Import Dancer2-0.05 as www/p5-Dancer2.

Dancer2 is the new generation of Dancer, the lightweight web-framework
for Perl. Dancer2 is a complete rewrite based on Moo.

(wen)

Update to 2.0.24. Changes:

* Fixed thick line swap bug and added accuracy test for thick line
* Improved interface to SDL_framerateDelay
* Fixed 32bpp blending function for BGRA
* Fix for pixel blend routine

(shattered)

Update to 1.3.147. Changes:

- Support DNS whitelists.
- Improve physical page locality of the DCC server's use of the database hash table
and so improve server performance.
- Reduce dccifd thread stack size to 512 KBytes for busy 32-bit systems
- Dccproc, dccm, and dccifd decode HTML &#xxx character references in URLs.
- Dccproc, dccm, and dccifd convert UTF-8 domain names to Punycode
before checking DNS blacklists.

- Fix reporting of rogue server-IDs.
- Fix dccproc, dccifd, and dccm crash in parsing Received: fields with IPv6 addresses.
- Fix DNSBL bugs in parsing http://example.com?parameter and http://example.com:80
- Deal with trailing '.' and other punctuation URLs in dccm, dccifd, and
dccproc.  This changes the FUZ1 and FUZ2 checksums in some cases.
- Fix a rare crash of dccd, the server daemon.

(shattered)

Updated textproc/lout to 3.40
Updated archivers/gsharutils to 4.13.4
Updated chat/fisg to 0.13.2
Updated chat/xaric to 0.13.6
Updated mail/ripmime to 1.4.0.10
Updated misc/mirmon to 2.8
Updated net/host to 20070128

(shattered)

Update to 2007/01/17. Changes:

- the --checkzone option now actually works.
- canonical hostname checks are not done if the answer they are
  found in doesn't have the "recursion available" flag set.
- the logic for printing the warning when canonical hostname
  checks are skipped has been corrected.
- the way that canonical hostname checks are done has been fixed
  so that only initial results from the query for A RRs are used.
- a warning is now printed whenever a query requesting recursion
  results in an answer without the "ra" (recursion available) flag.

(shattered)

add textproc/py-relatorio-0.5.7

(richard)

A templating library which provides a way to easily output all kind of
different files (odt, ods, png, svg, ...). Adding support for more filetype is
easy: you just have to create a plugin for this.

relatorio also provides a report repository allowing you to link python objects
and report together, find reports by mimetypes/name/python objects.

(richard)

add py-pycha-0.6.0

(richard)

Pycha is a very simple Python package for drawing charts using the great
`Cairo` library. Its goals are:

* Lightweight
* Simple to use
* Nice looking with default values
* Customization

It won't try to draw any possible chart on earth but draw the most common ones
nicely. There are some other options to look at like `pyCairoChart`.

(richard)

Drop maintainership.

I don't want to take over other's unwanted big change.

(obache)

Update to 0.3.12. Changes:

"Some of FISG's behavior has changed slightly after version 0.3.8.

Few commandline options have been renamed and there is NO default
input format anymore, you will always have to specify one."

(shattered)

Update to 0.13.6. Changes:

* ncommand.c - fix /names * to replace * with current channel.
* fix dcc - its not perfect, but it works (let me know if there are
* /topic * now does the expected thing. same for /untopic *
* fix "/names" to work when not in a channel

(shattered)

Updated textproc/p5-YAML-LibYAML to 0.41

(wen)

Update to 0.41

Upstream changes:
version: 0.41
date:    Wed Mar 13 10:34:55 PDT 2013
changes:
- Removed another C++ // style comment. jdb++
---
version: 0.40
date:    Tue Mar 12 11:05:34 PDT 2013
changes:
- Removed C++ // style comments, for better portability. jdb++
---
version: 0.39
date:    Mon Feb 11 18:08:04 PST 2013
changes:
- Using the latest libyaml codebase
- https://github.com/yaml/libyaml/tree/perl-yaml-xs
- Changes have been made to start moving libyaml to 1.2

(wen)

Update to 1.4.0.10. Changes:

Added iconv output support via -x<set>.

Fixed up the BASE64 decoding detection of boundaries which are sometimes missed.

Updated ripOLE to handle nameless / unknown stream blobs.

Added a header fixing routine in MIME_headers, this fix attempts
to unwrap headers which are missing a leading space on the next line
This feature can be disabled using --disable-headerfix.

Added recursion facility if the input mailpack/MIME file is a directory.

