Bump all packages for perl-5.18, that
a) refer 'perl' in their Makefile, or
b) have a directory name of p5-*, or
c) have any dependency on any p5-* package

Like last time, where this caused no complaints.

(wiz)

Add missing change entries

(fhajny)

Updated lang/nodejs to 0.10.9

(fhajny)

2013.05.30, Version 0.10.9 (Stable)
* npm: Upgrade to 1.2.24
* uv: Upgrade to v0.10.9
* repl: fix JSON.parse error check (Brian White)
* tls: proper .destroySoon (Fedor Indutny)
* tls: invoke write cb only after opposite read end (Fedor Indutny)
* tls: ignore .shutdown() syscall error (Fedor Indutny)

(fhajny)

Bumping to 1.14 for the last three additions that I forgot to bump.

(rodent)

Final fix for PR pkg/47868.

(wiz)

Updated lang/perl5 to 5.18.0

(adam)

We are excited to announce perl v5.18.0, the first stable release of version
18 of Perl 5.

You can find a full list of changes in the file "perldelta.pod" located in
the "pod" directory inside the release and on the web.

Perl v5.18.0 represents approximately 12 months of development since Perl
v5.16.0 and contains approximately 400,000 lines of changes across 2,100
files from 113 authors.

(adam)

Fix previous. From J旦rn Clausen.

(wiz)

Try fixing build on Solaris. PR pkg/47868.

(wiz)

Updated x11/libXtst to 1.2.2

(wiz)

Update to 1.2.2:

This release provides the fix for the recently announced security issue
CVE-2013-2063, along with a number of fixes to the build configuration.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (5):
      Move -I flags from AM_CFLAGS to AM_CPPFLAGS
      Add xextproto & xi to Requires.private
      Use _XEatDataWords to eat data in error cases
      integer overflow in XRecordGetContext() [CVE-2013-2063]
      libXtst 1.2.2

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

Julien Cristau (1):
      COPYING: add copyright notices and licenses from the manpages and specs

(wiz)

Updated x11/libXxf86vm to 1.1.3

(wiz)

Update to 1.1.3:

This release provides the fixes for the recently announced security issue
CVE-2013-2001 along with a number of other fixes to the error handling
code found while investigating that issue.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (10):
      Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
      When Xcalloc() returns NULL, you don't need to Xfree() it
      Improve error handling in XF86VidModeGetMonitor()
      Unlock display before returning alloc error in XF86VidModeGetModeLine()
      Unlock display before returning alloc error in XF86VidModeGetAllModeLines()
      Unlock display before returning alloc error in XF86VidModeGetDotClocks()
      Use _XEatDataWords to avoid overflow of length calculations
      memory corruption in XF86VidModeGetGammaRamp() [CVE-2013-2001]
      avoid integer overflow in XF86VidModeGetModeLine()
      libXxf86vm 1.1.3

Colin Walters (1):
      autogen.sh: Honor NOCONFIGURE environment variable

(wiz)

Updated x11/libXxf86dga to 1.1.4

(wiz)

Update to 1.1.4:

This release provides the fixes for the recently announced security issues
CVE-2013-1991 & CVE-2013-2000, along with a couple build fixes.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (7):
      Use _XEatDataWords to avoid overflow of rep.length shifting
      integer overflow in XDGAQueryModes() [CVE-2013-1991 1/2]
      buffer overflow in XDGAQueryModes() [CVE-2013-2000 1/2]
      integer overflow & underflow in XDGASetMode() [CVE-2013-1991 2/2]
      buffer overflow in XDGASetMode() [CVE-2013-2000 2/2]
      integer overflow in XDGAOpenFramebuffer()
      libXxf86dga 1.1.4

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

Jeremy Huddleston (2):
      Build fix when sizeof(off_t) > sizeof(void *)
      Include <stdint.h> for uintptr_t

(wiz)

Updated x11/libXt to 1.1.4

(wiz)

Update to 1.1.4:

This release provides the fixes for the recently announced security issues
CVE-2013-2002 & CVE-2013-2005, along with other code & doc cleanups, build
fixes, automake compatibility changes, and packaging improvements.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (5):
      unifdef -U__UNIXOS2__
      Unchecked return values of XGetWindowProperty [CVE-2013-2005]
      unvalidated length in _XtResourceConfigurationEH [CVE-2013-2002]
      Remove old strtoul workaround for SunOS 4
      libXt 1.1.4

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

Egbert Eich (2):
      Install ErrorDB into a $datarootdir-path, not $libdir.
      Add XtErrorDB directory to pkg-config file.

Eric S. Raymond (2):
      Eliminate use of tab stops.
      Remove unused macros that are temptations to presentation-level klugery.

