Note update of heimdal.

(jlam)

Update security/heimdal to version 1.1.  Changes from version 0.7.2 include:

* Read-only PKCS11 provider built-in to hx509.
* Better compatibilty with Windows 2008 Server pre-releases and Vista.
* Add RFC3526 modp group14 as default.
* Handle [kdc] database = { } entries without realm = stanzas.
* Add gss_pseudo_random() for mechglue and krb5.
* Make session key for the krbtgt be selected by the best encryption
  type of the client.
* Better interoperability with other PK-INIT implementations.
* Alias support for inital ticket requests.
* Make ASN.1 library less paranoid to with regard to NUL in string to
  make it inter-operate with MIT Kerberos again.
* PK-INIT support.
* HDB extensions support, used by PK-INIT.
* New ASN.1 compiler.
* GSS-API mechglue from FreeBSD.
* Updated SPNEGO to support RFC4178.
* Support for Cryptosystem Negotiation Extension (RFC 4537).
* A new X.509 library (hx509) and related crypto functions.
* A new ntlm library (heimntlm) and related crypto functions.
* KDC will return the "response too big" error to force TCP retries
  for large (default 1400 bytes) UDP replies.  This is common for
  PK-INIT requests.
* Libkafs defaults to use 2b tokens.
* krb5_kuserok() also checks ~/.k5login.d directory for acl files.
* Fix memory leaks.
* Bugs fixes

(jlam)

Use --localedir instead of --with-localedir, following configure's
--help.  From Rumko on pkgsrc-users@.

(gdt)

Calling usleep for 1000000 microseconds or more is not allowed,
so add a myusleep() wrapper to DTRT.  This should fix the 100% CPU
utilisation.

PKGREVISION -> 1.

(apb)

+ Add full DESTDIR support in the least intrusive way possible.  The
  strategy is to leave alone the install targets sprinkled all over
  the Makefiles and instead to two thigns:

    (1) Define new INST_* variants of BINDIR, ETCDIR, MODULEDIR, etc.
that are the "final" installation locations, and thus may be
hardcoded into the program.

    (2) Modify the definitions of BINDIR, ETCDIR, MODULEDIR, etc. to
point to $(DESTDIR)$(INST_*).  These variables can be used in
the _install targets without any changes.

(jlam)

Greatly simplify the logic that tries to determine whether -lintl
needs -liconv in order to satisfy linkage requirements.  This is now
patterned after the approach taken with readline and termlib.

Examples on NetBSD for a package that includes only
gettext-lib/buildlink3.mk:

PREFER_NATIVE= yes
PREFER_PKGSRC= # empty
# This uses the native gettext and native iconv, with:
# BUILDLINK_LDADD.gettext == "-lintl"

PREFER_NATIVE= yes
PREFER_PKGSRC= iconv
# This uses the native gettext and native iconv, with:
# BUILDLINK_LDADD.gettext == "-lintl"

PREFER_NATIVE= yes
PREFER_PKGSRC= gettext
# This uses the pkgsrc gettext and native iconv, with:
# BUILDLINK_LDADD.gettext == "-lintl"

PREFER_NATIVE= yes
PREFER_PKGSRC= gettext iconv
# This uses the pkgsrc gettext and pkgsrc iconv, with:
# BUILDLINK_LDADD.gettext == "-lintl -liconv"

PREFER_NATIVE= # empty
PREFER_PKGSRC= yes
# This uses the pkgsrc gettext and pkgsrc iconv, with:
# BUILDLINK_LDADD.gettext == "-lintl -liconv"

PREFER_NATIVE= iconv
PREFER_PKGSRC= yes
# This uses the pkgsrc gettext and native iconv, with:
# BUILDLINK_LDADD.gettext == "-lintl"

PREFER_NATIVE= gettext
PREFER_PKGSRC= yes
# This uses the native gettext and native iconv, with:
# BUILDLINK_LDADD.gettext == "-lintl"

PREFER_NATIVE= gettext iconv
PREFER_PKGSRC= yes
# This uses the native gettext and native iconv, with:
# BUILDLINK_LDADD.gettext == "-lintl"

(jlam)

Update ClusterIt to 2.5.

Major enhancements:
A new program, dtop, allows the user to run top across multiple machines
and collate the results in real-time. The default remote commands have
been changed over to ssh from rsh. A test option has been added to all
commands to check if SSH is up and running before attempting an SSH
connection that might otherwise hang. A flag has been added to dsh
allowing the user to copy, execute, and delete a script on all machines
in one step. There are many other small bugfixes and enhancements.

(garbled)

If FOO is empty, then ${FOO:S/^/-l/} has a value of "-l".  This is not
what we want.  Instead, use another pattern to strip away lone "-l" in
BUILDLINK_LDADD.*.

(jlam)

replace bash in theme installer in order to get icons installed

(kefren)

Whitespace.

(jlam)

The lua library definitely needs the readline library around when
linking, so include readline/buildlink3.mk in lua/buildlink3.mk.

(jlam)

+ Remove dependency on ncurses (!!) of all things -- lua doens't have
  any curses code in it.  It only needs readline for the "io" module,
  and the readline/buildlink3.mk now handles pulling in any necessary
  dependencies for the terminal library that it uses.

Bump the PKGREVISION to 1.

(jlam)

+ Teach the readline buildlink3.mk and builtin.mk files to determine
  the correct terminal library that must be linked along with -lreadline.
  On NetBSD, this is -ltermcap.  On Linux, this should be either -ltinfo
  or -lcurses.  On Solaris, this should be -lcurses.

+ Add a "termlib" dependency to the devel/readline package that allows
  for linking against -lcurses.  Bump the PKGREVISON to 1.

(jlam)

Teach termlib files about another possible native terminal library, tinfo.

