Pullup ticket #2533 - tonnerre
faad2: security patch

Revisions pulled up:
- audio/faad2/Makefile 1.41
- audio/faad2/distinfo 1.17
- audio/faad2/patches/patch-at 1.2
---
Module Name: pkgsrc
Committed By: tonnerre
Date: Wed Sep 24 22:25:14 UTC 2008

Modified Files:
pkgsrc/audio/faad2: Makefile distinfo
pkgsrc/audio/faad2/patches: patch-at

Log Message:
Fix for faad2 decodeMP4file() heap overflow. If the sample count looks
insane, it may as well be insane. Also bump PKGREVISION.

(tron)

Updated www/seamonkey, www/seamonkey-bin and www/seamonkey-gtk1 to 1.1.12.

(ghen)

Update seamonkey, seamonkey-bin and seamonkey-gtk1 to Seamonkey 1.1.12.

Security fixes in this version:

MFSA 2008-46 Heap overflow when canceling newsgroup message
MFSA 2008-45 XBM image uninitialized memory reading
MFSA 2008-44 resource: traversal vulnerabilities
MFSA 2008-43 BOM characters stripped from JavaScript before execution
MFSA 2008-42 Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17)
MFSA 2008-41 Privilege escalation via XPCnativeWrapper pollution
MFSA 2008-40 Forced mouse drag
MFSA 2008-38 nsXMLDocument::OnChannelRedirect() same-origin violation
MFSA 2008-37 UTF-8 URL stack buffer overflow

For more info, see http://www.seamonkey-project.org/releases/seamonkey1.1.12/

(ghen)

Updated mail/thunderbird and mail/thunderbird-gtk1 to 2.0.0.17.

(ghen)

Update thunderbird and thunderbird-gtk1 to 2.0.0.17.

Security fixes in this version:

MFSA 2008-46 Heap overflow when canceling newsgroup message
MFSA 2008-44 resource: traversal vulnerabilities
MFSA 2008-43 BOM characters stripped from JavaScript before execution
MFSA 2008-42 Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17)
MFSA 2008-41 Privilege escalation via XPCnativeWrapper pollution
MFSA 2008-38 nsXMLDocument::OnChannelRedirect() same-origin violation
MFSA 2008-37 UTF-8 URL stack buffer overflow

For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.17/releasenotes/

(ghen)

And also update for patch files.

(obache)

Make it look for it's config file at the right place.

(ahoka)

Bump PKGREVISION for infrastructure fix affecting /dev/null as CONF_FILES
source.

(wiz)

Fix a longstanding bug in the pkginstall infrastructure: incomplete
support for creating empty files as CONF_FILES.

The usual way is to add
CONF_FILES= /dev/null /some/file

However, some parts of the infrastructure check if the "source" is a
file -- this fails for /dev/null obviously (other parts accept
character devices already).

Fix this. Will follow up with PKGREVISION bumps for affected packages.

Ok during freeze: agc@

(wiz)

Fix permission of a file to pass CHECK_PERMS.

(taca)

