Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (0m)  pkgsrc-2024Q1 (15d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (75d)  pkgsrc-2023Q3 (154d) 

2024-05-13 14:23:13 UTC Now

2020-11-19 20:14:42 UTC MAIN commitmail json YAML

doc: Added net/s6-networking version 2.3.2.0

(schmonz)

2020-11-19 20:13:19 UTC MAIN commitmail json YAML

Add and enable s6-networking.

(schmonz)

2020-11-19 20:12:54 UTC MAIN commitmail json YAML

Initial import of s6-networking, a suite of small networking tools for
Unix systems. It includes command-line client and server management, TCP
access control, privilege escalation across UNIX domain sockets, IDENT
protocol management, clock synchronization, and secure connections using
the TLS protocol.

(schmonz)

2020-11-19 20:06:39 UTC MAIN commitmail json YAML

doc: Added net/s6-dns version 2.3.3.0

(schmonz)

2020-11-19 20:06:20 UTC MAIN commitmail json YAML

Add and enable s6-dns.

(schmonz)

2020-11-19 20:05:54 UTC MAIN commitmail json YAML

Initial import of s6-dns, packaged in wip by cfkoch@edgebsd.org.

s6-dns is a suite of DNS client programs and libraries for Unix systems,
as an alternative to the BIND, djbdns or other DNS clients.

s6-dns may include its own series of DNS caches and servers at some
point in the future.

(schmonz)

2020-11-19 20:02:13 UTC MAIN commitmail json YAML

doc: Updated net/amule to 2.3.2

(nia)

2020-11-19 20:01:41 UTC MAIN commitmail json YAML

amule: Update to 2.3.2, fix build using FreeBSD Ports patches

Version 2.3.2 - The "don't close tabs" version.
----------
2016-09-16

circulosmeos:
* amuleweb cookies read behind a "lowercase" proxy (http/2 compliant)

Dan64:
* Read AICH root hashes from binary eMuleCollection files

gnazio:
* Fixed configure of libpng when sh != bash

GonoszTopi:
* Allow any kind of file links in collections
* Make UPnP log go to the appropriate category (#1681)
* Use the C++ compiler to check for features we're about to use
  in C++ source files (#1572)
* Adapt configure to handle subversion repository clones in
  mercurial and git
* Fix bfd detection for systems missing -liberty
* Add support for 'canceled.met' to the fileview tool
* Implemented the missing 'show shared' command in amulecmd
* Fix check for a valid locale config entry being done *after*
  the locale has been set
* Fix Crypto++ detection routine happily using build library
  for host when cross-compiling
* Fix bug #1711: Kad Info tab should display my own user ID
* Fix wrong sized images in the priscilla skin
* Fix bug #1423: Add the possibility to not create sparse files
* Fix bug #1743: crash when importing part files
* Review assertions in the eD2k and Kademlia code and remove
  those that could be triggered by a malformed incoming packet
* Fix a possible uninitialized variable access and a definite
  memory leak in the UPnP code

iz0bbz:
* Fix WinSock library version detection with MinGW-w64
* Fix compilation with MinGW-w64

kam:
* WebServer serves .json, .manifest and .appacache files

Mr Hyde:
* Fix "Disable computer's timed standby mode" for MacOS 10.9 Mavericks
* Compilation fix on Linux Slackware 64bit and MacOS 10.9.4
* Fix configure on Mac

sc0w:
* Add ability to use middle-click to close search tabs

Stu Redman:
* Display hashing progress in progress bars
* Assertion from background thread now prints a message and not just closes the app
* Backtrace (crash or assertion) is written to logfile
* Fix: disabling protocol obfuscation broke Kad and triggered assertions
* Fixed "Prompt on exit" preference
* Fixed country flags for Turkish localization
* Fixed loading of zipped IP filter (#1674)
* Fixed showing of shared files to other clients
* Fixed assertions in CFormat("%p") on 64 bit OS with wx 2.9
* Boost Asio can now be used as networking layer instead of wxWidgets
* Fixed memory leak when AICH hashing already known files
* New download links for server list and nodes.dat (with gav616 and xosevp)
* Projects for Visual Studio 2013 (which is now the preferred Win32 compiler)
* Fixed build with wx 3.0 (including STL build)

tgragnato:
* Fixed ASIO compilation with libcxx

Tianming Xie:
* Fix for debian bug #795061: There is no rule to generate Scanner.h

(nia)

2020-11-19 20:01:08 UTC MAIN commitmail json YAML

doc: Added sysutils/s6 version 2.9.2.0

(schmonz)

2020-11-19 20:00:46 UTC MAIN commitmail json YAML

Add and enable s6.

(schmonz)

2020-11-19 20:00:05 UTC MAIN commitmail json YAML

Initial import of s6, packaged in wip by cfkoch@edgebsd.org.

s6 is a small suite of programs for UNIX, designed to allow process
supervision (a.k.a service supervision), in the line of daemontools and
runit, as well as various operations on processes and daemons. It is meant
to be a toolbox for low-level process and service administration, providing
different sets of independent tools that can be used within or without the
framework, and that can be assembled together to achieve powerful
functionality with a very small amount of code.

(schmonz)

2020-11-19 19:58:27 UTC MAIN commitmail json YAML

arpack-ng: fix build with gfortran 10

gfortran 10 rejects certain argument mismatches, causing build
errors. This issue is fixed upstream[0], but the commit modifies
40 files, so until the next release use -fallow-argument-mismatch
to downgrade these to warnings, as suggested by the gcc 10 porting
guide[1].

[0] https://github.com/opencollab/arpack-ng/commit/9418632214acf6d387896ab29a8f5bdff2d4e38a
[1] https://gcc.gnu.org/gcc-10/porting_to.html#argument-mismatch

(mcf)

2020-11-19 19:28:49 UTC MAIN commitmail json YAML

eog: Needs itstool

(nia)

2020-11-19 19:26:29 UTC MAIN commitmail json YAML

rpcemu: Fix building on NetBSD due to non-standard fopen64 crap

(nia)

2020-11-19 19:24:26 UTC MAIN commitmail json YAML

doc: Added lang/execline version 2.6.1.1

(schmonz)

2020-11-19 19:24:08 UTC MAIN commitmail json YAML

Add and enable execline.

(schmonz)

2020-11-19 19:23:39 UTC MAIN commitmail json YAML

Initial import of execline, packaged in wip by cfkoch@edgebsd.org.

execline is a (non-interactive) scripting language, like sh, but its syntax
is quite different from a traditional shell syntax. The execlineb program
is meant to be used as an interpreter for a text file; the other commands
are essentially useful inside an execlineb script.

(schmonz)

2020-11-19 18:58:16 UTC MAIN commitmail json YAML

fd-find: Needs gmake tool

(nia)

2020-11-19 18:38:37 UTC MAIN commitmail json YAML

doc: Removed multimedia/gmediaserver

(nia)

2020-11-19 18:37:50 UTC MAIN commitmail json YAML

2020-11-19 18:32:40 UTC MAIN commitmail json YAML

doc: Removed graphics/flickrnet

(nia)

2020-11-19 18:31:58 UTC MAIN commitmail json YAML

2020-11-19 17:19:57 UTC MAIN commitmail json YAML

dosbox-x: Include bsd.prefs.mk

(nia)

2020-11-19 17:17:16 UTC MAIN commitmail json YAML

2020-11-19 16:53:05 UTC MAIN commitmail json YAML

doc: Updated emulators/dosbox-x to 0.83.7

(nia)

2020-11-19 16:52:31 UTC MAIN commitmail json YAML

dosbox-x: Update to 0.83.7

0.83.7
  - The primary DOSBox-X Wiki is now located at the
    URL: https://dosbox-x.com/wiki (Wengier)
  - Implemented the x86 dynamic core for both 32-bit
    and 64-bit systems by re-porting the code from SVN.
    Dynamic core now supports either the dynamic_x86
    or the dynamic_rec core. The dynamic_x86 core will
    be used by default for x86 and x86_64 platforms and
    if "core=dynamic" is set, and Windows 9x can be run
    in this dynamic core (although at this time may
    encounter some issue with the S3 driver). You can
    also explicit specify setting "core=dynamic_x86" or
    "core=dynamic_rec" for either the dynamic_x86 core
    or the dynamic_rec core. Also thank joncampbell123
    for the 64-bit fix. (Wengier)
  - You can now use your own save file (in addition to
    save slots! There are now a "Use save file" toggle
    item and "Browse save file..." for browsing save
    files on your computer. A config option "savefile"
    (in [dosbox] section) is added to specify a save
    file to use at start. (Wengier)
  - Save state feature now allows users to optionally
    enter remarks when saving a state. A submenu group
    "Save/load option" is added (under "Capture") where
    you can toggle menu items "No remark when saving
    state" (for disabling input of remarks when saving)
    and "force load state mode". A menu item "Display
    state information" is added as well to display the
    information of the saved state. (Wengier)
  - DOSBox-X will now use native dialog box to display
    quit warnings and save state errors. (Wengier)
  - Changed some DOS error messages (such as "Illegal
    command" which now reads "Bad command or filename")
    similar to real DOS systems. (Wengier)
  - ADDKEY and INT2FDBG commands now appear as programs
    on Z: drive instead of shell commands. (Wengier)
  - Improved the -z (move virtual drive Z:) function of
    MOUNT command. You can move the virtual drive as
    many times as you want, and save/load states will
    work even after you move the Z: drive. (Wengier)
  - Enhanced the config option "freesizecap" to allow
    the setting "fixed" which is the same as "false",
    and a new setting "relative" is added, which will
    be similar to the setting "fixed" but the reported
    free disk size will also change relative to the
    change of the free disk size ever since. (Wengier)
  - Added support for Opus CD-DA tracks by porting and
    cleaning up the source code from other projects.
    Many thanks to Marty Shepard and kcgen. (Wengier)
  - Support for FluidSynth MIDI Synthesizer is now
    included in the MinGW builds by default just like
    Visual Studio builds. Set "mididevice=fluidsynth"
    and a soundfont file to use it. (Wengier)
  - Enabled xBRZ scaler for Visual Studio SDL2 builds
    just like Visual Studio SDL1 builds. (Wengier)
  - Added menu item "Show Sound Blaster configuration"
    under "Sound" menu to show the current information
    about Sound Blaster, and also menu item "Show MIDI
    device configuration" (also under "Sound" menu)
    to show information about the current MIDI device
    such as the soundfont file in use. (Wengier)
  - Added "Mount multiple disk/CD images" option to the
    mounting options of the Drive menu to allow users
    to mount more than one disk/CD images to a drive,
    swappable from the menu. Also added separators to
    the Drive submenu to make it look better. (Wengier)
  - Added new CPU types to the "Emulate CPU speed" menu
    group namely 286-25MHz, 386DX-25MHz, 486DX4-100MHz,
    486DX5-133MHz, Pentium-60MHz, Pentium-75MHz, and
    Pentium-90MHz. Thanks again for the data provided
    by the user maximus105. (Wengier)
  - You can now select a special key (e.g. Alt+Tab,
    Ctrl+Break, Ctrl+Alt+Del, etc) to be sent from the
    key defined in the mapper editor. The key can be
    selected (Ctrl+Alt+Del by default) from the "Send
    special key" menu group in "Main" menu. (Wengier)
  - Added full Ctrl+Break emulation at the BIOS and
    DOS level, updated console emulation to match.
    The "Pause" mapper shortcut is now moved to
    HOST[F11/F12]+Pause instead of Ctrl+Pause so that
    Ctrl+Break can work properly for users, and the
    function to send the Ctrl+Break key from the menu
    ("Send special key" under "Main") is added. Also,
    the PC-98 STOP key now functions the same as the
    Ctrl+C and Ctrl+Break keys in IBM PC mode.
  - Added functions "CopyToClipboard" and "QuickRun" to
    the mapper editor so that you can use shortcuts to
    activate them (default shortcuts: HOST(F11/F12)+A
    and HOST(F11/F12)+Q respectively), and a default
    shortcut HOST(F11/F12)+V is added to the clipboard
    paste function. Meanwhile, FullCore and SimpleCore
    shortcuts are removed from the mapper. (Wengier)
  - Added two new menu items in the "Shared clipboard
    functions" menu group under "Main", including "Copy
    all text on the DOS screen" which will copy all
    screen text to the clipboard, and "Stop clipboard
    pasting" which allows user to stop pasting in the
    middle of pasting long clipboard content. (Wengier)
  - The mouse copy/paste feature is now available for
    non-Windows systems on SDL2 builds. Also, pasting
    from the clipboard with a mapped shortcut is also
    available for Linux/X11 on SDL1 builds. (Wengier)
  - Added "Use US keyboard layout" toggle menu item in
    the "PC-98" menu group under "Video" to select
    whether to force the default US keyboard layout in
    PC-98 mode, same as the "pc-98 force ibm keyboard
    layout" config option in [pc98] section. Also moved
    the "PC-98 PIT master clock" options from the "DOS"
    menu to this menu group. (Wengier)
  - The full dosbox-x.reference.conf file is renamed to
    dosbox-x.reference.full.conf. The original file
    dosbox-x.reference.conf now contains common config
    options instead of all config options. (Wengier)
  - The CONFIG command and Configuration Tool will now
    save common and modified config options by default.
    The -all command-line option (or "Save all options
    to the configuration file" checkbox) will force to
    save all config options. A new -mod command-line
    option is added to CONFIG command to save modified
    config options only, and a new -norem command-line
    option is added to not write remarks. (Wengier)
  - Updated the Windows installer to default to the
    "typical" installation. For the full installation
    start menu items will be added for DOSBox-X builds
    copied to subdirectories. A new checkbox "Write
    common config options (instead of all) to the
    configuration file" is added which when checked
    will only write common and modified advanced config
    options to the config file. Furthermore, for both
    "typical" and "full" installations the Windows
    installer will now also copies the DLL files
    inpout32.dll (32-bit) and inpoutx64.dll (64-bit) to
    the DOSBox-X install directory for use with the
    direct parallel port passthrough feature. (Wengier)
  - Improved Flatpak support for Linux. (rderooy)
  - Improved message for the -help command-line option,
    adding for example -silent and -socket command-line
    options in the help messages. (Wengier)
  - Added -silent command-line option to run DOSBox-X
    silently (without showing the DOSBox-X window) and
    then exit after executing AUTOEXEC.BAT. (Wengier)
  - Fixed command-line option -socket not working for
    the null-modem feature. (Wengier)
  - Fixed issue that aspect ratio not being respected
    in full-screen mode when a GLSL shader is enabled
    with an OpenGL output. (Wengier)
  - Fixed toggle in the "Frameskip" menu group did not
    change when selecting a different option. (Wengier)
  - Fixed shelling from programs may not work when the
    shell config option is set. (Wengier)
  - The default country setting ("country" option in
    [config] section]) now defaults to auto-detection
    if possible, or 81 (Japan) in PC-98 mode. (Wengier)
  - Increased the default maximum DOS files (adjustable
    from [config] section) from 127 to 200. (Wengier)
  - Improved resetting with LOADLIN program. (Wengier)
  - Improved Gravis Ultrasound (GUS) implementation to
    make it more accurately represent the GUS DMA state
    as expected by the running DOS software.
  - The archive attribute will no longer automatically
    be applied to directories on non-Windows systems.
    This fixed issue with PLAYMIDI.EXE from Gravis
    Ultrasound when listing directories. (Wengier)
  - Applied hack to allow the low DMA channel detection
    in the SB16 DIAGNOSE program to work. (Wengier)
  - The default setting of the clip_paste_speed option
    has been changed from 20 to 30, which will help
    prevent lost keystrokes when pasting from the host
    clipboard for some programs. (Wengier)
  - With Pentium CPU setting (cputype=pentium) DOSBox-X
    no longer reports FDIV bug by default. An advanced
    config option "report fdiv bug" is added to report
    such CPU bug when set to true. (rderooy & Wengier)
  - Added support for the XDG_DATA_HOME environment
    variable for config directory in Linux. (rderooy)
  - Added support for compiling with pcap for Windows
    MinGW builds. (Jookia)
  - Added config option "windowposition" (in [sdl]
    section) to set the window position at startup in
    the positionX,positionY format. (tomba4)
  - Added config option "raw_mouse_input" (in [sdl]
    section; SDL2 builds only) to bypass the operating
    system's mouse acceleration & sensitivity settings.
    Implemented by NicknineTheEagle.
  - Added config option "startquiet" (in [dos] section)
    which when set to true will silence the information
    messages before launching Windows programs to run
    on the Windows host. A toggle menu item "Quiet mode
    (no start messages)" is added to the "Windows host
    applications" menu group in "DOS" menu. (Wengier)
  - The menu "Show details" (under "Main") is renamed
    to "Show FPS and RT speed in title bar". (Wengier)
  - Add menu group "Text-mode" under "Video" menu to
    change some text-mode related video settings, such
    as changing the number of rows and columns. A zip
    package named TEXTUTIL.ZIP is added to the Z drive
    that contains various utilities (such as CGA.COM,
    EGA.COM, 132X25.COM, 132X43.COM) to change current
    video setting from the command line. Also added a
    config option "high intensity blinking" which when
    set will display high intensity background colors
    instad of blinking foreground text. The menu item
    "Allow 9-pixel wide fonts" is moved from the menu
    group "Compatibility" to here. (Wengier)
  - Added "Debugging" menu group under "Help" menu, and
    moved items from the "Video" Debug and "DOS" Debug
    menus and the debugger here (debug builds only).
    Also allowed to hide/show the console or debugger
    window in Windows debug builds. With the menu item
    "Console wait on error" checked the Windows console
    window will wait for the ENTER key before closing
    itself after an E_EXIT occurs. (Wengier)
  - Updated MPXPLAY to latest version 1.65. (Wengier)
  - Integrated SVN commits (Allofich)
    - r4386: Correct MPU-401 clock-to-host function to
    operate independently of playing. Fixes hang at
    exit when playing Roland music in demos by The
    Phoney Coders. Clamp tempo to valid range.
    - r4384: ICW1 on the PIC clears the Interrupt Mask
    Register. Fixes Antagony and quite a few demos that
    expect IRQs to be unmasked.
    - r4382: Refine adlib timers a bit more and make
    reading the Adlib take a bit more time.
    - r4378: Prevent some possible deadlocks with sti
    in dynrec core.
    - r4375: Improve compatibility with older Intel
    chipsets
    - r4374: Add a bit of hack so cycles=max/auto 90%
    keeps on working inside batch files after r3925.
    - r4371: Fix regression in Clue: Master Detective.
    - r4370: As an adjunct to r4369, make the reference
      counts of standard device handles equivalent to
      those of real DOS.
    - r4369: Compatible side-effect behavior of DOS in
      the file close function.
    - r4368: Improve error codes for some DOS file functions.
    - r4367: Change FPU_FBST to only write 18 decimals
      instead of the wrongly 19, this makes it possible
      to switch 64 integers which in turn fixes some
      rounding issues. (jmarsh)
    - r4282,r4283: Switch to a different way to calculate
      DBOPL table offsets.
    - r4280: Prevent GenerateDMASound from running with
      input of 0.
    - r4279: Remove DMA_TRANSFEREND and replace with
      DMA_MASKED.
    - r4277: Remove cases not needed after r4276
    - r4276: Remove defunct code related to the initial
      display mode of the system BIOS during video mode
      changes.
    - r4274: fix externals.
    - r4273: Make frameskip an integer.
    - r4269: Use fabsf when return value is a float.
      Small warning fix.
    - r4265: Some more cleanups and memleak fixes.
    - r4264: Pick some lowhanging fruit. (some memory
      leaks and unused variables)
    - r4262: missed one
    - r4261: These actually use float as input.
    - r4258: Rename bios tester to biostest and make it
      debug only to avoid people trying to load real
      bioses.
    - r4257: Add simple program that allows you to boot
      into a bios image for running cpu tester bios.