(jlam)

fvwm

(martti)

Updated wm/fvwm-devel to 2.5.25

* New features:

  - Handle the STATE_ADD command of the EWMH _NET_WM_STATE
    message from version 1.3 of the EWMH spec.
  - Support transparency in ARGB windows

* Bug Fixes:

  - Fixed problem with windows disappearing when created
    unless the style Unmanaged was used.
  - Edge move delay was used as resistance for the top edge.
  - Fixed a parsing problem of the screen argument of the
    SnapAttraction style.
  - Some html documentation files were not installed.
  - Fixed a memory leak in internationalized font handling.
  - Fixed a bug in MinOverlap placement.
  - Fixed the StickyAcrossPages style in the FvwmPager.
  - Fixed the determination of the X charset on UTF-8 systems.
  - Fixed a crash when certain EWMH messages were sent to
    unmanaged windows.
  - Fixed a memory leak in multibyte codepage code.
  - Ignore the EWMH staysontop and staysonbottom hints if the
    EWMHIgnoreStackingOrderHints style is used.
  - Fixed a sporadic crash when the root background set by gnome,
    fvwm-root, esetroot etc. changes and a root transparent
    colour set is used.
  - Fixed spradic crash in modules with root transparent
    background from colour sets.
  - Fixed a possible crash if the last active module fails.

(martti)

+ CHECK_STRIPPED.

(rillig)

Don't strip the binary if INSTALL_UNSTRIPPED=yes.

(rillig)

Added net/3proxy version 0.5.3.11

(apb)

Add the license for 3proxy.

(apb)

Add net/3proxy version 0.5.3k.  This is a multi-protocol proxy that
can be configured to chain to other proxies.

(apb)

+ Define BUILTIN_LIBNAME.* unconditionally so that their values can
  always be used in other builtin.mk files.

+ In the USE_BUILTIN.* == "yes" case, set BUILDLINK_LIBNAME.* to the
  corresponding BUILTIN_LIBNAME.* value so that BUILDLINK_LIBNAME.*
  can always be used in other buildlink3.mk files.

(jlam)

Note update of monotone and monotone-server to 0.39.

(jmmv)

Update to 0.39: depend on monotone 0.39.

(jmmv)

Update to 0.39:

Changes

- 'mtn di' is now an alias for 'mtn diff'.

- 'automate db_set' has been renamed to 'automate set_db_variable'.

- 'automate db_get' has been replaced by 'automate get_db_variables'
  which returns all database variables similar to 'list vars' in
  basic_io format, optionally restricted by domain.

- The REVID argument of 'automate get_revision' is now mandatory;
  to retrieve the current workspace revision, use the new command
  'automate get_current_revision'

- messages describing conflicts from all of the various merge commands
  have been reworked and should be much more informative.

- mtn show_conflicts now outputs much more detailed and descriptive
  messages, however it may report content conflicts that will be
  resolved automatically by the line merger.

- The internal copy of PCRE has been updated to version 7.6.
  If you use the '--with-system-pcre' configure switch, it
  will insist on at least this version.

- "emacs" has been removed from the list of dumb terminal types;
  tickers should now default to --ticker=count with emacs terminals

- extensive section on merge conflicts and ways to resolve them
  added to the manual.

Bugs fixed

- for changes near the beginning of a file, mtn's unified diff
  output sometimes contained too many leading context lines.

- the path handling of 'mtn revert' was improved and fixed two bugs:
  now a restricted revert on a node "dir1/file1" reverts only the
  content changes in "file1", but leaves renames of any of its
  ancestor nodes untouched; furthermore, if "dir0/" was renamed to
  "dir1" and "dir1/file1" was dropped, mtn now re-creates file1 at the
  proper place ("dir1/") and leaves no missing files around because
  of the non-existing "dir0/".

- a few changes needed to build with gcc 4.3.

New features

- 'automate drop_db_variables' which drops one database variable
  (like the 'unset' command) or all variables within a given domain.

- 'automate inventory' now accepts the options '--no-ignored',
  '--no-unknown', '--no-unchanged' and '--no-corresponding-renames'.
  Please consult the monotone documentation for more information about
  these new options.
  In addition, 'automate inventory' no longer recurses into ignored
  directories. The typical case of listing files that need attention
  now runs at least four times faster.

- 'automate get_current_revision' which outputs the revision text of
  changes in the current workspace

(jmmv)

Add and enable m17n-lib and related packages.

(obache)

Note addition of m17n-lib and related packages.

(obache)

Import m17n-im-config version 0.9.0.

The m17n-im-config package provides a C library (libm17n-im-config.so) to create
a GTK+ widget for per-user configuration of input methods provided by the m17n
library, and a standalone GTK+ program (m17n-im-config) that uses the above
widget.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(obache)

Import m17n-contrib version 1.1.6.

The m17n-contrib is a collection of contributed works to be used with
the m17n library.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(obache)

Import m17n-docs version 1.5.0.

The m17n-docs is documents of the m17n library.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(obache)

Import m17n-lib version 1.5.1.

The m17n library is a multilingual text processing library for the C language.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(obache)

Import m17n-db version 1.5.1.

This file is part of the m17n database; a sub-part of the m17n library.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(obache)

Don't install the binary stripped when INSTALL_UNSTRIPPED=yes.
While here, shortened the code that installs the files.

(rillig)

ENOCOFFEE: PKGREVISION+=2 to make up for previous PKGREVISION-- with
patch change.

(gdt)

Add bash to tools for mkpkgconfig.

(wiz)

Simplify approach to dealing with upstream cruft.

(gdt)

added missing hicolor theme include in Makefile and theme files in PLIST
noted by wiz@

(kefren)

Updated mail/thunderbird and mail/thunderbird-gtk1 to 2.0.0.12nb2.

