Whitespace only.

(shattered)

Pullup ticket #3638.

(tron)

Pullup ticket #3638 - requested by obache
devel/xulrunner: build fix

Revisions pulled up:
- devel/xulrunner/PLIST                                        1.37

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Sun Jan  8 10:32:08 UTC 2012

  Modified Files:
  pkgsrc/devel/xulrunner: PLIST

  Log Message:
  Add missing entries for DragonFly support.

(tron)

Updated fonts/umefont-ttf to 0.435

(ryoon)

Update to 0.435.

Changelog:
In Gothic (Sans-serif) family
* Fix glyphs in Unicode : 0020-668f, 9722-ffff (first check)
* Fix glyphs in SJIS : second check completed

In Minchi (Serif) family
* Fix glyphs in Unicode : 0020-668f, 9832-ffff (first check)
* Fix glyphs in SJIS : second check completed

(ryoon)

Remove chemtool

(ryoon)

Updated biology/chemtool to 1.6.13

(ryoon)

Update to 1.6.13.

Changelog:
Fixes and enhancements in chemtool 1.6.13

- New export option "ASY" for Asymptote files (http://asymptote.sourceforge.net)
- Added support for Unicode symbol characters inserted e.g. by cut-and-paste from LibreOffice
- Fixed build with newer linkers that do not resolve indirect requirements automatically
- Rewritten logic for choosing to include national language support during build
- Fixed crash on startup due to errors in menu icon setup
- Batch mode could crash due to incomplete initialisation of color arrays
- Undo/redo in "move fragment"-mode did not work as intended
- Default extension is now appended to the save filename as needed
- Fixed exporting to files or directories containing spaces in their names

(ryoon)

Remove fotoxx

(ryoon)

Updated graphics/fotoxx to 12.01.2

(ryoon)

Update to 12.01.2.

Changelog:
2012.01.04  v.12.01.2
+ Italian user guide was updated.
+ Swedish translation was updated.

2012.01.04  v.12.01.1
+ Bugfix: zoom causes infinite loop after new installation.

2012.01.01  v.12.01
+ New function Search Metadata: search and report image metadata
  (EXIF/IPTC/etc.), using a combined image and text display format.
+ Synchronize Files is 2x faster for an initial installation or after
  importing a large number of new photos (>1000/min. on a fast PC).
+ "my mouse" was removed from all edit and selection dialogs. The mouse
  belongs to the last widget clicked. The main window can be zoomed and
  scrolled during such dialogs by using CTRL + mouse click or drag.
+ Mouse wheel can do zoom-in and zoom-out.
+ Zooming an image re-centers it on the mouse position, and the mouse
  position follows the zoom center to the middle of the window.
+ Zoom ratio configurable: choose 1-4 zooms for each 2x increase in size.
+ DRGB (print color adjust) can save corrections to a file for re-use.
+ Some user settings in various menus were collected together in the
  new menu function Tools > User Settings.
+ Bugfix: Search Image was finding false matches for images with very
  large caption or comments.
+ Bugfix: cannot escape file open dialog if open previous or open recent
  is attempted when there are no previous files (initial installation).
+ Bugfix: interactive GUI translation function failed to initialize.

2011.12.03  v.11.12.2
+ Italian translation was updated.
+ Locale of lc_RC will prefer a .po file named "lc_RC", fallback to "lc".

2011.12.02  v.11.12.1
+ Bugfix: crash at startup - top image directory not correctly
  initialized from previous fotoxx installation.

2011.12.01  v.11.12
+ New function Auto-Trim: automatically trim unused edge areas left over
  from panorama, HDR, HDF, stack, warp and unbend functions.
+ New function: Find bright or dark "stuck" pixels (camera sensor defect)
  (1x1/2x2/3x3 blocks) and fix them by interpolating neighboring pixels.
  Pixel locations can be saved and applied later to other images.
+ Select Area was extended to both select and unselect by matching colors,
  and the pixel search range was made adjustable 1-20x mouse radius.
+ Batch Resize/Export function now supports output of JPEG, PNG, TIFF.
  This can be used to select and convert files to a different format.
+ Convert RAW Files now supports output of JPEG, PNG, TIFF-8, TIFF-16.
+ Warp Area algorithm was made a bit more intuitive and controllable.
+ GUI language translation procedure was simplified.
+ Bugfix: restored some lost translations of dialog buttons.
+ Bugfix: Trim dialog mouse ownership was sometimes misleading.
+ Bugfix: WarpArea did not reset itself if selected area was changed.
+ Bugfix: crash if parallel instances of fotoxx are simultaneously
  editing images and using undo/redo.

