unzip: Apply a patch from CVE-2018-18384

from infozip's sourceforge / debian.

(nia)

doc: Updated audio/musicpd to 0.21.11

(nia)

musicpd: Update to 0.21.11

changes in pkgsrc:

* switch from libmad to libmpg123 for mp3 decoding.
  it's more actively maintained.
* switch from libaudiofile to libsndfile for lossless formats.
  it's more actively maintained.
* add more options, and try to clarify existing options to
  make it obvious what is being enabled.
* enable ffmpeg by default so playing m4a files works
* fix cdparanoia support

ver 0.21.11 (2019/07/03)
* input
  - tidal: deprecated because Tidal has changed the protocol
* decoder
  - wildmidi: log error if library initialization fails
* output
  - alsa: fix busy loop while draining
  - alsa: fix missing drain call
  - alsa: improve xrun-avoiding silence generator
  - alsa: log when generating silence due to slow decoder
  - alsa, osx: fix distortions with DSD_U32 and DoP on 32 bit CPUs
* protocol
  - fix "list" with multiple "group" levels

(nia)

SDL: sync options with SDL2

as discussed at pkgsrccon, this was pretty much the only thing still using
or supporting esound. the esound website doesn't even exist any more. NAS
might still be useful, but maybe only if you're using IRIX or something

i'm especially worried about libaudiofile and spidermonkey52 being pulled
in by esound and pulseaudio respectively - the maintainance status of these
libraries is very unclear and their security record is quite problematic.

also:
- Linux gets ALSA.
- explicitly disable support for PlayStation video outputs
  if you get pkgsrc to work on the PlayStation OS please submit a talk
- add pkg-config to USE_TOOLS, it seems to be used in some circumstances.

(nia)

libsndfile: Apply patches from upstream's github for these CVEs:

CVE-2017-14245 - information-disclosure
CVE-2017-14246 - information-disclosure
CVE-2017-14634 - denial-of-service
CVE-2017-17456 - denial-of-service
CVE-2017-17457 - denial-of-service
CVE-2017-8362 - denial-of-service
CVE-2017-8363 - heap-overflow
CVE-2017-8365 - buffer-overflow
CVE-2018-13139 - stack-overflow
CVE-2018-19432 - null-pointer-dereference
CVE-2018-19661 - denial-of-service
CVE-2018-19662 - denial-of-service
CVE-2018-19758 - denial-of-service
CVE-2019-3832 - denial-of-service

Bump PKGREVISION.

(nia)

doc: Updated sysutils/flashrom to 1.1

(nia)

flashrom: Update to 1.1

New major user-visible features

    4-byte address support for many SPI programmers
    New option to use a reference file for flash contents (--flash-contents)
    Layout support for coreboot's FMAP format (--fmap, --fmap-file)
    BAUD rate selection for Buspirate SPI
    Support for the ENE Embedded Debug Interface (EDI), probably our first non-jedec SPI target
    On Intel ME enabled systems, internal flashing is allowed by default

New programmers

    ENE Embedded Debug Interface EDI
    Linux' MTD interface
    Digilent SPI for the iCEblink40 development board
    Developerbox/CP2104 bit banging
    J-Link SPI
    Dediprog firmwares >= 7.2.30
    Dediprog SF200
    Intel Kabylake PCHs

New chips

    AT25DF021A
    AT25SF041
    AT25SF081
    AT25SF161
    AT25SL128A
    KB9012 (EDI)
    GD25B128B
    IS25LP064
    IS25LP128
    IS25LP256
    IS25WP032
    IS25WP064
    IS25WP128
    IS25WP256
    MX25L6473F
    MX25L25635F
    MX66L51235F
    MX25U8032E
    MX25U51245G
    MX25R6435F
    N25Q256..3E/MT25QL256
    N25Q512..3E/MT25QL512
    LE25FU106B
    LE25FU206
    LE25FU206A
    S25FL256S......0
    SST26VF016B
    SST26VF032B
    SST26VF064B
    W25Q128.V..M
    W25Q256.V
    W25Q256JV_M
    W25Q40BW
    W25Q80BW
    W25Q40EW
    W25Q80EW
    W25P80
    W25P16
    W25P32
    ZD25D20
    ZD25D40

(nia)

devilutionx: Spell the name of the package properly.

nia needs to learn to type properly.

(nia)

doc: Removed xulrunner192

(nia)

Remove devel/xulrunner192 and devel/swt.

xulrunner192 was the last remains of Firefox 3.6 in pkgsrc.

The last package depending on xulrunner192 was devel/swt. swt isn't used by
anything in pkgsrc (old versions of eclipse which weren't imported, maybe),
and was originally added by jmcneill, who says it can be removed now.

(nia)

rust: Make building the internal LLVM optional for everyone

(not just Darwin and SunOS).

This was posted to tech-pkg@ a while ago with no objections,
I've been using it for a while too.

(nia)

musepack: Let CMake manage the RPATH by adding an INSTALL statement in the
CMakeLists.txt of the library.

from Clement Bouvier
PR pkg/54367

(nia)

doc: Removed multimedia/mplayer-plugin

(nia)

Remove multimedia/mplayer-plugin.

Discussed on pkgsrc-users@ last week.

(nia)

doc: Removed misc/yelp successor misc/yelp3

(nia)

Remove misc/yelp - replaced by misc/yelp3.

Discussed on pkgsrc-users@ last week.

(nia)

Use https for pango.org.

(nia)

Use https for fallabs.com.

(nia)

faad2: Backport some security fixes from upstream.

CVE-2018-20194:
https://github.com/knik0/faad2/commit/6b4a7cde30f2e2cb03e78ef476cc73179cfffda3.patch

CVE-2018-20362:
https://github.com/knik0/faad2/commit/466b01d504d7e45f1e9169ac90b3e34ab94aed14.patch

Misc buffer overflows:
https://github.com/knik0/faad2/commit/942c3e0aee748ea6fe97cb2c1aa5893225316174.patch

(nia)

doc: Updated graphics/libraw to 0.19.3

(nia)

libraw: Update to 0.19.3

2019-07-02  Alex Tutubalin <lexa@lexa.ru>
* Several fixes inspired by OSS-Fuzz
* LibRaw 0.19.3
* Note: ABI slightly changed, new variable added at end of class LibRaw
  Generally, all old code should run w/o recompile, but you're warned...

2018-12-24  Alex Tutubalin <lexa@lexa.ru>
* Fixed possible buffer overrun at Fuji makernotes parser
* Fixed possible write to NULL pointer at raw2image/raw2image_ex calls.
  Details:
    a) Three different CVE numbers was assigned for single problem:
      CVE-2018-20363, CVE-2018-20364, CVE-2018-20365
    b) The POCs exploits inconsistency in Sinar-4Shot files handling.
    LibRaw 0.19 does not support this files format, so it is not
    subject of exactly same problem
    c) However, additional checks for bayer raw data presence are
    backported from LibRaw-master (development) branch.

* LibRaw 0.19.2

2018-11-22  Alex Tutubalin <lexa@lexa.ru>
* Finally: got Sinar 4shot sample, works fine now
* OpenMP critical sections for malloc/free; extra #ifdefs removed; bin/dcraw_dist could be built again using Makefile.devel
* additional checks in parse_phase_one()
* more checks on file offsets/tag len in parse_minolta
* more checks in parse_ciff
* Mempool check reworked
* Old Leaf (16bit/3color/TIFF) support
* Fix cameraWB->autoWB fallback
* Polaroid x530 channel swap; get metadata pointer for Foveon files
* Fixed Secunia Advisory SA86384
  - possible infinite loop in unpacked_load_raw()
  - possible infinite loop in parse_rollei()
  - possible infinite loop in parse_sinar_ia()
  Credits: Laurent Delosieres, Secunia Research at Flexera

* LibRaw 0.19.1-Release

2018-06-28  Alex Tutubalin <lexa@lexa.ru>
* changed wrong fix for Canon D30 white balance
* fixed possible stack overrun while reading zero-sized strings
* fixed possible integer overflow
* LibRaw 0.19.0-Release

2018-06-11  Alex Tutubalin <lexa@lexa.ru>
* Sony uncompressed/untiled DNGs: do not set bits-per-sample to 14 bit
* Do not change tiff_bps for DNG files
* Another possible stack overflow in kodak radc reader
* Secunia Advisory SA83507, credits Kasper Leigh Haabb,
  Secunia Research at Flexera"
  - parse_qt: possible integer overflow
  - reject broken/crafted NOKIARAW files
* LibRaw 0.19-Beta6

2018-05-10  Alex Tutubalin <lexa@lexa.ru>
* Put rogue printf's behind #ifdef DCRAW_VERBOSE
* Exceptions was not caught in x3f_new_from_file resulting in x3f handle leak
* packed_load_raw(): EOF check on each row
* define LIBRAW_USE_CALLOC_INSTEAD_OF_MALLOC to use ::calloc instead of
  ::malloc in LibRaw_mem_mgr malloc calls;
  Note: realloc is not changed, so only partial fix
* Fixed possible div by zero in EOS D30 WB data parse
* U-suffix for filter-var manipulation consts
* restored static specifier for utf2char() lost in previous bugfix
* Fixed stack overrun in kodak_radc_load_raw
* Secunia Advisory SA83050: possible infinite loop in parse_minolta()
* LibRaw 0.19-Beta5

