Pullup ticket 2387 - requested by tron
security update for net-snmp

Revisions pulled up:
- pkgsrc/net/net-snmp/Makefile 1.68
- pkgsrc/net/net-snmp/distinfo 1.43
- pkgsrc/net/net-snmp/patches/patch-ad 1.5

  Module Name:    pkgsrc
  Committed By:  tron
  Date:          Sun May 18 11:59:54 UTC 2008

  Modified Files:
          pkgsrc/net/net-snmp: Makefile distinfo
  Added Files:
          pkgsrc/net/net-snmp/patches: patch-ad

  Log Message:
  Add patch from the Net-SNMP SVN repository to fix a buffer overflow in
  the Perl SNMP module reported in SA30187.

  To generate a diff of this commit:
  cvs rdiff -r1.67 -r1.68 pkgsrc/net/net-snmp/Makefile
  cvs rdiff -r1.42 -r1.43 pkgsrc/net/net-snmp/distinfo
  cvs rdiff -r0 -r1.5 pkgsrc/net/net-snmp/patches/patch-ad

  Please note that diffs are not public domain; they are subject to the
  copyright notices on the relevant files.

(spz)

Need msgfmt to build.
Noticed by Hasso Tepper in PR 38686.

(obache)

Fix typo intoroduced by mechanical DESTDIR fix.
noticed by Hasso Tepper in PR 38687.

(obache)

Build with openssl in -current.

(markd)

Note update of the "net-snmp" package to version 5.4.1nb2.

(tron)

Add patch from the Net-SNMP SVN repository to fix a buffer overflow in
the Perl SNMP module reported in SA30187.

(tron)

Updated mail/mutt-devel to 1.5.18

mutt-compressed-mbox option is disabled, untill an updated patch is available.

(tonio)

Update mail/mutt-devel to 1.5.18

>From the announce:
"Mutt 1.5.18 contains 6 months of bug fixes, documentation improvements and
performance enhancements since the release of 1.5.17, but I believe only
one new feature ($time_inc, for controlling the rate at which status updates
are displayed)."

(tonio)

It only makes sense to build the vmware drivers on x86 platforms.

(tnn)

Updated archivers/gtar{,-info,-base} to 1.20

(tnn)

Catch up with gtar-base-1.20.

(tnn)

Update to GNU tar 1.20.
All self-tests pass under NetBSD-current.

Changes: 3.5 years worth of development; too much to list here.

(tnn)

Update homepage.

(tnn)

Note {libpurple,pidgin*,finch} 2.4.2 updates.

(tnn)

Update to finch-2.4.2.

* New default binding ctrl+x to open context menus.
* Menu triggers and other bindings will no longer conflict.
* Middle click pastes the internal clipboard (when mouse support is enabled).

(tnn)

make this work again.

(christos)

catch up with pidgin-2.4.2

(tnn)

Update to pidgin-2.4.2.

* The typing notification in the conversation history can be disabled or
  customized (font, color etc.) in .gtkrc-2.0.
* Added a plugin (not installed by default) which adds a Send button back to
  the conversation window. People without physical keyboards have a hard time
  with the lack of the button.
* Clicking on the buddyicon in the conversation window toggles the size of the
  icon between small and large.
* The settings of a chat (e.g. Handle in an XMPP chat, or Exchange in an AIM
  chat) can be edited from its context menu in the buddy list.
* Add a "Present conversation window" preference to the Message Notification
  plugin; the "Raise conversation window" option does not unminimize windows
  or draw attention to them when they are on other workspaces--the "Present"
  option should.
* Add a preference to set Escape as the keyboard shortcut for closing the
  conversation window.
* Add an option in the context menu to disable smileys in the selected text
  in the conversation history/log viewer. This should help people who
  regularly paste code in conversations.
* Add a preference to choose the minimum size of the text input area in lines.
* Moved the "Local alias" field in the Modify Account dialog to be below the
  "User Options" heading on the "Basic" tab.
* Number of room occupants is now shown in chat tooltips where possible

(tnn)

Aggressively disable options in Makefile.common and selectively
enable them in options.mk, through overrides.

(tnn)

Update to libpurple-2.4.2.

o In MySpaceIM, messages from spambots are discarded (Justin Williams)
o Strip mIRC formatting codes from quit and part messages.
o IRC now displays ban lists in-channel for joined channels.
o Fixed a bug where the list of loaded plugins would get removed when
  switching between different operating systems.
o Fix reception of IRC PART without a part message on Undernet
  (fixes a problem with litter in the channel user list).
o IRC no longer crashes on /list on servers which erroneously omit RPL_LISTSTART
o Update the NetworkManager support to use D-Bus directly, instead of
  libnm-glib. Hopefully it's stable now. It will now compile by default if you
  have D-Bus support and NetworkManager.h. (Elliott Sales de Andrade)
o MSN buddy list synchronization is now more forgiving, only asking about
  buddies who have disappeared completely from the server list and not those
  that have simply moved groups.
o IRC will now try to append 1-9 to your nick if it is in use, instead of
  substituting the last character with 1-9 where possible.
o Bonjour buddies will be saved persistently if they're moved out of the
  "Bonjour" group. (Eion Robb)

(tnn)

Fix Linux PLIST.

