ticket #2330

(rtr)

Pullup ticket 2330 - requested by tron
update fixes security vulnerability CVE-2007-6019

Revisions pulled up:
- pkgsrc/multimedia/ns-flash/Makefile 1.29
- pkgsrc/multimedia/ns-flash/distinfo 1.15

  Module Name: pkgsrc
  Committed By: ghen
  Date: Wed Apr  9 19:13:56 UTC 2008

  Modified Files:
  pkgsrc/multimedia/ns-flash: Makefile distinfo

  Log Message:
  Update to Adobe Flashplayer version 9.0.124.  Fixes CVE-2007-6019.

(rtr)

Added misc/tellico version 1.3.1

(wiz)

+ tellico.

(wiz)

Import tellico-1.3.1 as misc/tellico.

Tellico is a KDE application for organizing your collections. It
provides default templates for books, bibliographies, videos, music,
video games, coins, stamps, trading cards, comic books, and wines.

Tellico allows you to enter your collection in a catalogue database,
saving many different properties like title, author, etc. Two
different views of your collection are shown. On the left, your
entries are grouped together by any field you like, allowing you
to see how many are in each group. On the right, selected fields
are shown in column format, allowing you to sort by any field. On
the bottom is a customizable HTML view of the current entry. The
entry editor is a dialog box where you enter the data.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(wiz)

Added devel/exempi version 2.0.0

(wiz)

+ exempi.

(wiz)

Import exempi-2.0.0 as devel/exempi.

XMP (Extensible Metadata Platform) facilitates embedding metadata
in files using a subset of RDF. Most notably XMP supports embedding
metadata in PDF and many image formats, though it is designed to
support nearly any file type.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(wiz)

ticket #2327

(rtr)

Pullup ticket 2325 - requested by tron
update to version fixes security vulnerability CVE-2007-6019

Revisions pulled up:
- pkgsrc/www/firefox-bin-flash/Makefile.common 1.22
- pkgsrc/www/firefox-bin-flash/distinfo 1.11

  Module Name: pkgsrc
  Committed By: tron
  Date: Wed Apr  9 08:39:24 UTC 2008

  Modified Files:
  pkgsrc/www/firefox-bin-flash: Makefile.common distinfo

  Log Message:
  Update "firefox-bin-flash" package to 9.0.124. The new version fixes
  the security vulnerability report in CVE-2007-6019.

(rtr)

Updated security/qca2 to 2.0.0nb3

(wiz)

Remove non-standard qt4/lib/pkgconfig directory. Bump PKGREVISION.

(wiz)

Updated x11/xf86-video-radeonhd to 1.2.0

(xtraeme)

Update to 1.2.0:

- Added support for RV620, RV635, and R680.
- Added 2D acceleration for R5xx (including RS6xx), both XAA and EXA.
- Added support for DDIA block (second digital output) on RS690.
- Added support for interlaced modes
- Added additional layers for splitting outputs into encoders and
  transmitters as needed for new hardware.
- Added support for DragonFly BSD.
- Improved RandR corner cases.
- Improved handling of secondary cards.
- Implemented foundation work for future TV support.
- Huge number of bugfixes and minor updates.

(xtraeme)

ticket #2325

(rtr)

Pullup ticket 2325 - requested by taca
fix build when hpn-patch enabled

Revisions pulled up:
- pkgsrc/security/openssh/distinfo 1.68
- pkgsrc/security/openssh/patches/patch-ao 1.11

  Module Name: pkgsrc
  Committed By: taca
  Date: Tue Apr  8 06:36:47 UTC 2008

  Modified Files:
  pkgsrc/security/openssh: distinfo
  pkgsrc/security/openssh/patches: patch-ao

  Log Message:
  Fix build problem with hpn-patch option enabled.

(rtr)

In substitution, avoid space on CONF_DIR= to make it valid /bin/sh.
PYTHON_PATCH two more scripts.
PKGREVISION++

(gdt)

Fix builtin.mk for libarchive-2.5.0 and newer.