2018-05-03  Alex Tutubalin <lexa@lexa.ru>
* CVE-2018-10529 fixed: out of bounds read in X3F parser
* CVE-2018-10528 fixed: possible stack overrun in X3F parser
* LibRaw 0.19-Beta4

2018-04-24 Alex Tutubalin <lexa@lexa.ru>
* LibRaw 0.19-Beta3
* fixed lot of bugs reported by ImageMagic/oss-fuzz
* fixed several bugs reported by Secunia team (adv 81800,
  Credit: Laurent Delosieres, Secunia Research at Flexera)

2018-03-22 Alex Tutubalin <lexa@lexa.ru>
* LibRaw 0.19-Beta2
* Better handling of broken JPEG thumbnails
* Panasonic GH5S/G9-hires decoder, thanks to Alexey Danilchenko
  Note: ABI has changed due to this patch, so shlib version increased
* Fujifilm X-A5/A20 metadata parsing fix
* New error code LIBRAW_TOO_BIG: image data size excess LIBRAW_MAX_ALLOC_MB
* winsock2 included before windows.h to make MinGW happy

2018-02-23 Alex Tutubalin <lexa@lexa.ru>

* LibRaw 0.19-Beta1

* 84 cameras added compared to 0.18 (1014 total):
    Apple
iPhone 8(*), iPhone 8 plus, iPhone X
    BlackMagic
URSA Mini 4k, URSA Mini 4.6k, URSA Mini Pro 4.6k
    Canon CHDK hack
PowerShot A410, A540, D10, ELPH 130 IS, ELPH 160 IS, SD750,
    SX100 IS,SX130 IS, SX160 IS, SX510 HS, SX10 IS, IXUS 900Ti
    Canon
PowerShot G1 X Mark III, G9 X Mark II, EOS 6D Mark II, EOS 77D,
EOS 200D, EOS 800D, EOS M6, EOS M100
    Casio EX-ZR4100/5100
    DJI
Phantom4 Pro/Pro+, Zenmuse X5, Zenmuse X5R
    FujiFilm
S6500fd, GFX 50S, X100f, X-A3, X-A5, X-A10, X-A20, X-E3, X-H1, X-T20
    GITUP GIT2P
    Hasselblad
H6D-100c, A6D-100c
    Huawei
P9 (EVA-L09/AL00), Honor6a, Honor9, Mate10 (BLA-L29)
    Leica
CL, M10, TL2
    LG
V20 (F800K), VS995,
    Nikon
D850, D5600, D7500, Coolpix B700
    Olympus
E-PL9, E-M10 Mark III, TG-5
    OnePlus
One, A3303, A5000
    Panasonic
DMC-FZ45, DMC-FZ72, DC-FZ80/82, DC-G9 (std. res mode only), DC-GF10/GF90,
  DC-GH5, DC-GX9, DC-GX800/850/GF9, DMC-LX1, DC-ZS70 (DC-TZ90/91/92, DC-T93),
DC-TZ100/101/ZS100, DC-TZ200/ZS200
    PARROT
Bebop 2, Bebop Drone
    Pentax KP
    PhaseOne IQ3 100MP Trichromatic
    Samsung
Galaxy Nexus, Galaxy S3, S6 (SM-G920F), S7, S7 Edge, S8 (SM-G950U),
    Sony
A7R III, A9, DSC-RX0, DSC-RX10IV
    Yi M1
    YUNEEC
CGO3, CGO3P
    Xiaoyi YIAC3 (YI 4k)

  Note(*): for mobile phones with DNG format recording, only really tested cameras
  are added to supported camera list. Really LibRaw should support any correct DNG.

* No more built-in support for LibRaw demosaic packs (GPL2/GPL3).
  We're unable to support this (very old code), so we'll be happy to transfer this
  code to some maintainer who wish to work with it.

  In LibRaw 0.19 we provide extension API: user-settable callbacks to be called in
  code points where demosaic pack code was called.

  -  int callbacks.pre_identify_cb(void *) => to be called in LibRaw::open_datastream
      before call to (standard) identify() function. If this call returns 1, this means
      that RAW file is identified and all metadata fields are set, so no need to run
      standard identify code.
  - void callbacks.post_identify_cb(void*) => called just after identify(), but before
      any cleanup code;
  - dcraw_process() callbacks are called before dcraw_process phases (name speaks for itself):
      pre_subtractblack_cb, pre_scalecolors_cb, pre_preinterpolate_cb, pre_interpolate_cb,
interpolate_bayer_cb, interpolate_xtrans_cb, post_interpolate_cb, pre_converttorgb_cb,
post_converttorgb_cb

  All these new callbacks are called with (this) as the only arg.
  To continue LibRaw-demosaic-pack-GPLx support one need to subclass LibRaw, set needed
  callbacks in (e.g.) constructor code, than these callbacks to be called

* Better DNG parser:
    - support for DefaultCrop Origin/Size tags (add LIBRAW_PROCESSING_USE_DNG_DEFAULT_CROP to raw_processing_options to enable)
    - better parsing for nested DNG tags (use tag from RAW IFD, fallback to IFD0 if no tag in current IFD)
    - DNG PreviewColorspace extracted into dng_levels.preview_colorspace

* Metadata extraction:
  - Better extraction of camera measured balance (LIBRAW_WBI_Auto and WBI_Measured),
    this not the same as 'as shot' if some preset/manual tune is used.
  - Extraction of camera custom balances (LIBRAW_WBI_CustomN)
  - Nikon data compression tag extracted into  makernotes.nikon.NEFCompression
  - Hasselblad BaseISO and Gain extracted into makernotes.hasselblad
  - Canon multishot params extracted into makernotes.canon.multishot
  - lot of other vendor-specific makernotes data (see data structures definitions for details).

* New LibRaw::open_bayer call allows to pass sensor dump w/o metadata directly to LibRaw:
    virtual int open_bayer(unsigned char *data, unsigned datalen,
  ushort _raw_width, ushort _raw_height, ushort _left_margin, ushort _top_margin,
  ushort _right_margin, ushort _bottom_margin,
  unsigned char procflags, unsigned char bayer_pattern, unsigned unused_bits, unsigned otherflags,
  unsigned black_level);
    Parameters:
    data, datalen - buffer passed
    width/height/margins - speaks for itself
    procflags:
    for 10-bit format:
      1: "4 pixels in 5 bytes" packing is used
      0: "6 pixels in 8 bytes" packing is used
    for 16-bit format:
      1: Big-endian data
    bayer_pattern: one of LIBRAW_OPENBAYER_RGGB,LIBRAW_OPENBAYER_BGGR,
                          LIBRAW_OPENBAYER_GRBG,LIBRAW_OPENBAYER_GBRG
    unused_bits: count of upper zero bits
    otherflags:
      Bit 1 - filter (average neighbors) for pixels with values of zero
      Bits 2-4 - the orientation of the image (0=do not rotate, 3=180, 5=90CCW, 6=90CW)
    black_level: file black level (it also may be specified via imgdata.params)

    see samples/openbayer_sample.cpp for usage sample (note, this sample is 'sample only', suited for
    Kodak KAI-0340 sensor, you'll need change open_bayer() params for your data).

* Color data added/updated/fixed for many cameras

* Correct data maximum for Fuji X-* cameras

* Thumbnail processing:
  - JPEG thumbnails: if compiled with libjpeg, color count is extracted into imgdata.thumbnail.tcolors
  - PPM (bitmap) thumbnails: color count is set according to thumbnail IFD tag
  - PPM16 thumbnails: if LIBRAW_PROCESSING_USE_PPM16_THUMBS set in raw_processing_options, than thumbnail will be extracted
    as is, not converted to 8 bit. thumbnail.tformat is set to LIBRAW_THUMBNAIL_BITMAP16 in this case.
    Untested, because it is hard to find RAWs with 16-bit bitmaps.

== Compatibility fixes

* struct tiff_tag renamed to libraw_tiff_tag
* pow64f renamed to libraw_pow64f

== Bugs fixed:

* COLOR(r,c) works correctly on X-Trans files

== Security fixes:
Secunia #81000:
Credit: Laurent Delosieres, Secunia Research at Flexera
* leaf_hdr_load_raw: check for image pointer for demosaiced raw
* NOKIARAW parser: check image dimensions readed from file
* quicktake_100_load_raw: check width/height limits

Secunia #79000:
Credit: Laurent Delosieres, Secunia Research at Flexera
* All legacy (RGB raw) image loaders checks for imgdata.image is not NULL
* kodak_radc_load_raw: check image size before processing
* legacy memory allocator: allocate max(widh,raw_width)*max(height,raw_height)

Secunia #76000:
* Fixed fuji_width handling if file is neither fuji nor DNG
* Fixed xtrans interpolate for broken xtrans pattern
* Fixed panasonic decoder
* LibRaw 0.18.6

Other fixes:
* Checks for width+left_margin/height+top_margin not larger than 64k
* LIBRAW_MAX_ALLOC_MB define limits maximum image/raw_image allocation
  (default is 2048 so 2Gb per array)
* LibRaw::read_shorts item count is now unsigned
* Fixed possible out of bound access in Kodak 65000 loader
* CVE-2017-14348: Fix for possible heap overrun in Canon makernotes parser
  Credit: Henri Salo from Nixu Corporation
* Fix for CVE-2017-13735
* CVE-2017-14265: Additional check for X-Trans CFA pattern data
* Fixed several errors (Secunia advisory SA75000)
* ACES colorspace output option included in dcraw_emu help page
* Avoided possible 32-bit overflows in Sony metadata parser
* Phase One flat field code called even for half-size

(nia)

libmad: Add patches for CVE-2017-8372, CVE-2017-8373, CVE-2017-8374.

