Fix install with USE_DESTDIR set. Bump pkgrevision

(abs)

Stop being MAINTAINER here, as this tracks pine, which I am no longer maintaining.

(jwise)

Stop maintaining this -- this is an out-of-date version needed by the
version of pine in mail/pine.  I've switched to mail/alpine as MUA, and
mail/dovecot for imap service, and so should you.

This package should be updated to the current version of imap-uw.  Although
we are _not_ vulnerable to the current secunia advisory for imap-uw -- we do
not install tmail or dmail with the setuid bit set, nor advise users to
configure their mta to pass untrusted mailbox names to dmail on the command
line (who would do this?), there will eventually be a vulnerability which
does affect this old version.

However, as long as we support mail/pine, upgrading is not quite
straightforward -- the last version of mail/pine links against the version
of imap-uw currently included herein, and an upgrade would require testing.

(jwise)

Give up maintaining pine -- I have switched to alpine (the successor from
the same development team), and so should you.

(jwise)

-ktorrent-2.2.8

(obache)

libfetch-2.20:
Allow HTTP basic auth to be specified in the URL. Also allow : in the
password while here.

(joerg)

Updated net/ktorrent to 2.2.8

(obache)

Update ktorrent to 2.2.8.

Changes in 2.2.8 :
- Backported some security fixes for the webinterface from KDE4 version

(obache)

Updated ed.

(reed)

Update to 1.1

This includes a security fix.

>From ChangeLog:

2008-10-14  Antonio Diaz  <ant_diaz@teleline.es>

* Version 1.1 released.
* configure: Quote arguments stored in config.status.

2008-08-21  Antonio Diaz  <ant_diaz@teleline.es>

* Version 1.0 released.
* configure: Added option `--program-prefix'.
* signal.c (strip_escapes): Buffer overflow fixed.
* signal.c (resize_buffer): Pointer aliasing warning fixed.

(reed)

+ktorrent-2.2.8

(obache)

Pullup ticket #2572.

(tron)

Pullup ticket #2572 - requested by ahooka
vlc: security update

Revisions pulled up:
- multimedia/vlc/Makefile 1.63
- multimedia/vlc/PLIST 1.21-1.22
- multimedia/vlc/distinfo 1.21
- multimedia/vlc/options.mk 1.10
---
Module Name:    pkgsrc
Committed By:  ahoka
Date:          Wed Oct 29 00:41:44 UTC 2008

Modified Files:
        pkgsrc/multimedia/vlc: PLIST

Log Message:
Remove duplicate elements from PLIST ruining -x11 builds.
---
Module Name: pkgsrc
Committed By: ahoka
Date: Sat Nov  1 22:14:13 UTC 2008

Modified Files:
pkgsrc/multimedia/vlc: Makefile PLIST distinfo options.mk

Log Message:
This update is also fixing a minor PLIST issue.

Changes between 0.9.4 and 0.9.5:
- --------------------------------
Security updates:
* Fixed buffer overflow in TiVo demuxer (SA-0809, CVE-2008-4686, CVE-2008-4654)
* Fixed libpng CVE-2008-3964 in Win32 and MacOS builds

Features:
* Closed Caption EIA 608/708 parsing enabled for libmpeg2

Various bugfixes:
* Fixed various potential crashes and memleaks
* Fixed issues with reading from files (especially non-local)

Windows port:
* Fix bug where interface was "eating" some media keys
* Fix some crashes in DirectShow access

Qt Interface:
* Fix bug when the resetting of preferences didn't reset the dialog states
* Right-click menu to select playlist columns reenabled
* Various fixed in playlist

Access:
* MMAP module is now deactivated by default

Translations:
* Update of Brazillian, Swedish translation

(tron)

ticket #2574

(rtr)

pullup ticket #2574 - requested by bouyer
cups: update package for security and bug fixes

revisions pulled up:
cvs rdiff -r1.135 -r1.136 pkgsrc/print/cups/Makefile
cvs rdiff -r1.24 -r1.25 pkgsrc/print/cups/PLIST
cvs rdiff -r1.56 -r1.57 pkgsrc/print/cups/distinfo
cvs rdiff -r1.11 -r0 pkgsrc/print/cups/patches/patch-au

  Modified Files:
          pkgsrc/print/cups: Makefile PLIST distinfo
  Removed Files:
          pkgsrc/print/cups/patches: patch-au

  Log Message:
  Upgrade cups to version 1.3.9 in order to fix CVE-2008-3639, CVE-2008-3640
  and CVE-2008-3641. Also, it fixes a ton of bugs and has portability
  enhancements. Full list of changes:

