Add time.h where Linux demands it.

(dholland)

Teach this to recognize x86_64 on Linux.

(dholland)

Don't hardwire /usr/lib/libelf.a, even for Linux. Should fix Linux build.

(dholland)

Treat Linux 3.x like Linux 2.6 for PCI handling purposes.

(dholland)

Add missing termcap.bl3.mk.

(dholland)

Fix PLIST for Linux and apparently also MacOS. (An extra binary appears.)
Fix wrong WRKSRC. PKGREVISION -> 1.

(dholland)

Honor LDFLAGS; should fix rpaths and thus the Linux build.

(dholland)

Add missing termcap.bl3.mk.

(dholland)

note where this is used

(dholland)

Honor PKGMANDIR.

(dholland)

Don't launder const. Should fix Linux build.

(dholland)

Work around RMS's ego when examining config.guess output. Should fix
Linux build.

(dholland)

Don't launder const. Should fix Linux build.

(dholland)

Apply const to fix build with recent gcc.

(dholland)

Add missing termcap.buildlink3.mk.

(dholland)

This will actually only build for i386 and x86_64 on NetBSD; for other
values of MACHINE_ARCH, set PKG_FAIL_REASON instead of going kersplut.

Making it build for a wider range of platforms should be straightforward,
but probably needs to be done by someone who actually can test-build on
those platforms.

(dholland)

Add another case symlinking configuration templates; should fix ppc build.

(dholland)

After the move of expat in base, this finds it and installs an additional
library. Since expat is relatively harmless, just add an unconditional
dependence on expat and update the PLIST. PKGREVISION -> 4.

(dholland)

Improve the custom BUILDLINK_API_DEPENDS.libkdcraw in the hopes that this
was what's been causing the bulk builds to try to mix kde3 and kde4.
PKGREVISION -> 19

(dholland)

Needs full dependence on qt4-tools.

(dholland)

ddrescue is updated, but the todo entry was for a dd_rescue version
number.  Add link to dd_rescue, which could also be packaged.

(gdt)

Updated sysutils/ddrescue to 1.15

(gdt)

Update to 1.15 (not really tested), on the theory that there's no
reason to run old upstream code.

Changes in version 1.15:

The new option "-a, --min-read-rate" has been added.

The new option "-I, --verify-input-size" has been added.

The new option "-x, --extend-outfile" has been added.

Ddrescue now verifies that infile, outfile and logfile are all
different.

Non-tried blocks are now read aligned to cluster-size sectors.

The "split or skip" algorithm of the split pass has been improved.

A spurious warning about "-D" being ignored in fill mode has been
removed.

Ddrescuelog, a tool for manipulation, display, conversion, comparison
and testing of ddrescue logfiles, has been added.

(gdt)

Note update of the "wireshark" package to version 1.6.8.

(tron)

Update "wireshark" package to version 1.6.8. Changes since 1.6.7:
- The following vulnerabilities have been fixed:
  o wnpa-sec-2012-08
    Infinite and large loops in the ANSI MAP, ASF, BACapp,
    Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 dissectors
    have been fixed. Discovered by Laurent Butti. (Bugs 6805,
    7118, 7119, 7120, 7121, 7122, 7124, 7125)
    Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7.
  o wnpa-sec-2012-09
    The DIAMETER dissector could try to allocate memory improperly
    and crash. (Bug 7138)
    Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7.
  o wnpa-sec-2012-10
    Wireshark could crash on SPARC processors due to misaligned
    memory. Discovered by Klaus Heckelmann. (Bug 7221)
    Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7.
- The following bugs have been fixed:
  o User-Password - PAP decoding passwords longer than 16 bytes.
    (Bug 6779)
  o The MSISDN is not seen correctly in GTP packet. (Bug 7042)
  o Wireshark doesn't calculate the right IPv4 destination using
    source routing options when bad options precede them. (Bug
    7043)
  o BOOTP dissector issue with DHCP option 82 - suboption 9. (Bug
    7047)
  o MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW
    packets. (Bug 7089)
  o ANSI MAP infinite loop. (Bug 7119)
  o HCIEVT infinite loop. (Bug 7122)
  o Wireshark doesn't decode NFSv4.1 operations. (Bug 7127)
  o LTP infinite loop. (Bug 7124)
  o Wrong values in DNS CERT RR. (Bug 7130)
  o Megaco parser problem with LF in header. (Bug 7198)
  o OPC UA bytestring node id decoding is wrong. (Bug 7226)
- Updated Protocol Support
  ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP,
  IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA,
  RADIUS
- New and Updated Capture File Support
  5View, CSIDS, pcap, pcap-ng

(tron)

+ freeciv-2.3.2, gcal-3.6.2, haproxy-1.4.21, mame-0.146, mess-0.146,
  nmap-6.0, p5-glib2-1.260, qt4-4.8.2.

