ptex needs the ptexenc library.

(minskim)

Updated comms/asterisk18 to 1.8.2.3nb1

(jnemeth)

Bah!  Upstream changed a couple of text files in the distro tarball
without cranking the version number.

(jnemeth)

Updated mail/rss2email to 2.70

(schmonz)

Update to 2.70. From the changelog:

2.70 (2010-12-21)
* Improved handling of given feed email addresses to prevent mail
    servers rejecting poorly formed Froms
* Added X-RSS-TAGS header that lists any tags provided by an entry,
    which will be helpful in filtering incoming messages

2.69 (2010-11-12)
* Added support for connecting to SMTP server via SSL, see SMTP_SSL option
* Improved backwards compatibility by fixing issue with listing
    feeds when run with older Python versions
* Added selective feed email overrides through OVERRIDE_EMAIL and
    DEFAULT_EMAIL options
* Added NO_FRIENDLY_NAME to from from address only without the friendly name
* Added X-RSS-URL header in each message with the link to the original item

2.68 (2010-10-01)
* Added ability to pause/resume checking of individual feeds through
    pause and unpause commands
* Added ability to import and export OPML feed lists through
    importopml and exportopml commands

2.67 (2010-09-21)
* Fixed entries that include an id which is blank (i.e., an empty
    string) were being resent
* Fixed some entries not being sent by email because they had bad From headers
* Fixed From headers with HTML entities encoded twice
* Compatibility changes to support most recent development versions
    of feedparser
* Compatibility changes to support Google Reader feeds

2.66 (2009-12-21)
* Complete packaging of all necessary source files (rss2email,
    html2text, feedparser, r2e, etc.) into one bundle
* Included a more complete config.py with all options
* Default to HTML mail and CSS results
* Added 'reset' command to erase history of already seen entries
* Changed project email and homepage
* Made exception and error output text more useful
* Added X-RSS-Feed and X-RSS-ID headers to each email for easier filtering
* Improved enclosure handling
* Fixed MacOS compatibility issues

(schmonz)

Updated textproc/py-feedparser to 5.0

(schmonz)

Update to 5.0. From the changelog:

* Improved MathML support
* Support microformats (rel-tag, rel-enclosure, xfn, hcard)
* Support IRIs
* Allow safe CSS through sanitization
* Allow safe HTML5 through sanitization
* Support SVG
* Support inline XML entity declarations
* Support unescaped quotes and angle brackets in attributes
* Support additional date formats
* Added the request_headers argument to parse()
* Added the response_headers argument to parse()
* Support multiple entry, feed, and source authors
* Officially make Python 2.4 the earliest supported version
* Support Python 3
* Bug fixes, bug fixes, bug fixes

(schmonz)

Pullup ticket #3338 - requested by tron

(sbd)

Pullup ticket #3338 - requested by tron
Security patch for "phpmyadmin" package

Revisions pulled up:
- pkgsrc/databases/phpmyadmin/Makefile 1.86
- pkgsrc/databases/phpmyadmin/PLIST 1.22
- pkgsrc/databases/phpmyadmin/distinfo 1.47
- pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-1 1.1
- pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-2 1.1
- pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-3 1.1
- pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4481 1.1

-------------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: tron
  Date: Thu Jan 27 13:45:56 UTC 2011

  Modified Files:
  pkgsrc/databases/phpmyadmin: Makefile PLIST distinfo
  Added Files:
  pkgsrc/databases/phpmyadmin/patches: patch-CVE-2010-4480-1
      patch-CVE-2010-4480-2 patch-CVE-2010-4480-3 patch-CVE-2010-4481

  Log Message:
  Add fixes for the security vulnerabilities reported in CVE-2010-4480 and
  CVE-2010-4481 taken from the phpMyAdmin GIT repository.

  Thanks a lot to Tim Zingelman for pointing out that the fixes had
  finally been made available.

  To generate a diff of this commit:
  cvs rdiff -u -r1.85 -r1.86 pkgsrc/databases/phpmyadmin/Makefile
  cvs rdiff -u -r1.21 -r1.22 pkgsrc/databases/phpmyadmin/PLIST
  cvs rdiff -u -r1.46 -r1.47 pkgsrc/databases/phpmyadmin/distinfo
  cvs rdiff -u -r0 -r1.1 \
      pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-1 \
      pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-2 \
      pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4480-3 \
      pkgsrc/databases/phpmyadmin/patches/patch-CVE-2010-4481

(sbd)

Added games/warmux version 11.01

(adam)

Removed games/wormux successor games/warmux

(adam)

Removed games/wormux successor games/warmux

(adam)

Have the mascots of your favorite free software battle in the Warmux arena.
Using dynamite, grenades, baseball bat and others weapons... exterminate your
opponent in a 2D toon style scenery and a funny environment.

Each player (2 minimum, on the same PC) controls the team of his choice (tux,
gnu, firefox, wilber,...) and must destroy his adversary using more or less
casual weapons. Although a minimum of strategy is required to vanquish, Warmux
is pre-eminently a "convivial mass murder" game where, turn by turn, each
member of each team attempts to produce a maximum of damage to his opponents.

