![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / www / py-moin
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.46 / (download) - annotate - [select for diffs], Tue Jun 28 11:37:49 2022 UTC (17 months, 1 week ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2023Q3-base,
pkgsrc-2023Q3,
pkgsrc-2023Q2-base,
pkgsrc-2023Q2,
pkgsrc-2023Q1-base,
pkgsrc-2023Q1,
pkgsrc-2022Q4-base,
pkgsrc-2022Q4,
pkgsrc-2022Q3-base,
pkgsrc-2022Q3,
HEAD
Changes since 1.45: +2 -2
lines
Diff to previous 1.45 (colored)
*: recursive bump for perl 5.36
Revision 1.45 / (download) - annotate - [select for diffs], Mon Jan 10 18:40:33 2022 UTC (22 months, 3 weeks ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2022Q2-base,
pkgsrc-2022Q2,
pkgsrc-2022Q1-base,
pkgsrc-2022Q1
Changes since 1.44: +3 -2
lines
Diff to previous 1.44 (colored)
py-moin: convert to egg.mk
Revision 1.44 / (download) - annotate - [select for diffs], Sun Jul 11 10:36:59 2021 UTC (2 years, 4 months ago) by bsiegert
Branch: MAIN
CVS Tags: pkgsrc-2021Q4-base,
pkgsrc-2021Q4,
pkgsrc-2021Q3-base,
pkgsrc-2021Q3
Changes since 1.43: +2 -3
lines
Diff to previous 1.43 (colored)
Update moin to 1.9.11.
Version 1.9.11 (2020-11-08)
SECURITY HINT: make sure you have allow_xslt = False (or just do not use
allow_xslt at all in your wiki configs, False is the internal default).
Allowing XSLT/4suite is very dangerous, see HelpOnConfiguration wiki page.
Fixes:
* security fix for CVE-2020-25074:
fix remote code execution via cache action
changeset with fix: d1e5fc7d
* security fix for CVE-2020-15275:
fix malicious SVG attachment causing stored XSS vulnerability
changeset with fix: 64e16037
* make setup.py and .cfg ascii-only, #40
* fix SubProcess' os.setsid usage, #44
* fix interwiki test fails that crept into 1.9.10 release
* highlight parser: use language as code_type rather than "highlight"
* catch indexer error for too long names, #57
* improved indexer logging so logging never crashes due to
encoding issues for non-ascii page or attachment names.
* fix mailheader parsing, add tests for mailimport, #53
* workaround werkzeug errors='fallback:...' regression, #37
* mailimport: fix AttributeError, #55
* surge protection / hosts_deny: fix broken html, #60
Other changes:
* upgrade werkzeug 0.14.1 -> 1.0.1, adapt imports
HINT: if you use the ProxyFix code, the required import has changed to:
from werkzeug.middleware.proxy_fix import ProxyFix
* add secure-cookie 0.1.0 (code was formerly part of werkzeug.contrib), adapt imports
* update pygments 2.1.3 -> 2.5.2
* update passlib 1.7.1 -> 1.7.2
* update parsedatetime 2.4 -> 2.6
Revision 1.43 / (download) - annotate - [select for diffs], Mon May 24 19:55:57 2021 UTC (2 years, 6 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2021Q2-base,
pkgsrc-2021Q2
Changes since 1.42: +2 -2
lines
Diff to previous 1.42 (colored)
*: recursive bump for perl 5.34
Revision 1.42 / (download) - annotate - [select for diffs], Mon Aug 31 18:13:16 2020 UTC (3 years, 3 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base,
pkgsrc-2021Q1,
pkgsrc-2020Q4-base,
pkgsrc-2020Q4,
pkgsrc-2020Q3-base,
pkgsrc-2020Q3
Changes since 1.41: +2 -1
lines
Diff to previous 1.41 (colored)
*: bump PKGREVISION for perl-5.32.
Revision 1.41 / (download) - annotate - [select for diffs], Mon May 25 05:56:18 2020 UTC (3 years, 6 months ago) by rillig
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base,
pkgsrc-2020Q2
Changes since 1.40: +1 -4
lines
Diff to previous 1.40 (colored)
www/py-moin: remove nonexistent files from REPLACE_PYTHON
Revision 1.40 / (download) - annotate - [select for diffs], Thu Feb 27 16:42:05 2020 UTC (3 years, 9 months ago) by bsiegert
Branch: MAIN
CVS Tags: pkgsrc-2020Q1-base,
pkgsrc-2020Q1
Changes since 1.39: +3 -4
lines
Diff to previous 1.39 (colored)
Update py-moin to 1.9.10, the last 1.x release. Patch from Patrick TJ McPhee via pkgsrc-users. Changes are documented at https://github.com/moinwiki/moin-1.9/blob/1.9.10/docs/CHANGES#L13 There are too many to list here, but the summary is - upgrades to included third-party-packages, - wide array of security fixes - improvements in user management
Revision 1.39 / (download) - annotate - [select for diffs], Mon Sep 2 13:20:01 2019 UTC (4 years, 3 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base,
pkgsrc-2019Q4,
pkgsrc-2019Q3-base,
pkgsrc-2019Q3
Changes since 1.38: +2 -2
lines
Diff to previous 1.38 (colored)
Changed PYTHON_VERSIONS_INCOMPATIBLE to PYTHON_VERSIONS_ACCEPTED; needed for future Python 3.8
Revision 1.38 / (download) - annotate - [select for diffs], Sun Aug 11 13:25:07 2019 UTC (4 years, 3 months ago) by wiz
Branch: MAIN
Changes since 1.37: +2 -2
lines
Diff to previous 1.37 (colored)
Bump PKGREVISIONs for perl 5.30.0
Revision 1.37 / (download) - annotate - [select for diffs], Fri Apr 26 14:12:48 2019 UTC (4 years, 7 months ago) by maya
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base,
pkgsrc-2019Q2
Changes since 1.36: +2 -2
lines
Diff to previous 1.36 (colored)
fix some whitespace, mostly introduced in the previous python 3.4 / 3.5 removal commit.
