Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (3h)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (154d) 

2024-05-13 03:46:04 UTC Now

2019-12-22 02:58:32 UTC MAIN commitmail json YAML

libsixel: update to 1.8.4. (security update)

Upstream changes:

v1.8.4
* Security fix for CVE-2019-11024 (#85), recursive loop problem,
  reported by @Loginsoft-Research.

* Security fix for #73, illegal memory access problem,
  reported by @HongxuChen.

* Security fix for #89, core dumped issue,
  reported by @niugx.

* Security fix for #107, large memory allocation problem,
  reported by @cuanduo.

* Security fix for #114, heap-buffer-overflow problem,
  reported by @SuhwanSong.

* Security fix for #116, heap-buffer-overflow problem,
  reported by @SuhwanSong.

* Security fix for #118, heap-buffer-overflow problem,
  reported by @SuhwanSong.

* Security fix for #121, heap-buffer-overflow problem,
  reported by @gutiniao

(tsutsui)

2019-12-22 02:12:00 UTC MAIN commitmail json YAML

2019-12-21 23:51:56 UTC MAIN commitmail json YAML

2019-12-21 23:51:30 UTC MAIN commitmail json YAML

2019-12-21 23:48:26 UTC MAIN commitmail json YAML

Ignore deprecation with clang.

(joerg)

2019-12-21 23:48:08 UTC MAIN commitmail json YAML

Needs libXmu and libXt, formerly pulled in via Mesa.

(joerg)

2019-12-21 23:47:39 UTC MAIN commitmail json YAML

2019-12-21 23:46:41 UTC MAIN commitmail json YAML

Do not disable the C compiler, it is used by the cFFI Python module.

(joerg)

2019-12-21 23:46:19 UTC MAIN commitmail json YAML

2019-12-21 23:46:04 UTC MAIN commitmail json YAML

Use c++03, code is not c++11 clean.

(joerg)

2019-12-21 23:45:22 UTC MAIN commitmail json YAML

Disable some warnings for clang.

(joerg)

2019-12-21 23:44:59 UTC MAIN commitmail json YAML

2019-12-21 23:44:45 UTC MAIN commitmail json YAML

2019-12-21 23:44:00 UTC MAIN commitmail json YAML

Don't build & install PIC libraries consistently. Bump revision.

(joerg)

2019-12-21 23:43:27 UTC MAIN commitmail json YAML

2019-12-21 23:42:35 UTC MAIN commitmail json YAML

Needs libXi, formerly pulled in by Mesa.

(joerg)

2019-12-21 23:41:47 UTC MAIN commitmail json YAML

2019-12-21 23:41:06 UTC MAIN commitmail json YAML

Don't use gethostbyname_r on NetBSD. Needs convert.

(joerg)

2019-12-21 23:40:43 UTC MAIN commitmail json YAML

export means something different in C++, nothing is actually correct
here. Fix button IDs to actually allow matching. Bump revision.

(joerg)

2019-12-21 23:39:48 UTC MAIN commitmail json YAML

2019-12-21 23:38:53 UTC MAIN commitmail json YAML

Don't use -pedenatic(-errors), they don't do what people think they do.

(joerg)

2019-12-21 23:36:23 UTC MAIN commitmail json YAML

2019-12-21 23:35:05 UTC MAIN commitmail json YAML

2019-12-21 23:31:24 UTC MAIN commitmail json YAML

2019-12-21 23:30:44 UTC MAIN commitmail json YAML

Needs mouse API from ncurses.

(joerg)

2019-12-21 23:30:21 UTC MAIN commitmail json YAML

2019-12-21 23:29:05 UTC MAIN commitmail json YAML

2019-12-21 23:28:03 UTC MAIN commitmail json YAML

Don't hardcode libgomp, but use -fopenmp for linking. Fixes clang with
libomp.

(joerg)

2019-12-21 23:27:04 UTC MAIN commitmail json YAML

Patch local WAF copy to run ${CXX} with -x c++ when detecting it.
Otherwise clang will bail out on - as it is considered a C source and
-std=c++11 as injected by the wrappers conflict.

(joerg)

2019-12-21 23:22:09 UTC MAIN commitmail json YAML

Revbump dhcpcd-gtk and dhcpcd-qt due to PLIST change

Set the right values this time.

(nros)

2019-12-21 23:11:58 UTC MAIN commitmail json YAML

Revbump dhcpcd-gtk and dhcpcd-qt due to PLIST change

(nros)

2019-12-21 23:09:24 UTC MAIN commitmail json YAML

Fix installation of xdg autostart desktop files in dhcpcd-*

Make dhcpcd-gtk and dhcpcd-qt install xdg autostart files in the right
locations and use pkg_install framework to put then in PKG_SYSCONFDIR.
Fixes installation that was broken due to non updated PLIST files.

(nros)

2019-12-21 22:50:00 UTC MAIN commitmail json YAML

opencv: fix PLIST for python != 3.7

(markd)

2019-12-21 22:43:45 UTC MAIN commitmail json YAML

devel/guile-git: Fix build (info files)

(ng0)

2019-12-21 21:25:51 UTC MAIN commitmail json YAML

csound6: Not actually PYTHON_FOR_BUILD_ONLY

(nia)

2019-12-21 21:21:12 UTC MAIN commitmail json YAML

lgogdownloader: Fix jsoncpp detection and remove some unused CMAKE_ARGS

(nia)

2019-12-21 21:08:43 UTC MAIN commitmail json YAML

pidgin: Fix building with d-bus enabled

(nia)

2019-12-21 20:46:27 UTC MAIN commitmail json YAML

asc: Add missing file

(nia)

2019-12-21 16:43:59 UTC MAIN commitmail json YAML

Turn off -Werror for telepathy-qt

Warnings are emitted in example code because some dependencies has depracated
some things. This breaks the build because -Werror is used. So turn it off.

(nros)

2019-12-21 14:41:42 UTC MAIN commitmail json YAML

doc: Updated chat/hexchat to 2.14.3

(nia)

2019-12-21 14:41:32 UTC MAIN commitmail json YAML

hexchat: Update to 2.14.3

Bug fix only update to a leaf package.

* fix various incorrect parsing of IRC messages relating to trailing parameters
* fix SASL negotiation combined with multi-line cap
* fix input box theming with Yaru theme
* python: Work around Python 3.7 regression causing crash on unload
* sysinfo: Add support for /etc/os-release
* sysinfo: Ignore irrelevant mounts when calculating storage size

(nia)

2019-12-21 07:03:21 UTC MAIN commitmail json YAML

doc: update php packages

lang/php73 7.3.13
lang/php74 7.4.1
lang/php72 7.2.26

(taca)

2019-12-21 07:02:15 UTC MAIN commitmail json YAML

lang/php72: update to 7.2.26

Update php73 to 7.2.26, including security fixes.

19 Dec 2019, PHP 7.2.26

- Bcmath:
  . Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
    (cmb)

- Core:
  . Fixed bug #78862 (link() silently truncates after a null byte on Windows).
    (CVE-2019-11044). (cmb)
  . Fixed bug #78863 (DirectoryIterator class silently truncates after a null
    byte). (CVE-2019-11045). (cmb)

- EXIF:
  . Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
    (CVE-2019-11050). (Nikita)
  . Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
    (Nikita)

- GD:
  . Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). (cmb)

- Intl:
  . Fixed bug #78804 (Segmentation fault in Locale::filterMatches). (Stas)

- OPcache:
  . Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
    (Tyson Andre)

- Standard:
  . Fixed bug #78759 (array_search in $GLOBALS). (Nikita)
  . Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
    (cmb)
  . Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
    (cmb)

(taca)

2019-12-21 07:00:55 UTC MAIN commitmail json YAML

lang/php74: update to 7.4.1

Update php74 to 7.4.1, including security fixes.