(tnn)

Note addition of x11/xf86-input-vmmouse and update of modular-xorg-drivers
to 1.2.

(tnn)

Add xf86-input-vmmouse, bump to version 1.2.

(tnn)

Import xf86-input-vmmouse-12.5.0 as x11/xf86-input-vmmouse.

This is the VMware virtual mouse driver for the modular Xorg server.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(tnn)

Updated x11/xf86-video-vmware to 10.16.1

(tnn)

Update to xf86-video-vmware-10.16.1.
This enables Xvideo support in vmware.

(tnn)

Fix build on IRIX by ensuring -lfontconfig links with -liconv.

(tnn)

Adjust previous, no need for bsd.prefs.mk here.

(tnn)

# Most modern Linuxen don't come with rcmds by default,
# so just pretend to have them to keep configure happy.

This is PR pkg/37912.

(tnn)

Updated x11/xrandr to 1.2.3

(tnn)

Update to xrandr-1.2.3.

pkgsrc changes:
  Link with -lm, since the program uses fabs(). This failed on Linux of all
  platforms. NetBSD happens to have fabs() in libc, but the manpage states
  that -lm should be linked in, so do it for all platforms.

Changes:
  Update COPYING
  Add *current and +preferred to the --verbose output
  When invoked with no option, xrandr dumps existing modes
  Allow the same output to be specified several times on the command line
  Clarify the ability to manipulate multiple outputs in the manpage
  Verify crtc against previous config.
  Always reset other outputs using the best crtc.
  Add xrandr test suite.
  Improved test script.
  Use IDs for mode selection instead of hand-crafted <w>x<h>@<r> strings.
  More tests for ambiguous xrandr output.
  Some minor issues in test case fixed.
  Be more robust in test case if mode database is borked.
  Add more tests, mostly regarding crtc switching and uncloning.
  Add informational output for known issues.
  Add another test known to fail.

(tnn)

Fix shell pattern so it doesn't try to copy the "CVS" directory when
the shell is bash and nocaseglob is enabled (ugh, misfeature).
PR pkg/38671.

(tnn)

Check that /usr/bin/patch really exists, so that we can gracefully fall
back to depending on devel/patch.

(tnn)

Updated misc/ja-less to 382.262nb1

(obache)

Some minor fixes
* Require working terminal library
* Honor PKG_SYSCONFDIR
* Fix sysconfdir mentioned in man pages.
* Add DESTDIR support

Bump PKGREVISION.

(obache)

- smartmontools-5.38

(obache)

Updated sysutils/smartmontools to 5.38

(obache)

Update smartmontools to 5.38, UNSTABLE to STABLE.
Based on patch provided by Sergey Svishchev in PR 38573.
This version contains DragonFly support, noted in PR 36982.
patch-ag is taken from PR 38199.

Date 2008-03-10
Summary: smartmontools release 5.38 (STABLE)
--------------------------------------------
This is a stable release of smartmontools.  In addition to changes
below, it includes:

- Libata/Marvell driver devices no longer need explicit '-d' switch
- DEVICESCAN automatically detects libata/marvell driver SATA devices
- Fixed auto-offline/autosave support in FreeBSD
- SAT device type + SCSI generic devices work properly with smartd under Linux
- Many additions to drive database
- More portable autogen/autoconf/automake script set
- Additional Windows IOCTL route to access SMART data
- Some ATA-8 updates
- Smoother CCISS compilation support in Linux
- Dragonfly support
- Fixed some ATA identity byte swap problems on big endian CPUs
- Added support for the QNX operating system
- No-fork option added to smartd
- Improved device scanning and drive type recognition in Windows
- 3ware support for controllers with more disks (32 max)
- Improved Windows installer
- Improved SMART Attribute list and descriptions
- Fix to smartctl return codes
- Fix to scheduled tests on Highpoint RAID controllers
- New samsung firmware bug workaround option
- Auto-offline and Auto-save fixed in Linux + libata
- Solaris: better SCSI support and support for Sun compilers AND gcc
- Fixed and improvements to CCISS support
- More options for SCSI temperature monitoring and history
- Additional command line options for selective self-tests
- Compilation fixes for various platforms.

See CHANGELOG for more details, or smartmontools CVS for still further
details.

(obache)

Updated graphics/blender to 2.45nb2

(tonnerre)

Fix CVEs CVE-2008-1102 and CVE-2008-1102 for blender:
- Fix arbitrary code execution vulnerability in .bend files which contain
  a crafted RGBE file (CVE-2008-1102).
- Create various temporary files in safer paths (CVE-2008-1103).

(tonnerre)

Fix MAINTAINER address typo since initial import.
tech-pkg at jp.NetBSD.org => tech-pkg-ja at jp.NetBSD.org

(obache)

Not smartmontools-5.38 (pkg/38573) also close pkg/38199, pkg/36982.