(ryoon)

Remove aria2

(ryoon)

Updated net/aria2 to 1.14.0

(ryoon)

Update to 1.14.0.

Changelog:
* Update translations.
* Improve IPv6 support.
* Many bugs are fixed.

(ryoon)

Updated meta-pkgs/boost to 1.48.0; multimedia/libogg to 1.3.0

(adam)

Changes 1.48.0:
New Libraries
* Container: Standard library containers and extensions
* Locale: Provide localization and Unicode handling tools for C++
  Beilis.
* Move: Portable move semantics for C++03 and C++11 compilers

Details: http://www.boost.org/users/history/version_1_48_0.html

(adam)

Changes 1.3.0:
* Add ogg_stream_flush_fill() call
  This produces longer packets on flush, similar to
  what ogg_stream_pageout_fill() does for single pages.
* Windows build fixes

Changes 1.2.2:
* Build fix (types correction) for Mac OS X
* Update win32 project files to Visual Studio 2008
* ogg_stream_pageout_fill documentation fix

(adam)

lang/gnat-aux: Upgrade to gcc 4.6.2, add Fortran, Objective-C

Obvious additions:
1) Upgrades sync from gcc 4.6.1-RELEASE to gcc 4.6.2-RELEASE
2) New capability of building Fortran
3) New capability of building Objective-C
4) Building of all 5 languages (Ada,C,C++,ObjC,Fortran) now default
5) Fortran testsuite added
6) ObjC testsuite added

Behind the scenes:
1) Previously GNAT-Aux was built from a custom-built tarball.  Now real
  real gcc source files are used instead, but heavily patched.
2) The standard patch mechanism is not used.  Composite diff files are
  generated by dragonlace.net and they are applied as needed, and
  are located in the "files" directory
3) This might be the only gcc that doesn't use the monolithic source tar
  ball.  Depending on the options selected, the makefile updates its
  distfile list and only downloads what it needs, including testsuite
  files and dejagnu support.
4) All platforms are now built with unlimited stacksize command due to
  new issues with <platform>-stdint.h functionality.
5) All platforms use unlimited stacksize for Ada testing. Before it was
  limited to NetBSD x86_64.  This may have introduced a failure on
  NetBSD i386 though.  There were no other impacts according to the
  Ada testsuite results.
6) The PLIST automatic generation was significantly simplified, resulting
  in some variable deletion.
7) libstdc++ can't break testing now (forced to evaluate to true)
8) Unnecessary depends and USE_TOOLS removed
9) The includes-fixed directory is now removed from all platforms, arches
  now rather than problematic ones.  It seems that it can only make no
  difference or cause problems, so no reason to keep it around.
A) Unnecessary do-config phase "touches" removed.
B) Several fixes added to diff patches to improve testsuite results on
  c, c++, and fortran for all platforms.

(marino)

Updated www/ruby-rack11 to 1.1.3

(obache)

Update ruby-rack11 to 1.1.3.

* December 28th, 2011: Twenty first public release: 1.1.3.
  * Security fix. http://www.ocert.org/advisories/ocert-2011-003.html
    Further information here: http://jruby.org/2011/12/27/jruby-1-6-5-1

(obache)

Updated www/ruby-rack12 to 1.2.5

(obache)

Update ruby-rack12 to 1.2.5.

* December 28th, 2011: Twenty second public release: 1.2.5
  * Security fix. http://www.ocert.org/advisories/ocert-2011-003.html
    Further information here: http://jruby.org/2011/12/27/jruby-1-6-5-1

(obache)

Add missing entries for DragonFly support.

(obache)

Updated www/squid31 to 3.1.18

(adam)

Fix building with Clang

(adam)

Changes 3.1.18:
* Bug 3085: Crash when parsing esi:include
* Bug 3442: assertion failed: external_acl.cc:908: ch->auth_user_request != NULL
* Polish: debug messages on swap.state rename failure
* Portability: SSL library dependency fixes
* Bug 3440: compile error in Adaptation

(adam)