(joerg)

mention recent updates/additions

(drochner)

update to 0.10.11
changes:
-Wrap gst.Pad.start_task
-New videomixer example
-Various other fixes

(drochner)

update to 0.16.13
changes: minor fixes

(drochner)

update to 2.22.0
This switches to the gnome-2.22 release branch.

(drochner)

+gnome-settings-daemon,gvfs

(drochner)

add gvfs-0.2.3, a userland virtual file system implementation which
ought to replace gnome-vfs, starting with gnome-2.22

pkgsrc note: It would be great to have this split into modules to
limit dependencies, but as the code is structured this is hard to do.
So I've basically selected functions which are provided by gnome-vfs
plus gnome-vfs-samba. Unfortunately, the samba part doesn't work for me -
mount attempts just hang. So this is a work-in-progress, help welcome.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(drochner)

add gnome-settings-daemon-2.22.1, a program to manage preferences etc,
used to be part of gnome-control-center but was split out in gnome-2.22

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(drochner)

+totem-pl-parser

(drochner)

add totem-pl-parser-2.22.2, a library to parse playlists, used to be
part of totem, but was split out in gnome-2.22

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(drochner)

+libgweather

(drochner)

add libgweather-2.22.1.1, a library to access weather information, used
to be part of gnome-applets but was split out in gnome-2.22

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(drochner)

update to 0.8.0
changes:
* Add new attributes for hidden (NoDisplay) and default
  section (DocDefaultSection) to the .document file parsing
* Increase scrictness of parsing in line with the spec.
* omf files now return (approximate) fd.o categories
* Add new requirement to define I_KNOW_RARIAN_0_8_IS_UNSTABLE before
  use
* rarian.h is now a general inclusion guard and main functions have
  moved to rarian-main.h
* Update example program to use new features
-bugfixes

pkgsrc note: While 0.8.0 is marked unstable, it is required by the
upcoming 2.22 gnome release. There are no compatibility problems
for clients installing help files, but build of yelp (the help browser)
will be broken until it is updated.

(drochner)

update to 0.3.14
sorry, no changelog available (The only message to the subject in
the mailing list says "Release notes tomorrow".),
a number of bugfixes afaict

(drochner)

Tickets #2324

(rtr)

Pullup ticket 2324 - requested by joerg
fix stray 1 preventing package do-install

Revisions pulled up:
- pkgsrc/benchmarks/forkbomb/Makefile 1.5

  Module Name: pkgsrc
  Committed By:        joerg
  Date:                Mon Apr  7 17:09:03 UTC 2008

  Modified Files:
  pkgsrc/benchmarks/forkbomb: Makefile

  Log Message:
  Fix stray 1.

(rtr)

only set 25 in PYTHON_VERSIONS_ACCEPTED if ../../wip/python25/Makefile found

(abs)

Switch from PYTHON_VERSIONS_ACCEPTED= to PYTHON_VERSIONS_INCOMPATIBLE= (and enable 25)

(abs)

rather than accepting python 24 23 & 22, mark 15 20 & 21 as incompat

(abs)

Note addittion of filesystems/fuse-djmount version 0.71

(agc)

Add and enable fuse-djmount

(agc)

Initial import of djmount-0.71 into the packages collection.

djmount is a UPnP AV client.  It mounts the media content of
compatible UPnP AV devices as a Unix filesystem.

Djmount automatically discovers all UPnP AV Media Servers on the
network, and makes the content available in a directory tree.  All
shared files (e.g.  Audio or Video files) are directly visible and can
be played using your favorite media player.

[15:53:42] agc@inspiron1300 ~ 190 > df /mnt
Filesystem      1K-blocks      Used      Avail %Cap Mounted on
/dev/puffs        28101396  20741466    5954862  77% /mnt
[15:53:44] agc@inspiron1300 ~ 191 > l /mnt
total 5
dr-xr-xr-x  5 root  wheel  512 Jan  1  2000 .
drwxr-xr-x  37 root  wheel  1536 Mar 15 13:22 ..
dr-xr-xr-x  5 root  wheel  512 Jan  1  2000 .debug
dr-xr-xr-x  8 root  wheel  512 Jan  1  2000 INSPIRON1300: Alistair Crooks:
dr-xr-xr-x  7 root  wheel  512 Jan  1  2000 MediaTomb
-r--r--r--  1 root  wheel    41 Jan  1  2000 devices
[15:54:23] agc@inspiron1300 ~ 192 >

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(agc)

Add a javascript option to mediatomb (via pkgsrc/lang/spidermonkey).