19 Dec 2019, PHP 7.4.1

- Bcmath:
  . Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
    (cmb)

- Core:
  . Fixed bug #78862 (link() silently truncates after a null byte on Windows).
    (CVE-2019-11044). (cmb)
  . Fixed bug #78863 (DirectoryIterator class silently truncates after a null
    byte). (CVE-2019-11045). (cmb)
  . Fixed bug #78943 (mail() may release string with refcount==1 twice).
    (CVE-2019-11049). (cmb)
  . Fixed bug #78810 (RW fetches do not throw "uninitialized property"
    exception). (Nikita)
  . Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value).
    (Antony Dovgal, Dmitry)
  . Fixed bug #78296 (is_file fails to detect file). (cmb)
  . Fixed bug #78883 (fgets(STDIN) fails on Windows). (cmb)
  . Fixed bug #78898 (call_user_func(['parent', ...]) fails while other
    succeed). (Nikita)
  . Fixed bug #78904 (Uninitialized property triggers __get()). (Nikita)
  . Fixed bug #78926 (Segmentation fault on Symfony cache:clear). (Nikita)

- GD:
  . Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). (cmb)
  . Fixed bug #78923 (Artifacts when convoluting image with transparency).
    (wilson chen)

- EXIF:
  . Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
    (CVE-2019-11050). (Nikita)
  . Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
    (Nikita)

- FPM:
  . Fixed bug #76601 (Partially working php-fpm ater incomplete reload).
    (Maksim Nikulin)
  . Fixed bug #78889 (php-fpm service fails to start). (Jakub Zelenka)
  . Fixed bug #78916 (php-fpm 7.4.0 don't send mail via mail()).
    (Jakub Zelenka)

- Intl:
  . Implemented FR #78912 (INTL Support for accounting format). (cmb)

- Mysqlnd:
  . Fixed bug #78823 (ZLIB_LIBS not added to EXTRA_LIBS). (Arjen de Korte)

- OPcache:
  . Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
    (Tyson Andre)
  . Fixed bug #78935 (Preloading removes classes that have dependencies).
    (Nikita, Dmitry)

- PCRE:
  . Fixed bug #78853 (preg_match() may return integer > 1). (cmb)

- Reflection:
  . Fixed bug #78895 (Reflection detects abstract non-static class as abstract
    static. IS_IMPLICIT_ABSTRACT is not longer used). (Dmitry)

- Standard:
  . Fixed bug #77638 (var_export'ing certain class instances segfaults). (cmb)
  . Fixed bug #78840 (imploding $GLOBALS crashes). (cmb)
  . Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
    (cmb)
  . Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
    (cmb)

(taca)

2019-12-21 06:59:20 UTC MAIN commitmail json YAML

lang/php73: update to 7.3.13

Update php73 to 7.3.13, including security fixes.

19 Dec 2019, PHP 7.3.13

- Bcmath:
  . Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
    (cmb)

- Core:
  . Fixed bug #78862 (link() silently truncates after a null byte on Windows).
    (CVE-2019-11044). (cmb)
  . Fixed bug #78863 (DirectoryIterator class silently truncates after a null
    byte). (CVE-2019-11045). (cmb)
  . Fixed bug #78943 (mail() may release string with refcount==1 twice).
    (CVE-2019-11049). (cmb)
  . Fixed bug #78787 (Segfault with trait overriding inherited private shadow
    property). (Nikita)
  . Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value).
    (Antony Dovgal, Dmitry)
  . Fixed bug #78296 (is_file fails to detect file). (cmb)

- EXIF:
  . Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
    (CVE-2019-11050). (Nikita)
  . Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
    (Nikita)

- GD:
  . Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). (cmb)

- MBString:
  . Upgraded bundled Oniguruma to 6.9.4. (cmb)

- OPcache:
  . Fixed potential ASLR related invalid opline handler issues. (cmb)
  . Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
    (Tyson Andre)

- PCRE:
  . Fixed bug #78853 (preg_match() may return integer > 1). (cmb)

- Standard:
  . Fixed bug #78759 (array_search in $GLOBALS). (Nikita)
  . Fixed bug #77638 (var_export'ing certain class instances segfaults). (cmb)
  . Fixed bug #78840 (imploding $GLOBALS crashes). (cmb)
  . Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
    (cmb)
  . Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
    (cmb)

(taca)

2019-12-20 22:28:15 UTC MAIN commitmail json YAML

doc: Updated net/dhcpcd to 8.1.4

(roy)

2019-12-20 22:28:05 UTC MAIN commitmail json YAML

Update to dhcpcd-8.1.4 with the following change:

* options: Fix allocating the script option

(roy)

2019-12-20 22:11:23 UTC MAIN commitmail json YAML

doc: Updated security/libprelude to 0.9.24.1nb19

(gutteridge)

2019-12-20 22:11:02 UTC MAIN commitmail json YAML

libprelude: fix build with GNU awk >= 5.0

Rename the awk variable "namespace" to "name_space", since the former
is now a reserved word with GNU awk 5.0, and was causing parsing
errors.

(gutteridge)

2019-12-20 18:37:50 UTC MAIN commitmail json YAML

gns3-gui: PKGREVISION bump for permissions change

(markd)

2019-12-20 18:36:18 UTC MAIN commitmail json YAML

gns3-server: PKGREVISION bump for permissions change

(markd)

2019-12-20 13:19:56 UTC MAIN commitmail json YAML

doc: Updated games/tcl-theo to 0.0.1nb1

(kamil)

2019-12-20 13:19:47 UTC MAIN commitmail json YAML

tcl-theo: Require tcl

(kamil)

2019-12-20 12:47:16 UTC MAIN commitmail json YAML

2019-12-20 11:54:48 UTC MAIN commitmail json YAML

Import dhcpcd-8.1.3 with the following changes:

* Linux: prefer ms RA times
* Linux: Support kernels without PR_SET_MM_MAP
* dhcpcd: Only report SSID when we have a carrier
* IPv6ND: Fix reachable test
* DHCP6: Work better with infinite addresses
* DHCP6: Suboption 3 of NTP Server is a FQDN
* DHCP6: Fix deprecating a delegated prefix
* DHCP: Ensure we have a lease to extract options from

(roy)

2019-12-20 10:14:08 UTC MAIN commitmail json YAML

doc: Updated print/zathura to 0.4.4

(leot)

2019-12-20 10:13:57 UTC MAIN commitmail json YAML

zathura: Update to 0.4.4

Changes:
0.4.4
-----
- Fix expansion of ~ and ~user when opening files
- Add fish completion
- Various fixes and improvements
- Drop support for old libsyntex
- Updated translations

(leot)

2019-12-20 10:12:45 UTC MAIN commitmail json YAML

girara: Sort PLIST (NFCI)

(leot)

2019-12-20 10:12:06 UTC MAIN commitmail json YAML

doc: Updated graphics/girara to 0.3.3

(leot)

2019-12-20 10:11:55 UTC MAIN commitmail json YAML

girara: Update to 0.3.3

Changes:
0.3.3
-----
- Various fixes and improvements
- Update transations

(leot)

2019-12-20 05:00:25 UTC MAIN commitmail json YAML

doc: Added sysutils/ufetch version 0.1

(kamil)

2019-12-20 04:59:43 UTC MAIN commitmail json YAML

2019-12-20 04:58:35 UTC MAIN commitmail json YAML

2019-12-20 02:27:25 UTC MAIN commitmail json YAML

doc: Updated audio/fasttracker2 to 1.04

(fox)

2019-12-20 02:26:40 UTC MAIN commitmail json YAML

audio/fasttracker2: Update to v1.04

- MASTER_SITES has been updated to Github since the author has moved to the
  source there.