From Kurt Roeckx / Debian.

Tested with cmus and moc.

(nia)

Use https for racket-lang.org.

(nia)

Use https for oracle.com.

(nia)

Use https for openttd.org.

(nia)

Use https for swi-prolog.org.

(nia)

Use https for haskell.org.

(nia)

Update the Python HOMEPAGEs that I missed earlier.

(nia)

uncrustify: ... actually, PYTHON_VERSIONS_ACCEPTED is better here

(nia)

libsass: Seems to fail with gcc7 unless cmath is included

(nia)

uncrustify: Needs python to build, set PYTHON_FOR_BUILD_ONLY etc

(nia)

dolphin-emu: OpenAL support was removed.

(nia)

TODO: remove lightspark.

(nia)

doc: Added multimedia/lightspark version 0.8.1

(nia)

Add lightspark.

Lightspark is an open source Flash player implementation for playing
files in SWF format.

(nia)

weechat: Turn on "python lua wide-curses perl ruby" by default.

Should enable users to run most scripts available on weechat.org.

If you're using pkgsrc you probably have python/perl/lua installed already,
and ruby apparently even works on VAX, so this shouldn't be much of a hard
requirement.

joyent has been building with these settings for a while.

(nia)

grafx2: Needs pkg-config.

(nia)

vice: Needs bash.

(nia)

npm: Add bash to USE_TOOLS.

(nia)

Use https for readthedocs.io.

(nia)

doc: Updated math/ltm to 1.1.0

(nia)

Use https for pythonhosted.org.

(nia)

devilutionx: Needs pkg-config to find libsodium.

(nia)

ltm: Update to 1.1.0

Jan 28th, 2019
v1.1.0
      -- Christoph Zurnieden contributed FIPS 186.4 compliant
          prime-checking (PR #113), several other fixes and a load of documentation
      -- Daniel Mendler provided two's-complement functions (PR #124)
          and mp_{set,get}_double() (PR #123)
      -- Francois Perrad took care of linting the sources, provided all fixes and
          a astylerc to auto-format the sources.
      -- A bunch of patches by Kevin B Kenny have been back-ported from TCL
      -- Jan Nijtmans provided the patches to `const`ify all API
          function arguments (also from TCL)
      -- mp_rand() has now several native random provider implementations
          and doesn't rely on `rand()` anymore
      -- Karel Miko provided fixes when building for MS Windows
          and re-worked the makefile generating process
      -- The entire environment and build logic has been extended and improved
          regarding auto-detection of platforms, libtool and a lot more
      -- Prevent some potential BOF cases
      -- Improved/fixed mp_lshd() and mp_invmod()
      -- A load more bugs were fixed by various contributors

(nia)

doc: Updated security/libtomcrypt to 1.18.2

(nia)

libtomcrypt: Update to 1.18.2

July 1st, 2018
v1.18.2
      -- Fix Side Channel Based ECDSA Key Extraction (CVE-2018-12437) (PR #408)
      -- Fix potential stack overflow when DER flexi-decoding (CVE-2018-0739) (PR #373)
      -- Fix two-key 3DES (PR #390)
      -- Fix accelerated CTR mode (PR #359)
      -- Fix Fortuna PRNG (PR #363)
      -- Fix compilation on platforms where cc doesn't point to gcc (PR #382)
      -- Fix using the wrong environment variable LT instead of LIBTOOL (PR #392)
      -- Fix build on platforms where the compiler provides __WCHAR_MAX__ but wchar.h is not available (PR #390)
      -- Fix & re-factor crypt_list_all_sizes() and crypt_list_all_constants() (PR #414)
      -- Minor fixes (PR's #350 #351 #375 #377 #378 #379)

January 22nd, 2018
v1.18.1
      -- Fix wrong SHA3 blocksizes, thanks to Claus Fischer for reporting this via Mail (PR #329)
      -- Fix NULL-pointer dereference in `ccm_memory()` with LTC_CLEAN_STACK enabled (PR #327)
      -- Fix `ccm_process()` being unable to process input buffers longer than 256 bytes (PR #326)
      -- Fix the `register_all_{ciphers,hashes,prngs}()` return values (PR #316)
      -- Fix some typos, warnings and duplicate prototypes in code & doc (PR's #310 #320 #321 #335)
      -- Fix possible undefined behavior with LTC_PTHREAD (PR #337)
      -- Fix some DER bugs (PR #339)
      -- Fix CTR-mode when accelerator is used (OP-TEE/optee_os #2086)
      -- Fix installation procedure (Issue #340)

October 10th, 2017
v1.18.0
      -- Bugfix multi2
      -- Bugfix Noekeon
      -- Bugfix XTEA
      -- Bugfix rng_get_bytes() on windows where we could read from c:\dev\random
      -- Fixed the Bleichbacher Signature attack in PKCS#1 v1.5 EMSA, thanks to Alex Dent
      -- Fixed a potential cache-based timing attack in CCM, thanks to Sebastian Verschoor
      -- Fix GCM counter reuse and potential timing attacks in EAX, OCB and OCBv3,
        thanks to Rapha谷l Jamet
      -- Implement hardened RSA operations when CRT is used
      -- Enabled timing resistant calculations of ECC and RSA operations per default
      -- Applied some patches from the OLPC project regarding PKCS#1 and preventing
        the hash algorithms from overflowing
      -- Larry Bugbee contributed the necessary stuff to more easily call libtomcrypt
        from a dynamic language like Python, as shown in his pyTomCrypt
      -- Nikos Mavrogiannopoulos contributed RSA blinding and export of RSA and DSA keys
        in OpenSSL/GnuTLS compatible format
      -- Patrick Pelletier contributed a smart volley of patches
      -- Christopher Brown contributed some patches and additions to ASN.1/DER
      -- Pascal Brand of STMicroelectronics contributed patches regarding CCM, the
        XTS mode and RSA private key operations with keys without CRT parameters
      -- RC2 now also works with smaller key-sizes
      -- Improved/extended several tests & demos
      -- Hardened DSA and RSA by testing (through Karel's perl-CryptX)
        against Google's "Wycheproof" and Kudelski Security's "CDF"
      -- Fixed all compiler warnings
      -- Fixed several build issues on FreeBSD, NetBSD, Linux x32 ABI, HP-UX/IA64,
        Mac OS X, Windows (32&64bit, Cygwin, MingW & MSVC) ...
      -- Re-worked all makefiles
      -- Re-worked most PRNG's
      -- The code is now verified by a linter, thanks to Francois Perrad
      -- Documentation (crypt.pdf) is now built deterministically, thanks to Michael Stapelberg
      -- Add Adler32 and CRC32 checksum algorithms
      -- Add Base64-URL de-/encoding and some strict variants
      -- Add Blake2b & Blake2s (hash & mac), thanks to Kelvin Sherlock
      -- Add Camellia block cipher
      -- Add ChaCha (stream cipher), Poly1305 (mac), ChaCha20Poly1305 (encauth)
      -- Add constant-time mem-compare mem_neq()
      -- Add DER GeneralizedTime de-/encoding
      -- Add DSA and ECC key generation FIPS-186-4 compliance
      -- Add HKDF, thanks to RyanC (especially for also providing documentation :-) )
      -- Add OCBv3
      -- Add PKCS#1 v1.5 mode of SSL3.0
      -- Add PKCS#1 testvectors from RSA
      -- Add PKCS#8 & X.509 import for RSA keys
      -- Add stream cipher API
      -- Add SHA3 & SHAKE
      -- Add SHA512/256 and SHA512/224
      -- Add Triple-DES 2-key mode, thanks to Paul Howarth
      -- Brought back Diffie-Hellman

(nia)

doc: Updated security/libssh2 to 1.9.0

(nia)

libssh2: Update to 1.9.0

Changes:
- adds ECDSA keys and host key support when using OpenSSL
- adds ED25519 key and host key support when using OpenSSL 1.1.1
- adds OpenSSH style key file reading
- adds AES CTR mode support when using WinCNG
- adds PEM passphrase protected file support for Libgcrypt and WinCNG
- adds SHA256 hostkey fingerprint
- adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
- adds explicit zeroing of sensitive data in memory
- adds additional bounds checks to network buffer reads
- adds the ability to use the server default permissions when creating sftp directories
- adds support for building with OpenSSL no engine flag
- adds support for building with LibreSSL
- increased sftp packet size to 256k
- fixed oversized packet handling in sftp
- fixed building with OpenSSL 1.1
- fixed a possible crash if sftp stat gets an unexpected response
- fixed incorrect parsing of the KEX preference string value
- fixed conditional RSA and AES-CTR support
- fixed a small memory leak during the key exchange process
- fixed a possible memory leak of the ssh banner string
- fixed various small memory leaks in the backends
- fixed possible out of bounds read when parsing public keys from the server
- fixed possible out of bounds read when parsing invalid PEM files
- no longer null terminates the scp remote exec command
- now handle errors when diffie hellman key pair generation fails
- fixed compiling on Windows with the flag STDCALL=ON
- improved building instructions
- improved unit tests

(nia)

hexchat: Remove libsexy option, it isn't used any more.