Changes 2.1.12:
Feature improvements
* Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
* Added support for PCRE from Phil Mayers
* Configurable file permission in rlm_linelog
* Added "relaxed" option to rlm_attr_filter. This copies attributes if at least
  one match occurred.
* Added documentation on dynamic clients. See raddb/modules/dynamic_clients.
* Added support for elliptical curve cryptography. See ecdh_curve in
  raddb/eap.conf.
* Added support for 802.1X MIBs in checkrad
* Added support for %{rand:...}, which generates a uniformly distributed number
  between 0 and the number you specify.
* Created "man" pages for all installed commands, and documented options for all
  commands. Patch from John Dennis.
* Allow radsniff to decode encrypted VSAs and CoA packets.
* Always send Message-Authenticator in radtest.
* Updated Oracle schema and queries
* Added SecurID module. See src/modules/rlm_securid/README
Bug fixes
* Fix memory leak in rlm_detail
* Fix "failed to insert event"
* Allow virtual servers to be reloaded on HUP. It no longer complains about
  duplicate virtual servers.
* Fix %{string:...} expansion
* Fix "server closed socket" loop in radmin
* Set ownership of control socket when starting up
* Always allow root to connect to control socket, even if "uid" is set. They're
  root. They can already do anything.
* Save all attributes in Access-Accept when proxying inner-tunnel EAP-MSCHAPv2
* Fixes for DHCP relaying.
* Check certificate validity when using OCSP.
* Updated Oracle "configure" script
* Fixed typos in dictionary.alvarion
* WARNING on potential proxy loop.
* Be more aggressive about clearing old requests from the internal queue
* Don't open network sockets when using -C

(adam)

Changes 2.8.7:
This release includes the addition of file(…) and string(…) commands for
computing hash values and more cryptographic hash implementations, such as
SHA1, SHA224, SHA256, SHA384, SHA512. There are new LINK_PUBLIC and LINK_PRIVATE
options for  target_link_libraries command as well as a new DeployQt4 module.

With the 2.8.7 release, there are two sets of installers for the Mac. The
"Darwin" versions are for Mac OSX 10.4 and later, and are "ppc;i386" universal
binaries. The "Darwin64" versions are for 10.6 and later, and are "x86_64;i386"
universal binaries.

(adam)

Changes 2.0.17:
* Proxying now supports sending SSL client certificate to server with
  ssl_client_cert/key settings.
* doveadm dump: Added support for dumping dbox headers/metadata.
* Fixed memory leaks in login processes with SSL connections
* vpopmail support was broken in v2.0.16

(adam)

Updated databases/gdbm to 1.10

(adam)

Changes 1.10:
* Internationalization
  This version of GDBM is fully internationalized.  The following
  localizations are available: Finnish, German, Japanese, Polish and Ukrainian.
* Support for close-on-exec flag in gdbm_open (see GDBM_CLOEXEC in the docs).
* Improve testgdbm command system
  The testgdbm tool now supports multicharacter commands.
* Bugfixes

(adam)

Updated www/py-django-cms to 2.2; www/py-django-classy-tags to 0.3.4.1; Added www/py-django-mptt; www/py-django-sekizai

(adam)

Changes 2.2:
* django-mptt now a proper dependency
* Django 1.3 support
* View permissions
* django-sekizai instead of PluginMedia
* Toolbar must be enabled explicitly in templates
* Static files moved to /static/
* Dropped support for django-dbgettext

(adam)

Changes 0.3.4.1:
* Added :ref:advanced-block-definition.
* Added :doc:arguments` documentation.

(adam)

Removed junk line

(adam)

Sekizai means "blocks" in Japanese, and that's what this app provides. A fresh
look at blocks. With django-sekizai you can define placeholders where your
blocks get rendered and at different places in your templates append to those
blocks. This is especially useful for css and javascript. Your subtemplates can
now define css and javscript files to be included, and the css will be nicely
put at the top and the javascript to the bottom, just like you should. Also
sekizai will ignore any duplicate content in a single block.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(adam)

Utilities for implementing Modified Preorder Tree Traversal with your
Django Models and working with trees of Model instances.

MPTT is a technique for storing hierarchical data in a database. The aim is to
make retrieval operations very efficient.

The trade-off for this efficiency is that performing inserts and moving
items around the tree is more involved, as there's some extra work
required to keep the tree structure in a good state at all times.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(adam)

Updated multimedia/gecko-mediaplayer to 1.0.5

(obache)

Updage gecko-mediaplayer to 1.0.5.

Development
1.0.5
    Disable playing of partially cached apple.com files, mplayer seems to crash on these files
    Use the right schema file, can't believe this one has slipped by so long.
    Use better const check from Issue #161, patch from i.stakenvicius
1.0.5b2
    Simpifying const check until something better comes along Issue #162
    Fix Issue #161, improvements over last patch because NPAPI not properly bumped
    Fix support for older xulrunners, Issue #160, issue caused by patch from
    Issue #158
    Support nsapi-sdk, based on patch from Issue #159
    Fix up some const casting so that compilers do not complain Issue #158
    Updated Japanese translation
    Updated Italian translation
1.0.5b1
    When uri is a file:// uri, just play it directly
    Switch from AM_MAINTAINER_MODE to AM_MAINTAINER_MODE([enable]) in configure.in
    Fix Issue #150, return value for function that says it will
    Updated Dutch translation
    Conversion to using libgmtk as separate library
    Improvements to the apple.com/trailers fix, caching now works properly
    Fix regression at apple.com/trailers, side effect of fully caching the file for now

(obache)

Updated multimedia/gnome-mplayer to 1.0.5

(obache)

Update gnome-mplayer to 1.0.5.