(nia)

2020-11-19 16:29:43 UTC MAIN commitmail json YAML

python3{7,8,9}: build fix when include files have invalid UTF-8

I happen to have include/gts.h installed, which includes an accented
ISO-8859-1 character in its copyright message. This trips up the configuration
of Python in pkgsrc.

Ignore files with invalid unicode characters.

Also regenerate one other patch. No revision bump since the result is the same.

(bsiegert)

2020-11-19 15:10:07 UTC MAIN commitmail json YAML

fonts: + tex-plex-doc.

(kleink)

2020-11-19 15:09:41 UTC MAIN commitmail json YAML

doc: Added fonts/tex-plex-doc version 4.0.1.

(kleink)

2020-11-19 15:09:01 UTC MAIN commitmail json YAML

2020-11-19 15:08:03 UTC MAIN commitmail json YAML

fonts: + tex-plex.

(kleink)

2020-11-19 15:07:38 UTC MAIN commitmail json YAML

doc: Added fonts/tex-plex version 4.0.1.

(kleink)

2020-11-19 15:06:36 UTC MAIN commitmail json YAML

fonts/tex-plex: Import plex 4.0.1.

The package provides LaTEX, pdfLaTeX, XeLaTeX and LuaLaTeX support
for the IBM Plex families of fonts. Serif, Sans and Mono families
are available in eight weights: Regular, Light, ExtraLight, Thin,
Bold, Text, Medium and SemiBold (with corresponding italics).

(kleink)

2020-11-19 14:50:37 UTC MAIN commitmail json YAML

tex-vhistory-doc: Actually name the package as intended.

(Missed substitution in DISTNAME.)

(kleink)

2020-11-19 14:31:25 UTC MAIN commitmail json YAML

doc: Updated mail/thunderbird-l10n to 78.5.0

(ryoon)

2020-11-19 14:31:03 UTC MAIN commitmail json YAML

thunderbird-l10n: Update to 78.5.0

* Sync with mail/thunderbird-78.5.0.

(ryoon)

2020-11-19 14:30:35 UTC MAIN commitmail json YAML

doc: Updated mail/thunderbird to 78.5.0

(ryoon)

2020-11-19 14:29:55 UTC MAIN commitmail json YAML

thunderbird: Update to 78.5.0

* Fix build with lang/rust-1.47.0.

Changelog:
78.5.0
What's New
OpenPGP: Added option to disable attaching the public key to a signed message
MailExtensions: "compose_attachments" context added to Menus API
MailExtensions: Menus API now available on displayed messages

Changes
MailExtensions: browser.tabs.create will now wait for "mail-delayed-startup-finished" event

Fixes
OpenPGP: Support for inline PGP messages improved
OpenPGP: Message security dialog showed unverified keys as unavailable
Chat: New chat contact menu item did not function
Various theme and usability improvements
Various security fixes

#CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
#CVE-2020-16012: Variable time processing of cross-origin images during drawImage calls
#CVE-2020-26953: Fullscreen could be enabled without displaying the security UI
#CVE-2020-26956: XSS through paste (manual and clipboard API)
#CVE-2020-26958: Requests intercepted through ServiceWorkers lacked MIME type restrictions
#CVE-2020-26959: Use-after-free in WebRequestService
#CVE-2020-26960: Potential use-after-free in uses of nsTArray
#CVE-2020-15999: Heap buffer overflow in freetype
#CVE-2020-26961: DoH did not filter IPv4 mapped IP Addresses
#CVE-2020-26965: Software keyboards may have remembered typed passwords
#CVE-2020-26966: Single-word search queries were also broadcast to local network
#CVE-2020-26968: Memory safety bugs fixed in Thunderbird 78.5

78.4.3
Fixes
User interface was inconsistent when switching from the default theme to the dark theme and back to the default theme
Email subject would disappear when hovering over it with the mouse when using Windows 7 Classic theme

78.4.2
Fixes
Security fix
#CVE-2020-26950: Write side effects in MCallGetProperty opcode not accounted for

78.4.1
What's New
Thunderbird prompts for an address to use when starting an email from an address book entry with multiple addresses

Fixes
Searching global search results did not work
Link location was not focused by default when adding a hyperlink in message composer
Advanced address book search dialog was unusable
Encrypted draft reply emails lost "Re:" prefix
Replying to a newsgroup message did not open the compose window
Unable to delete multiple newsgroup messages
Appmenu displayed visual glitches
Visual glitches when selecting multiple messages in the message pane and using Ctrl+click
Switching between dark and light mode could lead to unreadable text on macOS

78.4.0
What's New
MailExtensions: browser.tabs.sendMessage API added
MailExtensions: messageDisplayScripts API added

Changes
Yahoo and AOL mail users using password authentication will be migrated to OAuth2
MailExtensions: messageDisplay APIs extended to support multiple selected messages
MailExtensions: compose.begin functions now support creating a message with attachments

Fixes
Thunderbird could freeze when updating global search index
Multiple issues with handling of self-signed SSL certificates addressed
Recipient address fields in compose window could expand to fill all available space
Inserting emoji characters in message compose window caused unexpected behavior
Button to restore default folder icon color was not keyboard accessible
Various keyboard navigation fixes
Various color-related theme fixes
MailExtensions: Updating attachments with onBeforeSend.addListener() did not work
Various security fixes

Security fixes:
#CVE-2020-15969: Use-after-free in usersctp
#CVE-2020-15683: Memory safety bugs fixed in Thunderbird 78.4

78.3.3
Fixes
OpenPGP: Improved support for encrypting with subkeys
OpenPGP message status icons were not visible in message header pane
OpenPGP Key Manager was missing from Tools menu on macOS
Creating a new calendar event did not require an event title

78.3.2
Changes
Thunderbird will no longer automatically install updates when Preferences tab is opened

Fixed
OpenPGP: Improved support for encrypting with subkeys
OpenPGP: Encrypted messages with international characters were sometimes displayed incorrectly
Single-click deletion of recipient pills with middle mouse button restored
Searching an address book list did not display results
Windows installer was unreadable with Windows in high contrast mode
Dark mode, high contrast, and Windows theming fixes

(ryoon)

2020-11-19 12:21:17 UTC MAIN commitmail json YAML

doc: Updated net/syncthing to 1.11.1

(nia)

2020-11-19 12:20:54 UTC MAIN commitmail json YAML

syncthing: Update to 1.11.1

Bugfixes:

    #7090: panics in failure reporting

(nia)

2020-11-19 12:10:30 UTC MAIN commitmail json YAML

doc: Updated wm/herbstluftwm to 0.9.0

(nia)

2020-11-19 12:09:52 UTC MAIN commitmail json YAML

herbstluftwm: Update to 0.9.0

Release 0.9.0 on 2020-10-31
---------------------------

  * When an application fails to focus itself (because
    focus_stealing_prevention is active), then the window is marked as urgent.
  * New optional argument for the 'split' command for splitting non-leaf frames
  * Frame objects: the frame layout can be introspected via the 'tiling' object
    present in each tag, e.g.: 'tags.focus.tiling'.
  * New command 'foreach' for iterating over objects
  * New attribute 'urgent_count' for tags, counting the number of urgent clients on a tag
  * New rule consequence 'floatplacement' that updates the placement of floating
    clients ('floatplacement=smart' for little overlap,
    'floatplacement=center' for centering) or leaves the floating position as
    is ('floatplacement=none')
  * New rule condition 'pgid'
  * New format specifier '%c' in the 'sprintf' command (useful in combination with 'foreach')
  * The 'new_attr' command now also accepts an initial value
  * React to a change of the 'floating_focused' attribute of the tag object
  * New frame index character 'p' for accessing the parent frame
  * Object tree documentation as a json file
  * Bug fixes:
    - Fix wrong behaviour in 'cycle_layout' in the case where the current layout
      is not contained in the layout list passed to 'cycle_layout'.
    - Fix handling of delta -1 in 'focus_monitor' and 'cycle_monitor'
    - Fixed precision decimals in the layout tree (more reliable in- and output
      of fractions in frame splits)
    - Fixes in maximize.sh

(nia)

2020-11-19 11:49:41 UTC MAIN commitmail json YAML

doc: Updated lang/elixir to 1.11.2

(nia)

2020-11-19 11:49:17 UTC MAIN commitmail json YAML

elixir: Update to 1.11.2

Elixir

    [Code] Do not crash when getting docs for missing erts appdir
    [Kernel] Raise meaningful error if :erlang.is_record is used in guards
    [Kernel] Prune tracers when fetching __ENV__ inside functions

Mix

    [mix] Fix regression where aliases could not call themselves recursively
    [mix compile] Do not discard tracers that are set programmatically

(nia)

2020-11-19 11:27:18 UTC MAIN commitmail json YAML

doc: Updated chat/weechat to 3.0

(nia)

2020-11-19 11:26:59 UTC MAIN commitmail json YAML

weechat: Update to 3.0

Version 3.0 (2020-11-11)

  New features
              * api: add optional list of colors in infos "nick_color" and
                "nick_color_name" (issue #1565)

              * api: add argument "bytes" in function string_dyn_concat

              * api: add function string_color_code_size (issue #1547)

              * exec: add option "-oerr" to send stderr to buffer (now
                disabled by default) (issue #1566)