(obache)

ticket #2385

(rtr)

pullup ticket #2385 - requested by obache
ap2-suphp: update package for fixes

revisions pulled up:
- pkgsrc/www/ap2-suphp/Makefile 1.14
- pkgsrc/www/ap2-suphp/distinfo 1.4
- pkgsrc/www/ap2-suphp/patches/patch-aa 1.3
- pkgsrc/www/ap2-suphp/patches/patch-ab r0

  Module Name: pkgsrc
  Committed By: obache
  Date: Sat May 17 02:37:25 UTC 2008

  Modified Files:
  pkgsrc/www/ap2-suphp: Makefile distinfo
  pkgsrc/www/ap2-suphp/patches: patch-aa
  Removed Files:
  pkgsrc/www/ap2-suphp/patches: patch-ab

  Log Message:
  Update ap2-suphp to 0.6.3.
  While here, add DESTDIR support and more adapt sample config file to default settings.

  * Version 0.6.3 (30 March 2008)
  - Fixed a possible race condition concerning the check for the
    right symlink owner.
  - Added checks for the owner of the parent directories were added.

  * Version 0.6.2 (19 November 2006)
  - Made mod_suphp compatible with Apache 2.2
  - Modified SmartPtr implementation (hopefully) fixing
    double free problem
  - Fixed problem that caused the process to block
    when more than 4096 were written to stderr
  - Implemented userdir support
  - Fixed problem with PATH_INFO and PHP scripts

  * Version 0.6.1 (26 November 2005)
  - Changed usage of STL to gain better compatibility with old GCC versions
    (credits to Jeremy Chadwick for finding the relevant code)
  - Fixed typos in mod_suphp.c (Apache 1.3)
    (credits to Johan Ekenberg for finding these typos)
  - Fixed potential buffer overflow in function suphp_bucket_read() in
    src/apache2/mod_suphp.c
  - Fix problems with scripts sending "Last-Modified" headers
  - Extended autoconf script to look for an installation of APR
    and to use its includedir when building mod_suphp for Apache 2
  - Added support for chroot() call before execution of script

(rtr)

ap2-suphp is updated to 0.6.3

(obache)

Updated www/ap2-suphp to 0.6.3

(obache)

Update ap2-suphp to 0.6.3.
While here, add DESTDIR support and more adapt sample config file to default settings.

* Version 0.6.3 (30 March 2008)
- Fixed a possible race condition concerning the check for the
  right symlink owner.
- Added checks for the owner of the parent directories were added.

* Version 0.6.2 (19 November 2006)
- Made mod_suphp compatible with Apache 2.2
- Modified SmartPtr implementation (hopefully) fixing
  double free problem
- Fixed problem that caused the process to block
  when more than 4096 were written to stderr
- Implemented userdir support
- Fixed problem with PATH_INFO and PHP scripts

* Version 0.6.1 (26 November 2005)
- Changed usage of STL to gain better compatibility with old GCC versions
  (credits to Jeremy Chadwick for finding the relevant code)
- Fixed typos in mod_suphp.c (Apache 1.3)
  (credits to Johan Ekenberg for finding these typos)
- Fixed potential buffer overflow in function suphp_bucket_read() in
  src/apache2/mod_suphp.c
- Fix problems with scripts sending "Last-Modified" headers
- Extended autoconf script to look for an installation of APR
  and to use its includedir when building mod_suphp for Apache 2
- Added support for chroot() call before execution of script

(obache)

Deal with openssl changes in -current.

(markd)

+ MAMEDiff-2.29, amanda-2.6.0p1, clisp-2.45, dnstracer-1.9,
  dvdstyler-1.6.2, file-4.24, freenet-0.7, kmymoney2-0.9,
  links-2.1.0.36, rdesktop-1.6.0, smalltalk-3.0.3, wesnoth-1.4.2.

(wiz)

Uses bsd.prog.mk, so add USE_BSD_MAKEFILE=yes.

(tnn)

If we have USE_BSD_MAKEFILE, pass down INSTALL=${TOOLS_INSTALL:Q} in the
environment.
Otherwise BSD style packages will use the install(1) which
bootstrap-mk-files' sys.mk picked, rather than the one from
TOOLS_PLATFORM.install (which may be specified by the user in mk.conf).

(tnn)

Updated mail/dovecot-sieve to 1.0.3.

(ghen)

Update Dovecot Sieve plugin to 1.0.3.

- Improved vacation reply checks, log discarded vacation replies
- Expand ~ to home directory in sieve path
- If compiled script has the exact same mtime as the source script, assume the
  script hasn't changed (changed "<" check to "<=").
- Unfold multiline headers before comparing them.
- Improved error logging.

(ghen)

ticket #2384

(rtr)

pullup ticket #2384 - requested by obache
liblive: update package fixes & security vulnerabilities

revisions pulled up:
- pkgsrc/net/liblive/Makefile
- pkgsrc/net/liblive/PLIST
- pkgsrc/net/liblive/distinfo

  Module Name: pkgsrc
  Committed By: obache
  Date: Sat Apr 26 11:38:43 UTC 2008

  Modified Files:
  pkgsrc/net/liblive: Makefile PLIST distinfo

  Log Message:
  Update liblive to 2008.04.09.
  draw upon a patch to update for 2007.01.17 in PR 38038
  While here, add DESTDIR support and fix permission of installed libraries.

  2008.04.09:
  - Corrected a type-related bug in "RTPInterface::handleRead()".  (Thanks to Brain Lai for noting this.)
  - Fixed a bug in "RTSPClient" that would prevent RTCP "RR" reports from being sent to
  the correct multicast address when we are receiving a multicast stream. (Thanks to Changjin Liu for noticing this.)