Julien Cristau (1):
      Add copyright notice and license from the X Consortium to COPYING

Thierry Reding (1):
      Use AM_CPPFLAGS instead of INCLUDES

Thomas Klausner (2):
      Avoid referencing something that isn't defined. Bring in the definition from another manual page.
      Fix DEBUG build (TMparse.c:376:1: error: overflow in implicit constant conversion)

(wiz)

Updated x11/libXres to 1.0.7

(wiz)

Update to 1.0.7:

This release primarily provides the fix for the recently announced
security vulnerability CVE-2013-1988, along with improved compatibility
with future automake releases.

Alan Coopersmith (5):
      Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
      Use _XEatDataWords to avoid overflow of rep.length shifting
      integer overflow in XResQueryClients() [CVE-2013-1988 1/2]
      integer overflow in XResQueryClientResources() [CVE-2013-1988 2/2]
      libXres 1.0.7

(wiz)

Updated x11/libXp to 1.0.2

(wiz)

Update to 1.0.2:

This bug fix release delivers the fixes for the recently announced security
vulnerability CVE-2013-2062, alongside the last couple years accumulation
of janitorial cleanups, compiler warning fixes, and adjustments to remain
compatible with changes in new and future automake releases.

Alan Coopersmith (10):
      Strip trailing whitespace
      Stop trying to use NULL for Status values
      Fix XpEventToWire arguments to match what libXext expects
      Add const qualifiers to silence gcc -Wwrite-strings warnings
      Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
      Use _XEatDataWords to avoid overflow of rep.length bit shifting
      integer overflow in XpGetAttributes & XpGetOneAttribute [CVE-2013-2062 1/3]
      integer overflows in XpGetPrinterList() [CVE-2013-2062 2/3]
      integer overflows in XpQueryScreens() [CVE-2013-2062 3/3]
      libXp 1.0.2

(wiz)

Updated x11/libXinerama to 1.1.3

(wiz)

Update to 1.1.3:

This bug fix release primarily provides the fix for the recently announced
security vulnerability CVE-2013-1985.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (3):
      Use _XEatDataWords to avoid overflow of _XEatData calculations
      integer overflow in XineramaQueryScreens() [CVE-2013-1985]
      libXinerama 1.1.3

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

(wiz)

Pullup ticket #4143.

(tron)

Pullup ticket #4143 - requested by spz
www/apache-tomcat6: security update

Revisions pulled up:
- www/apache-tomcat6/Makefile                                  1.12
- www/apache-tomcat6/PLIST                                      1.8
- www/apache-tomcat6/distinfo                                  1.9

---
  Module Name: pkgsrc
  Committed By: spz
  Date: Sat May 18 15:19:15 UTC 2013

  Modified Files:
  pkgsrc/www/apache-tomcat6: Makefile PLIST distinfo

  Log Message:
  security update:

  Important: Session fixation CVE-2013-2067

  FORM authentication associates the most recent request requiring
  authentication with the current session. By repeatedly sending
  a request for an authenticated resource while the victim is
  completing the login form, an attacker could inject a request
  that would be executed using the victim's credentials.

  Note that the option to change session ID on authentication was
  added in Tomcat 6.0.21. In earlier 6.0.x releases, prevention of
  session fixation was an application responsibility.
  This vulnerability represents a bug in Tomcat's session fixation
  protection that was added in 6.0.21. Hence, only versions 6.0.21
  onwards are listed as vulnerable.

  This was fixed in revision 1417891.

  This issue was identified by the Tomcat security team on
  15 Oct 2012 and made public on 10 May 2013.

  Affects: 6.0.21-6.0.36

  Important: Denial of service CVE-2012-3544

  When processing a request submitted using the chunked transfer
  encoding, Tomcat ignored but did not limit any extensions that
  were included. This allows a client to perform a limited DOS
  by streaming an unlimited amount of data to the server.

  This was fixed in revision 1476592.

  This issue was reported to the Tomcat security team on
  10 November 2011 and made public on 10 May 2013.

  Affects: 6.0.0-6.0.36

  ChangeLog:
  ++++++++++
  Catalina

  fix 52055: Ensure that filters are recycled. (markt/kkolinko)
  fix 52184: Reduce log level for invalid cookies. (markt)
  fix 53481: Added support for SSLHonorCipherOrder to allow the
  server to impose its cipher order on the client. Based on
  a patch provided by Marcel Šebek. (schultz)
  fix 54044: Correct bug in timestamp cache used by logging
  (including the access log valve) that meant entries could
  be made with an earlier timestamp than the true timestamp. (markt)
  fix In FormAuthenticator: If it is configured to change
  Session IDs, do the change before displaying the login
  form. (kkolinko)
  fix 54054: Do not share shell environment variables between
  multiple instances of the CGI servlet. (markt)
  fix 54087: Correctly handle (ignore) invalid If-Modified-Since
  header rather than throwing an exception. (markt/kkolinko)
  fix 54220: Ensure the ErrorReportValve only generates an error
  report if the error flag on the response has been set. (markt)
  fix Fix memory leak of servlet instances when running with
  a SecurityManager and either init() or destroy() methods
  fail or the servlet is a SingleThreadModel one, and of
  filter instances if their destroy() method fails with an
  Error. (kkolinko)
  fix 54382: Fix NPE when SSI processing is enabled and an empty
  SSI directive is present. (markt)
  fix 54483: Correct one of the Spanish translations. Based on
  a suggestion from adinamita. (kkolinko)
  update 54527: Synchronize conf/web.xml mime mapping with Tomcat 7. (markt)