              * fset: add option fset.look.auto_refresh (issue #1553)

              * irc: add pointer to irc_nick in focus of bar item
                "buffer_nicklist" (issue #1535, issue #1538)

              * irc: allow to send text on buffers with commands /allchan,
                /allpv and /allserv

              * irc: evaluate command executed by commands /allchan, /allpv
                and /allserv (issue #1536)

              * script: add option script.scripts.download_enabled (issue
                #1548)

              * trigger: add variable "tg_argc" in data set by command
                trigger (issue #1576)

              * trigger: add variable "tg_trigger_name" in data set by all
                triggers (issue #1567, issue #1568)

  Bug fixes
              * core: set "notify_level" to 3 if there is a highlight in the
                line (issue #1529)

              * core: do not add line with highlight and tag "notify_none" to
                hotlist (issue #1529)

              * irc: remove SASL timeout message displayed by error after
                successful SASL authentication (issue #1515)

              * irc: send all channels in a single JOIN command when
                reconnecting to the server (issue #1551)

              * script: do not automatically download list of scripts on
                startup if the file is too old (issue #1548)

              * spell: properly skip WeeChat and IRC color codes when
                checking words in input (issue #1547)

              * trigger: fix recursive calls to triggers using regex (issue
                #1546)

              * trigger: add ${tg_tags} !!- ,notify_none, in conditions of
                default trigger "beep" (issue #1529)

  Tests
              * core: add tests on GUI line functions

  Build
              * core: disable debug by default in autotools build

              * tests: fix compilation with CppUTest ≥ 4.0

(nia)

2020-11-19 11:03:33 UTC MAIN commitmail json YAML

doc: Updated x11/picom to 8.2

(nia)

2020-11-19 11:03:04 UTC MAIN commitmail json YAML

picom: Update to 8.2

This is a bug fix release of picom

    Fixes assertion failures related to WIN_FLAGS_SHADOW_STALE, see #479
    write-pid-path in configuration file now accepted, see #492
    Pid files are now deleted during shutdown, see #492
    Build fixes for certain platforms, see #501, #502

Thanks to @tryone144, @jialeens, and @niacat

(nia)

2020-11-19 10:41:54 UTC MAIN commitmail json YAML

doc: Updated audio/faad2 to 2.10.0

(nia)

2020-11-19 10:41:27 UTC MAIN commitmail json YAML

faad2: Update to 2.10.0

2.10.0:
[ tatsuz ]
* updated Visual Studio projects to VS 2019 (#54)

[ Fabian Greffrath ]
* mp4read.c: fix stack-buffer-overflow in stringin()/ftypin()
* fix heap-buffer-overflow in mp4read.c

[ Clayton Smith ]
* Remove non-ASCII characters
* Remove trailing whitespace

[ Andrew Wesie ]
* Check return value of ltp_data.
* Restrict SBR frame length to 960 and 1024 samples.
* Support object type 29.
* Support implicit SBR signaling in frontend.
* Fix PNS decoding when only right channel is noise.
* Initialize element_id array with an invalid id.
* Fix NULL pointer dereferences.
* Fix infinite loop in adts_parse.
* Fix infinite loop in huffman_getescape.
* Check for error after each channel decode.
* Check for inconsistent number of channels.

(nia)

2020-11-19 10:37:46 UTC MAIN commitmail json YAML

Updated archivers/lz4, archivers/py-lz4

(adam)

2020-11-19 10:37:24 UTC MAIN commitmail json YAML

py-lz4: updated to 3.1.1

3.1.1:
Correct how pkgconfig is handled in setup.py to account for multiple build flags
Improve how CHAR_BIT is handled

(adam)

2020-11-19 10:36:57 UTC MAIN commitmail json YAML

lz4: updated to 1.9.3

LZ4 v1.9.3 is a maintenance release, offering more than 200+ commits to fix multiple corner cases and build scenarios. Update is recommended. Existing liblz4 API is not modified, so it should be a drop-in replacement.

Changes list

Here is a more detailed list of updates introduced in v1.9.3 :

perf: highly improved speed in kernel space, by @terrelln
perf: faster speed with Visual Studio, thanks to @wolfpld and @remittor
perf: improved dictionary compression speed, by @felixhandte
perf: fixed LZ4_compress_HC_destSize() ratio, detected by @hsiangkao
perf: reduced stack usage in high compression mode, by @Yanpas
api : LZ4_decompress_safe_partial() supports unknown compressed size, requested by @jfkthame
api : improved LZ4F_compressBound() with automatic flushing, by Christopher Harvie
api : can (de)compress to/from NULL without UBs
api : fix alignment test on 32-bit systems (state initialization)
api : fix LZ4_saveDictHC() in corner case scenario, detected by @IgorKorkin
cli : compress multiple files using the legacy format, by Filipe Calasans
cli : benchmark mode supports dictionary, by @rkoradi
cli : fix --fast with large argument, detected by @picoHz
build: link to user-defined memory functions with LZ4_USER_MEMORY_FUNCTIONS
build: contrib/cmake_unofficial/ moved to build/cmake/
build: visual/* moved to build/
build: updated meson script, by @neheb
build: tinycc support, by Anton Kochkov
install: Haiku support, by Jerome Duval
doc : updated LZ4 frame format, clarify EndMark

(adam)

2020-11-19 10:27:51 UTC MAIN commitmail json YAML

Updated devel/py-test-pylint, net/py-prometheus_client

(adam)

2020-11-19 10:27:33 UTC MAIN commitmail json YAML

py-prometheus_client: updated to 0.9.0

0.9.0:
[ENHANCEMENT] Add support for python3.9
[ENHANCEMENT] Various updates for latest OpenMetrics draft spec

(adam)

2020-11-19 10:26:21 UTC MAIN commitmail json YAML

py-test-pylint: updated to 0.18.0

0.18.0
Added support for creating missing folders when using --pylint-output-file
Now when pylint's ignore_patterns is blank, we don't ignore all files
Added cache invalidation when your pylintrc changes
Verified support for latest pytest and Python 3.9
Corrected badly named nodes (duplicated path) thanks to yanqd0
Added tests to source distribution thanks to sbraz

(adam)

2020-11-19 10:21:57 UTC MAIN commitmail json YAML

Updated www/py-aiohttp, devel/py-ruamel-ordereddict

(adam)

2020-11-19 10:21:38 UTC MAIN commitmail json YAML

py-ruamel-ordereddict: updated to 0.4.15

0.4.15:
Bug fixes

(adam)

2020-11-19 10:19:50 UTC MAIN commitmail json YAML

py-aiohttp: updated to 3.7.3

3.7.3
=====

Features
--------
- Use Brotli instead of brotlipy
- Made exceptions pickleable. Also changed the repr of some exceptions.

Bugfixes
--------
- Raise a ClientResponseError instead of an AssertionError for a blank
  HTTP Reason Phrase.
- Fix ``web_middlewares.normalize_path_middleware`` behavior for patch without slash.
- Fix overshadowing of overlapped sub-applications prefixes.
- Make `BaseConnector.close()` a coroutine and wait until the client closes all connections. Drop deprecated "with Connector():" syntax.
- Reset the ``sock_read`` timeout each time data is received for a ``aiohttp.client`` response.
- Fixed type annotation for add_view method of UrlDispatcher to accept any subclass of View
- Fixed querying the address families from DNS that the current host supports.
- Change return type of MultipartReader.__aiter__() and BodyPartReader.__aiter__() to AsyncIterator.
- Provide x86 Windows wheels.

Improved Documentation
----------------------
- Add documentation for ``aiohttp.web.FileResponse``.
- Removed deprecation warning in tracing example docs
- Fixed wrong "Usage" docstring of ``aiohttp.client.request``.
- Add aiohttp-pydantic to third party libraries

(adam)

2020-11-19 09:35:43 UTC MAIN commitmail json YAML

2020-11-19 09:31:19 UTC MAIN commitmail json YAML

Set SUBST_NOOP_OK in case PKG_SYSCONFBASE == "/etc". Define LICENSE.

(schmonz)

2020-11-19 09:16:38 UTC MAIN commitmail json YAML

Run without errors when LICENSE is undefined.

(schmonz)

2020-11-19 09:08:15 UTC MAIN commitmail json YAML

doc: Updated mail/qmailanalog to 0.70nb2

(schmonz)

2020-11-19 09:08:06 UTC MAIN commitmail json YAML

None of the command names appear anywhere else in a pkgsrc-wide PLIST
grep. Install directly to ${PREFIX}. Bump PKGREVISION.

(schmonz)

2020-11-19 08:11:18 UTC MAIN commitmail json YAML

Only a few djb-nonlicense packages remain. Retire DJB_RESTRICTED,
instead setting LICENSE directly in those packages. Remove outdated
djbware.mk TODO items.

(schmonz)

2020-11-19 02:57:11 UTC MAIN commitmail json YAML

gdbm: reflect shlib major bump

(This was missed during the last update to this package almost three
months ago, so no point in doing a dependent PKGREVISION bump now.)

(gutteridge)

2020-11-19 01:24:23 UTC MAIN commitmail json YAML

chat/mautrix-telegram: Add a few optional dependencies

These are optional, but for very commonly used features. So not really optional.

(js)

2020-11-19 01:13:26 UTC MAIN commitmail json YAML

doc: Updated sysutils/intel-microcode-netbsd to 20201118

(msaitoh)

2020-11-19 01:12:39 UTC MAIN commitmail json YAML

Update intel-microcode-netbsd to 20201118.

## [microcode-20201118]

### Purpose

- Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.

### New Platforms

None

### Updated Platforms

None

### Removed Platforms

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| TGL            | B1      | 06-8c-01/80 | 00000068 |          | Core Gen11 Mobile

(msaitoh)

2020-11-18 23:28:11 UTC MAIN commitmail json YAML

doc: Added chat/mautrix-telegram version 0.9.0

(js)

2020-11-18 23:27:56 UTC MAIN commitmail json YAML

2020-11-18 23:23:52 UTC MAIN commitmail json YAML

doc: Added chat/py-telethon-session-sqlalchemy version 0.2.16

(js)

2020-11-18 23:23:31 UTC MAIN commitmail json YAML

2020-11-18 23:12:12 UTC MAIN commitmail json YAML

doc: Added chat/py-telethon version 1.17.5

(js)

2020-11-18 23:11:57 UTC MAIN commitmail json YAML

Add chat/py-telethon

Telegram is a popular messaging application. This library is meant to make it
easy for you to write Python programs that can interact with Telegram. Think of
it as a wrapper that has already done the heavy job for you, so you can focus
on developing an application.

(js)

2020-11-18 22:40:55 UTC MAIN commitmail json YAML

doc: Updated finance/ledger2beancount to 2.5

(riastradh)

2020-11-18 22:40:30 UTC MAIN commitmail json YAML

doc: Added textproc/p5-YAML-XS version 0.82

(riastradh)

2020-11-18 22:39:15 UTC MAIN commitmail json YAML

ledger2beancount: Update to 2.5

2.5 (2020-11-03)

    Don't create negative cost for lot without cost
    Support complex implicit conversions
    Handle typed metadata with value 0 correctly
    Set per-unit instead of total cost when cost is missing from lot
    Support commodity-less amounts
    Convert transactions with no amounts or only 0 amounts to notes
    Fix parsing of transaction notes
    Keep tags in transaction notes on same line as transaction header
    Add beancount config options for non-standard root names automatically
    Fix conversion of fixated prices to costs
    Fix removal of price when price==cost but when they use different number formats
    Fix removal of price when price==cost but per-unit and total notation mixed
    Fix detection of tags and metadata after posting/aux date
    Use D directive to set default commodity for hledger
    Improve support for postings with commodity-less amounts
    Allow empty comments
    Preserve leading whitespace in comments in postings and transaction headers
    Preserve indentation for tags and metadata
    Preserve whitespace between amount and comment
    Refactor code to use more data structures
    Remove dependency on Config::Onion module

2.4 (2020-07-27)

    Fix regressions introduced in version 2.3
        Handle price directives with comments
        Don't assume implicit conversion when price is on second posting
    Improve support for hledger
        Fix parsing of hledger tags
        Support commas as decimal markers
        Support digit group marks through commodity and D directives
        Support end aliases directive
        Support regex aliases
        Recognise total balance assertions
        Recognise sub-account balance assertions
    Add support for define directive
    Convert all uppercase metadata tags to all lowercase
    Improve handling of ledger lots without cost
    Allow transactions without postings
    Fix parsing issue in commodity declarations
    Support commodities that contain quotation marks
    Add --version option to show version
    Document problem of mixing apply and include

2.3 (2020-06-26)

    Improve speed of ledger2beancount significantly
    Improve parsing of postings for accuracy and speed
    Improve support for inline maths
    Handle lots without cost
    Fix parsing of lot notes followed by a virtual price
    Add support for lot value expressions
    Make parsing of numbers more strict
    Fix behaviour of dates without year
    Accept default ledger date formats without configuration
    Fix implicit conversions with negative prices
    Convert implicit conversions in a more idiomatic way
    Avoid introducing trailing whitespace with hledger input
    Fix loading of config file
    Skip ledger directive import
    Convert documentation to mkdocs

2.2 (2020-05-30)

    Show warning for unknown apply directive
    Recognise apply rate directive (an alias of apply fixed)
    Don't convert metadata on ignored virtual postings but keep as comments
    Update location of beancount repository

2.1 (2020-04-06)

    Handle postings with posting dates and comments but no amount
    Show transactions with only one posting (without bucket)
    Adding spacing between automatic declarations
    Preserve preliminary info at the top

(riastradh)

2020-11-18 22:38:52 UTC MAIN commitmail json YAML

2020-11-18 22:38:22 UTC MAIN commitmail json YAML

2020-11-18 21:06:22 UTC MAIN commitmail json YAML

doc: Updated chat/matrix-synapse to 1.23.0

(js)

2020-11-18 21:06:08 UTC MAIN commitmail json YAML

Update chat/matrix-synapse to 1.23.0

Synapse 1.23.0 (2020-11-18)
===========================

This release changes the way structured logging is configured. See the [upgrade notes](UPGRADE.rst#upgrading-to-v1230) for details.

**Note**: We are aware of a trivially exploitable denial of service vulnerability in versions of Synapse prior to 1.20.0. Complete details will be disclosed on Monday, November 23rd. If you have not upgraded recently, please do so.