  2008.04.03:
  - Fixed a bug that was introduced in the "2007.12.27" release.  The "timeout" parameter to the call to
  "readSocket" in "SocketDescriptor::tcpReadHandler()" in "RTPInterface.cpp" needed to be initialized
  (to zero) first.  (Thanks to Lodewijk Loos for alerting us to this problem.)
  - Added a new config file "config.bfin-linux-uclibc", and renamed "config.bfin_uclinux" as "config.bfin-uclinux".
  (Thanks to Mike Frysinger.)

  2008.02.08:
  - Added a hack (suggested by "Romain") to "MPEG2TransportStreamFramer" to (perhaps)
  produce more accurate per-transport-packet duration estimates for wildly VBR streams.
  - Updated "MPEG2TransportStreamMultiplexor" to support the addition of MPEG-4 Audio or Video Elementary Streams.
  - Updated "RTSPOverHTTPServer.cpp" (a work in progress) so that it complies properly for some versions of
  Visual Studio on Windows.  (Thanks to Eric Flickner for noting this.)

  2008.01.19:
  - Corrected the "getNormalPlayTime()" function - introduced in the previous release - to allow for 'trick play'
  scale factors other than 1.

  2008.01.18:
  - Added a new member function
    float MediaSubsession::getNormalPlayTime()
  which - given a stream's current presentation time - returns the "Normal Play Time".
  This function is useful for RTSP streams.
  - Added support for a "a=control:" URL specified in the SDP description at the session level.

  2008.01.04:
  - Changed the "RTSPClient" timeout - introduced in the previous release - from
  5s to 30s.
  - Added support for setting and returning the RTSP session start time (as well as the end time).
  (This eliminates the need for the "live-starttime.patch" file that VLC was using.)
  - Updated some of the system-specific configuration files, to eliminate the need for many of the patches that
  the VLC developers added to their code.

  2007.12.27:
  - Added a 5s timeout to the "RTSPClient" code that checks for RTSP responses.
  This mirrors a change that was already being done to VLC's copy of the code.
  (This is still a short-term fix, until the "RTSPClient" code is rewritten to
  properly use asynchronous I/O, using the event loop.)
  - Added a timeout to the "readSocket()" call in "SocketDescriptor::tcpReadHandler()" in "RTPInterface.cpp",
  to handle reading RTP-over-TCP data.  This allows for the possibility of non-cooperative RTSP clients.
  (Thanks to Peter Leese for this suggestion.)  This is probably not a complete solution;
  more thought is needed...

  2007.12.07:
  - Fixed "H2633plusVideoFileServerMediaSubsession" to properly use a dynamic RTP payload type, rather than the
  static type 34 (which is reserved for the now-obsolete old "video/H263" RTP payload format).

  2007.12.06:
  - Updated "JPEGVideoRTPSource" to take optional 'default width' and 'default height' parameters.
  These parameters can be set by fields in the SDP description, and can be used to specifiy unusually
  large frame widths and/or heights.  (Thanks to Andrey Filippov.)

  2007.11.18:
  - Fixed a couple of memory leaks in "DarwinInjector".  (Thanks to Eyal Beit-Halachmi for noting these.)
  - Removed old 'backwards compatibility' stuff from "FramedSource".  (Noone should be relying upon this any more.)
  - Fixed a bounds-checking error in "parseRTSPRequestString()" caused by an int vs. unsigned problem.
  (Thanks to Luigi Auriemma for noting this.)
  - In "RTSPClient.cpp", fixed a couple of "unsigned" vs. "int" nits. (Thanks for Brain Lai for noting this.)

  2007.11.01:
  - Several of the options to "openRTSP" have now been changed, with two new options added:
    -s <initial-seek-time>
    -z <scale>
  See the "openRTSP" documentation <http://www.live555.com/openRTSP/> for details.
  - Fixed a bug in the way that "MPEG4VideoStreamDiscreteFramer" parses 'config' information (for inclusion in
  the stream's SDP description).  (Thanks to Nicola Bova for helping to identify this bug.)
  - Eliminated a potential memory (and socket) leak when allocating server RTP,RTCP socket pairs.
  (Thanks to David Pan for reporting this.)
  - Updated "ByteStreamFileSource" to treat a 0-byte file read the same as EOF.
  - Ensure that we have reasonable OS buffering for writes on non-blocking sockets.

  2007.08.03a:
  - Removed a debugging printf() that had been left in by mistake.  (Thanks to Massimo Zito for noticing this.)

  2007.08.03:
  - Updated the "RTSPServer" implementation to work better on systems with more than one IP address.
  The server will now include - in its RTSP responses - the IP address on which the corresponding incoming request
  was received.

  2007.07.25:
  - Added some sanity checks to various "MediaSink" subclasses, in case "fSource" is NULL.
  (Thanks to Andrey Kaminsky for noting one of these.)

  2007.07.10:
  - Made sure that "MPEG2TransportStreamFramer"s estimate of the average duration of each Transport Packet
  gets updated correctly after each 'seek' operation.  (Thanks to Massimo Zito for suggesting this.)
  - Fixed a bug in "MPEG2TransportStreamFromESSource" that was causing presentation
  timestamps to not be generated correctly.  (Thanks to Massimo Zito for noticing this.)

