mono: Make sure mono6 is pulled in on NetBSD.

(nia)

Updated devel/py-babel, finance/py-braintree, www/py-django-extensions, devel/py-pexpect

(adam)

py-pexpect: updated to 4.8.0

Version 4.8

Returned behavior of searchwindowsize to that in 4.3 and earlier (searches are only done within the search window).
Fixed a bug truncating before attribute after a timeout.
Fixed a bug where a search could be less than searchwindowsize if it was increased between calls.
Minor test cleanups to improve portability.
Disable chaining of timeout and EOF exceptions.
Allow traceback included snippet length to be configured via str_last_chars rather than always 100.
Python 3 warning added to interact.py.
Several doc updates.

(adam)

py-django-extensions: updated to 2.2.6

2.2.6
Changes:
- Improvement: travis, update pypy and pypy3 versions
- Improvement: shell_plus, ability to print location/traceback besides sql
- Improvement: runserver_plus, ability to print location/traceback besides sql
- Improvement: UniqueFieldMixin, Support Django 2.2 UniqueConstraint.condition
- Improvement: DEFAULT_MYSQL_ENGINES, add mysql.connector.django
- Improvement: shell_plus, allow setting SHELL_PLUS="notebook"
- Improvement: shell_plus, add -c/--command to shell_plus mirroring django's shell command
- Fix: shell_plus, fix postgresql debug wrapper on django 3.0 or higher
- Fix: runserver_plus, fix postgresql debug wrapper on django 3.0 or higher

(adam)

py-braintree: updated to 3.58.0

3.58.0
Add support for managing Apple Pay domains
Fix error when running against Python 3.8
Add ProcessorDoesNotSupportMotoForCardType to validation errors
Add Graphql ID to CreditCardVerification, Customer, Dispute, and Transaction

(adam)

py-babel: updated to 2.8.0

Version 2.8.0

Improvements
* CLDR: Upgrade to CLDR 36.0
* Messages: Don't even open files with the "ignore" extraction method

Bugfixes
* Numbers: Fix formatting very small decimals when quantization is disabled
* Messages: Attempt to sort all messages

Docs
* Add years to changelog
* Note that installation requires pytz

(adam)

Fix building against OpenSSL 1.1.1

(sevan)

Fix MANDIR after it got zapped in the previous change.

(sevan)

sublib: Don't use mono2

Bump PKGREVISION

(nia)

doc: Updated www/webkit-gtk to 2.26.3

(leot)

webkit-gtk: Update to 2.26.3

pkgsrc changes:
- Remove no longer needed
  patch-Source_WebKit_WebProcess_WebPage_CoordinatedGraphics_LayerTreeHost.h,

Changes:
2.26.3
======
  - Fix issues while trying to play a video on NextCloud.
  - Make sure the GL video sink uses a valid WebKit shared GL context.
  - Fix vertical alignment of text containing arabic diacritics.
  - Fix build with icu 65.1.
  - Fix page loading errors with websites using HSTS.
  - Fix web process crash when displaying a KaTeX formula.
  - Fix several crashes and rendering issues.

(leot)

doc: Updated misc/orca to 3.34.1

(nia)

orca: Update to 3.34.1

Updated to GNOME 3 / gtk3 version.

(nia)

Updated security/py-google-auth, www/py-httplib2

(adam)

py-httplib2: updated to 0.16.0

0.16.0
IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
proxy: username/password as str compatible with pysocks

(adam)

py-google-auth: updated to 1.10.2

1.10.2:
Bug Fixes
make collections import compatible across Python versions

(adam)

Updated security/py-trustme, devel/py-virtualenv

(adam)

py-virtualenv: updated to 16.7.9

v16.7.9:
Bugfixes
- upgrade setuptools from ``41.6.0`` to ``42.0.2``

(adam)

speech-dispatcher: Make python support work.

Bump PKGREVISION

(nia)

py-trustme: updated to 0.6.0

0.6.0:
Features
Allow specifying organization and organization unit in CA and issued certs.