(ghen)

Update thunderbrd and thunderbird-gtk1 to 2.0.0.12 (.10 and .11 where skipped).

Security fixes in this version:

MFSA 2008-12 Heap buffer overflow in external MIME bodies
MFSA 2008-07 Possible information disclosure in BMP decoder
MFSA 2008-05 Directory traversal via chrome: URI
MFSA 2008-03 Privilege escalation, XSS, Remote Code Execution
MFSA 2008-01 Crashes with evidence of memory corruption (rv:1.8.1.12)

For more info, see http://www.mozilla.com/en-US/thunderbird/2.0.0.12/releasenotes/

(ghen)

USE_NCURSESW is gone, use USE_NCURSES instead.

(wiz)

Set BUILDLINK_LDADD.curses in the CURSES_TYPE == "curses" case.

(jlam)

Define BUILTIN_LIBNAME.* outside of the CHECK_BUILTIN.*-protected
section to be the name of the built-in library if USE_BUILTIN.* is
"yes".  These variables can be used in other builtin.mk files.

(jlam)

Protect against possibly empty BUILDLINK_LIBNAME.* variables when
defining BUILDLINK_LDADD.* by using a substitution instead of directly
prepending "-l".

(jlam)

+ The termlib.buildlink3.mk file is meant to be included by packages
  that need basic termlib functionality, i.e. tgetent(), tgoto(),
  tputs(), etc.  Together with the termlib.builtin.mk file, they will
  use either a built-in termcap library, a built-in X/Open "enhanced"
  curses library, or ncurses to provide these functions.

+ Add BUILDLINK_LIBNAME.* definitions to the various curses buildlink3.mk
  and builtin.mk files that give the "base" library name of the curses
  library, e.g. curses, ncurses, etc.  These are used by the termlib
  files to set BUILDLINK_LIBNAME.termlib.

(jlam)

Allow preferring a pkgsrc "curses" implementation for all packages
that include curses.buildlink3.mk.  Generally, the rule is not to set
CURSES_DEFAULT unless it's to set it to "ncurses" or "pdcurses".

# Example mk.conf settings and their results.

# Use the system curses.
PREFER_NATIVE= yes # default value
CURSES_DEFAULT= curses # default value

# Use system "ncurses" if it's available, otherwise use devel/ncurses
# from pkgsrc.
#
PREFER_NATIVE= yes # default value
CURSES_DEFAULT= ncurses

# Use devel/ncurses from pkgsrc.
PREFER_PKGSRC= yes

# Use devel/pdcurses from pkgsrc.
PREFER_PKGSRC= yes
CURSES_DEFAULT= pdcurses

# This causes a package build failure because there is no pkgsrc
# curses.
#
PREFER_PKGSRC= yes
CURSES_DEFAULT= curses

(jlam)

Allow zero white-space in line 4 of buildlink3.mk files. This was hit by
devel/ncursesw.

(rillig)

Put official-mozilla-branding in the PKG_SUPPORTED_OPTIONS for all packages that include this file - notably sunbird

(abs)

We don't need ncurses, just curses.  Bump the PKGREVISION to 6.

(jlam)

Missing include of <errno.h>. PR pkg/38105

(tnn)

Always make ncurses headers and libraries available as <curses.h> and
-lcurses so that GNU configure scripts that check for those ahead of
<ncurses.h> and -lncurses will still use ncurses instead of picking up
a system curses.

This was a regression introduced by my recent ncurses commits.

(jlam)

Mark again as supporting destdir.

(joerg)

whitespace

(jlam)

pbulk-0.28:
- don't try to deinstall (and fail) on packages marked not for uninstall

(joerg)

libarchive and bsdtar are updated.

(joerg)

Update build infrastructure for libarchive-2.4.13.

(joerg)

Split PKGTOOLS_REQD into two parts. If we don't have PKGTOOLS_REQD,
but something after PKGTOOLS_BASE_REQD, just register a bootstrap
dependency.

(joerg)

Use pkg_add from new build, override *_CMD instead of the full commands.
Drop some no longer used overrides.

(joerg)

NO_MTREE is the default nowawadays.
Do not force use of a native compiler, we don't build digest during
bootstrap any longer.
Do not skip the pkgtools version check for the same reason. When
building this package using DESTDIR, it might actually need the newer
tools.

(joerg)

Import libarchive-2.4.13. This brings a number of bugfixes, support for
more ZIP archives and a more complete cpio frontend.

Status:

Vendor Tag: KIENTZLE
Release Tags: libarchive-2-4-13

(joerg)

Use PKG_SYSCONFSUBDIR to ensure that configuration directory gets created
when using binary packages.
Bump PKGREVISION

(sborrill)

Add and enable libotf.

(obache)

Added graphics/libotf version 0.9.7

(obache)

Import libotf version 0.9.7.

The library "libotf" provides the following facilites.

    o Read Open Type Layout Tables from OTF file.  Currently these
      tables are supported; head, name, cmap, GDEF, GSUB, and GPOS.

    o Convert a Unicode character sequence to a glyph code sequence by
      using the above tables.

The combination of libotf and the FreeType library (Ver.2) realizes
CTL (complex text layout) by OpenType fonts.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(obache)

Add and enable gtk-im-libthai.

(obache)

Added inputmethod/gtk-im-libthai version 0.1.4

(obache)

Import gtk-im-libthai version 0.1.4.

GTK+-2.0 Thai Input Module.

Status:

Vendor Tag: TNF
Release Tags: pkgsrc-base

(obache)

Add fake seed for ncurses.h with NetBSD's curses.

(obache)

Updated fonts/fontforge to 20080203

(adam)

Changes 20080203:
* Bug fixes

(adam)

Note update of devel/ZenTest to version 3.9.1

(seb)

Update to version 3.9.1.