    - SECURITY: The HP-GL/2 filter did not range check pen numbers
      (STR #2911)
    - SECURITY: The SGI image file reader did not range check
      16-bit run lengths (STR #2918)
    - SECURITY: The text filter did not range check cpi, lpi, or
      column values (STR #2919)
    - Documentation updates (STR #2904, STR #2944)
    - The French web admin page was never updated (STR #2963)
    - The IPP backend did not retry print jobs when the printer
      reported itself as busy or unavailable (STR #2951)
    - The "Set Allowed Users" web interface did not handle trailing
      whitespace correctly (STR #2956)
    - The PostScript filter did not work with Adobe applications
      using custom page sizes (STR #2968)
    - The Mac OS X USB backend did not work with some printers
      that reported a bad 1284 device ID.
    - The scheduler incorrectly resolved the client connection
      address when HostNameLookups was set to Off (STR #2946)
    - The IPP backend incorrectly stopped the local queue if
      the remote server reported the "paused" state.
    - The cupsGetDests() function did not catch all types of
      request errors.
    - The scheduler did not always log "job queued" messages
      (STR #2943)
    - The scheduler did not support destination filtering using
      the printer-location attribute properly (STR #2945)
    - The scheduler did not send the server-started,
      server-restarted, or server-stopped events (STR #2927)
    - The scheduler no longer enforces configuration file
      permissions on symlinked files (STR #2937)
    - CUPS now reinitializes the DNS resolver on failures
      (STR #2920)
    - The CUPS desktop menu item was broken (STR #2924)
    - The PPD parser was too strict about missing keyword
      values in "relaxed" mode.
    - The PostScript filter incorrectly mirrored landscape
      documents.
    - The scheduler did not correctly update the
      auth-info-required value(s) if the AuthType was Default.
    - The scheduler required Kerberos authentication for
      all operations on remote Kerberized printers instead
      of just for the operations that needed it.
    - The socket backend could wait indefinitely for back-
      channel data with some devices.
    - PJL panel messages were not reset correctly on older
      printers (STR #2909)
    - cupsfilter used the wrong default path (STR #2908)
    - Fixed address matching for "BrowseAddress @IF(name)"
      (STR #2910)
    - Fixed compiles on AIX.
    - Firefox 3 did not work with the CUPS web interface in SSL
      mode (STR #2892)
    - Custom options with multiple parameters were not emitted
      correctly.
    - Refined the cupstestppd utility.
    - ppdEmit*() did not support custom JCL options (STR #2889)
    - The cupstestppd utility incorrectly reported missing
      "en" base translations (STR #2887)
    - Documentation updates (STR #2785, STR #2861, STR #2862)
    - The scheduler did not add the ending job sheet when the
      job was released.
    - The IPP backend did not relay marker-* attributes.
    - The CUPS GNOME/KDE menu item was not localized for
      Chinese (STR #2880)
    - The CUPS GNOME/KDE menu item was not localized for
      Japanese (STR #2876)
    - The cupstestppd utility reported mixed line endings for
      Mac OS and Windows PPD files (STR #2874)
    - The pdftops filter did not print landscape orientation PDF
      pages correctly on all printers (STR #2850)
    - The scheduler did not handle expiring of implicit classes
      or their members properly, leading to a configuration where
      one of the members would have a short name (STR #2766)
    - The scheduler and cupstestppd utilities did not support
      cupsFilter and cupsPreFilter programs with spaces in their
      names (STR #2866)
    - Removed unused variables and assignments found by the
      LLVM "clang" tool.
    - Added NULL checks recommended by the LLVM "clang" tool.
    - The scheduler would crash if you started a printer that
      pointed to a backend that did not exist (STR #2865)
    - The ppdLocalize functions incorrectly mapped all generic
      locales to country-specific locales.
    - The cups-driverd program did not support Simplified Chinese
      or Traditional Chinese language version strings (STR #2851)
    - Added an Indonesian translation (STR #2792)
    - Fixed a timing issue in the backends that could cause data
      corruption with the CUPS_SC_CMD_DRAIN_OUTPUT side-channel
      command (STR #2858)
    - The scheduler did not support "HostNameLookups" with all of
      the boolean names (STR #2861)
    - Fixed a compile problem with glibc 2.8 (STR #2860)
    - The PostScript filter did not support %%IncludeFeature lines
      in the page setup section of each page (STR #2831)
    - The scheduler did not generate printer-state events when the
      default printer was changed (STR #2764)
    - cupstestppd incorrectly reported a warning about the PPD format
      version in some locales (STR #2854)
    - cupsGetPPD() and friends incorrectly returned a PPD file for
      a class with no printers.
    - The member-uris values for local printers in a class returned
      by the scheduler did not reflect the connected hostname or
      port.
    - The CUPS PHP extension was not thread-safe (STR #2828)
    - The scheduler incorrectly added the document-format-default
      attribute to the list of "common" printer attributes, which
      over time would slow down the printing system (STR #2755,
      STR #2836)
    - The cups-deviced and cups-driverd helper programs did not set
      the CFProcessPath environment variable on Mac OS X (STR #2837)
    - "lpstat -p" could report the wrong job as printing (STR #2845)
    - The scheduler would crash when some cupsd.conf directives
      were missing values (STR #2849)
    - The web interface "move jobs" operation redirected users to
      the wrong URL (STR #2815)
    - The Polish web interface translation contained errors
      (STR #2815)
    - The scheduler did not report PostScript printer PPDs with
      filters as PostScript devices.
    - The scheduler did not set the job document-format attribute
      for jobs submitted using Create-Job and Send-Document.
    - cupsFileTell() did not work for log files opened in append
      mode (STR #2810)
    - The scheduler did not set QUERY_STRING all of the time
      for CGI scripts (STR #2781, STR #2816)
    - The scheduler now returns an error for bad job-sheets
      values (STR #2775)
    - Authenticated remote printing did not work over domain
      sockets (STR #2750)
    - The scheduler incorrectly logged errors for print filters
      when a job was canceled (STR #2806, #2808)
    - The scheduler no longer allows multiple RSS subscriptions
      with the same URI (STR #2789)
    - The scheduler now supports Kerberized printing with
      multiple server names (STR #2783)
    - "Satisfy any" did not work in IPP policies (STR #2782)
    - The CUPS imaging library would crash with very large
      images - more than 16Mx16M pixels (STR #2805)
    - The PNG image loading code would crash with large images
      (STR #2790)
    - The scheduler did not limit the total number of filters.
    - The scheduler now ensures that the RSS directory has
      the correct permissions.
    - The RSS notifier did not quote the feed URL in the RSS
      file it created (STR #2801)
    - The web interface allowed the creation and cancellation
      of RSS subscriptions without a username (STR #2774)
    - Increased the default Maxpies value on Mac OS X to
      9999 to match the limit imposed by the print dialog.
    - The scheduler did not reject requests with an empty
      Content-Length field (STR #2787)
    - The scheduler did not log the current date and time and
      did not escape specicharacters in request URIs when
      logging bad requests to the access_log file (STR #2788)