(shattered)

Update to 2.8. Changes:

o The code is now modularised. The distribution contains 'Mirmon.pm',
  an OO interface for mirmon objects. Program 'mirmon' still contains
  all the code ; it is split into 'Mirmon.pm' and 'mirmon.pl'.

o The mirror list can now have rsync urls.
o The algorithm to balance the probe load over the hourly mirmon runs
  is improved ; from completely skewed to balanced takes some 5 days.

(shattered)

Updated devel/p5-Exception-Class to 1.37

(wen)

Update to 1.37

Upstream changes:
1.37    2013-02-24

- I now recommend you use Throwable instead of this module. It has a nicer,
  more modern interface.

- Fixed various bugs and confusion in the docs.

1.36    2012-11-17

- Fixed some stupidity in the tests that appears to have been highlighted by
  recent changes to Devel::StackTrace. Reported by Dan Horne. RT #81245.

1.35    2012-09-17

- Require Class::Data::Inheritable 0.02+.

1.34    2012-09-16

- 1.33 did not declare any prereqs. Oops. Reported by Roham McGovern. RT
  #79677.

1.33    2012-09-16

- Fixed warning from basic.t on 5.17.x. RT #79121.

(wen)

Don't install lib/charset.alias

(shattered)

+ blender-2.68, calibre-0.9.39, cheese-3.8.3, chrony-1.28,
  dd_rescue-1.35, ddrescue-1.17, erlang-16.2, glpk-4.52, imp-6.1.3,
  ingo-3.1.2, kronolith-4.1.2, libarchive-3.1.2, libmicrohttpd-0.9.28,
  opendkim-2.8.4, php-tt-rss-1.9.0, turba-4.1.1, wine-1.6.0 [wait
  until NetBSD gains OSS 4 [kern/46611] or bring OSS 3 support
  back].

(wiz)

Update HOMEPAGE

(wen)

Added devel/p5-MooX-Types-MooseLike-Numeric version 1.01

(wen)

+ p5-MooX-Types-MooseLike-Numeric

(wen)

Import MooX-Types-MooseLike-Numeric-1.01 as devel/p5-MooX-Types-MooseLike-Numeric.

MooX::Types::MooseLike::Numeric provides Moo types for numbers.

(wen)

Updated sysutils/libpciaccess to 0.13.2

(wiz)

Update to 0.13.2. Set LICENSE.

This release provides a lot of platform-specific improvements for various
platforms, including Solaris (SPARC & x64), FreeBSD, NetBSD, and Hurd.
It also provides some platform-independent fixes & code cleanup.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (10):
      Solaris: Implement map_legacy & legacy_io functions
      Solaris: refactor pci_device_solx_devfs_map_range to reduce code duplication
      Bug 63583 - add legacy IO routines for FreeBSD
      Define PCI_MATCH_ANY as an unsigned int
      pci_id_file_open: move variable inside the #ifndef that uses it
      pci_device_solx_devfs_read: fix sign conversion/comparison warnings
      Solaris: Remove #defines for Ultra 45 southbridge device ids
      pci_device_solx_devfs_probe: implicit conversion changes signedness warnings
      Resync COPYING file with copyrights/licenses from code
      libpciaccess 0.13.2

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

Egbert Eich (1):
      PCI: set correct mask value when matching for bridges.

Henry Zhao (5):
      libpciaccess: implementation of boot_vga in Solaris
      libpciaccess: sparc rom read fix
      scanpci: print meaningful info on BASEROM
      Solaris: Add domain support for sparc platform
      Solaris: probe improvement

John Martin (1):
      Fix Sun bug #7035791: scanpci should report 64 bit registers

Mark Logan (1):
      libpciaccess: fix memory usage errors

Samuel Thibault (1):
      Implement legacy io & map for x86 backend

Thomas Klausner (6):
      Protect config.h like usual.
      Move 'const' to correct place, so it has meaning.
      Update NetBSD support.
      Enable boot_vga support only if WSDISPLAYIO_GET_BUSID is defined.
      Fix build on NetBSD-4.
      Support more pci functions on NetBSD.

(wiz)

lib/charset.alias is skipped by check-files.mk

(shattered)

Update to 4.13.4. Changes:

* POSIX-ism: they have determined that uudecode is not expected
  to exit failure when the output file mode cannot be changed.
  Either POSIXLY_CORRECT or --ignore-chmod will cause uudecode
  to behave this way.
* output file names may be encoded in the uuencoded file.
  By specifying '--encode' on the command line, the output
  file name will be base64 encoded in the uuencode file.

