Changes 2.05:
* Converted the configure system to non-recursive Automake.
* Applied some overdue speed optimizations for modern x86/x64 architectures
  and current compilers like gcc 4.6 and MSVC 2010.

(adam)

Fix the interpreter to mtn-cleanup by introducing a run-time dependency on
perl.  I'm not sure there is a better way to fix this since mtn-cleanup is
installed into ${PREFIX}/bin/.

Also skip the interpreter check for some helper files that are not used by
default.  These may be put in separate packages but we can do this later;
for now I'm just adding a comment mentioning the idea.

Bump PKGREVISION to 2.

(jmmv)

Fix the interpreter of event_rpcgen.py to point to a known Python binary.
This requires a dependency on Python.  Bump PKGREVISION to 1.

This is probably not the best solution: I guess it'd be nice to have a
libevent package that only included the binary libraries and no dependency
on Python, and another libevent-dev package with the event_rpcgen.py binary
and the Python dependency.  But this can be done later; I want to just fix
the breakage first.

(jmmv)

Make sure <langinfo.h> actually provides CODESET before using it,
for the sake of old NetBSD releases.

(hauke)

Note update of "python25" package to version 2.5.5nb5.

(tron)

Correct path to Python interpreter in all ".py" files to fix build
with revision 1.26 of "pkgsrc/mk/check/check-interpreter.mk".

Bump package revision because the binary package changed.

(tron)

Note update of the "teTeX3-bin" package to version 3.0nb48.

(tron)

Correct Perl interpreter path in "bin/texdoctk" to to fix build
with revision 1.26 of "pkgsrc/mk/check/check-interpreter.mk".

Bump package revision because the binary package changed.

(tron)

Updated sysutils/fabric to 1.0.1

(gls)

Update sysutils/fabric to 1.0.1

Upstream changes:

Bugfixes

    * #301: Fixed a bug in local?s behavior when capture=False and output.stdout
(or .stderr) was also False. Thanks to Chris Rose for the catch.
    * #310: Update edge case in put where using the mode kwarg alongside
use_sudo=True runs a hidden sudo command. The mode kwarg needs to be octal but
was being interpolated in the sudo call as a string/integer. Thanks to Adam
Ernst for the catch and suggested fix.
    * #311: append was supposed to have its partial kwarg's default flipped from
True to False. However, only the documentation was altered. This has been fixed.
Thanks to Adam Ernst for bringing it to our attention.
    * #312: Tweak internal I/O related loops to prevent high CPU usage and poor
screen-printing behavior on some systems. Thanks to Kirill Pinchuk for the
initial patch.
    * #320: Some users reported problems with dropped input, particularly while
entering sudo passwords. This was fixed via the same change as for #312.

Documentation

    * Added a missing entry for env.path in the usage documentation.

(gls)

Fix build with the latest version of Heimdal under NetBSD/current.

(tron)

Note update of the "python26" package to version 2.6.6nb9.

(tron)

Note update of the "python27" package to version 2.7.1nb3.

(tron)

Correct path to Python interpreter in all ".py" files to fix build
with revision 1.26 of "pkgsrc/mk/check/check-interpreter.mk".

Bump package revision because the binary package changed.

(tron)

Correct path to Python interpreter in all ".py" files to fix build
with revision 1.26 of "pkgsrc/mk/check/check-interpreter.mk".

Bump package revision because the binary package changed.

(tron)

Updated lang/python24 to 2.4.6

(obache)

Update python24 to 2.4.6.

What's New in Python 2.4.6?
===========================

*Release date: 19-Dec-2008*

What's New in Python 2.4.6c1?
=============================

*Release date: 13-Dec-2008*

Core and builtins
-----------------

- Issue #4469: Prevent expandtabs() on string and unicode
  objects from causing a segfault when a large width is passed
  on 32-bit platforms. CVE-2008-5031.

- Issue #4317: Fixed a crash in the imageop.rgb2rgb8() function.

- Issue #4230: Fix a crash when a class has a custom __getattr__ and an
  __getattribute__ method that deletes the __getattr__ attribute.

- Apply security patches from Apple. CVE-2008-2315.

- Issue #2620: Overflow checking when allocating or reallocating memory
  was not always being done properly in some python types and extension
  modules.  PyMem_MALLOC, PyMem_REALLOC, PyMem_NEW and PyMem_RESIZE have
  all been updated to perform better checks and places in the code that
  would previously leak memory on the error path when such an allocation
  failed have been fixed.