Approved by maintainer.

Changes since last packaged version (3.6.0)

=== 3.9.1 / 2008-01-31

* 1 bug fix:
  * OMG I'm so dumb... fixed memory leak.

=== 3.9.0 / 2008-01-30

* 15 minor enhancements:
  * Added Wilson's patch to allow unit_diff to work with mspec. Adding rspec next.
  * Minor overhaul for autotest:
    * Added -f flag to start up without testing.
    * Added -q flag to autotest to make it extra quiet. Patch by Aaron Patterson.
    * Added ability to set test execution order, defaults to :random. EVIL!
    * Added completed_re and failed_results_re to help subclasses like rspec.
    * Added deprecation warnings for hooks. Deprecated :run.
    * Added find_directories accessor, defaults to ['.']
    * Added sleep accessor, defaults to 1 second.
    * Changed find_files to order files in the same order as find_directories.
    * Changed how autodiscover works with $:, added lib to the front.
    * Cleaned out nearly every @ and use accessor methods instead. You should too.
    * Made test_mappings ordered.
    * Removed @files, adding @find_order and @known_files.
    * Renamed tests_for_file to test_files_for.
    * test_files_for now only returns known files.

=== 3.8.0 / 2008-01-12

* 10 minor enhancements:
  * Added basic support for rubinius in multiruby.
  * Changed Dunno! message to only output on -v
  * Added Getting Started with Autotest by Philippe Hanrigou (with permission)
  * Updated example_dot_autotest.rb for newer plugins.
  * Cleaned up rdoc.
  * Worked with David Chelimsky to make Autotest more uber for subclasses.
  * Removed exceptions and test_mappings accessors and replaced with add/remove/clear methods. Updating .autotest should be very straightforward.
  * Moved :initialize hook to beginning of run method
  * Changed load/customization order to be:
    * Autotest
    * AutotestSubClass
    * ~/.autotest
    * ./.autotest (yes, both .autotest files).
  * Moved away from using instance variables to encourage subclasses to use accessors.

=== 3.7.2 / 2008-01-09

* 2 minor enhancements:
  * Extended file map for tests to include subdirs correctly.
  * Added debugging output on bad maps if -v set.

=== 3.7.1 / 2007-12-27

* 2 minor enhancements:
  * multiruby now downloads 1.8.6 and 1.9 on virgin run.
  * Improved output for the downloads.

=== 3.7.0 / 2007-12-21

* 8 minor enhancements:
  * Added add_mapping to make file mappings cleaner.
  * Added assert_callback thanks to Aaron Patterson.
  * Added autotest/cctray.
  * Added extra_files and extra_class_map, allowing .autotest files to be awesome.
  * Added url for lettuce principal thanks to Hugh Sasse.
  * Added zentest.rb refactorings thanks to Hugh Sasse.
  * Exceptions are now an array of regexps, built after :initialize hook.
  * Removed ruby_fork and ruby_fork_client. Eric got a faster laptop. :P
* 6 bug fixes:
  * Fixed all my annoyances with @exceptions.
  * Fixed crasher in autotest/redgreen for non-matches.
  * Fixed everything to work with ruby 1.9.
  * Fixed rubygem requires causing strangeness in tests.
  * Fixed zentest mapping so ruby2ruby and test_ruby2ruby work.
  * Removed stupid YAML methods from TrueClass during
    testing. (Infected by Test::Rails' use of rubygems)

=== 3.6.1 / 2007-07-23

* 4 minor enhancements:
  * Test::Rails::ViewTestCase now uses assert_select.
    * assert_form and friends now work with blocks like assert_select
      does.
  * Allow path_parameters in view tests to be ammended, making working
    with routes easier.
  * New version of autotest/notify.rb uses notify-send.
  * Fixed rdoc formatting on autotest and a couple plugins.

(seb)

Add a --without-x flag to the mksandbox script.

(jlam)

Updated lang/gauche to 0.8.13

(tnn)

Update to Gauche-0.8.13.

pkgsrc changes
- DESTDIR support
- use libtool
- make iconv work
- fix a PLIST error
- close PR pkg/37897

Upstream changes
- Sorry, too many to list here

(tnn)

The package supports installation to DESTDIR.

(heinz)

The package supports installation to DESTDIR.

(heinz)

- Add build dependency on libXt so configure finds X11/Intrinsic.h
- Supports installation to DESTDIR

(tnn)

Try to fix build for X11_TYPE != modular.

(jlam)

Restore conditional PLIST items lost during the upgrade to 0.8.6d.
Remove option for flac as vlc's configure script forces it to be enabled
all the time (contrary to the docs!).
Add some buildlink dependencies.
Bump PKGREVISION

(sborrill)

Bump API and ABI depends versions as API changed between 2.0 and 2.6 meaning
that things like vlc will not compile

(sborrill)

Security update for modular-xorg-server.

(joerg)

modular-xorg-server-1.3.0nb5:
Fix a number of buffer-overflows, privacy-leaks and memory corruptions.

(joerg)

+ capc-calc-2.12.3.0, claws-mail-3.3.1, clisp-2.44.1, freesci-0.6.3,
  glabels-2.2.2, gst-plugins0.10-bad-0.10.6, gst-plugins0.10-good-0.10.7,
  gst-plugins0.10-mad-0.10.7, gst-plugins0.10-musepack-0.10.6,
  gst-plugins0.10-oss-0.10.7, gst-plugins0.10-sid-0.10.7,
  gst-plugins0.10-ugly-0.10.7, gtkmm-2.12.5, liboil-0.3.13,
  librsvg-2.22.1, libsigc++-2.2.0, p5-File-Remove-1.40, p5-INET6-2.54,
  p5-Test-Simple-0.75, p5-Text-Markdown-1.0.14, py-mysqldb-1.2.2
  [pkg/38090], taglib-1.5, uim-1.4.2, wxRemind-79, wyrd-1.4.4,
  xf86-video-intel-2.2.1, xterm-233.