Development
    Rework key handler to be more correct with respect to shift/ctrl/alt modifiers
    Only use dark theme if not embedded, otherwise use the default theme
    Prefer the dark theme when running on gnome 3.2, similar to totem
    Updated Polish translation to match the reworded source text
    Reword 50% larger as gettext is stupid about the % sign
    Translated the missing string into Polish
1.0.5b2
    Add 150% display of video
    Use icon named gnome-mplayer-panel for status icon if present in theme
    Remove configure option --with-gpm-new-method as this is default now
        if you have an old gnome-power-manager < 2.26 add the configure flag
        --with-gpm-old-method
    Try to detect the right screensaver api to use in Gnome 3.2 (Fedora 16)
    Updated German translation
    Fix warning when accelerator keys have not been set
    Updated Japanese translation
    Fix the speed multipliers and speed reset Issue 566 & 567
1.0.5b1
    Rephrased some strings in Polish translation
    Updated Portuguese translation
    Updated Polish translation
    Fix problem with visual seeking while using the tracker, requires gmtk svn r48
    Add in command line option --vo (this disables hardware codecs as a safety measure)
    Add in command line option --dvd_device
    Fix Issue #560, ATTRIBUTE_FORCE_CACHE not being processed
    Printout gmtk version in verbose mode
    Switch from AM_MAINTAINER_MODE to AM_MAINTAINER_MODE([enable]) in configure.in
    Make cursor reappear when not in fullscreen mode
    Hide mouse/panel in fullscreen mode when mouse is above the panel area.
    Only make the fullscreen controls reappear when the mouse is at the bottom of the screen
    Fix keyboard shortcut capture to only detect CTRL, ALT or SHIFT modifiers
    Set CDDB to TYPE CD
    Fix typo on keyscreen
    Add tooltop for "Enable Video Hardware"
    Remove fuzzy and obsolete translations from po files
    Make Normal and Double size hotkeys work
    Fix saving and loading of preferred VO
    Fix 'f' not going to/returning from fullscreen
    Remove the use of mplayer profiles, as they are no longer needed
    Fix Issue 544, minor spelling issue
    Allow customization of some of the keyboard hotkeys, more to be done
    Replace get_window, get_visible, and get_allocation with gmtk versions
    Build foundation for customized hotkeys
    Add checkboxes for hardware and crystalhd codec support
    Conversion to using libgmtk as separate library
    Fix Issue #538
    Autodetect gtk3 at configure time
    Raise event on incomplete QuickTime file, and mark it for retry
    Fix compile issue when alsa is not being used

(obache)

+gmtk

(obache)

Added devel/gmtk version 1.0.5

(obache)

Import gmtk-1.0.5 as devel/gmtk.

Library of common functions and widgets for gnome-mplayer and gecko-mediaplayer.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(obache)

Updated graphics/p5-GraphicsMagick to 1.3.13

(obache)

Reset PKGREVISION from base pkg update.

(obache)

Updated graphics/GraphicsMagick to 1.3.13

(obache)

Update GraphicsMagick to 1.3.13.

While here, remove unwanted buildlink and add lzma option.

1.3.13 (December 24, 2011)
==========================

Security Fixes:

  None

Bug fixes:

  * In I/O blob, don't rewind already open file handle passed to
    OpenBlob() since we don't know the intended state of this file
    handle, and because it prevents appending to an existing file.

  * In AppendImageProfile(), don't leak profile buffer while appending
    a chunk to an existing profile.

  * Fix deadlock in ClonePixelCache() which was caused by using the
    same semaphore pointer in the source and destination images.

  * Removed bogus SyncBlob() code which sometimes caused a crash and
    was not useful.

  * Fixed crash or hang which occured when the user entered CONTROL-C
    while threaded code was being executed.

  * Fix core dump in AcquireOneCacheViewPixelInlined() when the image
    is in CMYK space.

  * In MontageImages (montage), fix crash observed with "-geometry
    x+0+0".

  * The TIFF reader was crashing for images which use the
    TIFFTAG_OPIIMAGEID tag.

  * AppendImages() (-append) was failing when only one image was
    provided.

  * The `animate`, `display`, and `identify` commands now report any
    error only once, and then proceed to the next file name rather
    than quitting.