(rtr)

ticket #2573

(rtr)

pullup ticket #2573 - requested by martti
clamav: update package for bug fixes

revisions pulled up:
pkgsrc/mail/clamav/Makefile 1.88
pkgsrc/mail/clamav/buildlink3.mk 1.17
pkgsrc/mail/clamav/distinfo 1.55
pkgsrc/mail/clamav/patches/patch-ad 1.16
pkgsrc/mail/clamav/patches/patch-af 1.7
pkgsrc/mail/clamav/patches/patch-ah 1.17

  Module Name:    pkgsrc
  Committed By:  martti
  Date:          Tue Nov  4 07:16:18 UTC 2008

  Modified Files:
          pkgsrc/mail/clamav: Makefile buildlink3.mk distinfo
          pkgsrc/mail/clamav/patches: patch-ad patch-af patch-ah

  Log Message:
  Updated mail/clamav to 0.94.1

  * Bug fixes

(rtr)

Pullup ticket #2568 and #2569.

(tron)

Pullup ticket #2569 - requested by adrianp
mantis: security update

Revisions pulled up:
- devel/mantis/Makefile 1.33
- devel/mantis/distinfo 1.13
---
Module Name:    pkgsrc
Committed By:  adrianp
Date:          Sun Nov  2 17:25:18 UTC 2008

Modified Files:
        pkgsrc/devel/mantis: Makefile distinfo

Log Message:
Update to 1.1.4

2008.10.18 - 1.1.4
===================================

We had to withdraw 1.1.3 because of a serious flaw affecting the
bug_report* pages. This new release fixes that problem and a newly
discovered security issue.

- 0009704: [security] Remote Code Execution in manage_proj_page.php
(giallu) - resolved.
- 0009691: [bugtracker] Failed to report issue.(Always APPLICATION ERROR
#2800) (jreese) - resolved.
- 0009690: [other] Wrong parameter count for session_set_cookie_params()
(jreese) - resolved.
- 0009693: [webpage] Generated HTML contains multiple hostnames when
proxied (jreese) - resolved.

2008.10.09 - 1.1.3
===================================

In this release we fixed a couple of nasty bugs sneaked into 1.1.2,
where sending bugnotes email notifications would fail and browser
caching was not functional.

We also refined the implementation of form security tokens and closed a
couple of security issues, an information disclosure (with no CVE) and a
session hijacking (CVE-2008-3102).

- 0009321: [security] Users can get title and status of issues that they
don't have access to. (vboctor) - resolved.
- 0009533: [security] Mantis should use secure sessions on https
connections (jreese) - resolved.
- 0009286: [administration] stray "2" in manage_user_prune.php (vboctor)
- resolved.
- 0009664: [authentication] Logout without unsetting session cookie
(jreese) - resolved.
- 0009323: [bugtracker] Browser caching broken since 1.1.2 (jreese) -
resolved.
- 0009470: [bugtracker] Tags filter not filling into text field when
selecting from list using Internet Explorer (jreese) - resolved.
- 0009493: [custom fields] Removing custom fields from project causes
application error 2800 (giallu) - resolved.
- 0009309: [email] Problems with e-mail notifications about bugnotes
[PATCH] (giallu) - resolved.
- 0004678: [filters] Filter combos don't fill up on if switched to 'All
Projects' - closed.
- 0009430: [graphs] bug_graph_bystatus shows heading by_category
(thraxisp) - resolved.
- 0009431: [localization] no localization for usage of open, resolved,
closed in bug_graph_bystatus.php (thraxisp) - resolved.
- 0008882: [other] Gravatar causes annoying security popups on IE when
using Mantis over HTTPS/SSL (jreese) - resolved.
- 0009361: [other] php session fail created cause mantis app error.
(jreese) - resolved.
- 0009560: [other] Wrong behaviour in Session API (session_save_path
error message) (jreese) - resolved.
- 0009672: [other] Fixing form error by going back fails because of
security token (jreese) - resolved.
- 0009343: [scripting] form security token prevents changing
relationship while resolving bug (jreese) - resolved.