(wiz)

Note spamdyke update.

(schmonz)

Update to 3.1.6. Note that some command-line options and the format
of some log entries have changed since 2.6.3; see UPGRADING.txt.
Also, pkgsrc no longer installs the random extra utilities that are
explicitly marked as unnecessary for spamdyke operation. From the
changelog:

VERSION 3.1.6 -- 2/11/2008
  Fixed a serious bug in middleman() -- when the remote server sent its message
    data and QUIT command in a burst and disconnected before spamdyke read() all
    of the data, the last data returned from read() was printed twice.  This
    could cause message corruption, especially in the case of attachments.
  Fixed a serious bug in middleman() -- when the remote server sent its data
    in bursts of 4096 bytes AND there were two lines of text in the data
    AND the 4096th character was not a newline AND there was a delay between the
    data bursts, memmove()ing the buffered data was causing corruption because
    the moved data was not being properly re-terminated.  While processing the
    remaining buffered data (and waiting for another burst from the remote
    server), strchr() would seek past the end of the data to an old newline
    character and middleman() would erroneously conclude the next line of data
    was complete, ready for processing.  Many thanks to Andreas Galatis and
    Dragomir Denev for reporting and helping me reproduce this one.
  Added a -W flag to sendrecv to introduce a delay between message data bursts.
  Added a -o flag to smtpdummy to save the message data to a file.

VERSION 3.1.5 -- 1/22/2008
  Fixed sendrecv to correctly process corrupted TLS negotiations instead of
    covering up bugs in spamdyke.
  Fixed spamdyke to not add garbage output at the beginning of TLS passthrough
    negotiations.  This was causing SSL handshakes to fail.  Thanks to Ronnie
    Tartar for reporting this one.

VERSION 3.1.4 -- 1/21/2008
  Fixed all of the Makefiles to remove a symbols directory Leopard's gcc seems
    to create when compiling in debug mode.
  Fixed middleman() to log the timeout message only once.
  Fixed middleman() to not expect input from the child process when the child
    process' input is being ignored or after the child process has exited.
  Fixed middleman() to correctly handle a rare situation -- when the child
    process was too slow responding that spamdyke's idle timeout was passed
    AND spamdyke was processing TLS data AND there was still data in the SSL
    buffer, spamdyke would loop infinitely, consuming 100% CPU.  This was a
    very tricky bug to find and fix.  Thanks to Pablo Gonzalez and Paolo for
    reporting this one and helping me debug it.
  Fixed middleman() to send message data to the child process line-by-line,
    even when the buffer is full.
  Added a new test program: smtpdummy.  This one simulates an SMTP server and
    can add delays after specific commands.
  Changed sendrecv to use a 64K buffer for input and output data.
  Changed sendrecv to kill the its child process after its timeout expires.
  Changed sendrecv to optionally continue sending data in bursts after the end
    for the message data.  Some mail servers do this.
  Changed sendrecv to deliberately send corrupt data while TLS is active.
  Changed test regression_009 to build its message payload at runtime instead
    of including a 0.75M file.  This file was unnecesarily increasing the size
    of the spamdyke tarball.
  Fixed compiling on Solaris.  Again.  Thanks to Davide Bozzelli for reporting
    this.  Again.  Sigh.

VERSION 3.1.3 -- 1/3/2008
  Fixed the format string LOG_INFO_DNS_TXT to assign the parameters correctly
    and prevent bus errors when the DNS response text is long.  Thanks to
    Stephan Rosenke for reporting this one.

VERSION 3.1.2 -- 12/11/2007
  Fixed smtp_filter() to set a flag after some SMTP commands to force
    middleman() to wait for input from the child process before proceeding.
    Some (nonspammer) mail servers send their data in bursts without waiting for
    responses.  This was causing spamdyke to skip logging (but not filtering)
    if the DATA command was sent in a burst with RCPT TO.  Thanks to Sebastien
    Guilbaud and Bucky Carr for reporting this one.
  Added a "-b" flag to sendrecv to simulate servers that send their message data
    (but not their SMTP commands) in bursts.

VERSION 3.1.1 -- 11/12/2007
  Added excessive logging to search_domain_directory() to log the directory
    search pattern.
  Changed all calls to spamdyke_log() to use the macros SPAMDYKE_LOG_NONE(),
    SPAMDYKE_LOG_ERROR(), SPAMDYKE_LOG_INFO(), SPAMDYKE_LOG_DEBUG() and
    SPAMDYKE_LOG_EXCESSIVE() instead.  The macro tests the current log level
    without forcing a function call and also paves the way toward eliminating
    some logging code at compile-time.
  Fixed process_access() to correctly search for the RELAYCLIENT variable in
    spamdyke's environment.  Thanks to Steve Cole for reporting this one.

