Updated devel/xulrunner to 1.9.1.2

(tnn)

Update to xulrunner-1.9.1.2 (matches firefox-3.5.2 release)

(tnn)

xulrunnerize. Bump PKGREVISION
(only compile tested ...)

(tnn)

xulrunnerize. Bump PKGREVISION.
XXX: only compile tested, I don't know any consumer of this package.

(tnn)

repair getline(3) conflicts, "getline" -> "get_line"

(plunky)

Add patches provided by Adam Ciarcinski to fix build with recent versions
of OpenSSL (e.g. the version in NetBSD-current).

(tron)

Updated www/galeon to 2.0.7

(tnn)

Update to galeon-2.0.7. Use xulrunner.
XXX: Some stock icons appear to not work, is there a missing GNOME
dependency here?

2.0.7 "Surprise!"
- Works with Firefox 2/3 and Xulrunner 1.8/1.9
  - Restored support for http authentication by Mike Hommey <mh@glandium.org>
  - Restored support for remembering passwords.
  - Partially restored support for user stylesheets.
    - Effect is global rather than per page but UI doesn't reflect this.

2.0.6 "Pining for the Fjords"
- Works with Firefox 2  and 3 and xulrunner 1.8 and 1.9
  - Thanks to Alexander Sack <asac@ubuntu.com> and Lo誰c Minier <lool#dooz.org>
    for the xulrunner 1.9 patches.
  - With Firefox 3/xulrunner 1.9, functionality remains crippled as
    documented in the 2.0.5 release notes.
- Support for older versions of Mozilla have been removed.
  You can use 2.0.5 to build against them if you need to.
- GConf pref added to suppress close confirmation for web forms.

(tnn)

fix a busted .pc file.
Bump PKGREVISION again.

(tnn)

Note update of the "apache22" package to version 2.2.12.

(tron)