  Coyote

  fix 54248: Ensure that byte order marks are swallowed when
  using a Reader to read a request body with a BOM for those
  encodings that require byte order marks. (markt)
  fix 54324: Allow APR connector to disable TLS compression
  if OpenSSL supports it. (schultz)
  fix 54456: Ensure that if a client aborts a request when
  sending a chunked request body that this is communicated
  correctly to the client reading the request body. (markt)
  update Update the native component of the APR/native connector
  to 1.1.27 and make that version the recommended minimum
  version. (kkolinko)

  Jasper

  fix 54615: Tomcat 6 doesn't build against ecj 4.x (kkolinko)

  Cluster

  fix 54045: Make sure getMembers() returns available member
  when TcpFailureDetector works in static cluster. (kfujino)

  Web applications

  update 22278: Add a commented out sample configuration of
  RemoteAddrValve to META-INF/context.xml files of the
  Manager and Host Manager applications. (kkolinko)
  fix 54080: Clarify documentation for initial value of
  internalProxies attribute of RemoteIpValve. (schultz/kkolinko)
  fix 54198: Clarify that HttpServletResponse.sendError(int)
  results in an HTML response by default. (markt)
  fix 54207: Correct JNDI factory package name in Javadoc for
  org.apache.naming.java.javaURLContextFactory. (markt)

  Other

  update Add sample Apache Commons Daemon JSVC wrapper script
  bin/daemon.sh that can be used with /etc/init.d. (kkolinko)
  update In the build configuration: introduce property
  "tomcat.output" that is used to specify location of the
  build output directory. This simplifies configuration if
  someone wants to move the output directory elsewhere
  (e.g. out of the source tree). (kkolinko)
  fix 54390: Use 'java_home' on Mac OS X to auto-detect
  JAVA_HOME. (schultz)
  update 54601: Change catalina.sh to consistently use
  LOGGING_MANAGER variable to configure logging, instead
  of modifying JAVA_OPTS one. (kkolinko)
  update 54890: Update to Apache Commons Daemon 1.0.15. (mturk)

(tron)

-libXfontcache; was imported to fonts/

(rodent)

+libXfontcache

(rodent)

Will MAINTAIN this one too.

(rodent)

Added fonts/libXfontcache version 1.0.5

(rodent)

Import libXfontcache-1.0.5 as fonts/libXfontcache.

Xfontcache - X-TrueType font cache extension client library.

(rodent)

-windowswmproto -libWindowsWM

(rodent)

s/Added/Moved for wm/{applewmproto,libAppleWM}

(rodent)

Include bsd.fast.prefs and then add wm/libAppleWM if OPSYS == Darwin,
as to not break this package on other platforms, given libAppleWM has
ONLY_FOR_PLATFORM = Darwin-*-* set. Add wm/libWindowsWM as well. Bump
version.

(rodent)

Include bsd.fast.prefs and then add wm/applewmproto if OPSYS == Darwin,
as to not break this package on other platforms, given applewmproto has
ONLY_FOR_PLATFORM = Darwin-*-* set. Add wm/windowswmproto as well. Bump
version.

(rodent)

Moved applewmproto and libAppleWM to wm/ to live with windowswmproto and
libWindowsWM.

(rodent)

+applewmproto +libAppleWM +libWindowsWM +windowswmproto

(rodent)

Added wm/libAppleWM version 1.4.0

(rodent)

Moving libAppleWM-1.4.0 from x11/libAppleWM.

AppleWM is a simple library designed to interface with the Apple-WM extension.
This extension allows X window managers to better interact with
the Mac OS X Aqua user interface when running X11 in a rootless mode.

This package provides the libAppleWM library from the modular X.org
X11 project.

(rodent)

Added wm/applewmproto version 1.4.2

(rodent)

Moving applewmproto-1.4.2 from x11/applewmproto.

This provides the AppleWM extension headers from modular X.org X11
project.

(rodent)

Added wm/libWindowsWM version 1.0.1

(rodent)

Import libWindowsWM-1.0.1 as wm/libWindowsWM.

WindowsWM - Cygwin/X rootless window management extension.

WindowsWM is a simple library designed to interface with the Windows-WM
extension.  This extension allows X window managers to better interact with the
Cygwin XWin server when running X11 in a rootless mode.