Changes 11.01:
* Name and numbering (year.month) change!
* Android port
* Symbian^3 port (number of characters/teams subject to memory constraint)
* More toonesque than ever characters! Cuteness not considered a weapon
* New maps: Japan-themed "ninja", nature-themed "Birds" and Space-themed
  "urban heights"
* Increased number of teams playable in a single game to 8
* Massive memory optimizations, and 16 bits-per-pixel rendering
* Massive speed optimization allowing better gameplay
* Help is now much richer; please help us translate it even more!
* Widget in options menu to edit keybindings
* Kinetic scrolling to browse the map
* Traditional in-game toolbar clickable, click wind indicator to display
  touch controls!
* Improved minimap: now displays boxes, can be resized through keyboard
  shortcuts, can be clicked to move around faster
* Custom teams
* Troublesome bugs fixed: OSX fullscreen, explosion when firing near a wall

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(adam)

Updated audio/amarok to 2.4.0

(wiz)

Update to 2.4.0.

VERSION 2.4.0
  CHANGES:
    * New Splash Screen by Tomasz Dudzik <madsheytan@gmail.com>.
    * The "Playdar Collection" feature has been disabled until some technical
      issues are resolved.
    * Fixed some broken radio stream URLs.

  BUGFIXES:
    * Fix crash on copying tracks between collection. (BR 261364)
    * Fix fetching of script data. BBC, Free Music Charts and others should work again.
      (BR 261839)
    * Actually show the Splash Screen by default, as it was meant to work.
    * Leave all pending files in case of error/conflict during tracks moving. (BR 257739)
    * Fix crash when moving tracks between collections. (BR 253033)
    * Fixed issue with UMS Collection that made amarok to delete original track
      instead of newly copied one. (BR 238915)
    * Fixed issue with Audio CDs that do not provide CDDB information. Patch by
      Andriy Gapon <avg@icyb.net.ua>. (BR 257818)
    * Fixed issue with the Organize Files Dialog that prevented presets from being
      loaded when in advanced mode. Patch by Philipp Schmidt <philschmidt@gmx.net>.
      (BR 255325)

VERSION 2.4-Beta 1
  FEATURES:
    * New UPnP Collection detects and plays media on UPnP devices on the network.
    * New transcoding feature which converts one or more tracks with a chosen encoder
      when copying to the local collection.
    * Added option to use Wikipedia Mobile.
    * Added settings for writing statistics and album covers back to the file.
    * Leave focus in playlist search widget when using up/down to scroll through
      filtered results. Thanks to Thomas Karpiniec for the patch!
    * LyricsApplet: The lyrics in are now updated when they were changed in a
      different place, for example in the Tag Dialog.
    * Permit the use of iPod Touch 3G and possibly newer devices. Thanks to
      Aur辿lien Croc for the patch!
    * Match space-separated search terms in the playlist filter var individually. Thanks
      to Thomas Karpiniec for the patch!
    * Added new context applet for displaying guitar and bass tab information. Thanks to
      Rainer Sigle for the patch!
    * Added ability to set/update Album Artist.
    * Added map view and calendar in the upcoming events applet.
    * Added support for all Wikipedia languages. (BR 220617)
    * Added incremental search in the Wikipedia applet (press
      '/' or global search key when in focus).
    * Added "Favorite Venues" to the upcoming events applet.
    * Read MusicBrainz IDs of MP4 files during scanning.
    * Ability to hide and show the menu bar. Patch by
      Valentyn Pavliuchenko <valentyn.pavliuchenko@gmail.com>.
    * Size of the On-Screen-Display font is now configurable. (BR 195186)
    * Musicbrainz-based mass tagging UI by Sergey Ivanov.
    * New easy to use table-based UI for Ampache server configuration. (BR 200703)
    * OPML export for podcast subscriptions. (BR 126120)
    * New "Playlist Length" constraint for the APG, which allows you to specify
      the number of tracks in the playlist.  What was the "Playlist Length "
      constraint is now called "Playlist Duration".
    * MPRIS2 support for controlling Amarok over D-Bus.
    * New "Playdar Collection" allows searching for and listening
      to music provided by a running local Playdar service.

  CHANGES:
    * Brought back collapsing animations of context applets.
    * Added a "Donors" tab to the About dialog for our generous Roktober 2010
      donors who wish to be mentioned.
    * Tracks might contain lyrics in the HTML format, where there's no user-visible
      content in the HTML. Those lyrics are now regarded as "empty".
    * LyricsApplet: changed the layout of the "Do you really want to refetch lyrics"
      message.
    * Current track applet: added "show in media sources" actions for current
      track's artist, album, composer, genre, and year if available.
    * Current track applet: added action to open the tag dialog.
    * Improved appearance of current track applet when playback is stopped.
    * Better scrolling in the applet explorer.
    * The default moodbar style now uses system colors.
    * Added tray icon context-menu action to open the preferences dialog.
    * Show a progress bar while loading pages in the Wikipedia applet.
    * Added option to right-align "year" in the albums applet.
    * Improved alignment of tracks in the albums applet.
    * Scroll to the current album and make its tracks visible in the albums
      applet. (BR 187011)
    * Added ability to expand/collapse/drag disc items in the albums applet.
      (BR 249488)
    * Improved appearance of similar artist, upcoming events, and Wikipedia
      applets.
    * Improved presentation of suggested lyrics (currently only 3rd party
      scripts use).
    * Now using QToolTip for playlist tooltips.
    * Changed playlist delegate margins and inline editor formating.
    * Added "Added This Hour" filter preset to the collection brower widget.
    * Bumped KDE dependency to version 4.4., and Qt dependency to 4.6.
    * Print message when a file can't be copied to a media player.
      Patch by Sergey Ivanov <123kash@gmail.com>. (BR 203820)
    * Improved the usability of device items in Media Sources by adding tooltips.
    * Deleting items in the collection/file browser will move them to trash;
      pressing SHIFT while clicking the action will bypass trash.