Update "apache22" package to version 2.2.12. Changes since version 2.2.11:
- SECURITY: CVE-2009-1891 (cve.mitre.org)
  Fix a potential Denial-of-Service attack against mod_deflate or other
  modules, by forcing the server to consume CPU time in compressing a
  large file after a client disconnects. Bug 39605.
  [Joe Orton, Ruediger Pluem]
- SECURITY: CVE-2009-1195 (cve.mitre.org)
  Prevent the "Includes" Option from being enabled in an .htaccess
  file if the AllowOverride restrictions do not permit it.
  [Jonathan Peatfield <j.s.peatfield damtp.cam.ac.uk>, Joe Orton,
  Ruediger Pluem, Jeff Trawick]
- SECURITY: CVE-2009-1890 (cve.mitre.org)
  Fix a potential Denial-of-Service attack against mod_proxy in a
  reverse proxy configuration, where a remote attacker can force a
  proxy process to consume CPU time indefinitely.  [Nick Kew, Joe Orton]
- SECURITY: CVE-2009-1191 (cve.mitre.org)
  mod_proxy_ajp: Avoid delivering content from a previous request which
  failed to send a request body. Bug 46949 [Ruediger Pluem]
- SECURITY: CVE-2009-0023, CVE-2009-1955, CVE-2009-1956 (cve.mitre.org)
  The bundled copy of the APR-util library has been updated, fixing three
  different security issues which may affect particular configurations
  and third-party modules.
- mod_include: fix potential segfault when handling back references
  on an empty SSI variable. [Ruediger Pluem, Lars Eilebrecht, Nick Kew]
- mod_alias: check sanity in Redirect arguments.
  Bug 44729 [S旦nke Tesch <st kino-fahrplan.de>, Jim Jagielski]
- mod_proxy_http: fix Host: header for literal IPv6 addresses.
  Bug 47177 [Carlos Garcia Braschi <cgbraschi gmail.com>]
- mod_rewrite: Remove locking for writing to the rewritelog.
  Bug 46942
- mod_alias: Ensure Redirect emits HTTP-compliant URLs.
  Bug 44020
- mod_proxy_http: fix case sensitivity checking transfer encoding
  Bug 47383 [Ryuzo Yamamoto <ryuzo.yamamoto gmail.com>]
- mod_rewrite: Fix the error string returned by RewriteRule.
  RewriteRule returned "RewriteCond: bad flag delimiters" when the 3rd
  argument of RewriteRule was not started with "[" or not ended with "]".
  Bug 45082 [Vitaly Polonetsky <m_vitaly topixoft.com>]
- mod_proxy: Complete ProxyPassReverse to handle balancer URL's.  Given;
    BalancerMember balancer://alias http://example.com/foo
    ProxyPassReverse /bash balancer://alias/bar
  backend url http://example.com/foo/bar/that is now translated /bash/that
  [William Rowe]
- New piped log syntax: Use "||process args" to launch the given process
  without invoking the shell/command interpreter.  Use "|$command line"
  (the default behavior of "|command line" in 2.2) to invoke using shell,
  consuming an additional shell process for the lifetime of the logging
  pipe program but granting additional process invocation flexibility.
  [William Rowe]
- mod_ssl: Add server name indication support (RFC 4366) and better
  support for name based virtual hosts with SSL. Bug 34607
  [Peter Sylvester <peter.sylvester edelweb.fr>,
  Kaspar Brand <asfbugz velox.ch>, Guenter Knauf, Joe Orton,
  Ruediger Pluem]
- mod_negotiation: Escape pathes of filenames in 406 responses to avoid
  HTML injections and HTTP response splitting.  Bug 46837.
  [Geoff Keating <geoffk apple.com>]
- mod_include: Prevent a case of SSI timefmt-smashing with filter chains
  including multiple INCLUDES filters. Bug 39369 [Joe Orton]
- mod_rewrite: When evaluating a proxy rule in directory context, do
  escape the filename by default. Bug 46428 [Joe Orton]
- mod_proxy_ajp: Check more strictly that the backend follows the AJP
  protocol. [Mladen Turk]
- mod_ssl: Add SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives
  to enable stricter checking of remote server certificates.
  [Ruediger Pluem]
- mod_substitute: Fix a memory leak. Bug 44948
  [Dan Poirier <poirier pobox.com>]
- mod_proxy_ajp: Forward remote port information by default.
  [Rainer Jung]
- mod_disk_cache/mod_mem_cache: Fix handling of CacheIgnoreHeaders
  directive to correctly remove headers before storing them.
  [Lars Eilebrecht]
- mod_deflate: revert changes in 2.2.8 that caused an invalid
  etag to be emitted for on-the-fly gzip content-encoding.
  Bug 39727 will require larger fixes and this fix was far more
  harmful than the original code. Bug 45023. [Roy T. Fielding]
- mod_disk_cache: The module now turns off sendfile support if
  'EnableSendfile off' is defined globally. Bug 41218.
  [Lars Eilebrecht, Issac Goldstand]
- prefork: Fix child process hang during graceful restart/stop in
  configurations with multiple listening sockets.  Bug 42829.  [Joe Orton,
  Jeff Trawick]
- mod_ssl: Add SSLRenegBufferSize directive to allow changing the
  size of the buffer used for the request-body where necessary
  during a per-dir renegotiation.  Bug 39243.  [Joe Orton]
- mod_rewrite: Introduce DiscardPathInfo|DPI flag to stop the troublesome
  way that per-directory rewrites append the previous notion of PATH_INFO
  to each substitution before evaluating subsequent rules.
  Bug 38642 [Eric Covener]
- mod_authnz_ldap: Reduce number of initialization debug messages and make
  information more clear. Bug 46342 [Dan Poirier]
- mod_cache: Introduce 'no-cache' per-request environment variable
  to prevent the saving of an otherwise cacheable response.
  [Eric Covener]
- core: Translate the status line to ASCII on EBCDIC platforms in
  ap_send_interim_response() and for locally generated "100 Continue"
  responses.  [Eric Covener]
- CGI: return 504 (Gateway timeout) rather than 500 when a script
  times out before returning status line/headers.
  Bug 42190 [Nick Kew]
- prefork: Log an error instead of segfaulting when child startup fails
  due to pollset creation failures.  Bug 46467.  [Jeff Trawick]
- mod_ext_filter: fix error handling when the filter prog fails to start,
  and introduce an onfail configuration option to abort

All the security problems mentioned above had already been fixed in
"pkgsrc" via patches. Thanks a lot to Adam Ciarcinski for letting me
know that new version had finally been released.