Changes since v1.03:

v1.04 - 17.12.2019
- Fixed rare crash (or strange behaviors) when changing pattern and/or pattern
  length while the song is playing.
- Properly restore channel mute flags when loading a new song (fixes mute bugs)
- Fixed a few bugs with different pattern buttons (Ins./Del., Ln. up/down etc)
- Config: "Hardware mouse" was changed to "Software mouse" (and "Software mouse"
  is now disabled in the default config).
- Added a routine to create scaled FT2 mouse cursors for software mouse mode,
  though the "busy mouse" will stand still and not animate.
  Hopefully the new default "hardware mouse" mode will satisfy some people!
- MacOS: Pass NDEBUG to clang preprocessor defines, to prevent debug code
  from being compiled in release mode (performance increase).
- MacOS/Linux: make scripts had Windows linefeeds and would thus break!

* Note: I highly recommend that you go to "Config -> Layout" and disable
  "Software mouse"! This will make the mouse way less laggy. However, it will
  still be one frame delayed internally unless you disable VSync.

(fox)

2019-12-20 00:03:11 UTC MAIN commitmail json YAML

Needs libXmu no longer exposed by Mesa. Fix concurrent build.

(joerg)

2019-12-20 00:02:25 UTC MAIN commitmail json YAML

Needs lrelease for the translation files.

(joerg)

2019-12-20 00:02:06 UTC MAIN commitmail json YAML

2019-12-20 00:01:37 UTC MAIN commitmail json YAML

2019-12-20 00:00:55 UTC MAIN commitmail json YAML

Fix popcount conflict on NetBSD. Avoid LTO and 32bit binaries on NetBSD.

(joerg)

2019-12-20 00:00:12 UTC MAIN commitmail json YAML

Needs to be build as c++03.

(joerg)

2019-12-19 23:59:56 UTC MAIN commitmail json YAML

2019-12-19 23:50:44 UTC MAIN commitmail json YAML

fetch-1.9: Fix inode check for conditional GET.

(joerg)

2019-12-19 22:26:02 UTC MAIN commitmail json YAML

Specify correct name of rst2xxx binaries.

(joerg)

2019-12-19 22:25:45 UTC MAIN commitmail json YAML

2019-12-19 22:25:27 UTC MAIN commitmail json YAML

Spell include path correctly, even though it is not actually used.

(joerg)

2019-12-19 22:25:06 UTC MAIN commitmail json YAML

Needs pkg-config.

(joerg)

2019-12-19 22:24:54 UTC MAIN commitmail json YAML

2019-12-19 22:24:39 UTC MAIN commitmail json YAML

2019-12-19 22:24:19 UTC MAIN commitmail json YAML

Package makefile is spelled with lower case m.

(joerg)

2019-12-19 22:24:01 UTC MAIN commitmail json YAML

2019-12-19 22:23:19 UTC MAIN commitmail json YAML

2019-12-19 22:22:50 UTC MAIN commitmail json YAML

Add missing dependency for lrelease.

(joerg)

2019-12-19 22:22:33 UTC MAIN commitmail json YAML

Avoid using a non-literal string as format string.

(joerg)

2019-12-19 22:22:13 UTC MAIN commitmail json YAML

Add missing py-test-runner dependency.

(joerg)

2019-12-19 22:21:57 UTC MAIN commitmail json YAML

2019-12-19 22:21:24 UTC MAIN commitmail json YAML

Force extraction with bsdtar, pax-as-tar leaves around too much garbage.

(joerg)

2019-12-19 22:21:01 UTC MAIN commitmail json YAML

2019-12-19 22:20:18 UTC MAIN commitmail json YAML

2019-12-19 22:20:01 UTC MAIN commitmail json YAML

2019-12-19 22:19:17 UTC MAIN commitmail json YAML

PYTHON_VERSIONS_ACCEPTED must be set before including the Python
fragments.

(joerg)

2019-12-19 22:18:47 UTC MAIN commitmail json YAML

Needs to be build as gnu++03. Doesn't work yet due to PaX mprotect
restrictions.

(joerg)

2019-12-19 22:18:17 UTC MAIN commitmail json YAML

Ignore unknown warnings and deprecation attributes with clang.

(joerg)

2019-12-19 22:17:33 UTC MAIN commitmail json YAML

2019-12-19 22:17:10 UTC MAIN commitmail json YAML

Needs libXmu, which used to be pulled in by Mesa.

(joerg)

2019-12-19 22:16:52 UTC MAIN commitmail json YAML

Uses C++ extensions, so go with gnu++03.

(joerg)

2019-12-19 22:16:35 UTC MAIN commitmail json YAML

When using std::setlocale, also include <clocale> on all systems.

(joerg)

2019-12-19 22:16:05 UTC MAIN commitmail json YAML

2019-12-19 22:15:30 UTC MAIN commitmail json YAML

Add dependencies formerly pulled in by Mesa.

(joerg)

2019-12-19 22:15:10 UTC MAIN commitmail json YAML

2019-12-19 22:14:46 UTC MAIN commitmail json YAML

2019-12-19 22:14:07 UTC MAIN commitmail json YAML

Add missing bdftopcf dependency.

(joerg)

2019-12-19 22:13:49 UTC MAIN commitmail json YAML

2019-12-19 22:12:57 UTC MAIN commitmail json YAML

Needs py-test-runner.

(joerg)

2019-12-19 22:12:43 UTC MAIN commitmail json YAML

2019-12-19 22:11:52 UTC MAIN commitmail json YAML

2019-12-19 22:11:28 UTC MAIN commitmail json YAML

2019-12-19 22:10:35 UTC MAIN commitmail json YAML

2019-12-19 22:09:49 UTC MAIN commitmail json YAML

Don't buildlink py-dbus, it might not even be the correct version.

(joerg)

2019-12-19 21:22:02 UTC MAIN commitmail json YAML

gns3-gui: fix permissions of installed files

(markd)

2019-12-19 21:19:43 UTC MAIN commitmail json YAML

gns3-server: fix install for python != 3.7.
Also fix permissions of installed files

(markd)

2019-12-19 21:15:39 UTC MAIN commitmail json YAML

ns: modern compilers fussy about unsigned char

(markd)

2019-12-19 21:14:02 UTC MAIN commitmail json YAML

nam: modern compilers fussy about unsigned char

(markd)

2019-12-19 16:59:44 UTC MAIN commitmail json YAML

2019-12-19 15:45:04 UTC MAIN commitmail json YAML

Note update of the "mutt" package to version 1.13.2

(tron)

2019-12-19 15:44:40 UTC MAIN commitmail json YAML

mutt: Update to version 1.13.2

Changes since version 1.13.1:
! Bug fix release.