(shattered)

Support partial FQDN option

(roy)

Updated devel/p5-MooX-Types-MooseLike to 0.24

(wen)

Update to 0.24
Update DEPENDS

Upstream changes:
0.24 - 2013-07-10
    - Upgrade Num test, keep in sync w/ Moose (autarch)
    - Improve documentation

0.23 - 2013-03-07
    - Fix regression in subtypes defined with a string (for the parent test)

0.22 - 2013-03-04
    - Allow subtyping of parameterized types (haarg)
    - Extract SetObject and Numeric types into their own distributions

(wen)

Updated www/p5-Dancer to 1.3116

(wen)

Update to 1.3116

Upstream changes:
[ ENHANCEMENTS ]
    * GH #767: forwarded_for_address() now looks for HTTP_X_FORWARDED_FOR if
        X_FORWARDED_FOR is not there. (Jakob Voss)
    * GH #936: Add file locking to file logger. (David Golden)
    * GH #937: Add details to tutorial. (Craig Treptow)

(wen)

Updated www/p5-Rose-HTML-Objects to 0.618

(wen)

Update to 0.618

Upstream changes:
0.618 (03.29.2013) - John Siracusa <siracusa@gmail.com>

    * Made compatible with perl 5.17.10 (RT 84279)

0.617 (12.30.2012) - John Siracusa <siracusa@gmail.com>

    * Added base 2.18 as a prerequisite to avoid a load-order bug that
      occurs with some older versions.
    * Preserve custom class attributes on label objects (RT 82333)
      (Patch by Tom Heady)

0.616 (05.09.2012) - John Siracusa <siracusa@gmail.com>

    * Added add_class(es) and delete_class(es) methods.
    * Added was_submitted() method to the submit button class.
    * Calling clear() on a hidden field now clears it.

0.615 (05.01.2012) - John Siracusa <siracusa@gmail.com>

    * Minor efficiency improvements in HTML generation.

0.614 (04.02.2012) - John Siracusa <siracusa@gmail.com>

    * Deprecated and undocumented the form_rank_counter() method.  It will
      be removed in a future release.
    * Fixed a bug that could cause a repeated form to get the wrong rank.

0.613 (04.02.2012) - John Siracusa <siracusa@gmail.com>

    * Added make_next_form() method to repeatable forms.
    * Documented the empty_is_ok() attribute of repeatable forms.

0.612 (03.26.2012) - John Siracusa <siracusa@gmail.com>

    * Worked around fatal error triggered by loading Rose::HTML::Form
      in the perl debugger in some older versions of perl. (e.g.,
      perl -I lib -d lib/Rose/HTML/Form.pm)

(wen)

Updated www/p5-HTTP-Tiny to 0.034

(wen)

Update to 0.034

Upstream changes:
0.034    2013-06-26 19:02:25 America/New_York

  [ADDED]

  - Added support for 'Basic' authorization from
    user:password parameters in the URL

0.033    2013-06-21 06:26:51 America/New_York

  [FIXED]

  - Modifying the 'agent' attribute with the accessor will append the
    default agent string, just like setting it during construction

0.032    2013-06-20 11:41:24 America/New_York

  [ADDED]

  - Added 'no_proxy' attribute, defaulting to $ENV{no_proxy}

0.031    2013-06-16 23:18:18 America/New_York

  [FIXED]

  - Fixed bug receiving 0-length content bodies

0.030    2013-06-13 11:46:15 America/New_York

  [FIXED]

  - Requests with the empty string as body content no longer generate
    'content-type' and 'content-length' headers.

0.029    2013-04-17 13:49:07 America/New_York

  [FIXED]

  - Checks for new enough OpenSSL library before using SNI (otherwise
    IO::Socket::SSL throws warnings)

(wen)

Updated comms/asterisk to 11.5.0

(jnemeth)

Upgrade to Asterisk 11.5.0: this is a general bug fix release

pkgsrc changes:
  - add dependency on libuuid
  - work around NetBSD's incompatible implementation of IP_PKTINFO

The Asterisk Development Team has announced the release of Asterisk 11.5.0.

The release of Asterisk 11.5.0 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* --- Fix Segfault In app_queue When "persistentmembers" Is Enabled
      And Using Realtime

* --- IAX2: fix race condition with nativebridge transfers.