(tron)

Updated shells/bash to 4.0.28.
Updated lang/pcc-current to 0.9.9.20090731.
Updated www/midori to 0.1.9.

(hasso)

Update to 0.1.9. Correct URLs. Changes since 0.1.8:

+ Preserve navigation history with new tabs
+ Implement clearing private data when quitting
+ Ellipsize and show close icons in the tab panel
+ Allow hiding panel operating controls
+ Integrate Tools with the compact menu
+ Fix User scripts, User styles and Plugins panel
+ Remove the bookmarkbar popup
+ Add New Tab to the tab context menu
+ Implement minimizing tabs

(hasso)

note addition of xulrunner and update of firefox

(tnn)

Update to the snapshot from 090731.

(hasso)

Update to 4.0.28. Bugfixes.

(hasso)

Remove "apr" and "apr-util" as the packages have been updated.

(tron)

Added editors/Sigil version 0.1.1

(wiz)

+ Sigil.

(wiz)

Initial import of Sigil-0.1.1:

Sigil is a multi-platform WYSIWYG ebook editor. It is designed to
edit books in ePub format. Features:

    * Free and open source software under GPLv3
    * Multi-platform: runs on Windows, Linux and Mac
    * Full Unicode support: everything you see in Sigil is in UTF-16
    * Advanced automatic conversion of all imported documents to Unicode
    * Full EPUB spec support
    * WYSIWYG editing
    * Multiple Views: Book View, Code View and Split View
    * Metadata editor with full support for all possible metadata
      entries (more than 200) with full descriptions for each
    * Multi-level Table Of Contents editor
    * Book View fully supports the display of any XHTML document
      possible under the OPS spec
    * SVG support and basic XPGT support
    * Currently imports TXT, HTML and EPUB files
    * Currently exports EPUB and SGF (Sigil native format)
    * Embedded HTML Tidy; all imported documents are thoroughly
      cleaned; changing views cleans the document so no matter how
      much you screw up your code, it will fix it (usually )
    * An actually usable user interface

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-20090806

(wiz)

Update patches for emacs-23.1.

These should have been committed when emacs was updated.

(minskim)

Note update of www/opengoo package to 1.5.1nb1.

(taca)

Since distfiles are updated silently, use DIST_SUBDIR now.
Reported by PR pkg/41826 from Robert Elz.

Bump PKGREVISION.

(taca)

PKGREVISION bump for elisp packages because of bytecode format changes
in emacs23.

(minskim)

mail/mailcrypt can be built with emacs23.

(minskim)

devel/js2-mode can be built with emacs23.

(minskim)

Add wl-snapshot.

(minskim)

Import wl-2.15.6.20090322 as mail/wl-snapshot.

This is the development version of mail/wl.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(minskim)

Add emacs-w3m-snapshot.

(minskim)

Import emacs-w3m-1.4.364.20090802 as www/emacs-w3m-snapshot.

This is the development version of www/emacs-w3m.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(minskim)

Let EMACS_TYPE support editors/emacs and editors/emacs-nox11 as
emacs23 and emacs23nox, respectively; editors/emacs is the default
one.

(minskim)

Add emacs22 and emacs22-nox11.

(minskim)

Note update of editors/emacs{,-nox11}.

(minskim)

Update editors/emacs and editors/emacs-nox11 to 23.1.

Major changes:
- Improved Unicode support.
- Font rendering with Fontconfig and Xft.
- Support for using X displays and text terminals in one session, and
  for running as a daemon.
- Support for multi-file commits in distributed version-control
  systems (VC-dir).
- The default X toolkit is now Gtk+, rather than Lucid.

(minskim)

deal with CVE-2009-2369 -- neither the advisory nor anything it links
to give useful information, just spotted an obvious case where data
passed from subclasses are used for malloc() unchecked, so added a check.
I can't claim that the CVE report is fixed because it is not clear what
it is about, but it seems that this fixes an issue.
bump PKGREVISION

(drochner)

Add a few more include subdirs

(tnn)

Instead of picking what headers to install, just drop $everything
in include/xulrunner/unstable and call it a day. Suggested by drochner@
(This mostly fixes build of "www/galeon".)