(wiz)

Updated multimedia/libvpx to 1.1.0

(ryoon)

Update to 1.1.0

* Tested with devel/xulrunner and www/firefox 12.0 on NetBSD/i386 6.99.7

Changelog:
2012-05-09 v1.1.0 "Eider"
  This introduces a number of enhancements, mostly focused on real-time
  encoding. In addition, it fixes a decoder bug (first introduced in
  Duclair) so all users of that release are encouraged to upgrade.

  - Upgrading:
    This release is ABI and API compatible with Duclair (v1.0.0). Users
    of older releases should refer to the Upgrading notes in this
    document for that release.

    This release introduces a new temporal denoiser, controlled by the
    VP8E_SET_NOISE_SENSITIVITY control. The temporal denoiser does not
    currently take a strength parameter, so the control is effectively
    a boolean - zero (off) or non-zero (on). For compatibility with
    existing applications, the values accepted are the same as those
    for the spatial denoiser (0-6). The temporal denoiser is enabled
    by default, and the older spatial denoiser may be restored by
    configuring with --disable-temporal-denoising. The temporal denoiser
    is more computationally intensive than the spatial one.

    This release removes support for a legacy, decode only API that was
    supported, but deprecated, at the initial release of libvpx
    (v0.9.0). This is not expected to have any impact. If you are
    impacted, you can apply a reversion to commit 2bf8fb58 locally.
    Please update to the latest libvpx API if you are affected.

  - Enhancements:
      Adds a motion compensated temporal denoiser to the encoder, which
      gives higher quality than the older spatial denoiser. (See above
      for notes on upgrading).

      In addition, support for new compilers and platforms were added,
      including:
        improved support for XCode
        Android x86 NDK build
        OS/2 support
        SunCC support

      Changing resolution with vpx_codec_enc_config_set() is now
      supported. Previously, reinitializing the codec was required to
      change the input resolution.

      The vpxenc application has initial support for producing multiple
      encodes from the same input in one call. Resizing is not yet
      supported, but varying other codec parameters is. Use -- to
      delineate output streams. Options persist from one stream to the
      next.

      Also, the vpxenc application will now use a keyframe interval of
      5 seconds by default. Use the --kf-max-dist option to override.

  - Speed:
      Decoder performance improved 2.5% versus Duclair. Encoder speed is
      consistent with Duclair for most material. Two pass encoding of
      slideshow-like material will see significant improvements.

      Large realtime encoding speed gains at a small quality expense are
      possible by configuring the on-the-fly bitpacking experiment with
      --enable-onthefly-bitpacking. Realtime encoder can be up to 13%
      faster (ARM) depending on the number of threads and bitrate
      settings. This technique sees constant gain over the 5-16 speed
      range. For VC style input the loss seen is up to 0.2dB. See commit
      52cf4dca for further details.

  - Quality:
      On the whole, quality is consistent with the Duclair release. Some
      tweaks:

        Reduced blockiness in easy sections by applying a penalty to
        intra modes.

        Improved quality of static sections (like slideshows) with
        two pass encoding.

        Improved keyframe sizing with multiple temporal layers

  - Bug Fixes:
      Corrected alt-ref contribution to frame rate for visible updates
      to the alt-ref buffer. This affected applications making manual
      usage of the frame reference flags, or temporal layers.

      Additional constraints were added to disable multi-frame quality
      enhancement (MFQE) in sections of the frame where there is motion.
      (#392)

      Fixed corruption issues when vpx_codec_enc_config_set() was called
      with spatial resampling enabled.

      Fixed a decoder error introduced in Duclair where the segmentation
      map was not being reinitialized on keyframes (#378)

(ryoon)

Fix kqueue support by using patch for 2.32.2 and correcting some problems
that we had in our own patches for the Makefile.am files.

Bump PKGREVISION to 1.

(jmmv)

misc/heirloom-time: mark ONLY FOR LINUX

According to the install file, this package is only for Linux

(marino)

sysutils/heirloom-shl: mark NOT FOR *BSD or DragonFly

According to the install file, this package is not for any BSD, not just
NetBSD (also not for AIX or HP-UX, but I didn't mark those).

(marino)

print/foomatic4-db-engine: Fix man page generation on DragonFly(+)

The perl man page generation script has an unnecessary file type check
that causes no man pages to be generated on DragonFly and possibly other
platforms.

After properly identifying the template file, it checks to see if it's type
nroff, troff, or groff.  On DragonFly it is type "ASCII".  Just skip the
check completely, the templates were extracted from the verified tarball.

(marino)

Pullup ticket #3797, #3798, #3799 and #3800.

(tron)

include <cstring> additionally for strcmp.

(obache)

Pullup ticket #3800 - requested by taca
net/bind96: security update

Revisions pulled up:
- net/bind96/Makefile                                          1.25
- net/bind96/distinfo                                          1.17
- net/bind96/patches/patch-lib_dns_resolver.c                  deleted

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Tue May 22 03:34:32 UTC 2012

  Modified Files:
  pkgsrc/net/bind96: Makefile distinfo
  Removed Files:
  pkgsrc/net/bind96/patches: patch-lib_dns_resolver.c

  Log Message:
  Update bind96 package to 9.6.3.1.ESV.7 (BIND 9.6-ESV-R7).