* --- Fix The Payload Being Set On CN Packets And Do Not Set Marker
      Bit

* --- Fix One-Way Audio With auto_* NAT Settings When SIP Calls
      Initiated By PBX

* --- chan_sip: NOTIFYs for BLF start queuing up and fail to be sent
      out after retries fail

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.5.0

Thank you for your continued support of Asterisk!

(jnemeth)

Note update of devel/ruby-mode package to 2.0.0p247.

(taca)

Update ruby-mode to 2.0.0p247.

Various fixes.

* Added misc/ruby-additional.el for emacs24 support.

* misc/ruby-electric.el (ruby-electric-curlies): Automatically
  indent closing curly brackets when
  ruby-electric-newline-before-closing-bracket is true.

* misc/ruby-electric.el (ruby-electric-curlies): Fix the bug where
  an open curly inserted in a string is always replaced with a
  hash sign.

(taca)

Tweak GEM_CLEANBUILD for ruby200.

(taca)

Enable ruby200.

(taca)

Use RbConfig instead of legacy Config.

(taca)

Enable ruby200.

(taca)

Fix for ruby200.

It isn't very good practice to depend on parenthesis by CPP macro for
"if" statement of C language although CPP macro should be use parenthesis
after expanded.

(taca)

Tweak GEM_CLEANBUILD for ruby200.

(taca)

Tweak GEM_CLEANBUILD for ruby200.

(taca)

Enable ruby200.

(taca)

Enable ruby200.

(taca)

Tweak GEM_CLEANBUILD for ruby200.

(taca)

No need to specify GEM_CLEANBUILD.

(taca)

Use RbConfig instead of legacy Config.

(taca)

Tweak GEM_CLEANBUILD for ruby200 and enable with ruby200.

(taca)

Tweak GEM_CLEANBUILD for ruby200.

(taca)

Note addition of lang/ruby200 version 2.0.0p247 package.

(taca)

Add and enable ruby200.

(taca)

Add ruby200 package.  This is a meta package for Ruby 2.0.0.

(taca)

Add and enable ruby200-base.

(taca)

Note addition of lang/ruby200-base version 2.0.0p247 package.

(taca)

Add ruby200 support.

(taca)

Add ruby200-base-2.0.0p247.

This is latest stable release of Ruby and it basically compatible with
Ruby 1.9.3.  Please refer full changes to NEWS/ChangeLog files or official
Web site.  Here is language changes:

* Added keyword arguments.

* Added %i and %I for symbol list creation (similar to %w and %W).

* Default source encoding is changed to UTF-8. (was US-ASCII)

* No warning for unused variables starting with '_'

(taca)

Add support stuff for Ruby 2.0.0.

(taca)

Use Mt for email addresses.

(wiz)

lang/gcc-aux: bug fix

This commit achieves the following:
  1) Fix specific case of falsely identified aggregate array index
    duplicates.  Fix taken from gcc 4.8 source, it apparently will
    never be backported.
  2) Fix typo that caused mktemp to be used in DragonFly
  3) Incorporate NetBSD libstdc++ fixes into gcc-aux repository
    (which is a parallel fork) and regenerate diff-cxx.  This
    enables patches to be removed.

(marino)

Added ham/xnec2c version 2.3beta

(wiz)

Added ham/nec2c version 1.1

(wiz)

+ xnec2c.

(wiz)

Import xnec2c-2.3beta as ham/xnec2c.

xnec2c is a GTK+ graphical interactive version of nec2c. It
incorporates the nec2c core which it uses for reading input files
and calculating output data, but it does not need and indeed does
not produce an output file by default. Since xnec2c incorporates
the nec2c core, it has access to all internal buffers, including
structure data, frequency-related data (structure currents, input
impedance, gain etc) and radiation pattern data (for the far field
and near field). It therefore has the ability to graphically display
user-requested data directly, as the frequency loop progresses or
after input from the user. Graphs of frequency-related data and
the current or charge distribution evolve as the frequency loop
progresses, and radiation patterns (far and near field) are
sequentially drawn for each frequency step. A new frequency can be
entered by the user from spin buttons in the main or radiation
pattern windows or by clicking on the graphs of frequency-related
data. New output data are then computed and displayed in text and
graphical form.

(wiz)

add finance/py-vatnumber

(richard)

add option vatnumber-suds

(richard)

Python module to validate VAT numbers. VAT means "Value Added Tax".

(richard)

+ nec2c.