(tnn)

the .pc file requires ndesk-dbus

(drochner)

for sanity, include "python/application.mk" first

(drochner)

this needs gmake, at least for me

(drochner)

update to 1.2.7
changes:
-new danish translation
-fixed "client not found" in gtklpq
-fixed compiler warnings

(drochner)

update to 1.3.11
changes:
The new release fixes some scheduler and web interface issues and
improves PDF printing.

(drochner)

fix a whacky calendar calculation: UTC cannot have DST
bump PKGREVISION

(drochner)

fix an inconsistency: "luit" support was always enabled, but without
it being present at build time it didn't work. Make it an option.

(drochner)

update to 4.2.1
major changes:
Locale Data: ICU uses and supports data from Common Locale Data Repository
(CLDR) 1.7 , which includes data for 146 languages, 159 territories,
468 locales- 21% more locale data than the previous release.
Number system support and the number keyword.
Number system override in DateFormat
Numerics used by Hebrew Calendar date in Hebrew locale
BCP47 (language tag) / Locale transformation
BCP47 mapping of LDML keywords
Encoding selector: Return a list of charsets that can handle the input text
Simple duration: Implementation of CLDR duration format
Available/Preferred keywords for a locale (Calendar, Collation, and Currency)
StringPrep standard profiles: RFC3491 NAMEPREP, RFC3530 NFS4, RFC3722 iSCSI,
RFC3920 NodePrep/ResourcePrep, RFC4011 MIB, RFC4013 SASLprep, RFC4505 trace
and RFC4518 LDAPprep
Miscellaneous Arabic shaping enhancements
UTF-8 friendly internal data structure for Unicode data lookup
API to get CLDR version used by ICU
ISCII charset converter updates (added Gurumukhi, other updates)
Performance improvements in Time Zone Name format/parse, and in
DateIntervalFormat construction

(drochner)

update to 1.6.0
changes: minor bugfix, update of sv translation

(drochner)

g/c unneeded omf file handling

(drochner)

nxml-mode is included in emacs23.  Noted by wiz@.

(minskim)

Note update of www/opengoo package to 1.5.1.

(taca)

Update OpenGoo package to 1.5.1.

OpenGoo 1.5.1 has just been released. Several bugs from version 1.5
were fixed forq this release, including:

- Tags permissions. Now a user can only see tags applied to objects
  that the user can view.
- Some milestones were showing in wrong workspaces.
- Custom properties defined in Administration are now searchable.
- Memory exhausted error when rendering repetitive tasks with an old
  date in the calendar.
- Fatal error when copying a milestone.
- Fatal error "undefined function saveFileAttributes" when uploading a file.
- Fixed the permissions control when editing a workspace's permissions.
- Fixed a small rendering problem with invited users in event edition.
- Fixed error when sending emails to empty recipients.
- Fixed default user preferences' rendered value.
- Fixed a rendering problem in comments and descriptions that would skip
  a character before an email address or link.
- Tags query was using a hardcoded 'og_' table prefix.
- Translate OpenGoo tool now includes subfolders of language folders.
  Checklang also improved.
- Files of type audio/mp3 are now correctly identified as MP3.
- Updated langs.

(taca)

Split list of internal headers to install into it's own file. Add more.

(tnn)

mark as deprecated

(tnn)

switch to the latest firefox, bump version to 0.3

(tnn)

Pullup tickets #2848, #2849 and #2850.

(tron)

Pullup ticket #2850 - requested by taca
squid30: security update

Revisions pulled up:
- www/squid30/Makefile 1.15
- www/squid30/distinfo 1.13
---
Module Name: pkgsrc
Committed By: taca
Date: Wed Aug  5 01:47:11 UTC 2009

Modified Files:
pkgsrc/www/squid30: Makefile distinfo

Log Message:
Update squid30 package to 3.0.18 (3.0.STABLE18).

It contains some critical problem of 3.0.17 and really fix security
problem according to updated SQUID-2009_2.txt.