  2007.07.01:
  - Fixed a bug in "RTSPServer" and "RTSPClient" that would cause problems when streaming
  files whose names have spaces in them.
  - Fixed a bug in "OnDemandServerMediaSubsession::deleteStream".  (Thanks to Igor Bukanov.)
  - Make the sockets for "RTPSource", "RTCPInstance" and "BasicUDPSource" non-blocking, even though they will be read
  from only asynchronously, when packets arrive.  The reason for this is that, in some OSs, reads on a blocking
  socket can (allegedly) sometimes block, even if the socket was previously reported (e.g., by "select()") as
  having data available.  (This can supposedly happen if the UDP checksum fails, for example.)
  (Thanks to Marc Neuberger for pointing this out.)
  - Fixed a bug in "MPEG2TransportFileServerMediaSubsession.cpp" that was causing 2x
  fast-forward to fail.  (Some debugging code had been left in by mistake.)

  2007.05.24:
  - Modified "setupDatagramSocket()" to better handle setting "ReceivingInterfaceAddr" when creating a socket
  to be used to send/receive multicast.
  - Made a couple of minor changes to overcome some compilation errors that some people were apparently seeing.

  2007.05.23:
  - The RTSP server now includes the "source=" parameter in the response to a RTSP "SETUP" command.
  This works around a bug in QuickTime Player that would cause it to not send RTCP "RR" packets
  (when playing a unicast stream, and running on Mac OS X).  (Thanks to Dave Singer et al at Apple for tracking
  down this problem.)
  - The RTSP server implementation no longer terminates the session if it returns 400 or 405 errors.

  2007.04.24a:
  - Fixed a problem in the new "RTSPOverHTTPServer" code that was causing some people compilation problems.

  2007.04.24:
  - Fixed a typo in "testOnDemandRTSPServer.cpp".  (Thanks to Nils Grundback for noticing this.)
  - Modified the signature of "RTSPServer::specialClientAccessCheck()" (defined in the previous revision) to add
  a new "clientAddr" parameter (a "struct sockaddr_in"), to allow special access checking based on clients' IP
  address.
  - Make sure that the locale is set to "POSIX" when calling "toupper()" or "tolower()" on human-supplied strings.
  (Thanks to Ismail Doenmez for noting this.)

  2007.04.20:
  - Modified "MPEG2TransportStreamMultiplexor" to set the "discontinuity_indicator" flag for the first
  "adaptation_field" in the output Transport Stream.
  - Changed "AMRAudioRTPSource" to more accurately report whether/when an interleaved frame's timestamp has
  been synchronized using RTCP.
  (Thanks to David Bertrand for this patch.)
  - Made to a small fix to the previous revision's support for multicast streaming of raw UDP (nonstandard)
  - Added a virtual function to "OnDemandServerMediaSubsession" for closing the stream source.
  Subclasses can redefine this, if they wish, to do something smarter. (Thanks to Igor Bukanov for this patch.)
  - Added support to "RTSPServer" for optionally performing special per-client access control, beyond the
  standard Digest Authentication method.  (Thanks to Igor Bukanov for this patch.)
  - Made a minor optimization to "Groupsock.cpp".  (Thanks to Maxim Petrov for this suggestion.)
  - Added an initial implementation of RTSP-over-HTTP at the server level (it was already supported at the client level).
  (Note: This code has not yet been completed, and doesn yet work, so don't try to use it.)

  2007.02.20:
  - Updated "RTSPServer" to support multicast streaming of raw UDP streams (nonstandard).
  (Thanks to Aesmund Grammeltvedt for this modification.)
  - Made "RTSPClient" a little more robust in case the TCP connection fails.
  - Made "RTPSink::rtpmapLine()" virtual (as requested by Andrew Voznytsa).
  - Removed an archaic (no longer used) declaration in "groupsock/include/Groupsock.hh".
  - Added an optional "allowKasennaProtocol" parameter to "RTSPClient::describeWithPassword()"
  (similar to "RTSPClient::describeURL()").  (Thanks to Igor Bukanov for this suggestion.)s

  2007.01.17:
      - Fixed a bug that would cause the "MPEG2TransportStreamIndexer" application to fail when run on a big-endian
  architecture.
  - Added a new cl "H264VideoFileSink", that prepends each incoming H.264 NAL unit with the prefix 0x000001,
  before writing it to the file.  Also updated the "openRTSP" code to use this, when receiving H.264/RTP streams.
  (Thanks to Chris Kuiper for contributing this.)
  - Added a temporary #ifdef to "GroupsockHelper.cpp" to work around a compliation problem when building
  for Cygwin.

  2007.01.11:
  - Improved the "MPEG2IndexFromTransportStream" class to recogize Transport Stream
  PAT and PMT (tables).  This in turn makes the "MPEG2TransportStreamIndexer"
  utility more robust.
  - Fixed a minor bug in "MPEG2TransportStreamFromESSource".

  2007.01.09:
  - Added RTSP server support for 'trick play' operations on MPEG-2 Transport Stream
  files.  This requires the presence of a ".tsx" indexle for each ".ts" file.
  (This functionality will shortly be documented on the LIVE555 web site,
  and announced on the "live-devel" mailing list.)
  - Improved the performance of asynchronous file reading in "ByteStreamFileSource".
  (Thanks to Aesmund Grammeltvedt for this suggestion.)
  - Added "-D_FILE_OFFSET_BITS=64" to the "COMPILE_OPTS" line for each of the Linux config files, in order to
  alleviate possible problems with I/O on large files.