(adam)

Updated www/py-uvicorn, devel/py-pyrsistent

(adam)

py-pyrsistent: updated to 0.15.7

0.15.7:
* NOTE! This is the last version of Pyrsistent that officially supports Python 2.X!
* Fix 186, type errors with more recent versions of MyPy.
* Build and test on ARM during CI.
* Set absolute imports for python2 compatibility.

(adam)

mpv: enable pulseaudio on linux.

(maya)

py-uvicorn: updated to 0.11.2

0.11.2
Don't open socket until after application startup.
Support --backlog.

(adam)

Updated devel/memcached, devel/py-test5

(adam)

py-test5: updated to 5.3.4

pytest 5.3.4:
Bug Fixes
Revert 6436: unfortunately this change has caused a number of regressions in many suites, so the team decided to revert this change and make a new release while we continue to look for a solution.

(adam)

memcached: updated to 1.5.21

Memcached 1.5.21

Overview
Bugfixes and smaller changes. Thanks to all the external contributors!

Fixes
Adding missing defaults to the --help output
stats: Fix stats delimiter unit tests
Allow compilation with ASAN
restart: add error handling if mmap fails
For text auth token mode, use alternative bcmp implementation
memcached-tool: Fix up tabular output for the 'stats' command.
linux_priv.c: add termios.h include to fix powerpc(64) builds
Update the build documentation in BUILD file
Update documentation for --max-item-size
Fix build issue due to improper pthread_t comparison
Ensure t/whitespace.t test is skipped when outside a memcached git checkout
Allocating large chunk of slabs for FreeBSD.

New Features
configuration option to disable watch commands (-W)

(adam)

doc: Updated misc/mousetweaks to 3.32.0

(nia)

mousetweaks: Update to 3.32.0

Updated to GNOME 3 / GTK3 version.

(nia)

devhelp: Update LICENSE

(nia)

doc: Removed audio/gmpc-wikipedia

(nia)

audio: Remove gmpc-wikipedia

Unmaintained upstream since 2011, stuck on an old/vulnerable webkit-gtk
version.

(nia)

devhelp: Fix path to dependency.

(nia)

doc: Updated devel/devhelp to 3.34.0

(nia)

devhelp: Update to 3.34.0

Updated to GTK 3 / GNOME 3 version.

(nia)

doc: Added devel/amtk version 5.0.1

(nia)

devel: Add amtk

Amtk is the acronym for "Actions, Menus and Toolbars Kit". It is a basic
GtkUIManager replacement based on GAction. It is suitable for both a
traditional UI or a modern UI with a GtkHeaderBar.

(nia)

devel/glib2: Fix build failure on Darwin

The new patch sets LD_LIBRARY_PATH so that uninstalled
glib-compile-resources can find libraries. This fixes the following
error during build:

[651/1015] Generating plugin-resources.c with a custom command.
FAILED: gio/tests/plugin-resources.c
/Users/pbulk/pkgsrc/work/devel/glib2/work/glib-2.62.4/output/gio/glib-compile-resources --target=gio/tests/plugin-resources.c --sourcedir=/Users/pbulk/pkgsrc/work/devel/glib2/work/glib-2.62.4/gio/tests --generate-source --c-name _g_plugin ../gio/tests/test4.gresource.xml
dyld: Library not loaded: @rpath/libgio-2.0.0.dylib
  Referenced from: /Users/pbulk/pkgsrc/work/devel/glib2/work/glib-2.62.4/output/gio/glib-compile-resources
  Reason: image not found

(minskim)

qt5-qtbase: Use PLIST.Darwin instead of nonunix PLIST option

Pointed by adam@. Thank you.

(ryoon)

qt5-qttools: Remove some entries in PLIST.Darwin

Pointed by adam@. Thank you.