+ anjuta-2.24.0.1, awesome-3.0, bftpd-2.2.1, cdrtools-2.01.01.49,
  cheese-2.24.0, deskbar-applet-2.24.0, devIL-1.7.1, devhelp-0.21,
  duplicity-0.5.02, ekiga-3.00, eog-2.24.0, epiphany-2.24.0.1,
  evolution-webcal-2.24.0, fast-user-switch-applet-2.24.0,
  file-roller-2.24.0, fuse-ntfs-3g-1.2918, gcalctool-5.24.0,
  gcc-4.3.2, gconf-editor-2.24.0, gdl-2.24.0, gdm-2.24.0,
  geda-1.5.0.20080706, gmpc-0.16.0, gnome-backgrounds-2.24.0,
  gnome-build-2.24.0, gnome-control-center-2.24.0, gnome-icon-theme-2.24.0,
  gnome-mag-0.15.4, gnome-media-2.24.0.1, gnome-settings-daemon-2.24.0,
  gnome-system-monitor-2.24.0, gnome-themes-2.24.0, gnome-user-docs-2.24.0,
  gnome-utils-2.24.0, gok-2.24.0, gthumb-2.10.10, gtk-sharp-2.12.4,
  gtk2-2.14.3, gtk2-engines-2.16.0, htop-0.8.1, ikiwiki-2.64,
  ingo-1.2.1, libbonobo-2.24.0, libgail-gnome-1.20.1, libgnomekbd-2.24.0,
  libgnomeprint-2.18.5, libgnomeprintui-2.18.3, libgtop-2.24.0,
  libprelude-0.9.21, metacity-2.24.0, modular-xorg-server-1.5.1,
  mpop-1.0.15, mtr-0.75, orca-2.24.0, p5-DateTime-Locale-0.42,
  p5-DateTime-TimeZone-0.80, p5-IO-Socket-SSL-1.16, p5-Regexp-Common-2.122,
  p5-Spreadsheet-WriteExcel-2.25, p5-XML-RSS-1.35, parrot-0.7.1,
  phpmyadmin-2.11.9.2, png-1.2.32, prboom-2.4.8.4, py-ORBit-2.24.0,
  py-boto-1.4c, py-dns-2.3.3, py-html2text-2.33, py-psycopg-2.0.8,
  qt4-libs-4.4.2, roundcube-0.2beta, rsnapshot-1.3.1, scilab-5.0.0,
  silc-server-1.1.12, stellarium-0.10.0, stunnel-4.26,
  subtitleeditor-0.24.0, surfraw-2.2.3, tokyocabinet-1.3.9,
  totem-2.24.0, vim-7.2, vino-2.24.0, vlc-0.9.2, wireshark-1.1.0,
  x264-devel-20080921, yelp-2.24.0, youtube-dl-20080920, zenity-2.24.0.

(wiz)

Add lang-uk-ua, Ukrainian/UKRAINE language support.

(taca)

Fix installation error with DESTDIR enabled.

(taca)

Note update of www/typo3 package to 4.2.1nb2.

(taca)

Some fixes and improvement for typo3 package. (This is a leaf packge.)

* Enable DESTDIR support.
* Fix installing a none-existing file.
* Tweak default path for optional programs; GraphicMagick or ImageMagick.
* Remove files/directories at uninstall suitably.

Bump PKGREVISION.

(taca)

Not jobsafe.
Reported by ASau.

(ahoka)

Updated audio/faad2 to 2.6.1nb1.

(tonnerre)

Fix for faad2 decodeMP4file() heap overflow. If the sample count looks
insane, it may as well be insane. Also bump PKGREVISION.

(tonnerre)

Note PKGREVISION bump of bdb-xml.

(minskim)

This version of bdb-xml requires db<4.7.  Depend on db46 instead of db4.
This fixes the build error shown on Joerg's bulk builds on NetBSD-current.

Bump PKGREVISION.

(minskim)

Pull-up 1.287 for MacOS X support.

(cube)

Updated www/firefox3-bin to 3.0.2.

(ghen)

Bring on-par with www/firefox3.  See there for change log.

(ghen)

Updated www/firefox, www/firefox-bin and www/firefox-gtk1 to 2.0.0.17.

(ghen)

Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.17.
(ok during freeze agc@)

Security fixes in this version:

MFSA 2008-45 XBM image uninitialized memory reading
MFSA 2008-44 resource: traversal vulnerabilities
MFSA 2008-43 BOM characters stripped from JavaScript before execution
MFSA 2008-42 Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17)
MFSA 2008-41 Privilege escalation via XPCnativeWrapper pollution
MFSA 2008-40 Forced mouse drag
MFSA 2008-39 Privilege escalation using feed preview page and XSS flaw
MFSA 2008-38 nsXMLDocument::OnChannelRedirect() same-origin violation
MFSA 2008-37 UTF-8 URL stack buffer overflow

For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.17/releasenotes/

(ghen)

On Linux systems, don't use ext2_fs.h features if we don't have the header.
Fixes build of pkgsrc/archivers/bsdtar on some systems, no functional change
intended on systems that already successfully built.

Ok'd during freeze by joerg@ and agc@

(dsainty)

Updated www/firefox3 to 3.0.2

(tnn)

Update to firefox3-3.0.2.
Changes:
* Fixed several security issues.
* Fixed several stability issues.
* Fixed a number of minor issues with the layout of certain web pages.
* Fixed several theme issues that affected right-to-left locales.
* Fixed issue that caused some users with customized toolbars to have their
  Back and Forward buttons go missing (bug 426026)
* Add new Extended Validation (EV) roots to Firefox 3.0.2.
* On certain IDN sites, the password manager would not fill in username
  and password details properly.
* Fixed several hangs and crashes that occurred when using screen readers.