Revision 1.36 / (download) - annotate - [select for diffs], Fri Apr 26 13:14:21 2019 UTC (4 years, 7 months ago) by maya
Branch: MAIN
Changes since 1.35: +2 -2
lines
Diff to previous 1.35 (colored)
Omit mentions of python 34 and 35, after those were removed. - Includes some whitespace changes, to be handled in a separate commit.
Revision 1.35 / (download) - annotate - [select for diffs], Wed Aug 22 09:47:58 2018 UTC (5 years, 3 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base,
pkgsrc-2019Q1,
pkgsrc-2018Q4-base,
pkgsrc-2018Q4,
pkgsrc-2018Q3-base,
pkgsrc-2018Q3
Changes since 1.34: +2 -2
lines
Diff to previous 1.34 (colored)
Recursive bump for perl5-5.28.0
Revision 1.34 / (download) - annotate - [select for diffs], Tue Jul 3 05:03:40 2018 UTC (5 years, 5 months ago) by adam
Branch: MAIN
Changes since 1.33: +2 -2
lines
Diff to previous 1.33 (colored)
extend PYTHON_VERSIONS_ for Python 3.7
Revision 1.33 / (download) - annotate - [select for diffs], Mon Sep 4 18:08:30 2017 UTC (6 years, 3 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base,
pkgsrc-2018Q2,
pkgsrc-2018Q1-base,
pkgsrc-2018Q1,
pkgsrc-2017Q4-base,
pkgsrc-2017Q4,
pkgsrc-2017Q3-base,
pkgsrc-2017Q3
Changes since 1.32: +2 -2
lines
Diff to previous 1.32 (colored)
Follow some redirects.
Revision 1.32 / (download) - annotate - [select for diffs], Sun Jan 1 14:44:05 2017 UTC (6 years, 11 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2017Q2-base,
pkgsrc-2017Q2,
pkgsrc-2017Q1-base,
pkgsrc-2017Q1
Changes since 1.31: +2 -2
lines
Diff to previous 1.31 (colored)
Add python-3.6 to incompatible versions.
Revision 1.31 / (download) - annotate - [select for diffs], Sat Jul 9 13:04:15 2016 UTC (7 years, 5 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2016Q4-base,
pkgsrc-2016Q4,
pkgsrc-2016Q3-base,
pkgsrc-2016Q3
Changes since 1.30: +2 -2
lines
Diff to previous 1.30 (colored)
Remove python33: adapt all packages that refer to it.
Revision 1.30 / (download) - annotate - [select for diffs], Sat Jul 9 06:39:14 2016 UTC (7 years, 5 months ago) by wiz
Branch: MAIN
Changes since 1.29: +2 -2
lines
Diff to previous 1.29 (colored)
Bump PKGREVISION for perl-5.24.0 for everything mentioning perl.
Revision 1.29 / (download) - annotate - [select for diffs], Sat Dec 5 21:26:06 2015 UTC (8 years ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2016Q2-base,
pkgsrc-2016Q2,
pkgsrc-2016Q1-base,
pkgsrc-2016Q1,
pkgsrc-2015Q4-base,
pkgsrc-2015Q4
Changes since 1.28: +2 -2
lines
Diff to previous 1.28 (colored)
Extend PYTHON_VERSIONS_INCOMPATIBLE to 35
Revision 1.28 / (download) - annotate - [select for diffs], Fri Jun 12 10:52:15 2015 UTC (8 years, 5 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q3-base,
pkgsrc-2015Q3,
pkgsrc-2015Q2-base,
pkgsrc-2015Q2
Changes since 1.27: +2 -2
lines
Diff to previous 1.27 (colored)
Recursive PKGREVISION bump for all packages mentioning 'perl', having a PKGNAME of p5-*, or depending such a package, for perl-5.22.0.
Revision 1.27 / (download) - annotate - [select for diffs], Thu May 29 23:38:17 2014 UTC (9 years, 6 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q1-base,
pkgsrc-2015Q1,
pkgsrc-2014Q4-base,
pkgsrc-2014Q4,
pkgsrc-2014Q3-base,
pkgsrc-2014Q3,
pkgsrc-2014Q2-base,
pkgsrc-2014Q2
Changes since 1.26: +2 -1
lines
Diff to previous 1.26 (colored)
Bump for perl-5.20.0. Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
Revision 1.26 / (download) - annotate - [select for diffs], Fri May 9 07:37:25 2014 UTC (9 years, 7 months ago) by wiz
Branch: MAIN
Changes since 1.25: +2 -2
lines
Diff to previous 1.25 (colored)
Mark packages that are not ready for python-3.3 also not ready for 3.4, until proven otherwise.