  * Don't change the locale settings in InitializeMagick() since this
    may cause problems for international users.  API users are still
    responsible for assuring that locale settings don't break floating
    point parsing and output (i.e. floating point decimal needs to be
    '.' rather than ',').

  * RPM build is fixed (PerlMagick build was broken).

  * RPM build installs documentation to expected places on Red Hat
    type systems.

  * Fixes for usage with OpenSolaris.

  * DESTDIR is supported by PerlMagick build.

  * The matte channel was not being properly enabled or respected for
    TXT images.

  * InitializeMagick() and DestroyMagick() are now fully thread safe.

  * When a shear angle was as zero, the shear request was being
    ignored entirely.

  * In DispatchImage(), the `K` channel was always output as black for
    "CMYK" specification unless the image matte flag was True.

  * MATLAB fixes.

  * PNG fixes.

  * PCL fixes for printing bi-level image on Konica-Minolta printers.

  * EPT error handling fixes.

  * JPEG reader was sometimes truncating large IPTC profiles.

  * JPEG writer now handles errors properly rather than allowing
    libjpeg to exit the program (or hanging if driven by Magick++).

  * JPEG reader now treats an unhandled EXP marker as a warning rather
    than a hard error.

  * File open errors are now reliably reported.

  * Improved rendering precision when using the drawing APIs.

  * For the Magick++ Image backgroundColor(), borderColor(), and
    matteColor() methods, preserve the opacity part of the
    user-specified color.

New Features:

  * Add support for drawing text using a bitmap font.

  * benchmark command supports a -stepthreads option to execute the
    specified command with an increasing number of threads to measure
    how an algorithm benefits from threading.  This mode includes a
    column to show the speedup compared with one thread, and the
    Karp-Flatt metric

  * Added Add support for invoking "gs-cmyk" and "gs-cmyka" entries in
    delegates.mgk when ColorSeparationType or ColorSeparationMatteType
    is requested.  These cause Ghostscript to always output CMYK PAM
    format (even if the input file was not in CMYK format).

  * EXIF profiles are preserved when writing JPEG files.

  * The -mosaic command now respects the composition option specified
    by -compose as well as the image background color specified by
    -background.

  * The TXT coder now supports multiple image frames.

  * For image normalization (-normalize), add support for
    histogram-threshold setting to specify the percentage of the
    histogram to discard when computing image normalization parameters
    (default is 0.1%).  For example `-set histogram-threshold 0.01
    -normalize`.

  * Added an `INFO` coder which produces textual image description
    output similar to `identify` but may be used with convert like "gm
    convert myfile info:-".

  * Support application of the PDF crop box via '-define
    pdf:use-cropbox=true'.

  * For PCL printer output, define pcl:fit-to-page in order for the
    printer to scale the image to fit the page.

  * Added order dither 5x5, 6x6, and 7x7 circular dither patterns to
    create a halftone effect.

  * PNM subformats are now reported as the specific subformat rather
    than just "PNM".

  * NetPBM's PAM format is now supported.

  * MacPaint image format reader is added.

  * Added TIFF LZMA compressor support.

  * Added TIFF support for a tiff:group-three-options define to allow
    power-users to set the value of the GROUP3OPTIONS tag.

  * New core C API function SetImageColorRegion() to set the constant
    pixel color for a specified region of the image.

  * New Wand C API function MagickWriteImagesFile() to append images
    to a provided file handle.

  * New Wand C API function MagickSetImageSavedType() to allow
    specifying the storage type used when saving the file (rather than
    changing the current image characteristics).

  * In Wand C API, the functions NewPixelWand(), NewDrawingWand(), and
    NewMagickWand() invoke InitializeMagick() automatically in case
    user forgets to do so.

  * New Wand C API function MagickSetFormat() to allow setting the
    file or blob format before it has been read.

  * New Wand C API function MagickSetDepth() to set the depth used
    when reading from an image format which requires that the depth be
    specified in advance.

Feature improvements:

  * Now compiles properly with libpng 1.4.X and 1.5.X.

  * Lcms 2.X is supported.

Performance Improvements:

  * TGA read performance improved.

  * PNM read/write performance improved.

  * Convolution (-convolve, -sharpen, -guassian, etc.) is faster.

  * Adaptive threshold image (-lat) is faster.

  * Image trimming (-trim) is faster.

Behavior Changes:

  * For DPX format and packed 10 bits, datums are now represented in
    the same (reversed) order for all RGB and YCbCr formats.
    Previously YCbCr 4:4:4 formats were not swapping the word datums
    because the only real-world files encountered did not swap the
    word datums.

  * The -colors, -map, and -monochrome options now take effect
    immediately rather than at the end of all other processing.