(tnn)

Note update of sysutils/dbus package to 1.2.3nb1.

(taca)

Some maintainous to dbus pacakge, approved by agc@.

* Change "${VARBASE}/lib/dbus" to "${VARBASE}/db/dbus".
* Create "${VARBASE}/db/dbus" with OWN_DIRS_PERMS at install time.
* Generate "${VARBASE}/db/dbus/machine-id" file at install time.
* Install dbus-daemon-launch-helper with mode 04550 instead of 04750.

It solves start gimp successfully without running dbus-daemon as before.

Bump PKGREVISION.

(taca)

Fix a typo in comment.

(obache)

The editline plugin depend on libedit.

(obache)

+ m17n-contrib-1.1.7 m17n-lib-1.5.2

(obache)

not make jobs safe, noticed in PR 39615.

(obache)

Pull-up revision 1.2, minus the libtool archive.  Maybe that will make it
work on MacOS X.

(cube)

Pull-up revision 1.8.

(cube)

Updated wm/sawfish to 1.3.4

(tnn)

fix PLIST

(tnn)

Update to sawfish-1.3.4.
New features:
- "Enter-Click focus mode" by Dagfinn I. Mannsake, Christopher
  Bratusek and Timo Korvola: windows get focus only when mouse
  enters it or if it is clicked and was unfocused.
- "Parallel make" by Harald van Dijk: allows building using
  more processors.
- Improved window property handling by Teika Kazura.
- Added new themes: mxflat, get-S-tabbed and elberg-tabbed.
- Added new binding to maximize window fullscreen on all
  xinerama screens, by Jonathan Sambrook.

Also various bugfixes.

(tnn)

Updated net/msdl to 1.2.2

(obache)

Update msdl to 1.2.2.

Version 1.2.2.
-msdl
- 8th release
- http redirect support
- added MPlayer/xine-lib copyright infos in each file

Version 1.2.1.
-msdl
- 7th release
- fixed fatal bug on mmst
- some change on wmserver/real

(obache)

Add one small patch and drop the autoconf dependency.

(joerg)

Pullup ticket #2532.

(tron)

Pullup ticket #2532 - requested by taca
mysql5-client: security update
mysql5-server: security update

Revisions pulled up:
- databases/mysql5-client/Makefile 1.19
- databases/mysql5-client/Makefile.common 1.33
- databases/mysql5-client/buildlink3.mk 1.12
- databases/mysql5-client/distinfo 1.24
- databases/mysql5-client/patches/patch-ab 1.3
- databases/mysql5-client/patches/patch-ac 1.7
- databases/mysql5-client/patches/patch-af 1.7
- databases/mysql5-client/patches/patch-ag 1.4
- databases/mysql5-client/patches/patch-aj 1.3
- databases/mysql5-client/patches/patch-ak delete
- databases/mysql5-client/patches/patch-al 1.3
- databases/mysql5-server/Makefile 1.25
- databases/mysql5-server/PLIST 1.13
- databases/mysql5-server/distinfo 1.21
- databases/mysql5-server/patches/patch-ad 1.4
- databases/mysql5-server/patches/patch-ag 1.7
- databases/mysql5-server/patches/patch-ai 1.3
- databases/mysql5-server/patches/patch-an 1.5
- databases/mysql5-server/patches/patch-ca 1.2
- databases/mysql5-server/patches/patch-cb 1.2
- databases/mysql5-server/patches/patch-cc 1.2
- databases/mysql5-server/patches/patch-da delete
- databases/mysql5-server/patches/patch-db delete
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Sep 18 11:50:44 UTC 2008

Modified Files:
pkgsrc/databases/mysql5-client: Makefile.common buildlink3.mk distinfo
pkgsrc/databases/mysql5-client/patches: patch-ab patch-af patch-ag
    patch-aj patch-al
Added Files:
pkgsrc/databases/mysql5-client/patches: patch-ac
Removed Files:
pkgsrc/databases/mysql5-client/patches: patch-ak

Log Message:
Update mysql5-client pacakge to 5.0.67.

For complete changes, please refer
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-67.html.
Here is a part of it.