Revision 1.25 / (download) - annotate - [select for diffs], Mon Jan 20 20:17:05 2014 UTC (9 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2014Q1-base,
pkgsrc-2014Q1
Changes since 1.24: +7 -8
lines
Diff to previous 1.24 (colored)
Update to 1.9.7:
Version 1.9.7:
SECURITY HINT: make sure you have allow_xslt = False (or just do not use
allow_xslt at all in your wiki configs, False is the internal default).
Allowing XSLT/4suite is very dangerous, see HelpOnConfiguration wiki page.
HINT: Python >= 2.5 is maybe required! See docs/REQUIREMENTS for details.
New features:
* passlib support - enhanced password hash security. Special thanks go to
the Python Software Foundation (PSF) for sponsoring development of this!
Docs for passlib: http://packages.python.org/passlib/
If cfg.passlib_support is True (default), we try to import passlib and set
it up using the configuration given in cfg.passlib_crypt_context (default
is to use sha512_crypt with default configuration from passlib).
The passlib docs recommend 3 hashing schemes that have good security, but
some of them have additional requirements:
sha512_crypt needs passlib >= 1.3.0, no other requirements.
pbkdf2_sha512 needs passlib >= 1.4.0, no other requirements.
bcrypt has additional binary/compiled package requirements, please refer to
the passlib docs.
cfg.password_scheme should be '{PASSLIB}' (default) to tell that passlib is
wanted for new password hash creation and also for upgrading existing
password hashes.
For the moin code as distributed in our download release archive, passlib
support should just work, as we have passlib 1.6.1 bundled with MoinMoin
as MoinMoin/support/passlib. If you use some other moin package, please
first check if you have moin AND passlib installed (and also find out the
passlib version you have installed).
If you do NOT want to (not recommended!) or can't use (still using python
2.4?) passlib, you can disable it your wiki config:
passlib_support = False # do not import passlib
password_scheme = '{SSHA}' # use best builtin hash (like moin < 1.9.7)
Please note that after you have used moin with passlib support and have user
profiles with passlib hashes, you can't just switch off passlib support,
because if you did, moin would not be able to log in users with passlib
password hashes. Password recovery would still work, though.
password_scheme always gives the password scheme that is wanted for new or
recomputed password hashes. The code is able to upgrade and downgrade hashes
at login time and also when setting / resetting passwords for one or all
users (via the wiki web interface or via moin account resetpw script
command).
So, if you want that everybody uses strong, passlib-created hashes,
resetting the passwords for all users is strongly recommended:
First have passlib support switched on (it is on by default), use
password_scheme = '{PASSLIB}' (also default), then reset all passwords.
Same procedure can be used to go back to weaker builtin hashes (not
recommended): First switch off passlib support, use password_scheme =
'{SSHA}', then reset all passwords.
Wiki farm admins sharing the same user_dir between multiple wikis must use
consistent password hashing / passlib configuration settings for all wikis
sharing the same user_dir. Using the builtin defaults or doing the
configuration in farmconfig.py is recommended.
Admins are advised to read the passlib docs (especially when experiencing
too slow logins or when running old passlib versions which may not have
appropriate defaults for nowadays):
http://packages.python.org/passlib/new_app_quickstart.html#choosing-a-hash
http://packages.python.org/passlib/password_hash_api.html#choosing-the-right-rounds-value
* Password mass reset/invalidation support, see docs/resetpw/.
This is useful to make sure everybody sets a new password and moin computes
the password hash using the current configuration.
* Customizable default password checker:
Moin's default password checker used and still uses min_length=6 (minimum pw
length) and min_different=4 (minimum count of different chars in the password).
If you feel that you need to require better passwords from your users, you
can customize it now like that in your wiki config:
password_checker = lambda cfg, request, name, pw: multiconfig._default_password_checker(cfg, request, name, pw, min_length=10, min_different=7)
* Removing/disabling inactive users (moin ... account inactive)
Many wikis have a lot of inactive users, that never ever made a single edit.
See help of the command for more details, be careful.
* SystemAdmin user browser: show disabled user accounts at the bottom of
the list
* At startup, announce moin version and code path in log output (makes
support and debugging easier).
* AttachList: introduced search_term parameter (optional) for listing
attachments filtered by a regular expression on their name.
* sign release archive using GnuPG with the key of tw@waldmann-edv.de
ID 31A6CB60 (main key ID FAF7B393)
Fixes:
* logging: if the logging config file can't be read, give a helpful error msg
* logging: use info loglevel (not warning) for telling about using the builtin
default logging config
* moin script commands: warn if someone gave ... to the moin script, avoids a
strange and unhelpful 'empty module name' error message
* reorder html input fields in recoverpass form, to help browsers remember
the user name and password (not erroneously the recovery token and password)
* don't try to send password recovery email to user if email address in
user profile is empty
* cache action: fix 304 http status
* rst parser: fix safe_import for level param in __import__ call of docutils 0.10
* moin maint cleancache: also kill the i18n cache 'meta' pickle file
* sendmail: catch unicode errors when E-Mail addr has non-ascii chars
* redirect last visited: if last visited page is on same wiki, use a local
redirect, do not compute via interwiki map (fixes https: usage)
Revision 1.24 / (download) - annotate - [select for diffs], Fri May 31 12:42:54 2013 UTC (10 years, 6 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2013Q4-base,
pkgsrc-2013Q4,
pkgsrc-2013Q3-base,
pkgsrc-2013Q3,
pkgsrc-2013Q2-base,
pkgsrc-2013Q2
Changes since 1.23: +2 -1
lines
Diff to previous 1.23 (colored)
Bump all packages for perl-5.18, that a) refer 'perl' in their Makefile, or b) have a directory name of p5-*, or c) have any dependency on any p5-* package Like last time, where this caused no complaints.