(agc)

Add 25 to PYTHON_VERSIONS_ACCEPTED, so PYTHON_VERSION_DEFAULT=25 works in mk.conf

(abs)

Note update of the "pango" package to version 1.20.2.

(tron)

Update "pango" package to version 1.20.2. Changes since version 1.20.1:
- Really fix build without cairo-atsui.

(tron)

update for 2.4.5

(drochner)

update to 2.4.5
This release includes just a small number of fixes, primarily preventing
crashes of the interpreter in certain boundary cases.

(drochner)

fix possible buffer overflow by negative atguments to zlib.flush(),
from upstream CVS, bump PKGREVISION

(drochner)

Note update of the "pango" package to version 1.20.1nb1.

(tron)

The code which tries to disable the "atsui" backend under Mac OS X if
the package is compiled with X11 support doesn't work anymore. Don't try
to disable it because it doesn't seem to break the X11 backend anymore
(tested with XChat). Bump package revision because of package list changes
under Mac OS X.

(tron)

Add two patches to recognise the "mp4" file extension as a "video/mp4"
type, which lets mp4 files be added to the database, and get presented
via UPnP.

There are two files because the basic mappings are specified in the
config.xml file, which is generated by a C++ program, and there's a
corresponding change to the mappings.xml file which is kept around
as source.

With thanks to Jared for the mapping information.

(agc)

Make sure some other packages are installed as pre-requisites for
mediatomb:

libexif
taglib
zlib

(agc)

Updated devel/m4 to 1.4.11

(wiz)

Update to 1.4.11:

* Noteworthy changes in Version 1.4.11 (2008-04-02) [stable]
  Released by Eric Blake, based on git version 1.4.10a

** Security fixes for the -F option, for bugs present since -F was
  introduced in 1.3: Avoid core dump with 'm4 -F file -t undefined', and
  avoid arbitrary code execution with certain file names.

** Fix regression introduced in 1.4.9b in the `divert' builtin when more
  than 512 kibibytes are saved in diversions on platforms like NetBSD
  or darwin where fopen(name,"a+") seeks to the end of the file.

** The output of the `maketemp' and `mkstemp' builtins is now quoted if a
  file was created.  This is a minor security fix, because it was possible
  (although rather unlikely) that an unquoted string could match an
  existing macro name, such that use of the `mkstemp' output would trigger
  inadvertent macro expansion and operate on the wrong file name.

** Enhance the `defn' builtin to support concatenation of multiple text
  arguments, as required by POSIX.  However, at this time, it is not
  possible to concatenate a builtin macro with anything else; a warning is
  now issued if this is attempted, although a future version of M4 may
  lift this restriction to match other implementations.

** Enhance the `format' builtin to parse all C99 floating point numbers,
  even on platforms where strtod(3) is buggy, although the replacement
  function does have the known issue of rounding errors when parsing
  some decimal floating point values.  This fixes testsuite failures
  introduced in 1.4.9b.

** Enhance the `index' builtin to guarantee linear behavior, in spite of
  the surprisingly large number of systems with a brain-dead quadratic
  strstr(3).

** A number of portability improvements inherited from gnulib.

(wiz)

+ Updated devel/mercurial to 0.9.5 [bjs 2008-04-10]

(bjs)

Update to mercurial 1.0 and add DESTDIR support.  Changes:

General:
  * greatly improved merge tool configuration, see "hgrc.5.txt" for details
  * improved copy/rename handling in diffs, status, and merge
  * files in .hg inherit permissions from .hg/store
  * infer --repository when possible, so commands may be run from anywhere.
  * easy-installable
  * new "droplet" logo