(rodent)

Added wm/windowswmproto version 1.0.4

(rodent)

Import windowswmproto-1.0.4 as wm/windowswmproto.

This module provides the definition of the WindowsWM extension to the X11
protocol, used for coordination between an X11 server and the Microsoft Windows
native window manager.

WindowsWM is only intended to be used on Cygwin when running a rootless XWin
server.

(rodent)

Note update of the "apache22" package to version 2.2.24nb1.

(tron)

Add Apache developer fix for security vulnerability reported
in CVE-2013-1862.

(tron)

Add USE_BSD_MAKEFILE=yes and bump the package revision.
Thanks, joerg, for the hint.

(mbalmer)

DragonFly needs GNU readline here as well. PR pkg/47870 by David Shao.

(wiz)

Updated x11/libxcb to 1.9.1

(wiz)

Update to 1.9.1:

* Fix python code to work with python-3
* Security fix for integer overflow in read_packet() [CVE-2013-2064]

Alan Coopersmith (2):
      integer overflow in read_packet() [CVE-2013-2064]
      libxcb 1.9.1

Christian König (1):
      whitespace fix in xcb_take_socket

Chí-Thanh Christopher Nguyễn (2):
      c-client.py: Fix python-3 AttributeError: 'dict' object has no attribute 'iteritems'
      c_client.py: Fix python-3 invalid except statement

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

(wiz)

let us backout and not be hasty to use autotools in devel/diffutils 2/2

(richard)

let us backout and not be hasty to use autotools in devel/diffutils

(richard)

static_assert is part of C++11, so avoid the name.

(joerg)

Use C++11 headers directly if in C++11 mode or when using libc++.

(joerg)

Make sure to use json-glib and not the local headers.

(joerg)

Fix typo in patch-ak, add xgettext to USE_TOOLS.

(hans)

Updated graphics/p5-PerlMagick to 6.8.5.8

(wiz)

Reset PKGREVISION due to ImageMagick update.

(wiz)

Updated graphics/ImageMagick to 6.8.5.8

(wiz)

Update to 6.8.5.8.

2013-05-23  6.8.5-8 Glenn Randers-Pehrson <glennrp@image...>
  * Stopped a "-fsanitize-address" warning in the JNG coder.

2013-05-20  6.8.5-8 Cristy  <quetzlzacatenango@image...>
  * The -white-threshold option is symetrical with -black-threshold (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23441);
  * Fix multi-line PNM comments (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23442).
  * The -format option should not automatically append a newline since the
    user can specify a newline in the formatting expression.
  * The -level option is no longer returning a darkened image (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23479).

2013-05-20  6.8.5-7 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.5-7, SVN revision 12310.

2013-05-14  6.8.5-7 Glenn Randers-Pehrson <glennrp@image...>
  * Recognize PNG iCCP chunks that contain the sRGB profile and replace
    them with the PNG sRGB chunk.  Use "-define png:preserve-iCCP" to
    get the previous behavior, of simply copying the iCCP chunk.

2013-05-11  6.8.5-7 Cristy  <quetzlzacatenango@image...>
  * Sometimes an sRGB image is masquerading as grayscale (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23370).
  * Labels no longer overflow (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=22964).
  * If more then one exception, return the highest security exception.
  * A grayscale image returns a color JPEG for -type TrueColor (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=1&t=23421).
  * Read PAM comment (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23442).

2013-05-10  6.8.5-6 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.5-6, SVN revision 12257.

2013-05-09  6.8.5-6 Cristy  <quetzlzacatenango@image...>
  * The stream utility no longer faults when exporting float pixels (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23394).

2013-05-08  6.8.5-5 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.5-5, SVN revision 12227.

2013-05-07  6.8.5-5 Nicolas Robidoux <nicolas.robidoux@gmail...>
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.

2013-05-06  6.8.5-5 Glenn Randers-Pehrson <glennrp@image...>
  * Eliminate whitespace from image properties that hold PNG chunk data.

2013-05-05  6.8.5-5 Cristy  <quetzlzacatenango@image...>
  * The -poly option treats the opacity channel as alpha (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23346).
  * The -threshold 50% option returns a 50-50 black and white image (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23354).
  * Let user override the TIFF rows per strip  (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&t=23307).
  * Fix transient bug in the -separate option (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23335).

2013-05-01  6.8.5-4 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.5-4, SVN revision 12089.

2013-05-01  6.8.5-4 Cristy  <quetzlzacatenango@image...>
  * Add DeleteImageArtifact() for jpeg:extent artifact (thanks to
    Jimmy Xie @ Microsoft).
  * Track morphology changes per thread to avoid a critical section.

2013-04-28  6.8.5-3 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.5-3, SVN revision 12025.

2013-04-29  6.8.5-3 Cristy  <quetzlzacatenango@image...>
  * Add DeleteImageArtifact() for jpeg:extent artifact (thanks to
    Jimmy Xie @ Microsoft).
  * Add support for JXR / WDP image format.