  * Removed non-standard multi-frame extension for SGI format.

  * Windows install footprint is more consistent between DLL and
    static builds.

  * LZMA compressed tarball is in 'xz' format rather than deprecated
    'lzma' format.

(obache)

Updated www/py-uwsgi to 0.9.8.6nb1

(sbd)

Add missing devel/libuuid buildlink.

Bump PKGREVISION

(sbd)

Updated net/ettercap-NG to 0.7.3nb6

(sbd)

Add missing devel/zlib buildlink.

Bump PKGREVISION

(sbd)

Note updates:
    security/pinentry-gtk  to 0.8.1nb2
    security/pinentry-gtk2 to 0.8.1nb4
    security/pinentry-qt  to 0.8.1nb4
    security/pinentry-qt4  to 0.8.1nb4
    sysutils/psmisc        to 20.1nb2
    sysutils/shmux        to 1.0nb1
    time/gcal              to 3.6.1nb1
    www/varnish            to 3.0.2nb2

(sbd)

Add missing mk/curses buildlink.

Bump PKGREVISION

(sbd)

Add missing mk/termcap buildlink.

Bump PKGREVISION

(sbd)

Add missing mk/termcap buildlink.

Bump PKGREVISION

(sbd)

Add missing mk/termcap buildlink.

Bump PKGREVISION

(sbd)

Add missing devel/ncurses buildlink.

Bump PKGREVISION

(sbd)

Add missing devel/ncurses buildlink.

Bump PKGREVISION

(sbd)

Add missing devel/ncurses buildlink.

Bump PKGREVISION

(sbd)

Add missing devel/ncurses buildlink.

Bump PKGREVISION

(sbd)

<stdint.h> needs to be include for intmax_t.

(sbd)

Updated www/ruby-rack to 1.3.6

(obache)

Update ruby-rack to 1.3.6.

* December 28th, 2011: Twenty third public release: 1.3.6
  * Security fix. http://www.ocert.org/advisories/ocert-2011-003.html
    Further information here: http://jruby.org/2011/12/27/jruby-1-6-5-1

(obache)

Updated www/ruby-sinatra to 1.3.2

(obache)

Update ruby-sinatra to 1.3.2.

= 1.3.2 / 2011-12-30

* Don't automatically add `Rack::CommonLogger` if `Rack::Server` is adding it,
  too. (Konstantin Haase)

* Setting `logging` to `nil` will avoid setting up `Rack::NullLogger`.
  (Konstantin Haase)

* Route specific params are now available in the block passed to #stream.
  (Konstantin Haase)

* Fix bug where rendering a second template in the same request, after the
  first one raised an exception, skipped the default layout. (Nathan Baum)

* Fix bug where parameter escaping got enabled when disabling a different
  protection. (Konstantin Haase)

* Fix regression: Filters without a pattern may now again manipulate the params
  hash. (Konstantin Haase)

* Added examples directory. (Konstantin Haase)

* Improved documentation. (Gabriel Andretta, Markus Prinz, Erick Zetta, Just
  Lest, Adam Vaughan, Aleksander D��browski)

* Improved MagLev support. (Tim Felgentreff)

(obache)

Updated www/ruby-rack-protection to 1.2.0

(obache)

Update ruby-rack-protection to 1.2.0.

Changes:
* Show warnings for JsonCsrtf attacks.
* do not enable parameter escaping by default, fixes #8.
* Use more specific namespace declaration in Rack::Builder configuration.
* NotimpelentedError typo fix
* add test that makes sure passingin on :track option works. related to #6.
* deal with PATH_INFO being nil, fixes #7.
* do not track HTTP_VERSION, fixes #6.

(obache)

Updated devel/mr to 1.10

(schmonz)

Update to 1.10. From the changelog:

1.10:
* Fix display of trust errors.

1.09:
* Remove dir_test hack and add a way for vcs tests to run perl code,
  using this for the same optimisation. Fixes support for git-svn
  etc. Closes: #652317

1.08:
* Fix vcs test code. Closes: #651976

1.07
* Added support for vcsh, enable with: include = cat /usr/share/mr/vcsh
  Thanks, Richard Hartmann
* Block tty control codes in untrusted mr config files.
* Correct printing of line numbers when includes are used. Closes: #650952
* The previous fix for chaining to absolute paths broke chaining
  to relative paths with more than one path segment. Thanks, Adam
  Spiers
* Support _append to add on to the existing value of a parameter.
  Thanks, Adam Spiers
* Optimizations. Commands like "mr list" run up to 5 times faster.
* Fix shell escaping of parameters passed to mr commands. Closes: #644672
* Added --force option that disables repository skipping.
* Repositories using skip = lazy will not be checked out by "mr
  update" or "mr checkout" unless --force is used.