Revision 1.23 / (download) - annotate - [select for diffs], Thu Jan 3 18:54:38 2013 UTC (10 years, 11 months ago) by gls
Branch: MAIN
CVS Tags: pkgsrc-2013Q1-base,
pkgsrc-2013Q1
Changes since 1.22: +28 -10
lines
Diff to previous 1.22 (colored)
Pkgsrc changes:
---------------
- /usr/bin/env police
Upstream Changes:
-----------------
Version 1.9.6:
SECURITY HINT: make sure you have allow_xslt = False (or just do not use
allow_xslt at all in your wiki configs, False is the internal default).
Allowing XSLT/4suite is very dangerous, see HelpOnConfiguration wiki page.
HINT: Python >= 2.5 is maybe required! See docs/REQUIREMENTS for details.
Fixes:
* fix remote code execution vulnerability in twikidraw/anywikidraw action
* fix path traversal vulnerability in AttachFile action
* fix XSS issue, escape page name in rss link
* escape user- or admin-defined css url
* make taintfilename more secure
* use a constant time str comparison function to prevent timing attacks
* Attachment handler: catch all Zip-related errors
Version 1.9.5:
Fixes:
* Security fix: fix virtual group bug in ACL evaluation.
* Avoid crash if #refresh processing instruction is used without arguments.
* Fix issue with non-ASCII textchas.
* Xapian indexing: remove copy.copy() that crashed on Windows/IIS/isapi-wsgi
after page save.
* Fix dictionary file reading crash under Windows.
* Work around crash of AdvancedSearch macro rendering caused by non-ascii
mimetypes.types_map entries.
* Added migration script for moin 1.8.9.
* rss_rc: Fix diffs added in RSS with diffs=1 (now they correspond to item
listed in feed and not just last page diffs). Links generated with ddiffs=1
also fixed.
* rss_rc: fix double escaping issue.
* rss_rc: respect show_names configuration option.
* rss_rc: proper support of rename, revert, page creation.
* modern/modernized theme: fix padding/width for editor preview
* group/pagelinks formatters: avoid to create unnecessary output, redirect
output of send_page call with the groups formatter, it must not be written
to the output stream
* rst parser: fix include and macro directives
* wikisync: fix unicode pagename sending for python 2.7 httplib
New features:
* add a comment_required config option (default: False) to require a
non-empty comment when saving a page
* when a save error happens, show the editor again and highlight the error
* rss_rc: several new options added: lines parameter gives ability to set
maximum size of diffs showed in RSS. show_att parameter gives ability
to show information aboout attachment-related items in RSS. page parameter
gives ability to specify set of pages for which changes RSS feed should be
generated. Configuration of defaults and limits can now be done via wiki
configuration mechanism.
* As soon as it is now possible to provide RSS for page change history,
appropriate alternate link is now added for every page (controlled by
rss_show_page_history_link configuration parameter).
* Search: "no_highlight:" search query option provided for suppressing
highlighting search results.
* Search macros: new options for FullSearch, FullSearchCached and PageList
available:
* highlight_titles option controls highlighting of matches in search
results provided by these macros. Default value is set in
search_macro_highlight_titles configuration option)
* highlight_pages option controls adding of highlight URL parameter to
page links (so search term is highlighted when user goes to one of
these pages via provided link) in search results. Default value is set
in search_macro_highlight_pages configuration option.
Usage of these options is disabled (via search_macro_parse_args
configuration option) by default due to behavioural changes introduced
in macro parameter parsing mechanism to support them. Related to
http://moinmo.in/FeatureRequests/FullSearchResultsWithoutHighlight .
Other changes:
* Remove 4suite dependency for docbook formatter, use minidom (included in
Python).
* Upgraded FCKeditor to 2.6.8.
Revision 1.22 / (download) - annotate - [select for diffs], Sun Oct 28 06:31:01 2012 UTC (11 years, 1 month ago) by asau
Branch: MAIN
CVS Tags: pkgsrc-2012Q4-base,
pkgsrc-2012Q4
Changes since 1.21: +1 -3
lines
Diff to previous 1.21 (colored)
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
Revision 1.21 / (download) - annotate - [select for diffs], Thu Oct 4 00:21:58 2012 UTC (11 years, 2 months ago) by cheusov
Branch: MAIN
Changes since 1.20: +2 -1
lines
Diff to previous 1.20 (colored)
Bump revision for packages with changed CONFLICTS (PYTHON_SELF_CONFLICT)
Revision 1.20 / (download) - annotate - [select for diffs], Wed Oct 3 23:40:35 2012 UTC (11 years, 2 months ago) by cheusov
Branch: MAIN
Changes since 1.19: +3 -1
lines
Diff to previous 1.19 (colored)
CONFLICTS between python modules
Revision 1.19 / (download) - annotate - [select for diffs], Sun Jun 3 22:49:25 2012 UTC (11 years, 6 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2012Q3-base,
pkgsrc-2012Q3,
pkgsrc-2012Q2-base,
pkgsrc-2012Q2
Changes since 1.18: +2 -3
lines
Diff to previous 1.18 (colored)
Update to 1.9.4: This release ist mostly about security and bug fixes and a few minor changes (including Python 2.7 compatibility).