Functionality added or changed:

Security Enhancement:

  To enable stricter control over the location from which user-defined
  functions can be loaded, the plugin_dir system variable has been
  backported from MySQL 5.1. If the value is non-empty, user-defined
  function object files can be loaded only from the directory named by this
  variable. If the value is empty, the behavior that is used before 5.0.67
  applies: The UDF object files must be located in a directory that is
  searched by your system's dynamic linker. (Bug#37428)

Important Change: Incompatible Change:

  The FEDERATED storage engine is now disabled by default in the .cnf files
  shipped with MySQL distributions (my-huge.cnf, my-medium.cnf, and so
  forth). This affects server behavior only if you install one of these
  files. (Bug#37069)

Cluster API: Important Change:

  Because NDB_LE_MemoryUsage.page_size_kb shows memory page sizes in bytes
  rather than kilobytes, it has been renamed to page_size_bytes. The name
  page_size_kb is now deprecated and thus subject to removal in a future
  release, although it currently remains supported for reasons of backward
  compatibility. See The Ndb_logevent_type Type, for more information about
  NDB_LE_MemoryUsage. (Bug#30271)

Important Change:

  Some changes were made to CHECK TABLE ... FOR UPGRADE and REPAIR TABLE
  with respect to detection and handling of tables with incompatible .frm
  files (files created with a different version of the MySQL server). These
  changes also affect mysqlcheck because that program uses CHECK TABLE and
  REPAIR table, and thus also mysql_upgrade because that program invokes
  mysqlcheck.
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Sep 18 11:51:37 UTC 2008

Modified Files:
pkgsrc/databases/mysql5-server: Makefile PLIST distinfo
pkgsrc/databases/mysql5-server/patches: patch-ad patch-ag patch-ai
    patch-an patch-ca patch-cb patch-cc
Removed Files:
pkgsrc/databases/mysql5-server/patches: patch-da patch-db

Log Message:
Update mysql5-server pacakge to 5.0.67.

This is security fix.

For complete changes, please refer
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-67.html.
Here is a part of it.

Functionality added or changed:

Security Enhancement:

  To enable stricter control over the location from which user-defined
  functions can be loaded, the plugin_dir system variable has been
  backported from MySQL 5.1. If the value is non-empty, user-defined
  function object files can be loaded only from the directory named by this
  variable. If the value is empty, the behavior that is used before 5.0.67
  applies: The UDF object files must be located in a directory that is
  searched by your system's dynamic linker. (Bug#37428)

Important Change: Incompatible Change:

  The FEDERATED storage engine is now disabled by default in the .cnf files
  shipped with MySQL distributions (my-huge.cnf, my-medium.cnf, and so
  forth). This affects server behavior only if you install one of these
  files. (Bug#37069)

Cluster API: Important Change:

  Because NDB_LE_MemoryUsage.page_size_kb shows memory page sizes in bytes
  rather than kilobytes, it has been renamed to page_size_bytes. The name
  page_size_kb is now deprecated and thus subject to removal in a future
  release, although it currently remains supported for reasons of backward
  compatibility. See The Ndb_logevent_type Type, for more information about
  NDB_LE_MemoryUsage. (Bug#30271)

Important Change:

  Some changes were made to CHECK TABLE ... FOR UPGRADE and REPAIR TABLE
  with respect to detection and handling of tables with incompatible .frm
  files (files created with a different version of the MySQL server). These
  changes also affect mysqlcheck because that program uses CHECK TABLE and
  REPAIR table, and thus also mysql_upgrade because that program invokes
  mysqlcheck.
---
Module Name: pkgsrc
Committed By: tron
Date: Thu Sep 18 12:49:40 UTC 2008

Modified Files:
pkgsrc/databases/mysql5-client: Makefile

Log Message:
Fix path to Perl interpreter in the installed scripts. Bump package
revision because of this fix.

(tron)

Restrict cast with patch-aa to NetBSD only.  It should fix PR pkg/39586.

Other *BSD has void pointer for udata member of kevent structure.
NetBSD's kqueue is something behind to others?

(taca)

Share distinfo file with ../../www/typolight.

(taca)

Note update of www/typolight-translations package to 20080922.

(taca)

Update typolight-translations to 20080922.

* Sort each PLIST file.
* Fix missing files in PLIST.sv.
* Update translations to support TYPOlight 2.6.1.

(taca)

DragonFly=>1.10 using one-true awk 20070501, also require gawk hack.