  BUGFIXES:
    * Fixed white text on light blue background in tabs applet. (BR 258234)
    * Fixed cover dialog crash pressing Ok when nothing is selected. (BR 258187)
    * Title labels incorrectly used the text color from the plasma theme.
      This caused trouble with the fixed plasma theme and light color schemes.
    * Fixed a data-loss bug where the user could lose changes he made to the current
      track's lyrics. (BR 207621)
    * Fixed covers of Ampache tracks not available through DBus.
    * Scanning stale and orphaned songs on iPod results in song duplication. (BR 235696)
    * Applets' settings dialogs were partly untranslatable. (BR 255971)
    * Fixed append&play action. Thanks Pieter van der Kloet for the patch. (BR 229706)
    * Don't ignore the "use relative path" checkbox in the playlist export dialog.
      (BR 250689)
    * Fixed applet explorer getting stuck. (BR 253058)
    * Fixed Wikipedia applet header layout issues. (BR 215171)
    * Fixed truncated heading in albums applet. (BR 231001)
    * Playlist sorting breadcrumb items have been untranslatable.
      Patch by Alexander Potashev <aspotashev@gmail.com>. (BR 189750)
    * Dynamic Playlist criteria were not being saved properly. (BR 243562)
    * Collection Browser should show Artist names for Compilation Albums. (BR
      252790)
    * When Amarok starts and "Continue playing when Amarok is started" is selected,
      the Current Track applet showed songs of the artist instead of the current
      track info. Patch by Conrad H端bler. (BR 241641)
    * Fixed crash on Windows when exporting playlist to any file type. Patch by
      James Duncan <james.t.duncan@gmail.com>. (BR 249376)
    * If album keyword is empty, show "unknown album" in context window. (BR 205038)
    * Ampache would not connect to servers placed in a subdirectory.
    * Fixed an initialization bug which affected all context applets.
    * Fixed bug where users could drag applets around indiscriminately.
    * FLAC BPM tags could be read incorrectly. (BR 234166)

==BEGIN Qt 4.6 / KDE 4.4 DEPENDENCY==

(wiz)

Use distutils.mk instead of extension.mk, so that egg file is installed.

(gdt)

oops - forgot some

(drochner)

revert accidental commit to release branch

(gdt)

mention recent updates

(drochner)

Use distutils.mk instead of extension.mk, and add egg file to PLIST.
(distutils.mk includes extension; this change simply adds the egg
metadata file that other python programs expect to find.)

(gdt)

We don't BUILDLINK_PASSTHRU_DIRS magic on Mac OS X any more.

(adam)

-add patch from https://bugzilla.gnome.org/show_bug.cgi?id=639882 to fix
possible heap corruption when parsing a corrupt font (CVE-2011-0020)
-being here, add a patch from upstream to fix a scaling inconsistency
bump PKGREV

(drochner)

Note update of the "phpmyadmin" package to version 2.11.11.1nb1.

(tron)

* Use autoconf, so other compilers, like Clang, are configured correctly.
* pkglint clean-up.

(adam)

Add fixes for the security vulnerabilities reported in CVE-2010-4480 and
CVE-2010-4481 taken from the phpMyAdmin GIT repository.

Thanks a lot to Tim Zingelman for pointing out that the fixes had
finally been made available.

(tron)

Updated net/netatalk to 2.1.5

(hauke)

Applying net/netatalk update from pkg/44474

Changes in 2.1.5
================

* UPD: afpd: support newlines in -loginmesg with \n escaping syntax
* UPD: afpd: support for changed chmod semantics on ZFS with ACLs
      in onnv145+
* FIX: afpd: fix leaking ressource when moving objects on the server
* FIX: afpd: backport Solaris 10 compatibilty fix from 2.2: don't use
      SO_SNDTIMEO/SO_RCVTIMEO, use non-blocking IO and select instead.
* FIX: afpd: misaligned memory access on Sparc in ad_setattr, fixes
      bug 3110004.
* FIX: cnid_dbd: backport Solaris 10 compatibilty fix from 2.2: don't
      use SO_SNDTIMEO/SO_RCVTIMEO, use non-blocking IO and select instead.

(hauke)

+ milter-manager-1.6.5.

(obache)

Updated mail/milter-manager to 1.6.4

(obache)

Fix dependency pattern for ruby-gnome2-glib.

(obache)

Update milter-manager to 1.6.4.

== [release-1-6-4] 1.6.4: 2011-01-21

A bug fix release of 1.6.3.

=== milter-client

==== Fixes

  * Used event loop usage as before when event loop backend
    is GLib.

== [release-1-6-3] 1.6.3: 2011-01-20

A performance improvement release. This release includes
a few performance improvement features but they are marked
'experimental'. They will be 'stable' feature in 1.8.0.