Revision 1.18 / (download) - annotate - [select for diffs], Sun Apr 8 19:09:17 2012 UTC (11 years, 8 months ago) by wiz
Branch: MAIN
Changes since 1.17: +1 -6
lines
Diff to previous 1.17 (colored)
Remove python24 and all traces of it from pkgsrc. Remove devel/py-ctypes (only needed by and supporting python24). Remove PYTHON_VERSIONS_ACCEPTED and PYTHON_VERSIONS_INCOMPATIBLE lines that just mirror defaults now. Miscellaneous cleanup while editing all these files.
Revision 1.17 / (download) - annotate - [select for diffs], Fri Jan 27 05:52:40 2012 UTC (11 years, 10 months ago) by obache
Branch: MAIN
CVS Tags: pkgsrc-2012Q1-base,
pkgsrc-2012Q1
Changes since 1.16: +6 -11
lines
Diff to previous 1.16 (colored)
* no need to buildlink with zlib, just require python built with zlib support. * no compiler languages is required to build. * `/usr/bin/env python' shebang are also be handled with REPLACE_PYTHON. * distutils pkg, register egg-info. * add an patch for python27, from upstream repo. Bump PKGREVISION.
Revision 1.14.4.1 / (download) - annotate - [select for diffs], Wed Mar 9 20:01:47 2011 UTC (12 years, 9 months ago) by tron
Branch: pkgsrc-2010Q4
Changes since 1.14: +2 -1
lines
Diff to previous 1.14 (colored) next main 1.15 (colored)
Pullup ticket #3386 - requested by gls www/py-moin: security patch Revisions pulled up: - www/py-moin/Makefile 1.16 - www/py-moin/distinfo 1.7 - www/py-moin/patches/patch-MoinMoin_parser_text__rst.py 1.1 --- Module Name: pkgsrc Committed By: gls Date: Mon Mar 7 20:51:41 UTC 2011 Modified Files: pkgsrc/www/py-moin: Makefile distinfo Added Files: pkgsrc/www/py-moin/patches: patch-MoinMoin_parser_text__rst.py Log Message: Add a fix for CVE CVE 2011-1058. Taken from http://moinmo.in/SecurityFixes
Revision 1.16 / (download) - annotate - [select for diffs], Mon Mar 7 20:51:40 2011 UTC (12 years, 9 months ago) by gls
Branch: MAIN
CVS Tags: pkgsrc-2011Q4-base,
pkgsrc-2011Q4,
pkgsrc-2011Q3-base,
pkgsrc-2011Q3,
pkgsrc-2011Q2-base,
pkgsrc-2011Q2,
pkgsrc-2011Q1-base,
pkgsrc-2011Q1
Changes since 1.15: +2 -1
lines
Diff to previous 1.15 (colored)
Add a fix for CVE CVE 2011-1058. Taken from http://moinmo.in/SecurityFixes
Revision 1.15 / (download) - annotate - [select for diffs], Fri Feb 25 09:47:29 2011 UTC (12 years, 9 months ago) by wiz
Branch: MAIN
Changes since 1.14: +2 -2
lines
Diff to previous 1.14 (colored)
Let's assume for now that everything that worked with python-2.6 also works with python-2.7.
Revision 1.13.4.1 / (download) - annotate - [select for diffs], Sat Jul 10 12:07:35 2010 UTC (13 years, 5 months ago) by tron
Branch: pkgsrc-2010Q2
Changes since 1.13: +2 -2
lines
Diff to previous 1.13 (colored) next main 1.14 (colored)
Pullup ticket #3160 - requested by obache
www/py-moin: security update
Revisions pulled up:
- www/py-moin/Makefile 1.14
- www/py-moin/PLIST 1.7
- www/py-moin/distinfo 1.6
---
Module Name: pkgsrc
Committed By: obache
Date: Fri Jul 9 11:38:36 UTC 2010
Modified Files:
pkgsrc/www/py-moin: Makefile PLIST distinfo
Log Message:
Update py-moin to 1.9.3.
PR#43524 by Wen Heping.
Known main issues:
* The GUI WYSIWYG editor has still some issues and limitations.
If you can't live with those, you can simply switch it off by using:
editor_force = True
editor_default = 'text' # internal default, just for completeness
Version 1.9.3:
Fixes:
* Fix XSS in Despam action (CVE-2010-0828).
* Fix XSS issues (see MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg):
* by escaping template name in messages
* by fixing other places that had similar issues
* Make moin compatible to werkzeug 0.5 .. 0.6.2 (1.9.2 had issues
with xmlrpc when used with werkzeug 0.6.x).
* MoinMoin.util.filesys: disable usage of dircache, deprecate dc* functions,
because the dircache stdlib module can't work correctly for fast updates of
directories.