  New Features

  *  None

  Feature Changes

  *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

  Bug Fixes

  *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

  *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

  *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

  *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

  *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

  *  Resolves inconsistencies in locating DNSSEC keys where zone names
      contain characters that require special mappings [RT #28600]

  *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

  *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

  *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]

(tron)

pkgtools/packagekit: Rev bump after last commit

(marino)

pkgtools/packagekit: Fix permissions and directory creation

This package would fail when a non-privileged user would try to install it.
That's because it was trying to create /usr/pkg/var/log directory.  Another
directory was getting installed into DESTDIR but no further.

Added patch:
1) Removes attempt of Makefile to install ${VARBASE}/log
2) ..and directory ${VARBASE}/cache/PackageKit/downloads creation
3) ..which fixes non-root installations

The INSTALL file was removed, instead of installing directories in ${VARBASE},
it was installing directories at /.  The functionality was replaced with
OWN_DIRS+= in the Makefile and verified to work as expected.

(marino)

Fixes for Python>=32 PEP 3147.
Let to compile PYC files in post-install phase, instead of installing
.pyc files generaed as a side effect.

(obache)

Pullup ticket #3799 - requested by taca
net/bind97: security update

Revisions pulled up:
- net/bind97/Makefile                                          1.14
- net/bind97/distinfo                                          1.13
- net/bind97/patches/patch-lib_dns_resolver.c                  deleted

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Tue May 22 03:33:28 UTC 2012

  Modified Files:
  pkgsrc/net/bind97: Makefile distinfo
  Removed Files:
  pkgsrc/net/bind97/patches: patch-lib_dns_resolver.c

  Log Message:
  Update bind97 package to 9.7.6.

  New Features

  *  None

  Feature Changes

  *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

  Bug Fixes

  *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

  *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

  *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

  *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

  *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

  *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

  *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

  *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]

(tron)

Pullup ticket #3798 - requested by taca
net/bind98: security update

Revisions pulled up:
- net/bind98/Makefile                                          1.10-1.11
- net/bind98/distinfo                                          1.10-1.11
- net/bind98/files/named9.sh                                    1.2
- net/bind98/patches/patch-bin_tests_system_Makefile.in        1.1-1.2
- net/bind98/patches/patch-lib_dns_resolver.c                  deleted

---
  Module Name:    pkgsrc
  Committed By:  marino
  Date:          Sun May 20 13:22:40 UTC 2012

  Modified Files:
          pkgsrc/net/bind98: distinfo
  Added Files:
          pkgsrc/net/bind98/patches: patch-bin_tests_system_Makefile.in

  Log Message:
  net/bind98: Fix undefined reference to 'main'

  Bind98 needs the same fix bind99 received on 23 Mar 2012 to fix the
  linking of driver.so

---
  Module Name: pkgsrc
  Committed By: marino
  Date: Sun May 20 09:10:44 UTC 2012

  Modified Files:
  pkgsrc/net/bind98: Makefile
  pkgsrc/net/bind98/files: named9.sh

  Log Message:
  PR#45780 net/bind98: Fix chroot operation

  Implemented per PR.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Tue May 22 03:32:31 UTC 2012

  Modified Files:
  pkgsrc/net/bind98: Makefile distinfo
  pkgsrc/net/bind98/patches: patch-bin_tests_system_Makefile.in
  Removed Files:
  pkgsrc/net/bind98/patches: patch-lib_dns_resolver.c

  Log Message:
  Update bind98 to 9.8.3.

  pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in.

  Changes from release announce:

  Security Fixes

  *  Windows binary packages distributed by ISC are now built and linked
      against OpenSSL 1.0.0i

  New Features

  *  None

  Feature Changes

  *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

  Bug Fixes

  *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

  *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

  *  named-checkconf now correctly validates dns64 clients acl
      definitions. [RT #27631]

  *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

  *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

  *  Improves DNS64 reverse zone performance. [RT #28563]

  *  Adds wire format lookup method to sdb. [RT #28563]

  *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

  *  Resolves inconsistencies in locating DNSSEC keys where zone names
      contain characters that require special mappings [RT #28600]

  *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

  *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

  *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]

(tron)

Pullup ticket #3797 - requested by taca
net/bind99/: security update

Revisions pulled up:
- net/bind99/Makefile                                          1.3-1.4
- net/bind99/PLIST                                              1.2
- net/bind99/distinfo                                          1.4
- net/bind99/files/named9.sh                                    1.2
- net/bind99/patches/patch-bin_tests_system_Makefile.in        1.2
- net/bind99/patches/patch-lib_dns_resolver.c                  deleted

---
  Module Name: pkgsrc
  Committed By: marino
  Date: Sun May 20 12:00:15 UTC 2012

  Modified Files:
  pkgsrc/net/bind99: Makefile
  pkgsrc/net/bind99/files: named9.sh

  Log Message:
  PR#45780 net/bind99: Fix chroot operation

  DNSSEC related, bind99 needs same fix as bind98

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Tue May 22 03:31:07 UTC 2012

  Modified Files:
  pkgsrc/net/bind99: Makefile PLIST distinfo
  pkgsrc/net/bind99/patches: patch-bin_tests_system_Makefile.in
  Removed Files:
  pkgsrc/net/bind99/patches: patch-lib_dns_resolver.c

  Log Message:
  Update biind99 package to 9.9.1.

  pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in.