Bugfixes
--------

- Fix a dependency versioning bug in the Dockerfile that prevented Synapse from starting. ([\#8767](https://github.com/matrix-org/synapse/issues/8767))

Synapse 1.23.0rc1 (2020-11-13)
==============================

Features
--------

- Add a push rule that highlights when a jitsi conference is created in a room. ([\#8286](https://github.com/matrix-org/synapse/issues/8286))
- Add an admin api to delete a single file or files that were not used for a defined time from server. Contributed by @dklimpel. ([\#8519](https://github.com/matrix-org/synapse/issues/8519))
- Split admin API for reported events (`GET /_synapse/admin/v1/event_reports`) into detail and list endpoints. This is a breaking change to #8217 which was introduced in Synapse v1.21.0. Those who already use this API should check their scripts. Contributed by @dklimpel. ([\#8539](https://github.com/matrix-org/synapse/issues/8539))
- Support generating structured logs via the standard logging configuration. ([\#8607](https://github.com/matrix-org/synapse/issues/8607), [\#8685](https://github.com/matrix-org/synapse/issues/8685))
- Add an admin API to allow server admins to list users' pushers. Contributed by @dklimpel. ([\#8610](https://github.com/matrix-org/synapse/issues/8610), [\#8689](https://github.com/matrix-org/synapse/issues/8689))
- Add an admin API `GET /_synapse/admin/v1/users/<user_id>/media` to get information about uploaded media. Contributed by @dklimpel. ([\#8647](https://github.com/matrix-org/synapse/issues/8647))
- Add an admin API for local user media statistics. Contributed by @dklimpel. ([\#8700](https://github.com/matrix-org/synapse/issues/8700))
- Add `displayname` to Shared-Secret Registration for admins. ([\#8722](https://github.com/matrix-org/synapse/issues/8722))

Bugfixes
--------

- Fix fetching of E2E cross signing keys over federation when only one of the master key and device signing key is cached already. ([\#8455](https://github.com/matrix-org/synapse/issues/8455))
- Fix a bug where Synapse would blindly forward bad responses from federation to clients when retrieving profile information. ([\#8580](https://github.com/matrix-org/synapse/issues/8580))
- Fix a bug where the account validity endpoint would silently fail if the user ID did not have an expiration time. It now returns a 400 error. ([\#8620](https://github.com/matrix-org/synapse/issues/8620))
- Fix email notifications for invites without local state. ([\#8627](https://github.com/matrix-org/synapse/issues/8627))
- Fix handling of invalid group IDs to return a 400 rather than log an exception and return a 500. ([\#8628](https://github.com/matrix-org/synapse/issues/8628))
- Fix handling of User-Agent headers that are invalid UTF-8, which caused user agents of users to not get correctly recorded. ([\#8632](https://github.com/matrix-org/synapse/issues/8632))
- Fix a bug in the `joined_rooms` admin API if the user has never joined any rooms. The bug was introduced, along with the API, in v1.21.0. ([\#8643](https://github.com/matrix-org/synapse/issues/8643))
- Fix exception during handling multiple concurrent requests for remote media when using multiple media repositories. ([\#8682](https://github.com/matrix-org/synapse/issues/8682))
- Fix bug that prevented Synapse from recovering after losing connection to the database. ([\#8726](https://github.com/matrix-org/synapse/issues/8726))
- Fix bug where the `/_synapse/admin/v1/send_server_notice` API could send notices to non-notice rooms. ([\#8728](https://github.com/matrix-org/synapse/issues/8728))
- Fix PostgreSQL port script fails when DB has no backfilled events. Broke in v1.21.0. ([\#8729](https://github.com/matrix-org/synapse/issues/8729))
- Fix PostgreSQL port script to correctly handle foreign key constraints. Broke in v1.21.0. ([\#8730](https://github.com/matrix-org/synapse/issues/8730))
- Fix PostgreSQL port script so that it can be run again after a failure. Broke in v1.21.0. ([\#8755](https://github.com/matrix-org/synapse/issues/8755))

Improved Documentation
----------------------

- Instructions for Azure AD in the OpenID Connect documentation. Contributed by peterk. ([\#8582](https://github.com/matrix-org/synapse/issues/8582))
- Improve the sample configuration for single sign-on providers. ([\#8635](https://github.com/matrix-org/synapse/issues/8635))
- Fix the filepath of Dex's example config and the link to Dex's Getting Started guide in the OpenID Connect docs. ([\#8657](https://github.com/matrix-org/synapse/issues/8657))
- Note support for Python 3.9. ([\#8665](https://github.com/matrix-org/synapse/issues/8665))
- Minor updates to docs on running tests. ([\#8666](https://github.com/matrix-org/synapse/issues/8666))
- Interlink prometheus/grafana documentation. ([\#8667](https://github.com/matrix-org/synapse/issues/8667))
- Notes on SSO logins and media_repository worker. ([\#8701](https://github.com/matrix-org/synapse/issues/8701))
- Document experimental support for running multiple event persisters. ([\#8706](https://github.com/matrix-org/synapse/issues/8706))
- Add information regarding the various sources of, and expected contributions to, Synapse's documentation to `CONTRIBUTING.md`. ([\#8714](https://github.com/matrix-org/synapse/issues/8714))
- Migrate documentation `docs/admin_api/event_reports` to markdown. ([\#8742](https://github.com/matrix-org/synapse/issues/8742))
- Add some helpful hints to the README for new Synapse developers. Contributed by @chagai95. ([\#8746](https://github.com/matrix-org/synapse/issues/8746))

Internal Changes
----------------

- Optimise `/createRoom` with multiple invited users. ([\#8559](https://github.com/matrix-org/synapse/issues/8559))
- Implement and use an `@lru_cache` decorator. ([\#8595](https://github.com/matrix-org/synapse/issues/8595))
- Don't instansiate Requester directly. ([\#8614](https://github.com/matrix-org/synapse/issues/8614))
- Type hints for `RegistrationStore`. ([\#8615](https://github.com/matrix-org/synapse/issues/8615))
- Change schema to support access tokens belonging to one user but granting access to another. ([\#8616](https://github.com/matrix-org/synapse/issues/8616))
- Remove unused OPTIONS handlers. ([\#8621](https://github.com/matrix-org/synapse/issues/8621))
- Run `mypy` as part of the lint.sh script. ([\#8633](https://github.com/matrix-org/synapse/issues/8633))
- Correct Synapse's PyPI package name in the OpenID Connect installation instructions. ([\#8634](https://github.com/matrix-org/synapse/issues/8634))
- Catch exceptions during initialization of `password_providers`. Contributed by Nicolai Sæ·¡borg. ([\#8636](https://github.com/matrix-org/synapse/issues/8636))
- Fix typos and spelling errors in the code. ([\#8639](https://github.com/matrix-org/synapse/issues/8639))
- Reduce number of OpenTracing spans started. ([\#8640](https://github.com/matrix-org/synapse/issues/8640), [\#8668](https://github.com/matrix-org/synapse/issues/8668), [\#8670](https://github.com/matrix-org/synapse/issues/8670))
- Add field `total` to device list in admin API. ([\#8644](https://github.com/matrix-org/synapse/issues/8644))
- Add more type hints to the application services code. ([\#8655](https://github.com/matrix-org/synapse/issues/8655), [\#8693](https://github.com/matrix-org/synapse/issues/8693))
- Tell Black to format code for Python 3.5. ([\#8664](https://github.com/matrix-org/synapse/issues/8664))
- Don't pull event from DB when handling replication traffic. ([\#8669](https://github.com/matrix-org/synapse/issues/8669))
- Abstract some invite-related code in preparation for landing knocking. ([\#8671](https://github.com/matrix-org/synapse/issues/8671), [\#8688](https://github.com/matrix-org/synapse/issues/8688))
- Clarify representation of events in logfiles. ([\#8679](https://github.com/matrix-org/synapse/issues/8679))
- Don't require `hiredis` package to be installed to run unit tests. ([\#8680](https://github.com/matrix-org/synapse/issues/8680))
- Fix typing info on cache call signature to accept `on_invalidate`. ([\#8684](https://github.com/matrix-org/synapse/issues/8684))
- Fail tests if they do not await coroutines. ([\#8690](https://github.com/matrix-org/synapse/issues/8690))
- Improve start time by adding an index to `e2e_cross_signing_keys.stream_id`. ([\#8694](https://github.com/matrix-org/synapse/issues/8694))
- Re-organize the structured logging code to separate the TCP transport handling from the JSON formatting. ([\#8697](https://github.com/matrix-org/synapse/issues/8697))
- Use Python 3.8 in Docker images by default. ([\#8698](https://github.com/matrix-org/synapse/issues/8698))
- Remove the "draft" status of the Room Details Admin API. ([\#8702](https://github.com/matrix-org/synapse/issues/8702))
- Improve the error returned when a non-string displayname or avatar_url is used when updating a user's profile. ([\#8705](https://github.com/matrix-org/synapse/issues/8705))
- Block attempts by clients to send server ACLs, or redactions of server ACLs, that would result in the local server being blocked from the room. ([\#8708](https://github.com/matrix-org/synapse/issues/8708))
- Add metrics the allow the local sysadmin to track 3PID `/requestToken` requests. ([\#8712](https://github.com/matrix-org/synapse/issues/8712))
- Consolidate duplicated lists of purged tables that are checked in tests. ([\#8713](https://github.com/matrix-org/synapse/issues/8713))
- Add some `mdui:UIInfo` element examples for `saml2_config` in the homeserver config. ([\#8718](https://github.com/matrix-org/synapse/issues/8718))
- Improve the error message returned when a remote server incorrectly sets the `Content-Type` header in response to a JSON request. ([\#8719](https://github.com/matrix-org/synapse/issues/8719))
- Speed up repeated state resolutions on the same room by caching event ID to auth event ID lookups. ([\#8752](https://github.com/matrix-org/synapse/issues/8752))

Synapse 1.22.1 (2020-10-30)
===========================

Bugfixes
--------

- Fix a bug where an appservice may not be forwarded events for a room it was recently invited to. Broke in v1.22.0. ([\#8676](https://github.com/matrix-org/synapse/issues/8676))
- Fix `Object of type frozendict is not JSON serializable` exceptions when using third-party event rules. Broke in v1.22.0. ([\#8678](https://github.com/matrix-org/synapse/issues/8678))

(js)

2020-11-18 21:04:54 UTC MAIN commitmail json YAML

doc: Updated chat/mautrix-hangouts to 0.1.4

(js)

2020-11-18 20:52:50 UTC MAIN commitmail json YAML

Update chat/mautrix-hangouts to 0.1.4

Upstream provides absolutely no change log other than "Bump version".

(js)

2020-11-18 20:49:45 UTC MAIN commitmail json YAML

doc: Updated chat/py-mautrix to 0.8.3

(js)

2020-11-18 20:48:58 UTC MAIN commitmail json YAML

Update chat/py-mautrix to 0.8.3

There is no ChangeLog file and there are too many versions in between to
manually collect the changes.

(js)

2020-11-18 18:12:16 UTC MAIN commitmail json YAML

totem-pl-parser: Also avoid second version-script

(nia)

2020-11-18 17:35:29 UTC MAIN commitmail json YAML

doc: Updated net/youtube-dl to 20201118

(leot)

2020-11-18 17:35:15 UTC MAIN commitmail json YAML

youtube-dl: Update to 20201118

pkgsrc changes:
- Remove patch-youtube__dl_extractor_bandcamp.py, fixed differently upstream
- Update patch-youtube__dl_extractor_rai.py to current rai extractor
- Add a reference to upstream pull request in patch-youtube__dl_extractor_la7.py

Changes:
2020.11.18
----------
Extractors
* [spiegel] Fix extraction (#24206, #24767)
* [youtube] Improve extraction
    + Add support for --no-playlist (#27009)
    * Improve playlist and mix extraction (#26390, #26509, #26534, #27011)
    + Extract playlist uploader data
* [youtube:tab] Fix view count extraction (#27051)
* [malltv] Fix extraction (#27035)
+ [bandcamp] Extract playlist description (#22684)
* [urplay] Fix extraction (#26828)
* [youtube:tab] Fix playlist title extraction (#27015)
* [youtube] Fix chapters extraction (#26005)

2020.11.17
----------
Core
* [utils] Skip ! prefixed code in js_to_json

Extractors
* [youtube:tab] Fix extraction with cookies provided (#27005)
* [lrt] Fix extraction with empty tags (#20264)
+ [ndr:embed:base] Extract subtitles (#25447, #26106)
+ [servus] Add support for pm-wissen.com (#25869)
* [servus] Fix extraction (#26872, #26967, #26983, #27000)
* [xtube] Fix extraction (#26996)
* [lrt] Fix extraction
+ [lbry] Add support for lbry.tv
+ [condenast] Extract subtitles
* [condenast] Fix extraction
* [bandcamp] Fix extraction (#26681, #26684)
* [rai] Fix RaiPlay extraction (#26064, #26096)
* [vlive] Fix extraction
* [usanetwork] Fix extraction
* [nbc] Fix NBCNews/Today/MSNBC extraction
* [cnbc] Fix extraction

(leot)

2020-11-18 15:19:26 UTC MAIN commitmail json YAML

doc: Added net/ucspi-ipc version 0.67

(schmonz)

2020-11-18 15:19:08 UTC MAIN commitmail json YAML

Add and enable ucspi-ipc.

(schmonz)

2020-11-18 15:18:39 UTC MAIN commitmail json YAML

Initial import of ucspi-ipc, command-line tools for building
local-domain client-server applications. They conform to the UNIX
Client-Server Program Interface, UCSPI.

The ipcserver program listens for connections on a local-domain
stream socket, and runs a program for each connection it accepts. The
program environment includes variables that hold the local and remote
socket addresses, and the effective user and group IDs of the process
that called connect. ipcserver offers a concurrency limit on
acceptance of new connections, and selective handling of connections
based on client identity.

The ipcclient program requests a connection to a local-domain socket,
and runs a program. The program environment includes a variable that
holds the local socket address.

The ipcperl program is an example of an ipchandle server. It invokes a
perl subroutine for each request.

(schmonz)

2020-11-18 15:12:39 UTC MAIN commitmail json YAML

Quell pkglint: sprinkle .PHONY and terminate list of commands with semicolon.

(schmonz)

2020-11-18 14:44:35 UTC MAIN commitmail json YAML

doc: Updated www/hugo to 0.78.2

(jperkin)

2020-11-18 14:44:24 UTC MAIN commitmail json YAML

go-hugo: Update to 0.78.2.

Switch to go-modules and tidy up.

There have been 59 releases and nearly 3,000 lines of changelog since 0.55.6,
so apologies, but if you want a changelog you'll need to browse:

  https://github.com/gohugoio/hugo/releases

to see what changed as it's impractical to list them here.