* rss_rc and sisterpages actions: fix Content-Type header (mimetype)
* Fix associating OpenID identity with user, wasn't adapted to werkzeug yet.
* openidrp auth: fix undefined _ (gettext)
* Fix auth.cas and userprefs.oidserv request object usage.
* highlight parser: fixed MoinMoinBugs/LineNumberSpansForProcessInstructionsMissed
* Pygments syntax highlighting: add missing code files
* Notifications: use same email subject format for every notification
* Fix docbook formatter crashing, see MoinMoinPatch/IncludeMacroWithDocBookFormatter
* Fix regex content search for xapian search.
* Get rid of the empty line at the end of code highlights.
* GUI editor: compute editor height like the text editor does.
* Added help texts for: standalone server and moin migration.
* script.maint.cleancache: clean also i18n cache files
* Improved formatter.text_plain, see FeatureRequests/TextPlainFormatterRewrite
(fixes many issues of this formatter).
* text_html_text_moin_wiki: fixed index error for width="", see also:
MoinMoinBugs/GUI_convertor_list_index_out_of_range
* xmlrpc: disable editor backup for putPage, renamePage and revertPage
because if pages get uploaded by xmlrpc then the draft cache file can
rapidly increase in size, causing high memory usage because it needs to
get loaded into memory for updating/processing.
* Emit Content-Type header (with charset) for SlideShow action and many other
actions that just call send_title().
* ActionBase: better compatibility to moin 1.8, use request.values by
default, optionally use request.form data only
New features:
* RenamePage action: added ability to create redirect pages when renaming
(turned off by default, see show_rename_redirect config option).
* formatter/text_html: Added line number links to code blocks.
* diff action:
* Fixed whitespace in generated (html) diff view table so white-space: pre
can be used (and whitespace in diffs preserved).
* Added links to first/last revision.
* MoinMoin.widget.browser: introduced feature for sorting tables, see:
http://moinmo.in/FeatureRequests/SortableTables
* SystemAdmin user and attachment browsers: sorting feature used there now
* Scrolling the text editor to the double clicked line.
* Enable double-click-editing by default.
* WikiConfigHelp macro: make heading and description display optional,
heading level as a parameter (default 2)
* If edit ticket check fails, send the editor with the current content.
* moin import wikipage - use this script to import local files as a wiki page
Other changes:
* upgraded pygments from 1.2.2 to 1.3.1
* upgraded FCKeditor from 2.6.4.1 to 2.6.6
* added configuration snippet for ldap authentication against 2 servers
* improved script help output
Revision 1.14 / (download) - annotate - [select for diffs], Fri Jul 9 11:38:36 2010 UTC (13 years, 5 months ago) by obache
Branch: MAIN
CVS Tags: pkgsrc-2010Q4-base,
pkgsrc-2010Q3-base,
pkgsrc-2010Q3
Branch point for: pkgsrc-2010Q4
Changes since 1.13: +2 -2
lines
Diff to previous 1.13 (colored)
Update py-moin to 1.9.3.
PR#43524 by Wen Heping.
Known main issues:
* The GUI WYSIWYG editor has still some issues and limitations.
If you can't live with those, you can simply switch it off by using:
editor_force = True
editor_default = 'text' # internal default, just for completeness
Version 1.9.3:
Fixes:
* Fix XSS in Despam action (CVE-2010-0828).
* Fix XSS issues (see MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg):
* by escaping template name in messages
* by fixing other places that had similar issues
* Make moin compatible to werkzeug 0.5 .. 0.6.2 (1.9.2 had issues
with xmlrpc when used with werkzeug 0.6.x).
* MoinMoin.util.filesys: disable usage of dircache, deprecate dc* functions,
because the dircache stdlib module can't work correctly for fast updates of
directories.
* rss_rc and sisterpages actions: fix Content-Type header (mimetype)
* Fix associating OpenID identity with user, wasn't adapted to werkzeug yet.
* openidrp auth: fix undefined _ (gettext)
* Fix auth.cas and userprefs.oidserv request object usage.
* highlight parser: fixed MoinMoinBugs/LineNumberSpansForProcessInstructionsMissed
* Pygments syntax highlighting: add missing code files
* Notifications: use same email subject format for every notification
* Fix docbook formatter crashing, see MoinMoinPatch/IncludeMacroWithDocBookFormatter
* Fix regex content search for xapian search.
* Get rid of the empty line at the end of code highlights.
* GUI editor: compute editor height like the text editor does.
* Added help texts for: standalone server and moin migration.
* script.maint.cleancache: clean also i18n cache files
* Improved formatter.text_plain, see FeatureRequests/TextPlainFormatterRewrite
(fixes many issues of this formatter).
* text_html_text_moin_wiki: fixed index error for width="", see also:
MoinMoinBugs/GUI_convertor_list_index_out_of_range
* xmlrpc: disable editor backup for putPage, renamePage and revertPage
because if pages get uploaded by xmlrpc then the draft cache file can
rapidly increase in size, causing high memory usage because it needs to
get loaded into memory for updating/processing.
* Emit Content-Type header (with charset) for SlideShow action and many other
actions that just call send_title().