Changes to squid-3.0.STABLE18 (04 Aug 2009):

- Bug 2728: regression: assertion failed: !eof
- Bug 2732: reply_body_max_size smaller than error page loops
            infinitely until out of memory
- Bug 2725: pconn failure if domain or client_address are unset
- Bug 2648: reserved helpers not shut down after reconfigure/rotate
- Bug 2462: make check should tell when cppunit is missing
- Remove excess messages about headers < minimum size
- Support Libtool 2.2.6

(tron)

Fix breakages introduced with previous commit.

(hasso)

Updated audio/faac to 1.25nb1

(ahoka)

Make faac restricted as noted in its README.

Closes PR pkg/41739.

(ahoka)

Make the faac option enable restricted binaries.

Closes PR pkg/41739.

(ahoka)

Pullup ticket #2849 - requested by tnn
firefox3: security update

Revisions pulled up:
- www/firefox3/Makefile 1.35
- www/firefox3/PLIST 1.11
- www/firefox3/distinfo 1.27
- www/firefox3/patches/patch-dk 1.3
---
Module Name: pkgsrc
Committed By: tnn
Date: Tue Aug  4 21:28:42 UTC 2009

Modified Files:
pkgsrc/www/firefox3: Makefile PLIST distinfo
pkgsrc/www/firefox3/patches: patch-dk

Log Message:
Update to firefox3-3.0.13. Fixes the following advisories:
MFSA 2009-44 Location bar and SSL indicator spoofing via window.open()
on invalid URL
MFSA 2009-43 Heap overflow in certificate regexp parsing
MFSA 2009-42 Compromise of SSL-protected communication

(tron)

Tonights updates.

(markd)

Update py-matplotlib* to 0.98.4

various bug fixes and new features.

(markd)

Updated textproc/p5-PDF-API2

(adam)

Changes 0.73:
* Bug fixes.

(adam)

add LICENSE

(markd)

emacs22 is now in editors/emacs22.

(minskim)

Update to sphinx 0.6.2

* Incompatible changes:

  - Templating now requires the Jinja2 library

  - The "document" div tag has been moved out of the ``layout.html``
    template's "document" block

  - The ``autodoc_skip_member`` event now also gets to decide
    whether to skip members whose name starts with underscores.

* Theming support

* Markup:

  - Due to popular demand, added a ``:doc:`` role which directly
    links to another document without the need of creating a
    label to which a ``:ref:`` could link to.

  - Added a ``:download:`` role that marks a non-document file
    for inclusion into the HTML output and links to it.

  - Added an ``only`` directive that can selectively include text
    based on enabled "tags".

  - Added HTML section numbers, enabled by giving a
    ``:numbered:`` flag to the ``toctree`` directive.

  - Scaled images now get a link to the unscaled version.

  - SVG images are now supported in HTML (via ``<object>`` and
    ``<embed>`` tags).

* Builders:

  - New builder for Qt help collections, by Antonio Valentino.

  - The new ``DirectoryHTMLBuilder`` (short name ``dirhtml``) creates
    a separate directory for every page, and places the page there
    in a file called ``index.html``.

* New translations:

* Bug Fixes.

(markd)

Pullup ticket #2848 - requested by adrianp
wordpress: security update

Revisions pulled up:
- www/wordpress/Makefile 1.4
- www/wordpress/distinfo 1.3
---
Module Name: pkgsrc
Committed By: adrianp
Date: Tue Aug 4 21:32:40 UTC 2009

Modified Files:
pkgsrc/www/wordpress: Makefile distinfo

Log Message:
WordPress 2.8.3 Security Release

Unfortunately, I missed some places when fixing the privilege escalation issues
for 2.8.1.  Luckily, the entire WordPress community has our backs.  Several
folks in the community dug deeper and discovered areas that were overlooked.
With their help, the remaining issues are fixed in 2.8.3.  Since this is a
security release, upgrading is highly recommended.

(tron)

Import emacs-nox11-22.3nb2 in editors/emacs-nox11 as
editors/emacs22-nox11.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(minskim)

Import emacs-22.3nb2 in editors/emacs as editors/emacs22;
editors/emacs will be updated to 23.1.