(ryoon)

doc: Updated www/firefox68-l10n to 68.4.2

(ryoon)

firefox68-l10n: Update to 68.4.2

* Sync with www/firefox68-68.4.2

(ryoon)

doc: Updated www/firefox68 to 68.4.2

(ryoon)

firefox68: Update to 68.4.2

Changelog:
Fixed
    Fixed various issues opening files with spaces in their path (bug 1601905, bug 1602726)

(ryoon)

Updated www/firefox-l10n to 72.0.2

(ryoon)

firefox-l10n: Update to 72.0.2

* Sync with www/firefox-72.0.2

(ryoon)

doc: Updated www/firefox to 72.0.2

(ryoon)

firefox: Update to 72.0.2

Changelog:
Fixed
    Various stability fixes

    Fixed issues opening files with spaces in their path (bug 1601905)

    Fixed a hang opening about:logins when a master password is set (bug 1606992)

    Fixed a web compatibility issue with CSS Shadow Parts which shipped in Firefox 72 (bug 1604989)

    Fixed inconsistent playback performance for fullscreen 1080p videos on some systems (bug 1608485)

(ryoon)

qt5-qttools: Fix packageing on NetBSD

(ryoon)

qt5-qtmultimedia: Fix packageing on NetBSD

(ryoon)

qt5-qtbase: Add nonunix PLIST option for inverted unix option

(ryoon)

fix: evoid using temporary awk in mk-configure script; ++pkgrevision

(cheusov)

doc: Updated www/cliqz to 1.32.0

(fox)

www/cliqz: Updates to 1.32.0

- Bumps versions of dependencies.

Changes (since 1.32.0):

Cliqz Browser release 1.32.0 includes the improvements of Firefox窶冱 latest
versions 71.0 and 72.0.1 with additional Cliqz improvements and bug fixes.

Improvements

    * Cliqz got updated to Firefox 71.0 and 72.0.1 with various improvements and
      fixes.
    * The built-in security add-on HTTPS Everywhere got updated to the latest
      version 2019.11.7.

Fixes

    * For some users, YouTube stopped working in Cliqz Browser until they
      cleared their cookies and cache. These cookie related issues have been
      fixed.
    * Sometimes the onboarding was shown again and again. Now you窶冤l only see it
      after the first start of the browser.
    * Recommended add-ons like Ghostery or LastPass could not be installed
      anymore. These add-ons can now be installed again.
    * We made sure that Cliqz Tab doesn窶冲 show up in the history item list
      anymore.
    * If you right-clicked on the Cliqz icon in the Windows taskbar and selected
      the task "Open new tab" in the Jump List, it could happen that instead of
      Cliqz Tab only a blank page appeared. This has been fixed.

(fox)

inpsircd3: fix config file path in rc script

(nia)

libdazzle: Downgrade to release from stable branch.

Doesn't seem to cause any ABI breakage, epiphany still works and that's
the only thing using this.

Pointed out by wiz, downgrading ok'd by wiz

(nia)

Updated devel/cmake, www/py-urllib3

(adam)

py-urllib3: updated to 1.25.8

1.25.8:
* Drop support for EOL Python 3.4
* Optimize _encode_invalid_chars

(adam)

cmake: updated to 3.16.3

CMake 3.16.3
* FindOpenSSL: Fix ordering of dependency link flags
* GNUtoMS: Add search path for VS 2019 environment scripts
* IRSL: Install msvcp140_{1,2,codecvt_ids}.dll if available
* ObjC: Add _COMPILE_LAUNCHER support
* ObjC: Add VISIBLITY_INLINES_HIDDEN support
* Unity Build: include language in generated source file name
* PCH: No repeated path for internal generated PCH files (MSVC case)
* CTest: Improve error handling when reading resource spec file
* CPack: Fix regression in DEB generator description
* FindPython*: Fix erroneous target properties setting
* macOS: Add support for new Xcode 11 frameworks directory
* FindPython: ensure new Xcode framework for Python3 is detected
* FindPython: Add support for version 3.9
* Fortran: Add support for NAG Fortran submodules
* VS: Add Fortran link flag table entries for /OPT:*
* CUDA: Do not device link if target has no CUDA usage
* Autogen: Enable SKIP_UNITY_BUILD_INCLUSION on AUTORCC generated files
* FindMatlab: add R2019a and R2019b MATLAB_VERSIONS_MAPPING
* FindMatlab: in matlab_add_mex use the correct version file

(adam)

Oops, missed committing distinfo in the daemontools-encore import.