(tron)

add qimageblitz, rasqal, redland, libclucene, soprano and strigi

(markd)

ticket #2570

(rtr)

pullup ticket #2570 - requested by adrianp
dovecot: update package for security fixes

revisions pulled up:
pkgsrc/mail/dovecot/Makefile 1.122, 1.123
pkgsrc/mail/dovecot/PLIST 1.22
pkgsrc/mail/dovecot/distinfo 1.87, 1.88

  Module Name:    pkgsrc
  Committed By:  ghen
  Date:          Wed Oct 22 21:16:36 UTC 2008

  Modified Files:
          pkgsrc/mail/dovecot: Makefile PLIST distinfo

  Log Message:
  Update to Dovecot 1.1.5.  Changes since 1.1.4:

  * Dovecot prints an informational message about authentication problems
    at startup. The message goes away after the first successful
    authentication. This hopefully reduces the number of "Why doesn't
    my authentication work?" questions.

  + Maildir/dbox: Try harder to assign unique UIDVALIDITY values to
    mailboxes to avoid potential problems when recreating or renaming
    mailboxes. The UIDVALIDITY is tracked using dovecot-uidvalidity*
    files in the mail root directory.
  + Many logging improvements
  - In some conditions Dovecot could have stopped using existing cache
    file and never used it again until it was deleted.
  - pop3 + Maildir: Make sure virtual sizes are always written to
    dovecot-uidlist. This way if the indexes are lost Dovecot will never
    do a huge amount of work to recalculate them.
  - mbox: Fixed listing mailboxes in namespaces with prefix beginning
    with '~' or '/' (i.e. UW-IMAP compatibility namespaces didn't work).
  - dict quota: Don't crash when recalculating quota (when quota warnings
    enabled).
  - Fixes to handling "out of disk space/quota" failures.
  - Blocking passdbs/userdbs (e.g. PAM, MySQL) could have failed lookups
    sometimes when auth_worker_max_request_count was non-zero.
  - Fixed compiling with OpenBSD
  ------------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  adrianp
  Date:          Sun Nov  2 16:19:53 UTC 2008

  Modified Files:
          pkgsrc/mail/dovecot: Makefile distinfo

  Log Message:
  Update to 1.1.6
  Ok'ed geert@
  The invalid message address parsing bug is pretty important since it
  allows a remote user to send broken mail headers and prevent the
  recipient from accessing the mailbox afterwards, because the process
  will always just crash trying to parse the header. This is assuming that
  the IMAP client uses FETCH ENVELOPE command, not all do. Note that it
  doesn't affect versions older than v1.1.4.

          + dovecot -n and -a now prints some system information at the top.
          + More error/debug message logging improvements.
          - pop3-login: Fixed assert-crash if a client sent USER+PASS+USER+PASS
            commands in the same IP packet.
          - Parsing an invalid message address like "From: (" caused an
            assert-crash in v1.1.4 and v1.1.5.
          - Folding whitespace wasn't handled correctly inside quoted-strings,
            causing some messages to be parsed incorrectly.
          - mbox: Fixed saving messages that begin with a valid From_-line.

(rtr)

Add strigi.

(markd)

Import strigi 0.5.10

Strigi is a daemon which uses a very fast and efficient crawler that can index
data on your harddrive. Indexing operations are performed without hammering
your system, this makes Strigi the fastest and smallest desktop searching
program.  Strigi can index different file formats, including the contents of
the archive files.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Add libclucene and soprano

(markd)

Import soprano 2.1

Soprano (formerly known as QRDF) is a library which provides a highly
usable object-oriented C++/Qt4 framework for RDF data. It uses
different RDF storage solutions as backends through a simple plugin
system. Soprano is targetted at desktop applications that need a RDF
data storage solution. It has been optimized for easy usage and
simplicity.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Import libclucene 0.9.21nb1 from pkgsrc-wip

CLucene is a high-performance, scalable, cross platform, full-featured,
open-source indexing and searching API. It is written in C++.

CLucene is a port of the very popular Java Lucene text search engine API.
Specifically, CLucene is the guts of a search engine, the hard stuff.
You write the easy stuff, the UI and the process of selecting and parsing your
data files to pump them into the search engine yourself.