- Issue #1179: Fix CVE-2007-4965 and CVE-2008-1679, multiple integer
  overflows in the imageop and rgbimgmodule modules.

- Issue #2586: Fix CVE-2008-1721, zlib crash from
  zlib.decompressobj().flush(val) when val is not positive.

- Issues #2588, #2589: Fix potential integer underflow and overflow
  conditions in the PyOS_vsnprintf C API function. CVE-2008-3144.

- Issue #2587: In the C API, PyString_FromStringAndSize() takes a signed size
  parameter but was not verifying that it was greater than zero.  Values
  less than zero will now raise a SystemError and return NULL to indicate a
  bug in the calling C code. CVE-2008-1887.

- Security Issue #2: imageop did not validate arguments correctly and could
  segfault as a result. CVE-2008-4864.

Extension Modules
-----------------

Library
-------

Tests
-----

Build
-----

Tools/Demos
-----------

- Tools/faqwiz/move-faqwiz.sh: Fix unsecure use of temporary files.

(obache)

more replace interpreter.

(obache)

remove tail enmty line.

(obache)

move extra buildlinks into the guard.

(obache)

skip interpreter check for munin plugins.
(it should be into split package).

(obache)

more replace interpreter line.

(obache)

Mark BROKEN, doesn't fetch.

(joerg)

reset PKGREVISION from base pkg update.

(obache)

The startup file needed some updating, and the XYMONHOME path also wanted
fixing.

(spz)

Updated sysutils/capistrano to 2.5.21

(gls)

Update sysutils/capistrano to 2.5.21

Upstream changes:

## 2.5.21 / April 6 2011

* Fixed to follow best-practice guidelines from Bundler (Ben Langfeld)
* No longer force a gemset for Capistrano development. (Ben Langfeld)

## 2.5.20 / March 16 2011

  * `deploy:migrations` will now always operate on the latest_release, not
current_release (Mike Vincent)
  * Adds a check for the presence of `rsync` when using the copy strategy with
`rsync`. (Chris Griego)
  * Do not try to look up the `:release_path` on servers which are defined
`:no_release` (Chris Griego)
  * Tiny patch to the `CVS` SCM code to be Ruby 1.9 compatible (Martin Carpenter)
  * Changed the default `Git` submodule behaviour to use `--recursive`
Lighthouse Issue #176. (Lee Hambley)
  * `:public_children` can now be `set()`, the default is unchanged, thanks
(Chris Griego)
  * Fixing the load path in the default `Capfile` to search vendored/unpacked
Gems. Lighthouse Issue #174 (Mari Carmen/Rafael Garc�a)
  * Adds a `maintenance_basename` variable (default value is `maintenance`) to
allow you to set the maintenance page name (Celestino Gomes)
  * Spelling fixes in inline-documentation (Tom Copeland)
  * Make `zip` and `tar` handle symlinks the same way (zip follows symlinks by
default, tar needs the option `-h`) (Ross Cooperman)

(gls)

files/xymon.sh needed some more updating to the new version

(spz)

package update to 4.3.2:
contains a lot of filename cleanup work (no more bb and hobbit)

(spz)

package update to 4.3.2:

+ fixes cross-site scripting vulnerabilities (SA44036)
+ contains a lot of filename cleanup work (no more bb and hobbit)

please read upgrade-to-430.txt when upgrading from a previous pkg
(see also the install message)

(spz)

recursive bump from gettext-lib shlib bump.

(obache)

Updated databases/postgresql83 to 8.3.15

(adam)

Changes 8.3.15:
* fix build issues on HP-UX and Itanium
* update time zone files for recent time zone changes
* change SQLSTATE for Hot Standby warnings
* prevent bgwriter hang during recovery
* prevent recursive composite type creation
* disallow dropping tables whose triggers are still pending
* allow use of "replication" as a user name
* prevent a crash during GEQO planning
* improve join plans for tables with missing statistics
* fix error with SELECT FOR UPDATE in a subselect
* close PL/python array slice memory leak
* allow SSL connections for users with no home directory

(adam)

recursive bump from gettext-lib shlib bump.