* ActionBase: better compatibility to moin 1.8, use request.values by
default, optionally use request.form data only
New features:
* RenamePage action: added ability to create redirect pages when renaming
(turned off by default, see show_rename_redirect config option).
* formatter/text_html: Added line number links to code blocks.
* diff action:
* Fixed whitespace in generated (html) diff view table so white-space: pre
can be used (and whitespace in diffs preserved).
* Added links to first/last revision.
* MoinMoin.widget.browser: introduced feature for sorting tables, see:
http://moinmo.in/FeatureRequests/SortableTables
* SystemAdmin user and attachment browsers: sorting feature used there now
* Scrolling the text editor to the double clicked line.
* Enable double-click-editing by default.
* WikiConfigHelp macro: make heading and description display optional,
heading level as a parameter (default 2)
* If edit ticket check fails, send the editor with the current content.
* moin import wikipage - use this script to import local files as a wiki page
Other changes:
* upgraded pygments from 1.2.2 to 1.3.1
* upgraded FCKeditor from 2.6.4.1 to 2.6.6
* added configuration snippet for ldap authentication against 2 servers
* improved script help output
Revision 1.13 / (download) - annotate - [select for diffs], Sat Mar 20 21:12:03 2010 UTC (13 years, 8 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2010Q2-base,
pkgsrc-2010Q1-base,
pkgsrc-2010Q1
Branch point for: pkgsrc-2010Q2
Changes since 1.12: +20 -7
lines
Diff to previous 1.12 (colored)
Major features/improvements (1.9): * New modular group and dict data access, you can use group and dict backend modules to access group and dict data stored anywhere you like. * Improved Xapian indexing / search * Improved drawing support * Themes / static files related * Syntax highlighting is based on the pygments library now * Authentication improvements * Sessions / cookies improvements * Macros fuctions improved * More Actions added/improved * Improved logging / debugging / developer support * GUI editor: improved attachment dialog * "moin ... account homepage" script to create user homepages A bunch of bugfixes! For the full Changelog, see: http://moinmo.in/MoinMoinRelease1.9 ok'ed during the freeze by agc@
Revision 1.12 / (download) - annotate - [select for diffs], Wed Jan 27 08:46:24 2010 UTC (13 years, 10 months ago) by wiz
Branch: MAIN
Changes since 1.11: +3 -3
lines
Diff to previous 1.11 (colored)
DEPENDS should be right after MAINTAINER block, reorder.
Revision 1.11 / (download) - annotate - [select for diffs], Thu Oct 2 12:18:27 2008 UTC (15 years, 2 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2009Q4-base,
pkgsrc-2009Q4,
pkgsrc-2009Q3-base,
pkgsrc-2009Q3,
pkgsrc-2009Q2-base,
pkgsrc-2009Q2,
pkgsrc-2009Q1-base,
pkgsrc-2009Q1,
pkgsrc-2008Q4-base,
pkgsrc-2008Q4,
pkgsrc-2008Q3-base,
pkgsrc-2008Q3
Changes since 1.10: +2 -1
lines
Diff to previous 1.10 (colored)
Uses list comprehension.
Revision 1.8.4.1 / (download) - annotate - [select for diffs], Thu Jul 24 10:01:28 2008 UTC (15 years, 4 months ago) by rtr
Branch: pkgsrc-2008Q2
Changes since 1.8: +4 -4
lines
Diff to previous 1.8 (colored) next main 1.9 (colored)
pullup ticket #2458 requested by joerg py-moin: update package cross-site scripting fix revisions pulled up: pkgsrc/www/py-moin/Makefile 1.9, 1.10 pkgsrc/www/py-moin/PLIST 1.4 pkgsrc/www/py-moin/distinfo 1.4 Module Name: pkgsrc Committed By: tnn Date: Tue Jul 22 20:17:24 UTC 2008 Modified Files: pkgsrc/www/py-moin: Makefile Log Message: Mention MoinMoin in the COMMENT to make the package easier to find, given the non-obvious PKGNAME. ------------------------------------------------------------------------ Module Name: pkgsrc Committed By: joerg Date: Thu Jul 24 08:38:04 UTC 2008 Modified Files: pkgsrc/www/py-moin: Makefile PLIST distinfo Log Message: Update MoinMoin to 1.7.1: - Fix a Cross Site Scripting attack - changes in caching API Changes in 1.7.0: - new event/notification/authentication/session framework - OpenID support - improvements for LDAP auth, attachment performance, logging etc
Revision 1.10 / (download) - annotate - [select for diffs], Thu Jul 24 08:38:03 2008 UTC (15 years, 4 months ago) by joerg
Branch: MAIN
CVS Tags: cube-native-xorg-base,
cube-native-xorg
Changes since 1.9: +3 -3
lines
Diff to previous 1.9 (colored)
Update MoinMoin to 1.7.1: - Fix a Cross Site Scripting attack - changes in caching API Changes in 1.7.0: - new event/notification/authentication/session framework - OpenID support - improvements for LDAP auth, attachment performance, logging etc
Revision 1.9 / (download) - annotate - [select for diffs], Tue Jul 22 20:17:24 2008 UTC (15 years, 4 months ago) by tnn
Branch: MAIN
Changes since 1.8: +2 -2
lines
Diff to previous 1.8 (colored)
Mention MoinMoin in the COMMENT to make the package easier to find, given the non-obvious PKGNAME.