CLucene aims to be a good alternative to Java Lucene when performance really
matters or if you want to stick to good old C++.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Pullup ticket #2568 - requested by adrianp
libspf2: security update

Revisions pulled up:
- mail/libspf2/Makefile 1.3
- mail/libspf2/distinfo 1.2
---
Module Name: pkgsrc
Committed By: adrianp
Date: Fri Oct 24 23:35:09 UTC 2008

Modified Files:
pkgsrc/mail/libspf2: Makefile distinfo

Log Message:
Update to 1.2.8

Unfortunately details changes don't seem to be available:

After a long hiatus, new releases of libspf2! Development work from a number
of contributors has resulted in the release of versions up to 1.2.8. It is
recommended that all users upgrade as soon as possible, since this release
fixes some significant bugs. This release also comes with new doxygen
documentation which should make the code easier to understand and
cross-reference.

Includes the fix for CVE-2008-2469

(tron)

Add rasqal and redland

(markd)

Import redland 1.0.7

Redland is a set of free software libraries that provide support for the
Resource Description Framework (RDF).
* Modular, object based libraries and APIs for manipulating the RDF graph,
  triples, URIs and Literals.
* Storage for graphs in memory and persistently with Sleepycat/Berkeley DB,
  MySQL 3-5, PostgreSQL, AKT Triplestore, SQLite, files or URIs.
* Support for multiple syntaxes for reading and writing RDF as RDF/XML,
  N-Triples and Turtle Terse RDF Triple Language, RSS and Atom syntaxes via
  the Raptor RDF Parser Toolkit.
* Querying with SPARQL and RDQL using the Rasqal RDF Query Library.
* Data aggregation and recording provenance support with Redland contexts.
* Language Bindings in Perl, PHP, Python and Ruby via the Redland Bindings
  package.
* Command line utility programs rdfproc (RDF), rapper (parsing) and roqet
  (query).
* Portable, fast and with no known memory leaks.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Import rasqal 0.9.15

Rasqal is a free software / Open Source C library that handles
Resource Description Framework (RDF) query syntaxes,
query construction and query execution returning result bindings.
The supported query languages are SPARQL and RDQL.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Add qimageblitz

(markd)

Import qimageblitz 0.0.4

Interm graphical effect and filter library for KDE4.0

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Updated games/crossfire; databases/postgresql

(adam)

Changes 8.3.5:
* Fix GiST index corruption due to marking the wrong index entry
  "dead" after a deletion.
  This would result in index searches failing to find rows they
  should have found.
* Fix backend crash when the client encoding cannot represent a
  localized error message.
  We have addressed similar issues before, but it would still fail if
  the "character has no equivalent" message itself couldn't be
  converted. The fix is to disable localization and send the plain
  ASCII error message when we detect such a situation.
* Fix possible crash in bytea-to-XML mapping.
* Fix possible crash when deeply nested functions are invoked from a
  trigger.
* Improve optimization of "expression" IN ("expression-list") queries.
* Fix mis-expansion of rule queries when a sub-SELECT appears in a
  function call in FROM, a multi-row VALUES list, or a RETURNING list.
* Fix Assert failure during rescan of an IS NULL search of a GiST
  index.
* Fix memory leak during rescan of a hashed aggregation plan.
* Ensure an error is reported when a newly-defined PL/pgSQL trigger
  function is invoked as a normal function.
* Force a checkpoint before "CREATE DATABASE" starts to copy files.
* Prevent possible collision of relfilenode numbers when moving a
  table to another tablespace with "ALTER SET TABLESPACE".
* Fix incorrect text search headline generation when single query
  item matches first word of text.
* Fix improper display of fractional seconds in interval values when
  using a non-ISO datestyle in an "--enable-integer-datetimes" build.
* Make ILIKE compare characters case-insensitively even when they're
  escaped.
* Ensure "DISCARD" is handled properly by statement logging.
* Fix incorrect logging of last-completed-transaction time during
  PITR recovery.
* Ensure SPI_getvalue and SPI_getbinval behave correctly when the
  passed tuple and tuple descriptor have different numbers of columns.
* Mark SessionReplicationRole as PGDLLIMPORT so it can be used by
  Slony on Windows.
* Fix small memory leak when using libpq's gsslib parameter.
* Ensure libgssapi is linked into libpq if needed.
* Fix ecpg's parsing of "CREATE ROLE".
* Fix recent breakage of pg_ctl restart.
* Ensure "pg_control" is opened in binary mode.
* Update time zone data files to tzdata release 2008i (for DST law
  changes in Argentina, Brazil, Mauritius, Syria)

(adam)