  2006.12.31:
  - We now implement "ByteStreamFileSource" on Windows using synchronous file reads,
  by default.  I had thought that Windows XP had fixed the problem - present in
  earlier versions of Windows - whereby open files are not treated as select()able
  sockets.  But apparently the problem is still there.
  - Added code that will - probably in the next release, very soon - support server
  'trick mode' operations on MPEG-2 Transport Stream files.  At present, we have two
  new applications - in the "testProgs" directory - that help support this:
  "MPEG2TransportStreamIndexer"  create a special index file for a Transport Stream
  file), and "testMPEG2TransportStreamTrickPlay" (to generate a new Transport Stream
  file that simulates a 'trick play' operation performed on the original Transport
  Stream file).  See my forthcoming post to the "live-devel" mailing list for more
  details.
  - Fixed a bug in the Base64 encoding routine.  (Thanks to Sebastian Gracias for reporting this.)

  2006.12.08:
  - Made sure that each TCP socket used by a "RTSPserver" is non-blocking, so that a slow or hanging client
  cannot hang a server.  (Thanks to "jers (at) inwind.it" for this suggestion.)

(rtr)

Some of the X.org packages assume that the C preprocessor will use stdin
if no filename given, but this isn't true with the native HP compiler, so
teach them to use '-' explicitly.

XXX using cpp(1) to postprocess manpages is ugly, most of the other X.org
packages seem to have been converted to use sed(1).

(tnn)

ticket #2383

(rtr)

pullup ticket #2383 - requested by obache
centerim: update package bug & security fixes

revisions pulled up:
- pkgsrc/chat/centerim/Makefile 1.7
- pkgsrc/chat/centerim/PLIST 1.3
- pkgsrc/chat/centerim/distinfo 1.3
- pkgsrc/chat/centerim/patches/patch-aa 1.2
- pkgsrc/chat/centerim/patches/patch-ac 1.2
- pkgsrc/chat/centerim/patches/patch-an 1.2
- pkgsrc/chat/centerim/patches/patch-av 1.2
- pkgsrc/chat/centerim/patches/patch-au r0
- pkgsrc/chat/centerim/patches/patch-aw r0
- pkgsrc/chat/centerim/patches/patch-ax r0
- pkgsrc/chat/centerim/patches/patch-ay r0
- pkgsrc/chat/centerim/patches/patch-az r0
- pkgsrc/chat/centerim/patches/patch-ba r0
- pkgsrc/chat/centerim/patches/patch-bb 1.1

  Module Name: pkgsrc
  Committed By: obache
  Date: Tue May 13 15:15:51 UTC 2008

  Modified Files:
  pkgsrc/chat/centerim: Makefile PLIST distinfo
  pkgsrc/chat/centerim/patches: patch-aa patch-ac patch-an patch-av
  Added Files:
  pkgsrc/chat/centerim/patches: patch-bb
  Removed Files:
  pkgsrc/chat/centerim/patches: patch-au patch-aw patch-ax patch-ay
      patch-az patch-ba

  Log Message:
  Update centerim to 4.22.5.
  Based on patch provided in PR 38624.

  'cicqconv' command is renamed for 'cimconv', conflict with centericq is gone away.

  2008-04-08 New version (4.22.5) released.
  This release fixes various segfaults in the Yahoo protocol. It also introduces a
  bar which displays all open chats nicely.

  2008-03-29 New version (4.22.4) released.
  This release fixes the possible url exploit described in CVE-2008-1467. It also
  makes CenterIM ready for the Yahoo protocol change kicking in on 2nd april 2008.

  2008-03-11 New version (4.22.3) released.
  This version fixes the various ICQ contact list issues (e.g adding contacts
  should now work).

  2007-12-08 New version (4.22.2) released.
  More than 90 fixes/improvements have been added to centerim since our last
  release in June. The main fixes included are:

  * Fixed bug in msn login when the server sent a NOT message
  * Fixed bug in ICQ protocol which prevented others from seeing your presence
    (partial)
  * New version tracking/updating (Thanks to David Riebenbauer for this helpful
    feature)
  * Added an "Out for Lunch" state

(rtr)

Updated wm/wmii to 3.6nb2.

(ghen)

Fix compatibility with dmenu 3.6; -b option is deprecated and replaced by -y
for arbitrary y coordinate (-y -0 for bottom).  Bump PKGREVISION.

(ghen)

update to 4.2.3
changes:
* NEW options front and back to "set colorbox"
* NEW character encoding support for emf and pdf terminals
* NEW "format" keyword for "set tics" and "set {x|y|...}tics"
* NEW allow user to set colorbar label rotatation if the bar is vertical
+bugfixes

(drochner)

+pdflib-lite

(drochner)

import pdflib-lite-7.0.3
This is a newer version of what we have as pkgsrc/print/pdflib, but
it comes with much unfriendlier licensing conditions (non-commercial
use only).
I've tested it with gnuplot. There is just some "dash patterns" support
added over pdflib4 afaics. So making it the default choice isn't worth
the hassle, but if you want to try it, here is it.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(drochner)

Updated misc/gnuls to 6.11

(tnn)

Reach over from misc/gnuls to sysutils/coreutils for common logic and
patches. Updates gnuls to 6.11 and makes it track coreutils.