2013-04-28  6.8.5-2 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.5-2, SVN revision 12013.

2013-04-28  6.8.5-2 Cristy  <quetzlzacatenango@image...>
  * Use GetImageOption() for webp options (e.g. webp:lossless).

2013-04-27  6.8.5-1 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.5-1, SVN revision 12000.

2013-04-26  6.8.5-1 Cristy  <quetzlzacatenango@image...>
  * Recognize xc:gray50 is non-linear.
  * Loop over read() until requested bytes are consumed (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?t=23268).
  * Don't use gamma lookup map when HDRI is enabled.

2013-04-24  6.8.5-0 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.5-0, SVN revision 11979.

2013-04-16  6.8.5-0 Glenn Randers-Pehrson <glennrp@image...>
  * Handle benign errors as warnings in the PNG coder.

2013-04-16  6.8.5-0 Cristy  <quetzlzacatenango@image...>
  * Don't modify channel values for -separate (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23193).
  * The -adaptive-sharpen option is now sharpening properly (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23211).
  * Sometimes an image says its grayscale when its not (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23217).
  * Use malloc() to allocate X image data (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23221).
  * If there are more components than quantization tables, the last table is
    replicated.
  * Removed the ICC profile from the logo: image definition in coders/magick.c;
    libpng16 detected that it was a broken sRGB profile.
  * Negatives raised to a non-integer power returns NaN's (reference
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23234).

2013-04-15  6.8.4-10 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-10, SVN revision 11851.

2013-04-11  6.8.4-10 Cristy  <quetzlzacatenango@image...>
  * Ensure -define jpeg:extent is resticted to at most 7 iterations (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23179).
  * Move X11 font support from annotate.c source module to xwindow.c.

2013-04-10  6.8.4-9 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-9, SVN revision 11818.

2013-04-10  6.8.4-9 Bastien Roucaries  <roucaries.basti...>
  * Respect --program-suffix configure script option (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23143).
  * Update to the newest AX_CHECK_PTHREAD macro from autoconf-archive.

2013-04-10  6.8.4-9 Anthony Thyssen <A.Thyssen@griffith...>
  * Save the calculated angle for "deskew" as the artifact "deskew:angle"

2013-04-08  6.8.4-9 Cristy  <quetzlzacatenango@image...>
  * Pass JP2 format type to decoder (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23038).
  * Previously tinting a grayscale image returned dark results.
  * The -page option only affects new images (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23172).
  * Revert 'Move binaries to lib subdirectory and link are created from binary
  package' patch.  We're getting too many bug reports.

2013-04-07  6.8.4-8 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-8, SVN revision 11743.

2013-04-06  6.8.4-8 Cristy  <quetzlzacatenango@image...>
  * Include intensity type in the MIFF metadata.

2013-04-06  6.8.4-7 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-7, SVN revision 11720.

2013-04-05  6.8.4-7 Anthony Thyssen <A.Thyssen@griffith...>
  * Fix -sample sampling point to midpoints of sampling areas
  * add a "sample:offset=" define to allow users to adjust this
    sampling point position in terms of percentage (default = 50x50)

2013-04-02  6.8.4-7 Glenn Randers-Pehrson <glennrp@image...>
  * Don't write a PNG gAMA or cHRM chunk when writing the iCCP or sRGB chunk.

2013-04-02  6.8.4-7 Cristy  <quetzlzacatenango@image...>
  * Return MagickWand for the library name for Wand.pc.
  * The LCH colorspace makes the round-trip now.
  * Revert the default upsampling algortithm for JPEG (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23100).
  * Prevent fault when temporary directory is not-writable (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23117).

2013-04-01  6.8.4-7 Bastien Roucaries  <roucaries.basti...>
  * Prepare X11 support as a plugin.
  * Fix compilation under HPUX of perlmagick

2013-04-01  6.8.4-6 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-6, SVN revision 11640.

2013-04-01  6.8.4-6 Cristy  <quetzlzacatenango@image...>
  * The -clut option return a luma grayscale instead of the expected luminance.
  * Add moduledir variable to MagickCore.pc to support the MagickFilter and
    MagickCore kits.
  * Caption fits the sized area (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23085).

2013-03-31  6.8.4-5 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-5, SVN revision 11619.

2013-03-30  6.8.4-5 Cristy  <quetzlzacatenango@image...>
  * Fix transient bug when writing grayscale MIFF images.
  * Adding noise to a gray image returns a gray image as expected.
  * Image interlace no longer overwritten by proper cloning for GIF format.
  * Extract the clipping path from an image file with clip:myimage.

2013-03-29  6.8.4-4 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-4, SVN revision 11591.

2013-03-29  6.8.4-4 Cristy  <quetzlzacatenango@image...>
  * Update unit test signatures for Q8.
  * Resolve send() / recv() socket problems under MinGW.