Changes 8.2.11:
* Fix GiST index corruption due to marking the wrong index entry
  "dead" after a deletion.
  This would result in index searches failing to find rows they
  should have found.
* Fix backend crash when the client encoding cannot represent a
  localized error message.
  We have addressed similar issues before, but it would still fail if
  the "character has no equivalent" message itself couldn't be
  converted. The fix is to disable localization and send the plain
  ASCII error message when we detect such a situation.
* Fix possible crash when deeply nested functions are invoked from a
  trigger.
* Improve optimization of "expression" IN ("expression-list") queries.
  Cases in which there are query variables on the right-hand side had
  been handled less efficiently in 8.2.x and 8.3.x than in prior
  versions. The fix restores 8.1 behavior for such cases.
* Fix mis-expansion of rule queries when a sub-SELECT appears in a
  function call in FROM, a multi-row VALUES list, or a RETURNING list.
* Fix memory leak during rescan of a hashed aggregation plan.
* Ensure an error is reported when a newly-defined PL/pgSQL trigger
  function is invoked as a normal function.
* Prevent possible collision of relfilenode numbers when moving a
  table to another tablespace with "ALTER SET TABLESPACE".
  The command tried to re-use the existing filename, instead of
  picking one that is known unused in the destination directory.
* Fix incorrect tsearch2 headline generation when single query item
  matches first word of text.
* Fix improper display of fractional seconds in interval values when
  using a non-ISO datestyle in an "--enable-integer-datetimes" build.
* Ensure SPI_getvalue and SPI_getbinval behave correctly when the
  passed tuple and tuple descriptor have different numbers of columns.
* Fix ecpg's parsing of "CREATE ROLE".
* Fix recent breakage of pg_ctl restart.
* Ensure "pg_control" is opened in binary mode.
  pg_controldata and pg_resetxlog did this incorrectly, and so could
  fail on Windows.
* Update time zone data files to tzdata release 2008i (for DST law
  changes in Argentina, Brazil, Mauritius, Syria)

(adam)

Changes 8.1.15:
* Fix GiST index corruption due to marking the wrong index entry
  "dead" after a deletion.
  This would result in index searches failing to find rows they
  should have found.
* Fix backend crash when the client encoding cannot represent a
  localized error message.
  We have addressed similar issues before, but it would still fail if
  the "character has no equivalent" message itself couldn't be
  converted. The fix is to disable localization and send the plain
  ASCII error message when we detect such a situation.
* Fix possible crash when deeply nested functions are invoked from a
  trigger.
* Fix mis-expansion of rule queries when a sub-SELECT appears in a
  function call in FROM, a multi-row VALUES list, or a RETURNING list
* Ensure an error is reported when a newly-defined PL/pgSQL trigger
  function is invoked as a normal function.
* Prevent possible collision of relfilenode numbers when moving a
  table to another tablespace with "ALTER SET TABLESPACE".
  The command tried to re-use the existing filename, instead of
  picking one that is known unused in the destination directory.
* Fix incorrect tsearch2 headline generation when single query item
  matches first word of text.
* Fix improper display of fractional seconds in interval values when
  using a non-ISO datestyle in an "--enable-integer-datetimes" build
* Ensure SPI_getvalue and SPI_getbinval behave correctly when the
  passed tuple and tuple descriptor have different numbers of columns.
* Fix ecpg's parsing of "CREATE ROLE".
* Fix recent breakage of pg_ctl restart.
* Update time zone data files to tzdata release 2008i (for DST law
  changes in Argentina, Brazil, Mauritius, Syria)

(adam)

Changes for 1.11.0:
* Bug fixes
* Improvements
PkgSrc:
* crossfire-maps is integrated into crossfire-server, since the server requires
  maps to run

(adam)

clamav

(martti)

Updated mail/clamav to 0.94.1

* Bug fixes

(martti)

Note update of devel/p5-Mouse to version 0.11

(seb)

Update from version 0.10 to version 0.11.

Changes:
0.11 Sun Nov 2 11:35:04 2008
    * Throw an error if accessor/predicate/clearer/handles code eval fails
    * Optimizations for generated methods, they should now be on par with Moose

(seb)

Update to pciutils-3.0.2 is done

(bjs)

Re-enable building the XS version.  I can't remember why I disabled that
and it does seem to work.
PKGREVISION++

Closes PR pkg/39095 from Jens Rehsack.

(bad)

Updated sysutils/vbetool to 0.7.1nb2

(bjs)

Updated sysutils/radeontool to 1.5nb4

(bjs)

Updated sysutils/pciutils to 3.0.2

(bjs)

Updated graphics/nvtv-gtk2 to 0.4.7nb5

(bjs)

Updated graphics/nvtv to 0.4.7nb4

(bjs)

PKGREVISION++ for sysutils/pciutils

(bjs)

Bump PKGREVISION for sysutils/pciutils

(bjs)

Bump PKGREVISION for sysutils/pciutils, add DESTDIR support

(bjs)

Update to version-3.0.2.  Many, many changes--please see
the ChangeLog for details, they are way too numerous to
list here.

Bump BUILDLINK_API_DEPENDS.
TODO: use misc/pciids?

(bjs)

Improvements for the "mediatomb" package:
1.) Create a user and group "mediatomb" for running the server to restrict
    the files which can be accessed.
2.) Add a startup script to start the server automatically.

Bump package revision because of these fixes. Changes approved by
Alistair Crooks.

(tron)

pkglint cleanup.

(wiz)

mp3 -> MP3

(wiz)

Note update of the "mediatomb" package to version 0.11.0nb2.

(tron)

Improvements for the "mediatomb" package:
1.) Create a user and group "mediatomb" for running the server to restrict
    the files which can be accessed.
2.) Add a startup script to start the server automatically.

Bump package revision because of these fixes. Changes approved by
Alistair Crooks.