(tnn)

Added net/freeradius2 version 2.0.4

(adrianp)

Use the proper way to pass the necessary arguments for the Mac OS X Leopard
link bug workaround to the linker.

(tron)

+freeradius2

(adrianp)

Remove file that never should have been imported

(adrianp)

Freeradius version 2.0 of the server is intended to be backwards compatible
with previous versions, but also to have many new features, such as:

* simple policy language (see "man unlang")
* virtual servers (raddb/sites-available/README)
* IPv6 support
* better proxy support (raddb/proxy.conf)
* More EAP types
* Debugging output should be MUCH easier to understand
* VMPS support
* More modules are marked "stable" (python, etc.)
* SQL configuration has been cleaned up (see raddb/sql/*)
* limited support for HUP
* check configuration and exit (radiusd -C)
* Server core is now event based (simpler, more powerful)

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(adrianp)

Add CONFLICTS for upcoming freeradius 2.x import

(adrianp)

update to 1.8.8
changes: bugfixes

(drochner)

update to 1.7.3
changes:
-direct-tcpip support
-bug fixes

pkgsrc change: disable use of Python setuptools
(gives unpredictable results)

(drochner)

update to 3.4.5
changes:
-Port to gtk 2.12 tooltips API
-Now first toplevel in project automatically shows up in the workspace
-Project no longer allows duplicate widget names
-bugfixes
-translation updates

(drochner)

update to 4.6.4
The main point of this release is support for the
Replication Manager. The testsuite is very improved, also, in speed and
coverage.

(drochner)

Shift after -K.

(joerg)

pull another patch from upstream CVS, to fix a possible crash,
ride on today's PKGREVISION bump

(drochner)

quell a pointless warning

(drochner)

+ pkg_leaves

(joerg)

Added pkg_leaves-1.0.

(joerg)

As requested on IRC, add pkg_leaves-1.0:
pkg_leaves is a small script to print a list of leaf packages aka
packages not depended on.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(joerg)

Updated net/libupnp to 1.6.6nb1

(obache)

Fix for setsockopt() in Threadpool.c to allow more than one process
to join the multicast-group on BSDs, not only FreeBSD and MacOS X.

Noticed by Greg Kerr via private mail.

Bump PKGREVISION.

(obache)

mention recent work

(drochner)

Fix speling.

(joerg)

ticket #2382

(rtr)

pullup ticket #2382 - requested by adrianp
mantis: update for bug and security fixes

revisions pulled up:
- pkgsrc/devel/mantis/Makefile 1.30
- pkgsrc/devel/mantis/PLIST 1.11
- pkgsrc/devel/mantis/distinfo 1.11

  Module Name: pkgsrc
  Committed By: adrianp
  Date: Wed May 14 21:43:06 UTC 2008

  Modified Files:
  pkgsrc/devel/mantis: Makefile PLIST distinfo

  Log Message:
  Mantis 1.1.1 Released

  This is a maintenance release for the 1.1.x branch.  It includes a fix for PHP 4 support (#8681 stripos), several fixes for SOAP API, a security fix, and other minor bug fixes.

  Mantis 1.1.0 Released

  After 4 alpha releases, 3 release candidates and over 400 features and bug fixes, Mantis 1.1.0 gold is finally released. The highlights of the Mantis 1.1.0 release include:

  1. Inclusion of MantisConnect (SOAP API) out of the box
  2. Wiki integration (dokuwiki, mediawiki, xwiki),
  3. Email queuing,
  4. Gravatar integration,
  5. DB2 support,
  6. Tagging,
  7. Filtering perma links,
  8. Time tracking,
  9. Twitter integration,
  10. UTF8 support,
  11. Generic configuration page,
  12. Show last visited issues,
  13. XHTML compliance,
  14. Authenticated RSS

(rtr)

Fix build on NetBSD-current with openssl-current, by adding a "const".

(wiz)

ticket #2381

(rtr)

pullup ticket #2381 - requested by adrianp
bugzilla3: bug fixes, cross-site scripting fixes

revisions pulled up:
- pkgsrc/devel/bugzilla3/Makefile 1.5
- pkgsrc/devel/bugzilla3/PLIST 1.2
- pkgsrc/devel/bugzilla3/distinfo 1.3

  Module Name: pkgsrc
  Committed By: adrianp
  Date: Tue May  6 19:45:54 UTC 2008

  Modified Files:
  pkgsrc/devel/bugzilla3: Makefile PLIST distinfo

  Log Message:
  3.0.4
  * Bugzilla administrators were not being correctly notified about new releases. (Bug 414726)
  * There could be extra whitespace in email subject lines. (Bug 411544)
  * The priority, severity, OS, and platform fields were always required by the Bug.create WebService function, even if they had defaults specified. (Bug 384009)
  * Better threading of bugmail in some email clients. (Bug 376453)
  * There were many fixes to the Inbound Email Interface (email_in.pl). (Bug 92274, Bug 377025, Bug 412943, Bug 413672, and Bug 431721)
  * checksetup.pl now handles UTF-8 conversion more reliably during upgrades. (Bug 374951)
  * Comments written in CJK languages are now correctly word-wrapped. (Bug 388723)
  * All emails will now be sent in the correct language, when the user has chosen a language for emails. (Bug 405946)
  * On Windows, temporary files created when uploading attachments are now correctly deleted when the upload is complete. (Bug 414002)
  * checksetup.pl now prints correct installation instructions for Windows users using Perl 5.10. (Bug 414430)