(wiz)

Import nec2c-1.1 as ham/nec2c.

nec2c is a translation of the NEC2 FORTRAN source code to the C
language.  The translation was performed mostly "by hand" and a
lot of modifications to the original program were introduced in
order to modernize the NEC2 and to remove as many built-in limitations
as possible. The attendant SOMNEC program was also translated to
C and incorporated in nec2c as a function so that Sommerfeld ground
solutions are a part of the program.

(wiz)

Updated mail/akonadi to 1.10.0

(wiz)

Update to 1.10.0:

1.10.0                            09-July-2013
----------------------------------------------
- Memory optimizations
- Fix a runtime error on Windows

1.9.80                            10-June-2013
----------------------------------------------
- Update item access time less often.
- Don't try to start akonadiserver if mysqld is not installed
- Allow to fetch available items even if there are errors in some of the items.
- Properly restrict the external part removal to the deleted collection.
- Support checking the cache for payloads in the FETCH command.
- Add infrastructure to track client capabilities.
- Allow to disable the cache verification on retrieval.
- fsck: move orphaned pim items to lost+found, delete orphaned pim item flags.
- Introduce NotificationMessageV2 that supports batch operations on set of entities.
- Fix build with Boost >= 1.53.
- Fix a runtime issue with MySQL >= 5.6 (MySQL >= 5.1.3 is now the minimum version).

(wiz)

Updated math/gnumeric112 to 1.12.4

(wiz)

Update to 1.12.4:

Gnumeric 1.12.4

Andreas:
* Improve xlsx export of Gnumeric functions.
* Improve xlsx import of Excel 2010 functions.
* Improve xls import of Excel 2010 functions.
* Fix documentation of r.q* and r.*nbinom. [#703164]
* Add Excel 2010's BETA.DIST.
* Fix crash on corrupted files. [#703149] [#703215] [#703625] [#703895]
* Fix import of sxc files. [#703249]
* Fix TDIST Import/Export from/to ODF.
* Write manual legend position to ODF. [#703362]
* Fix position handling in strict ODF export.

Jean:
* Don't attempt to add a path item when there is no path object. [#703052]

Morten:
* Improve accuracy for 2-argument ERF.
* Fix crashes on corrupted files.  [#703143] [#703307] [#703306]
* Fix --with-long-double tests.  [#703397]
* Fix problems saving auto filters to xls.  [#703308]
* Improve handling of large graph ranges.  [#703546]
* Fix analysis issue with translations.  [#703355]
* Fix COUNTIF (etc) pattern matching.  [#703770]

(wiz)

Updated misc/goffice0.10 to 0.10.4

(wiz)

Update to 0.10.4:

goffice 0.10.4:

Andreas:
* Fix crash on corrupted GOImage. [#703670]

Jean:
* Fix loading of image with invalid size or data. [#703740]
* Don't use invalid GOImage arguments. [#703949]

Morten:
* Fix linear regression failure.
* Add prescaling to linear regression.  [#703381]

(wiz)

Added www/py-flask-cache version 0.12.

(kleink)

+ py-flask-cache

(kleink)

Import Flask-Cache-0.12 as www/py-flask-cache.

Adds easy cache support to Flask.

(kleink)

Updated devel/cmake to 2.8.11.2

(ryoon)

Update to 2.8.11.2

Chagnelog

Changes in CMake 2.8.11.2 (since 2.8.11.1)
------------------------------------------
Alex Neundorf (1):
      asm support: adapt to changes in CMakeDetectCompiler in 2.8.10

Bjoern Thiel (1):
      SelectLibraryConfigurations: Fix for cached <base>_LIBRARY

Brad King (5):
      cmCryptoHash: Increase alignment of HashFile buffer
      cmcurl: Backport curl bug 1192 fix (#14250)
      VS12: Add Visual Studio 12 generator (#14251)
      VS12: Generate flag tables from MSBuild v120 tool files
      FindBoost: Add -vc120 mangling for VS 12

Robert Maynard (1):
      VS: Clarify Visual Studio product year for each version

Changes in CMake 2.8.11.1 (since 2.8.11)
----------------------------------------
Brad King (5):
      ExternalData: Do not re-stage staged object files
      try_compile: Fix quoting of libraries in generated CMakeLists.txt
      KWSys: Fix SystemTools::FileIsDirectory with long paths (#14176)
      FindBoost: Fix handling of \ in input paths (#14179)
      Xcode: Fix framework search paths in STATIC library targets (#14191)