Commands:
  * archive: disable ".hg_archival.txt" file addition with "ui.archivemeta"
  * bisect: now built-in with greatly improved performance and usability
  * bundle: new --all option to bundle the whole repository more easily.
  * cat: apply decode filters with --decode
  * clone: can clone from a full-history bundle
  * commit: warn when creating a new head
  * debugancestor: index argument is now optional
  * diff: set the number of context line to show with -U/--unified
  * grep: display matched revisions commit date with --date
  * import: new --no-commit and --user options
  * incoming/outgoing: add --limit option
  * log: use -b/--only-branch to show revisions of a single branch
  * remove: improve handling for --after
  * revert: major speedup
  * serve: prefix the served path with --prefix (also in [web] section)
  * status: unknown files are skipped by --quiet
  * tag: allow multiple tags to be added or removed
  * tags: --verbose flags local tags
  * update: switch between named branches without -C

Extensions:
  * churn: promoted to an official extension (previously in contrib)
  * color: new extension coloring "status" and "qseries" command outputs
  * convert:
  * hgk: configuration file changed from .gitk to .hgk
  * highlight: new extension enabling syntax highlighting in hgweb
    file view (requires pygments)
  * inotify: new extension using Linux 2.6 inotify API for instant
    status checking
  * keyword: new extension for filewise RCS-keyword expansion in working
    directory
  * mq: new --currentdate, --date, --currentuser, and --user options
  * record: add "qrecord" command when used with mq

Web interface:
  * improved WSGI integration and compatibility
  * follow symlinks in hgwebdir collections
  * show branches in most of gitweb templates
  * add line anchors to annotate, changeset, diff and file views
  * support web.baseurl in hgwebdir, overriding SCRIPT_NAME

Hooks:
  * standard hook to reject text files with CRLF in win32text extension
  * redirect stdout to stderr for ssh and http servers

(bjs)

+ Use the options framework instead of using FVWM_USE_* variables.

+ Convert to use PLIST_VARS instead of manually passing "@comment "
  to the plist module.

Bump the PKGREVISION to 2 due to the options changes.

(jlam)

+ Use the options framework instead of using MTOOLS_ENABLE_FLOPPYD.
+ Convert to use PLIST_VARS instead of manually passing "@comment "
  to the plist module.

Bump the PKGREVISION to 1 due to the options changes.

(jlam)

Remove unnecessary PLIST_SUBST definition -- the PLIST is dynamic through
the use of AUTHLIB_PLIST, so we don't need to comment stuff out.

(jlam)

+ Use package options instead of WITH_DVDCSS to select whether dvdcss
  support is built into the package.

+ Convert to use PLIST_VARS instead of manually adding "@comment" to
  PLIST_SUBST.

Bump PKGREVISION to 19 due to the addition of package options.

(jlam)

Update wm/ratpoison to 1.4.3

* Changes since 1.4.2
** key event handling
top level key bindings are grabbed "asynchronously" instead of
"synchronously." This should eliminate the freezes some people have
experienced in previous versions.

(tonio)

Update wm/ratpoison to 1.4.3

* Changes since 1.4.2
** key event handling
top level key bindings are grabbed "asynchronously" instead of
"synchronously." This should eliminate the freezes some people have
experienced in previous versions.

(tonio)

update to 1.4.14
This release fixes a freeze when migrating from v1.0.x and also solves
some problems with search folders.

(drochner)

update for gnome-2.22.1

(drochner)

update to 1.22.1
This switches to the gnome-2.22 release branch.

(drochner)

update to 2.22.1
This switches to the gnome-2.22 release branch.

(drochner)

update to 2.22.1
This switches to the gnome-2.22 release branch.

(drochner)

update to 2.22.0
This switches to the gnome-2.22 release branch.

(drochner)

clean up dependencies

(drochner)

Introduce variable MECAB_CHARSET for default charset of MeCab.
close PR 38040.

(obache)

update to 2.22.0
This switches to the gnome-2.22 release branch.

(drochner)

update to 2.14.1
This switches to the gnome-2.22 release branch.

(drochner)

update to 2.22.0
This switches to the gnome-2.22 release branch.

(drochner)

update to 2.22.0
This switches to the gnome-2.22 release branch.

(drochner)

update to 1.22.1
This switches to the gnome-2.22 release branch.

(drochner)

update to 2.22.0
This switches to the gnome-2.22 release branch.