2013-03-28  6.8.4-3 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-3, SVN revision 11581.

2013-03-28  6.8.4-3 Cristy  <quetzlzacatenango@image...>
  * Revert patch to ContrastStretchImage() to match results from 6.8.3-3.

2013-03-27  6.8.4-2 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-2, SVN revision 11558.

2013-03-27  6.8.4-2 Cristy  <quetzlzacatenango@image...>
  * Use MorphologyApply() rather than MorphologyImage() for -sharpen / -blur.

2013-03-27  6.8.4-1 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-1, SVN revision 11552.

2013-03-26  6.8.4-1 Cristy  <quetzlzacatenango@image...>
  * Sync 'intensity' option with current image.
  * Normalize sharpen kernel to match that of 6.8.3-3.

2013-03-26  6.8.4-0 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.4-0, SVN revision 11531.

2013-03-20  6.8.4-0 Cristy  <quetzlzacatenango@image...>
  * Do not write zero-length TIFF tags (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=22957).
  * Math library should be private for *.pc.in configuration files (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&t=22986).
  * Do not split words for caption (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=1&t=17123).
  * Modify the configure script check for the webp delegate library (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=1&t=23025).
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * Fix infinite loop for 'display -window' (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23028).
  * Revert -auto-level patch to match the results of ImageMagick 6.8.3-4.
  * Revert g_type_init() patch in svg.c (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23035).

2013-03-18  6.8.3-10 Cristy  <quetzlzacatenango@image...>
  * New version 6.8.3-10, SVN revision 11413.

2013-03-15  6.8.3-10 Glenn Randers-Pehrson <glennrp@image...>
  * Added IM, libpng, and zlib version info to debug output.

2013-03-10  6.8.3-10 Bastien Roucaries  <roucaries.basti...>
  * Move PerlMagick arch independant part to 'default' folder.
  * Move binaries to lib subdirectory and link are created from binary package.

2013-03-10  6.8.3-10 Cristy  <quetzlzacatenango@image...>
  * The TXT image format can now generate output compatible with the
    -sparse-color option (e.g. convert image.png sparse-color:image.txt).
  * Support -intensity option: method to generate an intensity value from a
    pixel.
  * Add -similarity-threshold option to the compare utility, the minimum
    distortion for a (sub)image match.
  * Avoid seq-fault in AcquireQuantumInfo() (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=22973).
  * Comment resource initializers in magick/resource.c.

(wiz)

Set PREV_PKGPATH.

(rodent)

+ solfege-3.22.0.

(wiz)

Since 0.15.2, dconf needs gdbus-codegen to build.
Thanks to joerg@ for report.

(prlw1)

Pullup ticket #4142.

(tron)

Pullup ticket #4142 - requested by spz
devel/rt3: security update

Revisions pulled up:
- devel/rt3/Makefile                                            1.52
- devel/rt3/Makefile.install                                    1.20
- devel/rt3/PLIST                                              1.23
- devel/rt3/distinfo                                            1.24

---
  Module Name: pkgsrc
  Committed By: spz
  Date: Sun May 26 16:55:53 UTC 2013

  Modified Files:
  pkgsrc/devel/rt3: Makefile Makefile.install PLIST distinfo

  Log Message:
  security update for RT3, fixing:

      CVE-2013-3368
      CVE-2013-3369
      CVE-2013-3370
      CVE-2013-3371
      CVE-2013-3372
      CVE-2013-3373
      CVE-2013-3374

  It also includes a database upgrade, so please make sure to run `make
  upgrade-database`.

  Changes in detail are:
  3.8.15->3.8.16:
  ruz stop RT from locking on "large" mails
  ruz make sure data is recorded (tests)
  alexmv Remove bogus argument to ->get(), which fail on HTTP::Message >= 5.05
  alexmv Ensure that tickets are destroyed before global destruction, in more
  alexmv Work around a bug in perl < 5.13.10 with open($fh, ">:raw", \$string)
  sunnavy destroy more tickets and objects before global destruction for modern
  tsibley Remove the "signature" paragraph from the README's explanation of RT

  3.8.16->3.8.17:
  alexmv Ensure that filenames in inline image attributes are HTML-escaped
  alexmv Deny direct access to callbacks
  alexmv Protect calls to $m->comp with user input in ColumnMap
  alexmv Ensure that subjects cannot contain embedded newlines
  alexmv Remove filename= suggesions from Content-Disposition lines
  alexmv Ensure consistent escaping of filenames in attachment URIs
  alexmv Ensure that URLs placed in HTML attributes are escaped correctly, to
  prevent XSS injection
  alexmv Ensure that the default replacement does not pass through unescaped
  content
  alexmv Use File::Temp for non-predictable temporary filenames

(tron)

+ bochs-2.6.2, gramps3-3.4.4, horde-5.0.5, imp-6.0.5, ingo-3.0.4,
  kronolith-4.0.5, turba-4.0.4.