Update during freeze approved by gdt@

(tron)

2019-12-19 14:42:22 UTC MAIN commitmail json YAML

doc: Updated games/nethack to 3.6.4

(rhialto)

2019-12-19 14:41:59 UTC MAIN commitmail json YAML

games/nethack: security update to 3.6.4.

https://www.nethack.org/security/index.html:

NetHack: Privilege escalation/remote code execution/crash in
configuration parsing

Severity: High
Affected versions: 3.6.0, 3.6.1, 3.6.2, 3.6.3
First Patched Version: 3.6.4

Basic Information:
A buffer overflow issue exists when reading very long lines from a
NetHack configuration file (usually named .nethackrc).

This vulnerability affects systems that have NetHack installed suid/sgid
and shared systems that allow users to upload their own configuration
files.

All users are urged to upgrade to NetHack 3.6.4 as soon as possible.

Additional information related to this advisory, if any, will be made
available at https://nethack.org/security.

(rhialto)

2019-12-19 13:40:53 UTC MAIN commitmail json YAML

Updated www/py-django, www/py-django2

(adam)

2019-12-19 13:40:36 UTC MAIN commitmail json YAML

py-django2: updated to 2.2.9

Django 2.2.9 fixes a security issue and a data loss bug in 2.2.8.

CVE-2019-19844: Potential account hijack via password reset form

By submitting a suitably crafted email address making use of Unicode characters, that compared equal to an existing user email when lower-cased for comparison, an attacker could be sent a password reset token for the matched account.

In order to avoid this vulnerability, password reset requests now compare the submitted email using the stricter, recommended algorithm for case-insensitive comparison of two identifiers from Unicode Technical Report 36, section 2.11.2(B)(2). Upon a match, the email containing the reset token will be sent to the email address on record rather than the submitted address.

Bugfixes
* Fixed a data loss possibility in SplitArrayField. When using with ArrayField(BooleanField()), all values after the first True value were marked as checked instead of preserving passed values

(adam)

2019-12-19 13:39:50 UTC MAIN commitmail json YAML

py-django: updated to 1.11.27

Django 1.11.27 fixes a security issue and a data loss bug in 1.11.26.

CVE-2019-19844: Potential account hijack via password reset form

By submitting a suitably crafted email address making use of Unicode characters, that compared equal to an existing user email when lower-cased for comparison, an attacker could be sent a password reset token for the matched account.

In order to avoid this vulnerability, password reset requests now compare the submitted email using the stricter, recommended algorithm for case-insensitive comparison of two identifiers from Unicode Technical Report 36, section 2.11.2(B)(2). Upon a match, the email containing the reset token will be sent to the email address on record rather than the submitted address.

Bugfixes
* Fixed a data loss possibility in SplitArrayField. When using with ArrayField(BooleanField()), all values after the first True value were marked as checked instead of preserving passed values

(adam)

2019-12-19 12:52:28 UTC MAIN commitmail json YAML

Fix patch or sys/loadavg.h

The patch for including sys/loadavg.h included the file in the section where
getloadavg isn't used so the patch did nothing. Include it in the right
place to fix it.

(nros)

2019-12-19 09:36:33 UTC MAIN commitmail json YAML

2019-12-19 01:12:59 UTC MAIN commitmail json YAML

devel/py-importlib-metadata: fix files' permission

Fix file's permission to pass build under CHECK_PERMS is yes, i.e.
PKG_DEVELOPER is on.

Distfile of importlib-metadata 0.23, 1.1.0, 1.2.0 and 1.3.0 are contains
world writable permission of files.

Adam, why did you remove post-extract part?

(taca)

2019-12-19 00:40:22 UTC MAIN commitmail json YAML

doc: update drupal packages

www/drupal7 7.69
www/drupal8 8.7.11

(taca)

2019-12-19 00:39:29 UTC MAIN commitmail json YAML

www/drupal8: update to 8.7.11

Update durpal8 to 8.7.11, security release.

8.7.11 (2019-12-18)

Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities.  Sites are urged to upgrade
immediately after reading the notes below and the security announcement.

(taca)

2019-12-19 00:38:39 UTC MAIN commitmail json YAML

www/drupal7: update to 7.69

Update drupal7 to 7.69, security release.

7.69 (2019-12-18)

Release notes

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade
immediately after reading the notes below and the security announcement.

(taca)

2019-12-18 15:56:11 UTC MAIN commitmail json YAML

Fix setrlimit(3): Invalid argument

The new code that unlimits many resources appears to have been problematic
on a number of fronts. Fetched the current version of src/limits.c from
the sudo hg repo. RLIMIT_STACK (i.e. "3") is no longer set to RLIM_INFINITY.

Added code to output the name of the limit instead of its number.

(kim)

2019-12-18 15:43:44 UTC MAIN commitmail json YAML

py-django != py-djangorestframework

(joerg)

2019-12-18 14:02:25 UTC MAIN commitmail json YAML

doc: Updated graphics/libsixel to 1.8.3

(tsutsui)

2019-12-18 14:02:10 UTC MAIN commitmail json YAML

libsixel: update to 1.8.3. (security fixes)

Upstream changes:

v1.8.3
* Security fix for CVE-2018-19757 (#79), NULL pointer dereference problem,
  reported by @nluedtke and fixed by @knok (#91, #94).

* Security fix for CVE-2018-19762 (#81), heap-based buffer overflow problem,
  reported by @nluedtke and fixed by @knok (#92).

* Security fix for CVE-2018-19756 (#80), heap-based buffer over-read problem,
  reported by @nluedtke and fixed by @knok (#93).

* Security fix for CVE-2018-19763 (#82), heap-based buffer over-read problem,
  reported by @nluedtke and fixed by @knok (#95).

* Security fix for CVE-2018-19761, illegal address access, fixed by @knok (#96).

* Security fix for CVE-2018-19759, heap-based buffer over-read problem, fixed by @knok (#98).

* Security fix for CVE-2018-3753 (#83), infinite loop problem,
  reported by @cool-tomato and fixed by @knok (#99).

* Security fix for CVE-2018-19759 (#102),
  heap-based buffer over-read that will cause a denial of service.
  reported and fixed by @YourButterfly. (#106)

* Security fix for CVE-2019-19635 (#103), heap-based buffer overflow,
  reported and fixed by @YourButterfly. (#106)

* Security fix for CVE-2019-19636 (#104) and CVE-2019-19637 (#105), integer overflow problem.
  reported and fixed by @YourButterfly. (#106)

* gif loader: check LZW code size (Issue #75), Thanks to @HongxuChen.
              https://github.com/saitoha/libsixel/commit/7808a06b88c11dbc502318cdd51fa374f8cd47ee

* core: Fix a global-buffer-overflow problem (Issue #72), Thanks to @fgeek.
        https://github.com/saitoha/libsixel/commit/c868b59ec89bdb24c42a0de89e5319a989076c66

* core: Fix unexpected hangs/performance issues (Issue #76), Thanks to @HongxuChen.
        https://github.com/saitoha/libsixel/commit/88561b7a810017b91d26b6273323dde4b6f9b273
        https://github.com/saitoha/libsixel/commit/2d3d9ffe8ab886b7bc670fd896d63c628436cc66
        https://github.com/saitoha/libsixel/commit/c9363cd1d5929e1d721af9f09633061dfa8152fe

(tsutsui)

2019-12-18 13:48:20 UTC MAIN commitmail json YAML

doc: Updated mail/neomutt to 20191129

(wiz)

2019-12-18 13:47:58 UTC MAIN commitmail json YAML

neomutt: update to 20191129.