(schmonz)

Add missing BUILD_DEPENDS on devel/happy

(pho)

Add mic-paren

(pho)

doc: Added misc/mic-paren version 3.13

(pho)

Import mic-paren-3.13

mic-paren is an extension and replacement to the packages paren and
stig-paren for Emacs. When mic-paren is active Emacs normal
parenthesis matching is deactivated. Instead parenthesis matching will
be performed as soon as the cursor is positioned at a parenthesis. The
matching parenthesis (or the entire expression between the
parentheses) is highlighted until the cursor is moved away from the
parenthesis.

(pho)

brasero: Use configure option to disable Werror= flags.

(nia)

brasero: Remove werror

(nia)

doc: Added sysutils/daemontools-encore version 1.11

(schmonz)

Add and enable daemontools-encore.

(schmonz)

Initial import of daemontools-encore, a collection of tools for managing
UNIX services. daemontools-encore is derived from the public-domain
release of daemontools by D. J. Bernstein, adding numerous enhancements
while maintaining backwards compatibility.

(schmonz)

Add CONFLICTS with daemontools-encore, to be imported shortly.

(schmonz)

qt5-qtdeclarative: add new patch

(adam)

Stop adding unneeded CFLAGS. Fixes tests on at least macOS Catalina.

(schmonz)

Updated x11/qt5*, net/wireshark

(adam)

wireshark: updated to 3.2.1

Wireshark 3.2.1 Release Notes

What’s New

Bug Fixes

  The following vulnerabilities have been fixed:

    • wnpa-sec-2020-01[1] WASSP dissector crash. Bug 16324[2].
      CVE-2020-7044[3].

  The following bugs have been fixed:

    • Incorrect parsing of USB CDC packets. Bug 14587[4].

    • Wireshark fails to create directory if parent directory does not
      yet exist. Bug 16143[5].

    • Buildbot crash output: randpkt-2019-11-30-22633.pcap. Bug
      16240[6].

    • Closing Flow Graph closes (crashes) main GUI window. Bug
      16260[7].

    • Wireshark interprets websocket frames after HTTP handshake in a
      wrong way. Bug 16274[8].

    • A-bis/OML: IPA Destination IP Address attribute contains inverted
      value (endianness). Bug 16282[9].

    • wiretap/log3gpp.c: 2 * leap before looking ?. Bug 16283[10].

    • Opening shell terminal prints Wireshark: Permission denied. Bug
      16284[11].

    • h264: SPS frame_crop_right_offset shown in UI as
      frame_crop_left_offset. Bug 16285[12].

    • BGP: update of "Sub-TLV Length" by draft-ietf-idr-tunnel-encaps.
      Bug 16294[13].

    • SPNEGO+GSS-API+Kerberos+ap-options dissection produces "Unknown
      Bit(s)" expert message. Bug 16301[14].

    • USB Audio feature unit descriptor is incorrectly dissected. Bug
      16305[15].

    • Compiling the .y files fails with Berkeley YACC. Bug 16306[16].

    • PDB files in Windows installer. Bug 16307[17].

    • NAS-5GS 5GS network feature support lacks MCSI, EMCN3 two fields
      (octet 4). Bug 16310[18].

    • Option to change “Packet List” columns header right click pop-up
      menu behavior. Bug 16317[19].

    • DLT: Dissector does not parse multiple DLT messages in single UDP
      packet. Bug 16321[20].

    • ISAKMP Dissection: Enhance Source id and Destination ID field of
      GDOI SA TEK payload for non IP ID type. Bug 16233[21].

    • DOIP: Typo in "identifcation request messages". Bug 16325[22].

    • Toolbar "?" help button - no text/help displayed. Bug 16327[23].

New and Updated Features

  There are no new features in this release.

New Protocol Support

  There are no new protocols in this release.