VERSION 3.1.0 -- 11/5/2007
  Changed the "graylist-dir" and "no-graylist-dir" options to take multiple
    directories for servers that are hosting so many domains that they can't
    create enough domain folders in one place (wow).
  Added minimum and maximum values to all integer options and changed
    set_config_value() to generate error messages when values are out of range.
  Change usage() to print minimum and maximum integer values.
  Alphabetized the option list by long option name and changed
    process_config_file() to use a binary search algorithm when identifying
    directives, a theoretical improvement from O(n/2) to O(log n).
  Changed prepare_settings() to create an array of options indexed by the short
    option code.  This introduces some constant-time work (O(1)) and greater
    memory usage.
  Changed process_command_line() to use the indexed array of options,
    theoretically reducing command line parsing work from O(n/2) to O(1).
    This is a win if the command line has many parameters or if it has
    parameters that are near the end of the unindexed option array.
    Testing confirms a small performance gain.
  Added command line options "config-test-smtpauth-username" and
    "config-test-smtpauth-password".
  Changed config_test_smtpauth() to run the authentication command(s) if a
    username and password are provided.  This incorporates the functionality of
    checkpassword into spamdyke.
  Added the command line option "config-test-user" to change user and group IDs
    before running the configuration tests.  This makes it easier to simulate
    running as the mail server.
  Changed process_config_file() and process_command_line() to print errors and
    stop when they encounter an option that is not legal in that location.  At
    the moment, "help", "version", "config-test",
    "config-test-smtpauth-username", "config-test-smtpauth-password" and
    "config-test-user" are not valid in files; all options are valid on the
    command line.
  Changed config_test_dir_read() and config_test_graylist() to never examine the
    "." or ".." folders, even if readdir() and/or stat() report they are not
    folders.  Thanks to Paulo Henrique for reporting this one.
  Changed set_config_value() to remove trailing slashes from directory paths.
  Added test_spamdyke_binary() to check if the spamdyke binary is setuid root
    (it should not be).
  Renamed test_settings() to config_test().
  Moved all of the configuration test functions to config_test.[ch] -- they were
    cluttering up configuration.c.
  Made a few small updates to the help message text.
  Added additional vchkpw exit codes to exec_checkpassword() to explain why
    vchkpw exited, since it doesn't follow DJB's published checkpassword API.
  Moved md5.[ch] from the "utils" folder to the "spamdyke" folder and updated
    Makefile to compile them into spamdyke.
  Removed passwordcheck from the "utils" folder since spamdyke now contains its
    functionality.
  Added a README file to the "utils" folder to answer the biggest FAQ about
    those utilities.
  Fixed exec_command() to connect the output pipe to the child process's stdin
    instead of file descriptor 3.  The bug was due to copying
    exec_checkpassword() and forgetting to change the value.
  Renamed exec_checkpassword() to exec_checkpassword_argv() and changed its
    arguments to expect a filename and an argument array.
  Added exec_checkpassword() to parse a command string into an argument array
    and call exec_checkpassword_argv().
  Renamed exec_command() to exec_command_argv() and changed its
    arguments to expect a filename and an argument array.
  Added exec_command() to parse a command string into an argument array
    and call exec_command_argv().
  Fixed numerous bugs in exec_command_argv() that were preventing it from
    actually gathering any input from the child process.
  Changed exec_command_argv() and exec_checkpassword_argv() to always log their
    child process errors to syslog, regardless of the user's preferences.
    Otherwise, the errors will be lost.
  Added the function find_path() to search the PATH for the given command
    without executing it.
  Changed exec_command_argv() and exec_checkpassword_argv() to use find_path()
    to locate the executable before fork()ing to catch typos.  The child
    processes then use execve() to execute the command instead of exec_path().
    Otherwise, the parent has a hard time determining that the child process
    quit because the command path was invalid.
  Changed exec_command_argv() and exec_checkpassword_argv() not to wait
    indefinitely for the child to exit after the timeout expires.
  Changed dns_txt(), dns_ptr_lookup() and dns_mx() to limit the total number of
    queries they will recursively perform.  This is to prevent a DoS situation
    where some domain has an unreasonable number of chained (non-circular) CNAME
    records.  The limit is (arbitrarily) set at 16.
  Added the function config_test_child_capabilities() to test the qmail binary
    for SMTP AUTH and TLS patches.  Depending on what is found, recommendations
    for spamdyke flags are made.
  Changed check_rdns_keywords() to allow top-level domains (like .com) to be
    used as keywords.  This allows a way to reject connections from remote
    servers with rDNS names that contain the IP address and a two-letter country
    code.  Unlike check_country_code(), specific country codes can now be
    chosen.
  Fixed do_spamdyke() not to wait indefinitely for all child processes to exit.
    This behavior was causing problems with DJB's recordio because recordio
    fork()s and uses its parent process to exec() spamdyke.  This is very
    unusual.  Changing wait(NULL) to waitpid() fixes the problem.  Thanks to
    Bob Hutchinson for reporting this one.
  Added dns_initialize() and dns_get() to perform DNS queries by sending UDP
    packets instead of using the resolver library to do it.  The resolver
    functions are just too slow and they try to do too much unnecessary work.
    dns_get() performs multiple requests for records (one for each kind of
    desired record) and, if no responses are received, sends requests to the
    secondary nameservers as well.  Timeouts and retransmission times can now
    be controlled.  This has resulted in a significant speedup in DNS
    resolutions; testing shows as much as a 10x performance increase in some
    situations.
  Changed dns_txt(), dns_ptr_lookup() and dns_mx() to search all of the answers
    for the desired answer type before recursively querying CNAME answers.  Some
    nameservers always put the CNAME answers first, even if other answer types
    are also given.  This should allow spamdyke to find answers faster when
    domain admins have used a lot of CNAMEs.
  Added dns_a() to perform A record queries and changed all uses of
    gethostbyname() to use dns_a() instead.
  Changed dnsa, dnsmx, dnsns, dnsptr, dnssoa and dnstxt in the "utils" folder to
    only perform their specific queries, not ask for CNAME records as well.
  Changed dnsa, dnsmx, dnsns, dnsptr, dnssoa and dnstxt in the "utils" folder to
    send their own UDP packets instead of using the resolver library.
  Added dnscname to the "utils" folder to perform CNAME queries.
  Added dnsany to the "utils" folder to perform ANY queries and perform
    recursive CNAME lookups.
  Added "log-target" option to allow logging to stderr instead of syslog.  Some
    people apparently like using the qmail-style "multilog" instead of syslog.
    I can't understand why but I'm here to serve.  Thanks to John Hallam for
    suggesting this one.
  Changed all of the error messages about unexpected file types to specify what
    file type was found -- "non-regular file" was too vague to be useful.
  Changed the header in the files created by full logging to include the
    spamdyke version.
  Changed tls_end_inner() to use SSL_get_shutdown() to see if a shutdown signal
    has already been received.  If SSL_shutdown() is used on a closed file
    descriptor, spamdyke will crash with SIGPIPE.
  Changed all instances of read(), write(), SSL_read() and SSL_write() to read
    or write as many bytes as possible in each call.  This should provide a
    significant performance increase.  The single-byte read()s and write()s
    were only used because I had badly misunderstood the relationship between
    select() and read()/write() -- blocking only occurs when select() indicates
    a file descriptor is not ready.  If it is ready, read() and write() will
    handle as many bytes as they can without blocking.  Thanks to Trog for
    setting me straight on this one.
  Rewrote most of sendrecv in the "tests" folder to use a multi-byte read().
    Also took the opportunity to make sendrecv much faster and more polite, so
    it doesn't consume 100% CPU while waiting for qmail output.
  Fixed compiling errors on 64 bit Linux systems (Debian Etch x86_64 and Gentoo
    AMD64).  Thanks to Juha-Pekka Jarvenpaa and FireBall for reporting this.
  Added config_test_file_type() to use stat() to find a file's type if readdir()
    either doesn't report it (Solaris) or reports "unknown" for all files (XFS).
    Thanks to Paulo Henrique for reporting this one.
  Fixed compiling errors on Solaris.  Thanks to Limperis Antonis for reporting
    this.
  Changed the logging severity of the "unable to write X bytes to file
    descriptor" to debug instead of error.  99% of the time, the error occurs
    because the remote client disconnected unexpectedly and there's nothing
    the administrator can do about it anyway.
  Changed do_spamdyke() to ignore SIGPIPE signals.
  Changed do_spamdyke(), exec_command_argv() and exec_command_checkpassword()
    to change the SIGPIPE signal handler back to default for child processes
    after fork()ing but before exec()ing.
  Added a new logging level: excessive (4).  It's to be used for printing very
    detailed debugging statements.
  Changed process_access() to permit access when no matching lines are found in
    the access file.  Although DJB's tcprules documentation doesn't explicitly
    say so, no matching lines should allow access.  Thanks to Steve Cole for
    reporting this one.