(nia)

doc: Added mixxx

(nia)

Add audio/mixxx.

Mixxx integrates the tools DJs need to perform creative live mixes with
digital music files.

(nia)

libextractor: Pulls in libmagic, so explicitly depend on sysutils/file.

(nia)

libextractor: Fix various dependencies.

- Add msgfmt msgmerge xgettext to USE_TOOLS, it needs these
- Fix building with libjpeg-turbo by using the correct buildlink
- Use newer multimedia/mp4v2 over multimedia/libmp4v2 to avoid conflicts
  This is confusing. I think we mainly keep libmp4v2 around for KDE4.
  But the packages could be named better.

(nia)

lilv: References lv2 in its headers

(nia)

doc: Updated comms/libhidapi to 0.9.0

(nia)

libhidapi: Update to 0.9.0

pkg-config and libtool support.

(nia)

Update wiki.github.com HOMEPAGEs.

(nia)

Follow some http->https redirects.

(nia)

TODO: Add mixxx

(nia)

vlc: Use MESALIB_SUPPORTS_EGL for EGL detection

(nia)

libretro-dolphin: Fail when MesaLib doesn't have EGL

(nia)

doc: Removed games/rollemup

(nia)

Remove rollemup - the distfiles are gone and we can't redistribute them.

"You are not allowed to distribute the software by any means.
You are allowed to download a copy from this site for personal use."

The site is gone.

(nia)

doc: Removed games/rtcw

(nia)

Remove games/rtcw. The distfile is missing and it's marked NO_SRC_ON_FTP.

This should be replaced with the open source release at some point,
there's no real reason we should continue providing wrappers around Linux
binaries that no longer exist when the source is available.

(nia)

TODO: Add Kakoune

(nia)

snownews: Support OpenSSL 1.1.

(nia)

TODO: 0ad is in wip.

(nia)

xfe: Missed adding this patch.

(nia)

xfe: Update to 1.43.2

PR pkg/52968

08/06/2019 - Version 1.43.2 released
- This release fixes several minor bugs. The greek translation has been
  updated.
- Many translations still need to be updated! Please send me your po files.

16/09/2018 - Version 1.43.1 released
- This release fixes a regression that corrupted the initial search window
  content.

17/07/2018 - Version 1.43 released
- This release fixes several minor bugs. The scrollbar size can now be
  changed. Russian translation has been updated.

28/07/2016 - Version 1.42 released
- This release fixes several bugs and regressions and adds custom mount /x
  unmount commands to the Preferences dialog.

28/11/2015 - Version 1.41 released
- This release adds a new disk usage command (accessible using the Compare
  Sizes menu voice) and allows to open multiple Property dialogs at the
  same time. Several bugs and regressions have also been fixed. The czech
  translation has been updated.

(nia)

TODO: Add transmission.

(nia)

TODO: Add some so I can clear out my bookmarks.

(nia)

mednaffe: Mention the correct binding in MESSAGE.NetBSD

(nia)

doc: Added emulators/mednaffe version 0.8.8

(nia)

Add mednaffe version 0.8.8 as emulators/mednaffe.

Mednaffe is a graphical front-end for the Mednafen multi-system emulator.

It allows all of Mednafen's options to be configured, and provides simple
game management features.

(nia)

doc: Updated graphics/SDL2_image to 2.0.5

(nia)

SDL2_image: Update to 2.0.5

Changes:
* Updated external libraries libpng-1.6.32, libwebp-1.0.2
* Fixed a number of security issues:
  TALOS-2019-0820
  TALOS-2019-0821
  TALOS-2019-0841
  TALOS-2019-0842
  TALOS-2019-0843
  TALOS-2019-0844
* Ported SDL_image to emscripten

(nia)

doc: Updated games/quakeforge to 0.7.2

(nia)

quakeforge: Update to 0.7.2

Drop most of the local patches.

Quake is now playable, however, the server still segfaults on launch
on NetBSD.

(nia)

libwildmidi: Resolve conflicts on systems with OpenAL/ALSA installed.

(nia)

doc: Updated net/get_iplayer to 3.20

(nia)

get_iplayer: Update to 3.20

Changes in 3.20

    Fixed a bug in v3.19 that caused a "Can't use an undefined value as an ARRAY reference" error when using --pid-recursive or --pid-recursive-list with programmes that have no available episodes

    Fixed a bug in v3.19 that prevented Windows users from viewing and editing PVR searches in the Web PVR Manager.

    EDIT: If you find that BBC Scotland programmes of interest are missing from search results, force all available BBC Scotland programmes to be indexed and cached with (ignore any 404 errors):

      get_iplayer --refresh --refresh-include="BBC Scotland" --refresh-limit=30

v3.20 was released soon after v3.19, which was withdrawn. See the get_iplayer 3.19 release notes for other recent changes.

Changes in 3.19

    Fixed a bug that caused one-off PVR searches created with --pvr-queue to be deleted when run with --test (thanks @wiehe).

    Replaced BBC Two Scotland with BBC Scotland in programme indexing. If a cache update extends back before the week of 2019-02-18, it will produce errors because a BBC Scotland schedule does not exist for earlier dates. The error can be ignored. EDIT: If you find that BBC Scotland programmes of interest are missing from search results, force all available BBC Scotland programmes to be indexed and cached with (ignore any 404 errors):

      get_iplayer --refresh --refresh-include="BBC Scotland" --refresh-limit=30

    Adapted --pid-recursive and --pid-recursive-list functionality for the change in layout of programme episode lists on the iPlayer site. The switch to series-by-series listings for many programmes meant that get_iplayer would only display episodes from the earliest series listed. This almost exclusively affected CBBC and CBeebies programmes, but could affect any programme.

    The episode ordering with --pid-recursive and --pid-recursive-list is now always oldest to newest (as determined by the order of the listings on the iPlayer site). This ensures a consistent order regardless of the source of the episode lists, and it is generally consistent with how search results are ordered by default. Use --sort-reverse to list episodes from newest to oldest.

    Added <senumx> substitution parameter to format series and episode numbers as ##x## instead of s##e## as with <senum>. As with <senum>, <senumx> may be absent.

    Added --expires-after option for use with --expires-before to bracket searches based on programme expiration date.

    Added --pid-index option. The programme index cache is no longer used by default with --pid, whether in a PVR search or from the command line. For an indexed programme, the cache entry provides a backup source of basic metadata, but it is not required. If you notice incomplete metadata or output file names with missing components, use --pid-index to ensure the cache is updated and used with --pid. This would only be of help with indexed programmes from the past 30 days.

    Added --no-merge-versions option. get_iplayer now attempts to merge media streams from programme versions with the same name and duration (e.g., editorial and editorial2). There are some extremely rare cases where you may not want to do so because broken streams may be included in the result due to problems with BBC metadata. In that case, use --no-merge-versions to prevent merging and pick out the specific version you want with --versions.

    Performed final removal of --hls-hq-audio, --no-dash-remux and --stream-http options

Changes in 3.18

    Fixed a bug that caused unnecessary cache updates when --refresh-future was used.

    Fixed a bug that prevented a stale cache from being updated with --pvr when first PVR search was PID-based. EDIT: This change will refresh both TV and radio programme index caches when PID-based PVR searches are used, even if --type=radio is not defined in preferences or the PVR searches. This is to ensure availability of at least minimal metadata for indexed programmes found with PID-based PVR searches. If you want to avoid ever indexing any radio programmes, delete the radio.cache file in your profile directory and use --refresh-exclude-groups-radio=local,regional,national to exclude all radio stations from indexing. You will have a radio.cache file, but it will contain no entries.

    Added --hls-lq-audio option to download lower-quality audio with HLS video streams. Use this if 320k audio is too rich for your diet. You will get the same audio as DASH streams (128k or 96k, depending on the stream).

    Added --available-before option for use with --available-since to bracket searches based on programme availability date.

    The --no-subtitles option on the command line will now override all --subs-{embed,mono,raw,required} options saved in preferences. Those options no longer imply --subtitles (Web PVR: "Download subtitles" in "Recording" tab), which is now required with any of them.

    get_iplayer no longer looks for a local options file under the current working directory (in ./.get_iplayer/options). That could cause problems when using --profile-dir while working in user's home directory if a default profile directory had been created. Use a preset instead. EDIT: This functionality was never documented and thus you are extremely unlikely to be affected by its removal.

    The --test option will only show lists of matching episodes with PVR searches and --pid-recursive. Download and parsing of media stream data will only occur with --test if --get or standalone --pid is specified.

    Changes to substitution parameters:

        Added <sebcast>, <sebcastdate>, <sebcasttime>, <sesort>. See definitions in Substitution Parameters. These parameters provide additional options for constructing sortable file names with --file-prefix.

        A value for <episodenum> must now be found in programme metadata in order for <senum> to be populated. A value of "1" is no longer synthesised for some TV programmes. A value of "1" is still synthesised for <seriesnum> if <episodenum> is populated and no series number is found in programme metadata.

        The episode number prepended to <episode> is now zero-padded to 2 digits. This is reflected in the default output file prefix. EDIT: If you use the default file prefix and you mistakenly use --force for a programme you do not wish to re-download, or you mistakenly attempt to re-download a programme you already have that has been removed from your download history, it is likely that you will end up with a duplicate because the zero-padding generates a different file name (assuming an episode number is present). To revert to the previous default file prefix without zero-padding, use:

          get_iplayer --prefs-add --file-prefix="<name> - <episodenum. ><episodeshort> <pid> <version>"

        If you use a custom file prefix that contains <episode>, replace it with <episodenum. ><episodeshort> to achieve the same effect.