(wiz)

Updated x11/libXcursor to 1.1.14

(wiz)

Update to 1.14:

This release delivers the fix for security vulnerability CVE-2013-2003
and makes the Makefile.am more compatible with future automake releases.

Alan Coopersmith (3):
      Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
      signedness bug & integer overflow in _XcursorFileHeaderCreate() [CVE-2013-2003]
      libXcursor 1.1.14

(wiz)

Roll distinfo back to previous version. Patch removed as this issue has
been fixed upstream.

(rodent)

Regenerating patchsum.

(rodent)

Updated sysutils/dbus-python-common to 1.2.0

(wiz)

Update to 1.2.0.

D-Bus Python Bindings 1.2.0 (2013-05-07)
========================================

The "compile like it's 1998" release.

Dependencies:

• libdbus 1.6 or later is now required.

Enhancements:

• Unicode Corrigendum 9: when used with a suitable version of libdbus
  (1.6.10 or later, or 1.7.2 or later), noncharacters in strings are
  now accepted

Fixes:

• Support DBusException('something with non—ASCII') under Python 2
  (Michael Vogt, smcv; fd.o #55899)

• Correct some misleading wording in COPYING which was written under the
  assumption that libdbus could actually be relicensed to MIT/X11
  (Thiago Macieira)

• Avoid variable-length arrays, because MSVC++ is still stuck in 1998
  (based on patches from Christoph Höger, fd.o #51725)

• Remove unnecessary uses of stdint.h (fd.o #51725)

• Add support for Unix compilers not supporting 'inline', for completeness

• Use GObject.__class__ instead of GObjectMeta, which can no longer be
  imported from gi.repository.GObject in pygobject 3.8

• Fix autoreconfiscation on Automake 1.13 (Marko Lindqvist, fd.o #59006)

(wiz)

Updated math/eigen3 to 3.1.3

(wiz)

Update to 3.1.3. Add comment to patch.

Changes since 3.1.2:

    Bug 526 - Fix linear vectorized transversal in linspace.
    Bug 551 - Fix compilation issue when using EIGEN_DEFAULT_DENSE_INDEX_TYPE.
    Bug 533 - Fix some missing const qualifiers in Transpose
    Fix a compilation with CGAL::Gmpq by adding explicit internal:: namespace when calling abs().
    Fix computation of outer-stride when calling .real() or .imag().
    Fix handmade_aligned_realloc (affected conservativeResize()).
    Fix sparse vector assignment from a sparse matrix.
    Fix log(0) with SSE.
    Fix bug in aligned_free with windows CE.
    Fix traits of Map<Quaternion.
    Fix a few warnings (507, 535, 581).
    Enable SSE with ICC even when it mimics a gcc version lower than 4.2
    Workaround gcc-4.7 bug #53900 (too aggressive optimization in our alignment check)

(wiz)

Updated security/gnupg2 to 2.0.20

(wiz)

Update to 2.0.20:

Noteworthy changes in version 2.0.20 (2013-05-10)
-------------------------------------------------

* Decryption using smartcards keys > 3072 bit does now work.

* New meta option ignore-invalid-option to allow using the same
  option file by other GnuPG versions.

* gpg: The hash algorithm is now printed for sig records in key listings.

* gpg: Skip invalid keyblock packets during import to avoid a DoS.

* gpg: Correctly handle ports from DNS SRV records.

* keyserver: Improve use of SRV records

* gpg-agent: Avoid tty corruption when killing pinentry.

* scdaemon: Improve detection of card insertion and removal.

* scdaemon: Rename option --disable-keypad to --disable-pinpad.

* scdaemon: Better support for CCID readers.  Now, the internal CCID
  driver supports readers without the auto configuration feature.

* scdaemon: Add pinpad input for PC/SC, if your reader has pinpad and
  it supports variable length PIN input, and you specify
  --enable-pinpad-varlen option.

* scdaemon: New option --enable-pinpad-varlen.

* scdaemon: Install into libexecdir to avoid accidental execution
  from the command line.

* Support building using w64-mingw32.

* Assorted bug fixes.

(wiz)

Updated x11/xkeyboard-config to 2.9

(wiz)

Update to 2.9:

Another release on schedule:
------------------------------------------

Andreas Wettstein (1):
      Draft for German T3 layout.

Daniel Drake (1):
      Fix AE00 alias in olpcm keycodes

Evgeny Bobkin (1):
      Fix keyboard indicator for russian (germany, phonetic)

James M Leddy (1):
      Add XF86AudioMicMute mappings

Michal Nazarewicz (1):
      Add various compose:*-altgr options.