Updated Protocol Support

  802.11 Radiotap, ASN.1 BER, BGP, DLT, DOIP, GSM A RR, GSM A-bis/OML,
  H264, HTTP, IEC 60870-5-104, IEEE 802.11, IPv4, ISAKMP, NAS 5GS,
  rtnetlink, SIP, TIPC, USB Audio, USB CDC, and WASSP

New and Updated Capture File Support

  3gpp phone log

(adam)

qt5: updated to 5.14.0

New Features in Qt 5.14

Qt 3D Module
Overhauled the threading architecture. This includes the removal of the aspect thread.
Overhauled the frontend/backend node sync.
Enabled QTransform to have access to the world matrix.
Introduced Scene3DView.
Scene3D is now in sync with QtQuick, and can render as an underlay without an FBO.

Qt Bluetooth Module
Introduced a new, optional Win32 backend with support for Windows 7 and 8. This backend is not built by default, nor is it part of the pre-built packages.
QLowEnergyController: Introduced AuthorizationError.
Added the ability to include multiple manufacturer data entries per manufacturer ID.

Qt Core Module
Added support in QCalendar for calendars other than Gregorian, by implementation of suitable backends.
Added backends to implement the Gregorian, Jalali (Persian), Islamic Civil, Milankovic, and Julian calendars. We look forward to other contributions.
Added QColorConstants, a namespace providing constexpr QColor instances that don't cost any runtime overhead.

Qt GUI Module
Updated High-DPI support:
Introduced non-integer scale factors (for example, a scale factor of 150%) that applications can opt-in to use. Use QGuiApplication::highDpiScaleFactorRoundingPolicy or QT_SCALE_FACTOR_ROUNDING_POLICY to set the rounding policy.
Added the QT_ENABLE_HIGHDPI_SCALING environment variable, enabling high-DPI scaling based on display DPI. This replaces QT_AUTO_SCREEN_SCALE_FACTOR (now deprecated), and corresponds to the Qt::AA_EnableHighDpiScaling application attribute.
Added cross-platform support for the QT_FONT_DPI environment variable, for the purpose of developing and testing with specific DPI values.
Added color-space support for images; reading and writing color-spaces from JPEG, PNG, WebP and TIFF images, and performing color-space transformation on images.
Improvements to QTextDocument and QTextTable styling:
Added per-edge border styling via QTextTableCellFormat.
Added border-collapse mode.
Added support for (partial) HTML table style import and export.
Added support for reading and writing Markdown format to QTextDocument, as an alternative to HTML.

Qt Multimedia Module
Added QVideoFrame::Format_YUV422P.
Introduced support for the GStreamer OpenGL plugin.

Qt Network Module
Introduced the HTTP/2 Configuration API.
Introduced network connectivity monitoring.
Added support for Kerberos proxy authentication.

Qt QML Module
Added qmlRegisterSingletonInstance() function. This allows to expose a QObject as a singleton to QML, without having to create a factory function as required by qmlRegisterSingletonType(). It is meant as a type safe replacement of setContextProperty() in common usages.
Added qmlRegisterAnonymousType() as a replacement for qmlRegisterType(). It allows to specify the URI and major version, which enables better tooling support.
Added an experimental -U option to qmllint. When set, access to unqualified identifiers generates warnings.

Qt Quick Module
Added a preview of the graphics API independent scenegraph renderer as an opt-in feature. This allows running qualifying Qt Quick applications on top of Vulkan, Metal, or Direct3D 11, instead of OpenGL. Currently supported platforms:
Windows 10 (Direct3D)
Linux with X11/xcb (Vulkan)
macOS (Metal or Vulkan with MoltenVK)
Android 7.0+ (Vulkan)
Added support for the Markdown format (including CommonMark and GitHub dialects) to Text and TextEdit as an alternative to HTML. This includes the GitHub checklist extension, allowing to toggle checkboxes in a TextEdit.
Switched TextEdit to use an I-beam cursor by default, and a pointing-hand cursor when hovering over a checkbox or a link. Default cursors can be overridden.
Added WheelHandler, an event handler for the mouse wheel, and optionally for emulated mouse wheel events coming from a trackpad.
Added BoundaryRule in Qt.labs.animation: a PropertyValueInterceptor that restricts the range of values a numeric property can have, applies "resistance" when overshooting a value, and provides the ability to animate it back to its normal range. It's particularly useful in combination with WheelHandler, providing physics similar to Flickable.
Added currentFrame and frameCount properties to Image and BorderImage, just as AnimatedImage has; for example, this allows choosing an individual icon from an .ICO file that contains multiple icons.
Added PathPolyline and PathMultiline as additional ways of drawing and/or filling arbitrary polygons and sets of polygons with Qt Quick Shapes.