        Conditional separators can now be used as suffixes. See example in Filenames and Directories.

    The functionality of the options below has been removed. The options are now ignored and will be completely removed in the next release. A warning message will be printed if any of these options is found in your preferences.
        --hls-hq-audio: Now essentially useless and could lead to audio sync problems.
        --no-dash-remux: If you prefer DASH media streams for some reason you can no longer produce potentially unusable output files, at the cost of some extra time in post-processing downloads.
        --stream-http: get_iplayer will now automatically look for HTTP media playlist URLs if no HTTPS URLs are found.

    You can remove these obsolete options from your preferences (whether or not they are actually defined) with:

      get_iplayer --prefs-del --hls-hq-audio --no-dash-remux --stream-http

    A get_iplayer profile directory (containing programme index caches, pvr searches, preset definitions, download history) can now be shared between Windows and Linux/BSD/macOS. get_iplayer on all platforms now processes any CRLF line endings (default for text files on Windows) when reading files from the profile directory. Files will still be written with native line endings (CRLF on Windows, LF on other platforms), so different files may have different line endings if you share them between platforms. This also means that the "download_history" file will have mixed line endings if written on different platforms. The different line endings shouldn't affect get_iplayer, but be aware of them if editing those files directly.
        If you only use get_iplayer on Windows, or only on Linux/BSD/macOS, you should notice no difference.
        Warning for Linux/BSD/macOS users: This only works with get_iplayer 3.18 or higher. Once you have CRLF line endings in your files, you cannot use get_iplayer versions before 3.18 unless you first change all line endings in all files to LF and then never again write to those files in Windows.

(nia)

doc: Updated textproc/aspell-en to 2018.04.16.0

(nia)

aspell-en: Update to 2018.04.16.0

Adds some special-casing for Australian English, among other things.

(nia)

Use https for rsyslog.com

(nia)

aspell-fo: Update HOMEPAGE

(nia)

borel.slu.edu is dead, update the links to point to aspell.net instead.

This is where the dictionaries are found now.

(nia)

fluidsynth: Use CPPFLAGS instead of CFLAGS

(nia)

https for enlightenment.org.

(nia)

powder-toy: requires gcc 4.8 or higher

(nia)

devilutionx: bump required compiler to gcc5

(nia)

obs-studio: moar linux plist fixes.

(nia)

doc: Updated audio/audacious-plugins to 3.10.1

(nia)

doc: Updated audio/audacious to 3.10.1

(nia)

audacious: Update to 3.10.0

Upstream decided to drop GTK3 support.
GTK3 was previously the default UI in pkgsrc.

I've changed the deafult to Qt5 to retain HiDPI support.
GTK2 is also available for those who want it.

New plugins: sox-resampler, silence-removal, ffaudio (used for formats
not handled by other plugins like opus), alsa

(nia)

arnold: Line accidentally lost in last commit

(nia)

audacious-plugins: Disable options / dependencies that were removed.

Should fix the musepack conflicts with VLC, since I can't find musepack
support existing in audacious any more (maybe through ffmpeg).

(nia)

irssi: Make DESCR less awkward, based roughly on the current irssi website.

(nia)

bitlbee: Goodbye, glorious chat interoperability of the mid 2000s.

(nia)

doc: Updated chat/inspircd3 to 3.2.0

(nia)

inspircd3: Update to 3.2.0

This version of InspIRCd was released on 2019-06-05.

- Added a configure option, --example-dir, which specifies the
directory that example config files get installed into.
- Added a flag to the filter module which allows registered users to be
exempt from a filter.
- Added a warning when the user tries to build on OpenBSD as it ships
very broken compilers.
- Added a warning when the user tries to build without SSL support.
- Added example config files for enabling support for IRCCloud and
KiwiIRC.com on your server.
- Added syntax hints for all modes with parameters to the
ERR_INVALIDMODEPARAM numeric response.
- Added the ability to include all .conf files in a directory.
- Added <bind:permissions> to UNIX socket listeners to set who can
access the socket.
- Added <bind:replace> to UNIX socket listeners to allow replacing
existing sockets on boot.
- Added <messageflood:notice>, <messageflood:privmsg>, and
<messageflood:tagmsg> to the messageflood module to specify how many
lines individual messages are equivalent to.
- Added <permchanneldb:saveperiod> to allow customising how often the
permchannels module should check whether its database needs to be
saved.
- Added <sslprofile:tlsv11> and <sslprofile:tlsv12> to the ssl_openssl
module to easily allow disabling old SSL versions.
- Added <xlinedb:saveperiod> to allow customising how often the
xline_db module should check whether its database needs to be saved.
- All SQL queries are now logged at the debug log level to enable
easier debugging of SQL issues.
- Developer: added support for marking a socket to be closed once it
has finished receiving all the data sent to it.
- Developer: added support for retrieving the end message of a batch.
- Developer: added the OnUserPreQuit event for changing quit messages
before a user disconnects.
- Developer: added the FileSystem::GetFileList() function to get a list
of files in a directory matching a glob pattern.
- Developer: added the irc::sockets::isunix() function for checking if
a string is a valid UNIX socket path.
- Developer: ignore any SIGUSR1 or SIGUSR2 with no handlers instead of
killing the process.
- Fixed a misleading debug message in the sslinfo module.
- Fixed calculating the human-readable version of durations.
- Fixed closing HTTP connections before the entire http_stats module
output had been sent.
- Fixed linking the spanningtree module on OpenBSD.
- Fixed modules that are in the process of being unloaded sometimes
having events called on them.
- Fixed not checking if the cap module is enabled before enabling the
NAMESX and UHNAMES 005 tokens.
- Fixed outgoing UNIX socket server connections.
- Fixed routing tags on TAGMSG messages between servers.
- Fixed server operators with the channels/auspex privilege not being
able to request the topic of secret/private channels with the /TOPIC
command.
- Fixed the autoop module checking the prefix mode add rank when
removing list entries.
- Fixed the conn_umodes module setting user modes before the MOTD has
been sent.
- Fixed the default log directory in system-wide mode to be
/var/log/inspircd.
- Fixed the denychans module not checking whether the redirect channel
is allowed properly.
- Fixed the exemptchanops module not validating list entries.
- Fixed the grammar of the error messages sent by the repeat module.
- Fixed the Perl helper script finding the location of the PID file.
- Fixed the sslinfo module not being able to place WebIRC users into
the appropriate connect classes.
- Fixed the TAGMSG message forwarding all tags regardless of whether
they had been whitelisted.
- Fixed the <connect:usests> option being inverted.
- Fixed various harmless compiler warnings in the httpd module.
- Fixed <pid:file> not being relative to the data directory as was
intended.
- Fixed server-time timestamps only being accurate to the second.
- Made the error message sent by the alias module when an alias
requires a U-lined target but the target is not U-lined more accurate.
- Show how many users in a channel are not using SSL in the
ERR_ALLMUSTSSL response.
- Updated the Module Manager source list for the new inspircd-contrib
repository.

(nia)

doc: Removed licq

(nia)

Remove licq packages.

licq has not been able to connect to ICQ servers since 28th December 2018,
while upstream discontinued development in 2014 and has no plans to start
over.

Also, these packages have not been updated since 2007, so I doubt anyone
has used this in a long time.

https://github.com/licq-im/licq/issues/53

(nia)

evas: Use https for enlightenment.org

(nia)

php/pear.mk: Use https by default for pear.php.net

(nia)

Adjust some dlopen handling in the emulators category.

(nia)

dolphin-emu: Requires std::make_unique

(nia)

obs-studio: Fix the Linux and FreeBSD PLISTs.

(nia)

devilutionx: Require gcc 4.9 or higher for std::make_unique.

(nia)

assaultcube: Backport gcc6 fixes from upstream.

This compiled successfully on NetBSD-current with gcc7, so it seems this
mainly helps other OSes.

(nia)

minetest: Increase gcc requirement to 4.9

(nia)

libretro-mupen64plus: Needs zlib.

(nia)

doc: Updated games/liquidwar to 5.6.5

(nia)

liquidwar: Update to 5.6.5

This allows it to build with the latest Allegro version in pkgsrc.

Changes:

* Code cleanup, updated Allegro calls, indent & lint.
* Introduced Docker files to build the game and run a server.
* Fixed PHP metaserver.
* Fixed DOS & MS-Windows Makefiles to include Polish.
* Using proper PHP tags.
* Added make dist to Jenkins script.
* Fixed Debian issue #716610, was caused by lazy arg parsing.
* First Polish translation by Jan Szenborn.
* Added Jenkins (continuous integration) script.
* Removed compiler warnings.
* Added 5 new maps by Joey Dodson (psyforce).
* Turned on waves by default. Computers are fast now.
* Trying to fix the game for native GP2X support.
* Added informations on how to compile for GP2X.
* German translation update by Jan Gretschuskin.
* Updated 'upgrade to LW6' message.
* Added icon support under X-Windows.
* Doc update.
* Added hi-res icon.
* Changed READMEs charset to UTF-8.
* Makefile distclean fix.
* Updated config.guess & other configure scripts.
* Mac OS X package fix.
* Fixed RPM generation.
* target -> host in configure/Makefile
* Information "Liquid War 6 is out" when starting game.
* Fixed Debian Bug #555468, missing -lm in mapgen Makefile
* Makefile updates for native OS/X support.
* Security patch by Mikhail Yakshin.
* New solsystem map by Rezifull
* .desktop patch by SA Gevatter (FreeDesktop.org compliance)
* Added sample logrotate.d file.
* Liquid War server no more leaves defunct childs on callback.
* Now somewhat version agnostic, will accept 5.6.3 & more.
* Fixed CPU detection, ASM was compiled on x86_64 but isn't linkable.