Modestas Vainius (1):
      Fix test failures caused by regexp-sensitive characters in the build paths

Stephen Kelly (9):
      include_directories: Fix handling of empty or space-only entries
      try_compile: Trim whitespace from LINK_LIBRARIES entries
      cmTarget: Remove some hardcoding of transitive property names.
      GenexEval: Extract a getLinkedTargetsContent from TargetPropertyNode.
      GenexEval: Fix evaluation of INCLUDE_DIRECTORIES target property.
      GenexEval: Test evaluation of INCLUDE_DIRECTORIES target property.
      FindQt4: Don't fail if certain Qt modules are unavailable.
      Qt4Macros: Handle Qt ActiveX libraries in qt4_use_modules.
      Genex: Fix the HEAD target used for evaluated expressions

(ryoon)

Updated devel/scmgit to 1.8.3.3

(adam)

Changes 1.8.3.3:
* "git apply" parsed patches that add new files, generated by programs
  other than Git, incorrectly.  This is an old breakage in v1.7.11.
* Older cURL wanted piece of memory we call it with to be stable, but
  we updated the auth material after handing it to a call.
* "git pull" into nothing trashed "local changes" that were in the
  index.
* Many "git submodule" operations did not work on a submodule at a
  path whose name is not in ASCII.
* "cherry-pick" had a small leak in its error codepath.
* Logic used by git-send-email to suppress cc mishandled names like
  "A U. Thor" <author@example.xz>, where the human readable part
  needs to be quoted (the user input may not have the double quotes
  around the name, and comparison was done between quoted and
  unquoted strings).  It also mishandled names that need RFC2047
  quoting.
* "gitweb" forgot to clear a global variable $search_regexp upon each
  request, mistakenly carrying over the previous search to a new one
  when used as a persistent CGI.
* The wildmatch engine did not honor WM_CASEFOLD option correctly.
* "git log -c --follow $path" segfaulted upon hitting the commit that
  renamed the $path being followed.
* When a reflog notation is used for implicit "current branch",
  e.g. "git log @{u}", we did not say which branch and worse said
  "branch ''" in the error messages.
* Mac OS X does not like to write(2) more than INT_MAX number of
  bytes; work it around by chopping write(2) into smaller pieces.
* Newer MacOS X encourages the programs to compile and link with
  their CommonCrypto, not with OpenSSL.
Also contains various minor documentation updates.

(adam)

Updated pkgtools/mksandbox to 1.2

(jperkin)

mksandbox-1.2:

  * Mount /proc read-write on Linux, it appears to be required for e.g.
    groupadd to function correctly.

  * Add new --rodirs and --rwdirs options, which allow arbitrary lists
    of directories to be mounted appropriately inside the chroot.

  * Add --without-pkgsrc which prevents the default pkgsrc directories
    from being mounted.

This allows mksandbox to be easily used for chrooted pbulk setups, using
a simple invocation such as:

  mksandbox --without-pkgsrc --rodirs=/usr/pbulk --rwdirs=/shared /chroot

(jperkin)

Updated devel/nss to 3.15.1

(ryoon)

Update to 3.15.1

Changelog:
NSS 3.15.1 release notes

Introduction

Network Security Services (NSS) 3.15.1 is a patch release for NSS 3.15. The bug fixes in NSS 3.15.1 are described in the "Bugs Fixed" section below.
Distribution Information

NSS 3.15.1 source distributions are also available on ftp.mozilla.org for secure HTTPS download:

    Source tarballs:
    https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_15_1_RTM/src/

New in NSS 3.15.1
New Functionality

    TLS 1.2: TLS 1.2 (RFC 5246) is supported. HMAC-SHA256 cipher suites (RFC 5246 and RFC 5289) are supported, allowing TLS to be used without MD5 and SHA-1. Note the following limitations.
        The hash function used in the signature for TLS 1.2 client authentication must be the hash function of the TLS 1.2 PRF, which is always SHA-256 in NSS 3.15.1.
        AES GCM cipher suites are not yet supported.

New Functions

None.
New Types

    in sslprot.h
        SSL_LIBRARY_VERSION_TLS_1_2 - The protocol version of TLS 1.2 on the wire, value 0x0303.
        TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_NULL_SHA256 - New TLS 1.2 only HMAC-SHA256 cipher suites.
    in sslerr.h
        SSL_ERROR_UNSUPPORTED_HASH_ALGORITHM, SSL_ERROR_DIGEST_FAILURE, SSL_ERROR_INCORRECT_SIGNATURE_ALGORITHM - New error codes for TLS 1.2.
    in sslt.h
        ssl_hmac_sha256 - A new value in the SSLMACAlgorithm enum type.
        ssl_signature_algorithms_xtn - A new value in the SSLExtensionType enum type.