=== milter manager

==== Improvements

  * Upgraded bundled Ruby/GLib2 to 0.90.5 from 0.19.4.
  * Supported Ruby 1.9.2.
  * Added
    ((<manager.fallback_status|configuration.rd.ja#manager.fallback_status>))
    that specifies a status returned to SMTP server on
    internal error.
  * Added
    ((<manager.fallback_status_at_disconnect|configuration.rd.ja#manager.fallback_status_at_disconnect>))
    that specifies a status returned to SMTP server when
    disconnection is detected. [Suggested by Kenji Shiono]
  * Added DATA event emuration that is enabled when SMTP
    server uses milter protocol version 3 or smaller.
  * Added
    ((<manager.event_loop_backend|configuration.rd.ja#manager.event_loop_backend>))
    that specifies event loop backend. (experimiental)
  * Added
    ((<manager.n_workers|configuration.rd.ja#manager.n_workers>))
    that specifies number of worker processes. (experimental)
  * Added
    ((<manager.packet_buffer_size|configuration.rd.ja#manager.packet_buffer_sizea>))
    that specifies buffer size for send packets. (experimental)

==== Fixes

  * Fixed a bug that
    ((<manager.use_netstat_connection_checker|configuration.rd.ja#manager.use_netstat_connection-checker>))
    doesn't work with Postfix 2.3. [Reported by Kenji Shiono]
  * Fixed a DATA event timing when some child milters exist.
    [Reported by Kenji Shiono]

=== Document

==== Improvements

  * Described about Postfix's {client_addr}. [Reported by Kenji Shiono]

=== milter-client

==== Improvements

  * Supported multi process. (experimental)
  * Supported libev as event loop backend. (experimental)
    * Bundled libev 4.03.
  * Made write asyncronize.
  * Supported send packets buffering. (experimental)

=== milter-server

==== Improvements

  * Added more condition checks on evnets.

==== Fixes

  * Fixed a bug that timeout detection doesn't work.
    [Reported by Kenji Shiono]

=== Ruby milter

==== Improements

  * Added ruby-milter.pc.
  * Added --packet-buffer-size option that specifies send
    packet buffer size. (experimental)
  * Added --n-workers option thst specifies number of worker
    processes. (epxerimental)
  * Added --event-loop-backend option that specifies event
    loop backend. (experimental)

=== milter-test-client

==== Improvements

  * Added
    ((<--n-workers|milter-test-client#--n-workers>)) option
    that specifies number of worker processes. (experimental)
  * Added
    ((<--event-loop-backend|milter-test-client#--event-loop-backend>))
    option that specifies event loop backend. (experimental)
  * Added
    ((<--packet-buffer-size|milter-test-client#--packet-buffer-size>))
    option that specifies send packets buffer size. (experimental)

=== milter-performance-check

==== Improvements

  * Added
    ((<--n-additional-lines|milter-performance-check#--n-additional-lines>))
    option that grows body size.
  * Added
    ((<--report-failure-responses|milter-performance-check#--report-failure-responses>))
    option that enables failure SMTP sesseion response
    report on the last.
  * Added
    ((<--report-periodically|milter-performance-check#--report-periodically>))
    option that enables periodical statistics report.
  * Added
    ((<--flood|milter-performance-check#--flood>))
    option that enables flood mood that sends flood of mails
    in specified period.

=== milter-report-statistics

==== Improvements

  * Added: ((<milter-report-statistics.rd.ja>))

=== Packet

  * Updated package repository RPM for CentOS: 1.0.0-0 -> 1.0.0-1.

=== Thanks

  * Kenji Shiono

(obache)

Comment out HOMEPAGE and MASTER_SITES, they are obsolete.

(wiz)

smbd does not require nmbd to run

(adam)

Updated mail/exim to 4.74

(adam)

Changes 4.74:
* Failure to get a lock on a hints database can have serious
  consequences so log it to the panic log.
* Log LMTP confirmation messages in the same way as SMTP,
  controlled using the smtp_confirmation log selector.
* Include the error message when we fail to unlink a spool file.
* Bugzilla 139: Support dynamically loaded lookups as modules.
* Bugzilla 139: Documentation and portability issues.
  Avoid GNU Makefile-isms, let Exim continue to build on BSD.
  Handle per-OS dynamic-module compilation flags.
* Let /dev/null have normal permissions.
  The 4.73 fixes were a little too stringent and complained about the
  permissions on /dev/null.  Exempt it from some checks.
* Report version information for many libraries, including
  Exim version information for dynamically loaded libraries.  Created
  version.h, now support a version extension string for distributors
  who patch heavily. Dynamic module ABI change.
* CVE-2011-0017 - check return value of setuid/setgid. This is a
  privilege escalation vulnerability whereby the Exim run-time user
  can cause root to append content of the attacker's choosing to
  arbitrary files.
* Bugzilla 1041: merged DCC maintainer's fixes for return code.
* Bugzilla 1071: fix delivery logging with untrusted macros.
  If dropping privileges for untrusted macros, we disabled normal logging
  on the basis that it would fail; for the Exim run-time user, this is not
  the case, and it resulted in successful deliveries going unlogged.

(adam)

Note upstream Bug#591978.

(obache)

add and enable ether2dns

(jnemeth)

typo

(jnemeth)

add and enable ruby-commander

(jnemeth)

Update to 1.8.2.3 -- bug fix release to fix a FAX issue

pkgsrc:  fix issue with patch for detecting sys/atomic.h

The Asterisk Development Team has announced the release of Asterisk 1.8.2.3.