  Changes from release announce:

  Security Fixes

  *  Windows binary packages distributed by ISC are now built and linked
      against OpenSSL 1.0.0i

  New Features

  *  None

  Feature Changes

  *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

  *  A note will be added to the README in future releases to explain
      that the improved scalability provided by using multiple threads
      to listen for and process queries (change 3137, RT #22992) does
      not provide any performance benefit when running BIND on versions
      of the linux kernel that do not include the 'lockless UDP transmit
      path' changes that were incorporated in 2.6.39.  (Some linux
      distributors may have provided this functionality under their
      own version numbering systems).

  Bug Fixes

  *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

  *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

  *  named-checkconf now correctly validates dns64 clients acl
      definitions. [RT #27631]

  *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

  *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

  *  Improves DNS64 reverse zone performance. [RT #28563]

  *  Adds wire format lookup method to sdb. [RT #28563]

  *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

  *  Prevents intermittent named crashes following an rndc reload [RT
      #28606]

  *  Resolves inconsistencies in locating DNSSEC keys where zone names
      contain characters that require special mappings [RT #28600]

  *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

  *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

  *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]

  *  Prevents named crashes as a result of dereferencing a NULL pointer
      in zmgr_start_xfrin_ifquota if the zone was being removed while
      there were zone transfers still pending [RT #28419]

  *  Corrects a parser bug that could cause named to crash while
      reading a malformed zone file. [RT #28467]

  *  Ensures that when a client recurses its status fields are
      consistently set so that named doesn't fail on an INSIST in
      client.c:exit_check. [RT #28346]

  *  Fixed a problem preventing proper use of 64 bit time values in
      libbind. [RT # 26542]

  *  isccc/cc.c:table_fromwire could fail to free an allocated object
      on error, leading to a possible memory leak condition. [RT #28265]

  *  Fixed a build error on systems without ENOTSUP.  [RT #28200]

  *  The header file isc/hmacsha.h is now installed when building
      BIND. [RT #28169]

  *  AAAA responses will no longer be returned in the additional
      section when filter-aaaa-on-v4 is in use.  (Prior to this change,
      they would be returned for some query types). [RT #27292]

(tron)

shells/standalone-tcsh: Mark NOT-FOR-DRAGONFLY

This package will install tcsh in the /bin directory (not ${LOCALBASE}/bin).
DragonFly already has tcsh in the base system, so this package will replace
it with no ability to restore the system version.  This is not desired.

shells/tcsh still works should there be any need for a pkgsrc version installed
at ${LOCALBASE}/bin.

(marino)

Updated lang/py-cxfreeze to 4.2.3

(obache)

Update py-cxfreeze to 4.2.3.

While here,
* register egg-info.
* add patch to enable rpath, custom post-build should not be required anymore.

Changes from 4.2.2 to 4.2.3
1) Added support for Python 3.2.
2) Added hook for datetime module which implicitly imports the time module.
3) Fixed hook for tkinter in Python 3.x.
4) Always include the zlib module since the zipimport module requires it,
    even when compression is not taking place.
5) Added sample for a tkinter application.

(obache)

mk/check/check-files.mk: Skip locale.alias

On DragonFly, packages like devel/doc++ and net/wap-utils were failing the
file check during installation due to a present locale.alias file.  Treat
it the same as charset.alias.

(marino)

print/jcabc2ps: Remove trace of cat pages

Apparently references to man/cat* on the PLIST are now being filtered out
by PKG_DEVELOPER=yes.  Now there is an error that cat pages are present
without being on the PLIST when actually they are.

So remove the installation of the jcabc2ps cat page despite there being no
man page version.

(marino)

net/netatalk: Fix PLIST for DragonFly

(marino)

Fix build on NetBSD/amd64, if the kernel was built on a host with 386 in
its name.

(joerg)

Fix linkage of OSS module. Bump revision.

(joerg)

Fix rpath usage. Discussed with tnn@, tested on i386 by hans@ and on
amd64 by me.

(joerg)

Deal with the fact that Makefile.in is now regenerated by also patching
Makefile.am as appropiate. automake can't be run directly, since it
doesn't like configure itself.

(joerg)

Note update of bind pakcages:

net/bind99 9.9.1
net/bind98 9.8.3
net/bind97 9.7.6
net/bind96 9.6.3.1.ESV.7

(taca)

Update bind96 package to 9.6.3.1.ESV.7 (BIND 9.6-ESV-R7).