New PKCS #11 Mechanisms

None.
Notable Changes in NSS 3.15.1

    Bug 856060 - Enforce name constraints on the common name in libpkix  when no subjectAltName is present.
    Bug 875156 - Add const to the function arguments of SEC_CertNicknameConflict.
    Bug 877798 - Fix ssltap to print the certificate_status handshake message correctly.
    Bug 882829 - On Windows, NSS initialization fails if NSS cannot call the RtlGenRandom function.
    Bug 875601 - SECMOD_CloseUserDB/SECMOD_OpenUserDB fails to reset the token delay, leading to spurious failures.
    Bug 884072 - Fix a typo in the header include guard macro of secmod.h.
    Bug 876352 - certutil now warns if importing a PEM file that contains a private key.
    Bug 565296 - Fix the bug that shlibsign exited with status 0 even though it failed.
    The NSS_SURVIVE_DOUBLE_BYPASS_FAILURE build option is removed.

Bugs fixed in NSS 3.15.1

    https://bugzilla.mozilla.org/buglist.cgi?list_id=5689256;resolution=FIXED;classification=Components;query_format=advanced;target_milestone=3.15.1;product=NSS

Compatibility

NSS 3.15.1 shared libraries are backward compatible with all older NSS 3.x shared libraries. A program linked with older NSS 3.x shared libraries will work with NSS 3.15.1 shared libraries without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs to the functions listed in NSS Public Functions will remain compatible with future versions of the NSS shared libraries.

NSS 3.15 release notes

Introduction

The NSS team has released Network Security Services (NSS) 3.15, which is a minor release.
Distribution Information

The HG tag is NSS_3_15_RTM. NSS 3.15 requires NSPR 4.10 or newer.

NSS 3.15 source distributions are available on ftp.mozilla.org for secure HTTPS download:

    Source tarballs:
    https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_15_RTM/src/

New in NSS 3.15
New Functionality

    Support for OCSP Stapling (RFC 6066, Certificate Status Request) has been added for both client and server sockets. TLS client applications may enable this via a call to SSL_OptionSetDefault(SSL_ENABLE_OCSP_STAPLING, PR_TRUE);
    Added function SECITEM_ReallocItemV2. It replaces function SECITEM_ReallocItem, which is now declared as obsolete.
    Support for single-operation (eg: not multi-part) symmetric key encryption and decryption, via PK11_Encrypt and PK11_Decrypt.
    certutil has been updated to support creating name constraints extensions.

New Functions

    in ssl.h
        SSL_PeerStapledOCSPResponse - Returns the server's stapled OCSP response, when used with a TLS client socket that negotiated the status_request extension.
        SSL_SetStapledOCSPResponses - Set's a stapled OCSP response for a TLS server socket to return when clients send the status_request extension.
    in ocsp.h
        CERT_PostOCSPRequest - Primarily intended for testing, permits the sending and receiving of raw OCSP request/responses.
    in secpkcs7.h
        SEC_PKCS7VerifyDetachedSignatureAtTime - Verifies a PKCS#7 signature at a specific time other than the present time.
    in xconst.h
        CERT_EncodeNameConstraintsExtension - Matching function for CERT_DecodeNameConstraintsExtension, added in NSS 3.10.
    in secitem.h
        SECITEM_AllocArray
        SECITEM_DupArray
        SECITEM_FreeArray
        SECITEM_ZfreeArray - Utility functions to handle the allocation and deallocation of SECItemArrays
        SECITEM_ReallocItemV2 - Replaces SECITEM_ReallocItem, which is now obsolete. SECITEM_ReallocItemV2 better matches caller expectations, in that it updates item->len on allocation. For more details of the issues with SECITEM_ReallocItem, see Bug 298649 and Bug 298938.
    in pk11pub.h
        PK11_Decrypt - Performs decryption as a single PKCS#11 operation (eg: not multi-part). This is necessary for AES-GCM.
        PK11_Encrypt - Performs encryption as a single PKCS#11 operation (eg: not multi-part). This is necessary for AES-GCM.

New Types

    in secitem.h
        SECItemArray - Represents a variable-length array of SECItems.