(jperkin)

2020-11-18 14:32:20 UTC MAIN commitmail json YAML

doc: Added net/ucspi-unix version 1.0

(schmonz)

2020-11-18 14:32:05 UTC MAIN commitmail json YAML

Add and enable ucspi-unix.

(schmonz)

2020-11-18 14:31:43 UTC MAIN commitmail json YAML

2020-11-18 14:24:59 UTC MAIN commitmail json YAML

doc: Updated devel/nss to 3.59

(ryoon)

2020-11-18 14:24:00 UTC MAIN commitmail json YAML

nss: Update to 3.59

Changelog:
Notable Changes in NSS 3.59

Exported two existing functions from libnss, CERT_AddCertToListHeadWithData
and CERT_AddCertToListTailWithData

NOTE: NSS will soon require GCC 4.8 or newer. Gyp-based builds will stop
supporting older GCC versions first, followed a few releases later by the
make-based builds. Users of older GCC versions can continue to use the
make-based build system while they upgrade to newer versions of GCC.

Bugs fixed in NSS 3.59

* Bug 1607449 - Lock cert->nssCertificate to prevent a potential data race
* Bug 1672823 - Add Wycheproof test cases for HMAC, HKDF, and DSA
* Bug 1663661 - Guard against NULL token in nssSlot_IsTokenPresent
* Bug 1670835 - Support enabling and disabling signatures via Crypto Policy
* Bug 1672291 - Resolve libpkix OCSP failures on SHA1 self-signed root certs
when SHA1 signatures are disabled.
* Bug 1644209 - Fix broken SelectedCipherSuiteReplacer filter to solve some
test intermittents
* Bug 1672703 - Tolerate the first CCS in TLS 1.3  to fix a regression in our
CVE-2020-25648 fix that broke purple-discord
* Bug 1666891 - Support key wrap/unwrap with RSA-OAEP
* Bug 1667989 - Fix gyp linking on Solaris
* Bug 1668123 - Export CERT_AddCertToListHeadWithData and
CERT_AddCertToListTailWithData from libnss
* Bug 1634584 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Trustis FPS Root CA
* Bug 1663091 - Remove unnecessary assertions in the streaming ASN.1 decoder
that affected decoding certain PKCS8 private keys when using NSS debug builds
* Bug 1670839 - Use ARM crypto extension for AES, SHA1 and SHA2 on MacOS.

(ryoon)

2020-11-18 14:17:53 UTC MAIN commitmail json YAML

doc: Added net/ucspi-proxy version 1.1

(schmonz)

2020-11-18 14:17:35 UTC MAIN commitmail json YAML

Add and enable ucspi-proxy.

(schmonz)

2020-11-18 14:17:11 UTC MAIN commitmail json YAML

Initial import of ucspi-proxy, a program that passes data back and forth
between two connections set up by a UCSPI server and a UCSPI client. The
simple usage is:

    UCSPIserver [address] UCSPIclient [address] ucspi-proxy

Replace "UCSPIserver" with the program that will accept connections, and
"UCSPIclient" with the program that will make connections.

(schmonz)

2020-11-18 14:02:58 UTC MAIN commitmail json YAML

doc: Added www/go-hugo-bin version 0.78.2

(nikita)

2020-11-18 14:01:05 UTC MAIN commitmail json YAML

Add www/go-hugo-bin version 0.78.2

Binary built version of hugo, a static website engine written in Go.

(nikita)

2020-11-18 13:10:57 UTC MAIN commitmail json YAML

Updated security/gnupg2

(adam)

2020-11-18 13:06:45 UTC MAIN commitmail json YAML

gnupg2: updated to 2.2.24

Noteworthy changes in version 2.2.24
------------------------------------

  * Allow Unicode file names on Windows almost everywhere.  Note that
    it is still not possible to use Unicode strings on the command
    line.  This change also fixes a regression in 2.2.22 related to
    non-ascii file names.

  * Fix localized time printing on Windows.

  * gpg: New command --quick-revoke-sig.

  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt.

  * gpg: Switch to AES256 for symmetric encryption in de-vs mode.

  * gpg: Silence weak digest warnings with --quiet.

  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption.

  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys.

  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519 keys.

  * agent: Keep some permissions of private-keys-v1.d.

  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds.

  * dirmngr: Fix the pool keyserver case for a single host in the
    pool.

  * scd: Fix the use case of verify_chv2 by CHECKPIN.

  * scd: Various improvements to the ccid-driver.

  * scd: Minor fixes for Yubikey

  * gpgconf: New option --show-versions.

  * w32: Install gpg-check-pattern and example profiles.  Install
    Windows subsystem variant of gpgconf (gpgconf-w32).

  * i18n: Complete overhaul and completion of the Italian translation.
    Thanks to Denis Renzi.

  * Require Libgcrypt 1.8 because 1.7 has long reached end-of-life.

(adam)

2020-11-18 12:34:49 UTC MAIN commitmail json YAML

doc: Updated www/firefox78-l10n to 78.5.0

(nia)

2020-11-18 12:34:21 UTC MAIN commitmail json YAML

2020-11-18 12:34:09 UTC MAIN commitmail json YAML

doc: Updated www/firefox78 to 78.5.0

(nia)

2020-11-18 12:33:45 UTC MAIN commitmail json YAML

firefox78: Update to 78.5.0

Security Vulnerabilities fixed in Firefox ESR 78.5

    #CVE-2020-26951: Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code

    #CVE-2020-16012: Variable time processing of cross-origin images during
    drawImage calls

    #CVE-2020-26953: Fullscreen could be enabled without displaying the security
    UI

    #CVE-2020-26956: XSS through paste (manual and clipboard API)

    #CVE-2020-26958: Requests intercepted through ServiceWorkers lacked MIME
    type restrictions

    #CVE-2020-26959: Use-after-free in WebRequestService

    #CVE-2020-26960: Potential use-after-free in uses of nsTArray

    #CVE-2020-15999: Heap buffer overflow in freetype

    #CVE-2020-26961: DoH did not filter IPv4 mapped IP Addresses

    #CVE-2020-26965: Software keyboards may have remembered typed passwords

    #CVE-2020-26966: Single-word search queries were also broadcast to local
    network

    #CVE-2020-26968: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5

(nia)

2020-11-18 12:25:50 UTC MAIN commitmail json YAML

print: + tex-vhistory-doc

(kleink)

2020-11-18 12:25:23 UTC MAIN commitmail json YAML

doc: Added print/tex-vhistory-doc version 1.6.1

(kleink)

2020-11-18 12:24:30 UTC MAIN commitmail json YAML

2020-11-18 12:22:46 UTC MAIN commitmail json YAML

print: + tex-vhistory

(kleink)

2020-11-18 12:22:01 UTC MAIN commitmail json YAML

CHANGES-2020: Updated -> Added previous.

(kleink)

2020-11-18 12:20:57 UTC MAIN commitmail json YAML

doc: Updated print/tex-vhistory to 1.6.1

(kleink)

2020-11-18 12:20:12 UTC MAIN commitmail json YAML

print/tex-vhistory: Import vhistory 1.6.1.

Vhistory simplifies the creation of a history of versions of a
document. You can easily extract information like the current
version of a list of authors from that history. It helps you to
get consistent documents.

(kleink)

2020-11-18 12:18:29 UTC MAIN commitmail json YAML

2020-11-18 11:43:30 UTC MAIN commitmail json YAML

doc: Updated security/tor-browser to 10.0.5

(wiz)

2020-11-18 11:43:19 UTC MAIN commitmail json YAML

tor-browser: update to 10.0.5.

This release updates Firefox to 78.5.0esr and updates Tor to 0.4.4.6.
This release includes important security updates to Firefox.

The full changelog since Tor Browser 10.0.4 (Desktop) is:

    Windows + OS X + Linux
        Update Firefox to 78.5.0esr
        Update Tor to 0.4.4.6
        Bug 40212: Add new default obfs4 bridge

(wiz)

2020-11-18 11:39:51 UTC MAIN commitmail json YAML

2020-11-18 11:30:01 UTC MAIN commitmail json YAML

doc: Updated www/gitea to 1.12.6

(jperkin)

2020-11-18 11:29:27 UTC MAIN commitmail json YAML

gitea: Update to 1.12.6.

Fixes pkgsrc handling of the frontend artefacts, various files were previously
missing, leading to errors in the web interface.

Changes since 1.12.1:

## [1.12.6](https://github.com/go-gitea/gitea/releases/tag/v1.12.6) - 2020-11-11

* SECURITY
  * Prevent git operations for inactive users (#13527) (#13537)
  * Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13525)
* BUGFIXES
  * API should only return Json (#13511) (#13564)
  * Fix before and since query arguments at API (#13559) (#13560)
  * Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13492)
  * Fix link detection in repository description with tailing '_' (#13407) (#13408)
  * Remove obsolete change of email on profile page (#13341) (#13348)
  * Fix permission check on get Reactions API endpoints (#13344) (#13346)
  * Add migrated pulls to pull request task queue (#13331) (#13335)
  * API deny wrong pull creation options (#13308) (#13327)
  * Fix initial commit page & binary munching problem (#13249) (#13259)
  * Fix diff parsing (#13157) (#13136) (#13139)
  * Return error 404 not 500 from API if team does not exist (#13118) (#13119)
  * Prohibit automatic downgrades (#13108) (#13111)
  * Fix GitLab Migration Option AuthToken (#13101)
  * GitLab Label Color Normalizer (#12793) (#13100)
  * Log the underlying panic in runMigrateTask (#13096) (#13098)
  * Fix attachments list in edit comment (#13036) (#13097)
  * Fix deadlock when deleting team user (#13093)
  * Fix error create comment on outdated file (#13041) (#13042)
  * Fix repository create/delete event webhooks (#13008) (#13027)
  * Fix internal server error on README in submodule (#13006) (#13016)

## [1.12.5](https://github.com/go-gitea/gitea/releases/tag/v1.12.5) - 2020-10-01

* BUGFIXES
  * Allow U2F with default settings for gitea in subpath (#12990) (#13001)
  * Prevent empty div when editing comment (#12404) (#12991)
  * On mirror update also update address in DB (#12964) (#12967)
  * Allow extended config on cron settings (#12939) (#12943)
  * Open transaction when adding Avatar email-hash pairs to the DB (#12577) (#12940)
  * Fix internal server error from ListUserOrgs API (#12910) (#12915)
  * Update only the repository columns that need updating (#12900) (#12912)
  * Fix panic when adding long comment (#12892) (#12894)
  * Add size limit for content of comment on action ui (#12881) (#12890)
  * Convert User expose ID each time (#12855) (#12883)
  * Support slashes in release tags (#12864) (#12882)
  * Add missing information to CreateRepo API endpoint (#12848) (#12867)
  * On Migration respect old DefaultBranch (#12843) (#12858)
  * Fix notifications page links (#12838) (#12853)
  * Stop cloning unnecessarily on PR update (#12839) (#12852)
  * Escape more things that are passed through str2html (#12622) (#12850)
  * Remove double escape on labels addition in comments (#12809) (#12810)
  * Fix "only mail on mention" bug (#12775) (#12789)
  * Fix yet another bug with diff file names (#12771) (#12776)
  * RepoInit Respect AlternateDefaultBranch (#12746) (#12751)
  * Fix Avatar Resize (resize algo NearestNeighbor -> Bilinear) (#12745) (#12750)
* ENHANCEMENTS
  * gitea dump: include version & Check InstallLock (#12760) (#12762)

## [1.12.4](https://github.com/go-gitea/gitea/releases/tag/v1.12.4) - 2020-09-02

* SECURITY
  * Escape provider name in oauth2 provider redirect (#12648) (#12650)
  * Escape Email on password reset page (#12610) (#12612)
  * When reading expired sessions - expire them (#12686) (#12690)
* ENHANCEMENTS
  * StaticRootPath configurable at compile time (#12371) (#12652)
* BUGFIXES
  * Fix to show an issue that is related to a deleted issue (#12651) (#12692)
  * Expire time acknowledged for cache (#12605) (#12611)
  * Fix diff path unquoting (#12554) (#12575)
  * Improve HTML escaping helper (#12562)
  * models: break out of loop (#12386) (#12561)
  * Default empty merger list to those with write permissions (#12535) (#12560)
  * Skip SSPI authentication attempts for /api/internal (#12556) (#12559)
  * Prevent NPE on commenting on lines with invalidated comments (#12549) (#12550)
  * Remove hardcoded ES indexername (#12521) (#12526)
  * Fix bug preventing transfer to private organization (#12497) (#12501)
  * Keys should not verify revoked email addresses (#12486) (#12495)
  * Do not add prefix on http/https submodule links (#12477) (#12479)
  * Fix ignored login on compare (#12476) (#12478)
  * Fix incorrect error logging in Stats indexer and OAuth2 (#12387) (#12422)
  * Upgrade google/go-github to v32.1.0 (#12361) (#12390)
  * Render emoji's of Commit message on feed-page (#12373)
  * Fix handling of diff on unrelated branches when Git 2.28 used (#12370)

## [1.12.3](https://github.com/go-gitea/gitea/releases/tag/v1.12.3) - 2020-07-28

* BUGFIXES
  * Don't change creation date when updating Release (#12343) (#12351)
  * Show 404 page when release not found (#12328) (#12332)
  * Fix emoji detection in certain cases (#12320) (#12327)
  * Reduce emoji size (#12317) (#12327)
  * Fix double-indirection bug in logging IDs (#12294) (#12308)
  * Link to pull list page on sidebar when view pr (#12256) (#12263)
  * Extend Notifications API and return pinned notifications by default (#12164) (#12232)

## [1.12.2](https://github.com/go-gitea/gitea/releases/tag/v1.12.2) - 2020-07-11

* BUGFIXES
  * When deleting repository decrese user repository count in cache (#11954) (#12188)
  * Return full commit message instead of summary in commits API (#12186) (#12187)
  * Properly set HEAD when a repo is created with a default branch that is not named 'master' (#12135) (#12182)
  * Ensure GPG Subkeys are verified (#12155) (#12168)
  * Fix failing to cache last commit with key being to long (#12151) (#12161)
  * Multiple small admin dashboard fixes (#12153) (#12156)
  * Remove spurious logging of " Delete all repository archives" at startup (#12139) (#12148)
  * Fix repository setup instructions when default branch is not named 'master' (#12122) (#12147)
  * Move EventSource to SharedWorker (#12095) (#12130)
  * Fix ui bug in wiki commit page (#12089) (#12125)
  * Fix gitgraph branch continues after merge (#12044) (#12105)
  * Set the base url when migrating from Gitlab using access token or username without password (#11852) (#12104)
  * Ensure BlameReaders close at end of request (#12102) (#12103)
  * Fix panic when adding review comment (#12058)
* ENHANCEMENTS
  * Disable dropzone's timeout for file uploads (#12024) (#12032)

(jperkin)

2020-11-18 11:03:31 UTC MAIN commitmail json YAML

lang/python37: Fix on CentOS 7

Same as lang/python38 fix just now:

Move __has_attribute() inside #if defined(__has_attribute) body so the
preprocessor doesn't break on that.