(drochner)

import libsoup24-2.4.1, a new major branch of libsoup, for use
by gnome-2.22, can be installed in parallel with libsoup-devel

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(drochner)

update to 1.22.0
This switches to the gnome-2.22 release branch.

(drochner)

update to 1.20.1
This switches to the gnome-2.22 release branch.

(drochner)

update to 2.16.3
This switches to the gnome-2.22 release branch.

(drochner)

+ Updated devel/stgit to 0.14.2 [bjs 2008-04-10]

(bjs)

Take maintainership, as I regularly update this package.

(bjs)

Update to version 0.14.2.  Changes since last snapshot:

    fix: stg mail crashes when there is no patch description

    Better "stg rebase" help text

    Enhance rebase help string by providing guidance on merge conflict
    resolution during a rebase.

    Based on text suggested by Catalin Marinas.

    Test the 'stg rename' command

    Simple rename of top-most patch

    Allow renaming of the top-most patch just by calling stg rename
    <new-patch-name>, instead of stg rename <old> <new>. This is for
    example helpful for those people who always have a typo or two in
    their patch names.

    Make documentation less confusing

    It's not just by default "stg new" doesn't do a refresh -- it never
    does.

    replace "git repo-config" usage by "git config"

    Remove a newline from the e-mail template

    Allow picking of one commit id

    Remove the reordering side-effect of the latter sync changes

    Fix sync to push the popped patches back after sync'ing

    Add a boundary to parse_patches in pick.py

    Refuse to send empty patches

    Set umask to 0022 during the setup.py execution

    This allows template files to be installed with the proper rights.

    Modify 'series' to use '#' instead of '|'

    Allow the synchronisation of the unapplied patches

    Check for unnecessary push/pop in 'float'

    Allow pick to import multiple patches

    This patch allows multiple patches on the "pick" command line.

    Don't set the default authdate if none specified

    This way, we allow a patch editing to remove an existing date by not
    specifying it.

(bjs)

reset PKGREVISION foe base pkg update

(drochner)

update to 0.10.19
changes:
-Experimental GIO plugin
-Continued playbin2 development
-RTP fixes
-Various other bug-fixes and improvements

(drochner)

update to 0.10.19
changes:
-New GstPoll abstraction simplifies operations on multiple fd's/sockets
-Various bug fixes and corrections

(drochner)

update to 1.1.11.1
changes:
* Security fixes:
  - Array Indexing Vulnerability in sdpplin_parse(). (CVE-2008-0073)
  - integer overflow, possibly leading to buffer overflow, CVE-2008-1482
* Reworked the plugin directory naming so that external plugins don't have
  to be rebuilt for every release
* Made the version parsing much more reliable; it wasn't properly coping
  with four-part version numbers
* Fixed an off-by-one in the FLAC security fix patch. This breakage was
  causing failure to play some files
* Support 16-bit big-endian DTS audio
* Improved frame snapshot API. (ABI extension.)
* Re-add support for # (stream parameter separator) in raw filenames
* Fixed long delay when closing stream on dual core systems

pkgsrc note: CVE-2008-0073 was already fixed by patch

(drochner)

Get rid of a harmless trailing line in a patch file, noticed by
OBATA Akio.

Regenerate patch checksum

(agc)

Fix path in DEPENDS line.

(wiz)

Drop maintainership.
These packages was switched to gem version, I'm not in the area.

(obache)

Drop maintainership.
This package was switched from stable to development version for RoR 2.0.
I'm not in the area.

(obache)

Updated devel/bglibs to 1.104

(schmonz)

Update to 1.104. From the changelog:

- Fixed several typos in the installation files.
- Renamed some files that differed only in upper/lower case. This
    should fix building on OSX.

(schmonz)

+ autoconf-2.62, gnome-2.22.1, lzma-4.57.

(wiz)

Set HOMEPAGE to the official gok homepage instead of the standard gnome one.