VERSION 3.0.1 -- 9/12/2007
  Fixed "configure" to remove the "_beta1" tag from the version number.  That
    should never have been published.
  Changed usage() to show that optional values to long commands must be
    separated by an equals sign.  getopt_long() is really becoming a hassle.
    Thanks to Richard Kreider for reporting this one.
  Fixed find_address() to accept addresses that aren't correctly delimited with
    <> characters and/or have multiple (illegal) spaces after the colon.  Thanks
    to Davide Bozzelli for reporting this one.
  Fixed prepare_settings() to set the idle timeout seconds to the correct
    variable instead of setting the connection timeout variable.  Thanks to
    Carlo Blohm for reporting this one.
  Fixed smtp_filter() to print the rejection message to HELO and EHLO, even if
    those commands appear in an improper place in the protocol.
  Fixed smtp_filter() to print the rejection message with an error code in
    response to STARTTLS if the command is given in an improper place in the
    protocol.
  Added some regression tests to find these bugs in the future.
  Fixed the usage statement in sendrecv to show the -w flag.

VERSION 3.0.0 -- 9/11/2007
  Added command line options never-graylist-rdns-dir, always-graylist-rdns-dir
    and rdns-whitelist-dir to search domain directory structures just like
    rdns-blacklist-dir.
  Added the command line option rdns-blacklist-file to search a file just like
    rdns-whitelist-file.
  Moved the command line option labels into configuration.c so they can be
    shared with the config file parser.
  Changed process_command_line() to build the list of short options from the
    list of long options instead of hardcoding them.  Less maintenance this way.
  Modified check_rdns_keywords(), search_file() and search_tcprules_file() to
    correctly track line numbers and return the matching line number instead of
    just 1.
  Changed logging to allow the amount of information to be turned up or down.
    This should make spamdyke less chatty in the syslog for small errors.
  Modified smtp_filter() and run_tests() to report the matching filename and
    line number from check_rdns_keywords(), search_file() and
    search_tcprules_file() in syslog if the logging level is high enough.
  Fixed find_address() to locate the real email address and ignore BATV tags,
    relay paths and bang paths.  Thanks to Walter Russo for reporting this one
    (again).
  Changed middleman() to obey minimums and maximums for the amount of time to
    select() for traffic.  If spamdyke waits too long, the qmail process might
    not get wait()ed for a while, leaving a lot of defunct/zombie processes
    around.  On a busy server, this could be a problem.  Thanks to Jason M for
    reporting this one.
  Added process_config_file() to process configuration files instead of
    requiring all configuration to be done on the command line.  At the moment,
    the file just uses the same (long option) directives as the command line.
  Added test_settings() to run tests on every configuration option and
    (hopefully) identify misconfigurations before someone makes them on a live
    server.
  Added the command line option "config-test" to run test_settings().
  Renamed log_writeln() and log_write_rejection() to output_writeln() and
    output_write_rejection(), respectively, to make it clearer what they're
    doing.
  Changed smtp_filter() to allow multiple authentication attempts.  Some
    clients retry authentication several times, presumably to deal with servers
    that can't use the authentication method they prefer.
  Changed middleman() to collect (and send) whole lines of input instead of
    single characters.  Single character write()s were causing problems with
    Nagios and Windows clients.
  Changed output_write_rejection() to create a single output line and send it
    to output_writeln() all at once instead of sending a piece at a time.  This
    keeps packets together for stupid Windows clients that just can't handle
    reassembling TCP packets correctly.
  Changed main() to always run spamdyke (as opposed to starting qmail without
    spamdyke listening) even if a whitelist is matched.  This way, spamdyke
    can report all traffic to syslog, not just traffic that _may_ be filtered.
  Changed smtp_filter() and middleman() to catch the return codes from qmail
    when the remote client gives the recipient address.  Now, if spamdyke
    doesn't block the recipient command but qmail does (e.g. for relaying),
    spamdyke will log the correct message.
  Incorporated GNU autoconf to create a "configure" script for spamdyke and the
    "utils" folder.  The days of "make no_tls" and "make bsd" are thankfully
    over.
  Renamed all of the test folders to group them by function so it's easier to
    see what tests exist.  Sequential numbers just weren't working.
  Changed dns_mx() to lookup the MX record before returning success.  This means
    the sender MX filter now requires a mail exchanger record _and_ at least one
    mail exchanger must have an IP address.  Before, the MX record was enough,