New Features

*  None

Feature Changes

*  BIND now recognizes the TLSA resource record type, created to
  support IETF DANE (DNS-based Authentication of Named Entities)
  [RT #28989]

Bug Fixes

*  The locking strategy around the handling of iterative queries
  has been tuned to reduce unnecessary contention in a multi-threaded
  environment.  (Note that this may not provide a measurable
  improvement over previous versions of BIND, but it corrects the
  performance impact of change 3309 / RT #27995) [RT #29239]

*  Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
  [RT #26732]

*  Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone [RT #29028]

*  Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe.  [RT #27995]

*  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
  an assertion when flushing cache data. [RT #28571]

*  Resolves inconsistencies in locating DNSSEC keys where zone names
  contain characters that require special mappings [RT #28600]

*  A new flag -R  has been added to queryperf for running tests
  using non-recursive queries.  It also now builds correctly on
  MacOS version 10.7 (darwin)  [RT #28565]

*  Named no longer crashes if gssapi is enabled in named.conf but
  was not compiled into the binary [RT #28338]

*  SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert. [RT #28534]

(taca)

Update bind97 package to 9.7.6.

New Features

*  None

Feature Changes

*  BIND now recognizes the TLSA resource record type, created to
  support IETF DANE (DNS-based Authentication of Named Entities)
  [RT #28989]

Bug Fixes

*  The locking strategy around the handling of iterative queries
  has been tuned to reduce unnecessary contention in a multi-threaded
  environment.  (Note that this may not provide a measurable
  improvement over previous versions of BIND, but it corrects the
  performance impact of change 3309 / RT #27995) [RT #29239]

*  Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
  [RT #26732]

*  Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone [RT #29028]

*  Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe.  [RT #27995]

*  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
  an assertion when flushing cache data. [RT #28571]

*  A new flag -R  has been added to queryperf for running tests
  using non-recursive queries.  It also now builds correctly on
  MacOS version 10.7 (darwin)  [RT #28565]

*  Named no longer crashes if gssapi is enabled in named.conf but
  was not compiled into the binary [RT #28338]

*  SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert. [RT #28534]

(taca)

Update bind98 to 9.8.3.

pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in.

Changes from release announce:

Security Fixes

*  Windows binary packages distributed by ISC are now built and linked
  against OpenSSL 1.0.0i

New Features

*  None

Feature Changes

*  BIND now recognizes the TLSA resource record type, created to
  support IETF DANE (DNS-based Authentication of Named Entities)
  [RT #28989]

Bug Fixes

*  The locking strategy around the handling of iterative queries
  has been tuned to reduce unnecessary contention in a multi-threaded
  environment.  (Note that this may not provide a measurable
  improvement over previous versions of BIND, but it corrects the
  performance impact of change 3309 / RT #27995) [RT #29239]

*  Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
  [RT #26732]

*  named-checkconf now correctly validates dns64 clients acl
  definitions. [RT #27631]

*  Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone [RT #29028]

*  Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe.  [RT #27995]

*  Improves DNS64 reverse zone performance. [RT #28563]

*  Adds wire format lookup method to sdb. [RT #28563]

*  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
  an assertion when flushing cache data. [RT #28571]

*  Resolves inconsistencies in locating DNSSEC keys where zone names
  contain characters that require special mappings [RT #28600]

*  A new flag -R  has been added to queryperf for running tests
  using non-recursive queries.  It also now builds correctly on
  MacOS version 10.7 (darwin)  [RT #28565]

*  Named no longer crashes if gssapi is enabled in named.conf but
  was not compiled into the binary [RT #28338]

*  SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert. [RT #28534]

(taca)

Update biind99 package to 9.9.1.

pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in.

Changes from release announce:

Security Fixes

*  Windows binary packages distributed by ISC are now built and linked
  against OpenSSL 1.0.0i

New Features

*  None

Feature Changes

*  BIND now recognizes the TLSA resource record type, created to
  support IETF DANE (DNS-based Authentication of Named Entities)
  [RT #28989]

*  A note will be added to the README in future releases to explain
  that the improved scalability provided by using multiple threads
  to listen for and process queries (change 3137, RT #22992) does
  not provide any performance benefit when running BIND on versions
  of the linux kernel that do not include the 'lockless UDP transmit
  path' changes that were incorporated in 2.6.39.  (Some linux
  distributors may have provided this functionality under their
  own version numbering systems).