Revision 1.6.2.1 / (download) - annotate - [select for diffs], Fri May 9 10:21:15 2008 UTC (15 years, 7 months ago) by rtr
Branch: pkgsrc-2008Q1
Changes since 1.6: +4 -4
lines
Diff to previous 1.6 (colored) next main 1.7 (colored)
pullup ticket #2364 - requested by joerg py-moin: update to 1.6.3 for bug fix revisions pulled up: - pkgsrc/www/py-moin/Makefile 1.8 - pkgsrc/www/py-moin/PLIST 1.3 - pkgsrc/www/py-moin/distinfo 1.3 Module Name: pkgsrc Committed By: joerg Date: Wed May 7 10:02:44 UTC 2008 Modified Files: pkgsrc/www/py-moin: Makefile PLIST distinfo Log Message: Update to moin 1.6.3. This fixes bugs in the ACL parser for all entries but Known: and All:, hierarchical ACL processing and the use of include in rst files. Many other updates included as well.
Revision 1.8 / (download) - annotate - [select for diffs], Wed May 7 10:02:44 2008 UTC (15 years, 7 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2008Q2-base,
cwrapper
Branch point for: pkgsrc-2008Q2
Changes since 1.7: +4 -4
lines
Diff to previous 1.7 (colored)
Update to moin 1.6.3. This fixes bugs in the ACL parser for all entries but Known: and All:, hierarchical ACL processing and the use of include in rst files. Many other updates included as well.
Revision 1.7 / (download) - annotate - [select for diffs], Fri Apr 25 20:39:13 2008 UTC (15 years, 7 months ago) by joerg
Branch: MAIN
Changes since 1.6: +1 -2
lines
Diff to previous 1.6 (colored)
Update PYTHON_VERSIONS_COMPATIBLE - assume that Python 2.4 and 2.5 are compatible and allow checking for fallout. - remove PYTHON_VERSIONS_COMPATIBLE that are obsoleted by the 2.3+ default. Modify the others to deal with the removals.
Revision 1.6 / (download) - annotate - [select for diffs], Sat Mar 15 18:16:51 2008 UTC (15 years, 8 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2008Q1-base
Branch point for: pkgsrc-2008Q1
Changes since 1.5: +5 -4
lines
Diff to previous 1.5 (colored)
Update py-moin to 1.6.1. Major new features: * quickly working standalone mode (similar to DesktopEdition) * xapian index search (including attachments of supported mimetypes) * WikiSynchronisation * moin can receive email now * wiki parser: easier link and transclusion markup (and new macro markup) * new parsers for: creole wiki markup, html (safe), diffs * discussion pages * inline comments * hierarchical ACLs (see HelpOnAccessControlLists) * new anti-spam feature: TextChas * SisterSites support * new xmlrpc methods, easier auth, multicall support * Improved params for [[target|label|params]]: * AdvancedSearch: make multiple categories/languages/mimetype selections possible * Added a configuration directive to only do one bind to the LDAP server. + many bugfixes, including at least one XSS fix.
Revision 1.5 / (download) - annotate - [select for diffs], Tue Mar 11 04:19:04 2008 UTC (15 years, 9 months ago) by obache
Branch: MAIN
Changes since 1.4: +2 -2
lines
Diff to previous 1.4 (colored)
HOMEPAGE moved.
Revision 1.4 / (download) - annotate - [select for diffs], Wed Dec 20 04:56:53 2006 UTC (16 years, 11 months ago) by reed
Branch: MAIN
CVS Tags: pkgsrc-2007Q4-base,
pkgsrc-2007Q4,
pkgsrc-2007Q3-base,
pkgsrc-2007Q3,
pkgsrc-2007Q2-base,
pkgsrc-2007Q2,
pkgsrc-2007Q1-base,
pkgsrc-2007Q1,
pkgsrc-2006Q4-base,
pkgsrc-2006Q4
Changes since 1.3: +2 -2
lines
Diff to previous 1.3 (colored)
Fix (or update?) HOMEPAGE.
Revision 1.3 / (download) - annotate - [select for diffs], Wed Oct 25 18:57:34 2006 UTC (17 years, 1 month ago) by joerg
Branch: MAIN
Changes since 1.2: +4 -1
lines
Diff to previous 1.2 (colored)
Explicitly depend on py-expat, as it is needed for the GUI editor. Fixes PR 34912. Bump revision.
Revision 1.2 / (download) - annotate - [select for diffs], Mon Jul 31 17:06:50 2006 UTC (17 years, 4 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2006Q3-base,
pkgsrc-2006Q3
Changes since 1.1: +3 -3
lines
Diff to previous 1.1 (colored)
Make pkglint happy.
Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Mon Jul 31 17:04:59 2006 UTC (17 years, 4 months ago) by joerg
Branch: TNF
CVS Tags: pkgsrc-base
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored)
Import www/py-moin. From DESCR: A WikiWikiWeb is a collaborative hypertext environment, with an emphasis on easy access to and modification of information. MoinMoin is a Python WikiClone that allows you to easily set up your own wiki, only requiring a Python installation.
Revision 1.1 / (download) - annotate - [select for diffs], Mon Jul 31 17:04:59 2006 UTC (17 years, 4 months ago) by joerg
Branch: MAIN
Initial revision