The release of Asterisk 1.8.2.3 resolves the following issue:

  * Reimplemented fax session reservation to reverse the ABI breakage introduced
    in r297486.
    (Reported by Jeremy Kister on the asterisk-users mailing list. Patched by
    mnicholson)

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.2.3

(jnemeth)

Mention URLs for commits including these patches upstream.

(wiz)

reset PKGREV for base pkg update

(drochner)

update to 0.10.17
changes: misc fixes and improvements

(drochner)

update to 0.10.21
changes:
-some elements moved to core
-misc fixes and improvements

(drochner)

update to 0.10.27
changes: many fixes and improvements

(drochner)

update to 0.10.32
changes:
-New encodebin element
-video: add 8-bit paletted RGB, YUV9, YVU9 and IYU1 video formats
-misc fixes and improvements

(drochner)

update to 0.10.32
changes:
-moved some elements from -bad to here
-Performance improvements
-misc fixes and improvements

(drochner)

Note ether2dns.

(is)

Add description.

(is)

Simple converter from /etc/ethers to AAAA or PTR records assuming IPv6
autoconfigured hosts.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(is)

update to 0.2.9
changes: many feature additions, UI improvements, fixes

(drochner)

As suggsted by joerg, adjust CHECK_WRKREF_SKIP to just use shell wildcards rather than needing to update it if the so version is changed

(abs)

update to 0.20.2
changes:
-Gradient improvements
-Performance improvements
-bugfixes

(drochner)

update CHECK_WRKREF_SKIP from libvlccore.so.4.0.1 to libvlccore.so.4.0.2 - fixes build with PKG_DEVELOPER=yes

(abs)

simplify

(obache)

Add missing ".o". Found by Matthieu Herrb in PR 44461.

(wiz)

Fix build with png-1.5. Problem reported by chuck.

(wiz)

Updated inputmethod/ibus-handwrite to 2.1.3

(obache)

Update ibus-handwrite to 2.1.3.

bug fixes, but no changes for pkgsrc, because it's patch-a{b,c}.

(obache)

Fix build with png-1.5. Problem reported by chuck.

(wiz)

+ digikam-1.8.0, gdal-lib-1.8.0, gegl-0.1.5, gmime24-2.4.22,
  libXi-1.4.1, msmtp-1.4.23 [pkg/44451], notification-daemon-0.7.0,
  openssh-5.7p1, py-qt4-4.8.3, py-sip-4.12.1, samba-3.4.11,
  twolame-0.3.13, xbiff-1.0.3.

(wiz)

Fix build with png-1.5. Reported broken by chuck.

(wiz)

Remove patch hunks that disable --recheck in GNU configure scripts.
These were generated, apparently, by mk/configure/gnu-configure.mk
(configure-scripts-override target).

(shattered)

fix PLIST inconsistency if KDE is installed, from Mark Davies

(drochner)

-fix the png-1.5 API problem using a new function introduced in beta08
which is simpler and more runtime efficient
-pull in some stability patches from upstream
bump PKGREV

(drochner)

backout previous -- fixed in libwmf where the dependency comes from

(drochner)

propagate x11 dependency if necessary

(drochner)

pull in x11/libX11/buildlink3.mk, as this links with libX11.
otherwise, "make configure" fails when X11_TYPE=modular (cannot
find -lX11).

(chuck)

Pullup tickets #3336.

(tron)

Pullup ticket #3336 - requested by gls
comms/asterisk18: security update

Revisions pulled up:
- comms/asterisk18/Makefile 1.3-1.4
- comms/asterisk18/distinfo 1.5-1.6
- comms/asterisk18/patches/patch-aq 1.2
---
Module Name: pkgsrc
Committed By: jnemeth
Date: Sun Jan 16 17:52:43 UTC 2011

Modified Files:
pkgsrc/comms/asterisk18: Makefile distinfo
pkgsrc/comms/asterisk18/patches: patch-aq

Log Message:
Update to 1.8.2:

The release of Asterisk 1.8.2 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* 'sip notify clear-mwi' needs terminating CRLF.
  (Closes issue #18275. Reported, patched by klaus3000)

* Patch for deadlock from ordering issue between channel/queue locks in
  app_queue (set_queue_variables).
  (Closes issue #18031. Reported by rain. Patched by bbryant)

* Fix cache of device state changes for multiple servers.
  (Closes issue #18284, #18280. Reported, tested by klaus3000. Patched,
tested
  by russellb)

* Resolve issue where channel redirect function (CLI or AMI) hangs up
the call
  instead of redirecting the call.
  (Closes issue #18171. Reported by: SantaFox)
  (Closes issue #18185. Reported by: kwemheuer)
  (Closes issue #18211. Reported by: zahir_koradia)
  (Closes issue #18230. Reported by: vmarrone)
  (Closes issue #18299. Reported by: mbrevda)
  (Closes issue #18322. Reported by: nerbos)

* Fix reloading of peer when a user is requested. Prevent peer reloading
from
  causing multiple MWI subscriptions to be created when using realtime.
  (Closes issue #18342. Reported, patched by nivek.)