Bug Fixes

*  The locking strategy around the handling of iterative queries
  has been tuned to reduce unnecessary contention in a multi-threaded
  environment.  (Note that this may not provide a measurable
  improvement over previous versions of BIND, but it corrects the
  performance impact of change 3309 / RT #27995) [RT #29239]

*  Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
  [RT #26732]

*  named-checkconf now correctly validates dns64 clients acl
  definitions. [RT #27631]

*  Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone [RT #29028]

*  Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe.  [RT #27995]

*  Improves DNS64 reverse zone performance. [RT #28563]

*  Adds wire format lookup method to sdb. [RT #28563]

*  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
  an assertion when flushing cache data. [RT #28571]

*  Prevents intermittent named crashes following an rndc reload [RT
  #28606]

*  Resolves inconsistencies in locating DNSSEC keys where zone names
  contain characters that require special mappings [RT #28600]

*  A new flag -R  has been added to queryperf for running tests
  using non-recursive queries.  It also now builds correctly on
  MacOS version 10.7 (darwin)  [RT #28565]

*  Named no longer crashes if gssapi is enabled in named.conf but
  was not compiled into the binary [RT #28338]

*  SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert. [RT #28534]

*  Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending [RT #28419]

*  Corrects a parser bug that could cause named to crash while
  reading a malformed zone file. [RT #28467]

*  Ensures that when a client recurses its status fields are
  consistently set so that named doesn't fail on an INSIST in
  client.c:exit_check. [RT #28346]

*  Fixed a problem preventing proper use of 64 bit time values in
  libbind. [RT # 26542]

*  isccc/cc.c:table_fromwire could fail to free an allocated object
  on error, leading to a possible memory leak condition. [RT #28265]

*  Fixed a build error on systems without ENOTSUP.  [RT #28200]

*  The header file isc/hmacsha.h is now installed when building
  BIND. [RT #28169]

*  AAAA responses will no longer be returned in the additional
  section when filter-aaaa-on-v4 is in use.  (Prior to this change,
  they would be returned for some query types). [RT #27292]

(taca)

Delint (include desktopdb.mk).

(shattered)

Comment out unused static data that refers to nonexistent functions.
Sometimes these elements are dropped by the compiler and sometimes
they fail the build. It is not at all clear why the behavior varies.

(dholland)

parallel/openmpi: Fix PLIST for DragonFly

(marino)

Pullup ticket #3796.

(tron)

Pullup ticket #3796 - requested by bouyer
mail/sympa: security update

Revisions pulled up:
- mail/sympa/MESSAGE                                            1.4
- mail/sympa/Makefile                                          1.47
- mail/sympa/PLIST                                              1.10
- mail/sympa/distinfo                                          1.13
- mail/sympa/files/bulk.sh                                      1.1
- mail/sympa/patches/patch-aa                                  1.6
- mail/sympa/patches/patch-ab                                  1.5
- mail/sympa/patches/patch-ac                                  1.3
- mail/sympa/patches/patch-af                                  1.3
- mail/sympa/patches/patch-ag                                  deleted
- mail/sympa/patches/patch-ah                                  deleted
- mail/sympa/patches/patch-ai                                  deleted
- mail/sympa/patches/patch-aj                                  deleted

---
  Module Name: pkgsrc
  Committed By: bouyer
  Date: Wed May 16 16:16:46 UTC 2012

  Modified Files:
  pkgsrc/mail/sympa: MESSAGE Makefile PLIST distinfo
  pkgsrc/mail/sympa/patches: patch-aa patch-ab patch-ac patch-af
  Added Files:
  pkgsrc/mail/sympa/files: bulk.sh
  Removed Files:
  pkgsrc/mail/sympa/patches: patch-ag patch-ah patch-ai patch-aj

  Log Message:
  Update sympa to latest stable release 6.1.11. Lots of changes since the 5.4
  series, users are encouraged to read /usr/pkg/share/doc/sympa/NEWS for
  details. Summary of new features:

  ***  New bulk.pl daemon installed with Sympa. This daemon is dedicated to
        mail distribution and allows to parallelize this process on a single
        server as well as on multiple servers.
  ***  [Olivier Lumineau, CRU] Fresh new web CSS for the web interface.
  ***  Replace storage of password with encryption by md5 fingerprint. This
        make remind password impossible. So now a one time ticket table is created
        ticket are  sent by email as an authentication token. Ticket can be used
        for lost password, create account, moderation request . It should be
        generalized to all operation that need a email chalenge.
  ***  New propertie in object message : spam_status .  This feature is used in
        modindex (listing of message waiting for moderation) to show message
        tagued as spam.
        4 new parameters :
  - antispam_feature default off
  - antispam_tag_header_name default X-Spam-Status
  - antispam_tag_header_spam_regexp default ^\s*Yes
  - antispam_tag_header_ham_regexp default ^\s*No
  ***  DKIM : Sympa now supports DKIM for message diffusion and control.
  ***  web_tt2/Makefile.am, web_tt2/ca.tt2, web_tt2/lca.tt2,
        wwsympa/wwsympa.fcgi.in:  It is now possible to create Custom actions
        at the list or robot level. These custom actions allow you to create
        new pages in the Sympa web interface. for now, you can only display
        informations using this method. any post treatment (such as form
        submission) must be handled outside of Sympa. See
        https://www.sympa.org/manual_6.1/customizing#custom_actions for more
        details.
  ***  [Submitted by J. jourdan] "suspension of membership." The user can suspend
        his subscription to the lists
        that he subscribes. For a finite length or not. Added a calendar in
        javascript to select a date.