(schmonz)

Added textproc/p5-Text-Markdown-Discount version 0.02

(schmonz)

Add and enable p5-Text-Markdown-Discount.

(schmonz)

Initial import of Text::Markdown::Discount, a Perl extension interface
for "Discount", an implementation of John Gruber's "markdown" in C
developed by David Loren Parsons.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(schmonz)

Note the start of the pkgsrc-2011Q4 branch

(agc)

xdm3d

(dholland)

This file has a backslash-escaped trailing space after the login
prompt string, which I assume is there on purpose. Unfortunately, it
seems that when run through modern gcc's cpp, as at least Dragonfly's
current X resources processing pipeline apparently does, cpp treats
this as backslash-newline and splices on the next line, which causes
everything to go wahooni-shaped.

As a hack/workaround, insert a blank line after this line, so if the
next line does get spliced on it won't break things.

Reported by Artem Falcon.

(dholland)

Updated mail/msmtp to 1.4.27

(obache)

Update msmtp to 1.4.27.
contains fixes for PR#45785.

Version 1.4.27:
- Always use the internal MD5 functions for the built-in CRAM-MD5
  implementation; never use the ones from OpenSSL. This fixes problems with
  configurations that use OpenSSL and do not use GNU SASL. Thanks to Gleydson
  Soares and Moritz Wilhelmy for providing information and for testing the fix.
- Fix a compiler warning with current OpenSSL versions.

(obache)

Updated mail/thunderbird to 8.0nb1

(sbd)

Enabling the jemalloc option adds two more files to the PLIST.
Also add PLIST.Linux

Bump PKGREVISION

(sbd)

Update ejabberd to 2.1.10.

Bug fixes:

* Erlang/OTP compatibility
- Support Erlang/OTP R15B regexp and drivers (EJAB-1521)
- Fix modules update in R14B04 and higher
- Fix modules update of stripped beams (EJAB-1520)

* XMPP Core
- Fix presence problem in C2S after first unavailable (EJAB-1466)
- Fix bug on S2S shaper when TLS is used
- Prevent overload of incoming S2S connections

* XEPs
- BOSH: Get rid of useless mnesia transaction (EJAB-1502)
- MUC: Don't reveal invitee resource when room informs invitor
- Privacy: Activate "Blocked Contacts" to current c2s connection (EJAB-1519)
- Privacy: Always allow packets from user's server and bare jid (EJAB-1441)
- Pubsub: Add hooks for node creation/deletion (EJAB-1470)
- Shared Rosters: support groupname@vhost in Displayed Groups (EJAB-506)
- Vcard: Fix error when lowercasing some search results (EJAB-1490)

(fhajny)

www/seamonkey: PR#45629 (webm assy optimization for DragonFly)

These patches enable optimizations that allow video play w/o stuttering.
Other i386 and x86_64 platforms need the same optimizations, so this is
only a partial fix of the PR.

(marino)

devel/nspr, devel/xulrunner: PR#45638 (DragonFly support)

DragonFly has diverged from FreeBSD to the point where NSPR will
not build LibreOffice on DragonFly due to being configured as DragonFly.
These patches split out DragonFly as its own platform, and should not
affect other platforms.

(marino)

Updated emulators/suse113_freetype2 to 11.3nb4

(chs)

update libfreetype6 to 2.3.12-7.8.1.
fixes CVE-2011-3256.

(chs)

Updated emulators/suse113_base to 11.3nb8

(chs)

update glibc to 2.11.2-3.7.1.
fixes CVE-2009-5029.

update mozilla-nss to 3.13.1-0.2.1.
fixes CVE-2011-3389, CVE-2011-3640.

(chs)

Fixes PLIST for Linux and HP-UX.

(obache)

Exactly pass bdb library name to configure so that unwanted system bdb libraries
will not be picked up.

(obache)

Fix PR pkg/45795.
Fix build error on some systems.

Upstream patch:
http://git.chromium.org/gitweb/?p=webm/libvpx.git;a=commitdiff;h=17c754fc00881a78e71488e7c544d05cf2f6927f

(ryoon)

Use MACHINE_ARCH instead of LOWER_ARCH to detect Java Machine Arch.
Fixes PR#45788.

And apply rewrite x86_64 => amd64 rule not only to NetBSD.

(obache)

+ openssl-1.0.0f, xf86-video-wsfb-0.4.0.
- spamdyke-4.2.1.

(taca)

Note update of www/contao210-translations package to 20120103.

(taca)

Update contao210-translations package to 20120103.