Peter Hutterer (1):
      rules: fix iso639 code for irish

Sergey V. Udaltsov (16):
      Fixing wrong iso639-3 codes
      Fixing ISO codes
      English Mali layouts have English language assigned to them
      fr --> fra (ISO 639)
      Fixed ru(ruu) - invalid keysym
      Updates to Cameroon Keyboard
      Map Alt to Win
      Fixed fypo
      Fixed UK Macbook Pro layouts
      Fixed Congolese
      Added ru(mac)
      Added RAlt as 3rd level switcher to us(dvp)
      prerelease
      wrong location of de(legacy)
      Updated translations, prerelease
      release 2.9

Stephan Hilb (1):
      Remove explicit virtual modifier setting for level3 and level5

Walter Bender (1):
      add support for the OLPC mechanical non-membrane keyboard

(wiz)

Updated x11/libFS to 1.0.5

(wiz)

Update to 1.0.5:

This minor bugfix release includes the fix for the security issue recently
reported as CVE-2013-1996, as well as a number of other cleanups of the
memory allocation & error handling code noticed while working on that.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (9):
      Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
      Get rid of unnecessary casts in FS*alloc calls
      Get rid of unnecessary casts in FSfree calls
      Use NULL instead of 0 for null pointers
      Avoid reading outside bounds when _FSReply receives an Error response
      Avoid accessing freed memory on realloc failure in FSListFontsWithXInfo
      Get rid of more duplication in error cleanup code in FSListFontsWithXInfo
      Sign extension issue and integer overflow in FSOpenServer() [CVE-2013-1996]
      libFS 1.0.5

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

Thomas Klausner (1):
      Fix a prototype error

(wiz)

Updated x11/libXfixes to 5.0.1

(wiz)

Update to 5.0.1:

This bug fix release includes the fix for the recently announced
CVE-2013-1983, along with some other cleanups & warning fixes.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (7):
      Strip trailing whitespace
      Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
      Remove duplicate declaration of XFixesExtensionName in Xfixesint.h
      XFixesFetchRegionAndBounds: use nread in call to XReadPad
      Use _XEatDataWords to avoid overflow of _XEatData calculations
      integer overflow in XFixesGetCursorImage() [CVE-2013-1983]
      libXfixes 5.0.1

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

Peter Hutterer (1):
      man: remove "current", we're way past 1.0.

(wiz)

Recursive revbump because poppler updated its shlib major for a
x.y.z+1 change, again...

Noted by tron.

(wiz)

Updated security/nettle to 2.7.1

(adam)

Changes 2.7.1:
This is a bugfix release.

Bug fixes:

* Fixed a bug in the new ECC code. The ecc_j_to_a function
  called GMP:s mpn_mul_n (via ecc_modp_mul) with overlapping
  input and output arguments, which is not supported.

* The assembly files for SHA1, SHA256 and AES depend on ARMv6
  instructions, breaking nettle-2.7 for pre-v6 ARM processors.
  The configure script now enables those assembly files only
  when building for ARMv6 or later.

* Use a more portable C expression for rotations. The
  previous version used the following "standard" expression
  for 32-bit rotation:

    (x << n) | (x >> (32 - n))

  But this gives undefined behavior (according to the C
  specification) for n = 0. The rotate expression is replaced
  by the more portable:

    (x << n) | (x >> ((-n)&31))

  This change affects only CAST128, which uses non-constant
  rotation counts. Unfortunately, the new expression is poorly
  optimized by released versions of gcc, making CAST128 a bit
  slower. This is being fixed by the gcc hackers, see
  http://gcc.gnu.org/bugzilla/show_bug.cgi?id=57157.

The following problems have been reported, but are *not* fixed
in this release:

* ARM assembly files use instruction syntax which is not
  supported by all assemblers. Workaround: Use a current
  version of GNU as, or configure with --disable-assembler.

* Configuring with --disable-static doesn't work on windows.

The libraries are intended to be binary compatible with
nettle-2.2 and later. The shared library names are
libnettle.so.4.7 and libhogweed.so.2.5, with sonames still
libnettle.so.4 and libhogweed.so.2.

(adam)

Updated math/glpk to 4.50; converters/help2man to 1.42.1

(adam)

Changes 1.42.1:
* Update Vietnamese translation.
* Update Croatian translation.
* Consistently strip path and/or libtool "lt-" prefix from any instance
  of $program derived from --help or --version.

(adam)

Changes 4.50:
A new version of LU-factorization routines were added.
Currently this version provides the same functionality as the
old one, however, the new version allows further improving.

Old routines for FHV-factorization used to update the basis
factorization were replaced by a new version conforming to the
new version of LU-factorization.

Some clarifications about using the name index routines were
added.

Some typos were corrected in the MathProg language reference.

A serious bug (out-of-range indexing error) was *tentatively*
fixed in the routine glp_relax4. Unfortunatly, this bug is
inherited from the original Fortran version of the RELAX-IV
code (for details please see ChangeLog), and since the code is
very intricate, the bug is still under investigation.

(adam)