  Also, lots of translastion updates, and bug fixes (including security ones)

(tron)

www/yaws: Fix PLIST for DragonFly

(marino)

Add native pax.

(jperkin)

Pullup tickets #3793, #3794 and #3795.

(tron)

Pullup ticket #3795 - requested by taca
textproc/libxml2: security patch

Revisions pulled up:
- textproc/libxml2/Makefile                                    1.116
- textproc/libxml2/distinfo                                    1.91-1.92
- textproc/libxml2/patches/patch-threads.c                      1.2
- textproc/libxml2/patches/patch-xpointer.c                    1.2

---
  Module Name: pkgsrc
  Committed By: mishka
  Date: Fri Apr 27 15:05:02 UTC 2012

  Modified Files:
  pkgsrc/textproc/libxml2: distinfo
  pkgsrc/textproc/libxml2/patches: patch-threads.c

  Log Message:
  FreeBSD 6 and earlier misses the pthread_equal() stub as well.
  While here, improve comments a little bit.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Mon May 21 12:22:54 UTC 2012

  Modified Files:
  pkgsrc/textproc/libxml2: Makefile distinfo
  pkgsrc/textproc/libxml2/patches: patch-xpointer.c

  Log Message:
  Add fix for http://secunia.com/advisories/49177/ from repository.

  Bump PKGREVISION.

(tron)

Pullup ticket #3794 - requested by bouyer
textproc/p5-Unicode-LineBreak: new package required for security update

Revisions pulled up:
- textproc/Makefile                                            1.622
- textproc/p5-Unicode-LineBreak/DESCR new file
- textproc/p5-Unicode-LineBreak/Makefile                        1.2-1.3
- textproc/p5-Unicode-LineBreak/distinfo new file

---
    Module Name: pkgsrc
    Committed By: bouyer
    Date: Wed May 16 15:58:12 UTC 2012

    Log Message:
    Initial import of textproc/p5-Unicode-LineBreak 2012.02

    Three main modules and some supporting program files are contained. For
    more details read following POD documentations:

        Text::LineFold - Line Folding for Plain Text
        Unicode::GCString - String as Sequence of UAX #29 Grapheme Clusters
        Unicode::LineBreak - UAX #14 Unicode Line Breaking Algorithm
---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Thu May 17 10:32:20 UTC 2012

  Modified Files:
  pkgsrc/textproc/p5-Unicode-LineBreak: Makefile

  Log Message:
  Add missing dependency. Not make-jobs safe.
  Bump PKGREVISION.

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Thu May 17 10:37:43 UTC 2012

  Modified Files:
  pkgsrc/textproc/p5-Unicode-LineBreak: Makefile

  Log Message:
  canonicalize MASTER_SITES and HOMEPAGE url.

---
  Module Name: pkgsrc
  Committed By: jnemeth
  Date: Thu May 17 05:11:39 UTC 2012

  Modified Files:
  pkgsrc/textproc: Makefile

  Log Message:
  add and enable p5-Unicode-LineBreak

(tron)

math/R-circular: Add gettext-lib buildlink3

Yes, it's needed.  During installation on DragonFly:
distance.c: error libintl.h: No such file or directory.

(marino)

games/xblast: Fix unicode translation error during installation

Likely a mistake, one of the "levels" source files used unicode in the
filename.  The manifest even indicated the name should have been
"reconstruction2.xal".

The post-extract hook is used to correct the filename to be as intended.
As a bonus, platforms like Linux and DragonFly can install the package
without a libarchive translation error disrupting the process.

(marino)

+ gbrainy-2.13, perl-5.16.0, socat-1.7.2.1, wesnoth-1.10.3.

(wiz)

Note update of mail/postfix to 2.8.11 package.

(taca)

Update postfix to 2.8.11.

Changes from release announce:

  * OpenSSL related (all supported Postfix versions).

      o Some people have reported program crashes when the OpenSSL
        library was updated while Postfix was accessing the Postfix
        TLS session cache. To avoid this, the Postfix TLS session
        cache ID now includes the OpenSSL library version number.
        This cache ID is not shared via the network.

      o The OpenSSL workaround introduced with the previous stable
        and legacy releases did not compile with older gcc compilers.
        These compilers can't handle #ifdef inside a macro invocation
        (NOT: definition).

  * postscreen(8) related (Postfix 2.9, Postfix 2.8).

      o To avoid repeated warnings from postscreen(8) with "connect
        to private/dnsblog service: Connection refused" on FreeBSD,
        the dnsblog(8) daemon now uses the single_server program
        driver instead of the multi_server driver. This one-line
        code change has no performance impact for other systems,
        and eliminates a high-frequency accept() race on a shared
        socket that appears to cause trouble on FreeBSD. The same
single_server program driver has proven itself for many
years in smtpd(8).  Problem reported by Sahil Tandon.