Leaf package.

2019-11-29  Richard Russon  <rich@flatcap.org>
* Features
  - Add raw mailsize expando (%cr)
* Bug Fixes
  - Avoid double question marks in bounce confirmation msg
  - Fix bounce confirmation
  - fix new-mail flags and behaviour
  - fix: browser <descend-directory>
  - fix ssl crash
  - fix move to trash
  - fix flickering
  - Do not check hidden mailboxes for new mail
  - Fix new_mail_command notifications
  - fix crash in examine_mailboxes()
  - fix crash in mutt_sort_threads()
  - fix: crash after sending
  - Fix crash in tunnel's conn_close
  - fix fcc for deep dirs
  - imap: fix crash when new mail arrives
  - fix colour 'quoted9'
  - quieten messages on exit
  - fix: crash after failed mbox_check
  - browser: default to a file/dir view when attaching a file
* Changed Config
  - Change $write_bcc to default off
* Translations
  - 100% Portuguese (Brazil)
  -  92% Polish
* Docs
  - Add a bit more documentation about sending
  - Clarify $write_bcc documentation.
  - Update documentation for raw size expando
  - docbook: set generate.consistent.ids to make generated html reproducible
* Build
  - fix build/tests for 32-bit arches
  - tests: fix test that would fail soon
  - tests: fix context for failing idna tests

(wiz)

2019-12-18 13:37:39 UTC MAIN commitmail json YAML

Disable opengl for qemu-xen, to workaround an issue with epoxy and newer
x11-links
http://mail-index.netbsd.org/tech-pkg/2019/11/02/msg022228.html

(bouyer)

2019-12-18 13:36:41 UTC MAIN commitmail json YAML

doc: fix typo in frozen branch name

(gdt)

2019-12-18 13:14:50 UTC MAIN commitmail json YAML

Close conditional with .endif

(ryoon)

2019-12-18 12:59:10 UTC MAIN commitmail json YAML

openjdk11: remove MAKE_JOBS_SAFE=no on NetBSD

This workaround didn't help. NetBSD is supposedly fixed now.

(wiz)

2019-12-18 12:47:03 UTC MAIN commitmail json YAML

Updated editors/emacs-snapshot

(mef)

2019-12-18 12:45:55 UTC MAIN commitmail json YAML

Fix missing dependency.

(joerg)

2019-12-18 12:44:54 UTC MAIN commitmail json YAML

(editors/emacs-snapshot) Makefile.common is not used for now

(mef)

2019-12-18 12:44:39 UTC MAIN commitmail json YAML

2019-12-18 12:43:40 UTC MAIN commitmail json YAML

2019-12-18 12:42:05 UTC MAIN commitmail json YAML

2019-12-18 12:40:22 UTC MAIN commitmail json YAML

2019-12-18 12:39:09 UTC MAIN commitmail json YAML

2019-12-18 12:38:49 UTC MAIN commitmail json YAML

2019-12-18 12:38:38 UTC MAIN commitmail json YAML

Explicitly depend on libXmu.

(joerg)

2019-12-18 12:38:13 UTC MAIN commitmail json YAML

Add one more header to the fixup list.

(joerg)

2019-12-18 12:36:51 UTC MAIN commitmail json YAML

2019-12-18 04:49:47 UTC MAIN commitmail json YAML

devel/py-line_profiler: Fix build with python38

Regenerate .c files with recent Cython.

(minskim)

2019-12-18 01:34:39 UTC MAIN commitmail json YAML

doc: Updated textproc/libhighlight to 3.54

(schmonz)

2019-12-18 01:34:34 UTC MAIN commitmail json YAML

Update to 3.54 (during the freeze, for the bugfixes). From the changelog:

- fixed default colour output in BBCode
  (https://gitlab.com/saalen/highlight/issues/134)
- fixed corner case in sh.lang
- fixed syntax tests with UTF-8 input
  (https://gitlab.com/saalen/highlight/issues/123)
- added support for Bash in outhtml_codefold.lua plug-in
- added ballerina.lang
- added block strings to java.lang
- added author hints in themes and language definitions
- added C++20 reserved words in c.lang
- added editorconfig file and validated all files accordingly (thanks to
  Tristano Ajmone)
- CLI: fixed `--list-scripts` with `-d` or HIGHLIGHT_DATADIR env variable
  (https://gitlab.com/saalen/highlight/issues/139)
- GUI W32: replaced multibyte path trace window by startup hint if
  NtfsDisable8dot3NameCreation is set
- GUI: removed AsciiDoc instruction lines from the README popup window

(schmonz)

2019-12-18 00:47:22 UTC MAIN commitmail json YAML

textproc/word2vec: Fix a typo in COMMENT

(minskim)

2019-12-17 21:56:25 UTC MAIN commitmail json YAML

Update to wtf-20191214
featuring more acronyms since last update

(sevan)

2019-12-17 20:26:05 UTC MAIN commitmail json YAML

2019-12-17 20:19:41 UTC MAIN commitmail json YAML

sysutils/xen: Note reason why 4.2 still exists.

(gdt)

2019-12-17 19:33:33 UTC MAIN commitmail json YAML

doc: Note start of 2019Q3 freeze

(gdt)

2019-12-17 17:20:52 UTC MAIN commitmail json YAML

databases/postgresql12-{client,server}: Requires msgfmt to build

(minskim)

2019-12-17 16:35:44 UTC MAIN commitmail json YAML

doc/TODO: add some

+ MesaLib-19.3, TeXmacs-1.99.12, cups-2.3.1, phoronix-9.2.1, vim-8.2.

(wiz)

2019-12-17 16:01:28 UTC MAIN commitmail json YAML

regress/make-env-phases: fix test by ignoring changes to *FLAGS

The CPPFLAGS, CFLAGS, CXXFLAGS and LDFLAGS differ between the build phase
and the install phase. It's only a minor difference but may still
influence packages that use these flags at install time, even though they
shouldn't.

For now just document that the flags differ.

(rillig)

2019-12-17 15:38:53 UTC MAIN commitmail json YAML

doc: Updated pkgtools/pkg_regress to 0.5

(rillig)

2019-12-17 15:38:43 UTC MAIN commitmail json YAML

pkgtools/pkg_regress: update to 0.5

Changes since 0.4:

The log output in verbose mode surrounds each test now and says
immediately whether that test fails. Before, that information was
collected and only shown at the very end of the output, which was
inconvenient.

(rillig)

2019-12-17 15:13:41 UTC MAIN commitmail json YAML

Note update of the "mutt" package to version 1.13.1

(tron)

2019-12-17 15:13:14 UTC MAIN commitmail json YAML

mutt: Update to version 1.13.1

Changes since version 1.13.0:
! Bug fix release.
+ $sidebar_relative_shortpath_indent, default unset, enables the
  indentation and shortpath behavior introduced in 1.13.0.
+ $sidebar_use_mailbox_shortcuts, default unset, displays standard
  mailbox shortcuts, '~' and '=' in the sidebar.  When unset, the
  sidebar will remove a $folder prefix but won't display mailbox
  shortcuts.

(tron)

2019-12-17 13:59:51 UTC MAIN commitmail json YAML

Fix build on non-linux ppc machines

Fix build on non-linux ppc machines, tested by julian sevard.