Qt Serial Bus Module
Added operators to compare QCanBusDevice::Filter for equality or inequality.
Added the QCanBusDevice::OperationError and QCanBusDevice::TimeoutError codes to signal operation and timeout errors.
Added the QCanBusDevice::busStatus() function to query the bus status from the CAN bus device.
Added the QCanBusDevice::resetController() function to release the CAN controller from bus off state.
SocketCAN: Added the configuration parameter QCanBusDevice::ProtocolKey to use another protocol inside the protocol family PF_CAN.
SocketCAN: If libsocketcan is available, the CAN bus bitrate can be retrieved and set at runtime.
PeakCAN: Added support for PCAN-USB devices on macOS by using the MacCAN library.
Exposed the underlying QIODevice used for Modbus communication. This enables, for example, setting the serial port hardware flow control (RTS/CTS).

Qt Test Module
Introduced initMain() function to perform any initialization that must happen before QApplication exists.

Qt WebEngine Module
Updated to Chromium 77.
Added a new API to control the life-cycle of QWebEnginePage.

Qt Widgets Module
Added support for the Markdown format (including CommonMark and GitHub dialects) to QTextEdit and QTextBrowser as an alternative to HTML. This includes the GitHub checklist extension, allowing to toggle checkboxes if the widget is editable. QTextBrowser::setSource() detects Markdown based on the file extension.

(adam)

doc: Updated misc/ansiweather to 1.16.0

(fcambus)

ansiweather: update to 1.16.0.

AnsiWeather 1.16.0 (2020-01-21)

- Switch default delimiter from "=>" to ":" and stop prepending space
- Do not hardcode colon in forecast mode, use $delimiter instead

(fcambus)

doc: Updated graphics/shotwell to 0.30.8

(nia)

shotwell: Update to 0.30.8

Updated to GNOME 3 / gtk3 version.

(nia)

doc: Accidental reverted update

(nia)

doc: Updated www/epiphany to 3.34.3.1

(nia)

epiphany: Downgrade to 3.34.3.1

leot correctly points out that 3.35 is a development branch.

(nia)

py-importlib-metadata: chmod strikes back

(adam)

vinagre: Gets gnome category.

(nia)

evolution: Gets gnome category.

(nia)

*: Use the 'gnome' virtual category some more.

(nia)

doc: Removed www/epiphany-extensions

(nia)

doc: Updated www/epiphany to 3.35.2

(nia)

epiphany: Update to 3.35.2

Updated to gtk 3 / GNOME 3 version / recentish webkit.

This is one minor version away from the latest version, but nevertheless
a large improvement - we need a small webkit-gtk bump (ping leot :)).

(nia)

doc: Added devel/libhandy version 0.0.13

(nia)

devel: Add libhandy.

Needed for epiphany update.

The aim of the Handy library is to help with developing UI for mobile devices
using GTK/GNOME.

(nia)

doc: Added devel/libdazzle version 3.35.3

(nia)

devel: Add libdazzle.

Needed for epiphany update.

The libdazzle library is a companion library to GObject and Gtk+. It provides
various features that we wish were in the underlying library but cannot for
various reasons. In most cases, they are wildly out of scope for those
libraries. In other cases, our design isn't quite generic enough to work
for everyone.