(tron)

- This common Makefile is used by time/sunbird as well.
- Don't set MAINTAINER and HOMEPAGE variables here, they should be set by
  individual packages including this file (I don't want to implicitly be
  maintainer for all packages including this Makefile fragment).

(ghen)

Fix install with USE_DESTDIR - bump pkgrevision

(abs)

Removed unused (PROP_TYPE_STRING) patches

(adam)

Note update of the "rsync" package to version 3.0.4nb1.

(tron)

Include "converters/libiconv/buildlink3.mk" to fix build problems under
Solaris as suggested by Joern Clausen in PR pkg/39859. Bump the package
revision because this might change the binary package on some platforms.

(tron)

Add some kde4 related packages.

(markd)

Updated x11/qt4-libs to 4.4.3nb1

(adam)

Fix for #39841:
install libqimsw-multi.la

(adam)

Add akonadi

(markd)

Import akonadi 1.0.0

Akonadi is a new personal information management (PIM) framework for KDE 4
and is included in the 4.1 release. Akonadi will function as an extensible
data storage for all PIM applications. In KDE 3 all PIM applications had
different data storage and handling methods, which lead to several
implementations of essentially the same thing.  Besides data storage,
Akonadi has several other components including search, and a library
(cache) for easy access and notification of data changes.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Add phonon.

(markd)

Import of phonon 4.2.0

Phonon is the Multimedia API for KDE and QT.

In Phonon there are three main concepts: MediaObjects, Paths and Outputs.
The MediaObjects control the playback/capture and provide the media data.
MediaObjects can be connected to Outputs using Path objects which also
allow the insertion of Effect objects between MediaObject and Output.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Add automoc4

(markd)

Import of automoc4 0.9.84

automoc4 tool, used to build KDE4 and related packages.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

kde4-dirs is now in misc.

(markd)

Add kde4-dirs

(markd)

s/wip/misc/

(markd)

Import of kde4-dirs 1.0 from pkgsrc-wip.

kde4-dirs installs a set of shared directories used by many KDE4
applications.  It is useful to simplify PLIST handling in other packages.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(markd)

Fix build with perl 5.10.

As perl 5.6 wont be seen in a pkgsrc context just replace the test for
5.6 with one for 5.10 rather than a more substantial change.

(markd)

+ cherokee-0.10.1, highlight-2.6.14, imap-uw-2007d, libextractor-0.5.21,
  libpciaccess-0.10.5, libtheora-1.0rc2, libv4l-0.5.3, mathomatic-14.2.2,
  p5-DateTime-TimeZone-0.83, p5-Finance-Quote-1.15, p5-PathTools-3.29,
  p5-Socket6-0.23, pear-Date-1.5.0a1, py-moin-1.8.0,
  py-pytz-2008i, subtitleeditor-0.26.0, x264-devel-20081101,
  youtube-dl-20081101.

(wiz)

Comment out code for unsupported options.

(wiz)

Add script for munging locale files.

(wiz)

Remove superfluous patches.

(wiz)

Really update to 0.95 (DISTNAME).

(taca)

regen for missing patch-ae.

(obache)

Not required since updated to 2.24.1.

(obache)

sort

(obache)

sort

(obache)

sort and expunge

(obache)

sort.

(obache)

clean up trailling white-space.

(obache)

sort

(obache)

sort.

(obache)

ticket #2567

(rtr)

pullup ticket #2567 - requested by adrianp
drupal: update package for security fixes

revisions pulled up:
pkgsrc/www/drupal/Makefile 1.33, 1.34
pkgsrc/www/drupal/distinfo 1.24, 1.25

  Module Name:    pkgsrc
  Committed By:  adrianp
  Date:          Sun Oct 12 00:32:31 UTC 2008

  Modified Files:
          pkgsrc/www/drupal: Makefile distinfo

  Log Message:
  This release fixes security vulnerabilities. Sites are urged to upgrade
  +immediately after reading the security announcement:

      * SA-2008-060 - Drupal core - Multiple vulnerabilities

  In addition to this security vulnerability, the following bugs have been fixed
  +in the 5.11 release:

  * - Patch 265899 by mfb: uri_brief mail token did not support https URLs.
  * - Patch 170310 by mfb, JohnAlbin: avoid SSL cookie getting over-written by
  +non-SSL cookie.
  * 296096 by Damien Tournoud. Fix 5.10 Postgres install & update.
  * - Patch 246143 by bjaspan, Damien Tournoud: make sure updates are run in
  +numeric order, not in definition order.
  * 181831 by Rob Loach. Backport of #130630 by chx: provide an id on the form
  +item wrapper div.
  * 283026 by Damien Tournoud. Make user_authenticate from external source (for
  +existing users) work with no server part.
  * 298535 by mkalkbrenner. Correct HTTP status code for failed connection.
  * 108717 by add1sun and neclimdul. Code style.
  * - Patch 230932 by ryanlath: file_scan_directory() didn't scan the directory
  +called '0'. Backport by cridenour.
  * follow up to 280621 by lilou: the object tag was disallowed in a previous
  +version in filter_xss_admin(), so disallow param as well, which is only
  +meaningful inside an object tag
  * 208270 reported by Dries, patch by jvandyk: it was not possible to clear the
  +XML-RPC error cache, making it impossible to do multiple queries in one
  +request. Add xmlrpc_clear_error() and slightly modify xmlrpc_error() to fix.
  * - Patch 308549 by lyrincz, Dave Reid: fixed broken link in PHPdoc.
  * 67895 patch by goba, tested by JirkaRybka and blackdog: move poll votes with
  +poll options, when an option is removed, instead of dropping all old votes,
  +solving an old data loss bug. Backport by dww.
  * 312730 by Damien Tournoud. hook_requirements('install') should work for
  +modules that don't reside in the main './modules' folder.