  * Laptop-friendly support (all supported Postfix versions). A
    little-known secret is that Postfix has always had support to
    avoid unnecessary disk spin-up for MTIME updates, by doing
    s/fifo/unix/ in master.cf (this is currently not supported on
    Solaris systems). However, two minor fixes are needed to make
    this bullet-proof.

      o In laptop-friendly mode, the "postqueue -f" and "sendmail
        -q" commands did not wait until their requests had reached
        the pickup and qmgr servers before closing their UNIX-domain
        request sockets.

      o In laptop-friendly mode, the unused postkick command waited
        for more than a minute because the event_drain() function
        was comparing bitmasks incorrectly on systems with kqueue(2),
        epoll(2) or /dev/poll support.

(taca)

Pullup ticket #3793 - requested by bouyer
security/p5-AuthCAS: new package required for security update

Revisions pulled up:
- security/Makefile                                            1.434
- security/p5-AuthCAS/DESCR new file
- security/p5-AuthCAS/Makefile                                  1.2-1.4
- security/p5-AuthCAS/distinfo new file

---
  Module Name: pkgsrc
  Committed By: bouyer
  Date: Wed May 16 15:55:24 UTC 2012

  Log Message:
  Inital import of security/p5-AuthCAS version 1.5

  AuthCAS aims at providing a Perl API to Yale's Central Authentication System
  (CAS). Only a basic Perl library is provided with CAS whereas AuthCAS is a
  full object-oriented library.
---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Thu May 17 10:21:12 UTC 2012

  Modified Files:
  pkgsrc/security/p5-AuthCAS: Makefile

  Log Message:
  pkglint cleanup: use standard packlist path.

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Thu May 17 10:35:14 UTC 2012

  Modified Files:
  pkgsrc/security/p5-AuthCAS: Makefile

  Log Message:
  Change HOMEPAGE to permalink.

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Thu May 17 10:52:49 UTC 2012

  Modified Files:
  pkgsrc/security/p5-AuthCAS: Makefile

  Log Message:
  Add missing dependency on p5-IO-Socket-SSL and p5-libwww (for LWP::UserAgent).

  Bump PKGREVISION.

---
  Module Name: pkgsrc
  Committed By: jnemeth
  Date: Thu May 17 05:05:37 UTC 2012

  Modified Files:
  pkgsrc/security: Makefile

  Log Message:
  add and enable p5-AuthCAS

(tron)

wm/enlightenment: Additional PLIST for DragonFly

(marino)

Note update of textproc/libxml2 package to 2.7.8nb10.

(taca)

Add fix for http://secunia.com/advisories/49177/ from repository.

Bump PKGREVISION.

(taca)

Not for NetBSD-5 release.

(obache)

textproc/aspell-portuguese: Update to version 20070510.0

Due to unicode in one of the PLIST files, the package failed during packaging
due to a libarchive translation error on DragonFly.  Apparently Linux suffers
from this as well.

The last update was 9 years ago.  Updating to current version fixes the
problem for DragonFly.  Linux restriction removed under the assumption that
it also works now.

(marino)

textproc/aspell-romanian: Update to version 3.3.2

Due to unicode in one of the PLIST files, the package failed during packaging
due to a libarchive translation error on DragonFly.  Apparently Linux suffers
from this as well.

The last update was 9 years ago.  Updating to current version fixes the
problem for DragonFly.  Linux restriction removed under the assumption that
it also works now.

(marino)

textproc/aspell-spanish: Update to version 1.11.2

Due to unicode in one of the PLIST files, the package failed during packaging
due to a libarchive translation error on DragonFly.  Apparently Linux suffers
from this as well.

The last update was 9 years ago.  Updating to current version fixes the
problem for DragonFly.  Linux restriction removed under the assumption that
it also works now.

(marino)

Pullup ticket #3792.

(tron)

Pullup ticket #3792 - requested by joerg
pkgtools/pbulk: bug fix update

Revisions pulled up:
- pkgtools/pbulk/Makefile                                      1.63
- pkgtools/pbulk/files/pbulk/scripts/compute-packages.awk      1.4

---
  Module Name: pkgsrc
  Committed By: joerg
  Date: Sun May 20 20:12:02 UTC 2012

  Modified Files:
  pkgsrc/pkgtools/pbulk: Makefile
  pkgsrc/pkgtools/pbulk/files/pbulk/scripts: compute-packages.awk

  Log Message:
  pbulk-0.49: Fix a bug in the computation of the restricted subset.

(tron)

textproc/FlightCrew: Fix bad patch application

The FlightCrew files all use DOS line endings.
The patches all use unix line endings.
All source files have to have the line endings converted before applying
a patch to them.  The last patch added 2012-01-16 to fix build with Boost
wasn't applied to a converted source file and thus the package failed in
the patch phase.

(marino)

mail/fml4: Add DragonFly support

(marino)

Updated sysutils/netbt-hcidump to 2.4

(plunky)

update to BlueZ hcidump 2.4

  This release adds support for A2MP, L2CAP create/move channel,
  SAP and additional AVRCP decoding.

(plunky)

Fails with syntax errors on python25, so mask it.

(dholland)

devel/ecore: Add support for DragonFly

(marino)