(obache)

ptlib 2.4.1, opal 3.4.1, ekiga 3.0.0

(jmcneill)

net/ekiga-devel has been moved to net/ekiga

(jmcneill)

ekiga-devel -> ekiga

(jmcneill)

Import ekiga-3.0.0 stable release to replace net/ekiga-devel

Ekiga (formely known as GnomeMeeting) is an open source VoIP and video
conferencing application for GNOME. Ekiga uses both the H.323 and SIP
protocols. It supports many audio and video codecs, and is interoperable
with other SIP compliant software and also with Microsoft NetMeeting.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(jmcneill)

opal-devel -> opal

(jmcneill)

opal-devel -> opal

(jmcneill)

Import opal-3.4.1 stable release to replace devel/opal-devel

OPAL is the "next generation" of OpenH323 that has a new architecture.
Not only does it support H.323 and SIP, but new VoIP protocols or
devices can be added very easily.
BTW: OPAL is an acronym for Open Phone Abstraction Library, but
that is not really important :)

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(jmcneill)

Update to stable release 2.4.1.

(jmcneill)

Retire x11/wxGTK and x11/wxGTK-contrib.

(joerg)

Switch to x11/wxGTK26{,-contrib}, reorder.

(joerg)

Switch to x11/wxGTK26{,-contrib}.

(joerg)

Explicitly disable building the shared libarchive. This fails to link
on HP-UX against the static libz.a used if the system doesn't have
a native version. It also reduces build time in other cases.

(joerg)

Update references for x11/wxGTK -> x11/wxGTK26 move.

(joerg)

Revert old state after mistyped cvs import.

(joerg)

Reimport x11/wxGTK-contrib as x11/wxGTK26-contrib.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(joerg)

Reimport x11/wxGTK as x11/wxGTK26.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(joerg)

Reimport x11/wxGTK as x11/wxGTK24.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(joerg)

reportedly not MAKE_JOBS_SAFE

(tnn)

Add a gross workaround to the gross workaround because openoffice insists
on using the pkgconfig files of its dependency.

(cube)

Set PRIVILEGED_STAGES+=clean for every platform.

Some files are generated during install, and cannot be cleaned by an
unprivileged user.

(minskim)

Avoid dependency on libXpm; thanks to adrianp

(adam)

Reverting my previous openmotif->lesstif changes.

(ahoka)

Make the change made in replace.mk 1.10 work on Solaris.

Previously, a non-existing directory in REPLACE_RUBY_DIRS stopped the build
on Solaris.

(minskim)

Note update of www/typo3 package to 4.2.1nb1.

(taca)

* Correct some permission of directories/files to make it work.
* Allow depends on php-pgsql.
* Handle ${TYPO3DIR}/${SITEDIR}/typo3conf/localconf.php as configuration
  file with CONF_FILES_PERMS.
* Install README file, very simple guide for set up.

Bump PKGREVISION.

(taca)

s/samba-3.2.2/samba-3.2.4/.

(taca)

Note update of www/drupal6-translations package to 20080922.
(This is a leaf package.)

(taca)

Update drupal6-translations to 20080922.

* sort each PLIST file.
* Update fi translation to 6.x-1.0.
* Add pl, sv and uk-ua translation.

(taca)

Remove some completed updates:
- amaya-9.54, ap2-python-3.3.1, boost-1.36.0, dejavu-ttf-2.24
  [pkg/38212], httping-1.2.9, p5-Archive-Zip-1.24,
  p5-Compress-Raw-Zlib-2.015, p5-Safe-Hole-0.10, p5-Test-Harness-2.64,
  p5-libwww-5.813 [pkg/39230], p5-libwww-5.814, rabbit-0.5.7,
  trac-0.11, xf86-video-intel-2.4.2.

(wiz)

Updated www/ikiwiki to 2.64

(schmonz)

Update to 2.64, plus a few bugfixes that'll be in 2.65. From the changelog:

* aggregate: Expire excess or old items on the same pass that adds them,
    not only on subsequent passes.
* editdiff: Broken since 2.62 due to wrong syntax, now fixed.
* aggregate: Support atom feeds with only a summary element, and no content
    elements.