(sjmulder)

2020-11-18 10:51:01 UTC MAIN commitmail json YAML

lang/python38: Fix on CentOS 7

Move __has_attribute() inside #if defined(__has_attribute) body so the
preprocessor doesn't break on that.

(sjmulder)

2020-11-17 19:34:06 UTC MAIN commitmail json YAML

doc: Updated lang/python37 to 3.7.9nb2

(sjmulder)

2020-11-17 19:33:41 UTC MAIN commitmail json YAML

doc: Updated lang/python38 to 3.8.6nb1

(sjmulder)

2020-11-17 19:33:26 UTC MAIN commitmail json YAML

lang/python37: Fix for macOS 11 and Apple Silicon

(Apple Silicon being their aarch64 platform.)

This is backport of the same in lang/python39 and lang/python38. Some
parts weren't applicable in 3.7. The setup.py script needed some work
on the ffi code. Otherwise, minor changes.

Patches consist of:
- Upstream work: https://github.com/python/cpython/pull/22855
- Fix for setup.py to find libbz2.tbd and libz.tbd now that with the
  shared library cache there's nothing in /usr/lib.
  See: https://bugs.python.org/issue41116
- Addition of __arch64__ case to fix _decimal module. A very similar fix
  has since been committed upstream.

(sjmulder)

2020-11-17 19:33:15 UTC MAIN commitmail json YAML

lang/python38: Fix for macOS 11 and Apple Silicon

(Apple Silicon being their aarch64 platform.)

This is backport of the same in lang/python39. Only minor changes were
needed.

Patches consist of:
- Upstream work: https://github.com/python/cpython/pull/22855
- Fix for setup.py to find libbz2.tbd and libz.tbd now that with the
  shared library cache there's nothing in /usr/lib.
  See: https://bugs.python.org/issue41116
- Addition of __arch64__ case to fix _decimal module. A very similar fix
  has since been committed upstream.

(sjmulder)

2020-11-17 18:03:00 UTC MAIN commitmail json YAML

firefox: 83.0 also requires nss 3.58 or later.

(tsutsui)

2020-11-17 17:54:51 UTC MAIN commitmail json YAML

firefox: 83.0 requires cbindgen 0.15.0 or later.

(tsutsui)

2020-11-17 16:12:58 UTC MAIN commitmail json YAML

doc: Updated www/firefox-l10n to 83.0

(ryoon)

2020-11-17 16:12:12 UTC MAIN commitmail json YAML

doc: Updated graphics/ImageMagick to 7.0.10.38

(wiz)

2020-11-17 16:12:04 UTC MAIN commitmail json YAML

firefox-l10n: Update to 83.0

* Sync with www/firefox-83.0.

(ryoon)

2020-11-17 16:12:02 UTC MAIN commitmail json YAML

ImageMagick: update to 7.0.10.38.

2020-11-14  7.0.10-38  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.0.10-38 GIT revision 17815:bf51a3f1f:20201114

2020-11-07  7.0.10-38  <quetzlzacatenango@image...>
  * add image settings support to -fx.
  * better support for TIFF YCbCr photometric.
  * verify TTF glyph format before dereferencing (reference
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26932).
  * force single HEIC image per container.

(wiz)

2020-11-17 16:11:43 UTC MAIN commitmail json YAML

doc: Updated www/firefox to 83.0

(ryoon)

2020-11-17 16:11:06 UTC MAIN commitmail json YAML

firefox: Update to 83.0

Changelog:
Version 83.0, first offered to Release channel users on November 17, 2020

New

  * Firefox keeps getting faster as a result of significant updates to
    SpiderMonkey, our JavaScript engine, you will now experience improved page
    load performance by up to 15%, page responsiveness by up to 12%, and
    reduced memory usage by up to 8%. We have replaced part of the JavaScript
    engine that helps to compile and display websites for you, improving
    security and maintainability of the engine at the same time.

  * Firefox introduces HTTPS-Only Mode. When enabled, this new mode ensures
    that every connection Firefox makes to the web is secure and alerts you
    when a secure connection is not available. You can enable it in Firefox
    Preferences.

  * Pinch zooming will now be supported for our users with Windows touchscreen
    devices and touchpads on Mac devices. Firefox users may now use pinch to
    zoom on touch-capable devices to zoom in and out of webpages.

  * Picture-in-Picture now supports keyboard shortcuts for fast forwarding and
    rewinding videos: use the arrow keys to move forward and back 15 seconds,
    along with volume controls. For a list of supported commands see Support
    Mozilla

  * When you are presenting your screen on a video conference in Firefox, you
    will see our improved user interface that makes it clearer which devices or
    displays are being shared.

  * We've improved functionality and design for a number of Firefox search
    features:

      + Selecting a search engine at the bottom of the search panel now enters
        search mode for that engine, allowing you to see suggestions (if
        available) for your search terms. The old behavior (immediately
        performing a search) is available with a shift-click.
      + When Firefox autocompletes the URL of one of your search engines, you
        can now search with that engine directly in the address bar by
        selecting the shortcut in the address bar results.
      + We've added buttons at the bottom of the search panel to allow you to
        search your bookmarks, open tabs, and history.
  * Firefox supports AcroForm, which will allow you to fill in, print, and save
    supported PDF forms and the PDF viewer also has a new fresh look.

  * Our users in India on the English build of Firefox will now see Pocket
    recommendations in their new tab featuring some of the best stories on the
    web. If you don't see them, you can turn on Pocket articles in your new
    tab by following these steps.

  * For the recently released Apple devices built with Apple Silicon CPUs, you
    can use Firefox 83 and future releases without any change. This release
    (83) will support emulation under Apple's Rosetta 2 that ships with macOS
    Big Sur. We are working toward Firefox being natively-compiled for these
    CPUs in a future release.

  * This is a major release for WebRender as we roll out to more Firefox users
    on Windows 7 and 8 as well as on macOS 10.12 to 10.15.

Fixed

  * This release also includes a number of accessibility fixes:

      + Screen reader features which report paragraphs now correctly report
        paragraphs instead of lines in Google Docs
      + When reading by word using a screen reader, words are now correctly
        reported when there is punctuation nearby
      + The arrow keys now work correctly after tabbing in the
        picture-in-picture window
  * For users on macOS restoring a session with minimized windows, Firefox now
    uses much less power and you should see much longer battery life.

  * Various security fixes

Security fixes:
#CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
#CVE-2020-26952: Out of memory handling of JITed, inlined functions could lead to a memory corruption
#CVE-2020-16012: Variable time processing of cross-origin images during drawImage calls
#CVE-2020-26953: Fullscreen could be enabled without displaying the security UI
#CVE-2020-26954: Local spoofing of web manifests for arbitrary pages in Firefox for Android
#CVE-2020-26955: Cookies set during file downloads are shared between normal and Private Browsing Mode in Firefox for Android
#CVE-2020-26956: XSS through paste (manual and clipboard API)
#CVE-2020-26957: OneCRL was not working in Firefox for Android
#CVE-2020-26958: Requests intercepted through ServiceWorkers lacked MIME type restrictions
#CVE-2020-26959: Use-after-free in WebRequestService
#CVE-2020-26960: Potential use-after-free in uses of nsTArray
#CVE-2020-15999: Heap buffer overflow in freetype
#CVE-2020-26961: DoH did not filter IPv4 mapped IP Addresses
#CVE-2020-26962: Cross-origin iframes supported login autofill
#CVE-2020-26963: History and Location interfaces could have been used to hang the browser
#CVE-2020-26964: Firefox for Android's Remote Debugging via USB could have been abused by untrusted apps on older versions of Android
#CVE-2020-26965: Software keyboards may have remembered typed passwords
#CVE-2020-26966: Single-word search queries were also broadcast to local network
#CVE-2020-26967: Mutation Observers could break or confuse Firefox Screenshots feature
#CVE-2020-26968: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5
#CVE-2020-26969: Memory safety bugs fixed in Firefox 83

(ryoon)

2020-11-17 15:31:51 UTC MAIN commitmail json YAML

BUILD_DEPENDS -> TOOL_DEPENDS

(nia)

2020-11-17 15:31:10 UTC MAIN commitmail json YAML

2020-11-17 14:23:17 UTC MAIN commitmail json YAML

doc: Updated sysutils/nnn to 3.5

(sjmulder)

2020-11-17 14:22:57 UTC MAIN commitmail json YAML

sysutils/nnn: Update to 3.5

Changes:
- compile-in Alexey Tourbin's QSORT macro
- support Nerd Font patched icons [`make O_NERD=1`]
- auto-generate static binaries with icons support
- audit and adapt all plugins for macOS
- enhance plugin `dups` to delete duplicates interactively
- plugin `autojump` now supports `jump` and `zoxide`
- support `gio trash` to Trash [`export NNN_TRASH=2`] (#740)
- quit program on double Esc in normal mode (#775)
- ^Space replaces ^K for range selection/clear selection
- show selection symbol (`+`) next to filename in detail mode (#741)
- error & quit on Q if no selection, else pick to stdout
- repeat ^T to cycle sort by time, size and clear
- option `-U` to show user & group info in status bar
- option `-J` to disable auto-proceed on select (#713)
- option `-D` to show dirs in context color with `NNN_FCOLORS`
- honor option `-C` for context colors
- show indicators if more entries above/below listing (#744)
- show missing utility name in flash msg (#753)
- exit `preview-tabbed` on ^C (#727)
- invoke GNU sed (_gsed_) on macOS (#728)
- fix HW cursor moves to wrong line (#735)
- fix rollover bug with multiline scroll (#743)
- fix input stream not listed with `-s`/`-S` (#777)
- fix locker not being invoked
- make target `upx` for additional binary compression
- compress auto-generated static binaries with upx
- make variable `O_NOSSN` to compile out sessions
- make variable `O_NOUG` to compile out user & group info

(sjmulder)

2020-11-17 13:55:32 UTC MAIN commitmail json YAML

(textproc/gnome-dictionary) Add itstool-[0-9]* for TOOL_DEPENDS

(mef)

2020-11-17 13:49:27 UTC MAIN commitmail json YAML

(time/gnome-calendar) Add gdbus-codegen-[0-9]* for BUILD_DEPENDS (is it enough ?)

(mef)

2020-11-17 13:34:06 UTC MAIN commitmail json YAML

(x11/gnome-session) Add gdbus-codegen-[0-9]* for BUILD_DEPENDS (is it enough ?)

(mef)

2020-11-17 13:27:00 UTC MAIN commitmail json YAML

(wm/mutter) Add gdbus-codegen-[0-9]* for BUILD_DEPENDS (is it enough ?)

(mef)

2020-11-17 12:25:16 UTC MAIN commitmail json YAML

2020-11-17 12:14:57 UTC MAIN commitmail json YAML

Updated net/openvpn, security/easy-rsa

(adam)

2020-11-17 12:14:17 UTC MAIN commitmail json YAML

easy-rsa: updated to 3.0.8

3.0.8 (2020-09-09)
* Provide --version option
* Version information now within generated certificates like on *nix
* Fixed issue where gen-dh overwrote existing files without warning
* Fixed issue with ED/EC certificates were still signed by RSA
* Added support for export-p8
* Clarified error message
* 2->3 upgrade now errors and prints message when vars isn't found
* Update OpenSSL Windows binaries to 1.1.1g

(adam)

2020-11-17 12:13:01 UTC MAIN commitmail json YAML

openvpn: updated to 2.5.0

Overview of changes in 2.5
==========================

New features
------------
Client-specific tls-crypt keys (``--tls-crypt-v2``)
    ``tls-crypt-v2`` adds the ability to supply each client with a unique
    tls-crypt key.  This allows large organisations and VPN providers to profit
    from the same DoS and TLS stack protection that small deployments can
    already achieve using ``tls-auth`` or ``tls-crypt``.

ChaCha20-Poly1305 cipher support
    Added support for using the ChaCha20-Poly1305 cipher in the OpenVPN data
    channel.

Improved Data channel cipher negotiation
    The option ``ncp-ciphers`` has been renamed to ``data-ciphers``.
    The old name is still accepted. The change in name signals that
    ``data-ciphers`` is the preferred way to configure data channel
    ciphers and the data prefix is chosen to avoid the ambiguity that
    exists with ``--cipher`` for the data cipher and ``tls-cipher``
    for the TLS ciphers.

    OpenVPN clients will now signal all supported ciphers from the
    ``data-ciphers`` option to the server via ``IV_CIPHERS``. OpenVPN
    servers will select the first common cipher from the ``data-ciphers``
    list instead of blindly pushing the first cipher of the list. This
    allows to use a configuration like
    ``data-ciphers ChaCha20-Poly1305:AES-256-GCM`` on the server that
    prefers ChaCha20-Poly1305 but uses it only if the client supports it.

    See the data channel negotiation section in the manual for more details.

Removal of BF-CBC support in default configuration:
    By default OpenVPN 2.5 will only accept AES-256-GCM and AES-128-GCM as
    data ciphers. OpenVPN 2.4 allows AES-256-GCM,AES-128-GCM and BF-CBC when
    no --cipher and --ncp-ciphers options are present. Accepting BF-CBC can be
    enabled by adding

        data-ciphers AES-256-GCM:AES-128-GCM:BF-CBC

    and when you need to support very old peers also

        data-ciphers-fallback BF-CBC

    To offer backwards compatibility with older configs an *explicit*

        cipher BF-CBC

    in the configuration will be automatically translated into adding BF-CBC
    to the data-ciphers option and setting data-ciphers-fallback to BF-CBC
    (as in the example commands above). We strongly recommend to switching
    away from BF-CBC to a more secure cipher.

Asynchronous (deferred) authentication support for auth-pam plugin.
    See src/plugins/auth-pam/README.auth-pam for details.

Deferred client-connect
    The ``--client-connect`` option and the connect plugin API allow
    asynchronous/deferred return of the configuration file in the same way
    as the auth-plugin.