(nia)

arnold: Mark RESTRICTED. Includes ROM images with questionable copyright.

(nia)

elinks: Support OpenSSL 1.1. Based on the FreeBSD Ports patches.

While here, define LICENSE.

Bump PKGREVISION.

(nia)

bitchx: Fix configuring with OpenSSL 1.1.

(nia)

zoom: Fix C99 inline usage.

(nia)

zoom: Update HOMEPAGE and LICENSE

(nia)

doc: Updated games/quakespasm to 0.93.1

(nia)

quakespasm: Update to 0.93.1

pkgsrc changes:

Use more recent middleware (SDL2) and mp3 (mpg123) libraries

Changes in 0.93.1:

Fixed a fog regression which was introduced in 0.93.0.
Fixed a crash (buffer overflow) with invalid vis data.
Fixed buttons crushing players in 64-bit builds.
Change controller movement to use cubic easing by default; added "joy_exponent_move" cvar.
config.cfg is no longer written in case of a Sys_Error.
Fixed Opus encoded cd tracks not being recognized as ripped tracks.
Update the third-party libraries. Other fixes/cleanups.

Changes in 0.93.0:

Raise default "joy_deadzone_trigger" cvar to 0.2.
Raise console buffer size to 1MB.
Raise MAX_STATIC_ENTITIES from 512 to 4096.
Raise MAX_STACK_DEPTH from 32 to 64.
Raise command buffer size from 8K to 256K to support large configs.
Remove MAX_EFRAGS and MAX_MAP_LEAFS limits.
Remove "Loadgame buffer overflow" limit, which could happen when loading DP or QSS saves.
Adjust "exceeds standard limit of" debug warnings to include the actual QS limit.
Change "game" command to now exec quake.rc.
Change "games" / "mods" commands to list all subdirectories.
Restore vid_refreshrate from fitzquake-0.85 for SDL2 builds.
Alpha-masked model support. (MF_HOLEY: 0x4000).
Invalid skin index now draws skin 0 (WinQuake behaviour) instead of blue checkerboard.
Change default screenshot format to png. The 'screenshot' command now supports optional format (tga, png or jpg) and quality (1-100) arguments.
Revert "always run" changes from 0.85.9 and move the QuakeSpasm customizations to a new "cl_alwaysrun" cvar: Set to 1 in order to scale forward/side/up speed by "cl_movespeedkey" (usually 2), and to make "speedkey" act as "slowkey".
Change the "always run" menu option to offer three choices:
    off (cl_alwaysrun 0, cl_forwardspeed 200, cl_backspeed 200)
    vanilla (cl_alwaysrun 0, cl_forwardspeed 400, cl_backspeed 400)
    quakespasm (cl_alwaysrun 1, cl_forwardspeed 200, cl_backspeed 200)
New "r_scale" cvar. Set to 2, 3, or 4 to render the view at 1/2, 1/3, or 1/4 resolution.
New "r_viewmodel_quake" cvar. Set to 1 for WinQuake gun position (from MarkV).
New "find" / "apropos" command, searches for commands/cvar names for the given substring (from Spike).
New "randmap" command for loading a random map.
New "gl_cshiftpercent_contents", "gl_cshiftpercent_damage", "gl_cshiftpercent_bonus", "gl_cshiftpercent_powerup" cvars for tuning the strength of specic view blends.
GL2 renderer: use a GLSL shader for world faces. Fixes reports of integrated+discrete GPU laptops having inconsistent fog rendering.
Fix macOS startup delay (avoid calling gethostbyname() for ".local" hostnames).
Fix memory corruption in PF_lightstyle with out of bounds lightstyles.
Fix crash in BoundPoly with polygons extending beyond +/-9999.
Fix QS window to stay on the current monitor when changing video modes (SDL2 only).
Fix possible freeze in SV_TouchLinks regardless of what QC does in the touch function.
Fix for maps with empty strings for vector keys (e.g. "origin"); don't read uninitialized memory.
Support for Open Watcom compiler.
Update the third-party libraries.

(nia)

doc: Updated games/tyrquake to 0.62

(nia)

tyrquake: Update to 0.62

Changes:

* Model animation/movement interpolation (r_lerpmodels, r_lerpmove cvars)
* SDL video/input/sound target, now default for MacOS instead of X11.
* sndio sound target for OpenBSD (thanks Tony Spets/Jacob Meuser)
* Support for BJP1/2/3 and FITZ(666) network/demo protocols
* Support for Darkplaces and RMQ style BSP2/2PSB file formats
* Work around buggy timers on some windows systems/drivers (thanks MH!)
* Removed vid_win dependency on SciTech MGL (thanks MH!)
* Netmasks can be used with qwsv's addip/removeip; e.g. "addip 192.168.0.0/24"
* Fixed remote screenshots from QWSV
* Improved build system including new OSX, Win64, SDL targets
* Lots more code sharing between NQ/QW
* Use non-power-of-two OpenGL textures when extension is available
* New cvar "m_freelook" to replace need for manual editing "+mlook" in config

(nia)

doc: Added games/devilutionx version 0.4.0

(nia)

Add devilutionx-0.4.0 as games/devilutionx.

DevilutionX is a port of the classic action role-playing hack and slash
PC game "Diablo" for modern operating systems.

(nia)

dosbox: Install a .desktop file and icons.

Bump PKGREVISION.

(nia)

cmatrix: Don't misspell "Nebuchadnezzar"

(nia)

Use https for xfce.org.

(nia)

Use https for php.net.

(nia)

Use https for php.net.

(nia)

Use https for pear.php.net.

(nia)

Use https for erlang.org

(nia)

Use https for github.

(nia)

vlc: reinstate hacks.mk, I'm not paying enough attention

(nia)

vlc: remove hacks.mk.

(nia)

doc: Updated multimedia/vlc to 3.0.7.1

(nia)

vlc: Update to 3.0.7.1

Based on work in pkgsrc-wip.

I've had the opportunity to test this in a NetBSD-8 bulk build - it seems
the package is now fixed. Hopefully.

The 3.0.x release series is considered for long-term support by upstream.
Notably for pkgsrc, this means it will be the last release series that
supports older compilers.

Note that VLC now depends on Qt5 instead of Qt4. Various config flags have
been tweaked (enabled/disabled) to match what other vendors (mainly FreeBSD)
are doing.  I have also added an alsa package option.

The full list of upstream changes is probably too long to list.

(nia)

lincity: Fix linker errors and define LICENSE.

(nia)

quakeforge: The existing workaround is causing duplicate symbol errors at
link-time so just cheat by using "static inline".

Also, don't hardcode the libGL version number, take advantage of symlinks
instead to make libGL load on NetBSD-current with native X.

Bump PKGREVISION.

I still can't really get this to run for more than a few seconds (except
qw-client, which I can't test ingame), it may be borked.

(nia)

battleball: Specify c++03, this breaks with newer compiler defaults.

(nia)

doc: Updated games/armagetronad-server to 0.2.8.3.4

(nia)

doc: Updated games/armagetronad to 0.2.8.3.4

(nia)

games/armegatron*: Update to 0.2.8.3.4

"This release is a compiler compatibility release only; we noticed
0.2.8.3.3 had severe problems with gcc 6, all our fault."

(nia)

openmsx: make g++ the default case.

(nia)

openimageio: Include the correct package in buildlink3.mk.

openimageio now uses qt5, not qt4.

This was causing blender to fail to build in bulk builds and on systems
where qt4 was not preinstalled.

XXX needs pullup?

(nia)

newsbeuter: Fix build with new json-c.

https://github.com/json-c/json-c/issues/304

XXX pullup?

(nia)

cmus: Appease pkglint and my eyes.

(nia)

cmus: Add alsa support.

(nia)

cmus: Disable unsupported options explicitly

(nia)

b-em: Needs zlib.

(nia)

lugaru: Needs graphics/glu.

(nia)

doc: Updated emulators/dosbox to 0.74.3

(nia)

dosbox: Update to 0.74.3

0.74-3
A security release for DOSBox 0.74:
- Fixed that a very long line inside a bat file would overflow the parsing
  buffer (CVE-2019-7165 by Alexandre Bartel)
- Added a basic permission system so that a program running inside DOSBox
  can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc
  were (to be) mounted (CVE-2019-12594 by Alexandre Bartel)
- Several other fixes for out of bounds access and buffer overflows.
- Some fixes to the OpenGL rendering.

(nia)

p5-CGI: HOMEPAGE 404s rather than redirecting. fix it.

(nia)

Redirect the last few search.cpan.org packages that I missed.

(nia)

Redirect these few strange perl packages using DISTNAME inside HOMEPAGE.

I'm going to assume they have a good reason.

(nia)

Follow some remaining search.cpan.org redirects.

(nia)

supertuxkart: Remembering to include bsd.prefs.mk may be helpful.

