cache-Store-FastMmap,
p5-Catalyst-Plugin-ConfigLoader-Environment,
p5-Catalyst-Plugin-LogWarnings, p5-Catalyst-Component-ACCEPT_CONTEXT,
p5-HTML-SBC and p5-XML-Atom-SimpleFeed to www/
This module provides a minimal API for generating Atom syndication feeds
quickly and easily. It supports all aspects of the Atom format, but it
has no provisions for generating feeds with extension elements.
Simple Blog Code is a simple markup language. You can use it for guest
books, blogs, wikis, boards and various other web applications. It
produces valid and semantic (X)HTML from input and is patterned on that
tiny usenet markups like *bold* and _underline_.
Models and Views don't usually have access to the request object, since
they probably don't really need it. Sometimes, however, having the
request context available outside of Controllers makes your application
cleaner. If that's the case, just use this module as a base class.
This plugin redirects perl's warn() warnings to a Catalyst log
($c->log->warn), allowing you to filter warnings, log warnings to a
database, Log4Perl, etc.
This store plugin is a bit of a wrapper for Cache::FastMmap.
As Cache::FastMmap can't store plain values by default, this module
ships with a subclass that will wrap all values in a scalar reference
before storing.
This plugin gives you access to a variety of systems for caching data.
It allows you to use a very simple configuration API, while maintaining
the possibility of flexibility when you need it later.
This module provides code coverage metrics for Perl. Code coverage
metrics describe how thoroughly tests exercise code. By using
Devel::Cover you can discover areas of code not exercised by your tests
and determine which tests to create to increase coverage. Code coverage
can be considered as an indirect measure of quality.
When writing test suites for modules that operate on files, it's often
inconvenient to correctly create a platform-independent temporary
storage space, manipulate files inside it, then clean it up when the
test exits. The inconvenience usually results in tests that don't work
everwhere, or worse, no tests at all.
This module aims to eliminate that problem by making it easy to do
things right.
- this had an evil use of NO_CHECKSUM (don't do that at home kids,
just mirror the distfile!): remove it and provide distinfo
- regen PLIST while there, and thus bump package
ok steven@
(namely cairo, libart and xlib)
suggested by David Chisnall <csdavec at swansea dot ac dot uk>
MESSAGE tweaked from the FreeBSD gnustep-back port.
While deprecated, the xlib backend is still the default because it's the
most stable for now.
GWorkspace is a clone of the NeXT workspace manager with some added
features as spatial viewing, an advanced database based search system,
etc.
As for the rest of GNUstep apps under OpenBSD, it is somewhat
experimental.
Cherokee is a very fast, flexible and easy to configure Web Server. It
supports the widespread technologies nowadays: FastCGI, SCGI, PHP, CGI,
TLS and SSL encrypted connections, Virtual hosts, Authentication, on the
fly encoding, Load balancing, Apache compatible log files, and much
more.
based on a submission from Fernando Quintero (MAINTAINER)
testing, feedback and ok sthen@
hardware architecture instead of the machine port. Also add support
for detecting the presence of AltiVec at run-time using the
machdep.altivec sysctl.
At the moment AltiVec is disabled but this at least allows the
configure script to build in the support if --disable-altivec is
removed. Facilitates further testing and debugging.
ok kili@ jakemsr@
If you have to work on ghc-HEAD but can't get the ghc-HEAD souces, there's
no point to work on it at all.
If you complain about missing portability, and all those Haskell guys agree,
but at the same time delay bootstrapping to the next release whenever a
release happens, there's no expectation for getting bootstrapping back at
all.
- Fixes cross-site redirection in quickjump found by Russ McRee.
- Fixes wiki engine XSS found by Nathan Collins.
- Added PostgreSQL 8.3 support.
- Fixes FineGrainedPermissions for scoped repositories.
- Fixes problem with repository syncing raising exceptions.
ok Ben Lovett (MAINTAINER)