The libdazzle project is heavily opinionated, and tends to gravitate towards
design that matches the GNOME 3 human interface guidelines.

(nia)

MesaLib: Revert upstream commit causing symbol ref errors with libEGL

Bump PKGREVISION

(nia)

doc: Updated net/hub to 2.14.0

(leot)

hub: Update to 2.14.0

Changes:
2.14.0
------
Features:
* New command: `hub issue update` #2432
* New command: `hub issue transfer` #2363
* Support git flag `hub version --build-options` #2440
* Refuse to follow HTTP 301/302 redirects for non-GET requests #2442

Fixes:
* Fix `hub help <cmd>` on Windows #2384
* Ensure that `grep` command is being used in shell completions #2390
* Consult global `git config color.ui` setting when `--color=auto` #2378

Improvements:
* Print more user-friendly HTTP 40x errors #2446
* Enable debugging file uploads via `HUB_VERBOSE=1 hub release create -a <file>`
* Improve parsing malformed YAML config files #2380

(leot)

doc: Updated lang/php74 to 7.4.1nb2

(taca)

lang/php74: switch to use external pcre

Switch to use external pcre, fixing PR pkg/54793.

Bump PKGREVISION.

(taca)

doc: Updated net/samba4 to 4.11.5

(taca)

net/samba4: update to 4.11.5

Update samba4 to 4.11.5.

                  ==============================
                  Release Notes for Samba 4.11.5
                          January 21, 2020
  ==============================

This is a security release in order to address the following defects:

o CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD
  Directory not automatic.
o CVE-2019-14907: Crash after failed character conversion at log level 3 or
  above.
o CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC.

=======
Details
=======

o  CVE-2019-14902:
  The implementation of ACL inheritance in the Samba AD DC was not complete,
  and so absent a 'full-sync' replication, ACLs could get out of sync between
  domain controllers.

o  CVE-2019-14907:
  When processing untrusted string input Samba can read past the end of the
  allocated buffer when printing a "Conversion error" message to the logs.

o  CVE-2019-19344:
  During DNS zone scavenging (of expired dynamic entries) there is a read of
  memory after it has been freed.

(taca)

doc: Updated security/libsecret to 0.20.0

(nia)

libsecret: Update for 0.20.0

Needed for updating epiphany.

0.20.0
* secret-backend: New interface to represent password storage backend [!34]
* secret-backend: Add local-storage backend [!6]
* item: Port to GTask [!43]
* Build fixes [!34, !37, !38, !40, !41, !42, ...]
* Updated translations

0.19.1
* service: Fix secret_service_ensure_session_finish error propagation [!36]

0.19.0
* secret-password: Add necessary functions to migrate from D-Bus based API [!32]
* egg: Request that secure memory not be dumped to disk [!30]
* Add version macros [!29]
* Add missing GType to flags in .gir [!16, !19]
* paths: Port from GSimpleAsyncResult to GTask [!26]
* build: Bump meson_version to 0.50 [!18, !35]
* Build and test fixes [!15, !20, !21, !23, !33, ...]

(nia)

Add ecb

(pho)

doc: Added devel/ecb version 2.50

(pho)

Import ecb-2.50

ECB stands for "Emacs Code Browser". While Emacs already has good
/editing/ support for many modes, its /browsing/ support is somewhat
lacking. That's where ECB comes in: it displays a number of
informational windows that allow for easy source code navigation and
overview.

(pho)

python*: Switch to USE_X11=weak

(kamil)

Allow USE_X11=weak that allows X11 paths without having them reachable

Useful in certain packages (python) where X11 paths are needed in wrappers,
but optional in build and runtime.

(kamil)

Set native X11BASE on NetBSD to /usr/X11R7 unconditionally

This is the default option for more than a decade now.

(kamil)

doc: Updated textproc/p5-Text-Markdown-Discount to 0.12

(schmonz)

Update to 0.12. From the changelog:

- Added cpan repository metadata @dsteinbrunner
- Removed unnecessary comment in POD @anirvan
- Use <br /> instead of <br/> @utgwkk

(schmonz)