    even if there was no corresponding A record.
  Changed usage() to read the options and help text from get_spamdyke_options()
    in configuration.c so the help message won't ever be out of sync with the
    available options again.
  Added the command line option "tls-privatekey-password-file" to allow the SSL
    private key password to be read from a file instead of the command line.
    This way, the password isn't visible to everyone who can view a process
    list.
  Changed search_file(), search_tcprules_file() and check_rdns_keywords() so
    they no longer build their fscanf() patterns into a stack variable but
    instead use a literal search pattern assembled at compile time with
    STRINGIFY().
  Added the command line options "hostname-file" and "hostname-command" to
    support reading the local hostname from a file or from a command (e.g.
    "hostname -f") instead of forcing it to be specified on the command line.
  Changed middleman() and smtp_filter() to always monitor and trust
    authentication carried out by qmail, even if "smtp-auth-command" was not
    given.  This means spamdyke will always disable its filters for
    authenticated users even if it can't check the authentication itself.
    I'm not sure why I didn't design spamdyke this way in the first place.
  Added command line options recipient-whitelist-file and sender-whitelist-file
    so specific sender and recipient addresses can bypass the filters.  Sender
    addresses are very easy to fake and recipient addresses are, of course,
    known to spammers, so both of these options are ill-advised.  I've only
    added them due to popular demand.
  Added command line option check-rhsbl to check righthand-side blacklists.
    Both the server's rDNS domain name and the sender's email domain name are
    checked.
  Added command line options check-dns-whitelist and check-rhs-whitelist to
    allow DNS RBLs and RHSBLs to act as whitelists instead of blacklists.
    Anyone using DNS-based blacklists _and_ whitelists had better have some
    seriously fast DNS servers.
  Changed dns_txt(), dns_mx() and dns_ptr_lookup() to pass a stack of previous
    queries whenever they recursively lookup CNAME records, to prevent a cylical
    CNAME structure from leading to infinite recursion.
  NOT BACKWARDS COMPATIBLE: Changed the syslog entry format: renamed "origin" to
    "origin_ip", added "origin_rdns:" before the rDNS name, added "auth:"
    before the authenticated username and added "reason:" before the rejection
    reason when a timeout occurs.
  Changed process_command_line() to assume the remote IP address is 0.0.0.0 if
    the environment variable TCPREMOTEIP is not set.
  Added a ton more test scripts for all of the new options and for testing
    config files.
  Added dnsa, dnsns and dnssoa to the "utils" folder for performing DNS queries
    of A, NS and SOA records, respectively.  Wouldn't it be AMAZING if the
    libc maintainers added standard functions to do these queries?!
  NOT BACKWARDS COMPATIBLE: Changed the "flag" options to take optional
    arguments instead of simply assuming "true" when the option was given.
    Unfortunately, getopt_long() is too stupid to handle them properly, which
    means clustered options (e.g. -rRc) can no longer be used.  They must be
    separated (e.g. -r -R -c).  Also, arguments given with the short version
    must not be separated by a space (e.g. -l3).
  NOT BACKWARDS COMPATIBLE: Renamed the long command line option "use-syslog"
    to "log-level".
  Fixed middleman() to completely bypass all processing when TLS passthrough is
    active.  The additional processing was buffering TLS traffic until the data
    contained a newline character (purely by coincidence).  This buffering was
    preventing the passthrough from functioning properly.  Thanks to Dominik
    Dausch for reporting this one.

(schmonz)

Add missing ${DESTDIR}, fixes installation problem with USE_DESTDIR.
Noticed by Rumko in pkgsrc-users@.

(obache)

+ Introduce a way for a user to set the default curses implementation
  used by packages that need curses.  From curses.buildlink3.mk:

  CURSES_DEFAULT
This value represents the type of curses we wish to use on the
system.  Setting this to "curses" means that the system curses
implementation is fine.

Possible: curses, ncurses, pdcurses

+ Move all code to detect a built-in version of curses into a
  curses.builtin.mk file.

+ Add code to {n,pd}curses/buildlink3.mk so make the headers and
  libraries usable as <curses.h> and -lcurses if _PKG_USE_CURSES is
  defined.  _PKG_USE_CURSES is only defined by curses.buildlink3.mk.

+ Improve the detection of native ncurses in ncurses/builtin.mk and
  allow headers and libraries to be usable as <ncurses.h> and -lncurses.

(jlam)

#elsif -> #elif

(tnn)

`xvid' also works on sparc64.  Rearrange the options to account for this.

(jdc)

Updated pkgtools/pkg_chk to 1.90

(abs)

update pkg_chk to 1.90:
    - Remove obsolete and no longer accurate 'implies -c' and 'implies -i'
      notes from usage - noted by Andreas Burghardt

(abs)