Faster connection setup
    A client will signal in the ``IV_PROTO`` variable that it is in pull
    mode. This allows the server to push the configuration options to
    the client without waiting for a ``PULL_REQUEST`` message. The feature
    is automatically enabled if both client and server support it and
    significantly reduces the connection setup time by avoiding one
    extra packet round-trip and 1s of internal event delays.

Netlink support
    On Linux, if configured without ``--enable-iproute2``, configuring IP
    addresses and adding/removing routes is now done via the netlink(3)
    kernel interface.  This is much faster than calling ``ifconfig`` or
    ``route`` and also enables OpenVPN to run with less privileges.

    If configured with --enable-iproute2, the ``ip`` command is used
    (as in 2.4).  Support for ``ifconfig`` and ``route`` is gone.

Wintun support
    On Windows, OpenVPN can now use ``wintun`` devices.  They are faster
    than the traditional ``tap9`` tun/tap devices, but do not provide
    ``--dev tap`` mode - so the official installers contain both.  To use
    a wintun device, add ``--windows-driver wintun`` to your config
    (and use of the interactive service is required as wintun needs
    SYSTEM privileges to enable access).

IPv6-only operation
    It is now possible to have only IPv6 addresses inside the VPN tunnel,
    and IPv6-only address pools (2.4 always required IPv4 config/pools
    and IPv6 was the "optional extra").

Improved Windows 10 detection
    Correctly log OS on Windows 10 now.

Linux VRF support
    Using the new ``--bind-dev`` option, the OpenVPN outside socket can
    now be put into a Linux VRF.  See the "Virtual Routing and Forwarding"
    documentation in the man page.

TLS 1.3 support
    TLS 1.3 support has been added to OpenVPN.  Currently, this requires
    OpenSSL 1.1.1+.
    The options ``--tls-ciphersuites`` and ``--tls-groups`` have been
    added to fine tune TLS protocol options.  Most of the improvements
    were also backported to OpenVPN 2.4 as part of the maintainance
    releases.

Support setting DHCP search domain
    A new option ``--dhcp-option DOMAIN-SEARCH my.example.com`` has been
    defined, and Windows support for it is implemented (tun/tap only, no
    wintun support yet).  Other platforms need to support this via ``--up``
    script (Linux) or GUI (OSX/Tunnelblick).

per-client changing of ``--data-ciphers`` or ``data-ciphers-fallback``
    from client-connect script/dir (NOTE: this only changes preference of
    ciphers for NCP, but can not override what the client announces as
    "willing to accept")

Handle setting of tun/tap interface MTU on Windows
    If IPv6 is in use, MTU must be >= 1280 (Windows enforces IETF requirements)

Add support for OpenSSL engines to access private key material (like TPM).

HMAC based auth-token support
    The ``--auth-gen-token`` support has been improved and now generates HMAC
    based user token. If the optional ``--auth-gen-token-secret`` option is
    used clients will be able to seamlessly reconnect to a different server
    using the same secret file or to the same server after a server restart.

Improved support for pending authentication
    The protocol has been enhanced to be able to signal that
    the authentication should use a secondary authentication
    via web (like SAML) or a two factor authentication without
    disconnecting the OpenVPN session with AUTH_FAILED. The
    session will instead be stay in a authenticated state and
    wait for the second factor authentication to complete.

    This feature currently requires usage of the managent interface
    on both client and server side. See the `management-notes.txt`
    ``client-pending-auth`` and ``cr-response`` commands for more
    details.

VLAN support
    OpenVPN servers in TAP mode can now use 802.1q tagged VLANs
    on the TAP interface to separate clients into different groups
    that can then be handled differently (different subnets / DHCP,
    firewall zones, ...) further down the network.  See the new
    options ``--vlan-tagging``, ``--vlan-accept``, ``--vlan-pvid``.

    802.1q tagging on the client side TAP interface is not handled
    today (= tags are just forwarded transparently to the server).

Support building of .msi installers for Windows

Allow unicode search string in ``--cryptoapicert`` option (Windows)

Support IPv4 configs with /31 netmasks now
    (By no longer trying to configure ``broadcast x.x.x.x'' in
    ifconfig calls, /31 support "just works")

New option ``--block-ipv6`` to reject all IPv6 packets (ICMPv6)
    this is useful if the VPN service has no IPv6, but the clients
    might have (LAN), to avoid client connections to IPv6-enabled
    servers leaking "around" the IPv4-only VPN.

``--ifconfig-ipv6`` and ``--ifconfig-ipv6-push`` will now accept
    hostnames and do a DNS lookup to get the IPv6 address to use

Deprecated features
-------------------
For an up-to-date list of all deprecated options, see this wiki page:
https://community.openvpn.net/openvpn/wiki/DeprecatedOptions

- ``ncp-disable`` has been deprecated
    With the improved and matured data channel cipher negotiation, the use
    of ``ncp-disable`` should not be necessary anymore.

- ``inetd`` has been deprecated
  This is a very limited and not-well-tested way to run OpenVPN, on TCP
  and TAP mode only, which complicates the code quite a bit for little gain.
  To be removed in OpenVPN 2.6 (unless users protest).

- ``no-iv`` has been removed
  This option was made into a NOOP option with OpenVPN 2.4.  This has now
  been completely removed.

- ``--client-cert-not-required`` has been removed
  This option will now cause server configurations to not start.  Use
  ``--verify-client-cert none`` instead.

- ``--ifconfig-pool-linear`` has been removed
  This option is removed.  Use ``--topology p2p`` or ``--topology subnet``
  instead.

- ``--compress xxx`` is considered risky and is warned against, see below.

- ``--key-method 1`` has been removed

User-visible Changes
--------------------
- If multiple connect handlers are used (client-connect, ccd, connect
  plugin) and one of the handler succeeds but a subsequent fails, the
  client-disconnect-script is now called immediately. Previously it
  was called, when the VPN session was terminated.

- Support for building with OpenSSL 1.0.1 has been removed. The minimum
  supported OpenSSL version is now 1.0.2.

- The GET_CONFIG management state is omitted if the server pushes
  the client configuration almost immediately as result of the
  faster connection setup feature.

- ``--compress`` is nowadays considered risky, because attacks exist
  leveraging compression-inside-crypto to reveal plaintext (VORACLE).  So
  by default, ``--compress xxx`` will now accept incoming compressed
  packets (for compatibility with peers that have not been upgraded yet),
  but will not use compression outgoing packets.  This can be controlled with
  the new option ``--allow-compression yes|no|asym``.

- Stop changing ``--txlen`` aways from OS defaults unless explicitly specified
  in config file.  OS defaults nowadays are actually larger then what we used
  to configure, so our defaults sometimes caused packet drops = bad performance.

- remove ``--writepid`` pid file on exit now

- plugin-auth-pam now logs via OpenVPN logging method, no longer to stderr
  (this means you'll have log messages in syslog or openvpn log file now)

- use ISO 8601 time format for file based logging now (YYYY-MM-DD hh:mm:dd)
  (syslog is not affected, nor is ``--machine-readable-output``)

- ``--clr-verify`` now loads all CRLs if more than one CRL is in the same
  file (OpenSSL backend only, mbedTLS always did that)

- when ``--auth-user-pass file`` has no password, and the management interface
  is active, query management interface (instead of trying console query,
  which does not work on windows)

- skip expired certificates in Windows certificate store (``--cryptoapicert``)

- ``--socks-proxy`` + ``--proto udp*`` will now allways use IPv4, even if
  IPv6 is requested and available.  Our SOCKS code does not handle IPv6+UDP,
  and before that change it would just fail in non-obvious ways.

- TCP listen() backlog queue is now set to 32 - this helps TCP servers that
  receive lots of "invalid" connects by TCP port scanners

- do no longer print OCC warnings ("option mismatch") about ``key-method``,
  ``keydir``, ``tls-auth`` and ``cipher`` - these are either gone now, or
  negotiated, and the warnings do not serve a useful purpose.

- ``dhcp-option DNS`` and ``dhcp-option DNS6`` are now treated identically
  (= both accept an IPv4 or IPv6 address for the nameserver)

Maintainer-visible changes
--------------------------
- the man page is now in maintained in .rst format, so building the openvpn.8
  manpage from a git checkout now requires python-docutils (if this is missing,
  the manpage will not be built - which is not considered an error generally,
  but for package builders or ``make distcheck`` it is).  Release tarballs
  contain the openvpn.8 file, so unless some .rst is changed, doc-utils are
  not needed for building.

- OCC support can no longer be disabled

- AEAD support is now required in the crypto library

- ``--disable-server`` has been removed from configure (so it is no longer
  possible to build a client-/p2p-only OpenVPN binary) - the saving in code
  size no longer outweighs the extra maintenance effort.

- ``--enable-iproute2`` will disable netlink(3) support, so maybe remove
  that from package building configs (see above)

- support building with MSVC 2019

- cmocka based unit tests are now only run if cmocka is installed externally
  (2.4 used to ship a local git submodule which was painful to maintain)

- ``--disable-crypto`` configure option has been removed.  OpenVPN is now always
  built with crypto support, which makes the code much easier to maintain.
  This does not affect ``--cipher none`` to do a tunnel without encryption.

- ``--disable-multi`` configure option has been removed

(adam)

2020-11-17 12:05:01 UTC MAIN commitmail json YAML

vte3: Do not install files to SYSCONFDIR. Use CONF_FILES.

Should fix the build on systems where SYSCONFDIR exists outside of
PREFIX.

(nia)

2020-11-17 11:53:06 UTC MAIN commitmail json YAML

doc: Updated net/phetch to 1.1.0

(pin)

2020-11-17 11:52:41 UTC MAIN commitmail json YAML

net/phetch: update to 1.1.0

Three new features in this release, plus an unknown number of new
bugs:

1. When the `NO_COLOR` env variable is set, phetch won't use colors
  when rendering menus. See https://no-color.org/ for more information.

2. CP437 encoding support! You can toggle it on or off using `ctrl-e`
  (for encoding) when viewing a Gopher text document, or using the
  `--encoding` command line flag. See
  https://en.wikipedia.org/wiki/Code_page_437.

  Huge thanks to Kjell for suggesting this feature and providing some
  great test data!

  _NOTE: This only works for text documents since there's no `TAB`
  character in CP437._

3. phetch now supports a primitive form of wrapping long lines when
  rendering Gopher text documents. It won't reflow the text, but it
  will make some phlogs and other documents slightly more readable.
  Enable it with `--wrap NUM` or by adding `wrap NUM` to your
  `phetch.conf`. You can disable it with `wrap 0`.

(pin)

2020-11-17 11:39:10 UTC MAIN commitmail json YAML

totem-pl-parser: Remove unsupported linker args on SunOS/Darwin

(nia)

2020-11-17 11:35:19 UTC MAIN commitmail json YAML

gnome-desktop3: Remove USE_PKGLOCALEDIR, it's harmful here

(nia)

2020-11-17 11:21:47 UTC MAIN commitmail json YAML

Correct prometheus version

(adam)

2020-11-17 11:21:19 UTC MAIN commitmail json YAML

2020-11-17 11:02:22 UTC MAIN commitmail json YAML

Updated lang/nodejs, lang/nodejs12

(adam)

2020-11-17 11:02:03 UTC MAIN commitmail json YAML

nodejs12: updated to 12.19.1

Version 12.19.1 'Erbium' (LTS)

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses.

(adam)

2020-11-17 11:01:40 UTC MAIN commitmail json YAML

nodejs: updayed to 14.15.1

Version 14.15.1 'Fermium' (LTS)

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses.

(adam)

2020-11-17 09:50:09 UTC MAIN commitmail json YAML

Updated databases/py-pypika, databases/py-tortoise-orm

(adam)

2020-11-17 09:49:36 UTC MAIN commitmail json YAML

py-tortoise-orm: updated to 0.16.18

0.16.18

Support custom function in update.
Add Model.refresh_from_db.
Add timezone support, be careful to upgrade to this version, see docs for details.
Remove aerich in case of cyclic dependency.

(adam)

2020-11-17 09:48:30 UTC MAIN commitmail json YAML

py-pypika: updated to 0.44.0

0.44.0:
Unknown changes

(adam)

2020-11-17 09:02:04 UTC MAIN commitmail json YAML

Updated textproc/py-rapidjson, time/py-pytz

(adam)

2020-11-17 09:01:39 UTC MAIN commitmail json YAML

2020-11-17 08:52:38 UTC MAIN commitmail json YAML

py-rapidjson: updated to 0.9.4

0.9.4:
* Fix memory leak loading an invalid JSON

(adam)

2020-11-17 08:48:16 UTC MAIN commitmail json YAML

Updated graphics/libjpeg-turbo, databases/prometheus

(adam)

2020-11-17 08:47:52 UTC MAIN commitmail json YAML

prometheus: updated to 2.22.2

2.22.2:
[BUGFIX] Fix race condition in syncing/stopping/reloading scrapers.

(adam)

2020-11-17 08:46:47 UTC MAIN commitmail json YAML

libjpeg-turbo: updated to 2.0.6

2.0.6

Significant changes relative to 2.0.5:

Fixed "using JNI after critical get" errors that occurred on Android platforms when using any of the YUV encoding/compression/decompression/decoding methods in the TurboJPEG Java API.

Fixed or worked around multiple issues with jpeg_skip_scanlines():

Fixed segfaults or "Corrupt JPEG data: premature end of data segment" errors in jpeg_skip_scanlines() that occurred when decompressing 4:2:2 or 4:2:0 JPEG images using merged (non-fancy) upsampling/color conversion (that is, when setting cinfo.do_fancy_upsampling to FALSE.) 2.0.0[6] was a similar fix, but it did not cover all cases.
jpeg_skip_scanlines() now throws an error if two-pass color quantization is enabled. Two-pass color quantization never worked properly with jpeg_skip_scanlines(), and the issues could not readily be fixed.
Fixed an issue whereby jpeg_skip_scanlines() always returned 0 when skipping past the end of an image.
The Arm 64-bit (Armv8) Neon SIMD extensions can now be built using MinGW toolchains targetting Arm64 (AArch64) Windows binaries.

Fixed unexpected visual artifacts that occurred when using jpeg_crop_scanline() and interblock smoothing while decompressing only the DC scan of a progressive JPEG image.

Fixed an issue whereby libjpeg-turbo would not build if 12-bit-per-component JPEG support (WITH_12BIT) was enabled along with libjpeg v7 or libjpeg v8 API/ABI emulation (WITH_JPEG7 or WITH_JPEG8.)