New Macros

    in ssl.h
        SSL_ENABLE_OCSP_STAPLING - Used with SSL_OptionSet to configure TLS client sockets to request the certificate_status extension (eg: OCSP stapling) when set to PR_TRUE

Notable Changes in NSS 3.15

    SECITEM_ReallocItem is now deprecated. Please consider using SECITEM_ReallocItemV2 in all future code.

    NSS has migrated from CVS to the Mercurial source control management system.

    Updated build instructions are available at Migration to HG

    As part of this migration, the source code directory layout has been re-organized.

    The list of root CA certificates in the nssckbi module has been updated.

    The default implementation of SSL_AuthCertificate has been updated to add certificate status responses stapled by the TLS server to the OCSP cache.

    Applications that use SSL_AuthCertificateHook to override the default handler should add appropriate calls to SSL_PeerStapledOCSPResponse and CERT_CacheOCSPResponseFromSideChannel.
    Bug 554369: Fixed correctness of CERT_CacheOCSPResponseFromSideChannel and other OCSP caching behaviour.
    Bug 853285: Fixed bugs in AES GCM.
    Bug 341127: Fix the invalid read in rc4_wordconv.
    Faster NIST curve P-256 implementation.
    Dropped (32-bit) SPARC V8 processor support on Solaris. The shared library libfreebl_32int_3.so is no longer produced.

Bugs fixed in NSS 3.15

This Bugzilla query returns all the bugs fixed in NSS 3.15:

https://bugzilla.mozilla.org/buglist.cgi?list_id=6278317&resolution=FIXED&classification=Components&query_format=advanced&product=NSS&target_milestone=3.15

(ryoon)

Updated devel/nspr to 4.10

(ryoon)

Update to 4.10, based on pkgsrc/wip/nspr by mef@.

* Set LICENSE.

Changelog:
http://mozilla.6506.n7.nabble.com/ANNOUNCE-NSPR-4-10-Release-td280660.html
--------------
  NSPR 4.10 has the following bug fixes:
* Bug 331169: Obviate PR_Sleep before PR_GetConnectStatus on Windows.
  Fixed by Brian Smith.
* Bug 687033: Support Windows/arm. Fixed by Makoto Kato (partially
  checked in).
* Bug 687033: Remove WINCE and Win9x support partially.
* Bug 844513: Add AddressSanitizer (ASan) memory check annotations to
  PLArena. Fixed by Mats Palmgren.
* Bug 849089: Simple changes to make NSPR's configure.in work with
  the current version of autoconf.
* Bug 856196: Fix compiler warnings and clean up code in NSPR 4.10.
* Bug 859066: Fix warning in nsprpub/pr/src/misc/prnetdb.c.
* Bug 859830: Deprecate ANDROID_VERSION in favor of android/api-level.h.
  Fixed by Vicamo Yang.
* Bug 861434: Make PR_SetThreadPriority() change priorities
  relatively to the main process instead of using absolute values on
  Linux. Fixed by Gabriele Svelto.
* Bug 871064L: _PR_InitThreads() should not call PR_SetThreadPriority.

(ryoon)

Updated www/php-owncloud to 5.0.9

(ryoon)

Update to 5.0.9

Changelog:
Version 5.0.9 July 15th 2013

    Fixes for mounting an WebDAV into an ownCloud
    Improved expiration of older versions in the case of a full storage
    IE8 fixes
    Increased speed when syncing shared files
    Oracle compatibility fixes
    Make upgrade routine more robust
    Fix gallery for certain php configurations
    Fix pdf viewer close button
    user_external fixes
    Several smaller fixes

Version 5.0.8 July 10th 2013

    SECURITY: XSS vulnerability in ���Share Interface��� (oC-SA-2013-029)
    SECURITY: Authentication bypass in ���user_webdavauth��� (oC-SA-2013-030)
    New anonymous upload feature
    Fix syncing of external filesystems
    External filesystems performance improvements
    Improve compatibility with Oracle
    Improved and simplified theming
    Internet explorer 8 fixes
    Fixes for partial file uploads
    LDAP: fix handling of User and Group Bases
    Improved and more robust upgrade system
    A lot of encryption system fixes
    Do not add groups if user has no groups
    Several Contacts fixes
    A lot of smaller bugfixes all over the place

(ryoon)

add textproc/py-xlwt

(richard)

added textproc/py-xlwt to 0.7.5

(richard)