* Fix XMPP PubSub-based distributed device state. Initialize pubsubflags
to 0
  so res_jabber doesn't think there is already an XMPP connection sending
  device state. Also clean up CLI commands a bit.
  (Closes issue #18272. Reported by klaus3000. Patched by Marquis42)

* Don't crash after Set(CDR(userfield)=...) in ast_bridge_call. Instead of
  setting peer->cdr = NULL, set it to not post.
  (Closes issue #18415. Reported by macbrody. Patched, tested by jsolares)

* Fixes issue with outbound google voice calls not working. Thanks to az1234
  and nevermind_quack for their input in helping debug the issue.
  (Closes issue #18412. Reported by nevermind_quack. Patched by dvossel)

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.2
---
odule Name: pkgsrc
Committed By: jnemeth
Date: Fri Jan 21 07:00:44 UTC 2011

Modified Files:
pkgsrc/comms/asterisk18: Makefile distinfo

Log Message:
Update to 1.8.2.2

This is to fix AST-2011-001: Stack buffer overflow in SIP channel driver

              Asterisk Project Security Advisory - AST-2011-001

        Product        Asterisk
        Summary        Stack buffer overflow in SIP channel driver
    Nature of Advisory  Exploitable Stack Buffer Overflow
      Susceptibility    Remote Authenticated Sessions
        Severity      Moderate
      Exploits Known    No
      Reported On      January 11, 2011
      Reported By      Matthew Nicholson
        Posted On      January 18, 2011
    Last Updated On    January 18, 2011
    Advisory Contact  Matthew Nicholson <mnicholson at digium.com>
        CVE Name

  Description When forming an outgoing SIP request while in pedantic
mode, a
              stack buffer can be made to overflow if supplied with
              carefully crafted caller ID information. This vulnerability
              also affects the URIENCODE dialplan function and in some
              versions of asterisk, the AGI dialplan application as well..
              The ast_uri_encode function does not properly respect the
size
              of its output buffer and can write past the end of it when
              encoding URIs.

For full details, see:

http://downloads.digium.com/pub/security/AST-2011-001.html

(tron)

Pass LDFLAGS for linking

(adam)

Pullup tickets #3334 and #3335.

(tron)

Pullup ticket #3335 - requested by gls
comms/asterisk16: security update

Revisions pulled up:
- comms/asterisk16/Makefile 1.28-1.29
- comms/asterisk16/distinfo 1.19-1.20
- comms/asterisk16/patches/patch-aq 1.10
---
Module Name: pkgsrc
Committed By: jnemeth
Date: Sun Jan 16 06:30:57 UTC 2011

Modified Files:
pkgsrc/comms/asterisk16: Makefile distinfo
pkgsrc/comms/asterisk16/patches: patch-aq

Log Message:
Update to 1.6.2.16:

The release of Asterisk 1.6.2.16 resolves several issues reported by the
community and would have not been possible without your participation.
Thank you!

The following is a sample of the issues resolved in this release:

* Fix cache of device state changes for multiple servers.
  (Closes issue #18284, #18280. Reported, tested by klaus3000. Patched,
tested
  by russellb)

* Resolve issue where channel redirect function (CLI or AMI) hangs up
the call
  instead of redirecting the call.
  (Closes issue #18171. Reported by: SantaFox)
  (Closes issue #18185. Reported by: kwemheuer)
  (Closes issue #18211. Reported by: zahir_koradia)
  (Closes issue #18230. Reported by: vmarrone)
  (Closes issue #18299. Reported by: mbrevda)
  (Closes issue #18322. Reported by: nerbos)

* Linux and *BSD disagree on the elements within the ucred structure. Detect
  which one is in use on the system.
  (Closes issue #18384. Reported, patched, tested by bjm, tilghman)

* app_followme: Don't create a Local channel if the target extension
does not
  exist.
  (Closes issue #18126. Reported, patched by junky)

* Revert code that changed SSRC for DTMF.
  (Closes issue #17404, #18189, #18352. Reported by sdolloff, marcbou.
rsw686.
  Tested by cmbaker82)

* Resolve issue where REGISTER request with a Call-ID matching an existing
  transaction is received it was possible that the REGISTER request would
  overwrite the initreq of the private structure.
  (Closes issue #18051. Reported by eeman. Patched, tested by twilson)

For a full list of changes in this release, please see the ChangeLog:

http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.16
---
Module Name: pkgsrc
Committed By: jnemeth
Date: Fri Jan 21 05:13:12 UTC 2011

Modified Files:
pkgsrc/comms/asterisk16: Makefile distinfo

Log Message:
Update to 1.6.2.16.1

This is to fix AST-2011-001: Stack buffer overflow in SIP channel driver

              Asterisk Project Security Advisory - AST-2011-001

        Product        Asterisk
        Summary        Stack buffer overflow in SIP channel driver
    Nature of Advisory  Exploitable Stack Buffer Overflow
      Susceptibility    Remote Authenticated Sessions
        Severity      Moderate
      Exploits Known    No
      Reported On      January 11, 2011
      Reported By      Matthew Nicholson
        Posted On      January 18, 2011
    Last Updated On    January 18, 2011
    Advisory Contact  Matthew Nicholson <mnicholson at digium.com>
        CVE Name

  Description When forming an outgoing SIP request while in pedantic
mode, a
              stack buffer can be made to overflow if supplied with
              carefully crafted caller ID information. This vulnerability
              also affects the URIENCODE dialplan function and in some
              versions of asterisk, the AGI dialplan application as well..
              The ast_uri_encode function does not properly respect the
size
              of its output buffer and can write past the end of it when
              encoding URIs.