* Avoid uninitialised value when --dumpsetup is used and no
    srcdir/destdir specified.
* ddate: Stop clobbering timeformat when not enabled.
* progress: New plugin to generate progress bars (willu)
* Add allow\_symlinks\_before\_srcdir to config so websetup doesn't eat it.
* img: Support sizes like 200x. Closes: #[475149](http://bugs.debian.org/475149)
* goodstuff: Remove otl plugin from the bundle since it needs a
    significant external dependency and is not commonly used. If
    you use otl, make sure you explicitly enable it now.
* goodstuff: Add more, progress, and table plugins to the bundle.
* Improve error message if external plugin fails to load. Closes:
    #[498458](http://bugs.debian.org/498458)
* Directive documentation broken out of the plugin documentation
    and into pages suitable to be used as an underlay. Thanks to
    Willu for doing most of the tedious work.
* Move the directive documentation into its own underlay, separate
    from basewiki, since it's sorta large compared to the rest of
    basewiki.
* listdirectives: Enable use of the directives underlay.
* Removed the obsolete blog page from the basewiki. ikiwiki/blog
    still remains, but is now deprecated too.
* Removed old redirecton pages from basewiki (helponformatting,
    markdown, openid, pagespec, preprocessordirective, subpage,
    wikilink).
* inline: Treat rootpage as a link, so that it can refer to a subpage
    without hardcoding the path.

(schmonz)

+ MesaLib-7.1, ORBit2-2.14.16, aspell-danish-1.6.17, aspell-faroese-0.2.34,
  at-spi-1.24.0, atk-1.24.0, autoconf-2.63, bug-buddy-2.24.0,
  byacc-20080824, dasher-4.9.0, dwm-5.2, exempi-2.0.2 [broken on
  NetBSD], file-4.26 [pkg/39596], freefont-ttf-20080912,
  gcalctool-5.23.5, glib2-2.18.1, glibmm-2.18.0, gmime-2.2.23,
  gmp-4.2.4, gnome-applets-2.24.0, gnome-games-2.24.0,
  gnome-keyring-2.24.0, gnutls-2.4.2, gtexinfo-4.13, gtk-sharp-2.12.3,
  gtk2-2.14.2, gtkmm-2.14.0, gtksourceview-2.4.0, intltool-0.40.4,
  libevent-1.4.8, libgcrypt-1.4.3, mathomatic-14.1.6, mkvtoolnix-2.3.0,
  monodevelop-1.9, p5-DBD-mysql-4.008, p5-Sub-Uplevel-0.2002,
  p5-Template-Toolkit-2.20 [pkg/39600], p5-glib2-1.200, p5-gtk2-1.200,
  pixman-0.12.0, py-gnome2-2.22.2, py-gnome2-desktop-2.24.0,
  py-moin-1.7.2, py-sqlite2-2.5.0a, seahorse-2.24.0, sound-juicer-2.24.0,
  tellico-1.3.4, wine-1.1.4.

(wiz)

Note exempi downgrade.

(wiz)

Downgrade to 2.0.0, 2.0.2 is broken on NetBSD.

(wiz)

For packages setting USE_BSD_MAKEFILE, explicitly set MKHTML to no.
This makes these packages build with the changed default in recent
NetBSD -current.

Approved by agc.

(dillo)

Updated net/vsftpd to 2.0.7

(abs)

pbulk-0.35:
Sync Dewey with pkg_install(-renovation) and add a fast check if a
pattern could ever match. This reduces the time for pbulk-resolve on a
full tree on my laptop from 12.9s to 5.3s.

(joerg)

Updated net/vsftpd to 2.0.7 - needed for recent FileZilla to with with SSL

v2.0.5

- Apply fix for O_NONBLOCK vs. XFS DMAPI filesystem. Thanks to Sudha Srinivasan
<sudhas@sgi.com>.
- Fix build warnings exposed by my upgrade to Fedora Core 5 / GCC4.1.1.
- Be more honest in FEAT response if PORT or PASV are disabled! Reported by
Charles Honton <chas@honton.org>. Allows MS Explorer to get the transfer mode
correct.
- pam_pwdb.so -> pam_unix.so in example PAM file. Thanks to
Rhodes, Colin <colin.rhodes@airways.co.nz>.
- Add FAQ issue regarding "chroot fails with SSL" - in fact, sshd is being hit
here instead ;-)
- Minor man page doc tweaks.
- Tiny bit of paranoia in privops.c.
- Revert change to reject anonymous logins before asking for password. This
fixes complaints about IE not showing the FTP login dialog.
- Change SSL certificate load to cater for chaining too.
- Added delay_failed_login and delay_successful_login to help limit resources
taken by brute force attacks.
- Kick session after a few login fails. Allows IP blocking solutions to be more
immediately effective.
- Replace setenv() with more portable putenv(). First part of Solaris fix.
- Replace tm_gmtoff usage with timezone and daylight. Second part of Solaris
fix.
- Set PAM items TTY and RUSER if possible.
- OpenBSD build warning fixes.
- So, timezone and daylight are not available on BSD, so redo the whole TZ
thing again. Should use only very portable constructs now.