(nros)

2019-12-17 10:50:53 UTC MAIN commitmail json YAML

doc: Updated archivers/py-zstandard to 0.12.0nb1

(leot)

2019-12-17 10:50:41 UTC MAIN commitmail json YAML

py-zstandard: Use bundled zstd because not adapted to zstd-1.4.4

At least ZSTD_FRAMEHEADERSIZE_MIN and ZSTD_FRAMEHEADERSIZE_PREFIX
macros in 1.4.4 needs a `format' argument but py-zstandard is not
adapted to 1.4.4 yet.

PKGREVISION++

(leot)

2019-12-17 10:22:03 UTC MAIN commitmail json YAML

doc: Updated net/mitmproxy to 5.0.0

(leot)

2019-12-17 10:21:51 UTC MAIN commitmail json YAML

mitmproxy: Update to 5.0.0

Changes:
5.0.0
-----
** Major Changes **
  * Added new Table UI (@Jessonsotoventura)
  * Added EKU extension to certificates. This fixes support for macOS Catalina (@vin01)

** Security Fixes **
  * Fixed command injection vulnerabilities when exporting flows as curl/httpie commands (@cript0nauta)
  * Do not echo unsanitized user input in HTTP error responses (@fimad)

** Full Changelog **
  * Moved to Github CI for Continuous Integration, dropping support for old Linux and macOS releases. (#3728)
  * Vastly improved command parsing, in particular for setting flow filters (@typoon)
  * Added a new flow export for raw responses (@mckeimic)
  * URLs are now edited in an external editor (@Jessonsotoventura)
  * mitmproxy now has a command history (@typoon)
  * Added terminal like keyboard shortcuts for the command bar (ctrl+w, ctrl+a, ctrl+f, ...) (@typoon)
  * Fixed issue with improper handling of non-ascii characters in URLs (@rjt-gupta)
  * Filtering can now use unicode characters (@rjt-gupta)
  * Fixed issue with user keybindings not being able to override default keybindings
  * Improved installation instructions
  * Added support for IPV6-only environments (@sethb157)
  * Fixed bug with server replay (@rjt-gupta)
  * Fixed issue with duplicate error responses (@ccssrryy)
  * Users can now set a specific external editor using $MITMPROXY_EDITOR (@rjt-gupta)
  * Config file can now be called `config.yml` or `config.yaml` (@ylmrx)
  * Fixed crash on `view.focus.[next|prev]` (@ylmrx)
  * Updated documentation to help using mitmproxy certificate on Android (@jannst)
  * Added support to parse IPv6 entries from `pfctl` on MacOS. (@tomlabaude)
  * Fixed instructions on how to build the documentation (@jannst)
  * Added a new `--allow-hosts` option (@pierlon)
  * Added support for zstd content-encoding (@tsaaristo)
  * Fixed issue where the replay server would corrupt the Date header (@tonyb486)
  * Improve speed for WebSocket interception (@MathieuBordere)
  * Fixed issue with parsing JPEG files. (@lusceu)
  * Improve example code style (@BoboTiG)
  * Fixed issue converting void responses to HAR (@worldmind)
  * Color coded http status codes in mitmweb (@arun-94)
  * Added organization to generated certificates (@Abcdefghijklmnopqrstuvwxyzxyz)
  * Errors are now displayed on sys.stderr (@JessicaFavin)
  * Fixed issue with replay timestamps (@rjt-gupta)
  * Fixed copying in mitmweb on macOS (@XZzYassin)

(leot)

2019-12-17 10:16:20 UTC MAIN commitmail json YAML

doc: Added archivers/py-brotli version 1.0.7

(leot)

2019-12-17 10:16:03 UTC MAIN commitmail json YAML

archivers: Add py-brotli

(leot)

2019-12-17 10:15:37 UTC MAIN commitmail json YAML

py-brotli: Import py-brotli-1.0.7 as archivers/py-brotli

Brotli is a generic-purpose lossless compression algorithm that compresses data
using a combination of a modern variant of the LZ77 algorithm, Huffman coding
and 2nd order context modeling, with a compression ratio comparable to the best
currently available general-purpose compression methods. It is similar in speed
with deflate but offers more dense compression.

This package contains Python bindings for Brotli.

(leot)

2019-12-17 10:11:42 UTC MAIN commitmail json YAML

doc: Updated devel/py-ruamel-yaml to 0.16.5

(leot)

2019-12-17 10:11:28 UTC MAIN commitmail json YAML

py-ruamel-yaml: Update to 0.16.5

pkgsrc changes:
- Remove dependency to py-typing, no longer needed since version 0.14.9
- Reset USE_LANGUAGES, C parts were splitted in py-ruamel-yaml-clib and a C
  compiler is no longer needed

Changes:
[0, 16, 5]: 2019-08-18
  - allow for ``YAML(typ=['unsafe', 'pytypes'])``

[0, 16, 4]: 2019-08-16
  - fix output of TAG directives with # (reported by `Thomas Smith
    <https://bitbucket.org/%7Bd4c57a72-f041-4843-8217-b4d48b6ece2f%7D/>`__)

[0, 16, 3]: 2019-08-15
  - move setting of version based on YAML directive to scanner, allowing to
    check for file version during TAG directive scanning

[0, 16, 2]: 2019-08-15
  - preserve YAML and TAG directives on roundtrip, correctly output #
    in URL for YAML 1.2 (both reported by `Thomas Smith
    <https://bitbucket.org/%7Bd4c57a72-f041-4843-8217-b4d48b6ece2f%7D/>`__)

[0, 16, 1]: 2019-08-08
  - Force the use of new version of ruamel.yaml.clib (reported by `Alex Joz
    <https://bitbucket.org/%7B9af55900-2534-4212-976c-61339b6ffe14%7D/>`__)
  - Allow '#' in tag URI as these are allowed in YAML 1.2 (reported by
    `Thomas Smith
    <https://bitbucket.org/%7Bd4c57a72-f041-4843-8217-b4d48b6ece2f%7D/>`__)

[0, 16, 0]: 2019-07-25
  - split of C source that generates .so file to ruamel.yaml.clib
  - duplicate keys are now an error when working with the old API as well

(leot)

2019-12-17 10:06:14 UTC MAIN commitmail json YAML

doc: Added devel/py-ruamel-yaml-clib version 0.2.0

(leot)

2019-12-17 10:05:57 UTC MAIN commitmail json YAML

devel: Add py-ruamel-yaml-clib

(leot)

2019-12-17 10:05:23 UTC MAIN commitmail json YAML

py-ruamel-yaml-clib: Import py-ruamel-yaml-clib-0.2.0 as devel/py-ruamel-yaml-clib

ruamel.yaml.clib is the C based reader/scanner and emitter for ruamel.yaml.

(leot)

2019-12-17 09:39:47 UTC MAIN commitmail json YAML

py-publicsuffix2: Reset USE_LANGUAGES

(No `c' compiler is needed to build this module.)