  3.0.3
  * mod_perl no longer compiles Bugzilla's code for each Apache process individually. It now compiles code only once and shares it among each Apache process. This greatly improves performance and highly decreases the memory footprint. (Bug 398241)
  * You can now search for '---' (without quotes) in versions and milestones. (Bug 362436)
  * Bugzilla should no longer break lines unnecessarily in email subjects. This was causing trouble with some email clients. (Bug 374424)
  * If you had selected "I'm added to or removed from this capacity" option for the "CC" role in your email preferences, you wouldn't get mail when more than one person was added to the CC list at once. (Bug 394796)
  * Deleting a user account no longer deletes whines from another user who has the deleted account as addressee. The schedule is simply removed, but the whine itself is left intact. (Bug 395924)
  * contrib/merge-users.pl now correctly merges all required fields when merging two user accounts. (Bug 400160)
  * Bugzilla no longer requires Apache::DBI to run under mod_perl. It caused troubles such as lost connections with the DB and didn't give any important performance gain. (Bug 408766)

  Security Fixes:
  Unauthorized Bug Change
  Cross-Site Scripting
  Account Impersonation (Minor)

(rtr)

ticket #2380

(rtr)

pullup ticket #2380 - requested by adrianp
bugzilla: update for cross-site scripting vulnerability

revisions pulled up:
- pkgsrc/devel/bugzilla/Makefile
- pkgsrc/devel/bugzilla/PLIST
- pkgsrc/devel/bugzilla/distinfo

  Module Name: pkgsrc
  Committed By: adrianp
  Date: Tue May  6 19:36:39 UTC 2008

  Modified Files:
  pkgsrc/devel/bugzilla: Makefile PLIST distinfo

  Log Message:
  2.22.4

  Class:      Cross-Site Scripting
  Versions:    2.17.2 and higher
  Description: When using the "Format for Printing" view of a bug (or
              the "Long Format" of a bug list, which is the same thing),
      there was a cross-site scripting hole--arbitrary text
      from a particular URL parameter could be injected into the
          page without filtering.

(rtr)

ticket #2379

(rtr)

pullup ticket #2379 - requested by adrianp
mt-daapd: security updates for dos vulnerabilities

revisions pulled up:
- pkgsrc/audio/mt-daapd/Makefile
- pkgsrc/audio/mt-daapd/distinfo
- pkgsrc/audio/mt-daapd/patches/patch-ac

  Module Name: pkgsrc
  Committed By: adrianp
  Date: Wed May 14 21:12:12 UTC 2008

  Modified Files:
  pkgsrc/audio/mt-daapd: Makefile distinfo
  pkgsrc/audio/mt-daapd/patches: patch-ac

  Log Message:
  0.2.4.2
  Small bug fixes for port order on mdns advertisement on intel macs, playlists based on bitrate. Primarly, though, this release is to apply fix for CVE-2008-1771. Thanks to Nico Golde for bringing it to light.
  0.2.4.1
  Security updates for two DOS and one format string vulnerability.

(rtr)

ticket #2378

(rtr)

pullup ticket #2378 - requested by adrianp
php5: many security fixes

revisions pulled up:
- pkgsrc/lang/php5/Makefile 1.64
- pkgsrc/lang/php5/Makefile.common 1.29
- pkgsrc/lang/php5/distinfo 1.52

  Module Name: pkgsrc
  Committed By: adrianp
  Date: Sun May  4 16:50:44 UTC 2008

  Modified Files:
  pkgsrc/lang/php5: Makefile Makefile.common distinfo

  Log Message:
  Security Enhancements and Fixes in PHP 5.2.6:

  Fixed possible stack buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin.
  Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.
  Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.
  Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.
  Properly address incomplete multibyte chars inside escapeshellcmd() identified by Stefan Esser.
  Upgraded bundled PCRE to version 7.6

  Key enhancements in PHP 5.2.6 include:
  * Fixed two possible crashes inside the posix extension.
  * Fixed bug 44069 (Huge memory usage with concatenation using . instead of .=)
  * Fixed bug 44141 (private parent constructor callable through static function).
  * Fixed bug 43589 (a possible infinite loop in bz2_filter.c).
  * Fixed bug 43450 (Memory leak on some functions with implicit object __toString() call).
  * Fixed bug 43201 (Crash on using uninitialized vals and __get/__set).
  * Fixed bug 42978 (mismatch between number of bound params and values causes a crash in pdo_pgsql).
  * Fixed bug 42937 (__call() method not invoked when methods are called on parent from child class).
  * Fixed bug 42736 (xmlrpc_server_call_method() crashes).
  * Fixed bug 42369 (Implicit conversion to string leaks memory).
  * Fixed bug 41562 (SimpleXML memory issue).
  * Over 120 bug fixes.

(rtr)

ticket #2377

(rtr)