v2.0.6

- Fix delay_failed_login typo. Oops.
- Patch the getcwd and readlink sysutil helpers to reflect that they wouldn't
like a 0-sized buf. No caller is affected. Thanks Ilja van Sprundel
<ilja@suresec.org>.
- Allow a (fake) reauth as the same user as the logged in user. Should resolve
.NET related report from Sabo Jim <Jim.Sabo@thomson.net>.
- Tweak from Lucian Adrian Grijincu <lucian.grijincu@gmail.com> to take
unnecessary port calculations out of a loop.
- Fix byte I/O accounting in the error path of do_file_send_rwloop, thanks to
<echen@siac.com>.
- Don't log FireFox's attempts to RETR directories! Reported by
Nixdorf, Tim <tnixdorf@dnps.com>.
- Fix STOU sending the same 150 status line twice - oops! Reported by
<yamazaki@iij.ad.jp>.
- Fix xferlog format for virtual (guest) users, reported by Andy Fletcher
<andy@withnail.org>.
- Fix bug with empty user list file and userlist_deny=NO. Reported by
Marcin Zawadzki/GlobalVanet.com <marcin.zawadzki@globalvanet.com>.
- Pretend we have proper UTF8 support and respond positively to OPTS UTF8 ON.
Thanks Stanislav Maslovski <stanislav.maslovski@gmail.com>.
- Add control over the file permissions used in the chown()ing of anonymous
uploads: chown_upload_mode (default 0600 as before). Suggestion from
An Pham <apham@medforcetech.com>.
- Do a retry getting the active ftp socket in vsf_privop_get_ftp_port_sock();
should help buggy Solaris systems. Reported by Michael Masterson
<mjmasterson@xo.com>.
- Add debug_ssl option to dump out some SSL connection details.
- Use code 522, not 521, to indicate that the server requires an encrypted
data connection. Still does not seem to coax lftp to retry :(
- Recognize OPTS pre-login.
- A whole ton of SSL improvements, including ability to force requirement of
a client cert; data and control channel client cert cross checking. Ability
to require fully valid / authentic client certs. No cert-based auth yet.
- Change my e-mail to my GMail account.

v2.0.7

- Fix finding libcap for the link on Slackware systems, thanks to Roman
Kravchenko <roman@atech.lv>.
- Fix build on Solaris 2.8 due to non-standard C, thanks to IIDA Yosiaki
<y-iida@secom.co.jp>.
- Fix man page typo, thanks Matt Selsky <selsky@columbia.edu>.
- Bring the PASV listen() into the bind() retry loop to resolve a race under
extreme load. Thanks to Curtis Taylor <cjt@us.ibm.com>.
- Enhance logging for debug_ssl.
- Shutdown the SSL data connections properly. This prevents clients such as
recent FileZilla from complaining. Reported by various people.
- Add option to enforce proper SSL shutdown on uploads. Left it off after much
agonizing because clients are so broken in this area.
- Add option to delete failed uploads.

(abs)

Updated textproc/aspell to 0.60.6nb1

(wiz)

Add patch fixing problem checking html files, reported by Chris Ross
and Uwe Klaus on pkgsrc-users; using upstream patch.

Bump PKGREVISION.

(wiz)

Note update of the "openldap-server" package to version 2.4.11nb3.

(tron)

Alway use Berkeley DB 4.6.21 provided by the "db46" package.
Berkeley DB 4.7.x is not officially supported by OpenLDAP yet and there
have been various reports of problems with this combination.

Bump package revision.

(tron)

Updated databases/sqlite3 to 3.6.2nb1

(obache)

py-sqlite2 does not require disable-threadsafe but expect to exist
load-extension these days.  OKed by wiz to commit.

Bump PKGREVISION.

(obache)

Sort. Add description for libmtp.

(wiz)

Add libmtp option (default off). No change to default binary package, so
no PKGREVISION bump.

(wiz)

Updated www/trac to 0.11.1nb3

(obache)