  ------------------------------------------------------------------------

  Module Name:    pkgsrc
  Committed By:  adrianp
  Date:          Thu Oct 23 21:33:21 UTC 2008

  Modified Files:
          pkgsrc/www/drupal: Makefile distinfo

  Log Message:
  Update to 5.12
  The twelfth maintenance and security release of the Drupal 5 series. Only
  fixes for security vulnerabilities and other bugs have been committed. New
  features are only being added to the forthcoming Drupal 7.0 release.

  This release fixes security vulnerabilities. Sites are urged to upgrade
  immediately after reading the security announcement:

  * SA-2008-067 - Drupal core - Multiple vulnerabilities

(rtr)

Make it build on NetBSD current (and NetBSD 5.x).

(taca)

Make it build on NetBSD current (and NetBSD 5.x).

(taca)

ticket #2566

(rtr)

pullup ticket #2566 - requested by tron
phpmyadmin: update package for security fixes

revisions pulled up:
pkgsrc/databases/phpmyadmin/Makefile 1.76
pkgsrc/databases/phpmyadmin/distinfo 1.39

  Module Name:    pkgsrc
  Committed By:  tron
  Date:          Sat Nov  1 19:50:41 UTC 2008

  Modified Files:
          pkgsrc/databases/phpmyadmin: Makefile distinfo

  Log Message:
  Update "phpmyadmin" package to version 2.11.9.3. Changes since 2.11.9.1:
  - [security] XSS in MSIE using NUL byte
  - [security] XSS in a Designer component

(rtr)

Today's updates from this corner:

Updated devel/p5-Data-Serializer to 0.48
Added devel/p5-IO-TieCombine version 1.000
Updated devel/p5-App-Cmd to 0.202
Updated devel/p5-Data-Taxi to 0.95
Updated devel/p5-Data-UUID to 1.149
Updated devel/p5-Data-Visitor to 0.21
Added devel/p5-B-Hooks-OP-Check version 0.12
Added devel/p5-B-Hooks-EndOfScope version 0.04
Updated devel/p5-B-Hooks-OP-Check to 0.12nb1
Updated devel/p5-B-Hooks-OP-Check to 0.12nb2
Updated devel/p5-Devel-Declare to 0.003003

(he)

Update from version 0.001011nb1 to 0.003003.

Pkgsrc changes:
o Adjust/update dependency lists

Upstream changes:

0.003003
  - Devel::Declare::MethodInstaller::Simple now has code_for() which the
    subclass can override to monkey with the magic shadowed subroutine.
    This is handy if you want to employ Devel::BeginLift.

0.003002
  - Depend on Sub::Name and B::Hooks::EndOfScope. MethodInstaller::Simple and
    Context::Simple use them.

0.003001
  - Don't use :lvalue in Context::Simple and MethodInstaller::Simple to keep
    the debugger happy.

0.003000
  - Add Devel::Declare::Context::Simple and
    Devel::Declare::MethodInstaller::Simple as an experimental way to make
    creating block- and sub-like keywords easier (Rhesa Rozendaal).

0.002999_01
  - Use B::Hooks::OP::Check to register PL_check callbacks.
  - Use B::Hooks::EndOfScope instead of %^H and Scope::Guard.
  - Don't segfault if HvNAME(PL_curstash) == NULL.
  - Don't segfault on 5.9.5+, where PL_parser is a symbol, not a define.
  - Don't delete the previous symbol table entry when shadowing subs. This
    makes us work within the debugger.
  - Don't mix declarations and code.

0.002002
  - switch done_declare call from call_argv to call_pv.
  - Make get_linestr{,_offset} return sensible values when called while the
    parser isn't running.
  - Remove several compile time warnings.
  - Allow enabling of debug mode using $ENV{DD_DEBUG}.

0.002001
  - clean up checks for whether we're lexing and whether lex_stuff exists
    to handle the PL_parser factor-out in 5.10
  - check if reallocation of PL_linestr is necessary before doing it. this way
    we can bail out properly instead of corrupting memory in some cases
  - don't call strlen twice on the same sting
  - try to be more portable
    - stop using Nullsv
    - don't use Perl_* functions directly.
    - don't define PERL_CORE
    - use NEWSV from handy.h instead of defining our own
    - don't define PERL_NO_GET_CONTEXT
    - don't support preprocessors (perl -P)

0.002000
  - rewrite guts into perl, add tests for new declaration style

(he)