(nia)

TODO: Mention PKGMANDIR

(nia)

supertux: Needs c++14

(nia)

doc: Updated games/supertux to 0.6.0

(nia)

supertux: Update to 0.6.0

- Complete redesign of the icy world and forest world (Thank you,
RustyBox and Serano)

- Complete revamp of our rendering engine, the game should be much
faster than it was previously

- We now support OpenGL 3.3 Core as well as OpenGL ES 2.0, thus
allowing SuperTux to be run on the Raspberry Pi, and potentially
WebGL.

- Support for right-to-left languages through vector fonts. This
will also fix a few non-ASCII characters, which often caused problems
before in translations

- A lot of other under-the-hood changes and bugfixes

A few graphics have been updated, and effects have been added:

- The save bell was reworked (Thanks to Raghavendra ���raghukamath���
Kamath!)

- Improved big Tux graphics and animations (Thanks to Alzter)

- Various effects and shaders (Thanks to Grumbel)

(nia)

doc: Updated games/teeworlds to 0.7.3.1

(nia)

teeworlds: Update to 0.7.3.1

Switch to a less obscure build system. Hopefully fixes the package.

(nia)

doc: Updated devel/bam to 0.5.1

(nia)

bam: Update to 0.5.1

- Fixed issues with CC environment variables
- Out of bounds fixed to debug output and output cache ( RyanLucchese )
- Solaris compiler support ( RyanLucchese )
- XLC compiler support ( RyanLucchese )
- Fixed parallel build with make ( hasufell )
- Syntax hilighting for the readme ( mailaender )
- Upgraded to Lua 5.3.3 from 5.1
- More accurate cache to reduce recompiles when switching parameters
- Make use of CC environment variables when available by default
- Build should now be reproducable and not add date or timestamps into the executable
- Bug-fixes

(nia)

doc: Updated games/flare-game to 1.10

(nia)

doc: Updated games/flare-engine to 1.10

(nia)

games/flare-*: Update to 1.10

Changelog

Engine features

    The configuration menu has been redesigned and is now used as the pause menu.
    The interface features from version 1.09 have been reverted due to being accessible from the pause menu.
    Added an Interface option to disable showing hidden entity markers.
    Support floating point values for loot drop chance values.
    Add 窶鷲ide_timeout窶� option to stat bar configuration to support auto-hiding. (Leszek CimaﾅＢ)
    Added an Interface option to disable stat bar auto-hiding globally.
    Add 窶蕨o_stash窶� property to item definitions to prevent items from being placed in the stash.
    Add low HP notification system. (Leszek CimaﾅＢ)
    Add ability to change the minimap zoom level by clicking on the minimap.

Engine fixes

    Fixed event activation being tied to distance to the camera position. It is now correctly tied to distance from the player.
    Mouse movement and mouse aim now calculate direction relative to the player instead of relative to the screen.
    Fixed enemy AI so that enemies can now enter combat if a hero ally is in their proximity.
    Fix 窶電ata-path command line flag on Windows.
    Fixed dialog not being available if it lacked a topic.
    Fixed loot drop rate bonus having no effect when loot drop chance was too low.
    Fix bug where the wrong requirements were checked for passive powers that had been granted bonus points.
    Items that can窶冲 be stashed are now dropped on the ground upon opening the stash.
    Prevent re-binding the primary Main1 binding, which could break many interactions.
    Removed the ability to re-bind the Ctrl, Shift, Alt, and Delete keys, since they correspond to specific keyboard keys.
    Fix crash when trying to load a mod that contained 窶脇ngine/default_keybindings.txt窶�. (nwtour)
    Display XP stat bar value as relative to current level instead of total XP. (Leszek CimaﾅＢ)
    Fix key bindings not working when switched to a non-US keyboard layout. (nwtour)
    Fix segfault when NPC filename is invalid.
    Fix inventory tooltips covering books when using no mouse.
    Fix navigation of dialog menu when using no mouse.
    Fix upgrading powers when using no mouse.
    When using the sdl_hardware renderer on Windows, OpenGL will now be used instead of Direct3D. This fixes the loss of some textures when resizing the window.
    Fixed the 窶徑evel up窶� string to represent the ability to allocate multiple stat points. Also note if Power points can be allocated.
    Refactored 窶腕equires_hpmp_state窶� for Powers to check against both stats at once. See the attribute reference for syntax changes.
    Greatly improved performance of loot tooltips.
    Fix bug where high item find chance prevented the player from finding currency.

Game updates

    Fixed an oversight that allowed easy farming of the Torture Chambers boss and loot chests.
    Made it so that potions and scrolls can not be stashed. This fixes an exploit where players could utilize a low level character to get these items for cheap.
    Added new attack and interact cursors.
    Added sound effect and cursors for indicating low health.

Translation updates

    Belarusian (be) update (Zmicer Turok)
    Brazilian Portuguese (pt_BR) update (Vinicius Rech)
    Catalan (ca) update (Marc Tormo i Bochaca)
    German (de) update (Fyrenic)
    Spanish (es) update (Agustin Ferrario)
    French (fr) update (syl_)
    Scottish Gaelic (gd) update (GunChleoc)
    Japanese (ja) update (sujiniku)
    Portuguese (pt) update (Rui)
    Russian (ru) update (Andrey Kapitonov, Igor Paliychuk, nwtour)
    Ukranian (uk) update (Igor Paliychuk)
    Chinese (zh) update (dumaosen, neverwin)

(nia)

openal-soft: Update COMMENT and DESCR.

This isn't really an 'alternative' any more, it's the implementation
preferred by most vendors.

(nia)

doc: Removed audio/openal successor audio/openal-soft

(nia)

Remove original OpenAL implementation (audio/openal).

As far as I can tell, no package is using this. They are all using
audio/openal-soft instead.

Brief history of OpenAL: This is the original reference implementation,
developed by Loki Software and Creative Labs. This was eventually made
proprietary, the open source version packaged here was discontinued, and
OpenAL-Soft was developed as a replacement. This package has pointed
to gentoo distfiles for about 10 years since the original distfiles
disappeared.

We've apparently been planning this since 2016 but nobody got around to it:

https://mail-index.netbsd.org/pkgsrc-users/2016/07/16/msg023531.html

(nia)

blender: Remove a reference to the old OpenAL package.

(nia)

doc: Updated games/supertuxkart to 1.0

(nia)

supertuxkart: Update to 1.0

## SuperTuxKart 1.0 (20. April 2019)
### Networking
* Networking support for normal race, time trial, free for all, capture the flag and soccer by Benau and hiker :
    * Access to a global server list, possibility to also create a LAN server
    * Track voting system to allow players to decide where the race will be
    * Communication between server and clients to exchange inputs and general game data
    * A lot of work on rewind code to make sure server and client are well synchronized
    * Chat lobby for general server information and discussion among players between races
    * Support for handicap, which can be changed before each game
* Spectating option for players having entered a server while a race or game is underway by Benau
* Option to join live an active game in FFA, CTF and soccer by Benau
* Global rankings by Benau (communication with main server) and Alayan (ranking formula)

### Race gameplay and physics
* New game mode Capture the Flag by Benau (online multiplayer only)
* New game mode Free for All by Benau
* Free for All available in offline mode with AI, by Mrxx99
* Revised kart characteristics for better balance between light, medium and heavy karts by Alayan
* Better random item distribution for various numbers of karts by Alayan and hiker
* Fix position interpolation causing some incorrect lapline validation by Auria
* Fix kart being uncontrollable and hovering when landing on some downward slopes by hiker
* Mitigate a physics issue which could send a kart flying on collisions by hiker
* Make kart turn radius based on kart class instead of kart model length (which made Adiumy unplayable and caused AI issues) by Alayan
* Revisited slipstreaming with boost easier to obtain, especially in curves, but not as strong as in 0.9.3 when the zipper boost was incorrectly activated, by Alayan
* Minor gameplay improvements (level 1 skid boost doesn't interrupt level 2 boost, fairer rubber-banding in low difficulties, boosted AI for some karts for more challenge in GPs, small balance change of GP points, more useful and consistent handicap option...)
* Start boost/penalty moved to the set phase for smoother networking
* Terrain slowdown works again as intended on several tracks where it was missing

### AI
* Improved powerup and nitro handling in AI by Alayan

### General
* Option to disable light scattering (for improved FPS), used in graphics level 3, by Partmedia
* Unlockable SuperTux challenges in Story Mode by Alayan
* Improvements to ghost replays (more data saved, live time difference, replay comparison, egg hunt replays) by Alayan
* Kart color customization by Benau
* Multithreading contention fixes by Benau
* Local multiplayer improvements by Fantasmos
* Major revamp of the achievement system to make adding new achievements much easier and flexible, also fixing some related bugs by Alayan
* Store up to 5 highscores for a track/difficulty/mode/kart number combination, instead of 3
* Smooth turning for non-keyboard inputs for improved consistency between input mode by deveee
* Updated standard replays by Alayan
* Visual improvements (new skidding particles, better rescue, bubblegum flashing before ending)
* Audio improvements (crash sound depending on speed/direction, no crash sound on rescue walls, sound cue in nitro challenges)
* Fix STK incorrectly connecting to the server when the internet option is disabled by Auria
* Updated WiiUse library
* Many bugfixes

### Android
* Gyroscope support by Pelya
* Numerous improvements to input on Android, including screen keyboard, keyboard, gamepads, by deveee
* Android TV support
* Improved UI and font scaling by deveee
* More compact APK thanks to png optimization, allows to have several tracks more than the 0.9.3 APK, by deveee and Alayan
* Wayland support and many other smaller improvements and fixes