For full details, see:

http://downloads.digium.com/pub/security/AST-2011-001.html

(tron)

Pullup ticket #3334 - requested by obache
inputmethod/ibus-table-chinese: build fix

Revisions pulled up:
- inputmethod/ibus-table-chinese/distinfo 1.4
- inputmethod/ibus-table-chinese/patches/patch-ad 1.1
---
Module Name: pkgsrc
Committed By: obache
Date: Mon Jan 24 08:40:39 UTC 2011

Modified Files:
pkgsrc/inputmethod/ibus-table-chinese: distinfo
Added Files:
pkgsrc/inputmethod/ibus-table-chinese/patches: patch-ad

Log Message:
"-m" option for grep is not portable.

(tron)

Remove gwaei 1.5.2.

(ryoon)

Updated www/ikiwiki to 3.20110124

(schmonz)

Update to 3.20110124. From the changelog:

* comments: Fix commenting, broken by security fix.
* blogspam: Don't check modifications from admins for spam, and
    also allow the blogspam_pagespec to do other matches against who
    the user is.
* inline: Fix regression in feed titles. Closes: #610878 (Thanks, Paul Wise)

(schmonz)

Add -D_GNU_SOURCE to CFLAGS on linux so that when configure decides to
set NATIVE_GNU_REGEX the code actually builds.

(markd)

Explicitly disable nls to match PLIST.

(markd)

Explicitly disable documentation otherwise will be installed if required
commands happen to be found.

(markd)

recent heimdal's dont implicitly include mech headers
so include explicitly.

(markd)

Fix login non-kde session with csh/tcsh. PR 40165

(markd)

Updated misc/gwaei to 1.5.2.

(ryoon)

January 10, 2011
A new gWaei release for the new year! 1.5.2 is out! Go get it!

Updates of the website have been sparse, but development of gWaei
has continued regardless. A number of bug fixes have made it in
again, and finally I am going around making updates to the README
documentation again. gWaei 1.5.2 should be good an ready for
package maintainers when Gnome 2.31 comes to their machines and
when Gnome 3.0 is finally released.

    * Searches when using & in the query work again instead of
      being truncated as you type.
    * The interface is now more responsive when a search is
      carried out by edits to thread locking.
    * Exact matching for the console version of gWaei was readded
      because it is truly needed there
    * The sandboxing issue caused by gtk-update-icon-cache for the
      package maintainers.
    * The README has been updated as it was woefully out of date.

November 4, 2010
Release of the first Public Binary of gWaei for Windows! Go get it!

Real progress has been made on a usable native gWaei binary for
Windows. It still needs some love, but it means the worst of the
port is over. I am currently looking for someone who wants to be a
Windows port maintainer. If you are interested and ready to learn,
I would be happy to have you aboard. Just contact us through our
IRC channel or email me.

What is still missing from the Windows version are:

    * Spellcheck support through libsexy/enchant
    * Preferences which will become possible once the code is ported
      to GSettings from GConf
    * Proper multithreading during searches
    * Various polish issues

Otherwise, the program is working pretty well and it is exciting
seeing gWaei make it to more platforms.

May 10, 2010
Version 1.4.0 of gWaei is out! Go get it!

A fair amount more background reworking had went into this
release, and much of the interface has been tweaked to be smaller,
easier to maintain, and prettier.There is a revamped no results
page where you can search for the word online or in another
dictionary with just a click. There is also functionality to
search for a word in a new tab by right clicking it.

The command line now show download progress as a dictionary is
being installe,d, and has recieved some basic maintenace.

May 9, 2010
Version 1.3.1 and 1.2.3 of gWaei is out! Go get it!

This fixes corrupt dictionary installs because the whole file
wasn't being written to disk. If you have gWaei crash right at the
end of searches, it is most likely this bug. Install the update,
reinstall the dictionary, and you should be fine. (Alternatively,
install the dictionary then quit to force the whole file to be
written. Then searches should be fine.)

May 6, 2010
Version 1.2.2 of gWaei is out! Go get it!

But if you have 1.3.0, don't get it! This is a bug fix release
with minimal changes for distrobutions using ths e 1.2.x
series. This should remove crashes that appear when using a
version of gtk+ greater than 2.16.

March 19, 2010
Version 1.3.0 of gWaei is out! Go get it!

Now supports tabs. A lot of code rewritten. New ncurses interface
for the console version. Many bug fixes. Simpler preferences
dialog.

(ryoon)

Updated security/pam-af to 1.0.1nb1

(obache)

corrent checksum of patches.

(obache)

* Note comments to patch files.
* detect recent OpenPAM correctly
* catch getopt(3) with `int' for platforms that char will never be -1.

Bump PKGREVISION.

(obache)

Updated x11/xpad to 4.0

(obache)

Update xpad to 4.0.