(leot)

2019-12-17 09:38:23 UTC MAIN commitmail json YAML

doc: Added www/py-publicsuffix2 version 2.20190812

(leot)

2019-12-17 09:38:00 UTC MAIN commitmail json YAML

www: Add py-publicsuffix2

(leot)

2019-12-17 09:37:33 UTC MAIN commitmail json YAML

py-publicsuffix2: Import py-publicsuffix2-2.20190812 as www/py-publicsuffix2

This module allows you to get the public suffix, as well as the
registrable domain, of a domain name using the Public Suffix List from
http://publicsuffix.org

(leot)

2019-12-17 03:54:27 UTC MAIN commitmail json YAML

doc: Updated textproc/xapian-omega to 1.4.14

(schmonz)

2019-12-17 03:54:18 UTC MAIN commitmail json YAML

Update to 1.4.14. From the changelog:

documentation:

* Improve omindex --help docs for --duplicates.
* Document that $log will start to return an error message in 1.5.0, and that
  one can wrap it using a $if with no action now to be future-proof.

indexers:

* Add built-in support for iso-8859-15 so we can handle it without iconv.
  This charset is a variant of iso-8859-1 with 8 characters changed, most
  notably including the euro currency symbol.  It's the most commonly seen
  charset we didn't have built-in support for.
* Optimise converting us-ascii to UTF-8 to do nothing, like we already do when
  converting UTF-8 to UTF-8.
* scriptindex:
  + Add new 'gap' action which provides a way to leave a gap in the term
    positions between fields to prevent phrases and positional operators from
    matching across fields.

omega:

* Fix error handling in $lookup.  We now check for errors from cdb_init()
  and cdb_get().  We've never checked for errors from cdb_init(), while
  for cdb_get() this bug was introduced by a warning fix in 1.2.20.

templates:

* Future-proof use of $log against changes in 1.5.0.

(schmonz)

2019-12-17 03:53:48 UTC MAIN commitmail json YAML

2019-12-17 03:53:07 UTC MAIN commitmail json YAML

doc: Updated textproc/xapian to 1.4.14

(schmonz)

2019-12-17 03:52:58 UTC MAIN commitmail json YAML

Update to 1.4.14. From the changelog:

API:

* Xapian::QueryParser: Handle "" inside a quoted phrase better.  In a quoted
  boolean term, "" is treated as an escaped ", so handle it in a compatible way
  for quoted phrases.  Previously we'd drop out of the phrase and start a new
  phrase.  Fixes #630, reported by Austin Clements.

* Xapian::Stem: The constructor which takes a stemmer name now takes an
  optional second bool parameter - if this is true, then an unknown stemmer
  name falls back to using the "none" stemmer instead of throwing an exception.
  This allows simply constructing a stemmer from an ISO language code without
  having to worry about whether there's a stemmer for that language, and
  without having to handle an exception if there isn't.

* Xapian::Stem: Fix a bug with handling 4-byte UTF-8 sequences which
  potentially affects most of the stemmers.  None of the stemmers work in
  languages where 4-byte UTF-8 sequences are part of the alphabet, but this
  bug could result in invalid UTF-8 sequences in terms generated from text
  containing high Unicode codepoints such as emoji, which can cause issues (for
  example, in some language bindings).  Fix synced from Snowball git post
  2.0.0.  Reported by Ilari Nieminen in
  https://github.com/snowballstem/snowball/issues/89.

* Xapian::Stem: Add a new is_none() method which tests if this is a "none"
  stemmer.

* Xapian::Weight: The total length of all documents is now made available to
  Xapian::Weight subclasses, and this is now used by DLHWeight, DPHWeight and
  LMWeight.  To maintain ABI compatibility, internally this still fetches the
  average length and the number of documents, multiplies them, then rounds the
  result, but in the next release series this will be handled directly.

* Xapian::Database::locked() on an inmemory database used to always return
  false, but an inmemory Database is always actually a WritableDatabase
  underneath, so now we always report true in this case because it's really
  always report being locked for writing.

* Fix write one past end of std::vector on certain QueryParser parser errors.
  This is undefined behaviour, but the write was always into reserved space, so
  in practice we'd actually get away with it (it was noticed because it
  triggers an error when running under ubsan and using libc++).  Reported by
  Germ叩n M. Bravo.

* MSet::get_matches_estimated(): Improve rounding of result - a bug meant we
  would almost always round down.

* Optimise test for UTF-8 continuation character.  Performing a signed char
  comparison shaves an instruction or two on most architectures.

* Database::get_revision(): Return revision 0 for a Database with no shards
  rather that throwing InvalidOperationError.

* DPHWeight: Avoid dividing by 0 when searching a sharded database when one
  shard is empty.  The result wasn't used in this case, but it's still
  undefined behaviour.  Detected by UBSan.

testsuite:

* Fix failing multi_glass_remoteprog_glass tests on x86.  When the tests are
  run under valgrind, remote servers should be run using the runsrv wrapper
  script, but this wasn't happening for remote servers in multi-databases - now
  it is.  Also, previously runsrv only used valgrind for the remote for an x86
  build that didn't use SSE, but it seems there are x87 instructions in libc
  that are affected by valgrind not providing excess precision, so do this for
  x86 builds which use SSE too.  Together these changes fix failures of
  topercent2, xor2, tradweight1 under backend multi_glass_remoteprog_glass on
  x86.

* Fix C++ One-Definition Rule (ODR) violation in testsuite code.  Two different
  source files linked into apitest were each defining a different `struct
  test`.  Wrap each in an anonymous namespace to localise it to the file it is
  defined and used in.  This was probably harmless in practice, unless trying
  to build with Link-Time Optimisation or similar (which is how it was
  detected).

* Test all language codes in stemlangs1.  The testsuite hardcodes a list of
  supported language codes which hadn't been updated since 2008.

* Improve DateRangeProcessor test coverage.

* The "singlefile" test harness backend manager now creates databases by
  compacting the corresponding underlying backend database (creating it first
  if need be) rather than always creating a temporary database to compact.

* Enable compaction testcases for multi and singlefile test harness backends.

* Add generated database support for remoteprog and remotetcp test harness
  backends.  Implemented by Tanmay Sachan.

* Add test harness support for running testcases using a multi database
  comprised of one local and one remote shard, or two remote shards.
  Implemented by Tanmay Sachan.

* Check if removing existing multi stub failed.  Previously if removing an
  existing stub failed, the test harness would create a temporary new stub and
  then try to rename it over the old one, which will always fail on Microsoft
  Windows.

* Wait for xapian-tcpsrv processes to finish before moving on to the next
  testcase under __WIN32__ like we already do on POSIX platforms.

matcher:

* Handle pruning under a positional check.  This used to be impossible, but
  since 1.4.13 it can happen as we now hoist AND_NOT to just below where we
  hoist the positional checks.  The code on master already handles pruning here
  so this bug is specific to the RELEASE/1.4 branch.  Fixes #796, reported by
  Oliver Runge.

* When searching with collapsing over multiple shards, at least some of which
  are remote, uncollapsed_upper_bound could be too low and
  uncollapsed_lower_bound too high.  This was causing assertion failures in
  testcases msize1 and msize2 under test harness backends
  multi_glass_remoteprog_glass and multi_remoteprog_glass.

* Internally we no longer calculate a bogus total_term_count as the sum of
  total_length * doc_count for all shards.  Instead we just use the sum of
  total_length, which gives the total number of term occurrences.  This change
  should improve the estimated collection_freq values for synonyms.

* Several places where we might divide zero by zero in a database where wdf was
  always zero have been fixed.

* Optimise OP_AND_NOT better.  We now combine its left argument with other
  connected and-like subqueries, and gather up and hoist the negated subqueries
  and apply them together above the combined and-like subqueries, just below
  any positional filters.

* Optimise OP_AND_MAYBE better.  We now combine its left argument with other
  connected and-like subqueries, and gather up and hoist the optional
  subqueries and apply them together above the combined and-like subqueries and
  any hoisted positional filters.