Update Finnish language files.

(taca)

+ freepops-0.2.9 [pkg/45790]

(obache)

Updated devel/ruby-gnome2-glib to 1.0.3nb1

(obache)

Apply patches to fix SEGV by GC on Ruby 1.9 for Ruby/GLib2.

Bump PKGREVISION.

(obache)

Updated archivers/gtar-info to 1.26nb1

(obache)

Let to install all info file fragments.

Bump PKGREVISION.

(obache)

Add yasm>=1.1.0 as a build dependence on platforms the need it.

(sbd)

Only add the yasm build dependence on platforms the need it.

(sbd)

Note update of security/openssl package to 0.9.8s.

(taca)

Update openssl pacakge to 0.9.8s.

OpenSSL CHANGES
_______________

Changes between 0.9.8r and 0.9.8s [4 Jan 2012]

  *) Nadhem Alfardan and Kenny Paterson have discovered an extension
    of the Vaudenay padding oracle attack on CBC mode encryption
    which enables an efficient plaintext recovery attack against
    the OpenSSL implementation of DTLS. Their attack exploits timing
    differences arising during decryption processing. A research
    paper describing this attack can be found at:
                  http://www.isg.rhul.ac.uk/~kp/dtls.pdf
    Thanks go to Nadhem Alfardan and Kenny Paterson of the Information
    Security Group at Royal Holloway, University of London
    (www.isg.rhul.ac.uk) for discovering this flaw and to Robin Seggelmann
    <seggelmann@fh-muenster.de> and Michael Tuexen <tuexen@fh-muenster.de>
    for preparing the fix. (CVE-2011-4108)
    [Robin Seggelmann, Michael Tuexen]

  *) Stop policy check failure freeing same buffer twice. (CVE-2011-4109)
    [Ben Laurie, Kasper <ekasper@google.com>]

  *) Clear bytes used for block padding of SSL 3.0 records.
    (CVE-2011-4576)
    [Adam Langley (Google)]

  *) Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)
    [Adam Langley (Google)]

  *) Prevent malformed RFC3779 data triggering an assertion failure.
    Thanks to Andrew Chi, BBN Technologies, for discovering the flaw
    and Rob Austein <sra@hactrn.net> for fixing it. (CVE-2011-4577)
    [Rob Austein <sra@hactrn.net>]

  *) Fix ssl_ciph.c set-up race.
    [Adam Langley (Google)]

  *) Fix spurious failures in ecdsatest.c.
    [Emilia K糂per (Google)]

  *) Fix the BIO_f_buffer() implementation (which was mixing different
    interpretations of the '..._len' fields).
    [Adam Langley (Google)]

  *) Fix handling of BN_BLINDING: now BN_BLINDING_invert_ex (rather than
    BN_BLINDING_invert_ex) calls BN_BLINDING_update, ensuring that concurrent
    threads won't reuse the same blinding coefficients.

    This also avoids the need to obtain the CRYPTO_LOCK_RSA_BLINDING
    lock to call BN_BLINDING_invert_ex, and avoids one use of
    BN_BLINDING_update for each BN_BLINDING structure (previously,
    the last update always remained unused).
    [Emilia K糂per (Google)]

  *) Fix SSL memory handling for (EC)DH ciphersuites, in particular
    for multi-threaded use of ECDH.
    [Adam Langley (Google)]

  *) Fix x509_name_ex_d2i memory leak on bad inputs.
    [Bodo Moeller]

  *) Add protection against ECDSA timing attacks as mentioned in the paper
    by Billy Bob Brumley and Nicola Tuveri, see:

http://eprint.iacr.org/2011/232.pdf

    [Billy Bob Brumley and Nicola Tuveri]

Changes between 0.9.8q and 0.9.8r [8 Feb 2011]

  *) Fix parsing of OCSP stapling ClientHello extension. CVE-2011-0014
    [Neel Mehta, Adam Langley, Bodo Moeller (Google)]

  *) Fix bug in string printing code: if *any* escaping is enabled we must
    escape the escape character (backslash) or the resulting string is
    ambiguous.
    [Steve Henson]

Changes between 0.9.8p and 0.9.8q [2 Dec 2010]

  *) Disable code workaround for ancient and obsolete Netscape browsers
    and servers: an attacker can use it in a ciphersuite downgrade attack.
    Thanks to Martin Rex for discovering this bug. CVE-2010-4180
    [Steve Henson]

  *) Fixed J-PAKE implementation error, originally discovered by
    Sebastien Martini, further info and confirmation from Stefan
    Arentz and Feng Hao. Note that this fix is a security fix. CVE-2010-4252
    [Ben Laurie]

(taca)