Proposed by obache@, and OK'ed by markd@ and drochner@.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(minskim)

Note update of the "squid31" package to version 3.1.0.13.

(tron)

Update "squid31" package to version 3.1.0.13.
Changes since version 3.1.0.12:
- Bug 2723 regression: enable PURGE requests if PURGE method ACL is present.
- Fix one more internal profiler error
- Language Updates: Italian, Russian
- Language Updates: Add many more aliases
- Add Copyright document for errors/ content
- ... all bug fixes from 3.0.STABLE18
- ... and several code polishing cleanups

(tron)

add py-jinja2

(markd)

Initial import py-jinja2 2.1.1

Jinja2 is a template engine written in pure Python. It provides a Django
inspired non-XML syntax but supports inline expressions and an optional
sandboxed environment.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Set load-path during byte-compile to make sure that rsltc.el is found.

(minskim)

EMACS_VERSIONS_ACCEPTED must be defined before including
emacs/modules.mk.

(minskim)

calc is included in emacs>=22.

(minskim)

security/EasyPG can be built with emacs23.

(minskim)

misc/lookup can be built with emacs23.

(minskim)

textproc/nxml-mode can be built with emacs23.

(minskim)

Make inputmethod/skk build with emacs23.

(minskim)

Make anthy-elisp build with emacs23.

(minskim)

editors/tamago can be built with emacs23.

(minskim)

"23" is a valid value for EMACS_VERSION_MAJOR.

(minskim)

devel/python-mode can be built with emacs23.

(minskim)

chat/riece can be built with emacs23.

(minskim)

use xulrunner for gecko
PKGREVISION++

(tnn)

Install additional header files. This list will be extended later
as more packages are converted to use xulrunner.
(There are the headers needed to allow misc/yelp to build.)
PKGREVISION++

(tnn)

Note py-feedparser update.

(schmonz)

Update to 4.2-pre-294. From the commit log:

* Handle Jacques distler's nested svg/mathml
* Render correctly when item description contains <code> with <br />
* Add "controls" attribute for video
* Strip "autoplay" attribute from video

(schmonz)

Use xulrunner instead of firefox as a gecko provider.
Bump PKGREVISION.

(tnn)

add xulrunner

(tnn)

Import xulrunner-1.9.1 as devel/xulrunner.

XULRunner is a runtime environment for applications using the
XML User Interface Language, XUL. It is the successor of the "Gecko"
runtime environment.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(tnn)

fix comment

(tnn)

resurrect file still needed by www/firefox3

(tnn)

merge pkgsrc-20090805

(tnn)

Import firefox-3.5.2 as www/firefox. from pkgsrc-wip.

Firefox 3.5  is based on the Gecko 1.9.1 rendering platform.
Firefox 3.5 offers many changes over the previous version, supporting new web
technologies, improving performance and ease of use.
Some of the notable features are:

* Support for the HTML5 <video> and <audio> elements
* Improved tools for controlling your private data
* Better web application performance using the new TraceMonkey JavaScript engine
* The ability to share your location with websites using Location Aware Browsing
* Support for native JSON, and web worker threads.
* Improvements to the Gecko layout engine, including speculative parsing for
  faster content rendering.
* Support for new web technologies such as: downloadable fonts, CSS media
  queries, new transformations and properties, JavaScript query selectors,
  HTML5 local storage and offline application storage, <canvas> text,
  ICC profiles, and SVG transforms.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-20090805

(tnn)

cvs add forgotten before previous commit

(manu)

Note update of www/squid30 package to 3.0.18.

(taca)

Update squid30 package to 3.0.18 (3.0.STABLE18).

It contains some critical problem of 3.0.17 and really fix security
problem according to updated SQUID-2009_2.txt.

Changes to squid-3.0.STABLE18 (04 Aug 2009):

- Bug 2728: regression: assertion failed: !eof
- Bug 2732: reply_body_max_size smaller than error page loops
            infinitely until out of memory
- Bug 2725: pconn failure if domain or client_address are unset
- Bug 2648: reserved helpers not shut down after reconfigure/rotate
- Bug 2462: make check should tell when cppunit is missing
- Remove excess messages about headers < minimum size
- Support Libtool 2.2.6

(taca)