(obache)

Updated databases/postgresql84 to 8.4.8

(adam)

Changes 8.4.8:
* fix build issues on HP-UX and Itanium
* update time zone files for recent time zone changes
* change SQLSTATE for Hot Standby warnings
* prevent bgwriter hang during recovery
* prevent recursive composite type creation
* disallow dropping tables whose triggers are still pending
* allow use of "replication" as a user name
* prevent a crash during GEQO planning
* improve join plans for tables with missing statistics
* fix error with SELECT FOR UPDATE in a subselect
* close PL/python array slice memory leak
* allow SSL connections for users with no home directory

(adam)

Stop maintaining amarok.

(wiz)

fix up paths on ftp.NetBSD.org:
- reading through the null mounts is deprecated
- writing through the null mounts is not allowed (not possible)

(spz)

Added postgresql-license

(adam)

Updated databases/postgresql90 to 9.0.4

(adam)

Changes 9.0.4:
* fix build issues on HP-UX and Itanium
* update time zone files for recent time zone changes
* change SQLSTATE for Hot Standby warnings
* prevent bgwriter hang during recovery
* prevent recursive composite type creation
* disallow dropping tables whose triggers are still pending
* allow use of "replication" as a user name
* prevent a crash during GEQO planning
* improve join plans for tables with missing statistics
* fix error with SELECT FOR UPDATE in a subselect
* close PL/python array slice memory leak
* allow SSL connections for users with no home directory
* allow building PostgreSQL 9.0 with 64-bit MinGW

(adam)

Added postgresql-license

(adam)

Added postgresql-license

(adam)

Fix building with Clang; added LICENSE; pkglint clean-up

(adam)

The pkg name is libaudiofile, so use that in buildlink3.mk.

(hans)

Fix build on SunOS.

(hans)

regen

(wiz)

Simplify patch per upstream request.

(wiz)

Fix library soname on SunOS.

(hans)

Fix library sonames on SunOS.

(hans)

+ ImageMagick-6.6.9.6, audacity-1.3.13, calibre-0.7.56, cone-0.87,
  dbus-1.4.8, etm-706, gnome-games-3.0.1, horde-4.0.1, imp-5.0.1,
  ingo-2.0.1, kronolith-3.0.1, less-443, libgdata-0.8.1,
  mathomatic-15.5.3, modular-xorg-server-1.10.1, mono-addins-0.6.1,
  orc-0.4.12, p5-PerlMagick-6.6.9.6, py-OpenSSL-0.12, rails-3.0.7,
  rdesktop-1.7.0, texmaker-3.0.1, turba-3.0.1, unison-2.40.63,
  wireshark-1.4.6, x264-devel-20110416.

(wiz)

Make this work on SunOS.

audio/cdparanoia is not available for SunOS, but devel/libcdio has a
working alternative. Also, don't depend on gsed directly, add it to
USE_TOOLS.

(hans)

update to 3.5
changes:
-Python interceptors can receive peer address and identity
-Python exceptions can be pickled

(drochner)

update to 4.1.5
change: Incoming SSL connections can time out waiting for SSL_accept to
complete

pkgsrc change: remove the patch which did daemonize omniNames in
the code -- this was bad because it sent all diagnostic output
to /dev/null. send it to background in the rc.d script instead, and
set a reasonable logfile location

(drochner)

Fix build on SunOS.

(hans)

Enable OSS4 plugin on SunOS.

(hans)

Fix build on SunOS.

Configure does not enable the sun output plugin, which requires BSD
extensions and wouldn't work anyway. But we can use the oss plugin,
recent SunOS versions support OSS.

(hans)

Fix broken variable expansion.

(hans)

Fix PLIST for oss.

(hans)

Fix library names on SunOS.

(hans)

Fix library names on SunOS.

(hans)

Fix library names on SunOS.

(hans)

note some more "used by ..." comments.

(obache)

note more "used by ..." comments.

(obache)

add/remove "used by ..." comments.

(obache)

Fix build on SunOS. From iMil.

(hans)

Recent versions of SunOS have a native libusb. Add a builtin.mk to allow
packages depending on devel/libusb to be built on SunOS.

(hans)

remove "used by net/gnome-vfs-dns-sd/Makefil" comment, it had been removed.