(adam)

2020-11-17 04:46:35 UTC MAIN commitmail json YAML

qt5-qtmultimedia: audioengine plugin is conditional on -gstreamer

Except on QNX and Darwin, where it is always enabled:
https://github.com/qt/qtmultimedia/blob/v5.15.1/src/plugins/plugins.pro

(mcf)

2020-11-17 01:57:52 UTC MAIN commitmail json YAML

doc: note the latest calibre is now 5.5

(gutteridge)

2020-11-17 01:55:04 UTC MAIN commitmail json YAML

calibre: fix build with ICU 68

This package depends on ICU headers that now unconditionally expect C99
features, so it requires C99 just as ICU does. Patch around ICU API
changes that caused related breakages.

(gutteridge)

2020-11-16 20:21:30 UTC MAIN commitmail json YAML

firefox78: Needs py-expat to build (sometimes?)

Reported by Riastradh

(nia)

2020-11-16 16:17:00 UTC MAIN commitmail json YAML

harfbuzz: fix build errors on NetBSD 7.2 with gcc 4.9.

> In file included from ../test/api/test-aat-layout.c:25:0:
> ../test/api/hb-test.h: In function 'hb_test_assert_blobs_equal':
> ../test/api/hb-test.h:178:5: error: 'for' loop initial declarations are only allowed in C99 or C11 mode
>      for (unsigned int i = 0; i < expected_length; i++)
>      ^
> ../test/api/hb-test.h:178:5: note: use option -std=c99, -std=gnu99, -std=c11 or -std=gnu11 to compile your code

(tsutsui)

2020-11-16 15:48:44 UTC MAIN commitmail json YAML

lhasa: avoid SIGSEGV on decoding 8bit char filenames on NetBSD/amd64.

Bump PKGREVISION.

(tsutsui)

2020-11-16 13:27:06 UTC MAIN commitmail json YAML

Updated textproc/py-xmlschema, databases/py-multidict, www/py-yarl, graphics/py-graphviz

(adam)

2020-11-16 13:26:09 UTC MAIN commitmail json YAML

py-graphviz: updated to 0.15

Version 0.15
------------

``Graph`` and ``Digraph`` instances created via the context-manager returned
by ``subgraph()`` now (re)use ``directory``, ``format``, ``engine``, and
``encoding`` from the parent instead of using defaults (behavioral change).
Note that these attributes are only relevant when rendering the
subgraph independently (i.e. as a stand-alone graph) from within the
``with``-block, which was previously underdocumented. To reflect that
the DOT language does not allow subgraph statements to specify ``strict``
(i.e. no way to override the setting of the containing graph), instances
created via the context-manager are now ``strict=None`` instead of ``False``
(so they continue to render stand-alone as non-strict by default).

Drop Python 3.5 support and tag Python 3.9 support.

Add documentation link to new upstream installation procedure for Windows.

(adam)

2020-11-16 13:23:04 UTC MAIN commitmail json YAML

doc: Updated audio/strawberry to 0.8.4

(wiz)

2020-11-16 13:22:54 UTC MAIN commitmail json YAML

strawberry: update to 0.8.4.

0.8.4:

  Bugfixes:
    * Fix preventing session logout when window is maxmimized.
    * Fix empty space in organize window when copying songs/playlists to devices.
    * Fix crash when opening about dialog in a wayland session.
    * Fix stretched fancy/side tabbar style issue with adwaita style (Fedora/Gnome).
    * Fix centering star icon on playlist tabbar.
    * Fix network proxy settings for streaming.
    * Fix copy URL to clipboard to handle non-ASCII characters.
    * Fix HiDPI scaling for glow animation and drag over playlist.
    * Fix smart playlist search by filename.
    * Fix single letter collection nodes showing before dividers.

  Enhancements:
    * Add support for native global shortcuts on KDE.
    * Add track progress in system tray icon as an option.
    * Only strip problematic characters in suggested filename when saving a playlist to file.
    * Change star/unstar playlist to doubleclick instead of singleclick.
    * Don't edit playlist name on doubleclick in playlists view.
    * Make context view top label text selectable.
    * Add setting to change Qt style.
    * Clear ID3v3 tags that are empty, and clear ID3v1 tags when setting ID3v3 tags.
    * Remove remaining uses of QTextCodec.
    * Remove Core5Compat dependency.

(wiz)

2020-11-16 13:14:49 UTC MAIN commitmail json YAML

py-yarl: updated to 1.6.3

1.6.3:
Bugfixes
- No longer loose characters when decoding incorrect percent-sequences (like ``%e2%82%f8``). All non-decodable percent-sequences are now preserved.
- Provide x86 Windows wheels.

(adam)

2020-11-16 13:13:37 UTC MAIN commitmail json YAML

py-multidict: updated to 5.0.2

multidict 5.0.2 release

Fox a bug in release process, upload x86 Windows wheels

multidict 5.0.1 release

Bugfixes
Provide x86 Windows wheels

(adam)

2020-11-16 13:12:52 UTC MAIN commitmail json YAML

doc: Updated devel/gmp to 6.2.1

(wiz)

2020-11-16 13:12:41 UTC MAIN commitmail json YAML

gmp: update to 6.2.1.

Fix some pkglint while here.

Changes between GMP version 6.2.0 and 6.2.1

  BUGS FIXED
  * A possible overflow of type int is avoided for mpz_cmp on huge operands.

  * Overflows are more carefully detected and reported for mpz_pow_ui.

  * A bug in longlong.h for aarch64 sub_ddmmss, not affecting GMP, was healed.

  * mini-gmp: mpz_out_str and mpq_out_str now correctly handle out of
    range bases.

  FEATURES
  * C90 compliance.

  * Initial support for Darwin on arm64, and improved portability.

  * Support for more processors.

  SPEEDUPS
  * None, except indirectly through recognition of new CPUs.

(wiz)

2020-11-16 13:10:07 UTC MAIN commitmail json YAML

py-xmlschema: updated to 1.3.1

v1.3.1:
* Apply patches for packaging

(adam)

2020-11-16 13:05:20 UTC MAIN commitmail json YAML

doc: Updated security/gsasl to 1.8.1

(wiz)

2020-11-16 13:05:08 UTC MAIN commitmail json YAML

gsasl: update to 1.8.1.

* Version 1.8.1 (released 2019-08-02) [stable]

** gsasl: IMAP client code now permits empty SASL tokens prefixed with '+'.
Normally servers should send '+ '.  Buggy servers include Microsoft
Exchange.  Reported by Adam Sjæ·¡gren.

** GSSAPI client: Now retrieves GSASL_AUTHZID for authorization identity.
** GSSAPI client: Can now transmit an empty/missing authorization identity.
See lib/NEWS for more information.

** Build fixes.
Update of gnulib, including how it is bootstrapped.

** i18n: Updated translations.

(wiz)

2020-11-16 12:32:52 UTC MAIN commitmail json YAML

libwnck3: Clean up. Fix tools / pkgconfig file.

Attempt to fix build on SunOS/Darwin by stripping GNU linker arguments.

This package was converted to meson incorrectly, see:
http://wiki.netbsd.org/pkgsrc/how_to_convert_autotools_to_meson/

(nia)

2020-11-16 12:17:58 UTC MAIN commitmail json YAML

Updated databases/postgresqlNN

(adam)

2020-11-16 12:15:28 UTC MAIN commitmail json YAML

xine-lib: Disable w32dll decoder plugin, it's i386-only and broken.

If you have an obscure multimedia file which needs a 32-bit binary
Windows codec to play you're probably better off converting it in
a VM these days.

While here, delint.

(nia)

2020-11-16 12:15:07 UTC MAIN commitmail json YAML

postgresql: updated to 13.1, 12.5, 11.10, 10.15, 9.6.20, and 9.5.24

PostgreSQL 13.1, 12.5, 11.10, 10.15, 9.6.20, and 9.5.24

Security Issues

* CVE-2020-25695: Multiple features escape "security restricted operation" sandbox
* CVE-2020-25694: Reconnection can downgrade connection security settings
* CVE-2020-25696: psql's \gset allows overwriting specially treated variables

Bug Fixes and Improvements

This update also fixes over 65 bugs that were reported in the last several months. Some of these issues only affect version 13, but may also apply to other supported versions.

Some of these fixes include:

Fix a breakage in the replication protocol by ensuring that two "command completion" events are expected for START_REPLICATION.
Ensure fsync is called on the SLRU caches that PostgreSQL maintains. This prevents potential data loss due to an operating system crash.
Fix ALTER ROLE usage for users with the BYPASSRLS permission.
ALTER TABLE ONLY ... DROP EXPRESSION is disallowed on partitioned tables when there are child tables.
Ensure that ALTER TABLE ONLY ... ENABLE/DISABLE TRIGGER does not apply to child tables.
Fix for ALTER TABLE ... SET NOT NULL on partitioned tables to avoid a potential deadlock in parallel pg_restore.
Fix handling of expressions in CREATE TABLE LIKE with inheritance.
DROP INDEX CONCURRENTLY is disallowed on partitioned tables.
Allow LOCK TABLE to succeed on a self-referential view instead of throwing an error.
Several fixes around statistics collection and progress reporting for REINDEX CONCURRENTLY.
Ensure that GENERATED columns are updated when any columns they depend on are updated via a rule or an updatable view.
Support hash partitioning with text array columns as partition keys.
Allow the jsonpath .datetime() method to accept ISO 8601-format timestamps.
During a "smart" shutdown, ensure background processes are not terminated until all foreground client sessions are completed, fixing an issue that broke the processing of parallel queries.
Several fixes for the query planner and optimizer.
Ensure that data is de-toasted before being inserted into a BRIN index. This could manifest itself with errors like "missing chunk number 0 for toast value NNN". If you have seen a similar error in an existing BRIN index, you should be able to correct it by using REINDEX on the index.
Fix the output of EXPLAIN to have the correct XML tag nesting for incremental sort plans.
Several fixes for memory leaks, including ones involving RLS policies, using CALL with PL/pgSQL, SIGHUP processing a configuration parameter that cannot be applied without a restart, and an edge-case for index lookup for a partition.
libpq can now support arbitrary-length lines in the .pgpass file.
On Windows, psql now reads the output of a backtick command in text mode, not binary mode, so it can now properly handle newlines.
Fix how pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb use complex connection-string parameters.
When the \connect command of psql reuses connection parameters, ensure that all non-overridden parameters from a previous connection string are also re-used.
Ensure that pg_dump collects per-column information about extension configuration tables, avoiding crashes when specifying --inserts.
Ensure that parallel pg_restore processes foreign keys referencing partitioned tables in the correct order.
Several fixes for contrib/pgcrypto, including a memory leak fix.

(adam)

2020-11-16 12:10:05 UTC MAIN commitmail json YAML

2020-11-16 12:00:44 UTC MAIN commitmail json YAML

ffmpeg2: Also disable mmxext to avoid ICE on i386

(nia)

2020-11-16 11:58:26 UTC MAIN commitmail json YAML

doc: Updated x11/mlterm to 3.9.1

(tsutsui)

2020-11-16 11:58:09 UTC MAIN commitmail json YAML

mlterm: update to 3.9.1.

pkgsrc changes:

- remove a patch applied in the upstream
- pull an upstream fix for NetBSD/x68k VGA mode support:
https://github.com/arakiken/mlterm/commit/0d3a3b0bdc36ee2d702167fd234dcfc3c500ac09

Upstream changes noted in doc/en/ReleaseNote:

ver 3.9.1
* Support copy mode which starts by Control+Shift+Return.
* Support OSC 1337;Setmark ST.
* Support CSI 3 J (ED) which clears backlog.
* Support gradle to build mlterm for Android. (See doc/en/README.android)
* Add --enable-utmp-suid option to ./configure script.
  (The default value is disabled.)
* Add --with-utmp option which specifies the way of accessing to utmp database
  to ./configure script.
* Add SCROLL_UP_TO_MARK, SCROLL_DOWN_TO_MARK and SET_MARK shortcut keys.
* Add resize_mode / --rz option, and drop scroll_on_resize / --sr option.
  (If you want to revert to the old behavior, specify --rz=none option.)
* Add emoji_file_format / --emojifmt option.
* Add libvterm 0.1 API symbols to libvterm compatible library.
* Add vte 0.62 API symbols to libvte compatible library.
* Drop SCROLL_DOWN and PAGE_DOWN shortcut keys.
* Drop use_extended_scroll_shortcut option and SCROLL_UP shortcut key is enabled
  by default. (If you want to disable it, add UNUSED=SCROLL_UP to ~/.mlterm/key.)
* Update unicode property table (generated from UnicodeData.txt and
  EastAsianWidth.txt) to version 13.0.0.
* letter_space / --csp option accepts negative value.
* libvte compatible library supports XInput2.
* Bug fixes:
  Fix a bug which caused a 'mlimgloader' process not to exit after loading a wall picture.
  (Enbugged at 3.8.8)
  Fix a bug which disabled keyboard and mouse on Haiku R1/beta2.
  Mlconfig starts correctly by Ctrl + RightClick on cygwin 3.1.4.
  Fix https://sourceforge.net/p/mlterm/mailman/message/37033060/
  Fix segfault of mlcc in exiting after changing configurations.
  Fix segfault in double click at RTL characters. (Enbugged at 3.6.2)
  Fix corruption of data transferred by "OSC 5379; scp ... ST".
  Fix https://github.com/arakiken/mlterm/issues/4.
  Fix http://twitter.com/oshimyja/status/1320251099211649024.

(tsutsui)

2020-11-16 11:57:19 UTC MAIN commitmail json YAML

freeradius: needs 64-bit atomics on i386 too

(nia)

2020-11-16 11:15:18 UTC MAIN commitmail json YAML

cairo: Fix typos in comment

(ryoon)

2020-11-16 11:05:52 UTC MAIN commitmail json YAML

libheif: Fix build under NetBSD/amd64 8

Disable -Werror=maybe-uninitialized for NetBSD.
Reported by gdt@. Thank you.

(ryoon)

2020-11-16 10:51:44 UTC MAIN commitmail json YAML

2020-11-16 09:27:03 UTC MAIN commitmail json YAML

cairo: Disable symbol lookup tracing feature to avoid breakage

This uses libbfd, a library which is not exposed on a typical NetBSD
system, but may be on Linux. libbfd does not appear to have a stable
API, so this code may unexpectedly break.

Reported by Dr. Thomas Orgis (problems manifest on CentOS 7)

(nia)

2020-11-16 09:05:05 UTC MAIN commitmail json YAML

scribus-qt5: Needs harfbuzz-icu

(nia)