Version 4.0
* Added --toggle (between --hide and --show). Patch by Paul Ivanov.
* Updated French, Japanese, Russian, Spanish, and Swedish translations
* New Croatian, Estonian, German, Portuguese, Thai, and Turkish translations

Version 3.1
* Updated Danish, French, Russian, Spanish, and Swedish translations
* New Czech, Japanese, and Latvian translations

Version 3.0
* Don't wake up every 20 milliseconds to check session management messages.
  Rather, wait for an event.
* Add --hide/--show, removed --hide-old.  --hide and --show affect all pads
  on startup or can be used on an already running xpad instance.  Patch by
  Jan Losinski.
* Update icon to be less aliased
* Relicense as GPL v3+

Version 2.14
* Fix 100% CPU bug

Version 2.13
* Requires GTK+ 2.12
* Fix pads possibly not remembering location after close
* Fix pad-closed state not being remembered
* Uses native status icon code in GTK+
* Maybe, possibly fix some 'pad on all workspaces' problems
* New Chinese (simplified) translation (Meng Jie)
* New English (British) translation (David Lodge)
* New Finnish translation (Jorma Karvonen)
* New Korean translation (KwangSub Lee)
* Updated Dutch translation (Benno Schulenberg)
* Updated Slovak translation (Andrej Kacian)
* Fixed Danish, Swedish translations

Version 2.12
* Fix a crash when loading pads with formatting

Version 2.11
* If window decorations are turned on, pads will now show up in the taskbar
* Added -f option to open a file as a note
* New Chinese (simplified) translation (Meng Jie)
* New Danish translation (Morten Bo Johansen)
* New Swedish translation (Daniel Nylander)
* Updated Chinese (traditional) translation (Wei-Lun Chao)

Version 2.10
* Fix a possible crash when deleting pads with autohide toolbar
* Make toolbar buttons smaller
* Make toolbar appear inside pad if there is enough unused space
* New Slovak translation (Andrej Kacian)
* New Slovenian translation (Matej Urbančič)

Version 2.9
* Fix pads saving slightly off bad x,y values
* Fix pads saving bad heights when toolbar always on (Sham Chukoury)
* Fix possible crash from not allocating enough memory (Federico Schwindt)
* New Malay translation (Sharuzzaman Ahmat Raslan)

Version 2.8
* Allow translations to be used (broken for a couple versions)
* New Chinese (traditional) translation (Wei-Lun Chao)
* Removed half-baked Esperanto translation

Version 2.7
* Stop pads from popping toolbar while the pad is moving/resizing
* Make sure pads use correct sizes when autohide is off (Sham Chukoury)
* New Bulgarian translation (Yavor Doganov)
* New Kinyarwanda translation (Steve Murphy et al)

Version 2.6
* Stop pad windows from 'jumping' when dragged via the toolbar
* Updated Hungarian translation (Németh Csaba)
* Updated Irish translation (Kevin Patrick Scannell)
* Updated Vietnamese translation (Clytie Siddall)

Version 2.5
* Stop making all new pads start in top left
* Stop closing xpad if toggling window decorations with only one pad open
* Stop losing pad contents if upgrading from old versions of xpad

Version 2.4
* Create the configuration directory if it doesn't exist

Version 2.3
* Fixed a compile bug with binreloc and threading

Version 2.2
* Bumped GTK+ dependency to 2.6
* New About dialog (using GtkAboutDialog)
* New default location for configuration files: ~/.config/xpad
* Updated icon (now uses lighter colors)
* Use GOption for command-line parsing
* New command-line option --hide-old (or -H) to not show old pads
* Renamed command-line option --nonew to --no-new and added -N shortcut
* Allow running from console if we don't need to do anything graphical
* Readded keyboard shortcuts
* Updated antiquated man page
* New Hungarian translation (Németh Csaba)
* New Vietnamese translation (Clytie Siddall)
* Updated Irish translation (Kevin Patrick Scannell)

Version 2.1
* Fix tray icon being the wrong size
* Fix xpad to close when no tray and no open pads

Version 2.0
* Fix notes list to display correct number of pads
* Fix notification icon from not doing anything
* Fix compilation when BinReloc is disabled
* Fix compilation with gcc 3.4
* Fix endianness issue with preference files
* Updated Dutch translation (Elros Cyriatan)

Version 2.0-b3
* Use BinReloc to allow any-prefix installs of xpad to work
* Fixed a double-free bug that caused some problems with new pads
* Updated Irish translation (Kevin Patrick Scannell)
* Updated Spanish translation (Ramon Rey Vicente)

Version 2.0-b2
* Redesigned preferences and pad properties dialogs
* If the tray disappears (e.g. killall gnome-panel), xpad's icon reappears
* More formally ask window manager to make us skip taskbar and pager
* New, lighter default color for pads
* Lots of internal code cleanup
* Fixed a crasher with not being able to find window icons
* Fixed some crashers with turning off toolbar
* Fixed bug with text cursor color being one color change behind

Version 2.0-b1
* The text cursor is now always the same color as the text color
* Formatting can now be applied to selected text
* Pads remember their hidden state
* Rewritten toolbar, allowing easier adding/removing/moving buttons
* Simplified preferences dialog; many functions are now accessed from popup menu
* --new now also loads the old pads, instead of the previous broken behavior
* Fixed bug with pads over the 9th not having numbers in note lists
* Fixed bug with inter process communicating causing only first communication to work
* Fixed bug with pads becoming unstyled after closing and reopening
* New Afrikaans translation (Petri Jooste)
* New French translation (Michel Robitaille)

Version 1.13
* Don't close xpad if no pads are open but the system tray is
* Made translations work again
* New Spanish translation (Ramon Rey Vicente)
* Updated Dutch translation (Elros Cyriatan)
* Updated Irish translation (Kevin Patrick Scannell)

(obache)

configure require xgettext, msgmerge and msgfmt.

(obache)

Updated emulators/suse113_fontconfig to 11.3nb1

(ahoka)