### User Interface
* New networking user interface by Benau and hiker
* Race UI improvements (new speedometer, nitro gauge, bigger minimap, minimap display options, more legible text with outlines and for some bigger font) by Alayan
* New coal skin by Alayan
* Support for collapsing widgets in UI by Mrxx99
* Multidirectional keyboard navigation in menus by Alayan
* Alternating background darkness in lists to enhance readability by Benau
* Support text breaks into multiple line in lists, e.g. in the addons menu, by Alayan
* Improved help menu with lateral tabs and a lot more information by Alayan
* Improved option menu with lateral tabs and a separate language tab by Alayan
* Many improvements to the ghost replay selection list (give access to egg hunt replays, kart icon shown in the list, replay's game version shown, hide player number column by default) and dialog (allow replay comparison, show track picture, show information about the selected replays) by Alayan
* Control configurations can be disabled without being deleted by Alayan
* Other significant enhancements (detailed progress of multi-goal achievements, reset password button, clearer checkbox status, milliseconds displayed in time-trials and egg hunts, nitro efficiency in the kart selection screen, better track info screen, better warnings when trying to do an online action with internet access disabled, hour support for GP time, default resolutions can't be used in fullscreen if unsupported by the monitor...)
* Many bugfixes and small enhancements mostly by deveee and Alayan

### Tracks and modeling
#### Tracks
* Black Forest by Sven Andreas Belting, replacing Green Valley
* Ravenbridge Mansion by samuncle, replacing Black Hill Mansion
* Las Dunas Soccer by samuncle
* Candela City arena by Benau based on samuncle's track
* Unwanted shortcuts and exploits found by several players and fixed mostly by Auria in many tracks :
    * Antediluvian Abyss, Around the Lighthouse, Fort Magma, Grand Paradisio Island, Hacienda, Minigolf, Nessie's Pond, Northern Resort, The Old Mine, Oliver's Math Class, Shifting Sands, STK Enterprise, XR591
* Smoothness issues causing collisions and kart slowdown fixed by Auria :
    * Nessie's Pond, Old Mine, Shifting Sands, Volcano Island, XR591
* Item (boxes, nitro, bananas) positions improvement by Alayan and theThomasPat :
    * Around the Lighthouse, Black Forest, Candela City, Hacienda, Minigolf, Northern Resort, Oliver's Math Class, STK Enterprise, The Old Mine, Volcano Island, Zen Garden
#### Karts
* New version of Beastie by Jymis
* New version of Kiki by Benau

## SuperTuxKart 0.9.3 (28. October 2017)
* Reduced RAM and VRAM usage, reducing load times by Auria and Benau
* New mesh format optimized for space and hardware skinning
* Code refactoring of both render pipeline by Benau and Elderme
* Physics improvements and various physics bugfixes by hiker
* Kart GFX improvements (exhaust and headlight)
* In-game screen recording powered by libopenglrecorder
* High quality mipmap generation by Stragus
* New smoother camera by Auria
* New grand prix win scene
* Gamepad configuration bugfixes
* 3 Strikes Battles : added spare tire karts
* Visual representation of the start line in all tracks
* Various improvements (starting boost effect, wall driving fixes, parachutes, GP points, help page for bananas, cannon fixes, colorization shader)
### Tracks and modeling
#### Karts
* Kiki by Benau
* New versions of Wilber and Hexley by Jymis
* New version of Konqi by Benau
#### Tracks
* All tracks drivable in reverse, with arrows pointing in the correct direction
* Candela City by samuncle (replace Shiny Suburbs)
* Cornfield Crossing by samuncle (replace Bovine Barnyard)
* New battle track Las Dunas Arena by samuncle

## SuperTuxKart 0.9.2 (1. July 2016)
* Ghost replay races by Benau
* Battle mode AI by Benau
* Soccer mode AI by Benau
* TTF font rendering by Benau
* New ruby and forest skins by Benau
* Kart properties refactor by Flakebi
* Scripting work under the hood
* Work on the track editor by mhp
* Tweak to challenges
* New farm track song by 0zone0ne and Krobonil
* Bugfixes
### Tracks and modeling
#### Tracks
* Antediluvian Abysses by samuncle (replace Subsea)
* Volcano Island by Ponzino
* New icy soccer field by samuncle and Benau

## SuperTuxKart 0.9.1 (17. October 2015)
* Many bug fixes
* Started to use scripting in tracks
* Significant audio performance improvements
* Tweak to challenges
### Tracks and modeling
#### Tracks
* Better support for driving tracks in reverse
* Smaller tweaks and improvements to several tracks including
    * Math class
    * XR591
    * Fort Magma
    * Gran Paradiso Island
    * Subsea

## SupertTuxKart 0.9 (24. April 2015)
* Fully shader-based rendering engine
* Online login which allows to:
    * connect with friends and see when they are playing
    * vote for addons
    * collect online achievements
* Grand Prix editor, including creation of random GPs
* Different kart physics
### Tracks and modeling
#### Karts
* New karts Amanda and Gavroche by XGhost
* New and improved Tux, Adiumy, Sara the Wizard and the Racer, Xue
#### Tracks
* Cocoa Temple by samuncle (replace Amazonian Journey)
* Gran Paradiso Island by samuncle (replace The Island)
* Graphical improvements to many other tracks

(nia)

libretro-nxengine: Update BUILDLINK_TRANSFORM

(nia)

doc: Added games/etlegacy-server version 2.76

(nia)

Split out an etlegacy-server package for etlegacy.

Allows most of the dependencies to be disabled because they won't be used
on a headless server.

(nia)

doc: Added games/minetest version 5.0.1

(nia)

Add minetest-5.0.1 as games/minetest.

Minetest is an infinite-world block sandbox game engine with support
for survival and crafting.

(nia)

doc: Added graphics/irrlicht version 1.8.4

(nia)

Add irrlicht-1.8.4 as graphics/irrlicht.
Based on work in pkgsrc-wip.

The Irrlicht Engine is an open source high performance real-time
3D engine written and usable in C++ and also available for .NET
languages.

It is completely cross-platform, using D3D, OpenGL and its own
software renderer, and has all of the state-of-the-art features
which can be found in commercial 3d engines.

(nia)

doc: Added games/7kaa-music version 2.15

(nia)

Add 7kaa-music-2.15 as games/7kaa-music.

Seven Kingdoms is a series of "fantasy real-time strategy" computer
games. In the world of Seven Kingdoms, you will find up to seven
different Nations, each with unique attributes, who live in an
almost unlimited number of randomly generated landscapes.

This package contains Seven Kingdoms: Ancient Adversaries' music
files, which are redistributed separately due to restrictive
licensing. Their license forbids modifications and they are restricted
for use with Seven Kingdoms alone.

(nia)

licenses: Add 7kaa-music-license

(nia)

doc: Added games/7kaa version 2.15.2

(nia)

games/Makefile: Add 7kaa.

(nia)

Add 7kaa-2.15.2 as games/7kaa.

Seven Kingdoms is a series of "fantasy real-time strategy" computer
games. In the world of Seven Kingdoms, you will find up to seven
different Nations, each with unique attributes, who live in an
almost unlimited number of randomly generated landscapes.

This is a GPL release of the Seven Kingdoms: Ancient Adversaries
thanks to Enlight Software which granted the ability to license
the game under a free and open source license in 2009.

(nia)

doc: Added games/assaultcube version 1.2.0.2

(nia)

Add assaultcube-1.2.0.2 as games/assaultcube

AssaultCube is a FREE, multiplayer, first-person shooter game,
based on the CUBE engine.

Taking place in realistic environments, with fast, arcade gameplay,
it's addictive and fun!

With efficient bandwidth usage, it's low-latency and can even run
over a 56 Kbps connection.  It's tiny too, weighing in at a
lightweight about 50 MB package available for Windows, Mac and
Linux.  On the correct settings, it can even run on old hardware
(Pentium III and above).

(nia)

doc: Added games/sauerbraten version 2013_04_04

(nia)

Add sauerbraten-2013_04_04 as games/sauerbraten

Cube 2: Sauerbraten is a free multiplayer & singleplayer first
person shooter, the successor of the Cube FPS.

Much like the original Cube, the aim of this game is fun, old school
deathmatch gameplay and also to allow map/geometry editing to be
done cooperatively in-game.

The engine supporting the game is entirely original in code &
design, and its code is Open Source (ZLIB license, read the docs
for more on how you can use the engine).

(nia)

doc: Added multimedia/obs-studio version 23.2.1

(nia)

add obs-studio-23.2.1 as multimedia/obs-studio

Open Broadcaster Software is free and open source software for
video recording and live streaming.

(nia)

doc: Added games/redeclipse version 1.6.0

(nia)

Add redeclipse-1.6.0 as games/redeclipse

Red Eclipse is a fun-filled new take on the casual first person arena
shooter, built as a total conversion of Cube Engine 2, which lends itself
toward a balanced gameplay, with a general theme of agility in a variety of
environments.

(nia)

Update packages using a search.cpan.org HOMEPAGE to metacpan.org.

The former now redirects to the latter.

This covers the most simple cases where http://search.cpan.org/dist/name
can be changed to https://metacpan.org/release/name.

Reviewed by hand to hopefully make sure no unwanted changes sneak in.

(nia)