* Treat all BoolWeight queries as scaled by 0 - we can optimise better if we
  know the query is unweighted.

build system:

* configure: Stop using AC_FUNC_MEMCMP.  The autoconf manual marks it as
  "obsolescent", and it seems clear that nobody's relying on it as we're
  missing the "'AC_LIBOBJ' replacement for 'memcmp'" which it would try to
  use if needed.

glass backend:

* Allow zlib compression to reduce size by one byte.  We were specifying an
  output buffer size one byte smaller than the input, but it appears zlib won't
  use the final byte in the buffer, so we actually need to pass the input size
  as the output buffer size.

* Only try to compress Btree item values > 18 bytes, which saves CPU time
  without sacrificing any significant size savings.

remote backend:

* Fix match stats when searching with collapsing over multiple shards and at
  least some shards are remote.  Bug discovered by Tanmay Sachan's test harness
  improvements.

* Ignore orphaned remote protocol replies which can happen when searching with
  a remote shard if an exception is thrown by another shard.  Bug discovered
  by Tanmay Sachan's test harness improvements.

* Wait for xapian-progsrv child to exit when a remote Database or
  WritableDatabase object is closed under __WIN32__ like we already do for
  POSIX platforms.

documentation:

* HACKING: Replace release docs with pointer to the developer guide where they
  are now maintained.

* Correct documentation of initial messages in replication protocol.

tools:

* quest: Report bounds and estimate of number of matches.

* xapian-delve: Improve output when database revision information is not
  available.  We now specially handle the cases of a DB with multiple shards
  and a backend which doesn't support get_revision().

portability:

* Eliminate 2 uses of atoi().  These are potentially problematic in a
  multithreaded application if setlocale() is called by another thread at the
  same time.  See #665.

* Don't check __GNUC__ in visibility.h as the configure probe before defining
  XAPIAN_ENABLE_VISIBILITY checks that the visibility attributes work.  This
  probably makes no difference in practice, as all compilers we're aware of
  which support symbol visibility also define __GNUC__.

* Document Sun C++ requires --disable-shared.  Closes #631.

* Fix warning from GCC 9 with -Wdeprecated-copy (which is enabled by -Wextra)
  if a reference to an Error object is thrown.

* Suppress GCC warning in our API headers when compiling code using Xapian with
  GCC and -Wduplicated-branches.

* Mark some internal classes as final (following GCC -Wsuggest-final-types
  suggestions to allow some method calls to be devirtualised).

* Fix to build with --enable-maintainer-mode and Perl < 5.10, which doesn't
  have the `//=` operator.  It's unlikely developers will have such an old
  Perl, but the mingw environment on appveyor CI does.  The use of `//=` was
  introduced by changes in 1.4.10.

(schmonz)

2019-12-17 01:59:32 UTC MAIN commitmail json YAML

abiword-plugins: remove redundant configure setting

(gutteridge)

2019-12-17 01:58:39 UTC MAIN commitmail json YAML

doc: Updated devel/asio to 1.10.8nb1

(gutteridge)

2019-12-17 01:58:24 UTC MAIN commitmail json YAML

asio: build fix for NetBSD > 9.99.14

Carry over the same patch from the Boost meta-pkg to fix this same
file in this version of the asio implementation. (The patch looks a
little ungainly in isolation, but is simpler than creating multiple
#if/#else blocks in the target file.)

(TBD: this package is likely redundant, as a newer version of it is
subsumed within the Boost libraries. The only package depending on it
is abiword-plugins. At first glance, it appears that abiword-plugins
could simply be patched to reference the Boost namespace for this
functionality. But I haven't confirmed if there are any specific
functional gaps between the two implementations, so I'm making this
quick build fix for now.)

(gutteridge)

2019-12-16 23:56:02 UTC MAIN commitmail json YAML

doc: Updated math/py-sympy to 1.3

(minskim)

2019-12-16 23:54:48 UTC MAIN commitmail json YAML

math/py-sympy: Update to 1.3

Backwards compatibility breaks and deprecations:

    * Symbols no longer automatically convert to functions when called,
      e.g., if f = Symbol('f'), f(t) is now a TypeError. To create a
      function, use f = Function('f') or f = symbols('f', cls=Function).

    * .integrate() has been renamed to .compute_expectation() in
      sympy.stats in order to avoid confusion with the integrals module.

    * classof() and a2idx() in sympy.matrices.matrices have been
      deprecated in favor of the same functions in sympy.matrices.common.

    * The source() function has been deprecated. Use inspect.getsource or
      ?? in IPython.

See the release notes for the full list of changes.

    https://github.com/sympy/sympy/wiki/release-notes-for-1.3

(minskim)

2019-12-16 21:27:11 UTC MAIN commitmail json YAML

doc: Updated net/djbdnscurve6 to 36a

(schmonz)

2019-12-16 21:27:06 UTC MAIN commitmail json YAML

Update to 36a. From the changelog:

- Fixed CVE-2009-0858 in response.c (tx. Martin).
- Compliance with fehQlibs-13 given DNS return codes and dns timeouts aligned.
- DNS return codes streamlined with fehQlibs-13c.
- Fixed wrong evaluation of query_* (-1 -> DNS_*), making dnscache polling.

(schmonz)

2019-12-16 21:26:48 UTC MAIN commitmail json YAML

doc: Updated net/ucspi-ssl to 0.999.11.1

(schmonz)

2019-12-16 21:26:43 UTC MAIN commitmail json YAML

Update to 0.11.1 (as 0.999.11.1). From the changelog:

- Added compatibility with fehQlibs-13.
- Fixed wrong behavior of sslserver/sslclient given a local or remote
  IPv4 address. sslhandle is now an own program (man sslhandle.3).
- Code streamlined with ucspi-tcp6-1.11.0.
- Removed parenthesis from host in https@: [$host]:$port -> $host:port.
  Tx, A.E.
- Fixed TLSv1* macro's names in ucspissl.h to match ssl_context.c.
- Clarified usage of 'SSL_CTX_set_ciphersuites()' in ssl_ciphers.c.

(schmonz)

2019-12-16 21:26:17 UTC MAIN commitmail json YAML

doc: Updated net/ucspi-tcp6 to 1.11.0

(schmonz)

2019-12-16 21:26:12 UTC MAIN commitmail json YAML

Update to ucspi-tcp6-1.11.0. From the changelog:

- Fixed incorrect behavior for IPv4 address given as hostname for
  tcpserver and tcpclient.
- Added tcprulescheck verbose info message.
- Requires fehQlibs-13.

(schmonz)

2019-12-16 21:25:51 UTC MAIN commitmail json YAML

doc: Updated net/fehqlibs to 0.9.13c

(schmonz)

2019-12-16 21:25:45 UTC MAIN commitmail json YAML

Update to 13c (as 0.9.13c). From the changelog:

- Bugs fixed: str_copy (wrong parenthesis setting)
- UI changed: log() -> log_who()
- Added: man str(3)
- Fixed wrong input boundary checking for multiple DNSCACHE variables
  settings in dns_rcip.c. (Tx. J.W.)
- Added missing str_copyb() function in str.c.
- DNS stub return codes straightend with djbdnscurve6-36.

(schmonz)

2019-12-16 21:01:41 UTC MAIN commitmail json YAML

velox: Fix error in MESSAGE

thanks ng0@ for pointing this out

(nia)