(obache)

Added ap2-authn-otp

(pettai)

Added www/ap2-authn-otp version 1.1.3

(pettai)

Remove python dependency and allow broken installation again as
requested by agc@

(roy)

Remove work directory, that accidentally got into the initial import :(

(pettai)

mod_authn_otp is an Apache web server module for two-factor authentication
using one-time passwords (OTP) generated via the HOTP/OATH algorithm
defined in RFC 4226. This creates a simple way to protect a web site with
one-time passwords, using any RFC 4226-compliant hardware or software
token device. mod_authn_otp also supports the Mobile-OTP algorithm.

mod_authn_otp supports both event and time based one-time passwords. It
also supports "lingering" which allows the repeated re-use of a previously
used one-time password up to a configurable maximum linger time. This
allows one-time passwords to be used directly in HTTP authentication
without forcing the user to enter a new one-time password for every
page load.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(pettai)

Initial import

Changelog, so far:

Version 1.1.3 (r94)
    - Fixed bug with "OTPAuthPINAuthProvider" and <AuthnProviderAlias>

Version 1.1.2 (r87)
    - Added "OTPAuthPINAuthProvider" to allow alternate verification of PINs
    - Added "OTPAuthLogoutOnIPChange" flag to auto-logout on IP address change
    - Build fixes for Solaris

Version 1.1.1 (r66)
    - Build fixes

Version 1.1.0 (r44)
    - Moved time interval and #digits configuration into users file
    - Fixed bug in time based token synchronization at large offsets
    - Added support for the Mobile-OTP algorithm: http://motp.sourceforge.net/
    - Added otptool(1) one-time password utility program.
    - Accept either decimal or hexadecimal values (basic auth only).

Version 1.0.0 (r10)
    - Initial release

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(pettai)

Fix linking against pari.

(hans)

Fix linking against db4.

(hans)

Updated lang/sbcl to 1.0.47

(asau)

Update to SBCL 1.0.47

changes in sbcl-1.0.47 relative to sbcl-1.0.46:
  * bug fix: fix mach port rights leaks in mach exception handling code on
    darwin/x86 and /x86-64. (thanks to Willem Oudshoorn for motivation and the
    initial patch)
  * enhancement: --script muffles style-warnings and compiler notes. (lp#677779)
  * enhancement: redefinition warnings for macros from different files. (lp#434657)
  * enhancement: better MACHINE-VERSION on Darwin x86 and x86-64. (lp#668332)
  * enhancement: (FORMAT "foo" ...) and similar signal a compile-time warning. (lp#327223)
  * enhancement: no more "in: LAMBDA NIL" messages from the compiler for forms
    processed using EVAL -- now the appropriate toplevel form is reported instead.
  * enhancement: more legible style-warnings for inappropriate IGNORE and IGNORABLE
    declarations. (lp#726331)
  * enhancement: :NOT-NULL option has been added to alien C-STRING type to indicate
    that NIL/NULL is excluded from the type.
  * enhancement: SB-INTROSPECT:MAP-ROOT allows mapping over pointers contained in
    arbitrary objects.
  * optimization: SLOT-VALUE &co are faster in the presence of SLOT-VALUE-USING-CLASS
    and its compatriots.
  * optimization: core startup time is reduced by 30% on x86-64. (lp#557357)
  * bug fix: SB-DEBUG:BACKTRACE-AS-LIST guards against potentially leaking
    stack-allocated values out of their dynamic-extent. (lp#310175)
  * bug fix: attempts to use SB-SPROF for wallclock profiling on threaded
    x86-64 builds caused a type-error.
  * bug fix: calling COMPILE with something else than a lambda-expression as the
    second argument reports a more sensible error. (lp#718905)
  * bug fix: invalid combinations of :PREDICATE and :TYPE options in DEFSTRUCT
    are detected. (lp#520607)
  * bug fix: constant keyword argument checking didn't take :ALLOW-OTHER-KEYS
    into account.
  * bug fix: SLOT-BOUNDP information is correct during MAKE-INSTANCE in the
    presence of (SETF SLOT-VALUE-USING-CLASS) and SLOT-BOUNDP-USING-CLASS
    methods. (regression from 1.0.45.18)
  * bug fix: INITIALIZE-INSTANCE :AROUND methods supplying initargs via
    CALL-NEXT-METHOD work correctly. (regression from 1.0.45.19)
  * bug fix: several foreign functions accepting string also accepted NIL and
    consequently caused a memory fault at 0 now signal a type-error instead.
    (lp#721087)
  * bug fix: under rare circumstances, constraint propagation could rewrite a
    variable reference to refer to a variable not in scope, causing an error
    during physical environment analysis when attempting to close over the
    variable. (lp#551227)
  * bug fix: SIMPLE-CONDITION :FORMAT-CONTROL defaults to NIL.