(wiz)

Updated www/drupal6 to 6.2

(adrianp)

Update to 6.2

This release fixes security vulnerabilities and also changes APIs. Sites are urged to upgrade immediately after reading the security announcement:

* SA-2008-026 - Drupal core - Drupal core - Access bypass

In addition to this security vulnerability, the following bugs have been fixed since the 6.0 release:

* #228120 by jvandyk: typo in documentation in comment.tpl.php
* #226480 by gpk: fix wording on when node access rebuild button is displayed in node_configure()
* #229817 by mcarrera: l() attributes were not properly specified in theme.inc's theme_username()
* #234403 by alienbrain: PHP.net documents we should use CRLF in mail headers, so do that
* #226555 by jvandyk, Rok Zlender: fix notice level error in xmlrpc.inc
* #204415 by chx: actually use 'administer content types' permission for node type editing instead of 'administer nodes'
* #234699 by hass: theme_link() did not mark frontpage links active properly
* #237717 by hass: missing t() in system_clear_cache_submit()
* #232037 by pwolanin: (performance) block regions should only be populated when called for, not in all cases (fixes performance expectation on 403/404 pages)
* #226728 by chx: (performance) temporary cache table entries were not flushed, causing cache_menu and cache_form to grow big
* #231587 by pwolanin, killes: (performance) use two level cache in menus, instead of storing very large amounts of data multiple times
* #239196 by jvandyk and myself: missing status check on nodes in search indexing counter
* rolling back #234403 by Bevan and damz: we should keep using LF in mail headers, without CR, CRLF causes problems
* #238564 by scor: two missing t() calls in update.module
* #241629 by solotandem: dblog module left one more row in, when cleaning up in cron
* #244597 by kbahey: remove cruft from user_login(), that added extra message to the form was never used or displayed

(adrianp)

Note addition of multimedia/mediatomb version 0.11.0

(agc)

Add and enable mediatomb.

(agc)

Initial import of mediatomb-0.11.0 into the packages collection.

MediaTomb is an open source (GPL) UPnP MediaServer with a nice web
user interface, it allows you to stream your digital media through
your home network and listen to/watch it on a variety of UPnP
compatible devices.

MediaTomb implements the UPnP MediaServer V 1.0 specification that can
be found on http://www.upnp.org/.  The current implementation focuses
on parts that are required by the specification, however we look into
extending the functionality to cover the optional parts of the spec as
well.

MediaTomb should work with any UPnP compliant MediaRenderer, please
tell the authors if you experience difficulties with particular
models, also take a look at the Supported Devices list for more
information.

With thanks to Jared Macneill for the patches to make this compile on
NetBSD.

Oh, and works very nicely with my Archos 605 (not in the Supported Devices
list).

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(agc)

Reorder lines to be more standard.

(wiz)

+ balance-3.42, evince-2.22.1.1, file-roller-2.22.2, gnome-games-2.22.1.1,
  libgnomeui-2.22.1, pango-1.20.1, postal-0.68, swfdec-0.6.4.

(wiz)

Updated multimedia/ns-flash to 9.0.124.

(ghen)

Update to Adobe Flashplayer version 9.0.124.  Fixes CVE-2007-6019.

(ghen)

Update chat/bitlbee to 1.2
Fix PR 38344

(tonio)

Update chat/bitlbee to 1.2

Changelog:
* Version 1.2 (released 2008-03-17) hilights:
- See 1.1.1dev and 1.1dev (Jabber module rewrite, Jabber groupchats, better
  (and more secure) file format for user data, ForkDaemon mode).
- Yahoo! support in this release will hopefully still work next month.
* Development version 1.1.1dev (released 2007-11-24) hilights:
- Mostly internal changes (resolved some GPL issues, changed some parts of the
  IM API).
- Support for Jabber chatrooms and an XML console.
- Support for named AIM chatrooms.
* Development version 1.1dev (released 2007-02-19) hilights:
- Many new features, enhancements, bugfixes, for example:
- Rewritten Jabber module.
- Improved file format for storing user configuration.
- ForkDaemon mode: Daemon mode without the stability problems.

(tonio)

Try harder to disable AltiVec support under Mac OS X PPC (because it cannot
be used in a shared library). Applications linked against "libx264" can now
actually be started without crashing immediately because the symbol
"_x264_deblock_h_luma_altivec" couldn't be found.

Bump package revision because of this fix.

(tron)