(asau)

Fix build on SunOS.

(hans)

Note update of tex-texlive-en-doc.

(minskim)

Sync tex-texlive-en-doc with TeX Live r21569.

Documentation update.

(minskim)

Fix build on SunOS.

(hans)

Allow module packages to specify their own do-install target.
Used by x11/clisp-mit-clx.

(hans)

Add package for wildcard module of lang/clisp. Remove conflicting option
wildcard from lang/clisp.

(hans)

Add package for pari module of lang/clisp. Remove conflicting option
pari from lang/clisp.

(hans)

Add package for mit-clx module of lang/clisp. Remove conflicting option
mit-clx from lang/clisp.

(hans)

Pullup ticket #3417.

(tron)

Pullup ticket #3417 - requested by drochner
graphics/gimp: security patch

Revisions pulled up:
- graphics/gimp/Makefile                                        1.204
- graphics/gimp/distinfo                                        1.62
- graphics/gimp/patches/patch-ba                                1.1
- graphics/gimp/patches/patch-bb                                1.1
- graphics/gimp/patches/patch-bc                                1.1
- graphics/gimp/patches/patch-bd                                1.1

---
  Module Name:    pkgsrc
  Committed By:  drochner
  Date:          Fri Apr 15 16:39:10 UTC 2011

  Modified Files:
          pkgsrc/graphics/gimp: Makefile distinfo
  Added Files:
          pkgsrc/graphics/gimp/patches: patch-ba patch-bb patch-bc patch-bd

  Log Message:
  add patches from upstream, via Debian/Ubuntu:
  -possible buffer overflows when parsing config files of plugins
    (CVE-2010-4540, CVE-2010-4541, CVE-2010-4542)
  -possible buffer overflow in PSP image parser plugin (CVE-2010-4543)
  bump PKGREV

(tron)

Add package for the new-clx module of lang/clisp. Remove conflicting
option new-clx from lang/clisp

(hans)

Add package for berkeley-db module of lang/clisp. Remove conflicting bdb
option from lang/clisp.

(hans)

Updated net/unbound to 1.4.9

(pettai)

Actually make SUBST stage run - bump PKGREVISION

(abs)

switch from /usr/bin/env perl to ${PERL5} via SUBST. Bump PKGREVISION

(abs)

note "used by ..." comments.

(obache)

note a "used by ..." comment.

(obache)

note "used by ..." comments.

(obache)

note "used by..." comments.

(obache)

note "used by..." comments.

(obache)

1.4.9:

Bug Fixes:

* Added explicit note on unbound-anchor usage: Please note usage of
  unbound-anchor root anchor is at your own risk and under the terms of our
  LICENSE (see that file in the source).
* Fix remove private address does not throw away entire response. [bugzilla: 361 ]
* Fix, time.elapsed variable not reset with stats_noreset.
* Fix no ADflag for NXDOMAIN in NSEC3 optout. And wildcard in optout.
* give config parse error for multiple names on a stub or forward zone.
* updated ldns tarball to 1.6.9(snapshot).
* iana portlist updated.

(pettai)

For the sake of graphics/cairo, which derives the libXrender feature
set from the renderproto version, pick a package with an older version
(renderproto9) for anything < netbsd-5.

This change gets the selection criteria right, and also points the
renderproto9 package to renderproto's builtin.mk, avoiding Xrender
breakage.

Fixes pkg/43969 and should probably be pulled up.

(hauke)

Add linux to list for retaining the numeric OS version.
Fixes PR pkg/43622.

(morr)

Use python correctly.

(roy)

Use correct shell.

swell-foop still doens't work as it depends on seed which isn't in pkgsrc
yet, but gnome-games installs again.

(roy)

Note update of the "wireshark" package to version 1.4.6.

(tron)

Update "wireshark" package to version 1.4.6. Changes since 1.4.5:
- Bug Fixes
  o Wireshark and TShark can crash while analyzing TCP packets.
    (Bug 5837)

(tron)